last executing test programs:

1m48.037851104s ago: executing program 1 (id=108):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x18})
fstat(r3, &(0x7f0000002a00))
listen(r0, 0xc)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000500)=[{&(0x7f0000002000)=""/4101, 0x1005}], 0x1)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10)

1m47.976917628s ago: executing program 1 (id=109):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x72bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x40010)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000000d090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20}, 0x94)

1m47.976566845s ago: executing program 1 (id=110):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20004014}, 0x40)

1m47.908235321s ago: executing program 1 (id=111):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000)
r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4)
r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r6)
r7 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f00000003c0)={'fscrypt:', @auto=[0x61, 0x63, 0x32, 0x30, 0x39, 0x31, 0x65, 0x37, 0x64, 0x39, 0x66, 0x32, 0x37, 0x32, 0x32, 0x66]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, r5)
keyctl$setperm(0x5, r7, 0x4000410)
keyctl$unlink(0x9, r7, 0xffffffffffffffff)
r8 = socket(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x6, 0x7, 0x38, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x7, 0x0, 0x15f}})
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa8)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
unlink(&(0x7f00000000c0)='./file0\x00')
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r9, 0xc0f85403, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff01c}, {0x6, 0xfc, 0x1, 0x8000}]}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0)

1m47.817356719s ago: executing program 1 (id=112):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xfffffff, 0x80, 0x4b42c32b, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0901, 0xe, '\x00', @value64=0x400}})
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x8, @sdr={0x4c47504a, 0x3}})
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000240)={0x9b0000, 0xfffffffb, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9e0902, 0x7, '\x00', @string=&(0x7f00000001c0)=0x1}})
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000280)={0x8, 0x2, "2c8eddb11983e7deabb5af53142abb0550c77ac4b3cd78f434a13b3810872f27", 0x8, 0x9, 0xe, 0xba3, 0x1000})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x10)
close(r3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x40010, r3, 0xfe065000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$nl_generic(r4, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x234, 0x39, 0x100, 0x70bd2b, 0x25dfdbff, {0x1b}, [@generic="16be85302d9d8caa1cbbaab2c274388f5a512ac7fa2d99f695d687148712f1eaaa44f5c09fb85a5a0ed50af618943c26937262ff2a28559b36d9fab9e3d4caec2333bd9feb4f98742a822e5fecc56af8502175bf4b8d04eee5690611aae2da7e91dc242fbf54035f0b251fe855461f05cc1e9fc9a59eabfd96eca4aade5c9d6377f95fd8fd62f6ff3bb4e591f42fdbedfa1f537e585889c6680201033a863a6a625bb3a758d4980ad2e9dca6e42069ccbf3b3e84c9ca5a631dfc1116f84f821cc7fee09da5f6eb415378e9f0d2fab23d6a25", @typed={0xc, 0x36, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x99, 0x0, 0x0, @uid=r5}, @generic="b1475d3b94cb976a8f623f631966ade567850d9fdade2c0fb653bd31430dea2caaf522bc08e75f19f2bf57", @typed={0x8, 0x153, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x101, 0x29, 0x0, 0x1, [@typed={0x4, 0x12e}, @nested={0x4, 0x4a}, @generic="3bf9d5c95e25be85f244fb6b0b15101212d6722a4c96", @generic="a7cb345a8c5534178f201485f7035e61c1d7f71d7fe2a6a8ccda68365cab92738429988f77a877f3f7e0b21cbd6d1816170b06bb82909e5b9963a159b1985e006176779451f9812ade81ae168d2de7a7e56fce834440f0ebb3662efced9e41bc22af0f9bec863dce1e32b6f4c8b867c5e87fa49c48b1e93cfc2d147bb652714cdfb571b0d058d642b5d912be7d88582a231e9f7c00dab9bfc5a47cf20edde80d1edbe27d0a1951f8e44ce9c2379cbd13074c1b201f46ff3c3f924e7f386e65b654e7ffcb5ec570ca8935ef18d2c051b9a71f2ebb63e87f", @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4040054}, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000780))
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f00000007c0)={0x0, @aes128, 0x0, @desc2})
syz_emit_vhci(&(0x7f0000000800)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
r7 = socket$unix(0x1, 0x2, 0x0)
getpeername$unix(r7, &(0x7f0000000840)=@abs, &(0x7f00000008c0)=0x6e)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000900))
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x202a02, 0x0)
mq_timedsend(r8, &(0x7f0000000980)="345283d219a21234e48212ad8b637f3b0b3376d354ccd16141994f560bc1c39567412d31a8b67776a44b470dbc5ac09afd92a781474b8ef2e9a7ed6b7daf67f5436b451080ac037e60081fd4bce0bccc9e3e525b7fd14f3a27ceec0300045ac386fa530fbe395d53c5e3ca4bbd783ffef915fe6c6e28ced407", 0x79, 0x4, &(0x7f0000000a00)={0x0, 0x989680})
ioctl$VIDIOC_G_JPEGCOMP(r8, 0x808c563d, &(0x7f0000000a40))
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b00)={'wlan0\x00'})
fcntl$setown(r8, 0x8, 0x0)
fcntl$notify(r4, 0x402, 0x80000001)
ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000b40)={0x0, r6, r4, 0x4, 0x7fff, '\x00', {0x6, 0x2, 0x2, 0x7, 0xe, 0x1, 0x2b, 0x8, {0x9, 0x28}, {0xe677, 0x3}, {0xc, 0x1}, 0x3, 0x0, 0x3, 0x80000000, 0x0, 0x3, 0x21f9, 0xb, 0xfff7, 0x100, '\x00', 0x1, 0x80000000, 0x0, 0x8}})
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$FIOCLEX(r9, 0x5451)

1m47.318419405s ago: executing program 1 (id=115):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0x8000001, 0x0, 0x0, 0x1, 0x4000007})

1m47.274790554s ago: executing program 32 (id=115):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0x8000001, 0x0, 0x0, 0x1, 0x4000007})

1m33.84805196s ago: executing program 2 (id=358):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x8, 0x8, 0x9, 0xffffffff, {0x43, 0x5, 0x9, 0x80, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10000, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0xffffffffc1200178, 0x40, 0x2, 0xffffffed, 0x0, 0x0, 0x0, 0x80, 0x7ffffffe}}, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200003000000010062726964100002800c002100f7ffffffffffffff00000000"], 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) (async)
dup3(r0, r6, 0x80000) (async)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000000c0)={0xe}, 0x4)
write$evdev(r5, &(0x7f0000000340)=[{{}, 0x8fc9f9694c324178, 0x9, 0x6}], 0xfdef) (async)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)=0x5c)

1m33.846449085s ago: executing program 2 (id=359):
r0 = open(&(0x7f0000000440)='.\x00', 0x0, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, <r1=>0x41424344}, 0x7, 0xfff)
write$tun(r0, &(0x7f0000000640)={@val={0x0, 0x88e5}, @void, @ipv4=@tcp={{0x2a, 0x4, 0x1, 0x4, 0x10dc, 0x66, 0x0, 0x2, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x44, 0x8b, 0x1, 0x2, [{@private=0xa010100, 0x8001}, {@remote, 0x1}, {@remote, 0x400}, {@rand_addr=0x1, 0x3}, {@rand_addr=0x64010102, 0xd}, {@multicast1, 0x7}, {@broadcast, 0xfff}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0x4c, 0xec, 0x3, 0x1, [{@local, 0xfffff49a}, {@rand_addr=0x64010100, 0x8001}, {@broadcast, 0x2}, {@private=0xa010100, 0x1}, {@broadcast, 0x6}, {@local}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@local, 0xbfe8}, {@local, 0x7}]}, @noop, @end]}}, {{0x4e24, 0x4e20, r1, 0x41424344, 0x0, 0x0, 0xd, 0x87b247ccc9b74f12, 0x6, 0x0, 0x7ff, {[@exp_fastopen={0xfe, 0xb, 0xf989, "2d0d457403719c"}, @fastopen={0x22, 0xe, "efd313b9e0f2fd1cee8532b4"}, @eol, @window={0x3, 0x3, 0x3}]}}, {"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"}}}}, 0x10e0)
syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34a}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000))
open(&(0x7f0000000440)='.\x00', 0x0, 0x12d) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async)
syz_extract_tcp_res(&(0x7f0000000040), 0x7, 0xfff) (async)
write$tun(r0, &(0x7f0000000640)={@val={0x0, 0x88e5}, @void, @ipv4=@tcp={{0x2a, 0x4, 0x1, 0x4, 0x10dc, 0x66, 0x0, 0x2, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x44, 0x8b, 0x1, 0x2, [{@private=0xa010100, 0x8001}, {@remote, 0x1}, {@remote, 0x400}, {@rand_addr=0x1, 0x3}, {@rand_addr=0x64010102, 0xd}, {@multicast1, 0x7}, {@broadcast, 0xfff}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0x4c, 0xec, 0x3, 0x1, [{@local, 0xfffff49a}, {@rand_addr=0x64010100, 0x8001}, {@broadcast, 0x2}, {@private=0xa010100, 0x1}, {@broadcast, 0x6}, {@local}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@local, 0xbfe8}, {@local, 0x7}]}, @noop, @end]}}, {{0x4e24, 0x4e20, r1, 0x41424344, 0x0, 0x0, 0xd, 0x87b247ccc9b74f12, 0x6, 0x0, 0x7ff, {[@exp_fastopen={0xfe, 0xb, 0xf989, "2d0d457403719c"}, @fastopen={0x22, 0xe, "efd313b9e0f2fd1cee8532b4"}, @eol, @window={0x3, 0x3, 0x3}]}}, {"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"}}}}, 0x10e0) (async)
syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34a}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) (async)

1m33.787537177s ago: executing program 2 (id=360):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x1, r1})

1m33.786747186s ago: executing program 2 (id=361):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES8=r0, @ANYRES32=r0], 0x28}}, 0x4040)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
epoll_create(0x5)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4})
mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00')
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000081)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x498})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0})
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000080)=""/203)

1m32.856266814s ago: executing program 2 (id=378):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$FUSE(r0, 0x0, 0xfffffff6) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)

1m32.516163084s ago: executing program 2 (id=383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @val=@netfilter={0x0, 0x0, 0x2, 0x1}}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r0, 0xffffffffffffffff, 0x32}, 0x20)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x410c00, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0xc00e, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080)
r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"])

1m32.454939886s ago: executing program 33 (id=383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @val=@netfilter={0x0, 0x0, 0x2, 0x1}}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r0, 0xffffffffffffffff, 0x32}, 0x20)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x410c00, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0xc00e, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080)
r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"])

1m31.957589912s ago: executing program 3 (id=392):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0a06"], 0xe)

1m31.956708367s ago: executing program 3 (id=393):
r0 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x4}, 0x10)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r2)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x7}, {0xff, "4fb658f5bfc69c7c78eaafa5295c2086a678c9b11e1e1bf760b8bfc411408bcbb66b22d60056813641a0ff992926756bcaa1245fa31fd55cdf4f0e1556d76d52"}}}}, 0x47)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000140)={"0160bd8f41a34066c329e5c9e7e0b93c4cdc2139bb1c026b2b7398bbddbc"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r5)
write$P9_RSETATTR(r5, &(0x7f0000000240)={0x7, 0x1b, 0x2}, 0x7)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg1\x00', 0x861fcfcc68eb13f3})

1m31.835736718s ago: executing program 3 (id=394):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000680)={0x7, 0x6, 0x9})
write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000000)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0)={0x0, 0xfc}, 0x2)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000600)={r5, &(0x7f00000004c0)='syzkaller0\x00', 0x149d02, &(0x7f0000000500)={@align=0xc51, {0x2, 0x4, 0x88, 0x8000}}, 0x10000, &(0x7f0000000540), &(0x7f0000000580)=0x6})
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYRES64=r5], 0x12c}}, 0x20040051)
socket(0xf, 0x6, 0x2)
read$FUSE(r5, &(0x7f0000004040)={0x2020}, 0x2020)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000140)=""/116, &(0x7f0000000280)=""/123, &(0x7f0000000300)=""/184, 0xfec00000})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x75, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffde1bba22c3ae4859df02af000cec5ebdef01a5c9a4dc200aeed53ee16bac1ae9108a64270077c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af3"})
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

1m31.20535518s ago: executing program 3 (id=399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xb1, 0xd, 0x1, 0x0, "fb7b1f4197e4d6da3ebedf763b97ad63327d7ff2765029ab0be9e7eb8956b019c8134c94e88d97dd86696ef678059738965b8ca90349f761f0bfae306b3d86db87a265b906c78bd3d2636e9625af694b4de576e102ef74c450e2e8319239de4a8ed0445a239547ba7df934cf6672ba9866d49ed48d2564eba1eb1bb33e73f2493cec001e71a7b7fa72610ed25761a10a4367afb662d2a86825661c03e9f4b8dd11c78640827d276c504b9bef8c"}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00198008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x804)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0)
mknodat$loop(r2, &(0x7f0000000580)='./file0\x00', 0x20, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x641}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1f1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000080)
r4 = socket$inet6(0xa, 0x800, 0x0)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000)
setsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, 0x0)

1m31.013333837s ago: executing program 3 (id=402):
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40800)
shutdown(r3, 0x1)
sendmmsg$inet(r3, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000180)="ca", 0x1}], 0x1}}], 0x1, 0x8000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x19, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4)

1m30.45764307s ago: executing program 3 (id=407):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0xfa8, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0x2, 0x80000, <r8=>r5})
write$P9_RCREATE(r8, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x2, 0x2, 0x1}}}, 0x18)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf64(r9, &(0x7f0000000240)=ANY=[], 0x40000)
fsopen(0x0, 0x0)
pipe2$watch_queue(&(0x7f0000001180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80)
r12 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r12, r10, 0x36)
keyctl$KEYCTL_WATCH_KEY(0x20, r12, r11, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m30.378373836s ago: executing program 34 (id=407):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0xfa8, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0x2, 0x80000, <r8=>r5})
write$P9_RCREATE(r8, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x2, 0x2, 0x1}}}, 0x18)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf64(r9, &(0x7f0000000240)=ANY=[], 0x40000)
fsopen(0x0, 0x0)
pipe2$watch_queue(&(0x7f0000001180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80)
r12 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r12, r10, 0x36)
keyctl$KEYCTL_WATCH_KEY(0x20, r12, r11, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

50.763556226s ago: executing program 0 (id=908):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000004, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24a, 0xab3, 0x1, 0x6, 0xfffffffffffffff4, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x7ffd, 0xe, 0x5d, 0x800, 0x3, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0xde2, 0xfffffdfffffffb61, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x6, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0xd, 0x4, 0x0, 0x8000000000000000, 0x0, 0xca7, 0x5, 0x6, 0x100, 0x2da74e41, 0x1, 0x10, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7686, 0x1ff, 0xf2, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7e, 0x40003, 0xb4000000, 0x0, 0x9, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xe7, 0x5, 0xfffffffffffff36f, 0x4]}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x30e, 0x2, 0x1, 0x5, 0x2, 0x80}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004)

50.466316322s ago: executing program 0 (id=913):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r5, 0x5)
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setns(r7, 0x24020000)
syz_clone(0xde280000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0xffffffff, 0x800000c3})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50)
r9 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x0, 0xb, 0x0, "e52d5681b6b5b040ff0f000000000000ed1135eb8b547b3d07db99c11fc1a8e4"})
io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0)

49.576888458s ago: executing program 0 (id=921):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0xfffff801, 0x7, 0x8}, 0x10)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, 0x27, 0x100, 0x70bd2c, 0x25dfdbfb, {0x1f}, [@generic="747397111ea36666490f100c8326773c237fba3b15cd915bdcecbf62b12a6ace6a5d07c68b65b8be10a70b54220ab61dd31117bc402df1135487f56b51b52281816ca02fcba89ba842b6a1f800e123eead222c477862fcb9f0d8945f98325f9deafd09b3e0d982be769bd7c6907f89b635fafc3d4a32038d7386976668cb0b6636500818dd160cda01f00da46d9ca498e925a6ecafa772d1a652dac9c29d5d583cf176e9e3f4430890e3ce580951a3b57b1e7748d3f2ff80be083a1a2090b8879caac93f5f960e4e56b5a493f99b47"]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000000}, 0x10)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000340)={0x1, 0xfffffff9, 0x5})
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c4, 0x0, 0x1ac594df20501004, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acd5a20fa168468c6da2531ca7e67e05c1f67a4fdade09b1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "015558baf0a2957f165f5b1fa7f58da46a54adf56e0f6023"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ab1e8f08282f4b42fbb0dc02165c3206a261a9662b602b9c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0f0bdb9b77eaadd17325c2bd520909b6452175431869be6f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bd03d472f16d3ca60be845f496b2d575e3ebe8ef2560fb8f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "96566cad71406e011235fb41e64ffae13eab3001344a2967"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
fsetxattr$security_ima(r1, &(0x7f0000000680), &(0x7f00000006c0)=@sha1={0x1, "7f3bb3d46c395389022af7a9268d5595375caca8"}, 0x15, 0x3)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000740), r3)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x48}}, 0x4000000)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000008c0)={{r0}, 0x3, &(0x7f0000000880)=[0x0, 0x7fa, 0x0], 0x4, 0xc, 0x1})
setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000940)="480d54b4a378ab002b4b258943a39173a43cd15176c5785ce0159b2cca3bf3a0a22a456626b1e83dbf8a3c9272b6f840d40520b806741d51d3910241a1529383a7c10db548a1f99710ec6fc8466cf0014725aa9bde70a59686b1b5635730a92fe75c04c250ccaa044839bd00d77b033f1e82811ea2e090b4a24042adea3288bf38124fb5383e728cfcf1c5f1ae011f91963e31607d8c3fa18130dfbfbe6b4644ee7c195b8ea3feb32edb0f5142cd3fdcd5c54333004c7d2e5f43", 0xba)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8880)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan1\x00'})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000b40)={0x80000000, {{0xa, 0x4e22, 0xfffffffc, @remote, 0x3}}, {{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, 0x108)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000cc0))
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000d00)={@multicast1, @empty, 0xffffffffffffffff, "24d7c6a2c6a01a167786c636413e944f4b41a4bf0faeb41f725ce568052b3f4e", 0xff, 0x9, 0x7, 0x4}, 0x3c)
pread64(r3, &(0x7f0000000d40), 0x0, 0x10)
ioctl$BLKCRYPTOGENERATEKEY(r1, 0xc030128a, &(0x7f0000000dc0)={&(0x7f0000000d80)=""/57, 0x39})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r2)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f00000010c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000000e80)={0x1d4, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @remote, 0xffffffff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x766, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4079}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004}, 0x4001)

49.486510793s ago: executing program 0 (id=922):
socket$kcm(0xa, 0x922000000003, 0x11) (async)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x4880}], 0x1}, 0x7101}], 0x1, 0x4001c00)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000040)={0x38, 0x140e, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}}, 0x84)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000002380)) (async, rerun: 64)
preadv(r2, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) (rerun: 64)

49.361964975s ago: executing program 0 (id=923):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0xfffffeff)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f00000000c0)={r1, 0x1, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000100)={0x0, 0x1, r2})
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getae={0x4c, 0x1f, 0x1, 0x70bd27, 0x25dfdbff, {{@in6=@remote, 0x4da, 0x2, 0x6c}, @in=@loopback, 0x2, 0x34fd}, [@mark={0xc, 0x15, {0x35075c, 0x81}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004045}, 0x40040)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x2}}, './file1\x00'})

49.283088671s ago: executing program 0 (id=924):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = userfaultfd(0x80801)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$inet_mreqsrc(r1, 0x0, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x418, 0xffffffff, 0x278, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x180, 0x1a8, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x1, 0x1, [0x2, 0x8, 0x1, 0xff80, 0xb, 0xfff3, 0xff61, 0x0, 0x9, 0xfc00, 0x7, 0x6, 0x4d9c, 0xf01, 0x7, 0xff4e], 0x7}}, @common=@srh1={{0x90}, {0xff, 0x9, 0x1, 0x48, 0x6, @loopback, @local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xff], [0xffffff00, 0x0, 0xffffffff, 0x835a71402aa4f11a], [0xff, 0xffffff00, 0x3375609c8e6be76e, 0xff000000], 0xca0, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xffffff00], 'bridge_slave_0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2e, 0x28, 0x3, 0x52}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800)
getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000340)=0x4)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000680)=@vmx={0x105, 0x0, 0x2080, {0x240000, 0x60000, {}, 0x1, 0x7fffffff}, {"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", "b1e5d38a7ec4b0f27f04fb89b3c8ddbff3d0b7212e366272b8bca9e180fb3c3eb6abd55dbe2c779157ed9a32f18104ba6d9d6328bf522147f50432351c1b07e359ed77f939109418a6a38771ec37feb5ebebd2fc7ac36f4a93ba713c977107a834332ab1819430363ed03979a2924991cd1c671a5a94d5cede1fd2492c75fb2bcdde642e675c446314f21eaf04eeb46f0b495696551074c512b00bba722e84b5cad6655def530bb642b3cafa2be563e19d0f013282e3e6811d64387858c16f52ae3f0e9486d7b19c42930040ffb659218d27bc33bcf97be627530f220f9412797535ef329ab8ed05148835fe6dd01824d148d352201cdb4ab343b6d8f13999a31c92fbd0bd650fea57e03cc055ca3a45879f2f0624a1b2872960539266d6c692f55c6942b1773222a065c22e17ffe6dfda5f8813daf1b4a8fbc92b8b501365ffaf3cf644b77c3c1eff6acb9a8d43aaef4d8ea9d1bc6b039e105ab6f25f0d2c019da32be5f6f5bec8dc2878078e87cd991ae967d2eec7df952b7ac221bd8d23d5651d2751510108771823367368458d86cd5ae87a44f1f7d213d64e6151b50b3ce02e2567e9125104628dd25771a17e3c3483096856638db99125234965ecd3af6fb81de181d655ca7652d4cba2f7617bdb9a88ade209829f754ac1807b7ee1033494360b2ad3fced785f54ea2bce70fd7742ab033d68ed49c576b87cc9c9d9b4f92e69a10bca281f955748831a657ae1bbf1838dc5be5192a3cb10e79f7e6e69ea550d5f6446962c531ad47a1d91eab56f543e8b9dff977e28980d19c52d7c719fd98df3b8cfb9b7a2343531c5fb32cdb1888cf6af5805506b0c65a6f3912e5bd4201928966c5e83a20be36abb3ccd20d254c4591c58687684850af903cbc58344ef4625ff65593682c6adb3a3c1489172c845e7a47349fe7b4a59528e7028e6744453218bd8099e769b473a99506af627b22aa02b595ce4bed4c969c8784ab2705e358bfc879acc89cb9fc6dbaf7da0ccd7d3777656a434ea489b01409e222e5a3fc9f009266c979293fac56e2feeec4d8b2a8b1b9f980e9e8319c719af843bd3dca09b57491e2ffc8f70e3622cab76c3fb60eb84f14c4683cdd0a14589b82821ca850964765a9426a30c109ef99ffb90a689c959df2dbd80623de30f2f0a5fea5f87d8438b05ab075d967beadd524dba722cad0f93196cfb590c276a5e9f4f5fac58495bbf435c31a8cdbb702ed7b6fb04273dc949f387e3f69d494181cfc37d3c9675d14e7b09db47b321f8eaaa9fe3cd032117b30e5400ae51fec708c1f8cd690dfd63e091486846e5e695386076751d160f8d8e7719f82d8da647c652079953982195e921380c37dc58f19511649cd8302352dc1cc6464ced5c53ff85e2bef42924787fcebd5820bb0446cd25ef8843b90de201f9806de0f54c7b796cce1a72f3149e6da3fa9c70da8a6998ecb8bedd45f6fee502b05520d9d6cf36dc1a2ee0dde2c2dabcc29857997398a70593c3aa776812e716d0dee723888e7ffdd490c7b2b49c55cda61cd54d68b2802c82a19662c44131d4ca21bfda5f44c3914c7c2313377838b3afc443dd278ce5405b40e33a1d08ad51e628428f6c39df98c20c08648b845f7546a2b771badb2b363e18bbc7347568cda3a1e960784f745c497870c1bbf0d06bb18936df17f9fad57380595fbd566931fd55ceecd978c49434978e46ac7ceb111a25dc9748e314e7255c5eadb479fe60a5be1730df23b6185654e2fe2f89ab139f8cf300901e9b91f7ab03dbcd97c17d4907b1724a746fb49933dc6444e6eca06f1bb41a8f9ce670948045131e6dfb5162ce66daa302b44a5d16f468427e99b18c7bf4e7b5854dd6a8f202585339660ea60b3358d912bad560d28c9a818e7f7ea864d9ad92b87c6c4a5fbb52cd5334646b29369c671837bb005f4131ba0d6060d15a92a23c8cf0395547dd0f9829c47e377d95e523b1440e6125c6ed9f946341778a35522d65d9da286896d2bd6bb11df5a9df9b80e9e68a209e9f940bc07b14d50137644a56a1c217bca41ed14f0a3c660b955d4a7599493520d9a3bb7c99c562a522895d074f7a8f39bfcb0ff56f72f510c225d8cab2d86461f3d47e03f5073ced723829cacd56fb24570415e39800134edef1c898df945f60b9013fae290ae590ec980882d4e52ab749ecf1d35d05989da95b6256eeee0ae71966a9088f335e99aabfcb381419e7354718bb1f9a5ff8d868503ab50a30959d1b26d0d3072367c7c6379fa737aa5ea38c997c8288ffeb895925280c244b87bd52d0f03af62f01dc04c006ff05ef7adea438309f1010b6f233687272680a683625bfd172e587168e16097dcab6d8d10c9d2e0086aa34205eaebde0ad62ad6bef1b4a6e1239583acaf7484e0016682cb70063d63c95453594db97a90de8ed3e3acfdc970902ba01aae8bcea30b5f48a195af7ac68ce80eea5348fc33c9f1187989d4a506f6bb514ad817d000300f1f02029284ae7d199a8264deb879d2717ce6ce513f5e54e4a894a2df5ebc26e5214b9c07757a8df2660b37dc610cc17097db8fdf668dde5772b7434f13f773d144a6995cde0a76935f275ca8ae281516a6dca3376a167323aececd9f86ed64602dc9978e8be9250512b183910ac0e5cd1dd3b07d17f6822f71aa0a3e8c10e7db9ccccd0713deb8c59fe67b6a7c3ba4a62056e47e7b6c9509c8caad9e8eec04911fd6a8e78f838818c924ae7ef1b38a016ab5ea61ebd7f045398f90c41765d19ad0c2742e99da377a48170675e6085bc17c76de8bb71369d669fc837182399473d351b4a68055c873a37978f0b6e2f3f17195006f98c10a9460a23f761f59c17c87a1d6a5ab6028c605ff4490267e68e218f8fb534e8c5fba69ae08a984129603ed3738bb662ff22b5551fa8786b840ca472ee5c7cf3f16d42cb833ddacd5f47a7423c840debd750da88ed9a0dbcf24fa2763e3d13d1d5afa52264aef355b0d74d8ec5ce485a3a674688cadea1914e6aa563969ab797e79d36e118b0429381f386882727f9a5dd6ebb95c3fc053eb0fd87a1e5337979cd1feaf2a82681e0d7d331984d86020650284975f4fb149df9f1dfae18905f4cff5ce8545982869753e2feba37f723a1457ef0dcf11e344d9aa8a06a5ff7332394d2788086306e5e667536f56ca5195a81475359d330aa8b8ba4af745ada1bdaebe39ec84ea00dd524071123b67f067f3644caa5b8e1d80e574a83b89567d96def5ac72b563c97037e4fbad890f38b717d0b313a767734a629169e79a35022bf65b923603ddc93a9217896bdcde609e4c1715ce7ff1200176d70ce3fdf87d47c568d6588096b9b11bce43fc39f6688faa26e58cb704f35917cc8a6b974d8c32ea984f190b6c0c96300a07f5e240df25f770dfeea5edec00eaa8b703e861e8fd78a559930c9b53b7c7cc548f036b31320e2021260bd330903324241fcccc32869388b15354eed6aeae4fbcd7826014ff29d5087008e6a2f94f324c039c209778bc43d99907fdae043ca54746d3ad0351fb0edd0df372df428a8c97ba53c535be2ab1ed3fe32bb1f6bd59da11902d3d3535c7876e8b03ebb45763bb26fcad53c86848adcc3b1f95735280457aafa7e047ce494db3792b49d1dbf951627c14b64c20ee4abf9728f9bceed674bbac30c567e47a0f1baf0494ac2e83992e7c4c672198e077b7fdf61079d2f36eaecaa3a3dd609b7ec59d10cd2829fde74ce79d34f4df64809385608915ef1bb9c1a442a3bc3505eda10392f2c4e6fa4136ebba000e3cdb9d9812739ac1f5651cdacc29409672765dd87cad7712ecc1f3b862e4a84e9d08825760eb088b9db7fd106ca151e63d17e13df13ef7fb855895f6313de98378fd3329fb1d0fdb08879ade860bcae54fa7fd25d8d8519904052f55aa0b349023f9be07906b80eccfcda61c82b3f5aac0bf493c8f94759185cb44bbaaa621fd3af44cccf6a37d50e2774f6ea67ed7682057466cee1e547f2dec96fb6a12ea2994f5c15616801120392f68b82cddaa6e60a623d7e2a1d1b27729cdca694dee64162e5683f5afd1f6fcafa5d4866ca46a95e58ac3461b7705fe7b2ee7f5383a72d30d1e24296690f51d159b605c10545cd59278380b08baebb758f343f6a66eaa17d74bf17ecccd84dc70662e054c485c25529a1d99327501a902591ad33961160f58cede7f366e82e120be2daedb6442758285495c544410581813845df8e43c7e7c30fc9a0dc537f59d5e88370053d10458ebd907e71dfa83bf9b73406f09339a994b09c13c802965588432c0db4d42c0451fb9dad0fbb400e3dd62e8c54a993372029e2b564313d14292d72bcfa54bc2437455a3a9accc833e8aeb8f4de793abf9e05e6a8c12912465336a986d64d52861f3c4c8f5c29bbcc0d9bc8d628bd5104dd60703a4988f0c414b6de79683243bad8cd197d164395ab7d69271ea350cb333a1c5d2eb8ed99643e5ce9fe58008bc20c0875f73486cfe6e781785125c753b20421f60f4b599c22c149f74cc0e531416e2faf61368ec18759ed26a7c7de13cad1a9813a9bc47f507a113ce7716d1a18e1e6bff3c6e8870c86d95bae3d043b6f6160aa9e56a332c01d9c7d701b519426c2d348f8cd2bc3236c43a32471e90bca1e0fe4ca2a9135fa09a57ac81058ba9f871b7b7385f6ceb5910f7176929da5b42ac70a4e36c996c0e044a144aab77b124a003cd1351c87c7738d40505531e49056d7f62b384a5442e0d00f74a23374ba92fc926bc25269653cadd75dd0d88ced679942049e2826962ed5c70731d5c94598a65ab79462e4a50fcf6141993be28786a8385052246a09a167d015942655409a09fd4375aacb62d3f4fd17a0f250e7d76e7176093719c6726a4f52f70cd1b5f0834c132a72cc39ff67ded632024716aaae89ac80a659bbe4a254f0ee713c6c76060a38abfaac313ffa65bf8e9f9decfb247d280317b9e1c38b9b60f30b5d63f3e111354d1118c2f45d07e45abdcf08e5d9c014d11bf2c9854d9868a9333f356bf7a30c1a45215a8cb7d911d9714d478c6e0ee15bb308d9976bfd28bbb9f5cd08bf8d4e8f3b4b18f925242f87729f3e2114a11925b4755caff7fe468e6576724de755680ae0864dfa14d6ff07dbdd086a2e0f5b6e58a8f2a869bb8b32fcdddde9054652c0df37646c5d621bb0c40ce96e7a5cbee9d2760ed3828c5b95555f1acde1e2d21c1b5853b8595baf8ecfe5f44580b1bf6c88f11f997d7bd464f3796f2324fdcda0c50427613a4177104810af1660be969b1b36e1efdee1460975bc20e4c42ca0ef1551d6240bc0f741b9a57788d434c326445fea8e28f9bdc01a61a9f4711bb1afd3fea1633bdcc12847bd6284e9f15c8fe934da0ceca9c8c98bff3e37943af7a392a24bb7acf46047bdfd10deed323ed19a959c6cc89f4b7ef4892f2e4c61d4c9e3c08fb3f3193a2cf629562eb35de4f2c2fc69b5769540811c9861116a0d6e44e8d8e2a0531b6f30992f958132b180f93fdb90f374dde658c27a6424e6a294513c0d39021adf4d29d7b107a5f3537c1b579f17a80ea10cd32bd657eaab4b91da719ae99c14d2e18c7ae6b5f1c30c1b1d715d3823c7cefee2038a78f0d8eb7412d6ed2ecc71da4bacf1e0e00966289cf6c65b33fd2941724dd98ea856701853f880c146b0511f7a82ecfd43c91c157ec55a1ff23ef520551d97fa3f808618aa6df2a732df8c3f99af1001381865e825e8c999700bb28ed3cdfafdade6d0fc1ccf5b223341eac3"}})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x88, 0x1043, 0x200000000006, 0x4, 0x80, 0x0, 0x100000000, 0x7fffffffffffffe, 0xffff, 0x8000000000005, 0x4800040066], 0x0, 0x40110})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', <r10=>0x0, 0x700, 0x40, 0x80000001, 0x80000000, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast1, {[@lsrr={0x83, 0xb, 0xd1, [@multicast2, @empty]}, @timestamp_prespec={0x44, 0x34, 0x1, 0x3, 0x6, [{@loopback, 0x9}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x8}, {@empty, 0x6}]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0x1, [0x5]}, @generic={0x7e, 0x3, "a1"}, @ra={0x94, 0x4, 0x1}]}}}}})
sendto$packet(r5, &(0x7f0000000200)="919c6a72d356814a58dbb2b7617a6fe810225871eb835d6169ffcf74094afc0bda343f6219a1d749029c98fceceabdcf0eb688129600ac1d697a84e6309643440e08a3eebef94d0c8385c2ba050c", 0x4e, 0x4, &(0x7f00000003c0)={0x11, 0x15, r10, 0x1, 0xb, 0x6, @link_local}, 0x14)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}})
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9)

37.91615146s ago: executing program 5 (id=1037):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_RESET(r0, 0x5514)
syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)

37.914551523s ago: executing program 5 (id=1038):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x2, 0x5})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x2000, 0x0)
write(r1, &(0x7f00000004c0)="42e00874aa5a9255ae16362f55bd2fbfc4808dd355b7d1bbb7e89cd29a3efb0e21df8cf639ed5b22f0bba46eb0b22946c7cfadabcab45e30336632b4ea75fa7b33fbef9976871bb833f587efcfa92a3a32dba8c6673841882ab3744b9e3625043fe0a5f26f6998265c1823f05f18774d11cc1b691ed8024010f6d5af20b5d02417cf2967ac1273b47b6cf5d09d057d44b68c46ceb0df981e", 0x98)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000580))
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000005c0))
r2 = socket$inet_sctp(0x2, 0xc664969f30e7ef94, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000600)={<r3=>0x0, @in6={{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, [0x3ff, 0x0, 0x8000000000000000, 0x5, 0x184a4087, 0x81, 0x370, 0xb, 0x7fffffff, 0x0, 0x4, 0x1, 0xb6, 0x9, 0x7]}, &(0x7f0000000700)=0x100)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000740)={<r4=>r3, 0x401}, &(0x7f0000000780)=0x8)
pipe2$watch_queue(&(0x7f00000007c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000800)={0x1, 0x1, 0x1})
setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000840)={r3, 0x8, 0x1fe, 0x1}, 0x10)
ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000880)={0x2, 0x103, 0x1, {0xff, 0x7, 0xfffff801, 0x9f79}})
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r4, 0x9}, 0xc)
sendmsg$inet_sctp(r6, &(0x7f0000002dc0)={&(0x7f0000000900)=@in6={0xa, 0x4e23, 0x4, @mcast1, 0x8000}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000000940)="f84587774cd8e1fffb555be63b61a996efbae773e67ee5460e8efcc4dc1527bb4a4329806644b661b255595fbbc31dbb768d22cc19a35002f1831fe46e87965136ad478f02f57c58ac3478dab50d4a9f1ec11fb7b491d9a8a08d142580dff8f3e0aab61f8e533580e963dfbbf784de8b8151f58c8d9540c8c7a46b2fab18", 0x7e}, {&(0x7f00000009c0)="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", 0xfd}, {&(0x7f0000000ac0)="473e0672fe4e47e996f45519647825f8482ee0b2430e0c5d6e23d14d0484760abf5bc70f0a17f331f0234e82cebe8f7764d86397bd97ac23d8a7db4e06ee9e790d0adbe8bec74d53569c71c7ca687a42b8efbc69b761de2117118c9e84a60418d0a1955f7db55cbaafcc92cb0b44b94cfa3810fbf27d589576ea4662f5", 0x7d}, {&(0x7f0000000b40)="a359b1f8", 0x4}, {&(0x7f0000000b80)="5803cb37a535952722fd61b6cf24dcf68073f65046eb8d4601aaded28a4e84a86b8f68863cfc929db48bd280cdc53c61128b2034e6d68edd31ab901cebbb3ec9e547d30a7f9e61353a966997fd", 0x4d}, {&(0x7f0000000c00)="fbdf9b3ef2043bad19b3cf8ca0ed11046c5f6740119e54a6b3cfcec34134ff80178caf18f237069f9a4b7955fccab1fd825d6feec8c1ac53b6a01457", 0x3c}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="febef3a5f613e7b9f4fb78fe5adc39ebb04e17df531043f81a467c", 0x1b}, {&(0x7f0000001cc0)="a1ef0daae00bbe1bacb792c86b427fc025eb9726030f2f5ef0afc6582b52b1dc36571866d92cf152dfe9a52b1a7416dc5d346ff2bcb2b90c647ffa6f8f254bb4bb6655e296276f665279227e1fbe154c4d38ce9ab66878ccd73ea4832a487fc4de178fca4bf9b42d907fb693416027d88d756592d9edd4e25c3c7315eafafca7bfe7d46d8f9ec586a6e43f88535480d86ca37bbd26fdf41de416c370198bf247e08fbf928e3a0be05b1ca066a1dae0801b10b1973ade3e4c615dc74698cfd56d0f08173622565382957c32aa95d4adbc3039b17c87841343557eb7b7fd2103b446df3f0c9fe03351638ef2a4ec63a84055082d854d5618b77512fbfb52c7792d10ef50cda30130f6bd10c89df4ef546368da3deda7a3032831ba8d3e67ff511c0fc081b8daf37fc5dc8fb0ac1217cdaa788c2afafefc76cb4cf26241c6c382eed35afcc14cb80f0acaa0d8be5e7808a545fac3ac94597a0df1b91ca219d9ff6ec75285d204311fca3d469b780eedc85dfe747136de04745a7cc4bbc5db6d9f64a2795a3e9b0afab31183f16c0aec2cda149af67054dff7f43695efac1912c94ce3fad7d9f8cca83057a19bc04ff96cfa39931ce646767ec48a974c752994795d2dfa4af3e773c796785eeb02ecbbe3278b599c43aec051a5cfb6366b37221ce4f5597e963e37f2fe76e738c5a3615296ed5fef79996cdb53e400992d7b4d21b4627e0d8d823cedbf30beeb473168e4247176601de0a1d4d9ff56b1bfc6b7462516be5c2f2719d614d5e9aaacd69d7f09aa0b4c680e436b513ec433f54cc9fe9ac6764b1da0f4105d8440eddb4020a0bbda84a814a1a0c95203e4e7556d7e76aa9453a5a4b8527527c4838288e5999924595f7888e1338f0f79039fc6cabfcaffb516da4a63cf56544421f0d63af149fc98126b16f055165e330bf2809256a0e8416a7d8c98c445496e58130f6b2e5f1784b2958d4271987f6efb25c508cebd4b11c95e68dffba40f44402b8ed5506d06d2928c23e1bc5623d3ec73d6fde963a30f5fc72be17447f78a0f3f8ac0b7fa88877016a5943254d7143958525096a83226adf27eb3a44d366f84673b085ccd3dc51316486cc0894e1cf705841607d5f32c89ad837334246956310047947474775ec73be4b33a5c2c928da1a8ceda51c5e9e917eb494295cfe030681f58f40953a2f3fc9874b8ac85707f3c3fa2b94eb1ab2a514b15d1968663cb82db45c2e1de84d1414c47bc7ba7e151c1ea8736b5a8e5db18527b60f86c9f29b0b2de976a438bdf11d947da9aa247a663b699bde01d5795d4b8cfff60e1fe0cca51f89afbe6e2041611e612d137038afb2de86b9d27690a8499bf613bd5c6097333b3d12cbbbf83003d6c545620d3000606fb75b50f802dd0282ddb7067a6c4597dc22ac3773d05d01c0bd9697d8c7abc589c8904de835e4a0f713c63ab79b0faa74bbc91e2c6429438f53269d7cebcf991cf81b9fa370f07febc335702ac08faf140fa2f604dc9cc5c44c4daf4208d9d3769b05869d0dc5e7a1ba639d213cb52440920713f25d963b158259579cf7a5ee46d7aa96cd2b0817ed56177dc435cc76da886ddc0280c4732ede9ab96dc148b48938be7f89de10168651dd051918cfe9887064060b331432796e6b23731d21ffc7bdc3131bad6fcb1ce57371fe33481a4d73a79baa2ffaa7558985263c5e56238cf6e458f3a88a8cf645c3996ba8613e0c78290f786e29265cc4e71b5d866cf3df37dd0e1d29ace630dc2a99a42c4d641f845714d21ec43c17d4339a4739944ebd4631205e2bb9268e05123d7d6a0892887fca0889018ec8c8009bcd1a69e7503760807a2ab25aa73339941ae18fa4acfe23d888c8dc432e8ba12562bee1fdff8dba39d3ec014f5aed18cbc640360175eef6439dfd9e781f2ad707d4e0c6c1da2dbb15397ed17581655a55c05fe37b566403bb86e80e9f9ed3f5eaf94d449e0de757e7a0a49d590bb67115301c8dd5c1fbc070345bfd8c6b4a3c24963de3234cc73d9cc2a4acb1d8d692cb593689af278f18530d424b66f706a7bdca79f2074235d25eb25e5f34bbf47ef1fb52f48c1a7fab14dc9617bd4f08bdf041be87c709a167d2b75d29e340ec6c5bb10df8918aed55ec15cc0e473153da765f041a67b70fed963c8e3f6a413c0dd2438b13dea3d86cf4af509f8cc797bb2882662d1ce729325230a9314b1abeebbde82db19d228d4a2c3c726ab6217c889ba15ae1e014645974d08b95eec60c32b79fdef479da2229e1bdb44903000873a0a49dec0b9b4e7f342bd3e24f6f22f101bf6fe0713685f6c9319da814f4d49bf7c2bc1f8c885e8f936ef7e87e7b52097605c9ccf3b21d9a4dec7d41632d5804105748e6614c5d01570d3221e53e15bdc955d2e31773dede419f103ad7c75b3ffa5850dc67e60f29bf10385a63445d2e1572003678e1daa3ae513312d2638a9f385fbcaba905433e2a9eaaa62e33a0e5b3195a8e615f8a157dddfa716c5cbf579fcece3fe86948a078f7b33bd96426c75c74825c24a52aa789305c88d6bfcac1241ea1e1375b9abcb5f847eb2c730d6b44842ad75b196f5241ca9ec257a7efa5f71b7e9ab57c6a6a5849661f40f6fd97124fdd98560f98cb6e56ff4fd1f6aa4fdcfed963432710535a3fe96d7f91151aa12e0ea68e841b0887cd2d52ab077fcebe2c195730a8971670f3f3e84f582e78a6e95250cc7abc27185c4b4b16fa2c777c24f7c7cc716c576e29fdbc9c403613ca508d5a5c4032a09f54abba4110051d92aa2c94cd452ef407b06085cc4d21a0f04a3bdc32dbe9baa0a71ec7e9373a482752c69e445039b24452fe9c2e88e4afdf44ed926da4d5c362769c3711786fc57be10c8dcb388d26d8127aac4a42ff7ab0c6586d6767719bbdbb431a22e00bd491d66689ae6a878969d79f9134db3ebcbc87033dfbb706bf895c0ff52a25310dbd031bf1e10c813209aef4820344144b570504001592c246801447ad5094d173e6165a455f65fd2ef7fc9659910df48c935802b8071b841502badf6635174c3d9d175b1b8db7c66d3920fe787d69f33db6ebddb689cdf2c352e36eaa09cbd0ca1a01cb427530c4310793f22a11132cd4174b297191eeab5e15227300cc94b3e6b8684c98e5aacf76cc6336eb29740106dcf29a9ddb533bf8359568757aa0d92973bc69b854916b8d29a88f8d333b40a04de12fba4061ea77aeb19461b9768cf4f7283b4eeecaa62cd0a4a871653726392b5ed413f1aa06deb5e85d5273a572e9c311a2b053668130bbe615a66e800e1156a21cef7b791e25ea9cfa61f4cf6a771c7922bc434ee5214e24022e38db0ae41717817d417b220f1ff41050eec29ba40a1544ec696e433b4e33402101776c2df878728eea7a0d766f44856d195bdf28ab45494a13a1d84a0d4a960be9327290c1c7eeb634ed0a0837d7e346206d0ffa4935768322f4385b0cb8f2af910752f309f7aa21420dfc3297f6e3c410cb5309d2e0be6c98b241f59dfe9ff291e1bf6504c70edb2d00a34733f9c5e1f29932bf22e659cb466269bcfc298db7dda9198002c61d363310c873e964f3a6876fb2bcd545a8ec2bacb958a19c7e20a1ff8a57558472979f116b45817c5ee9816a54b8e347e3916920ae0e9f167e199fa54673340eedd59c4d2131d7caadfedd98c825741d40613fa53b5288d92918fad96f49bbfa0b9051191257a7ea5b13a6a8a086d523955cb5de91fa119aa06a93ee3d5c6a5282bc43eaf9f0f6815d73011d5c0e046f0210f961f3775e0ed5ca4848088bafae7344f11a6161960d4fc0212a303fa3ddb9dfb2c62f13b72c69f69a34a8570f4d459c25e53ab87f54664344727b3919543cf9873f3ce43f2e4074d21547f651d5a8c5882cc744b06d64c509ee1f4c7c6fd28c82e36dec682272434be5d6e9ab00ace3994935cc905ad38773ae633381de0882670741c017eb8f04b9a433da07feb74acad70ace8b149d4ac565d642bfa21d68325e8827b8b867885d926121bb7de5bef4a518e3a3f79be8ba68ceca2fadc73266f7ca4aea5757e13a1e491616a3d780c32a1cda141d3ae29f77de6661f748ea5af745e2fc406bc04adcd1cbe5a93786f6bcad47e27eed240016c8006e0d12d612d51bb5e70c27bc030f2ea2a0214e7d9a0797ee045860da89b2bf24f4d26ab683e64bbf85983b789b3c0e5747255b0b4ad4c53f07c78d48c925d8b27c4429befa692088fbcf7577cab09063b18bd3276394b5ac28b49b59d0a13de33bab2fbc775076c49f46695df78c8ee1046b1617798cfb95b45b7892b04bd0102f2193cfd7d1a43285930a749ec6916d2b2c0f5a906349d9b70bbf9fc01cae06bab66b5ffd0ccc98bd1b073f2c74caeb09be7d3a68e595cc217e9a5a118051941815493c216e52150d21af6991d3e8d1903ce3fa533f7bb3afedfddf40fcdb1e5bbf80033d7c82be66824decd229df33eae48ed80bc63cc75f5b39fd2a9f95c513d94aa0a7a4cb3c5e50887cc9568a0c1f4be2bf234416e370950af554cb34a2cfe0827e12c55a20c73d615bb3f8fc7b2ef072bbdf964de399e0abe2213bc2d37adc7210d9dcdee6c9b8322126f67243150ef07d99f46a170a4942868516bea4c2b39ccc99670c03ab0e7ed3a1d93ced91aee020c6d8b20cd1ef069a7837bc22cece3ac8dd9890a2c21e5202c758a2ef6d64cdb9b5128a1386ebe64ee71a0fbac168258689cd477907f77081b518030fec538be37cb4518d0621d0112d4bb1474aec4af02dd6c20dee93c1e64ff879fc94b508e285572af26fe0b91307f5077aafa8bf5b01a4ff839f3ee2b78384c6d30d02fa5ada384b1dd303dd0352a86c9ed6085cb13693fde58fc6d3878f8bb1413309983f45c0886f33ea3942d59820a9a9d68e59b6ed8f014ad87635139dd14b46977145a83f9f7e4e021ff0d3825f6e6267eadda325894a33f5a0f6bf0307b88cb25378cd8714b155a6ec3237ff06d05027e51352b5aa411321f54585a3b95ec6013136d42155105c1bd90886610e21c00c657407128847a51d67a1d6769ef35829c975ada2d7a87a4f671b38a00b2f239713c822d59b75d30c53b0ff878db136a48f992b4f79703d93414132f30b4ebb0c1ff343f388e0c36f7fd79dac2cc5a250f3b48d297c8669572672222008992e2884d0b42999a0956a5547e9a96232a6aef34fbe4b7ea68f4eceb2d4318b81996852e767a6d10828ea32f9782d83765d4342b596cc501f642a20f517d12fc9668c35b9ad97d59580d353db26ce69b0d69dc0d18922a13eef48a7c731feac3d0ad6aabec23aee06008beee22ab2b64a52e14fe693efece8a56df2db8644c81b81d7630b2d98c37301ee13b588b20b262c42e7085769a92ad61e274a00ca56894f488f43fc2e521c4dcd779cf182dc2d2242b8350a4506223850ff88eda95a19dfda3aa3427c899160ac609e11bae3102e2404adbc8ceca5cf1582d8c7ae2c5074d37119003753147eac76e32a7fd0acfd9b2ce6cc06006acfda09e81f59defb93dd29d15d1ddc3ea4bb59fdcad50f760debe239f33e3d208c8ba94c61e95433aacc358d1cf5c486ae0fd083cae74167e5155bdfabb923d72a08fb50353964ce629833609c68da3eb3360070fd81ddb48e6f6ecb10c89a357649f66bc03e39096995e8d27688b6406dd2003b4bf8c1b94ff52174f71d48c109dd9f419a87419c42afa2768a81d57caf78f572574795fb251a06a8cba5f7f76d4b20f94db96ba4fcaa9c9df5e67ae4035c5", 0x1000}], 0xa, &(0x7f0000002d80)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x8, 0x3, 0x800, r3}}], 0x20, 0x4}, 0x0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000002e00)=r4, 0x4)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002e80)={0x8, &(0x7f0000002e40)=[{0x4, 0x1, 0x81, 0x401}, {0x4, 0xdf, 0x9, 0x2}, {0x9, 0x81, 0x40, 0x6}, {0x7, 0xf, 0x0, 0x8}, {0xfffb, 0x24, 0xa9, 0x911}, {0x2, 0xb, 0x6, 0x9}, {0xfffa, 0x3, 0x3, 0x100}, {0x4, 0xb2, 0x3, 0x1}]}, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000002ec0)={r3, 0x1}, &(0x7f0000002f00)=0xc)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000002f40)={0x8, {{0xa, 0x4e21, 0x3, @private1, 0x8}}, {{0xa, 0x4e24, 0x7, @mcast1, 0x5}}}, 0x108)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000003080)={0x18, 0x0, {0x4, @remote, 'veth0_to_batadv\x00'}}, 0x1e)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000030c0)={r4, 0x891, 0x5}, 0x8)
r8 = dup(r1)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111)
ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f0000003100))
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003180), r8)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000003300)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000032c0)={&(0x7f00000031c0)={0xcc, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0xffffffc0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6}, {0x8, 0x15, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040081}, 0x800)
ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0xb)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000003340)={0x8, 'vlan0\x00', {'veth0_to_hsr\x00'}, 0x2})
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000003580)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003540)={&(0x7f00000033c0)={0x14c, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x28853e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

37.816810394s ago: executing program 5 (id=1039):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r4, 0x0, 0x80)

36.8977989s ago: executing program 5 (id=1044):
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x3, 0x30d800)
ioctl$RTC_WIE_OFF(r0, 0x7010)
r1 = socket(0x2, 0x80805, 0x0)
sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x90}, 0x1) (async)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)={0xff, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0xba}, @calipso={0x7, 0x28, {0x2, 0x8, 0xf, 0x8, [0x7, 0x7a, 0x1, 0x1]}}]}, 0x38)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
ioctl$RTC_PIE_OFF(r0, 0x7006) (async)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4cb40000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf252600000008000300", @ANYRES32=r4, @ANYBLOB="040034000a004f003a70876ac25200001e0094000c0000070000000000000008004b000c000000060000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00)

36.666185228s ago: executing program 5 (id=1046):
r0 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000ff1000/0xf000)=nil, 0x2800)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ff3000/0x1000)=nil, 0x5000)
r1 = shmget(0x1, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x1000)
mmap$panthor(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc, 0x9812, r2, 0x2)
remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x55d, 0x20)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8000000000000000, 0x100)
r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x80000000, 0xef})
r4 = syz_open_pts(0xffffffffffffffff, 0x41a880)
ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000000c0)=0x100)
shmctl$SHM_LOCK(r0, 0xb)
remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x9, 0x4000)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x10800, 0x0)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xa113, r5, 0x200)
r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={'\x00', 0x6c57, 0x1a92, 0xa, 0x4, 0xf, <r7=>0xffffffffffffffff})
fcntl$setownex(r6, 0xf, &(0x7f00000001c0)={0x1, r7})
ioctl$TIOCNXCL(r5, 0x540d)
r8 = syz_open_dev$sg(&(0x7f0000000200), 0x8, 0x400400)
ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5)
setsockopt(r5, 0x7f, 0x8, &(0x7f0000000240)="089ab0c747d88b2adee541524aa6d64a1c30c59614ab8df199d4fb65c6c889426c8a82c1c1235bfcf606ce7cb2365a446792f8bc08d3bdbf50f77c2640967ccfb810", 0x42)
shmctl$SHM_INFO(r1, 0xe, &(0x7f00000002c0)=""/4096)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000012c0))
ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f0000001300)=0x1)
ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000001340)=""/181)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff8000/0x1000)=nil)
readv(r2, &(0x7f0000001900)=[{&(0x7f0000001400)=""/234, 0xea}, {&(0x7f0000001500)=""/196, 0xc4}, {&(0x7f0000001600)=""/159, 0x9f}, {&(0x7f00000016c0)=""/173, 0xad}, {&(0x7f0000001780)=""/13, 0xd}, {&(0x7f00000017c0)=""/2, 0x2}, {&(0x7f0000001800)=""/216, 0xd8}], 0x7)

35.786661725s ago: executing program 5 (id=1057):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="022000000000000000000000080001080000000008000b007a00"/44], 0x2c}}, 0x0)
symlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/../file0\x00')
r2 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b8"], 0x159c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x3472, 0x40000060, 0x100007f, 0x6, "9f940b3491d052d172e0e573229ac6de50806c"})
r7 = semget$private(0x0, 0x5, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x3, 0x5, 0xc38, 0x2, 0xb, "d897d6215a189988701fd98be913e2e45b6fa7"})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
futex(&(0x7f0000002980)=0x2, 0x80, 0x2, &(0x7f00000029c0)={0x0, 0x989680}, 0x0, 0x1)
semctl$GETVAL(r7, 0x0, 0xc, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2cd6657273696f6e3d3970323030302e752c00353f566c3de75774edfb228a7e87bebab62e9773f1f327267e4c3135fe684f26848413f4cf050133bbf167b46d11713abbd272f11623f62eaa5ca5e9cef32c"])

33.864686871s ago: executing program 35 (id=924):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = userfaultfd(0x80801)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$inet_mreqsrc(r1, 0x0, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x418, 0xffffffff, 0x278, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x180, 0x1a8, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x1, 0x1, [0x2, 0x8, 0x1, 0xff80, 0xb, 0xfff3, 0xff61, 0x0, 0x9, 0xfc00, 0x7, 0x6, 0x4d9c, 0xf01, 0x7, 0xff4e], 0x7}}, @common=@srh1={{0x90}, {0xff, 0x9, 0x1, 0x48, 0x6, @loopback, @local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xff], [0xffffff00, 0x0, 0xffffffff, 0x835a71402aa4f11a], [0xff, 0xffffff00, 0x3375609c8e6be76e, 0xff000000], 0xca0, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xffffff00], 'bridge_slave_0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2e, 0x28, 0x3, 0x52}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800)
getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000340)=0x4)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000680)=@vmx={0x105, 0x0, 0x2080, {0x240000, 0x60000, {}, 0x1, 0x7fffffff}, {"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", "b1e5d38a7ec4b0f27f04fb89b3c8ddbff3d0b7212e366272b8bca9e180fb3c3eb6abd55dbe2c779157ed9a32f18104ba6d9d6328bf522147f50432351c1b07e359ed77f939109418a6a38771ec37feb5ebebd2fc7ac36f4a93ba713c977107a834332ab1819430363ed03979a2924991cd1c671a5a94d5cede1fd2492c75fb2bcdde642e675c446314f21eaf04eeb46f0b495696551074c512b00bba722e84b5cad6655def530bb642b3cafa2be563e19d0f013282e3e6811d64387858c16f52ae3f0e9486d7b19c42930040ffb659218d27bc33bcf97be627530f220f9412797535ef329ab8ed05148835fe6dd01824d148d352201cdb4ab343b6d8f13999a31c92fbd0bd650fea57e03cc055ca3a45879f2f0624a1b2872960539266d6c692f55c6942b1773222a065c22e17ffe6dfda5f8813daf1b4a8fbc92b8b501365ffaf3cf644b77c3c1eff6acb9a8d43aaef4d8ea9d1bc6b039e105ab6f25f0d2c019da32be5f6f5bec8dc2878078e87cd991ae967d2eec7df952b7ac221bd8d23d5651d2751510108771823367368458d86cd5ae87a44f1f7d213d64e6151b50b3ce02e2567e9125104628dd25771a17e3c3483096856638db99125234965ecd3af6fb81de181d655ca7652d4cba2f7617bdb9a88ade209829f754ac1807b7ee1033494360b2ad3fced785f54ea2bce70fd7742ab033d68ed49c576b87cc9c9d9b4f92e69a10bca281f955748831a657ae1bbf1838dc5be5192a3cb10e79f7e6e69ea550d5f6446962c531ad47a1d91eab56f543e8b9dff977e28980d19c52d7c719fd98df3b8cfb9b7a2343531c5fb32cdb1888cf6af5805506b0c65a6f3912e5bd4201928966c5e83a20be36abb3ccd20d254c4591c58687684850af903cbc58344ef4625ff65593682c6adb3a3c1489172c845e7a47349fe7b4a59528e7028e6744453218bd8099e769b473a99506af627b22aa02b595ce4bed4c969c8784ab2705e358bfc879acc89cb9fc6dbaf7da0ccd7d3777656a434ea489b01409e222e5a3fc9f009266c979293fac56e2feeec4d8b2a8b1b9f980e9e8319c719af843bd3dca09b57491e2ffc8f70e3622cab76c3fb60eb84f14c4683cdd0a14589b82821ca850964765a9426a30c109ef99ffb90a689c959df2dbd80623de30f2f0a5fea5f87d8438b05ab075d967beadd524dba722cad0f93196cfb590c276a5e9f4f5fac58495bbf435c31a8cdbb702ed7b6fb04273dc949f387e3f69d494181cfc37d3c9675d14e7b09db47b321f8eaaa9fe3cd032117b30e5400ae51fec708c1f8cd690dfd63e091486846e5e695386076751d160f8d8e7719f82d8da647c652079953982195e921380c37dc58f19511649cd8302352dc1cc6464ced5c53ff85e2bef42924787fcebd5820bb0446cd25ef8843b90de201f9806de0f54c7b796cce1a72f3149e6da3fa9c70da8a6998ecb8bedd45f6fee502b05520d9d6cf36dc1a2ee0dde2c2dabcc29857997398a70593c3aa776812e716d0dee723888e7ffdd490c7b2b49c55cda61cd54d68b2802c82a19662c44131d4ca21bfda5f44c3914c7c2313377838b3afc443dd278ce5405b40e33a1d08ad51e628428f6c39df98c20c08648b845f7546a2b771badb2b363e18bbc7347568cda3a1e960784f745c497870c1bbf0d06bb18936df17f9fad57380595fbd566931fd55ceecd978c49434978e46ac7ceb111a25dc9748e314e7255c5eadb479fe60a5be1730df23b6185654e2fe2f89ab139f8cf300901e9b91f7ab03dbcd97c17d4907b1724a746fb49933dc6444e6eca06f1bb41a8f9ce670948045131e6dfb5162ce66daa302b44a5d16f468427e99b18c7bf4e7b5854dd6a8f202585339660ea60b3358d912bad560d28c9a818e7f7ea864d9ad92b87c6c4a5fbb52cd5334646b29369c671837bb005f4131ba0d6060d15a92a23c8cf0395547dd0f9829c47e377d95e523b1440e6125c6ed9f946341778a35522d65d9da286896d2bd6bb11df5a9df9b80e9e68a209e9f940bc07b14d50137644a56a1c217bca41ed14f0a3c660b955d4a7599493520d9a3bb7c99c562a522895d074f7a8f39bfcb0ff56f72f510c225d8cab2d86461f3d47e03f5073ced723829cacd56fb24570415e39800134edef1c898df945f60b9013fae290ae590ec980882d4e52ab749ecf1d35d05989da95b6256eeee0ae71966a9088f335e99aabfcb381419e7354718bb1f9a5ff8d868503ab50a30959d1b26d0d3072367c7c6379fa737aa5ea38c997c8288ffeb895925280c244b87bd52d0f03af62f01dc04c006ff05ef7adea438309f1010b6f233687272680a683625bfd172e587168e16097dcab6d8d10c9d2e0086aa34205eaebde0ad62ad6bef1b4a6e1239583acaf7484e0016682cb70063d63c95453594db97a90de8ed3e3acfdc970902ba01aae8bcea30b5f48a195af7ac68ce80eea5348fc33c9f1187989d4a506f6bb514ad817d000300f1f02029284ae7d199a8264deb879d2717ce6ce513f5e54e4a894a2df5ebc26e5214b9c07757a8df2660b37dc610cc17097db8fdf668dde5772b7434f13f773d144a6995cde0a76935f275ca8ae281516a6dca3376a167323aececd9f86ed64602dc9978e8be9250512b183910ac0e5cd1dd3b07d17f6822f71aa0a3e8c10e7db9ccccd0713deb8c59fe67b6a7c3ba4a62056e47e7b6c9509c8caad9e8eec04911fd6a8e78f838818c924ae7ef1b38a016ab5ea61ebd7f045398f90c41765d19ad0c2742e99da377a48170675e6085bc17c76de8bb71369d669fc837182399473d351b4a68055c873a37978f0b6e2f3f17195006f98c10a9460a23f761f59c17c87a1d6a5ab6028c605ff4490267e68e218f8fb534e8c5fba69ae08a984129603ed3738bb662ff22b5551fa8786b840ca472ee5c7cf3f16d42cb833ddacd5f47a7423c840debd750da88ed9a0dbcf24fa2763e3d13d1d5afa52264aef355b0d74d8ec5ce485a3a674688cadea1914e6aa563969ab797e79d36e118b0429381f386882727f9a5dd6ebb95c3fc053eb0fd87a1e5337979cd1feaf2a82681e0d7d331984d86020650284975f4fb149df9f1dfae18905f4cff5ce8545982869753e2feba37f723a1457ef0dcf11e344d9aa8a06a5ff7332394d2788086306e5e667536f56ca5195a81475359d330aa8b8ba4af745ada1bdaebe39ec84ea00dd524071123b67f067f3644caa5b8e1d80e574a83b89567d96def5ac72b563c97037e4fbad890f38b717d0b313a767734a629169e79a35022bf65b923603ddc93a9217896bdcde609e4c1715ce7ff1200176d70ce3fdf87d47c568d6588096b9b11bce43fc39f6688faa26e58cb704f35917cc8a6b974d8c32ea984f190b6c0c96300a07f5e240df25f770dfeea5edec00eaa8b703e861e8fd78a559930c9b53b7c7cc548f036b31320e2021260bd330903324241fcccc32869388b15354eed6aeae4fbcd7826014ff29d5087008e6a2f94f324c039c209778bc43d99907fdae043ca54746d3ad0351fb0edd0df372df428a8c97ba53c535be2ab1ed3fe32bb1f6bd59da11902d3d3535c7876e8b03ebb45763bb26fcad53c86848adcc3b1f95735280457aafa7e047ce494db3792b49d1dbf951627c14b64c20ee4abf9728f9bceed674bbac30c567e47a0f1baf0494ac2e83992e7c4c672198e077b7fdf61079d2f36eaecaa3a3dd609b7ec59d10cd2829fde74ce79d34f4df64809385608915ef1bb9c1a442a3bc3505eda10392f2c4e6fa4136ebba000e3cdb9d9812739ac1f5651cdacc29409672765dd87cad7712ecc1f3b862e4a84e9d08825760eb088b9db7fd106ca151e63d17e13df13ef7fb855895f6313de98378fd3329fb1d0fdb08879ade860bcae54fa7fd25d8d8519904052f55aa0b349023f9be07906b80eccfcda61c82b3f5aac0bf493c8f94759185cb44bbaaa621fd3af44cccf6a37d50e2774f6ea67ed7682057466cee1e547f2dec96fb6a12ea2994f5c15616801120392f68b82cddaa6e60a623d7e2a1d1b27729cdca694dee64162e5683f5afd1f6fcafa5d4866ca46a95e58ac3461b7705fe7b2ee7f5383a72d30d1e24296690f51d159b605c10545cd59278380b08baebb758f343f6a66eaa17d74bf17ecccd84dc70662e054c485c25529a1d99327501a902591ad33961160f58cede7f366e82e120be2daedb6442758285495c544410581813845df8e43c7e7c30fc9a0dc537f59d5e88370053d10458ebd907e71dfa83bf9b73406f09339a994b09c13c802965588432c0db4d42c0451fb9dad0fbb400e3dd62e8c54a993372029e2b564313d14292d72bcfa54bc2437455a3a9accc833e8aeb8f4de793abf9e05e6a8c12912465336a986d64d52861f3c4c8f5c29bbcc0d9bc8d628bd5104dd60703a4988f0c414b6de79683243bad8cd197d164395ab7d69271ea350cb333a1c5d2eb8ed99643e5ce9fe58008bc20c0875f73486cfe6e781785125c753b20421f60f4b599c22c149f74cc0e531416e2faf61368ec18759ed26a7c7de13cad1a9813a9bc47f507a113ce7716d1a18e1e6bff3c6e8870c86d95bae3d043b6f6160aa9e56a332c01d9c7d701b519426c2d348f8cd2bc3236c43a32471e90bca1e0fe4ca2a9135fa09a57ac81058ba9f871b7b7385f6ceb5910f7176929da5b42ac70a4e36c996c0e044a144aab77b124a003cd1351c87c7738d40505531e49056d7f62b384a5442e0d00f74a23374ba92fc926bc25269653cadd75dd0d88ced679942049e2826962ed5c70731d5c94598a65ab79462e4a50fcf6141993be28786a8385052246a09a167d015942655409a09fd4375aacb62d3f4fd17a0f250e7d76e7176093719c6726a4f52f70cd1b5f0834c132a72cc39ff67ded632024716aaae89ac80a659bbe4a254f0ee713c6c76060a38abfaac313ffa65bf8e9f9decfb247d280317b9e1c38b9b60f30b5d63f3e111354d1118c2f45d07e45abdcf08e5d9c014d11bf2c9854d9868a9333f356bf7a30c1a45215a8cb7d911d9714d478c6e0ee15bb308d9976bfd28bbb9f5cd08bf8d4e8f3b4b18f925242f87729f3e2114a11925b4755caff7fe468e6576724de755680ae0864dfa14d6ff07dbdd086a2e0f5b6e58a8f2a869bb8b32fcdddde9054652c0df37646c5d621bb0c40ce96e7a5cbee9d2760ed3828c5b95555f1acde1e2d21c1b5853b8595baf8ecfe5f44580b1bf6c88f11f997d7bd464f3796f2324fdcda0c50427613a4177104810af1660be969b1b36e1efdee1460975bc20e4c42ca0ef1551d6240bc0f741b9a57788d434c326445fea8e28f9bdc01a61a9f4711bb1afd3fea1633bdcc12847bd6284e9f15c8fe934da0ceca9c8c98bff3e37943af7a392a24bb7acf46047bdfd10deed323ed19a959c6cc89f4b7ef4892f2e4c61d4c9e3c08fb3f3193a2cf629562eb35de4f2c2fc69b5769540811c9861116a0d6e44e8d8e2a0531b6f30992f958132b180f93fdb90f374dde658c27a6424e6a294513c0d39021adf4d29d7b107a5f3537c1b579f17a80ea10cd32bd657eaab4b91da719ae99c14d2e18c7ae6b5f1c30c1b1d715d3823c7cefee2038a78f0d8eb7412d6ed2ecc71da4bacf1e0e00966289cf6c65b33fd2941724dd98ea856701853f880c146b0511f7a82ecfd43c91c157ec55a1ff23ef520551d97fa3f808618aa6df2a732df8c3f99af1001381865e825e8c999700bb28ed3cdfafdade6d0fc1ccf5b223341eac3"}})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x88, 0x1043, 0x200000000006, 0x4, 0x80, 0x0, 0x100000000, 0x7fffffffffffffe, 0xffff, 0x8000000000005, 0x4800040066], 0x0, 0x40110})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', <r10=>0x0, 0x700, 0x40, 0x80000001, 0x80000000, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast1, {[@lsrr={0x83, 0xb, 0xd1, [@multicast2, @empty]}, @timestamp_prespec={0x44, 0x34, 0x1, 0x3, 0x6, [{@loopback, 0x9}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x8}, {@empty, 0x6}]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0x1, [0x5]}, @generic={0x7e, 0x3, "a1"}, @ra={0x94, 0x4, 0x1}]}}}}})
sendto$packet(r5, &(0x7f0000000200)="919c6a72d356814a58dbb2b7617a6fe810225871eb835d6169ffcf74094afc0bda343f6219a1d749029c98fceceabdcf0eb688129600ac1d697a84e6309643440e08a3eebef94d0c8385c2ba050c", 0x4e, 0x4, &(0x7f00000003c0)={0x11, 0x15, r10, 0x1, 0xb, 0x6, @link_local}, 0x14)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}})
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9)

20.621310508s ago: executing program 36 (id=1057):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="022000000000000000000000080001080000000008000b007a00"/44], 0x2c}}, 0x0)
symlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/../file0\x00')
r2 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b8"], 0x159c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x3472, 0x40000060, 0x100007f, 0x6, "9f940b3491d052d172e0e573229ac6de50806c"})
r7 = semget$private(0x0, 0x5, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x3, 0x5, 0xc38, 0x2, 0xb, "d897d6215a189988701fd98be913e2e45b6fa7"})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
futex(&(0x7f0000002980)=0x2, 0x80, 0x2, &(0x7f00000029c0)={0x0, 0x989680}, 0x0, 0x1)
semctl$GETVAL(r7, 0x0, 0xc, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2cd6657273696f6e3d3970323030302e752c00353f566c3de75774edfb228a7e87bebab62e9773f1f327267e4c3135fe684f26848413f4cf050133bbf167b46d11713abbd272f11623f62eaa5ca5e9cef32c"])

6.502890824s ago: executing program 8 (id=1369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x12b084226d2dad07, 0x70bd25, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x14)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}}, 0x4800)

6.391616631s ago: executing program 8 (id=1371):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)
ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800], [], [0x0, 0x0, 0x6]})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x10001, 0x3, 0xe51, 0x2, 0x5479, 0x103d, 0x2, 0x0, 0x32e, 0xfffffffffffffffe, 0x0, 0x6, 0x1, 0x5, 0x6a], 0xeeee0000, 0x808d6})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.306299243s ago: executing program 8 (id=1398):
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/70, 0x46})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000))
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/70, 0x46}) (async)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000)) (async)

3.300009732s ago: executing program 8 (id=1399):
r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0)
read$ptp(r0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c)
listen(r1, 0x100) (async)
listen(r1, 0x100)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xfffd}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000022c9370000000007001e6d8cfa14aa00000000"], 0x18, 0x48d5}, 0x8050) (async)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xfffd}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000022c9370000000007001e6d8cfa14aa00000000"], 0x18, 0x48d5}, 0x8050)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x1505, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x1, 0x9, 0x20000, 0x1, 0x436, '\x00', r4, r7, 0x2, 0x4, 0x1}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

3.055532586s ago: executing program 8 (id=1400):
r0 = socket$netlink(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x39, 0x1a, r1, 0x0)
fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2.995305261s ago: executing program 8 (id=1402):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_usbip_server_init(0x3) (async)
syz_usbip_server_init(0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'hsr0\x00', @local})
openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async)
r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0)
socket(0x10, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000100))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
fsopen(&(0x7f0000000240)='ubifs\x00', 0x0) (async)
r5 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='bridge_slave_1\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = creat(&(0x7f0000000400)='./file0\x00', 0x128)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) (async)
r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r9, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="b292edaa5c8f09"], 0x13) (async)
write$P9_RVERSION(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="b292edaa5c8f09"], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x8000) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x8000)

1.063780625s ago: executing program 7 (id=1418):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}], 0x1}], 0x1, 0x40800)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020002"], 0x0)

960.121003ms ago: executing program 6 (id=1419):
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r1 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x80c42, 0x1d0)
quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x40)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private=0xa010100, 0x0, 0x0, 0x10, 0x0, [{}]}})
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KDGKBMETA(r8, 0x4b62, &(0x7f0000000380))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x0, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x9, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x1, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa0, 0x2, 0xb0, 0x1, 0x7}, {0x54000, 0x54000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x132065, 0x2, 0x0, 0x100000, [0x6800000000000000, 0xe, 0x2, 0x20008]})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

906.195417ms ago: executing program 7 (id=1420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x810)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2c8, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x192f71a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39f387a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16316f65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb790}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bd0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x162f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58dce1c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x231d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3c2}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587f2595}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e6b340c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x194a7b01}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19bd6a88}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5732}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b48080}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75f103ef}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7347fe3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x280e398d}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4137edd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc63f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x286a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe100}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b60a3e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x789}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4316fa58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b3d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d3a4dab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54fa1150}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ed5c72}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34121743}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb1c2c62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa492c1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bbce7fc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe7e120c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x149d9cd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a980d1c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36454766}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59ce49e6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35c2c5dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb73a98c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23794e61}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c3eeacd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c804)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a0, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5864bed4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53689f2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f0588a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a537a2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x984a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebcc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6093d7d4}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43d007df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf681}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49f35307}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3481}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x684a3245}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x697886e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x721eb6fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a578e56}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a625d99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54abf8b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf742}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7881}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180f084c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5558d26e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c02b4d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd2a7fb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3efe}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b58ee33}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x633195b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c77964c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35fa71b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1748}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40a50b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee00}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x1)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x108, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55075af8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9fffc50}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749564b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14414dc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd33fa54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6247fd7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4adfc1f5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x519d14c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x101f407f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7742afdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x764d8a32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2577828}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x100}, 0x20000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x80}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2400885c}, 0x20008000)
r5 = syz_open_dev$vcsa(&(0x7f0000000b00), 0x34, 0x200181)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x144, r6, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x5f, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xb1, 0x7}}, @cf={0x4, 0x6, {0x1, 0xb, 0x401, 0x1d}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @cf={0x4, 0x6, {0xa, 0x7, 0xc, 0xc}}, @mic={0x8c, 0x18, {0x2ab, "0c4c52624313", @long="86ebd09fab734a534ee2f174f8e4761a"}}, @ibss={0x6, 0x2, 0x71bf}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc6, 0x7f, [@chsw_timing={0x68, 0x4, {0x6, 0x8}}, @peer_mgmt={0x75, 0x4, {0x0, 0x84, @void, @void, @void}}, @measure_req={0x26, 0x8e, {0x3f, 0x5, 0x10, "cae027c7ef1de16080499fbe87afc48b05646751f0965882c2c38c824c1411c900dcf58c2ac7a75a79f7d9c1c718aaa5b6e615843c36c26afe543bf003c96f34ffcd798d9d4926b051e6f059adb291bdb8261b8bb7bf801ab0845d02c653d7b9a762df40757a87e4faaaf3117db19562f709e558c3da2a8ddcc665ee402b34750d84b7c54ecc8a0efa3af6"}}, @peer_mgmt={0x75, 0x18, {0x1, 0x9, @val=0xfffd, @val=0x8, @val="dbc55ea15f879da409c5c95eeb09feb1"}}, @chsw_timing={0x68, 0x4, {0x8, 0x3}}, @peer_mgmt={0x75, 0x4, {0x0, 0x3, @void, @void, @void}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004)
r7 = syz_io_uring_complete(0x0, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r5)
sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x1a8, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f15}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb41}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x38b2e8a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb61d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2800000}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r5)
sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x5c, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="31f6a9dbdbbc"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="478c7fead6d4"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="314f10b15bda"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001300)={0x0, <r10=>0x0})
r11 = syz_open_procfs(r10, &(0x7f0000001380)='net/llc/core\x00')
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1283}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8091)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r11)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={r11, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001540)=[0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0x74, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x324c0ba1ecc6194a}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x6c, r12, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x20008820)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r11, 0x80083313, &(0x7f0000001940))
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r5)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000001c00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x1a4, r14, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_IE={0x12d, 0x2a, [@chsw_timing={0x68, 0x4, {0x6, 0x6}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x6, 0x0, {0x401, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x8, 0x1, 0x18}}, @measure_req={0x26, 0xcf, {0x3, 0x6, 0x8f, "b1c5358780dfddae695165afe89db30cb336a8e1fee79c4a2d16f81c0306cd348a08e9ef4fb9db3e2fcb6e5f3fef1fce6c2138ce1491dfa67d1ce6acb0463c9d3157a7e57baf6d097de27fc7aa17f7a4d890542c5acd081be532f9efdad5a47c99bfeeaa41112a156a461e7d97aefddcac4a1333f0934a3dedec20e7c8a2c305cbc7f96f61b92cc7a069278aa08ee0c93cbcd65831df86f258091e7a406002acf8fc219e23fd45c742ff748d516671b8135a7f41f432b528071b49c6370ef8f1216a09578cb3a0b9d34f5fa7"}}, @chsw_timing={0x68, 0x4, {0x4, 0x6}}, @prep={0x83, 0x1f, {{}, 0x8, 0x4, @device_b, 0x7f, @void, 0x4, 0x4, @broadcast, 0x3}}, @mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x5, [{0x3}, {0x12, 0x1}, {0xb}, {0x9}, {0x30, 0x1}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x32, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0x6, 0x21, 0x6ce}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0xb, 0x21, "114fa586c1780ca5bfae5231f2138fed71ee8a7c648587dafea9c9b852e054e769"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x1a4}}, 0x20004000)
ioctl$USBDEVFS_ALLOW_SUSPEND(r11, 0x5522)

802.610209ms ago: executing program 4 (id=1421):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x1, 0xff}, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r2=>0x0})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xe)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000200)={0x2, 0x2, 0x4, 0xadeb, 0x7, "ea710e00000000f91500ff000200", 0xffffffff, 0xfffeffff})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000001280)=0xff)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x3, 0x200, 0x3b, 0x8, 0xfffffff2, 0x2000, 0x3, <r7=>0x0}, &(0x7f0000000080)=0x20)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000340)={r7, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000400)=0x84)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8], 0xfc, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)

801.469208ms ago: executing program 7 (id=1422):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) (async)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) (async)
r2 = fcntl$dupfd(r1, 0x406, r1)
write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="02000000040000000400000267100f0357cc4baf2449e9000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000300"/28], 0x50)
close(r6) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4) (async)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=0xffffffffffffffff, 0x4)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10}, 0x18) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0x1, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="09f3ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000100"/28], 0x50)
r12 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r12, r13, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x33, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @map_val={0x18, 0x6f0eb8d84f3034ec, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x4, 0x7, 0x0, 0x2, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_output, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6f5, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x9, 0x8, 0xb, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='GPL\x00', 0x2, 0x71, &(0x7f0000000bc0)=""/113, 0x41000, 0x46, '\x00', 0x0, 0x1b, r8, 0x8, &(0x7f0000000c80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[r9, r10, r11, r13], &(0x7f0000000e40)=[{0x5, 0x5, 0x4, 0xc}, {0x0, 0x3, 0xf, 0x2}], 0x10, 0x2}, 0x94) (async)
r14 = socket$inet6(0xa, 0x3, 0x6)
sendto$inet6(r14, &(0x7f0000000640)="9d05ccba619caa3dd40175fb089d12e70fceb3d8145652e4166c7bd7fc4b206603df6c6f2831e4fd970f6ead899d19b1abdee2a8bedf80bed251c69897b48f3e548883acee235b4070bed652445255d09a6121d08aec83c6191d9e30d740653ef7cfdeb25d3b3cd9f37c2e1e3f7d1940f17402950c811252a06c607fe086f07966982afbafcd03583319e34e9dd5984ce39dad754d00d31157", 0x99, 0x800, &(0x7f0000000700)={0xa, 0x4e22, 0x3, @loopback, 0x5}, 0x1c) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2d) (async)
r15 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000040)="d89e2bfac51a9a455164e2c485df3706f7cd3493551238db446f20967c35a239c67e8c3a25bb597773908a6d57ea9c5ea973e909592dacc50115718e5699fdb64522db7f6be7bdedf0588c8de70a4617b75b827a61db1726f2523d7c19d2c6b7f3789f3fc8ee3c1f2b0c7c", &(0x7f0000000240)=""/159, &(0x7f0000000440)="5d682f6081bc75d7561fd0d1d467bf8df3c1e6d545fb044879ebdf4d911680ff76927d9bed69befb7a1c664616564e3832ff041fda625a9d0ee01ae4dc195a742e3222b0b2029f47985d87896a15a8e4c53e4462ad4721ae84d9c6a39dc4964f7a629f0a3911a4af72563c3810964feb9f6fa74c3b118932df162505f97a392fb7b65ccb7ea203b79f3f5259170d36416e702a89af4ea66e28c50e56bf045d4d42ea20fa25739c119766b2e421b2868cd4f4e7bcbce111feffef26", &(0x7f0000000500)="06d632aafcfee52ade772679a978ead6e589b3c6e1e656724c5f2d741fb91f14e59a1e58849691ef015c334afe7b56436fa560271be56339aa205af7cdf3d3bb94c56647a425681360eef8403f5e5124906e29bfb5a2d8d383db5446147896bab135d8291351ed5bca5863a096af3d359a2389127af8fda9c94b21e61a5d25e994987b0fbf4886394f39f64c0c26344fbd9ce55857c3c9d07e5e59ff2770cb8b893db4fc466d2ff2559e", 0x10001, r15, 0x4}, 0x38)
ioctl$KVM_SET_IRQCHIP(r13, 0x4020aeb2, &(0x7f0000000740)={0x1, 0x12c, @pic={0x9, 0x2, 0x7, 0x49, 0x44, 0x6, 0x7f, 0x3, 0x6, 0x0, 0x0, 0x0, 0xe, 0x2, 0x5, 0x60}})

656.119768ms ago: executing program 4 (id=1423):
r0 = epoll_create1(0x80000)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x1, {0xc, 0x6c6, 0x6, 0x8, 0x5}})
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={<r2=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r2, r2, r2], 0x0, 0x3})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

655.346288ms ago: executing program 7 (id=1424):
r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000100)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84)
write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file0', [{0x20, '/dev/sr0\x00'}]}, 0x15)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

553.638513ms ago: executing program 7 (id=1425):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}], 0x1}], 0x1, 0x40800)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010002"], 0x0) (fail_nth: 5)

544.257744ms ago: executing program 4 (id=1426):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x8001, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x32, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e23, 0x2, 'wlc\x00', 0x31, 0x4, 0x32}, 0x2c) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

385.637054ms ago: executing program 7 (id=1427):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}], 0x1}], 0x1, 0x40800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r0, 0x0, 0x0)
r4 = openat(r3, &(0x7f0000000280)='.\x00', 0x2000, 0x0)
unshare(0x6a040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan1\x00', <r6=>0x0})
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x59888, 0x55085}, [@IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010)
syz_usb_disconnect(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001000390426bd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01980000000000004000128008000100736974003400028006000e000100000008000300ac"], 0x60}}, 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010002"], 0x0)

384.978709ms ago: executing program 4 (id=1428):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
r2 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async, rerun: 32)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async, rerun: 32)
bind$tipc(r2, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) (async, rerun: 32)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0xc, 0x8, 0x24, 0x0, 0xffffff56, 0x4, 0x0, 0xa, 0x5, 0xff, 0x0, 0xb6, 0x0, 0x7, 0x80002, 0x3, 0x7, 0x0, 0x1, '\x00', 0x8, 0x5}) (async, rerun: 64)
r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (rerun: 64)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r11, 0x4068aea3, &(0x7f0000000c00)={0xa4, 0x0, 0x1})
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x36, 0x1}, &(0x7f0000000000)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32)
r12 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (rerun: 32)
ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})

316.132748ms ago: executing program 4 (id=1429):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"])
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0)
chdir(&(0x7f00000000c0)='./file1\x00')
mkdir(&(0x7f0000000140)='./control\x00', 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000002, 0x0, 0x8}]})
rmdir(&(0x7f0000000280)='./control\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)

213.955014ms ago: executing program 6 (id=1430):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000001000200000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

205.891813ms ago: executing program 6 (id=1431):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000800)=0x5f5e0f7, 0x4)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000640)={0x0, 0x1, 0x6, 0x0, 0xffffffff}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008815}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'caif0\x00', &(0x7f0000000240)=@ethtool_channels={0x3c, 0x8, 0x7, 0x2, 0x7, 0x6, 0x8000, 0x7, 0xffff}})

96.371294ms ago: executing program 4 (id=1432):
r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @p_u16=0x0}})
pipe2(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000009000000070000000000000e02000000ef67000000000000000f020000009c05000000000000006f00"], 0x0, 0x3d, 0x0, 0x1}, 0x28)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00')
preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x4317d336)
vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4], 0x7c}, 0x1, 0x0, 0x0, 0xc048}, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@dev, @private, @initdev}, &(0x7f0000000180)=0xc)
unshare(0x2a020480)
unshare(0x2c000000)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x6c35, 0x8000, 0x200, 0x8, 0x44b, 0x9, 0x5, 0xb, <r5=>0x0}, &(0x7f0000000240)=0x20)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x9, 0x9, 0x0, 0x5, 0x1, 0x5, 0x2, 0x9, r5}, 0x20)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0)
fcntl$setpipe(r1, 0x407, 0x3)

96.068021ms ago: executing program 6 (id=1433):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x7f, 0x301040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x44004)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab00000000f8dbdf25320000000800030003df0d1db3b56f713fa26f8e086edba5e941391e0fdc49c54e34832fafda76d301893abb369b964dbd54e349e6c470bc23ef9c7b83abaf5fc500d2918ec74024fab21336ef8c81dfc2521e21fa4183b3dd9c4fbe2075a31d3d968fd1882242460f470ce99db30693ea520d85cb6315ae7bdf4be539536c01441deed2657f88b81ea6682b03a84443f928f929781876cd1712398dea098ce967c51ad7b83ff4b37c9eea6a54f95b", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x20040000)

6.13557ms ago: executing program 6 (id=1434):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

0s ago: executing program 6 (id=1435):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000000)={&(0x7f0000000080)=[r1, r1], 0x0, 0x17329519e57fdc7f})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000100)={r1, 0x1, <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000640)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlinkat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x44) (async)
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)

kernel console output (not intermixed with test programs):

sult: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  158.443885][ T1131] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] 
[  158.447350][ T1131] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information
[  158.453435][ T1131] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 59 ee 00 04 00 00
[  158.459873][ T1131] I/O error, dev sda, sector 88558 op 0x0:(READ) flags 0x80700 phys_seg 121 prio class 2
[  158.466797][ T1131] ata1: EH complete
[  158.587159][ T8269] new mount options do not match the existing superblock, will be ignored
[  158.602319][ T8272] netlink: 144 bytes leftover after parsing attributes in process `syz.0.660'.
[  159.021565][ T8287] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  159.059505][ T8288] netlink: 'syz.0.666': attribute type 30 has an invalid length.
[  159.084626][ T8288] bond3: option arp_missed_max: invalid value (0)
[  159.087828][ T8288] bond3: option arp_missed_max: allowed values 1 - 255
[  159.094102][ T8288] bond3 (unregistering): Released all slaves
[  159.723258][ T5769] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  159.903414][ T5769] usb 5-1: Using ep0 maxpacket: 8
[  159.909988][ T5769] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  159.914647][ T5769] usb 5-1: config 0 has no interface number 0
[  159.916696][ T5769] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  159.930913][ T5769] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  159.935223][ T5769] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  159.943208][ T5769] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  159.961756][ T5769] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  159.965479][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.977824][ T5769] usb 5-1: config 0 descriptor??
[  159.993846][ T5769] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  160.125702][ T5904] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  160.248841][   T39] usb 5-1: USB disconnect, device number 10
[  160.251696][    C1] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  160.270139][   T39] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  160.270534][ T8310] ldusb: No device or device unplugged -19
[  160.288805][ T5904] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  160.292236][ T5904] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.293431][   T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  160.295749][ T5904] usb 10-1: Product: syz
[  160.301517][ T5904] usb 10-1: Manufacturer: syz
[  160.304127][ T5904] usb 10-1: SerialNumber: syz
[  160.319497][ T5904] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  160.371698][ T5721] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  160.463441][   T10] usb 9-1: Using ep0 maxpacket: 32
[  160.475637][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  160.488209][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.493069][   T10] usb 9-1: too many endpoints for config 1 interface 0 altsetting 9: 64, using maximum allowed: 30
[  160.498413][   T10] usb 9-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[  160.504338][   T10] usb 9-1: config 1 interface 0 has no altsetting 0
[  160.510010][   T10] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  160.516949][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.521129][   T10] usb 9-1: Product: syz
[  160.523341][   T10] usb 9-1: Manufacturer: syz
[  160.525339][   T10] usb 9-1: SerialNumber: syz
[  160.589146][   T39] usb 10-1: USB disconnect, device number 7
[  160.633713][   T24] usb 11-1: USB disconnect, device number 4
[  160.770794][   T10] usb 9-1: USB disconnect, device number 12
[  160.940160][   T40] kauditd_printk_skb: 29 callbacks suppressed
[  160.940176][   T40] audit: type=1400 audit(160.834:791): avc:  denied  { create } for  pid=8337 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  160.952154][   T40] audit: type=1400 audit(160.834:792): avc:  denied  { connect } for  pid=8337 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  161.007488][ T8341] bond_slave_0: entered promiscuous mode
[  161.007528][   T40] audit: type=1400 audit(160.904:793): avc:  denied  { ioctl } for  pid=8337 comm="syz.0.680" path="socket:[24671]" dev="sockfs" ino=24671 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  161.010086][ T8341] bond_slave_0: entered allmulticast mode
[  161.134639][   T40] audit: type=1400 audit(161.034:794): avc:  denied  { create } for  pid=8347 comm="syz.6.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  161.141290][   T40] audit: type=1400 audit(161.034:795): avc:  denied  { write } for  pid=8347 comm="syz.6.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  161.156166][ T8348] bond2: entered promiscuous mode
[  161.189508][   T40] audit: type=1400 audit(161.084:796): avc:  denied  { write } for  pid=8350 comm="syz.0.684" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  161.221150][   T40] audit: type=1400 audit(161.114:797): avc:  denied  { bind } for  pid=8352 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  161.230740][   T40] audit: type=1400 audit(161.114:798): avc:  denied  { name_bind } for  pid=8352 comm="syz.0.685" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  161.241186][   T40] audit: type=1400 audit(161.114:799): avc:  denied  { node_bind } for  pid=8352 comm="syz.0.685" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  161.433912][ T5721] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  161.440639][ T5721] ath9k_htc: Failed to initialize the device
[  161.448894][   T39] usb 10-1: ath9k_htc: USB layer deinitialized
[  161.530763][   T40] audit: type=1400 audit(161.424:800): avc:  denied  { remount } for  pid=8370 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  161.643334][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.667155][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.832177][ T8385] comedi comedi0: Minor 2 could not be opened
[  161.891112][ T8394] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.698'.
[  161.954893][ T8396] netlink: 'syz.6.700': attribute type 1 has an invalid length.
[  161.975233][   T39] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  161.988297][ T8396] 8021q: adding VLAN 0 to HW filter on device bond3
[  162.013496][ T8396] bond3: (slave gretap1): making interface the new active one
[  162.018724][ T8396] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  162.133377][   T39] usb 10-1: Using ep0 maxpacket: 32
[  162.145613][   T39] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[  162.153444][   T39] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  162.160276][   T39] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  162.169189][   T39] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  162.183238][   T39] usb 10-1: config 0 interface 0 has no altsetting 0
[  162.189185][   T39] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  162.203337][   T39] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  162.206980][   T39] usb 10-1: Product: syz
[  162.208520][   T39] usb 10-1: Manufacturer: syz
[  162.210300][   T39] usb 10-1: SerialNumber: syz
[  162.226413][   T39] usb 10-1: config 0 descriptor??
[  162.241878][   T39] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  162.284542][   T39] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  162.585592][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'.
[  162.607014][ T8406] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.703'.
[  162.719814][ T8410] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  162.740316][ T5769] usb 10-1: USB disconnect, device number 8
[  162.778660][ T5769] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[  162.976679][ T8365] syz.5.688 (8365) used greatest stack depth: 19752 bytes left
[  163.250433][ T8436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  163.452661][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.714'.
[  163.455780][ T8445] netlink: 'syz.5.714': attribute type 5 has an invalid length.
[  163.458670][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.714'.
[  163.470529][ T8445] geneve2: entered promiscuous mode
[  163.472600][ T8445] geneve2: entered allmulticast mode
[  163.474672][ T8447] /dev/sg0: Can't lookup blockdev
[  163.477306][ T8447] netlink: 484 bytes leftover after parsing attributes in process `syz.0.715'.
[  163.478603][   T46] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  163.485412][   T46] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  163.488703][   T46] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  163.491402][   T46] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  163.643720][ T8464] option changes via remount are deprecated (pid=8463 comm=syz.0.720)
[  163.755740][ T8473] input: syz1 as /devices/virtual/input/input15
[  163.770887][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.722'.
[  163.940073][ T8479] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  163.953382][ T8476] syz.4.724 (8476) used greatest stack depth: 18952 bytes left
[  164.078528][ T8483] udf: Unknown parameter 'gVµ¹e'
[  164.400151][ T8489] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.728'.
[  164.407894][ T8489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.728'.
[  164.459563][ T8493] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  164.514503][ T8493] vcan1: entered allmulticast mode
[  164.559235][ T8497] cgroup: Unknown subsys name 'smackfshat'
[  164.999910][ T8510] comedi comedi2: dt2815: I/O base address or length out of range
[  165.118095][ T8514] overlayfs: metacopy with no lower data found - abort lookup (/file2)
[  165.136523][ T8517] netlink: 36 bytes leftover after parsing attributes in process `syz.5.736'.
[  165.210762][ T8525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.218007][ T8527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.699352][ T8539] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.083557][   T39] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  166.115560][ T6074] bond0: (slave bond_slave_0): interface is now down
[  166.123317][ T6074] bond0: (slave bond_slave_1): interface is now down
[  166.140170][ T6074] bond0: now running without any active interface!
[  166.244093][   T39] usb 10-1: Using ep0 maxpacket: 8
[  166.247407][   T39] usb 10-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.251133][   T39] usb 10-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.255309][   T39] usb 10-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  166.260333][   T39] usb 10-1: config 1 interface 0 has no altsetting 0
[  166.264423][   T39] usb 10-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40
[  166.267945][   T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.270642][   T39] usb 10-1: Product: ï²°
[  166.272016][   T39] usb 10-1: Manufacturer: 䤤ဋ뛑ꆆ꟫쌑�ﳛ䑱攪닆���翤㾲憮ཷㆿ䞂୧駓䖭徿뇓쵧䦇熤㴈稽쇞쇼�È쒡�숾홡쩬�ꃺ씩߆몙뉇ㅂ丼ᚑ쌬쟸䦂��㤼⛃㦢완ꖿ튂�죮࿋，㴾㣇滛�춡薂ꢚ뷴�⭩��ຂ沟⤳맻탈┶釪ఴ钊घ���싋校䩮槤⌼趠녔븡ἔ풅붨�⺮៧㙡掰�嘞�
[  166.287371][   T39] usb 10-1: SerialNumber: 赠织ꮡ�닰嘅樘��ꘗ��
[  166.295622][ T8545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  166.469226][ T8569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  166.493956][ T8569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  166.516071][ T8569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  166.535390][ T8570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  166.585674][   T40] kauditd_printk_skb: 50 callbacks suppressed
[  166.585691][   T40] audit: type=1800 audit(166.484:851): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.752" name="file1" dev="overlay" ino=880 res=0 errno=0
[  166.628684][ T8577] IPv6: sit1: Disabled Multicast RS
[  166.632036][ T8577] sit1: entered allmulticast mode
[  166.695143][   T40] audit: type=1400 audit(166.594:852): avc:  denied  { watch } for  pid=8579 comm="syz.4.755" path="/156/file0" dev="tmpfs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  166.705780][   T40] audit: type=1400 audit(166.594:853): avc:  denied  { watch_sb watch_reads } for  pid=8579 comm="syz.4.755" path="/156/file0" dev="tmpfs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  166.717427][   T39] usbhid 10-1:1.0: can't add hid device: -71
[  166.718145][   T40] audit: type=1400 audit(166.614:854): avc:  denied  { ioctl } for  pid=8544 comm="syz.5.745" path="socket:[24987]" dev="sockfs" ino=24987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  166.720770][   T39] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  166.753827][   T39] usb 10-1: USB disconnect, device number 9
[  166.843551][ T5769] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  166.851754][ T8587]  pmem0: [POWERTEC]
[  166.979399][ T5142]  pmem0: [POWERTEC]
[  166.999580][   T40] audit: type=1400 audit(166.894:855): avc:  granted  { setsecparam } for  pid=8589 comm="syz.6.757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  167.006575][   T40] audit: type=1400 audit(166.894:856): avc:  denied  { setopt } for  pid=8589 comm="syz.6.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  167.013637][ T5769] usb 5-1: Using ep0 maxpacket: 8
[  167.021283][ T5769] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  167.028918][ T5769] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  167.039144][ T5769] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  167.051743][ T5769] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  167.063261][ T5769] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.074492][ T5769] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  167.080435][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.101487][   T40] audit: type=1400 audit(166.994:857): avc:  denied  { watch } for  pid=8591 comm="syz.6.758" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  167.123516][   T40] audit: type=1400 audit(166.994:858): avc:  denied  { execute } for  pid=8591 comm="syz.6.758" dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  167.130787][   T40] audit: type=1400 audit(166.994:859): avc:  denied  { execute_no_trans } for  pid=8591 comm="syz.6.758" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  167.312433][ T5769] usb 5-1: usb_control_msg returned -32
[  167.315847][ T5769] usbtmc 5-1:16.0: can't read capabilities
[  167.517227][ T8603] __nla_validate_parse: 1 callbacks suppressed
[  167.517294][ T8603] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.760'.
[  167.609908][   T40] audit: type=1400 audit(167.504:860): avc:  denied  { setopt } for  pid=8612 comm="syz.6.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  167.880555][ T8620] macsec1: entered promiscuous mode
[  168.009334][ T8624] pimreg: entered allmulticast mode
[  168.116013][ T8625] usbtmc 5-1:16.0: usb_control_msg returned -32
[  168.156841][ T8630] loop0: detected capacity change from 0 to 1
[  168.205398][ T8630] Dev loop0: unable to read RDB block 1
[  168.209655][ T8630]  loop0: unable to read partition table
[  168.214317][ T8630] loop0: partition table beyond EOD, truncated
[  168.221763][ T8630] loop_reread_partitions: partition scan of loop0 (þ被xü—ŸÑච) failed (rc=-5)
[  168.315714][ T5769] usb 5-1: USB disconnect, device number 11
[  168.568421][ T8651] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  168.823200][ T8659] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  168.995303][ T8671] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.781'.
[  169.060942][ T8674] tmpfs: Bad value for 'mpol'
[  169.064578][ T8674] SELinux: syz.6.782 (8674) wrote to checkreqprot. This is no longer supported.
[  169.135274][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'.
[  169.305455][ T8681] NILFS (nbd6): device size too small
[  169.361688][ T8693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8693 comm=syz.4.789
[  169.374838][ T8693] netlink: 'syz.4.789': attribute type 2 has an invalid length.
[  169.530648][ T8710] openvswitch: netlink: Missing key (keys=40, expected=100)
[  169.686433][ T8721] input: syz1 as /devices/virtual/input/input16
[  169.860284][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'.
[  169.887737][ T6063] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.894791][ T6063] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.899505][ T6063] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.903576][ T6063] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.015773][ T8739] jfs: Unknown parameter 'grpquota@'
[  170.953886][ T5905] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  170.966774][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.823'.
[  171.128288][ T5905] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  171.132406][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.136868][ T5905] usb 9-1: Product: syz
[  171.139685][ T5905] usb 9-1: Manufacturer: syz
[  171.142201][ T5905] usb 9-1: SerialNumber: syz
[  171.185570][ T5905] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  171.197184][ T8810] openvswitch: netlink: ct_state flags 010000ff unsupported
[  171.242401][   T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  171.312138][ T8814] trusted_key: encrypted_key: keylen parameter is missing
[  171.398874][ T8819] sg_write: data in/out 16777180/10 bytes for SCSI command 0x0-- guessing data in;
[  171.398874][ T8819]    program syz.0.829 not setting count and/or reply_len properly
[  171.599157][   T40] kauditd_printk_skb: 36 callbacks suppressed
[  171.599203][   T40] audit: type=1400 audit(171.494:897): avc:  denied  { read } for  pid=8828 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  171.797304][ T5904] usb 9-1: USB disconnect, device number 13
[  171.929178][ T8841] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  171.936227][ T8841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.013410][ T5769] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[  172.025554][ T8848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8848 comm=syz.4.837
[  172.031900][   T40] audit: type=1400 audit(171.924:898): avc:  denied  { bind } for  pid=8847 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  172.152653][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'.
[  172.198279][ T5769] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  172.215997][ T5769] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.225560][ T5769] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  172.228357][ T8855] binder: 8854:8855 ioctl 4018620d 0 returned -22
[  172.229142][ T5769] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.303405][   T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  172.306547][   T10] ath9k_htc: Failed to initialize the device
[  172.311649][ T5904] usb 9-1: ath9k_htc: USB layer deinitialized
[  172.351024][ T8860] gretap2: entered promiscuous mode
[  172.354536][ T8860] batman_adv: batadv0: Adding interface: gretap2
[  172.357094][ T8860] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  172.366808][ T8860] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  172.453593][ T5769] usb 10-1: usb_control_msg returned -32
[  172.461751][ T5769] usbtmc 10-1:16.0: can't read capabilities
[  172.538446][ T8866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58368 sclass=netlink_route_socket pid=8866 comm=syz.6.844
[  173.021111][ T8891] syzkaller0: entered promiscuous mode
[  173.023861][ T8891] syzkaller0: entered allmulticast mode
[  173.055484][ T5769] usb 10-1: USB disconnect, device number 10
[  173.138727][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.854'.
[  173.142524][   T40] audit: type=1400 audit(173.034:899): avc:  denied  { connect } for  pid=8908 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  173.202651][   T40] audit: type=1400 audit(173.094:900): avc:  denied  { setopt } for  pid=8913 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  173.279022][ T8914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.288660][ T8914] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  173.313040][   T40] audit: type=1400 audit(173.204:901): avc:  denied  { shutdown } for  pid=8916 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  173.318373][ T8917] netlink: 'syz.4.858': attribute type 1 has an invalid length.
[  173.319658][   T40] audit: type=1400 audit(173.214:902): avc:  denied  { write } for  pid=8916 comm="syz.4.858" lport=35795 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  173.325465][ T8917] netlink: 92 bytes leftover after parsing attributes in process `syz.4.858'.
[  173.330885][   T40] audit: type=1400 audit(173.214:903): avc:  denied  { ioctl } for  pid=8916 comm="syz.4.858" path="socket:[26035]" dev="sockfs" ino=26035 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  173.423501][   T40] audit: type=1400 audit(173.314:904): avc:  denied  { read write } for  pid=8918 comm="syz.4.859" name="rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  173.433816][   T40] audit: type=1400 audit(173.334:905): avc:  denied  { open } for  pid=8918 comm="syz.4.859" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  173.503396][   T40] audit: type=1400 audit(173.404:906): avc:  denied  { write } for  pid=8922 comm="syz.0.861" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  173.605330][ T8929]  pmem0: [POWERTEC]
[  173.671756][ T8933] netlink: 36 bytes leftover after parsing attributes in process `syz.5.865'.
[  173.779927][ T8942] dlm: non-version read from control device 109
[  173.988619][ T8963] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  174.053444][   T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  174.124288][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.879'.
[  174.128508][ T8970] netlink: 32 bytes leftover after parsing attributes in process `syz.5.879'.
[  174.132553][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.879'.
[  174.153656][ T8970] netlink: 32 bytes leftover after parsing attributes in process `syz.5.879'.
[  174.203350][   T10] usb 9-1: Using ep0 maxpacket: 8
[  174.211007][   T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  174.220195][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  174.226151][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  174.231096][   T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.237595][   T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  174.242127][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.316979][ T8976] hfs: can't find a HFS filesystem on dev sr0
[  174.408897][ T8991] fuse: Bad value for 'fd'
[  174.468112][   T10] usb 9-1: usb_control_msg returned -32
[  174.474223][   T10] usbtmc 9-1:16.0: can't read capabilities
[  174.592805][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.888'.
[  174.631817][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.888'.
[  174.636583][ T6074] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.640556][ T6074] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.649757][ T6074] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.655763][ T6074] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.736413][ T9013] syzkaller0: entered promiscuous mode
[  174.738917][ T9013] syzkaller0: entered allmulticast mode
[  175.439304][ T9022] netlink: 68 bytes leftover after parsing attributes in process `syz.6.892'.
[  175.591005][ T9037] SELinux: failed to load policy
[  175.697085][ T9046] netlink: 'syz.5.900': attribute type 10 has an invalid length.
[  175.803550][ T5904] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  176.000132][ T9053] fuse: Bad value for 'fd'
[  176.001817][ T5904] usb 11-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  176.012924][ T5904] usb 11-1: config 0 interface 0 has no altsetting 0
[  176.027347][ T5904] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  176.033050][ T5904] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  176.043045][ T5904] usb 11-1: Product: syz
[  176.044949][ T5904] usb 11-1: Manufacturer: syz
[  176.050410][ T5904] usb 11-1: SerialNumber: syz
[  176.081669][ T5904] usb 11-1: config 0 descriptor??
[  176.085117][ T9044] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  176.095521][ T5904] usb 11-1: selecting invalid altsetting 0
[  176.329565][ T5904] usb 11-1: USB disconnect, device number 5
[  176.370782][ T9068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9068 comm=syz.0.906
[  176.869403][ T5867] usb 9-1: USB disconnect, device number 14
[  176.965702][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  176.965751][   T40] audit: type=1400 audit(176.864:914): avc:  denied  { write } for  pid=9080 comm="syz.5.909" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  176.966676][ T9082] random: crng reseeded on system resumption
[  176.969364][   T40] audit: type=1400 audit(176.864:915): avc:  denied  { open } for  pid=9080 comm="syz.5.909" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  177.019398][   T40] audit: type=1400 audit(176.914:916): avc:  denied  { listen } for  pid=9081 comm="syz.6.910" lport=33599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  177.135130][   T40] audit: type=1400 audit(177.034:917): avc:  denied  { getopt } for  pid=9086 comm="syz.6.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  177.310775][ T9103] netlink: 'syz.4.916': attribute type 1 has an invalid length.
[  177.338033][ T9103] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[  177.341469][   T40] audit: type=1400 audit(177.234:918): avc:  denied  { create } for  pid=9093 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  177.359437][   T40] audit: type=1400 audit(177.254:919): avc:  denied  { sys_admin } for  pid=9093 comm="syz.0.913" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  177.821618][   T40] audit: type=1400 audit(177.714:920): avc:  denied  { setopt } for  pid=9122 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  178.058025][ T9130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9130 comm=syz.0.921
[  178.068840][   T40] audit: type=1400 audit(177.964:921): avc:  denied  { ioctl } for  pid=9129 comm="syz.0.921" path="socket:[26393]" dev="sockfs" ino=26393 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  178.076215][ T9130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9130 comm=syz.0.921
[  178.134819][  T844] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  178.249829][   T40] audit: type=1400 audit(178.144:922): avc:  denied  { nlmsg_read } for  pid=9135 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  178.257396][   T40] audit: type=1400 audit(178.144:923): avc:  denied  { mounton } for  pid=9135 comm="syz.0.923" path="/260/file1/file0" dev="autofs" ino=27313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  178.293311][  T844] usb 9-1: Using ep0 maxpacket: 32
[  178.304408][  T844] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.309371][  T844] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.316362][  T844] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.337805][  T844] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  178.342840][  T844] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  178.347527][  T844] usb 9-1: Product: syz
[  178.349946][  T844] usb 9-1: Manufacturer: syz
[  178.352150][  T844] usb 9-1: SerialNumber: syz
[  178.367906][  T844] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input17
[  178.615638][ T9137] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor)
[  178.630043][ T9137] program syz.4.920 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.649772][   T24] usb 9-1: USB disconnect, device number 15
[  178.672781][   T24] appletouch 9-1:1.0: input: appletouch disconnected
[  178.944301][ T9145] ip6t_srh: unknown srh match flags  4000
[  179.038597][ T9150] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.049620][ T9150] 8021q: adding VLAN 0 to HW filter on device bond2
[  179.062929][ T9150] batman_adv: batadv0: Interface activated: gretap2
[  179.070373][ T6063] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  179.083797][ T6063] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  179.167021][ T9153] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  179.193846][ T6075] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.210026][ T6075] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  179.333406][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.337144][ T6063] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  179.464106][ T6075] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.467655][ T6075] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  179.583428][ T6074] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  179.586737][ T6074] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  179.592939][ T9166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  179.694375][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  180.152988][ T9170] set match dimension is over the limit!
[  180.286873][ T9175] __nla_validate_parse: 2 callbacks suppressed
[  180.286892][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.936'.
[  180.449240][ T9185] netlink: 104 bytes leftover after parsing attributes in process `syz.4.939'.
[  180.530955][ T9191] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  180.533608][ T9191] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  180.538756][ T9191] vhci_hcd vhci_hcd.0: Device attached
[  180.555698][ T9192] vhci_hcd: connection closed
[  180.558501][ T6068] vhci_hcd vhci_hcd.5: stop threads
[  180.572921][ T6068] vhci_hcd vhci_hcd.5: release socket
[  180.575367][ T6068] vhci_hcd vhci_hcd.5: disconnect device
[  180.576561][ T9198] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  180.578324][ T9195] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.943'.
[  181.128890][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.952'.
[  181.485782][ T9268] program syz.4.963 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  181.569129][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.573100][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.724842][ T9282] netlink: 32 bytes leftover after parsing attributes in process `syz.5.967'.
[  181.729533][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'.
[  181.803657][ T9285] netlink: 120 bytes leftover after parsing attributes in process `syz.6.970'.
[  182.698697][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  182.698717][   T40] audit: type=1400 audit(182.594:938): avc:  denied  { getopt } for  pid=9292 comm="syz.5.973" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  182.944237][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.103434][   T24] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  183.233361][   T24] usb 11-1: device descriptor read/64, error -71
[  183.473356][   T24] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  183.603390][   T24] usb 11-1: device descriptor read/64, error -71
[  183.710125][ T9302] netlink: 'syz.4.975': attribute type 1 has an invalid length.
[  183.713776][   T24] usb usb11-port1: attempt power cycle
[  183.750773][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'.
[  183.756418][ T9302] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.805629][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'.
[  183.832201][   T40] audit: type=1400 audit(183.724:939): avc:  denied  { read } for  pid=9304 comm="syz.4.976" name="file0" dev="9p" ino=79691855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  184.053516][   T24] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  184.074112][   T24] usb 11-1: device descriptor read/8, error -71
[  184.124472][ T6068] net_ratelimit: 81 callbacks suppressed
[  184.124506][ T6068] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.130920][ T6068] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  184.253461][ T6068] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.257246][ T6068] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  184.313362][ T5905] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  184.323508][   T24] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  184.344148][   T24] usb 11-1: device descriptor read/8, error -71
[  184.363461][ T6075] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.367167][ T6075] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  184.453679][   T24] usb usb11-port1: unable to enumerate USB device
[  184.473427][ T6075] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.475931][ T5905] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  184.480458][ T6075] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  184.482820][ T5905] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  184.489107][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  184.491782][ T5905] usb 9-1: SerialNumber: syz
[  184.594102][ T6075] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  184.597448][ T6075] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  184.950281][ T5905] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71
[  184.961018][ T5905] usb 9-1: USB disconnect, device number 16
[  185.027912][ T5770] Bluetooth: hci4: command 0x1003 tx timeout
[  185.027961][ T5766] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  185.504169][ T5766] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  185.510162][ T5766] Bluetooth: hci0: Injecting HCI hardware error event
[  185.522580][ T5766] Bluetooth: hci0: hardware error 0x00
[  185.726169][ T9320] netlink: 'syz.6.981': attribute type 5 has an invalid length.
[  185.787563][   T40] audit: type=1400 audit(185.684:940): avc:  denied  { map } for  pid=9322 comm="syz.6.982" path="socket:[30041]" dev="sockfs" ino=30041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  185.901758][   T40] audit: type=1804 audit(185.794:941): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.986" name="/newroot/130/file0" dev="tmpfs" ino=705 res=1 errno=0
[  185.925111][ T9338] ref_ctr increment failed for inode: 0x2c1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880358f6200
[  185.936648][ T9336] uprobe: syz.6.986:9336 failed to unregister, leaking uprobe
[  186.091579][   T40] audit: type=1400 audit(185.984:942): avc:  denied  { bind } for  pid=9339 comm="syz.6.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  186.105274][   T40] audit: type=1400 audit(185.984:943): avc:  denied  { listen } for  pid=9339 comm="syz.6.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  186.114772][   T40] audit: type=1400 audit(185.994:944): avc:  denied  { accept } for  pid=9339 comm="syz.6.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  186.124637][   T40] audit: type=1400 audit(185.994:945): avc:  denied  { write } for  pid=9339 comm="syz.6.987" path="socket:[29134]" dev="sockfs" ino=29134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  186.232127][ T9353] netlink: 'syz.6.991': attribute type 10 has an invalid length.
[  186.259018][ T9356] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  186.272631][ T9353] veth0_vlan: left promiscuous mode
[  186.278005][ T9353] veth0_vlan: entered promiscuous mode
[  186.285841][ T9353] team0: Device veth0_vlan failed to register rx_handler
[  186.486194][   T40] audit: type=1400 audit(186.384:946): avc:  denied  { create } for  pid=9365 comm="syz.5.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  186.575521][ T9379] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  186.660473][ T9381] netlink: 36 bytes leftover after parsing attributes in process `syz.5.998'.
[  186.705081][   T40] audit: type=1400 audit(186.604:947): avc:  denied  { checkpoint_restore } for  pid=9388 comm="syz.5.1001" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  186.902600][ T9384] netlink: 32 bytes leftover after parsing attributes in process `syz.6.999'.
[  187.108821][ T9412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1009'.
[  187.126512][ T9418] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1009'.
[  187.168731][ T9422] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1011'.
[  187.583556][ T5766] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  187.750244][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  187.750263][   T40] audit: type=1400 audit(187.644:953): avc:  denied  { accept } for  pid=9447 comm="syz.6.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  187.875551][ T5905] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  188.013328][ T5905] usb 9-1: device descriptor read/64, error -71
[  188.154994][   T40] audit: type=1400 audit(188.054:954): avc:  denied  { connect } for  pid=9451 comm="syz.5.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  188.179226][   T40] audit: type=1400 audit(188.074:955): avc:  denied  { read } for  pid=5447 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  188.263364][ T5905] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[  188.297634][   T40] audit: type=1400 audit(188.194:956): avc:  denied  { write } for  pid=9456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.389788][   T40] audit: type=1400 audit(188.284:957): avc:  denied  { write } for  pid=9460 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.393395][ T5905] usb 9-1: device descriptor read/64, error -71
[  188.513942][ T5905] usb usb9-port1: attempt power cycle
[  188.518456][   T40] audit: type=1400 audit(188.414:958): avc:  denied  { write } for  pid=9462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.575563][   T40] audit: type=1400 audit(188.474:959): avc:  denied  { write } for  pid=9465 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.667610][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1023'.
[  188.671129][ T9473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.678754][ T9473] IPv6: NLM_F_CREATE should be set when creating new route
[  188.681753][ T9473] IPv6: NLM_F_CREATE should be set when creating new route
[  188.688960][ T9473] xt_l2tp: v2 sid > 0xffff: 4294967294
[  188.738943][   T40] audit: type=1400 audit(188.634:960): avc:  denied  { read write } for  pid=9474 comm="syz.5.1024" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  188.750151][   T40] audit: type=1400 audit(188.634:961): avc:  denied  { open } for  pid=9474 comm="syz.5.1024" path="/111/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  188.770030][ T9478] use of bytesused == 0 is deprecated and will be removed in the future,
[  188.774943][ T9478] use the actual size instead.
[  188.840062][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1026'.
[  188.854334][ T5905] usb 9-1: new full-speed USB device number 19 using dummy_hcd
[  188.874245][ T5905] usb 9-1: device descriptor read/8, error -71
[  188.910476][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1027'.
[  188.915885][ T9486] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1027'.
[  188.997534][   T40] audit: type=1400 audit(188.894:962): avc:  denied  { write } for  pid=9488 comm="syz.5.1028" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  189.113762][ T5905] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[  189.134883][ T6070] net_ratelimit: 85 callbacks suppressed
[  189.134911][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.135083][ T5905] usb 9-1: device descriptor read/8, error -71
[  189.137492][ T6070] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  189.148812][ T9498] overlayfs: failed to resolve './file0': -2
[  189.208537][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1032'.
[  189.212541][ T9502] tipc: Started in network mode
[  189.215466][ T9502] tipc: Node identity 7f, cluster identity 4
[  189.218250][ T9502] tipc: Node number set to 127
[  189.253581][ T6069] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.253655][ T5905] usb usb9-port1: unable to enumerate USB device
[  189.257192][ T6069] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  189.363522][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.373963][ T6070] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  189.412922][ T9514] syzkaller0: entered promiscuous mode
[  189.419154][ T9514] syzkaller0: entered allmulticast mode
[  189.483511][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.488240][ T6070] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  189.593506][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  189.597867][ T6070] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  190.886988][ T9543] bond_slave_0: entered promiscuous mode
[  190.890090][ T9543] bond_slave_0: entered allmulticast mode
[  191.183461][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  191.322446][ T9578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.857852][ T9598] __nla_validate_parse: 1 callbacks suppressed
[  191.857874][ T9598] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1057'.
[  191.866407][ T9598] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1057'.
[  191.872879][ T9598] netlink: 'syz.5.1057': attribute type 1 has an invalid length.
[  191.964844][ T9600] hpfs: Bad magic ... probably not HPFS
[  191.986057][ T9600] hpfs: Bad magic ... probably not HPFS
[  193.087529][ T9623] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  193.770488][   T40] kauditd_printk_skb: 18 callbacks suppressed
[  193.770505][   T40] audit: type=1400 audit(193.664:981): avc:  denied  { execute } for  pid=9627 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  193.805078][   T40] audit: type=1400 audit(193.704:982): avc:  denied  { execute_no_trans } for  pid=9627 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  193.991107][ T5770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.008956][ T5770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.024631][ T5770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.038871][ T5770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.047062][ T5770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.103736][   T40] audit: type=1400 audit(193.964:983): avc:  denied  { mounton } for  pid=9630 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  194.205900][ T6069] net_ratelimit: 82 callbacks suppressed
[  194.205921][ T6069] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.228809][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.259757][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.284071][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.307375][   T59] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.311003][   T59] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  194.423464][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.443665][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.466383][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.505488][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  194.551071][   T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.558530][   T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.776672][   T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.781590][   T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.791363][ T9655] xt_hashlimit: size too large, truncated to 1048576
[  194.832597][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.836154][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.839961][ T9630] bridge_slave_0: entered allmulticast mode
[  194.845082][ T9630] bridge_slave_0: entered promiscuous mode
[  194.851578][   T40] audit: type=1400 audit(194.744:984): avc:  denied  { read } for  pid=9654 comm="syz.6.1068" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  194.851961][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.880104][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.883671][ T9630] bridge_slave_1: entered allmulticast mode
[  194.887225][ T9630] bridge_slave_1: entered promiscuous mode
[  194.945825][   T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.950261][   T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.972986][ T9660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1069'.
[  194.973580][ T9661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1069'.
[  195.021277][ T9630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.031579][ T9630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.058792][ T9630] team0: Port device team_slave_0 added
[  195.062927][ T9630] team0: Port device team_slave_1 added
[  195.070627][   T40] audit: type=1400 audit(194.974:985): avc:  denied  { create } for  pid=9662 comm="syz.6.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  195.081061][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'.
[  195.151448][   T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  195.157263][   T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.171840][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.177162][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.186572][ T9630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.192184][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.194640][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.205770][ T9630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.259977][ T9630] hsr_slave_0: entered promiscuous mode
[  195.266470][ T9630] hsr_slave_1: entered promiscuous mode
[  195.503446][   T59] bridge_slave_1: left allmulticast mode
[  195.505539][   T59] bridge_slave_1: left promiscuous mode
[  195.507587][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.512390][   T59] bridge_slave_0: left allmulticast mode
[  195.521375][   T59] bridge_slave_0: left promiscuous mode
[  195.523868][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.050540][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.058917][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.067304][   T59] bond0 (unregistering): Released all slaves
[  196.080936][   T59] bond1 (unregistering): Released all slaves
[  196.089633][   T40] audit: type=1326 audit(195.984:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9684 comm="syz.6.1076" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc11ff9ce59 code=0x0
[  196.098933][   T59] bond2 (unregistering): Released all slaves
[  196.116170][   T59] bond3 (unregistering): Released all slaves
[  196.155257][ T5770] Bluetooth: hci4: command tx timeout
[  196.535424][   T40] audit: type=1400 audit(196.434:987): avc:  denied  { mounton } for  pid=9690 comm="syz.4.1078" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  196.616877][   T40] audit: type=1400 audit(196.504:988): avc:  denied  { write } for  pid=9693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.678370][   T40] audit: type=1400 audit(196.574:989): avc:  denied  { write } for  pid=9698 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.716888][ T9691] hfsplus: unable to find HFS+ superblock
[  196.759128][ T9630] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  196.765560][ T9630] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  196.771450][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10
[  196.776836][ T9630] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  196.793789][ T9630] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  196.801481][ T9630] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  196.821691][ T9630] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  196.826070][ T9630] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  196.832907][ T9630] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  196.961001][   T40] audit: type=1400 audit(196.854:990): avc:  denied  { write } for  pid=9709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.044719][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.051829][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1080'.
[  197.056754][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1080'.
[  197.072680][   T59] hsr_slave_0: left promiscuous mode
[  197.086235][   T59] hsr_slave_1: left promiscuous mode
[  197.089492][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.094368][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.099909][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.103433][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.137380][ T9723] __vm_enough_memory: pid: 9723, comm: syz.4.1081, bytes: 4503599627366400 not enough memory for the allocation
[  197.140798][   T59] veth1_macvtap: left promiscuous mode
[  197.147893][   T59] veth0_macvtap: left promiscuous mode
[  197.151028][   T59] veth1_vlan: left promiscuous mode
[  197.154716][   T59] veth0_vlan: left promiscuous mode
[  197.623419][   T59] team0 (unregistering): Port device team_slave_1 removed
[  197.637209][   T59] team0 (unregistering): Port device team_slave_0 removed
[  197.826341][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11
[  197.848742][ T9630] 8021q: adding VLAN 0 to HW filter on device team0
[  197.861196][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.864700][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.882483][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.886041][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.185361][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12
[  198.223489][ T5770] Bluetooth: hci4: command tx timeout
[  198.435579][ T9630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.508955][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13
[  198.794191][ T9630] veth0_vlan: entered promiscuous mode
[  198.807143][ T9630] veth1_vlan: entered promiscuous mode
[  198.853614][ T9630] veth0_macvtap: entered promiscuous mode
[  198.855560][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  198.855574][   T40] audit: type=1400 audit(198.754:1002): avc:  denied  { append } for  pid=9790 comm="syz.6.1090" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  198.861339][ T9630] veth1_macvtap: entered promiscuous mode
[  198.873964][   T40] audit: type=1400 audit(198.774:1003): avc:  denied  { lock } for  pid=9790 comm="syz.6.1090" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  198.916792][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.933888][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.934392][   T40] audit: type=1400 audit(198.824:1004): avc:  denied  { ioctl } for  pid=9795 comm="syz.4.1092" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  198.950295][   T40] audit: type=1400 audit(198.824:1005): avc:  denied  { getattr } for  pid=9795 comm="syz.4.1092" path="uts:[4026532870]" dev="nsfs" ino=4026532870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  198.960521][ T6067] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.964868][ T6067] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.976376][ T6067] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.980880][ T6067] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.154752][ T9806] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1095'.
[  199.293341][ T6073] net_ratelimit: 171 callbacks suppressed
[  199.293361][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.312737][ T6051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.318345][ T6051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.320459][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.334636][ T6073] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  199.383074][ T6054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.389395][ T6054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.405965][   T40] audit: type=1400 audit(199.294:1006): avc:  denied  { mounton } for  pid=9630 comm="syz-executor" path="/syzkaller.e9oo7V/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  199.417237][   T40] audit: type=1400 audit(199.304:1007): avc:  denied  { mounton } for  pid=9630 comm="syz-executor" path="/syzkaller.e9oo7V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  199.430397][   T40] audit: type=1400 audit(199.304:1008): avc:  denied  { mounton } for  pid=9630 comm="syz-executor" path="/syzkaller.e9oo7V/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  199.442116][   T40] audit: type=1400 audit(199.314:1009): avc:  denied  { mounton } for  pid=9630 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  199.445930][ T6054] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.456565][   T40] audit: type=1400 audit(199.314:1010): avc:  denied  { mount } for  pid=9630 comm="syz-executor" name="/" dev="gadgetfs" ino=10466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  199.467495][   T40] audit: type=1400 audit(199.314:1011): avc:  denied  { mounton } for  pid=9630 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  199.474653][ T6054] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  199.488845][ T9818] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1098'.
[  199.549777][ T9822] netlink: 'syz.4.1100': attribute type 1 has an invalid length.
[  199.594177][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.598614][ T6073] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  199.615140][ T9826] SELinux: ebitmap: start bit 0 comes after start bit 0
[  199.621490][ T9826] SELinux: failed to load policy
[  199.625727][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1064'.
[  199.713797][ T6051] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.716851][ T6051] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  199.823585][ T6054] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  199.943754][ T5721] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  200.103532][ T5721] usb 9-1: Using ep0 maxpacket: 8
[  200.113442][ T5721] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  200.118095][ T5721] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.122861][ T5721] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  200.127354][ T5721] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  200.132092][ T5721] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.140009][ T5721] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  200.163797][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  200.169096][ T5721] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.191316][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1106'.
[  200.199430][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1106'.
[  200.204746][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1106'.
[  200.313548][ T5770] Bluetooth: hci4: command tx timeout
[  200.399203][ T5721] usb 9-1: usb_control_msg returned -32
[  200.401005][ T5721] usbtmc 9-1:16.0: can't read capabilities
[  200.554599][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1109'.
[  200.647659][ T9862] xt_hashlimit: size too large, truncated to 1048576
[  200.752821][ T9868] usbtmc 9-1:16.0: stb usb_control_msg returned -32
[  200.758213][   T39] usb 9-1: USB disconnect, device number 21
[  201.052413][ T9876] xt_CT: No such helper "pptp"
[  201.142913][ T9881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27667 sclass=netlink_route_socket pid=9881 comm=syz.6.1112
[  201.178686][ T9882] netlink: 'syz.7.1111': attribute type 5 has an invalid length.
[  201.365791][ T9895] program syz.6.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  201.484470][ T9907] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  201.490771][ T9907] overlayfs: missing 'lowerdir'
[  201.796157][ T9937] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1123'.
[  202.283945][ T9954] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1131'.
[  202.454890][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1129'.
[  202.605091][ T9975] loop5: detected capacity change from 0 to 7
[  202.662528][ T9975] Dev loop5: unable to read RDB block 7
[  202.664532][ T9975]  loop5: unable to read partition table
[  202.666518][ T9975] loop5: partition table beyond EOD, truncated
[  202.668463][ T9975] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  202.801940][ T9984] binder: 9982:9984 ioctl c06864a1 200000000200 returned -22
[  202.926621][ T9978] 8021q: adding VLAN 0 to HW filter on device bond2
[  203.029225][ T5905] hid_parser_main: 5 callbacks suppressed
[  203.029286][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.038096][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.040990][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.044518][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.047053][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.049808][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.052679][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.065021][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.067582][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.070017][ T5905] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  203.098476][ T5905] hid-generic 00A0:0006:0003.0004: hidraw1: <UNKNOWN> HID v0.05 Device [syz0] on syz0
[  203.234575][ T9998] fido_id[9998]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  203.449225][T10005] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1145'.
[  203.535538][T10009] binder: 10008:10009 ioctl 4018620d 0 returned -22
[  204.285089][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'.
[  204.294440][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'.
[  204.298373][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'.
[  204.310066][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'.
[  204.313785][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'.
[  204.343476][ T6066] net_ratelimit: 83 callbacks suppressed
[  204.343540][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.350515][ T6066] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  204.477577][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.492130][ T6073] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  204.537852][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1156'.
[  204.541501][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1156'.
[  204.572022][T10049] tmpfs: Bad value for 'huge'
[  204.603526][ T6054] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.619823][T10052] netlink: 'syz.6.1157': attribute type 4 has an invalid length.
[  204.624633][ T6054] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.644018][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.647648][ T6073] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  204.763516][ T6070] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  204.767061][ T6070] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  204.976195][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  204.976252][   T40] audit: type=1400 audit(460.877:1026): avc:  denied  { map } for  pid=10065 comm="syz.6.1161" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  205.023352][   T54] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  205.175006][   T54] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.180239][   T54] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.184957][   T54] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  205.190183][   T54] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  205.195901][   T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.203113][   T54] usb 12-1: config 0 descriptor??
[  205.623503][T10087] 9p: Could not find request transport: viitio
[  205.669225][   T54] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  205.763230][   T40] audit: type=1400 audit(461.657:1027): avc:  denied  { map } for  pid=10093 comm="syz.6.1168" path="socket:[34154]" dev="sockfs" ino=34154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  205.949861][   T40] audit: type=1400 audit(461.847:1028): avc:  denied  { write } for  pid=10055 comm="syz.7.1158" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  206.130392][T10122] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  206.135480][   T40] audit: type=1400 audit(462.037:1029): avc:  denied  { bind } for  pid=10121 comm="syz.6.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  206.145237][   T40] audit: type=1400 audit(462.037:1030): avc:  denied  { map } for  pid=10121 comm="syz.6.1176" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  206.155380][   T40] audit: type=1400 audit(462.037:1031): avc:  denied  { execute } for  pid=10121 comm="syz.6.1176" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  206.163742][   T40] audit: type=1400 audit(462.037:1032): avc:  denied  { write } for  pid=10121 comm="syz.6.1176" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  206.204018][   T40] audit: type=1400 audit(462.107:1033): avc:  denied  { connect } for  pid=10125 comm="syz.6.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  206.448881][T10134] Bluetooth: hci3: Frame reassembly failed (-84)
[  206.451845][T10134] Bluetooth: hci3: Frame reassembly failed (-84)
[  206.469076][ T6066] Bluetooth: hci3: Frame reassembly failed (-84)
[  206.471387][ T6066] Bluetooth: hci3: Frame reassembly failed (-84)
[  206.474966][T10134] Bluetooth: hci3: Frame reassembly failed (-84)
[  207.139233][ T5093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  207.147738][ T5093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  207.149466][   T40] audit: type=1400 audit(463.047:1034): avc:  denied  { setcurrent } for  pid=10141 comm="syz.4.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  207.158264][ T5093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.168422][ T5905] usb 12-1: reset high-speed USB device number 2 using dummy_hcd
[  207.181542][ T5093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.192874][ T5093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  207.645404][T10166] __nla_validate_parse: 13 callbacks suppressed
[  207.645425][T10166] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1188'.
[  207.757683][T10139] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.760248][T10139] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.764358][T10139] bridge_slave_0: entered allmulticast mode
[  207.767717][T10139] bridge_slave_0: entered promiscuous mode
[  207.771571][T10139] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.774517][T10139] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.777026][T10139] bridge_slave_1: entered allmulticast mode
[  207.780194][T10139] bridge_slave_1: entered promiscuous mode
[  207.781497][T10174] binder_alloc: 10173: binder_alloc_buf size -16 failed, no address space
[  207.790071][T10174] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  207.823794][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  207.852000][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.854682][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1191'.
[  207.863463][T10187] fuse: Unknown parameter 'bd'
[  207.893912][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.927519][T10139] team0: Port device team_slave_0 added
[  207.933695][T10139] team0: Port device team_slave_1 added
[  207.970316][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.973874][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.987223][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.994637][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.998180][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.012295][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.064959][T10139] hsr_slave_0: entered promiscuous mode
[  208.069155][T10139] hsr_slave_1: entered promiscuous mode
[  208.072271][T10139] debugfs: 'hsr0' already exists in 'hsr'
[  208.074936][T10139] Cannot create hsr debugfs directory
[  208.155959][   T40] audit: type=1400 audit(464.057:1035): avc:  denied  { execute } for  pid=10197 comm="syz.4.1196" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  208.163389][T10198] netlink: 'syz.4.1196': attribute type 21 has an invalid length.
[  208.172597][T10198] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1196'.
[  208.178474][T10198] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22
[  208.296696][T10139] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  208.306303][T10139] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  208.309529][T10139] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  208.314520][T10139] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  208.317739][T10139] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  208.322871][T10139] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  208.326789][T10139] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  208.331972][T10139] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  208.410832][T10139] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.430618][T10139] 8021q: adding VLAN 0 to HW filter on device team0
[  208.439406][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.442768][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.457731][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.461042][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.464344][ T5766] Bluetooth: hci3: command 0x1003 tx timeout
[  208.470035][ T5770] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  208.524560][T10139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  208.528494][T10139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.563034][ T1470] usb 12-1: USB disconnect, device number 2
[  208.991037][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.119690][T10249] netlink: 'syz.7.1203': attribute type 39 has an invalid length.
[  209.263444][ T5770] Bluetooth: hci5: command tx timeout
[  209.305759][T10139] veth0_vlan: entered promiscuous mode
[  209.317159][T10139] veth1_vlan: entered promiscuous mode
[  209.345803][T10139] veth0_macvtap: entered promiscuous mode
[  209.358354][T10139] veth1_macvtap: entered promiscuous mode
[  209.375290][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.392282][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.403940][ T6067] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.407912][ T6067] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.412954][ T6067] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.420784][ T6067] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.443358][ T6067] net_ratelimit: 101 callbacks suppressed
[  209.443379][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.483466][ T5770] Bluetooth: hci4: ISO packet for unknown connection handle 0
[  209.512080][ T6054] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.517786][ T6054] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  209.563053][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.569517][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.618794][ T6067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.627797][ T6067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.633391][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.656713][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.662022][ T6073] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  209.735710][T10270] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  209.773988][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.777089][ T6067] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  209.869245][T10286] binder: 10285:10286 ioctl c0306201 200000000640 returned -22
[  209.872532][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'.
[  209.884898][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.904865][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  209.926544][T10290] netlink: 'syz.4.1213': attribute type 11 has an invalid length.
[  209.929644][T10290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1213'.
[  209.978335][T10292] can0: slcan on ttyS3.
[  210.046621][T10296] netlink: 'syz.4.1217': attribute type 1 has an invalid length.
[  210.102870][T10291] can0 (unregistered): slcan off ttyS3.
[  210.103303][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  210.103314][   T40] audit: type=1400 audit(465.997:1043): avc:  denied  { write } for  pid=10299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  210.103594][   T24] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  210.191190][   T40] audit: type=1400 audit(466.087:1044): avc:  denied  { write } for  pid=10306 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  210.255766][   T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.263516][   T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.270756][   T24] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  210.280796][   T24] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  210.288793][   T40] audit: type=1400 audit(466.187:1045): avc:  denied  { write } for  pid=10314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  210.297283][   T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.312567][   T24] usb 13-1: config 0 descriptor??
[  210.379426][   T40] audit: type=1400 audit(466.277:1046): avc:  denied  { write } for  pid=10320 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  210.505894][   T40] audit: type=1400 audit(466.407:1047): avc:  denied  { write } for  pid=10324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  210.561461][T10329] CUSE: unknown device info ""
[  210.563423][T10329] CUSE: zero length info key specified
[  210.581251][   T40] audit: type=1400 audit(466.477:1048): avc:  denied  { write } for  pid=10328 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  210.743859][   T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  210.755448][   T24] usb 13-1: USB disconnect, device number 2
[  210.808715][T10335] fido_id[10335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb13/report_descriptor': No such file or directory
[  211.109290][T10345] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  211.118148][T10345] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  211.121694][T10345] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  211.277406][T10361] netlink: 'syz.8.1230': attribute type 12 has an invalid length.
[  211.280712][T10361] netlink: 'syz.8.1230': attribute type 29 has an invalid length.
[  211.288844][T10361] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1230'.
[  211.292046][T10361] netlink: 'syz.8.1230': attribute type 3 has an invalid length.
[  211.295784][T10361] netlink: 'syz.8.1230': attribute type 2 has an invalid length.
[  211.298668][T10361] netlink: 35 bytes leftover after parsing attributes in process `syz.8.1230'.
[  211.344823][ T5770] Bluetooth: hci5: command tx timeout
[  211.410692][   T40] audit: type=1400 audit(467.307:1049): avc:  denied  { lock } for  pid=10363 comm="syz.4.1231" path="socket:[35511]" dev="sockfs" ino=35511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  211.479702][   T40] audit: type=1400 audit(467.377:1050): avc:  denied  { write } for  pid=10364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.570812][   T40] audit: type=1400 audit(467.467:1051): avc:  denied  { write } for  pid=10380 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.611292][   T40] audit: type=1400 audit(467.507:1052): avc:  denied  { create } for  pid=10374 comm="syz.4.1234" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  211.798605][T10397] ufs: You didn't specify the type of your ufs filesystem
[  211.798605][T10397] 
[  211.798605][T10397] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  211.798605][T10397] 
[  211.798605][T10397] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  211.817655][T10397] ufs: ufstype=old is supported read-only
[  211.822366][T10397] ufs: ufs_fill_super(): bad magic number
[  211.828859][T10400] ufs: You didn't specify the type of your ufs filesystem
[  211.828859][T10400] 
[  211.828859][T10400] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  211.828859][T10400] 
[  211.828859][T10400] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  211.847403][T10400] ufs: ufstype=old is supported read-only
[  211.850540][T10400] ufs: ufs_fill_super(): bad magic number
[  211.879979][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1241'.
[  211.935173][T10415] IPv6: Can't replace route, no match found
[  211.935722][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'.
[  211.941331][T10413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'.
[  211.946969][T10415] IPv6: Can't replace route, no match found
[  212.012329][T10421] ªªªªªª: renamed from wg2 (while UP)
[  212.035197][T10421] netlink: 'syz.4.1247': attribute type 11 has an invalid length.
[  212.140771][T10428] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  212.240162][T10438] bond0: Error: Cannot enslave bond to itself.
[  212.297863][T10435] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  212.307453][T10435] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  212.605853][ T6199] block nbd64: NBD_DISCONNECT
[  212.738202][T10454] __nla_validate_parse: 2 callbacks suppressed
[  212.738215][T10454] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1254'.
[  212.933120][T10475] cgroup: Bad value for 'name'
[  212.933231][T10461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10461 comm=syz.8.1257
[  213.058687][T10482] netlink: 'syz.6.1263': attribute type 3 has an invalid length.
[  213.186537][T10488] trusted_key: encrypted_key: master key parameter '' is invalid
[  213.256737][T10480] XFS (nbd8): SB validate failed with error -5.
[  213.396591][T10501] input: syz0 as /devices/virtual/input/input20
[  213.430164][ T5770] Bluetooth: hci5: command tx timeout
[  213.561999][T10508] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1269'.
[  213.578997][T10508] input: syz1 as /devices/virtual/input/input21
[  213.801898][T10528] batman_adv: batadv0: Adding interface: dummy0
[  213.804725][T10528] batman_adv: batadv0: Interface activated: dummy0
[  213.853968][ T5856] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  213.872932][T10529] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.875904][T10529] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.969736][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.978965][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.023640][ T5856] usb 13-1: Using ep0 maxpacket: 16
[  214.027740][ T5856] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  214.032062][ T5856] usb 13-1: config 0 interface 0 has no altsetting 0
[  214.037486][ T5856] usb 13-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  214.041034][ T5856] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.044641][ T5856] usb 13-1: Product: syz
[  214.046777][ T5856] usb 13-1: Manufacturer: syz
[  214.048324][ T5856] usb 13-1: SerialNumber: syz
[  214.051534][ T5856] usb 13-1: config 0 descriptor??
[  214.127129][T10529] bridge1: left promiscuous mode
[  214.129362][T10529] bridge1: left allmulticast mode
[  214.136041][T10529] bridge2: left allmulticast mode
[  214.147929][T10529] sit1: left allmulticast mode
[  214.172085][ T6073] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.175949][ T6073] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.179827][ T6073] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.184969][ T6073] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.188906][ T6073] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.192884][ T6073] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.196560][ T6073] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.201130][ T6073] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.262765][    C3] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  214.270352][ T5856] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input22
[  214.304267][ T5856] imon:send_packet: packet tx failed (-71)
[  214.324638][ T5856] imon 13-1:0.0: panel buttons/knobs setup failed
[  214.383647][ T5856] rc_core: IR keymap rc-imon-pad not found
[  214.386965][ T5856] Registered IR keymap rc-empty
[  214.391548][ T5856] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  214.397055][ T5856] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  214.407584][ T5856] imon:send_packet: packet tx failed (-71)
[  214.425308][ T5856] imon 13-1:0.0: remote input dev register failed
[  214.429840][ T5856] imon 13-1:0.0: imon_init_intf0: rc device setup failed
[  214.448306][T10538] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.1278'.
[  214.486980][ T5856] imon 13-1:0.0: unable to initialize intf0, err 0
[  214.491065][ T5856] imon:imon_probe: failed to initialize context!
[  214.494514][ T5856] imon 13-1:0.0: unable to register, err -19
[  214.501143][ T5856] usb 13-1: USB disconnect, device number 3
[  214.553691][ T6073] net_ratelimit: 122 callbacks suppressed
[  214.553714][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.559697][ T6073] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  214.669635][T10549] netlink: 'syz.4.1281': attribute type 1 has an invalid length.
[  214.673393][ T6054] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.690727][T10549] 8021q: adding VLAN 0 to HW filter on device bond3
[  214.703325][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.723620][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.753774][ T6051] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.757209][ T6051] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  214.823619][ T5856] usb 13-1: new full-speed USB device number 4 using dummy_hcd
[  214.864157][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  214.868003][ T6073] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  214.974128][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  215.007699][ T5856] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  215.012574][ T5856] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[  215.018478][ T5856] usb 13-1: config 0 interface 0 has no altsetting 0
[  215.026713][ T5856] usb 13-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  215.030596][ T5856] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.034425][ T5856] usb 13-1: Product: syz
[  215.036875][ T5856] usb 13-1: Manufacturer: syz
[  215.039773][ T5856] usb 13-1: SerialNumber: syz
[  215.046922][ T5856] usb 13-1: config 0 descriptor??
[  215.050769][T10511] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  215.261818][    C3] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  215.270167][ T5856] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input24
[  215.300367][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  215.300450][   T40] audit: type=1400 audit(471.197:1060): avc:  denied  { read } for  pid=10571 comm="syz.7.1282" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  215.314601][   T40] audit: type=1400 audit(471.207:1061): avc:  denied  { read } for  pid=10571 comm="syz.7.1282" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  215.322894][   T40] audit: type=1400 audit(471.207:1062): avc:  denied  { open } for  pid=10571 comm="syz.7.1282" path="/32/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  215.323360][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1282'.
[  215.334314][   T40] audit: type=1400 audit(471.207:1063): avc:  denied  { read } for  pid=10571 comm="syz.7.1282" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  215.338112][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1282'.
[  215.346892][   T40] audit: type=1400 audit(471.207:1064): avc:  denied  { read } for  pid=10571 comm="syz.7.1282" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  215.363369][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1282'.
[  215.503994][ T5770] Bluetooth: hci5: command tx timeout
[  215.553535][ T5856] rc_core: IR keymap rc-imon-pad not found
[  215.557211][ T5856] Registered IR keymap rc-empty
[  215.559464][ T5856] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  215.566402][ T5856] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  215.685623][ T5856] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0
[  215.692829][ T5856] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input25
[  215.702056][ T5856] imon 13-1:0.0: iMON device (15c2:0045, intf0) on usb<13:4> initialized
[  216.020140][T10600] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  216.021293][T10600] 
@0Ù: renamed from bond_slave_1 (while UP)
[  216.075912][T10600] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  216.206129][ T4773] usb 13-1: USB disconnect, device number 4
[  216.303470][T10610] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1290'.
[  216.414807][ T5856] IPVS: starting estimator thread 0...
[  216.504358][T10614] IPVS: using max 45 ests per chain, 108000 per kthread
[  216.523239][   T40] audit: type=1400 audit(472.417:1065): avc:  denied  { module_load } for  pid=10615 comm="syz.6.1292" path="/sys/kernel/hardlockup_count" dev="sysfs" ino=66484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  216.773345][ T5856] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  216.825032][T10636] netlink: 750 bytes leftover after parsing attributes in process `syz.8.1299'.
[  216.887216][   T40] audit: type=1400 audit(472.787:1066): avc:  denied  { watch_mount } for  pid=10640 comm="syz.8.1301" path="/15" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  216.944673][ T5856] usb 9-1: not running at top speed; connect to a high speed hub
[  216.948399][ T5856] usb 9-1: config 1 interface 0 altsetting 58 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  216.953103][ T5856] usb 9-1: config 1 interface 0 altsetting 58 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  216.961732][ T5856] usb 9-1: config 1 interface 0 has no altsetting 0
[  216.967304][ T5856] usb 9-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.40
[  216.970739][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.974470][ T5856] usb 9-1: Product: syz
[  216.977358][ T5856] usb 9-1: Manufacturer: à°‰
[  216.979694][ T5856] usb 9-1: SerialNumber: syz
[  216.994694][T10648] overlayfs: failed to resolve './file1': -2
[  216.999465][T10620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  217.003872][T10620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  217.010413][   T40] audit: type=1400 audit(472.907:1067): avc:  denied  { execute } for  pid=10649 comm="syz.7.1304" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  217.149227][   T40] audit: type=1400 audit(473.047:1068): avc:  denied  { setopt } for  pid=10651 comm="syz.8.1305" lport=38418 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  217.174496][   T40] audit: type=1400 audit(473.067:1069): avc:  denied  { getopt } for  pid=10651 comm="syz.8.1305" lport=38418 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  217.391833][T10670] xt_bpf: check failed: parse error
[  217.441306][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.471161][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.480437][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.494502][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.499869][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1314'.
[  217.519240][ T5856] usbhid 9-1:1.0: can't add hid device: -71
[  217.522238][ T5856] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  217.527066][T10674] netlink: 'syz.6.1314': attribute type 5 has an invalid length.
[  217.575147][ T5856] usb 9-1: USB disconnect, device number 22
[  217.644227][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1315'.
[  217.670562][T10684] xfrm1: entered promiscuous mode
[  217.672753][T10684] xfrm1: entered allmulticast mode
[  217.677442][T10686] dummy0: entered promiscuous mode
[  217.685038][T10686] dummy0: entered allmulticast mode
[  217.942669][T10709] __nla_validate_parse: 1 callbacks suppressed
[  217.942689][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1322'.
[  218.309477][T10719] bond4: option mode: invalid value (254)
[  218.314121][T10719] bond4 (unregistering): Released all slaves
[  218.744871][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1329'.
[  218.953321][   T50] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  219.085582][T10742] bridge0: port 3(ipvlan2) entered blocking state
[  219.089000][T10742] bridge0: port 3(ipvlan2) entered disabled state
[  219.092640][T10742] ipvlan2: entered allmulticast mode
[  219.096134][T10742] bridge0: entered allmulticast mode
[  219.105208][   T50] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  219.106578][T10742] ipvlan2: left allmulticast mode
[  219.113104][T10742] bridge0: left allmulticast mode
[  219.118858][   T50] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  219.129959][   T50] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  219.134117][   T50] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  219.142121][   T50] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  219.150549][   T50] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  219.157320][T10748] ip6erspan0: entered promiscuous mode
[  219.157546][   T50] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  219.166146][   T50] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  219.169414][   T50] usb 9-1: Product: syz
[  219.171384][   T50] usb 9-1: Manufacturer: syz
[  219.177067][T10737] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  219.194272][   T50] cdc_wdm 9-1:1.0: skipping garbage
[  219.198742][   T50] cdc_wdm 9-1:1.0: skipping garbage
[  219.213550][   T50] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  219.216280][   T50] cdc_wdm 9-1:1.0: Unknown control protocol
[  219.325600][T10763] syzkaller1: entered promiscuous mode
[  219.328084][T10763] syzkaller1: entered allmulticast mode
[  219.390358][    C3] wdm_int_callback: 122 callbacks suppressed
[  219.390384][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.395609][    C3] wdm_int_callback: 122 callbacks suppressed
[  219.395632][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.401027][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.404366][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.407881][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.410737][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.413511][ T5856] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  219.416708][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.419492][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.422656][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.425961][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.429673][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.432573][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.435812][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.438643][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.441289][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.444209][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.447505][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.450629][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.455488][    C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  219.458275][    C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  219.633335][ T5856] usb 11-1: Using ep0 maxpacket: 32
[  219.641892][ T5856] usb 11-1: config index 0 descriptor too short (expected 29220, got 36)
[  219.651525][ T5856] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  219.653565][ T6051] net_ratelimit: 85 callbacks suppressed
[  219.653588][ T6051] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.663284][ T5856] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81
[  219.671319][ T5856] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  219.673415][ T6051] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  219.681968][ T5856] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  219.687237][ T5856] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  219.693685][ T5856] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  219.697757][ T5856] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.714432][ T5856] usb 11-1: config 0 descriptor??
[  219.794994][ T6051] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.798582][ T6051] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  219.905769][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  219.911586][ T6067] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  219.926269][T10789] qrtr: Invalid version 0
[  219.929564][T10789] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1346'.
[  220.011331][ T5856] usblp 11-1:0.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  220.035657][ T6051] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.049721][ T6051] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  220.183358][ T6051] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  220.188989][ T6051] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  220.331308][ T4773] usb 11-1: USB disconnect, device number 10
[  220.353883][   T40] kauditd_printk_skb: 65 callbacks suppressed
[  220.353898][   T40] audit: type=1400 audit(476.257:1135): avc:  denied  { listen } for  pid=10810 comm="syz.8.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  220.358085][ T4773] usblp1: removed
[  220.538665][   T40] audit: type=1400 audit(476.437:1136): avc:  denied  { append } for  pid=10812 comm="syz.7.1353" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  220.609821][   T40] audit: type=1400 audit(476.507:1137): avc:  denied  { write } for  pid=10821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.709711][   T40] audit: type=1400 audit(476.607:1138): avc:  denied  { write } for  pid=10828 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.810607][T10831] MINIX-fs: blocksize too small for device
[  220.826709][   T40] audit: type=1400 audit(476.727:1139): avc:  denied  { write } for  pid=10837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.897676][   T40] audit: type=1400 audit(476.797:1140): avc:  denied  { write } for  pid=10845 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.962777][T10851] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  220.975041][T10851] VFS: Can't find a romfs filesystem on dev nullb0.
[  220.975041][T10851] 
[  221.131810][   T40] audit: type=1400 audit(477.027:1141): avc:  denied  { create } for  pid=10862 comm="syz.6.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  221.181096][T10864] ieee802154 phy1 wpan1: encryption failed: -22
[  221.188273][T10864] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  221.194727][   T40] audit: type=1400 audit(477.097:1142): avc:  denied  { setopt } for  pid=10862 comm="syz.6.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  221.213848][   T40] audit: type=1400 audit(477.097:1143): avc:  denied  { write } for  pid=10862 comm="syz.6.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  221.341199][T10873] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1372'.
[  221.372750][   T40] audit: type=1400 audit(477.267:1144): avc:  denied  { rename } for  pid=10872 comm="syz.7.1372" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  221.498883][ T5769] usb 9-1: USB disconnect, device number 23
[  221.814320][ T5721] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  221.841044][T10915] misc userio: The device must be registered before sending interrupts
[  221.943414][ T5721] usb 12-1: device descriptor read/64, error -71
[  222.183806][ T5721] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  222.323646][ T5721] usb 12-1: device descriptor read/64, error -71
[  222.435216][ T5721] usb usb12-port1: attempt power cycle
[  222.623297][ T5856] page_pool_release_retry() stalled pool shutdown: id 56, 1 inflight 60 sec
[  222.773489][ T5721] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  222.794070][ T5721] usb 12-1: device descriptor read/8, error -71
[  222.874627][T10922] FAULT_INJECTION: forcing a failure.
[  222.874627][T10922] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  222.881503][T10922] CPU: 2 UID: 0 PID: 10922 Comm: syz.6.1389 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  222.881535][T10922] Tainted: [L]=SOFTLOCKUP
[  222.881542][T10922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  222.881579][T10922] Call Trace:
[  222.881615][T10922]  <TASK>
[  222.881623][T10922]  dump_stack_lvl+0x100/0x190
[  222.881847][T10922]  should_fail_ex.cold+0x5/0xa
[  222.881924][T10922]  _copy_from_user+0x2e/0xd0
[  222.882036][T10922]  do_handle_open+0xeb/0xce0
[  222.882099][T10922]  ? __fget_files+0x21f/0x3d0
[  222.882121][T10922]  ? __pfx_do_handle_open+0x10/0x10
[  222.882138][T10922]  ? ksys_write+0x1ac/0x250
[  222.882162][T10922]  ? do_syscall_64+0x10b/0xf80
[  222.882218][T10922]  do_syscall_64+0x10b/0xf80
[  222.882238][T10922]  ? clear_bhb_loop+0x40/0x90
[  222.882257][T10922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.882271][T10922] RIP: 0033:0x7fc11ff9ce59
[  222.882286][T10922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.882301][T10922] RSP: 002b:00007fc120efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  222.882315][T10922] RAX: ffffffffffffffda RBX: 00007fc120215fa0 RCX: 00007fc11ff9ce59
[  222.882324][T10922] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  222.882331][T10922] RBP: 00007fc120efd090 R08: 0000000000000000 R09: 0000000000000000
[  222.882339][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.882347][T10922] R13: 00007fc120216038 R14: 00007fc120215fa0 R15: 00007ffc0359c978
[  222.882367][T10922]  </TASK>
[  223.033442][ T5721] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  223.054060][ T5721] usb 12-1: device descriptor read/8, error -71
[  223.165349][ T5721] usb usb12-port1: unable to enumerate USB device
[  223.270136][T10933] netlink: 'syz.4.1392': attribute type 4 has an invalid length.
[  223.374627][T10939] Cannot find map_set index 3 as target
[  223.414312][T10937] misc userio: Begin command sent, but we're already running
[  223.673586][ T4773] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  223.803454][ T4773] usb 11-1: device descriptor read/64, error -71
[  223.843507][ T5848] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  224.003309][ T5848] usb 9-1: Using ep0 maxpacket: 8
[  224.007788][ T5848] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  224.011461][ T5848] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  224.017026][ T5848] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  224.021735][ T5848] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  224.026294][ T5848] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.032730][ T5848] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  224.037889][ T5848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.053622][ T4773] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  224.185355][ T4773] usb 11-1: device descriptor read/64, error -71
[  224.247055][ T5848] usb 9-1: usb_control_msg returned -32
[  224.249210][ T5848] usbtmc 9-1:16.0: can't read capabilities
[  224.294460][ T4773] usb usb11-port1: attempt power cycle
[  224.414926][T10954] netlink: 'syz.8.1399': attribute type 1 has an invalid length.
[  224.431155][T10954] 8021q: adding VLAN 0 to HW filter on device bond2
[  224.443901][T10954] bond2: (slave veth0_to_bond): making interface the new active one
[  224.448403][T10954] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  224.604534][T10962] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  224.646984][T10968] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(10)
[  224.649591][T10968] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  224.652517][T10967] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  224.654796][T10967] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  224.659467][ T4773] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  224.661564][T10967] vhci_hcd vhci_hcd.0: Device attached
[  224.662595][T10968] vhci_hcd vhci_hcd.0: Device attached
[  224.663261][T10968] ªªªªªª: renamed from hsr0 (while UP)
[  224.684219][ T4773] usb 11-1: device descriptor read/8, error -71
[  224.714451][ T6067] net_ratelimit: 84 callbacks suppressed
[  224.714470][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.719127][ T6067] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  224.727483][T10978] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved
[  224.823673][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.827801][ T6067] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  224.933563][ T5769] usb 53-1: new high-speed USB device number 2 using vhci_hcd
[  224.933779][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  224.941410][ T4773] usb 11-1: new high-speed USB device number 14 using dummy_hcd
[  224.949701][ T6067] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  224.965366][ T4773] usb 11-1: device descriptor read/8, error -71
[  225.054282][ T6073] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  225.063399][ T6073] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  225.081961][ T4773] usb usb11-port1: unable to enumerate USB device
[  225.174092][ T6067] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  225.177024][ T6067] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  225.567738][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  225.567768][   T40] audit: type=1400 audit(481.467:1153): avc:  denied  { bind } for  pid=11007 comm="syz.7.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  225.592520][T11009] kernel profiling enabled (shift: 5)
[  226.408805][T11012] ipip0: entered allmulticast mode
[  226.421817][T11014] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1414'.
[  226.461052][T11016] FAULT_INJECTION: forcing a failure.
[  226.461052][T11016] name failslab, interval 1, probability 0, space 0, times 1
[  226.467292][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.6.1415 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  226.467324][T11016] Tainted: [L]=SOFTLOCKUP
[  226.467331][T11016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  226.467341][T11016] Call Trace:
[  226.467348][T11016]  <TASK>
[  226.467355][T11016]  dump_stack_lvl+0x100/0x190
[  226.467387][T11016]  should_fail_ex.cold+0x5/0xa
[  226.467415][T11016]  should_failslab+0xc2/0x120
[  226.467482][T11016]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  226.467511][T11016]  ? do_getname_kernel+0x5d/0x250
[  226.467539][T11016]  ? __pfx_stack_trace_save+0x10/0x10
[  226.467591][T11016]  do_getname_kernel+0x5d/0x250
[  226.467621][T11016]  do_file_open_root+0x1a4/0x5a0
[  226.467645][T11016]  ? __kasan_slab_free+0x5f/0x80
[  226.467664][T11016]  ? __pfx_do_file_open_root+0x10/0x10
[  226.467708][T11016]  ? do_raw_spin_lock+0x128/0x260
[  226.467737][T11016]  ? find_held_lock+0x2b/0x80
[  226.467756][T11016]  file_open_root+0x19b/0x3b0
[  226.467776][T11016]  ? __pfx_file_open_root+0x10/0x10
[  226.467792][T11016]  ? _raw_spin_unlock+0x28/0x50
[  226.467828][T11016]  do_handle_open+0xab0/0xce0
[  226.467852][T11016]  ? __pfx_do_handle_open+0x10/0x10
[  226.467876][T11016]  ? ksys_write+0x1ac/0x250
[  226.467906][T11016]  ? do_syscall_64+0x10b/0xf80
[  226.467932][T11016]  do_syscall_64+0x10b/0xf80
[  226.467958][T11016]  ? clear_bhb_loop+0x40/0x90
[  226.467983][T11016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.468002][T11016] RIP: 0033:0x7fc11ff9ce59
[  226.468019][T11016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.468037][T11016] RSP: 002b:00007fc120efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  226.468057][T11016] RAX: ffffffffffffffda RBX: 00007fc120215fa0 RCX: 00007fc11ff9ce59
[  226.468069][T11016] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  226.468080][T11016] RBP: 00007fc120efd090 R08: 0000000000000000 R09: 0000000000000000
[  226.468091][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.468101][T11016] R13: 00007fc120216038 R14: 00007fc120215fa0 R15: 00007ffc0359c978
[  226.468127][T11016]  </TASK>
[  226.493489][   T40] audit: type=1326 audit(482.387:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.585638][   T40] audit: type=1326 audit(482.387:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.595286][   T40] audit: type=1326 audit(482.387:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.607103][   T40] audit: type=1326 audit(482.387:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.616996][   T40] audit: type=1326 audit(482.387:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.628699][   T40] audit: type=1326 audit(482.427:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.638013][   T40] audit: type=1326 audit(482.427:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.648278][   T40] audit: type=1326 audit(482.427:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.658290][   T40] audit: type=1326 audit(482.427:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.7.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ea99ce59 code=0x7ffc0000
[  226.703423][ T5766] Bluetooth: hci3: command 0x1003 tx timeout
[  226.703536][ T5770] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  226.746589][ T5848] usb 9-1: USB disconnect, device number 24
[  226.997240][T11045] netlink: 'syz.4.1423': attribute type 7 has an invalid length.
[  227.017392][T11045] netlink: 'syz.4.1423': attribute type 7 has an invalid length.
[  227.067278][T11049] FAULT_INJECTION: forcing a failure.
[  227.067278][T11049] name failslab, interval 1, probability 0, space 0, times 0
[  227.071347][T11049] CPU: 2 UID: 0 PID: 11049 Comm: syz.7.1425 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  227.071376][T11049] Tainted: [L]=SOFTLOCKUP
[  227.071382][T11049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.071392][T11049] Call Trace:
[  227.071400][T11049]  <TASK>
[  227.071408][T11049]  dump_stack_lvl+0x100/0x190
[  227.071435][T11049]  should_fail_ex.cold+0x5/0xa
[  227.071461][T11049]  should_failslab+0xc2/0x120
[  227.071481][T11049]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  227.071506][T11049]  ? alloc_empty_file+0x5b/0x1c0
[  227.071535][T11049]  alloc_empty_file+0x5b/0x1c0
[  227.071559][T11049]  path_openat+0xe8/0x31a0
[  227.071584][T11049]  ? trace_kmem_cache_alloc+0xd5/0x100
[  227.071619][T11049]  ? __kasan_slab_alloc+0x89/0x90
[  227.071637][T11049]  ? __pfx_path_openat+0x10/0x10
[  227.071661][T11049]  ? __asan_memcpy+0x3c/0x60
[  227.071684][T11049]  ? do_getname_kernel+0x1be/0x250
[  227.071709][T11049]  do_file_open_root+0x2f6/0x5a0
[  227.071735][T11049]  ? __kasan_slab_free+0x5f/0x80
[  227.071753][T11049]  ? __pfx_do_file_open_root+0x10/0x10
[  227.071793][T11049]  ? do_raw_spin_lock+0x128/0x260
[  227.071817][T11049]  ? find_held_lock+0x2b/0x80
[  227.071837][T11049]  file_open_root+0x19b/0x3b0
[  227.071857][T11049]  ? __pfx_file_open_root+0x10/0x10
[  227.071875][T11049]  ? _raw_spin_unlock+0x28/0x50
[  227.071904][T11049]  do_handle_open+0xab0/0xce0
[  227.071924][T11049]  ? __pfx_do_handle_open+0x10/0x10
[  227.071945][T11049]  ? ksys_write+0x1ac/0x250
[  227.071969][T11049]  ? do_syscall_64+0x10b/0xf80
[  227.071993][T11049]  do_syscall_64+0x10b/0xf80
[  227.072015][T11049]  ? clear_bhb_loop+0x40/0x90
[  227.072036][T11049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.072052][T11049] RIP: 0033:0x7f75ea99ce59
[  227.072068][T11049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.072084][T11049] RSP: 002b:00007f75eb8a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  227.072101][T11049] RAX: ffffffffffffffda RBX: 00007f75eac15fa0 RCX: 00007f75ea99ce59
[  227.072112][T11049] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  227.072121][T11049] RBP: 00007f75eb8a0090 R08: 0000000000000000 R09: 0000000000000000
[  227.072131][T11049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.072140][T11049] R13: 00007f75eac16038 R14: 00007f75eac15fa0 R15: 00007fffdf91bf68
[  227.072163][T11049]  </TASK>
[  227.114694][T11051] IPVS: set_ctl: invalid protocol: 50 172.20.20.38:20003
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[  227.365898][T11062] 9pnet_virtio: no channels available for device syz
[  227.548979][T11054] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1427'.
[  227.649799][T11074] ------------[ cut here ]------------
[  227.652007][T11074] 1
[  227.652018][T11074] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x23da/0x2bc0, CPU#1: syz.6.1435/11074
[  227.657604][T11074] Modules linked in:
[  227.659829][T11074] CPU: 1 UID: 0 PID: 11074 Comm: syz.6.1435 Tainted: G             L      syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  227.663432][T11074] Tainted: [L]=SOFTLOCKUP
[  227.666454][T11074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.671234][T11074] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0
[  227.675062][T11074] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 8f 69 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41
[  227.683750][T11074] RSP: 0018:ffffc90005a4f760 EFLAGS: 00010246
[  227.685926][T11074] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  227.689091][T11074] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0
[  227.692405][T11074] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009
[  227.695558][T11074] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0
[  227.698313][T11074] R13: 1ffff92000b49f3b R14: 0000000000000016 R15: 1ffff92000b49f05
[  227.700942][T11074] FS:  00007fc120efd6c0(0000) GS:ffff8880d646a000(0000) knlGS:0000000000000000
[  227.704125][T11074] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  227.706338][T11074] CR2: 00007fc11ff86480 CR3: 00000000437b7000 CR4: 0000000000352ef0
[  227.709163][T11074] Call Trace:
[  227.710677][T11074]  <TASK>
[  227.712195][T11074]  ? find_held_lock+0x2b/0x80
[  227.714576][T11074]  ? is_bpf_text_address+0x8a/0x1a0
[  227.716656][T11074]  ? is_bpf_text_address+0x8a/0x1a0
[  227.718302][T11074]  ? bpf_ksym_find+0x128/0x1c0
[  227.719837][T11074]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  227.721896][T11074]  ? is_bpf_text_address+0x94/0x1a0
[  227.723847][T11074]  ? kernel_text_address+0x8d/0x100
[  227.726141][T11074]  ? __pfx_widen_string+0x10/0x10
[  227.727932][T11074]  ? __kernel_text_address+0xd/0x30
[  227.730088][T11074]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  227.736254][T11074]  ? arch_stack_walk+0xa6/0xf0
[  227.737890][T11074]  ? stack_trace_save+0x8e/0xc0
[  227.739563][T11074]  ? __pfx_stack_trace_save+0x10/0x10
[  227.741327][T11074]  ? stack_depot_save_flags+0x27/0x9d0
[  227.743645][T11074]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  227.745963][T11074]  ? policy_nodemask+0xed/0x4f0
[  227.747880][T11074]  alloc_pages_mpol+0x1fb/0x540
[  227.749676][T11074]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  227.751583][T11074]  ? drm_syncobj_array_find+0x34/0x3b0
[  227.754087][T11074]  ___kmalloc_large_node+0xe5/0x120
[  227.756155][T11074]  __kmalloc_large_node_noprof+0x1c/0x70
[  227.758184][T11074]  __kmalloc_noprof+0x5be/0x850
[  227.759707][T11074]  drm_syncobj_array_find+0x34/0x3b0
[  227.761404][T11074]  drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0
[  227.763910][T11074]  ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[  227.767330][T11074]  ? drm_dev_exit+0x41/0x60
[  227.769086][T11074]  ? drm_dev_exit+0x41/0x60
[  227.770598][T11074]  drm_ioctl_kernel+0x1f3/0x3e0
[  227.772214][T11074]  ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[  227.774711][T11074]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  227.776435][T11074]  drm_ioctl+0x5e6/0xc60
[  227.777958][T11074]  ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[  227.780680][T11074]  ? __pfx_drm_ioctl+0x10/0x10
[  227.782687][T11074]  ? selinux_file_ioctl+0x13b/0x290
[  227.784786][T11074]  ? selinux_file_ioctl+0xb6/0x290
[  227.786580][T11074]  ? __pfx_drm_ioctl+0x10/0x10
[  227.788326][T11074]  __x64_sys_ioctl+0x18e/0x210
[  227.790079][T11074]  do_syscall_64+0x10b/0xf80
[  227.791761][T11074]  ? clear_bhb_loop+0x40/0x90
[  227.793718][T11074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.795884][T11074] RIP: 0033:0x7fc11ff9ce59
[  227.797355][T11074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.804916][T11074] RSP: 002b:00007fc120efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.807739][T11074] RAX: ffffffffffffffda RBX: 00007fc120215fa0 RCX: 00007fc11ff9ce59
[  227.810292][T11074] RDX: 0000200000000000 RSI: 00000000c01864cd RDI: 0000000000000003
[  227.813332][T11074] RBP: 00007fc120032d6f R08: 0000000000000000 R09: 0000000000000000
[  227.816015][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.818749][T11074] R13: 00007fc120216038 R14: 00007fc120215fa0 R15: 00007ffc0359c978
[  227.821794][T11074]  </TASK>
[  227.822928][T11074] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  227.825364][T11074] CPU: 1 UID: 0 PID: 11074 Comm: syz.6.1435 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  227.828839][T11074] Tainted: [L]=SOFTLOCKUP
[  227.830419][T11074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.834325][T11074] Call Trace:
[  227.835485][T11074]  <TASK>
[  227.836426][T11074]  dump_stack_lvl+0x100/0x190
[  227.837928][T11074]  vpanic+0x552/0x970
[  227.839218][T11074]  ? __pfx_vpanic+0x10/0x10
[  227.840667][T11074]  panic+0xd1/0xe0
[  227.841906][T11074]  ? __pfx_panic+0x10/0x10
[  227.843376][T11074]  ? check_panic_on_warn+0x1f/0x90
[  227.845126][T11074]  check_panic_on_warn.cold+0x19/0x34
[  227.847303][T11074]  ? __alloc_frozen_pages_noprof+0x23da/0x2bc0
[  227.850116][T11074]  __warn.cold+0x191/0x328
[  227.851606][T11074]  __report_bug+0x296/0x3d0
[  227.853218][T11074]  ? __alloc_frozen_pages_noprof+0x23da/0x2bc0
[  227.855203][T11074]  ? __pfx___report_bug+0x10/0x10
[  227.856820][T11074]  ? __lock_acquire+0x4a5/0x2630
[  227.858464][T11074]  ? __lock_acquire+0x4a5/0x2630
[  227.860060][T11074]  ? __alloc_frozen_pages_noprof+0x23da/0x2bc0
[  227.862176][T11074]  report_bug+0xb2/0x220
[  227.863580][T11074]  ? __alloc_frozen_pages_noprof+0x23da/0x2bc0
[  227.865785][T11074]  handle_bug+0x16a/0x2a0
[  227.867319][T11074]  exc_invalid_op+0x17/0x50
[  227.869406][T11074]  asm_exc_invalid_op+0x1a/0x20
[  227.871178][T11074] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0
[  227.873711][T11074] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 8f 69 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41
[  227.880798][T11074] RSP: 0018:ffffc90005a4f760 EFLAGS: 00010246
[  227.882960][T11074] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  227.885251][T11074] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0
[  227.888051][T11074] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009
[  227.890805][T11074] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0
[  227.893616][T11074] R13: 1ffff92000b49f3b R14: 0000000000000016 R15: 1ffff92000b49f05
[  227.896387][T11074]  ? find_held_lock+0x2b/0x80
[  227.898081][T11074]  ? is_bpf_text_address+0x8a/0x1a0
[  227.900301][T11074]  ? is_bpf_text_address+0x8a/0x1a0
[  227.902736][T11074]  ? bpf_ksym_find+0x128/0x1c0
[  227.904627][T11074]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  227.906838][T11074]  ? is_bpf_text_address+0x94/0x1a0
[  227.908506][T11074]  ? kernel_text_address+0x8d/0x100
[  227.910159][T11074]  ? __pfx_widen_string+0x10/0x10
[  227.911730][T11074]  ? __kernel_text_address+0xd/0x30
[  227.913453][T11074]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  227.915537][T11074]  ? arch_stack_walk+0xa6/0xf0
[  227.917574][T11074]  ? stack_trace_save+0x8e/0xc0
[  227.919731][T11074]  ? __pfx_stack_trace_save+0x10/0x10
[  227.922624][T11074]  ? stack_depot_save_flags+0x27/0x9d0
[  227.924965][T11074]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  227.927078][T11074]  ? policy_nodemask+0xed/0x4f0
[  227.928666][T11074]  alloc_pages_mpol+0x1fb/0x540
[  227.930288][T11074]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  227.932072][T11074]  ? drm_syncobj_array_find+0x34/0x3b0
[  227.933910][T11074]  ___kmalloc_large_node+0xe5/0x120
[  227.935580][T11074]  __kmalloc_large_node_noprof+0x1c/0x70
[  227.937404][T11074]  __kmalloc_noprof+0x5be/0x850
[  227.938982][T11074]  drm_syncobj_array_find+0x34/0x3b0
[  227.940724][T11074]  drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0
[  227.942890][T11074]  ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[  227.945245][T11074]  ? drm_dev_exit+0x41/0x60
[  227.946872][T11074]  ? drm_dev_exit+0x41/0x60
[  227.948525][T11074]  drm_ioctl_kernel+0x1f3/0x3e0
[  227.950271][T11074]  ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[  227.952666][T11074]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  227.954469][T11074]  drm_ioctl+0x5e6/0xc60
[  227.955841][T11074]  ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10
[  227.957959][T11074]  ? __pfx_drm_ioctl+0x10/0x10
[  227.959546][T11074]  ? selinux_file_ioctl+0x13b/0x290
[  227.961446][T11074]  ? selinux_file_ioctl+0xb6/0x290
[  227.963565][T11074]  ? __pfx_drm_ioctl+0x10/0x10
[  227.965307][T11074]  __x64_sys_ioctl+0x18e/0x210
[  227.966811][T11074]  do_syscall_64+0x10b/0xf80
[  227.968271][T11074]  ? clear_bhb_loop+0x40/0x90
[  227.969815][T11074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.971680][T11074] RIP: 0033:0x7fc11ff9ce59
[  227.973343][T11074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.979974][T11074] RSP: 002b:00007fc120efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.982799][T11074] RAX: ffffffffffffffda RBX: 00007fc120215fa0 RCX: 00007fc11ff9ce59
[  227.985271][T11074] RDX: 0000200000000000 RSI: 00000000c01864cd RDI: 0000000000000003
[  227.987716][T11074] RBP: 00007fc120032d6f R08: 0000000000000000 R09: 0000000000000000
[  227.990247][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.993519][T11074] R13: 00007fc120216038 R14: 00007fc120215fa0 R15: 00007ffc0359c978
[  227.996871][T11074]  </TASK>
[  227.998904][T11074] Kernel Offset: disabled
[  228.000325][T11074] Rebooting in 86400 seconds..