last executing test programs:

1m44.581810353s ago: executing program 3 (id=436):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0)
writev(r1, &(0x7f0000000900)=[{0x0}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3)

1m44.496331281s ago: executing program 3 (id=437):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x2004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x13}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004408}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000001a40)="b4343a3060f5", 0x6)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x0, 0x240, 0x118, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x1, 0x0, [0xfffb, 0x20, 0x8000, 0x40, 0x26, 0x5c, 0xc, 0x9, 0x4, 0x1ff, 0xff, 0x7, 0x6, 0x14a, 0x1ff, 0x9ee], 0xf}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9cfd, 0xdb09}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0x0, 0xffffff00, 0xffffff00], [0xff, 0xff, 0xff, 0xff000000], 'ip6_vti0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x32, 0x80, 0x5, 0x10}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x8}}, @common=@srh={{0x30}, {0x73, 0x3, 0xf, 0x9, 0x9, 0x8, 0x214d}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0xffffffff, 0xff000000, 0xffffffff, 0xff0000ff], [0x0, 0xff000000, 0x0, 0xffffff00], 'ip_vti0\x00', 'wg1\x00', {0xff}, {}, 0xc, 0x8, 0x3, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x8, 0x17, 0x1, 0x2, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00', [0xffffffff, 0x80ffff7f, 0xffffff00, 0xff], [0x0, 0xff, 0xff000000, 0xffffffff], [0x0, 0xffffff00, 0xff, 0xffffffff], 0x2d44, 0xc}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)

1m44.366868361s ago: executing program 3 (id=441):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

1m44.361873938s ago: executing program 3 (id=442):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000))
r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/147)

1m29.473705983s ago: executing program 32 (id=434):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
r1 = io_uring_setup(0x972, &(0x7f0000000000)={0x0, 0xda15, 0x40000, 0x3, 0x250})
syz_ublk_setup_io_uring(0x168a, &(0x7f0000000080)={0x0, 0xcc2a, 0x4, 0x1, 0xa3, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f00000001c0)={0x0, 0xe, 0x64b2, 0x3})
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14, 0x80800)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@empty, @multicast2, <r4=>0x0}, &(0x7f00000002c0)=0xc)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r4, 0x1, 0x6, @random="a2426945ce91"}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8)
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, &(0x7f00000004c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x1a0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x4d, 0x8, "b567a88bea995d33bb67f5e0e08e6ebbde18d49644f8e525685ef5f3e75d1d6cdb0c9604f7f0845d3125455977bd18d6b960ca1388c3905da30cbc42b9642b6bddf44c3eb7fddce5c8"}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "d027ff6f3a81f62064055830b10215bd0d39a5b8fb03e95c9b836b0fa38598e50a172a202e3b2bceab18a4e12865833210c66292b5fa4d559b8e23969dded7961422d32e72ca50bf05e8819144604cca49dbb6e4d11f10b256f26262be1de86d36fa7278fadcc15782933c7a96c8c101f6749de841a88f8aab2e39"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x7c, 0x8, "df9ae709374f5a0fefe821d58f379e884ce947f935e47beb9e2e3b7309842339e63b49f4413965ede296268349130b6a12935c7505bef192f8004512863c765e63dd7feb26419df6f0fb3f9ef3d724418f04edbf2830f0ae530e86013521287358655d90e94c0bf01aa14ef2a3b247ba7d7174feba71dd32"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0xa0, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x80, 0x6, "550bb5cfbb564721de45faeae027c7e8c607a29e1e1e243a503e95b2409f6e4ce047e67bb4fe380e808915bbe879f176b35e4e1392fc82fbdad558b5a4dd93e1b8b71d9b0942a645d681ae6c75e8be4faa4811bf517296c1eca2774b72ef92894ca19428a06ed58f941e797809f2d84bc9b044e0a4be76786dbc4c86"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x671c493607ee3a45, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xf0, 0xd, 0x1, 0x0, "18c199f6d88b7bda228cf703ab2ca2b79ccab45ef2c2904b5141ebd1a90f09d1bc86ddfe765699671867d01ae4c0b78efacd5f505ec535cc60886052832ff2f8911fd595285fce1a98045e1bdddd823b37023f9f40f78be5ef27baf353f4e53e2d2a5458e1f9daf25a63e580bd6c042e17ebb3e6e41023834972b141a4b60a456868b5e17ccb3df8f9ecc8a41a816b1e47eca871e2c646124281e5b071d31910fda987276f2e53e6a039afe06a8e718eb138923e94f871a69cab737d6f5a04f7e614ef464fb1ea0cdfdd0ebf6830d78509bb61b9b28263f6f8ea21e6e917f52a1e1a3bfe0617be489bf9718c"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2a}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x430}, 0x1, 0x0, 0x0, 0x40800}, 0x48010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000000a00)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a80)={<r9=>0x0, @private, @remote}, &(0x7f0000000ac0)=0xc)
sendmsg$nl_route_sched(r8, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)=@newqdisc={0xc4, 0x24, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0xb}, {0x3}, {0xf, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xcf5}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x10, 0x1, 0x1, 0xc03, 0x3, 0x3}}, {0xa, 0x2, [0x6, 0x6, 0x6]}}, {{0x1c, 0x1, {0x7, 0x6, 0x3, 0x2, 0x0, 0x6, 0x1, 0x8}}, {0x14, 0x2, [0x9, 0x7, 0x5, 0x1, 0x9, 0xc5c, 0x4, 0x2]}}, {{0x1c, 0x1, {0x3, 0xe5, 0x8001, 0x59, 0x0, 0x6, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}]}, @qdisc_kind_options=@q_atm={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xec5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa8}]}, 0xc4}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4c08}, @CTA_ZONE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40)
ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000dc0)={0x0, @qipcrtr={0x2a, 0x3, 0xfffffffe}, @qipcrtr={0x2a, 0x4, 0x7ffe}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x6, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d80)='ipvlan1\x00', 0x48b9, 0x0, 0x5})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r7)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'syztnl1\x00', <r11=>r3, 0x2f, 0x4, 0x9, 0x6, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7, 0x4, 0x2}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xd0, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), r7)
sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, r12, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48850}, 0x80)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x40, r14, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x7a}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7b}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50000}, 0x1)
sendmsg$NL80211_CMD_SET_MPATH(r13, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x80, r14, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x74, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x11}, 0xc040)

1m28.403532637s ago: executing program 33 (id=451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r3, 0x0, &(0x7f0000000540)="ab", 0x1, 0x200})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000300)={0x28, 0x7, r3, 0x0, &(0x7f0000000600)="a1", 0x1, 0xffffffffffffff72})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000000440)='/', 0x1, 0xa})
r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, r5, 0x333, 0x0, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
file_getattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x18, 0x400)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x1110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}]}, 0x3c}}, 0x0)

1m28.365955035s ago: executing program 34 (id=442):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000))
r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/147)

1m26.311438634s ago: executing program 35 (id=460):
r0 = socket$inet6(0xa, 0x1, 0x6)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x2b, 0x2c, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xff}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0xc0fb, [0x1119, 0x5, 0x0, 0x0, 0xffe0000000000000, 0x6]}}, @generic={0x2, 0xa6, "bf3644be88cb006b7b4ea98af4605b39321639c7c3463d0d9899c659c4d86cba2ba8346595cbf0a9dde5eee32e3b3a1b7c7e5dcc5529728e47732e4b1fbe474498dd03f2e59253fb18f6ff1628d495271a66083b7991598bef0ee5105d547ad386f85872135583884514f19d459ea5c5023b0a92579e48b7ed0ac8684d21eac6f56f4632d7b642e6eba217fbd4a45435b7a106c825e5fedd310091f498547597ddf6c328a71c"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x7, 0x5a, "8404337e5cefa713ae22a135796be671e3cc009dbf8cba32b4ae0b8a0effe2a1dd0f626d28f7bbe65a0cfee6cd9eb18d25ec5e9304a87cc8c77d1fae46796c6c1c65822fa739d9de04540448b4cacfb0f7db9b8df1ad7f0756d2"}]}, 0x168)
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0xa}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@empty, r1}, 0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', <r4=>r1, 0x2f, 0x70, 0xf, 0x3, 0x1, @local, @private1, 0x700, 0x111, 0x3, 0xd09}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7c}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008090}, 0x20004080) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c041}, 0x40800)
ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000680)={0x53}) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3000}) (async)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0)
ioctl$KIOCSOUND(r6, 0x4b2f, 0x904)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r8, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="46881aff9a68f096fd43c1b7ad1687c221a0b4f49521a453ff"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6e}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8e9c217beaef"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f00000009c0)) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'wg2\x00'}) (async)
r9 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000d80)={&(0x7f0000000a40), 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x294, r8, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x918e, 0xc, 0x2, 0xe3, 0x5, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x5}, {0x5, 0xa}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x9}, {0x1, 0x7}, {0x4, 0x6}, {0x5, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x6}, {}, {0x4, 0x7}, {0x2, 0x5}, {0x4}, {0x5, 0x4}, {0x0, 0x2}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {}, {0x3, 0x5}, {0x3, 0x3}, {0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x4, 0x1}, {0x6, 0x9}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x7}, {0x1, 0x2}, {0x7}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9eb7, 0x7, 0x3, 0x3, 0xf70, 0x2, 0xf55, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3ad, 0xb, 0x5, 0x9b, 0x1, 0x3ff, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x100, 0x6, 0xff63, 0x6, 0x2, 0x7, 0x16]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x3}, {0x1, 0xa}, {0x7}, {0x5, 0x6}, {0x7, 0x5}, {0x5, 0x6}, {0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x2, 0x6}, {0x2, 0x6}, {0x5, 0x9}, {0x5, 0xd}, {0x2, 0x8}, {0x6, 0x8}, {0x0, 0x5}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x2, 0x18}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x5}, {0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x3}, {0x7, 0x6}, {0x0, 0x8}, {0x4, 0x4}, {0x7}, {0x7, 0x1}, {0x2, 0x6}, {0x7, 0x8}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x5, 0x2, 0x7ff, 0x3, 0x8, 0x6]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x40ac, 0xb, 0x9, 0x100, 0x5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x48, 0x16, 0x1, 0x60, 0x9, 0x1b, 0x60, 0x4, 0x2, 0x60, 0x30, 0x5, 0x12, 0xb, 0x5, 0x1365aff8796c22f6, 0x24, 0x9, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x6, 0x81, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x8, 0x1, 0xe27, 0x4, 0xf8, 0xb04]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0xa}, {0x5, 0x5}, {0x5, 0x9}, {0x6}, {0x7, 0x6}, {}, {0x7, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x8}, {0x6, 0x4}, {}, {0x0, 0x7}, {0x7, 0x7}, {0x5, 0x3}, {0x2, 0x6}, {0x6, 0x8}, {0x3, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {}, {0x1}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0xa}, {}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x3, 0xfbcd, 0x5, 0x7a8a, 0x7fff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x37f, 0xfffe, 0xa, 0x2, 0xc01, 0xfff, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1a}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_PMK={0x24, 0xfe, "15a5415db9b5b286cb5f3208cd1f41dd3d4bffa41a12320331d738cfc83b9637"}, @NL80211_ATTR_PMK={0x16, 0xfe, "3386b172cbf9963e402af4995a539c7d23ae"}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) (async)
ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000dc0))
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000fc0)={{&(0x7f0000000e00)=[{0xfffffffffffffff8, 0x2, 0x9, {0x80000000, 0xb}, 0x8, 0x3, 0xd}, {0xd05, 0x6, 0xfffffffffffffffc, {0x1ff, 0x4}, 0xfffffffffffffe00, 0xffffffffffffff8c, 0xffffffff}], 0x2, 0x40, 0x7, 0x2}, {&(0x7f0000000e80)=[{0x7, 0x4}, {0xc7, 0x7ff}], 0x2, 0x10, 0x200, 0x81}, {&(0x7f0000000ec0)=[0x6, 0x40d3], 0x2, 0x8, 0x4, 0xfffffffffffff3b5}, {&(0x7f0000000f00)=[{0x5095, 0x6, 0x7ff, 0xfffffffffffffff8, 0x9}, {0x0, 0x9, 0x1, 0x18, 0xefe}, {0x1, 0x93e9, 0x81, 0x3}], 0x3, 0x28, 0x7fff, 0x9}, {&(0x7f0000000f80)=[0x4, 0x4, 0x2, 0xfffffffffffffffc, 0x1], 0x5, 0x8, 0x1, 0x7}})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001040), 0x142, 0x0) (async)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), r7)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r10, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

1m24.196313455s ago: executing program 4 (id=466):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x4000000)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x7, 0x3, 0x1fff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

1m23.997150511s ago: executing program 4 (id=467):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2842000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x90, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x44, 0x2d, 0x0, 0x30, 0x19}, {0x41000, 0x4, 0xe, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x6, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0xc, 0xf7, 0x82}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0x13, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x71}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x2000, 0x42024, 0xa, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]})

1m23.84498794s ago: executing program 4 (id=468):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f})
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

1m23.78008818s ago: executing program 4 (id=469):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}}, 0x4000050)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={<r5=>0xffffffffffffffff})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
writev(r1, &(0x7f0000001500)=[{&(0x7f00000013c0)="f79aecfba7c9db585222380c4bf65db96000f7fc3b03bb55da2861f1f336d1afd94ccef735d0dddf", 0x28}, {&(0x7f0000001400)="314600036ffffec1df85e6eac3ddc44688579965df77bc369ddcc50d77f1d6d11ec30ce3996624b5713c766b430ad7a8ec6349b01307068f9456285e4863db4e571cf40d8ac560c09ee68707e1f518fe6077ddc9cf071736ab7bd906f58bcd5df4b7dee235058e589ab0cf46136a9def38419e27cc4a4058844a87d3524a3e7f324b67360e28821306db93b97436c191870ead0168f7ca1b26e3457014bd", 0x9e}, {&(0x7f00000014c0)="3d57e03798b1f9db2bb1e66ddd0a1b4aeaa46b4a120ea00fbb096f216cd193", 0x1f}], 0x3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000004500010002000800f9dbdf25050000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094)
read$FUSE(r6, 0x0, 0x2b)
r8 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]})
ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001380)=r6, 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000012c0)={<r9=>r1, &(0x7f0000000080)='\\:{\'.(\\^\x00', 0x14000, &(0x7f0000000100)={@_ha_fsid={[0x4, 0xf]}, {0x200, 0x1, 0xc, 0x6}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x80000000})
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x23, @any, 0x0, 0x1}, 0xe)
setsockopt(r10, 0x112, 0xf, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x23, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001300)=@o_path={&(0x7f0000000040)='./file0\x00', r9, 0x4000, r1}, 0x18)

1m7.993611009s ago: executing program 36 (id=469):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}}, 0x4000050)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={<r5=>0xffffffffffffffff})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
writev(r1, &(0x7f0000001500)=[{&(0x7f00000013c0)="f79aecfba7c9db585222380c4bf65db96000f7fc3b03bb55da2861f1f336d1afd94ccef735d0dddf", 0x28}, {&(0x7f0000001400)="314600036ffffec1df85e6eac3ddc44688579965df77bc369ddcc50d77f1d6d11ec30ce3996624b5713c766b430ad7a8ec6349b01307068f9456285e4863db4e571cf40d8ac560c09ee68707e1f518fe6077ddc9cf071736ab7bd906f58bcd5df4b7dee235058e589ab0cf46136a9def38419e27cc4a4058844a87d3524a3e7f324b67360e28821306db93b97436c191870ead0168f7ca1b26e3457014bd", 0x9e}, {&(0x7f00000014c0)="3d57e03798b1f9db2bb1e66ddd0a1b4aeaa46b4a120ea00fbb096f216cd193", 0x1f}], 0x3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000004500010002000800f9dbdf25050000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094)
read$FUSE(r6, 0x0, 0x2b)
r8 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]})
ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001380)=r6, 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000012c0)={<r9=>r1, &(0x7f0000000080)='\\:{\'.(\\^\x00', 0x14000, &(0x7f0000000100)={@_ha_fsid={[0x4, 0xf]}, {0x200, 0x1, 0xc, 0x6}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x80000000})
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x23, @any, 0x0, 0x1}, 0xe)
setsockopt(r10, 0x112, 0xf, &(0x7f0000000100), 0x1)
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x23, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001300)=@o_path={&(0x7f0000000040)='./file0\x00', r9, 0x4000, r1}, 0x18)

1m5.953212086s ago: executing program 37 (id=475):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r3=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r4=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24004800)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6aa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa7a9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb07dcd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x11c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4010)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xff, 0x5, 0x9fe6, 0x20000, r6, 0x1, '\x00', 0x0, r7, 0x5, 0x5, 0x3, 0x4}, 0x50)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r9, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, &(0x7f0000000840)=0x100000001)
io_uring_enter(r6, 0x7f47, 0x8b69, 0x3, &(0x7f0000000880)={[0x5]}, 0x8)
ioctl$SNDRV_PCM_IOCTL_INFO(r6, 0x81204101, &(0x7f00000008c0))
write$char_usb(r6, &(0x7f0000000a00)="1058c0ab9690a0e8c006b23869c4b8b365e2c5b60df8eb963446efd121f681a36b5856f6f52316ae6e51f62d5811efc40066e00dff0685977d11f4ab5a9437a19be3ea5ebf5c05e6a9e05b2df141ba59ae4feb3dab106b02e580eb481f111c17f81408a52cce3a0b9df51139292940a76f257b3d7d0ade92d882f3d19648f5e3cdce2bedbd6444c9dfe5ef852473fc2149f18c9f314eca585e29f9f70e8a33988d36527176ba8b820af453faf4f8109018f852aa7309d11bf82efc92dc9f4695a07c748f1ea8e0b12a", 0xc9)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x4)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000c40)={0xf2c80, [[0x0, 0x2, 0x3f, 0x9, 0x5, 0x7fff, 0x1, 0x7], [0x8, 0x8001, 0x7, 0xb2dc, 0x3, 0x3, 0x2, 0x81], [0x562, 0x7b3a35d7, 0x2, 0x3, 0x80, 0xdc5, 0x3, 0x6]], '\x00', [{0x5, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x10a, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x1}, {0x0, 0x4, 0x0, 0x1, 0x1}, {0x80, 0x9}, {0x2, 0x8, 0x1}, {0x3, 0x3, 0x0, 0x1, 0x1}, {0x4, 0x9, 0x1, 0x1}, {0x4, 0x40, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xaa0, 0x1, 0x0, 0x1}, {0x6, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x6})
r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r6, {0x10000, 0x80000001}}, './file0\x00'})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r11)
ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, &(0x7f0000000f80))
ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0xe)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r10, 0xf50f, 0x0)
quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000801, 0x0, &(0x7f0000001000)={0xabc1, 0x6, 0x7fffffffffffffff, 0x23b, 0x7, 0x9, 0x5, 0x4, 0x6})

1m4.289117699s ago: executing program 38 (id=484):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040010000800400050010000500000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x8000000000000000)

1m0.054990243s ago: executing program 39 (id=493):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./debug/lru_gen\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000100)={[{@userxattr}, {@uuid_on}, {@nfs_export_on}, {@index_off}], [{@subj_type={'subj_type', 0x3d, '}^]\'/['}}]})
openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)

54.164981908s ago: executing program 1 (id=556):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x2418898, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x14, r1, 0xf03}, 0x14}}, 0x0)

54.067765868s ago: executing program 1 (id=557):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
utimes(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

54.066891032s ago: executing program 1 (id=558):
mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='#1:syz1.'], &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="270302", 0x3}], 0x1}, 0x4005)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xf, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
sendmmsg$unix(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b0", 0xfffffe84}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11)
r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000480)=0x1)
ioctl$TCSETSF2(r9, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8})
setns(0xc9, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r10, 0x800455cc, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x80000001, @rand_addr=' \x01\x00', 0x5}, 0x1c)

53.609906754s ago: executing program 1 (id=566):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
setns(0xc9, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x9}]]}}}]}, 0x38}, 0x1, 0x2000000000000000}, 0x0) (async)
listen(r2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

53.527743802s ago: executing program 1 (id=567):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16a)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

53.469729458s ago: executing program 1 (id=569):
r0 = syz_open_pts(0xffffffffffffffff, 0x2)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1200, 0x11203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)

50.277009649s ago: executing program 40 (id=502):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x0, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x81, 0xa0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x40080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$VT_DISALLOCATE(r2, 0x5608)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="ca1cef9c", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657264657673696d0000000f0002006e657464657673692c346d3000001c"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000003ac0)={&(0x7f0000000580)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000003940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x20000}}], 0x18}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x90)
fcntl$setstatus(r4, 0x4, 0x42000)
r5 = socket(0x1d, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
write(r7, &(0x7f0000000140)='3', 0x1)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000080)={0x1})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_FW_MASK={0x8, 0x5, 0xb08}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r6, 0x25, 0xd, @void}, 0x10)
r8 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r11, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
write(r8, &(0x7f0000000200)='1', 0x1)

47.258983171s ago: executing program 3 (id=579):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000084070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open$dir(&(0x7f0000000540)='./file0\x00', 0x2000, 0x40)
mkdirat(r1, &(0x7f0000000200)='./file1\x00', 0x6c)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x9, 0x7, 0x42474752, 0x5}, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8}})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000200)={<r4=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x6, 0x5, "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", 0x81, 0x1, 0x5, 0x0, 0x40, 0xd3, 0x9, 0x1}, r4}}, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r5, 0xc138fd09, &(0x7f0000000300)="0400000032000000000000008a0100003801000001000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141000000000000000008000000000000000000000000000000726169640000000000000000000000007261696431")
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x10}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
setxattr$security_selinux(&(0x7f0000000440)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:semanage_read_lock_t:s0\x00', 0x2a, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x600)
open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
socket$netlink(0x10, 0x3, 0x0)

47.151852505s ago: executing program 3 (id=600):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x4002050)

40.47008712s ago: executing program 2 (id=627):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfd, &(0x7f0000001480))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/141)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0116"], 0x5c}, 0x1, 0xf000}, 0x0)
r3 = socket(0x23, 0xa, 0x3)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
lseek(r4, 0x10001, 0x3)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000240)=0x10)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000100)={0x0, 0x7, 0xfffffffe, 0x9, 0x7a, 0x100, 0x0, 0xbfb, 0x3, 0x4e, 0x8, 0x7})

38.453376388s ago: executing program 41 (id=569):
r0 = syz_open_pts(0xffffffffffffffff, 0x2)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1200, 0x11203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)

38.109370636s ago: executing program 2 (id=629):
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801", @ANYBLOB="c3ff85acc291c447daa283067086d3f37695201c7cee943bc9782f42431c333b6ec62e"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
setsockopt(r0, 0x10000, 0x5, &(0x7f0000000480)="01671f3652e942be9e01592ca6b9b7fd56b65221c3c95958d122fa1262d7603591bd8f960997fd274eb84f2cc11a695ce442f53e8faf4f5c107aae09730024868f01ee6105de08656d140b1ef9f83dad7b3c4f20a5e91e1e3970a9de52b9705f92ca3bd250892e21d7bb7c7dcb048edb88a88eae02f72db40e6226b1d2e9cd2b1135222e9eb6747493700ad4de8638ae317b4b66605f7f8b9b88b4efeab334df918e8557c56bd0c02458775a55a04bc0c6d4eb8638ce81b47f091d5ba733a55fad9df0ec3e93a0323bd51b7aafe37ebe6db03052709aa5d3459b4119fb50a45cdbc02d1ceca9fbde550986d718fe7876700715551e881a4e5a8016e98a361c7975ca739345d3321fc9ea00e2ba87c364f5e0e31099b10761162f59d2349bd8c8a822af0ca4f147bba81a0cdb71ee16c52fde4f736e40e75083b3f93310967db366150ab5a1ab7672ff48907c41a0b09cae0352664015e392c0ca7f243e96cbde6d1a1b07e7366bfa432ddaa71e0627247d691416159d850952e4ebbfed6f6d9d59ba23ce1d33e585352acb4b950fc516ea2a13c7284eb5ac892ccb7c9bfdb3b085f31548fa5fd666f56ff60eb54f0f9e7b4a80810d4b33eb4e1a779099bfccf3a4aded1339d2e99cd3ec4b245ca66c907d8b1d2ceb37915a3c16648749d2e0fc843fcdf2921d162f87bf47468ad91e4c540c9ded71bbce0fdef060a175ab0c4cf0e542b33b174812b82077677bb0e66defa4a1b5db2db6bb439a8d79c7de4bc2eaa2a275d4e08baae51c9fe0a528116ee8c49f9ea0e0bbbfebeb5e280ead5dddf3dd5ab198a97139d69e16f4809cf8ded8fd0ff46f66b610ddeb03f9813cfdb104cd39a54f82d4829419f725ddf6932294bf3bded1408e3d1d3e403d7e7e3cb9e20d001eae12c4d4c1a210acd957cb52df4ff8b27d6c90f500e3343e4bba955418d98c18a631b323c0944ac474d9aa2eecd414ba31187d10d79e4d49c726afa268b61cd00b3b6d0aa6ca974294279a549b325bf00a6786f8fef99e1d0d2ad17dc6a0b9bbe35fac24ca47eb430d81811277d0a52e5211a9b1b73caf31fabfb8afdbda636358427bf368554bb542c06bd221db6b7a81bdccc81bd57c1f9b2010940bdf90df497c60f1905f143c5c469cb8731af5130f7ab4d04526369b304a84ed2e15e08c479cbe10c971c277268723cde509337839b3f7ccb9ec87a12b9c156ea94b9155c7a18580fadecebe8044a0f291e8ddd25657e4eab2eeeb2cc0b5be3c4544ccdfd018fc3758291ab12c95446b9731806e5e95634887bbd52143560a3167ea049a5df4df8f3e916076defb5643576b3fcc2e89c474ed40b8895b40b8184807dcfbf19d12c13eb2456c50ef4a2c0b7dcd326d9045bfef928985b202c4f30fbf007823f0edbb23ca45342cd340bca8d968e10a980b355096c38740c13206058c189f8e29779e20ae4a6480095d33fa5b5b71ae8c2dc90ee0e6e5740eb40f7f0eefa54d6b599fb467fad8c507b18d1f280c7b17dad69d07f5e65e0e3d4221f8400d873125aa3c908c6cc0754e97d8f9cc03524716ab9c012912372232d414b327bc6e9081c5afec30540251110a04124b016d837d5dc91a8857959ccc068b95335eb2b3e201c90652ce9154d224a601e4e36dbf8bd8e722b652295e89723748f1e21917d0cf39e69eb055be3c35e32f76de74011405bd7b418ae1b2dcac5b1091108e4f020c588ee5669680ee624cd884e6ad3b7fda30007ff0c4eb8ca82c390c9b7b4532650761ff3e63dc7d54a44208717ee4b4e5ed9f570990eec227599535f20e12bdbbccca9b5a3860ebf01eda19474ab80c3a4f3c6ef8128a30abc6ea172b67ad1c96d394a6227b0c0e635042dbfffa0dd3645799538408029785772ed8e4efdbc3fea1e4f338f4e08f4fb9f29e6f6098dad762783fbe66802dfe72b25c2f5c94c30a13f24ddf54f88d05f5ef1ea23e2b5c49e185684ff02361a515e4a32b4ae9e36fed282fc4b4db398479a58a476d2d68b346f03cedffdcd9bf53bce2702a097e9ca258e52d78b0825657417b6a1bcc0f9c88266d3fdbf1d4aadf2ec0cba6168794009b49ff0b2552cf3e44ee6467e633ecbe477911274c3e2ba791a464b6c638b733591a301c592ff7405dba7af911a87aecc2362182bae7aebc8e47a3ce73c343237fffcde78b45067fc4d4022198d631a90d8325b67918033926b61538e7cbcd790181da4801d55cb643b84999f7f2db86651e2bd57dd102720f435322eafa8f8722de87b1db43532d5197baee87e7f94f37a87a79b5129555460b3efd891078f810c3a33f6fde61f8cd0ecedee8c18c18f3d8325363ac9d8504dfc4efaa85fcfe48804115f7d5efc53df01f4224c08077e20f8dd3f21e5a7dbab3117893d7a443d35cfd634e73b1b81fc034b841b41a9ecc6b1d4fab8496097ffeeafa9c91be89b97b6f90edfbd9bd2a302e4e247351af88f3de9cd72cde6472a2a11749e7fcf310160b65f970e52c8c741124429e1fdaeaab438fa5cc67403140d392c9e0e2618a728ce0beefcadd326dbca4e37881be640ae180c438a01610d5635124a42fbf8e7319a5a5db65dbbd0c6450b8c2fbcef8f146c6d4aa0196c3de338ecb5dfa3d86a4820852d275457b80c238d6cfe82fdf2b6f7573039de96344a6cdab43b3c4ea92e0da64a531706f8d55f609c360b46708d52e6f1ba44c0ff9757bfa7f9521be16533f62c7fddf6003d9d1c30edc9651cd8844ad7c4d1e9e21dffa062361646a1b036e6242d74d1b2913aa526a3a1d8291c37e904ce564154e1cc97b4cc80cebabc015ddb17a8628223d1657e67344f2096b93f29211bd60557a1732936179de4ca8bad55ca584eeb90fce80fd2eec30fe15e83fb8c3a20efd9f1aa2de4178c01724f412fc24a8bc9b5ba0a1666809cfca4e7eb468cff99efe13d22c78791c07641507d39377e405743c498411637739a09a65e3d083f67f21c22a8870f655e9290d9ff5ccea5f513dd845374649bd74a7273cf0008e038d1e4f35fc1af3672ead13fbbb798262bd65663ea4ddedc1470f485af368de572784c53dc2d73c61364251d703ccd2e80459926d6ed605fb3feaebd110653a0c23b426c3cc5396ff75d87e648701aa9eb5581067e10072980ce494b980f8971d5859269cbbca634be126d0335cf245b373e32d048a0865bce51eff24c27a367e65ec11e79b54e4bcc4341f6368e1584ead7f989fd7b20a44896b209ad830d95f370031a3a6254001492e61635bf170e26243b5e1cfbd7d0de4dd67d078a905a3a6a696f83160f022853f5b3b7a8d26f929cc4d37467d270110e600ed33b1f7e986a68c86318105738d450693d6c8fd106b914605c9a84ae0012db8b26c5c0c1c9f24d0a2251aa7d42f0087e52cbbdec17149c333ae7dd95871102dd7335b90933721b68ae3d39d7c3461b5ed3658449c638bd57e00bda635537c082682056395c638e75eca69138ba0c1f33ea485aab58de5ecfd93b482762ae44ef26725ea0de35b25bcab95c45d2aedbff95fb26906abad5030601b7fca53b755404e003e55ace95f2884202923d3395e61ebc05a96823fbed5f678ea36894c78ccdfb5fff6708d799ec33817745f8cda83dcb07ef5894aab830ee042c3920dacf2b0415586317e0c302d97c969b8a4f34581f32f2ec5e3bdeddfa5a4e22bf0d24dce8b4a864fa4e47fcba7f7054eb8a1d64ad935e6a296740d835f6e3572a32d454c996b0c0d0aabe8e40a200bf72621cbaf9004c8b8fbc471098e23769e7e7e3c4efbb47dc0841bf0ab279ae0bc8717006aaa409507736b3b9c464bd71ccfc698beb94fc4be26b55deef6138f5e611cfdf26c64b4d39f7d1fa414268733c7fee33f328937d3dd1be917861cb1233ddf096be987a873499aca9a99560b6d7247b2623e09908b70eb12079d7db50ca58f580c20e943ae3f57cefe891c690ebf0b6ec625cd7d4aa8038a288d775f0f07b000cd8a54b54e81f55b9e35d12459f4465b7b74ced64eb0e7674e712b24ea634108e5f6f5c9695f8397389254ae87b7c9b6c0b871951bd7cb5842c46168164a533a2f26daf806e744bb32d5eb80716e537a0723396ce6d43a1b32c461b863d4068936bd7ccd4fc2ec7aa5611704e95ff69a74b434ab6f4ef3f6d1f9b0a8b5fab9f8c974f5de490ebc616dd229abc7bd754bb16194c73c94f99cbda1bad81d22639c61bcc9bb55042c7e0639d614bc1714895aff8904d9a341a2394ce95588bbac2a9e1ef4fa809710ca66f0de8ec150151365fc7cbec929d47e9e38158b6c22607d0ba7da6d1b60eeebd0add2d13214cb115d6fb6af7b969d22371115bc2a01fdaff471da5a6337a6963eab03a2445ef91825b8983710743da0f06293fb1218eea50de57b79849fe04883cd3b7fdb3fa39009234ba1b2c88707b861b628e8e619b4761a4ef3d4d9adc1d12cfaeab58e1733ef2f1c4b86808607f4494a4b0d4bf1302a8518c2b7925848fb7588f3c610c7b7cb8c43ae4c5cf219126fcad0a9dca4788da4e3f98e2c3cd39c75dbdb998847878414fa44832e8d870865d877646894bf24e648365eb0a27dfc2bd72d7b4b68b036ccc8d7c601ed10892644ce3adee2c3195fc841ff9e144a305cc387d307f7fb26539bb47f9c87bcf201d19b15d9507fbea6928431346571c5e90f325b33bb1f375a6b9894d0bedde1e33d31324f12be7ec224894ff8b642365d99488429e53de27ea8ae387e20bd1d5b5c26e023676501ac600b81ab3ed739476e006e5aca50e3177506ea6fb1e8e5008348256a98afb1f267fae109968591d4cac5e7f355dfd94398999cd763d64f498c0af2668fe5be44e46bcc7bdb243dc56ea33f54a76da4f95c67729ef9a6ba279972570719acadc055ac0dcff42bac671e528873926431ff3afed159857e97fddef126edc276ad5e0d012bc8eac05cf4e64ae5b7e39be25d532f0a98ccd4415de43b0282d49e6db29a1899b27b9371a12b2d2d317857784d0a3890f395e543e10579818dffc16f1b32e5c23bfdf58e1bac99588b2402e1526dce192bd1221380c12d55bed01cdb0115c19dc04fc416b8f7fa4847d96cbe07c7fd2c919bef8f1fb222033154845bd6792846484887aefce91e77f537cd627e6b2a35562add0f4fd3db22ced7d5f7be849066d85b8195b8d2b65cf07bf61f67a2e2917f2bcd97a691f5c6e5a24950b49dfbd0426ea18152ebd068ec7eb49d567cf5df091ccc87d0c080bb2df9b4521f72e00652e67d74f5a775b2fa9723d0f961087594d7ac8c638f0638a127087f7ff30fd77e1b56ab91e893803d20b2a5c9a99381b1cfde0aa73ff496d6e70e21fb200bc162e0c749c950aa4bc93a9f2bb060e6758ccc8e023b71d509d2aa06fc5b479964cdc6315b1fbd9e01c91484d66a5fb61350c3065b67921001ec4a48e92988cb7fbba8cd4eeaad3c78bd6e06e9a3d8dcc28ad0d8eb5a8632d82b0af2cb8649c69b40dccc4c52a78629fb2c7ad8f68bf8c5cd053a888097fff7c775f573f4039d5f9ac7efc61f812e0edded0f306356186124b63d64d3e904066eaffab943f0f2db47c1622b31ee151fac2385c8f963d67af0008bfdde79ccf4d0527f61fe62fda11ee15614f6d12eda867eddcbc7255c50b83acc7df73dccdf4aaa491537f443120c1a6880572877fa8d81014b18198fe73a546aa0379cdaf90f22dff68a34750e5dd60da4784a7f483d438b077d6393aabb099befe33ca8b16475e75f815d6db569b778f5218ef9489c37db05365a18", 0x1000)

38.039715843s ago: executing program 2 (id=631):
mkdir(&(0x7f0000000040)='./ms\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000000c0)='./ms\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async)
r0 = open(&(0x7f0000000240)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) (async)
r1 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0}) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, <r8=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r8, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r4, 0x25, 0x13, @val=@target_btf_id=r8}, 0x14)
write(r0, &(0x7f0000000280)='user', 0x4)

37.819670598s ago: executing program 2 (id=634):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000040))
mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ceph\x00', 0x1000, 0x0)

37.548907969s ago: executing program 2 (id=636):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, 0x0)
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000003, &(0x7f00000000c0)=0x100000001, 0x4)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b201664bd37d5e1dcb2f64ec074a225ac13a89be79e2bd5bdcd8cffc5ee0512dfe666423022c73264aee90673292872b9ed8e53787dcf53322f00", 0xfffff, r0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r4], 0x38}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r7, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', <r8=>0x0, 0x7807, 0x10, 0xfffffffd, 0x8, {{0x23, 0x4, 0x1, 0x4, 0x8c, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @broadcast, {[@rr={0x7, 0x13, 0xb4, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @local]}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x1, [{@local, 0x8}]}, @cipso={0x86, 0x22, 0x3, [{0x7, 0x3, '|'}, {0x5, 0x10, "911ef7edb27112be772e2e8a3d87"}, {0x7, 0x9, "a9f6e7efb21f44"}]}, @generic={0x8d, 0x4, "04ab"}, @lsrr={0x83, 0x7, 0x6f, [@local]}, @rr={0x7, 0x13, 0xae, [@loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x2e, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @loopback]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl1\x00', <r9=>0x0, 0x80, 0x7800, 0x9, 0x3, {{0x34, 0x4, 0x0, 0x22, 0xd0, 0x64, 0x0, 0x7, 0x27, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x56, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x9}, {@empty, 0x6}, {@local, 0x5}, {@local}]}, @cipso={0x86, 0x8, 0x7, [{0x7, 0x2}]}, @timestamp_addr={0x44, 0x44, 0x87, 0x1, 0x2, [{@loopback}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x80000000}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x1}, {@private=0xa010100}]}, @lsrr={0x83, 0xf, 0xc1, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}]}, @timestamp={0x44, 0x24, 0x2d, 0x0, 0x4, [0x7, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1ff, 0x8000]}, @noop, @rr={0x7, 0x17, 0xa8, [@private=0xa010102, @multicast1, @loopback, @private=0xa010101, @multicast1]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x13c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x400c094}, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x6000)
setresuid(0xee01, r10, r10)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@uid_eq={'uid', 0x3d, r10}}], 0x2f})
r11 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x40049366, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x58, 0x0, &(0x7f0000000500)=[@increfs, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r11}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/68, 0x44, 0x1, 0x6}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x2}, @register_looper], 0xaa, 0x0, &(0x7f0000000580)="377d15afd63ef78f29335af744915118b54643f4443330bab3e77b839993dbe0bc138fb13653a9944825f595819f9314ec6a2856855ba2b0ab8762b977d5fe536f321855018e00ef2332565d703d54d26fc8917797beee98f798b3f38278ff16646fa97d0f21c59deee66e66bcd63d16035c2ffb1b7bc5a9eec43812929f907850e47e3f966cad15f02220c6e2d46efc7aa877b05d33fe223d062bdad3ea8e4ffc541c0526b7f2496835"})

37.42976245s ago: executing program 2 (id=637):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xffffffff, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0x3, 0x204, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0xfff, 0x800, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca3, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x1aa6f321, 0x7, 0x5, 0xa, 0x6602, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x10000009, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000005, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x1032, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x82, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xf, 0x0, 0xfffffffa, 0x3, 0x8001, 0x80000001, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x1, 0x3, 0x6, 0x7ff, 0xffffff87, 0xe, 0xd, 0x5, 0x3, 0x10, 0x7, 0x3, 0x9, 0x8, 0xff2, 0xfffffffa, 0x0, 0x6, 0x2, 0x8, 0x1, 0x20003, 0x664, 0x4, 0x9, 0x2, 0xebe, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10020, 0x1, 0x100009, 0x9, 0xff, 0xfff, 0x4, 0x7ff, 0xe4, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x5, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000001, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x81, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x77, 0x6, 0x80008, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4a, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x2003, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x9, 0x0, 0x1, 0xd, 0x3, 0x0, 0x9, 0x9, 0x37a, 0x10001, 0x8, 0x10001, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x0, 0xd5be, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x6, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xa, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x1, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x104, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x1ff, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000005, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xfffffffe, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0xfffffffd, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0xf, 0x5, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x3ff, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0x95, 0x1, 0x4, 0x5, 0xffffffff, 0x4b5f, 0x6, 0x80000001, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x3, 0x10, 0xfffffffc, 0xc, 0xa, 0xfffffff7, 0x5, 0xb, 0xffd, 0x9, 0x7, 0xfffffffd, 0x8000004, 0xc2, 0x400, 0x7, 0x0, 0x80000004, 0xd, 0x2, 0x8001, 0x0, 0x6, 0xb6, 0x101, 0x401, 0x0, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x80, 0x2, 0x8000, 0x0, 0xfffffffd, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0xd, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x8000000, 0xe, 0xf2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x3, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x6, 0x0, 0x80000001, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x3, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x74d9ef85, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382b, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xdd, 0xfffffffb, 0x2005, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x202, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x7, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x4, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x7, 0x6, 0xa, 0x0, 0x8, 0x8, 0x8b6, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x3, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0xffe, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0xf9, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x202, 0x9b3, 0xfffd, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x7, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0x200, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x2, 0x8, 0x14, 0x7496, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0xb24, 0x495, 0x100, 0x0, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0x4000ff, 0xee, 0x12ee, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x800, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x200, 0x0, 0x1, 0x6, 0x80000001, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x9, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x2, 0xa, 0x9b, 0x6, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0x4, 0x9, 0x10000c0, 0x80, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x5, 0xd19, 0x6, 0x1, 0x6, 0x20000000, 0x0, 0x11, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf1, 0xffffff00, 0x8, 0xc, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x800005, 0x53, 0x2, 0x1, 0xfffffffe, 0x2, 0x3, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x80007, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x100, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x3, 0x2d8, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39f, 0x71, 0xfff, 0x7, 0x8]})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}})

36.139928669s ago: executing program 9 (id=648):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000280001801400040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x3, 0x1fff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

36.115306892s ago: executing program 9 (id=649):
syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x76, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="0400000000000000")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0)
ioctl(r0, 0xc138fd05, &(0x7f0000000000))

35.170028701s ago: executing program 9 (id=650):
capset(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='0', 0x1)
r1 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x2c326c88, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0x1, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x6, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x3, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140))

35.077944036s ago: executing program 9 (id=651):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x3, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x3506, 0xa, 0x1, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x890)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0xb60e111f, 0x0, 0x14, 0x0, 0x0, 0x0)

35.076137125s ago: executing program 9 (id=652):
mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={'trans=virtio,', {[{@noxattr}, {@afid={'afid', 0x3d, 0x1}}, {@debug={'debug', 0x3d, 0x9}}, {@directio}], [{@uid_eq}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00')
close_range(r0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
socket(0x2000000000000021, 0x2, 0x10000000000002)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
userfaultfd(0x80801)
fsopen(&(0x7f0000000200)='cifs\x00', 0x0)
socket$inet6(0xa, 0x80802, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

34.728624126s ago: executing program 9 (id=653):
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18)
r1 = signalfd(r0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8)
ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r1, 0x800a6f2f, &(0x7f00000000c0))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x10, 0x0, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x9, 0x1}, 0x50)
ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000180)={0x0, r0, r0, 0x4, 0x5, '\x00', {0xba, 0x9, 0x8, 0xfff, 0x1, 0x9, 0x2, 0x9, {0x7, 0x2dd58a5a}, {0x80, 0x2}, {0x6, 0xe0}, 0x2, 0x2, 0xd, 0xd4dc, 0x5, 0x0, 0x2f02, 0x4, 0xb, 0x37ef, '\x00', 0x10000, 0x401, 0x800, 0xe}})
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000240))
r3 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_DQBUF(r1, 0xc0186f40, &(0x7f00000002c0)={0x2, 0x5, 0x5, 0xffffffff, 0x15, 0x1})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000380)={0x2, 0x56, {0x56, 0x63, 0xffff, {0x9, 0x2}, {0x0, 0x10}, @cond=[{0xc2, 0x0, 0x7, 0x5, 0x5, 0x4}, {0x5, 0xd1b, 0x3, 0x8, 0xa12, 0x5}]}, {0x57, 0x5, 0x52c5, {0x5, 0x2}, {0xa84, 0x6}, @period={0x5b, 0x8000, 0x3, 0xa9e, 0x9, {0xe4, 0x2, 0x4, 0x80}, 0x7, &(0x7f0000000340)=[0x4, 0x1, 0x68e2, 0x9, 0x2, 0x75a6, 0x8001]}}})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x30b)
mkdirat(r3, &(0x7f0000000400)='./file0\x00', 0x18)
ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x14e, 0x9b3, 0xe5, 0x8})
ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x16a)
r6 = getpid()
r7 = syz_open_procfs(r6, &(0x7f0000000480)='attr/fscreate\x00')
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000004c0), 0x100, 0x200000)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000500)={0x56, 0x288, 0x4, {0x3, 0x5}, {0x200, 0x5}, @const={0x800, {0x4758, 0x4c, 0x4, 0x9}}})
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$IOCTL_VMCI_SET_NOTIFY(r9, 0x7cb, &(0x7f0000000580)={0x400, 0x9, 0x7})
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000005c0)={<r10=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000600)={r10, 0x2})
connect$pppl2tp(r1, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x3, 0x1, 0x2, 0x1}}, 0x26)
connect$inet6(r1, &(0x7f0000000680)={0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}, 0x1c)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vcan0\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r11, 0x25, 0x9, @void}, 0x10)
mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000008c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x100000001}}], [{@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '%\xb3'}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@obj_role={'obj_role', 0x3d, '#\x9b!'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@subj_user}, {@pcr={'pcr', 0x3d, 0x30}}]}})

31.560475522s ago: executing program 42 (id=600):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x4002050)

27.869821794s ago: executing program 4 (id=661):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000440)=""/151, &(0x7f0000000500)=0x97)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x810)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r4)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r6, &(0x7f0000000100)='measure #', 0x9)
pipe2(&(0x7f0000000400), 0x80000)
listen(0xffffffffffffffff, 0x100101)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000040000000000eeffff9f6c058577318ae813717028eb64f6f7054a67007a0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)

26.359766323s ago: executing program 4 (id=686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b0000001c04010029bd7000fefbd72547f00000", @ANYRES32=r2, @ANYBLOB="0800bb060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getaddr={0x5c, 0x16, 0x4, 0x70bd25, 0x25dfdbfb, {0xa, 0x78, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IFA_CACHEINFO={0x14, 0x6, {0x1000, 0x4, 0x7, 0x6c44}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xf8af}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4015}, 0x0)

22.427419482s ago: executing program 43 (id=637):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xffffffff, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0x3, 0x204, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0xfff, 0x800, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca3, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x1aa6f321, 0x7, 0x5, 0xa, 0x6602, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x10000009, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000005, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x1032, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x82, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xf, 0x0, 0xfffffffa, 0x3, 0x8001, 0x80000001, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x1, 0x3, 0x6, 0x7ff, 0xffffff87, 0xe, 0xd, 0x5, 0x3, 0x10, 0x7, 0x3, 0x9, 0x8, 0xff2, 0xfffffffa, 0x0, 0x6, 0x2, 0x8, 0x1, 0x20003, 0x664, 0x4, 0x9, 0x2, 0xebe, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10020, 0x1, 0x100009, 0x9, 0xff, 0xfff, 0x4, 0x7ff, 0xe4, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x5, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000001, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x81, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x77, 0x6, 0x80008, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4a, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x2003, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x9, 0x0, 0x1, 0xd, 0x3, 0x0, 0x9, 0x9, 0x37a, 0x10001, 0x8, 0x10001, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x0, 0xd5be, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x6, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xa, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x1, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x104, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x1ff, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000005, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xfffffffe, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0xfffffffd, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0xf, 0x5, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x3ff, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0x95, 0x1, 0x4, 0x5, 0xffffffff, 0x4b5f, 0x6, 0x80000001, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x3, 0x10, 0xfffffffc, 0xc, 0xa, 0xfffffff7, 0x5, 0xb, 0xffd, 0x9, 0x7, 0xfffffffd, 0x8000004, 0xc2, 0x400, 0x7, 0x0, 0x80000004, 0xd, 0x2, 0x8001, 0x0, 0x6, 0xb6, 0x101, 0x401, 0x0, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x80, 0x2, 0x8000, 0x0, 0xfffffffd, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0xd, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x8000000, 0xe, 0xf2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x3, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x6, 0x0, 0x80000001, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x3, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x74d9ef85, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382b, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xdd, 0xfffffffb, 0x2005, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x202, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x7, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x4, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x7, 0x6, 0xa, 0x0, 0x8, 0x8, 0x8b6, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x3, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0xffe, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0xf9, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x202, 0x9b3, 0xfffd, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x7, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0x200, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x2, 0x8, 0x14, 0x7496, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0xb24, 0x495, 0x100, 0x0, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0x4000ff, 0xee, 0x12ee, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x800, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x200, 0x0, 0x1, 0x6, 0x80000001, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x9, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x2, 0xa, 0x9b, 0x6, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0x4, 0x9, 0x10000c0, 0x80, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x5, 0xd19, 0x6, 0x1, 0x6, 0x20000000, 0x0, 0x11, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf1, 0xffffff00, 0x8, 0xc, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x800005, 0x53, 0x2, 0x1, 0xfffffffe, 0x2, 0x3, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x80007, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x100, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x3, 0x2d8, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39f, 0x71, 0xfff, 0x7, 0x8]})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}})

19.680946397s ago: executing program 44 (id=653):
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18)
r1 = signalfd(r0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8)
ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r1, 0x800a6f2f, &(0x7f00000000c0))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x10, 0x0, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x9, 0x1}, 0x50)
ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000180)={0x0, r0, r0, 0x4, 0x5, '\x00', {0xba, 0x9, 0x8, 0xfff, 0x1, 0x9, 0x2, 0x9, {0x7, 0x2dd58a5a}, {0x80, 0x2}, {0x6, 0xe0}, 0x2, 0x2, 0xd, 0xd4dc, 0x5, 0x0, 0x2f02, 0x4, 0xb, 0x37ef, '\x00', 0x10000, 0x401, 0x800, 0xe}})
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000240))
r3 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_DQBUF(r1, 0xc0186f40, &(0x7f00000002c0)={0x2, 0x5, 0x5, 0xffffffff, 0x15, 0x1})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000380)={0x2, 0x56, {0x56, 0x63, 0xffff, {0x9, 0x2}, {0x0, 0x10}, @cond=[{0xc2, 0x0, 0x7, 0x5, 0x5, 0x4}, {0x5, 0xd1b, 0x3, 0x8, 0xa12, 0x5}]}, {0x57, 0x5, 0x52c5, {0x5, 0x2}, {0xa84, 0x6}, @period={0x5b, 0x8000, 0x3, 0xa9e, 0x9, {0xe4, 0x2, 0x4, 0x80}, 0x7, &(0x7f0000000340)=[0x4, 0x1, 0x68e2, 0x9, 0x2, 0x75a6, 0x8001]}}})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x30b)
mkdirat(r3, &(0x7f0000000400)='./file0\x00', 0x18)
ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x14e, 0x9b3, 0xe5, 0x8})
ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x16a)
r6 = getpid()
r7 = syz_open_procfs(r6, &(0x7f0000000480)='attr/fscreate\x00')
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000004c0), 0x100, 0x200000)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000500)={0x56, 0x288, 0x4, {0x3, 0x5}, {0x200, 0x5}, @const={0x800, {0x4758, 0x4c, 0x4, 0x9}}})
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$IOCTL_VMCI_SET_NOTIFY(r9, 0x7cb, &(0x7f0000000580)={0x400, 0x9, 0x7})
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000005c0)={<r10=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000600)={r10, 0x2})
connect$pppl2tp(r1, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x3, 0x1, 0x2, 0x1}}, 0x26)
connect$inet6(r1, &(0x7f0000000680)={0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}, 0x1c)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vcan0\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r11, 0x25, 0x9, @void}, 0x10)
mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000008c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x100000001}}], [{@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '%\xb3'}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@obj_role={'obj_role', 0x3d, '#\x9b!'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@subj_user}, {@pcr={'pcr', 0x3d, 0x30}}]}})

19.125715181s ago: executing program 0 (id=723):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

19.112526076s ago: executing program 0 (id=724):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r0=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x280000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000}, 0x1c)

18.849112986s ago: executing program 0 (id=725):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x3, 0x1fff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

18.833802682s ago: executing program 0 (id=726):
pread64(0xffffffffffffffff, 0x0, 0x0, 0xa96)
socketpair(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000140)='./file0\x00')
unlink(&(0x7f0000000100)='./file0\x00')
syz_emit_ethernet(0x46, 0x0, 0x0) (async)
syz_emit_ethernet(0x46, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000003000)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x8804)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r1, 0x2, 0x0)
fsopen(&(0x7f0000000040)='configfs\x00', 0x1) (async)
r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f00000001c0)=""/25, 0x5d) (async)
getdents64(r4, &(0x7f00000001c0)=""/25, 0x5d)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
getdents(r1, 0x0, 0x58) (async)
getdents(r1, 0x0, 0x58)

18.679845813s ago: executing program 0 (id=727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, <r4=>r2, 0x2})
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', r4, 0x0, 0x41)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x9, 0x2, 0x3, 0x7e}, {0x6, 0x2, 0xa, 0x5}, {0x4, 0xc, 0x4, 0x5}]})
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80101)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000840))
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000380)={0x1, 0x2e78, 0x10000, 0x7, 0x0, 0xffffe00000000001, 0x1, 0x0, 0xffff7ffffffffff8, 0x10000009, 0xff7ffffb, 0x2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='erofs\x00', 0x200000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xf2)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r9 = open(&(0x7f0000000180)='./file0\x00', 0x108140, 0x8)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00'})
open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)

18.516276405s ago: executing program 0 (id=728):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2842000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x90, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x26000891}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000340))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r7, r6, 0x80000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x45, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x1d)
ioctl(r0, 0x8, &(0x7f0000000380)="80cecbe9dcfc4052b957b73a73f71301d76d59647c56a038512f11dd9377d1b5f3747fbf824c02d5d069a3bc199a64256c9a65ff7d096c960a57b0a9167512d3c86db5ebe63e6eb7ba936bd49c0bf05bbd7d3392d3f222c203db328ff8a0919cb21dc0e959107c85b9280c5f")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x44, 0x5, 0x0, 0x30, 0x3}, {0x41000, 0x25000, 0x0, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x6, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x40000, 0x3, 0x5c, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x1, 0x3, 0x7, 0xad, 0x7f, 0x46, 0xc, 0xe, 0x82}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0x13, 0x1, 0xfd}, {0x40000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x71}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7ffb}, 0x80000031, 0x0, 0x2000, 0x42024, 0xa, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]})

18.361669215s ago: executing program 45 (id=728):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2842000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x90, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x26000891}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000340))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r7, r6, 0x80000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x45, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x1d)
ioctl(r0, 0x8, &(0x7f0000000380)="80cecbe9dcfc4052b957b73a73f71301d76d59647c56a038512f11dd9377d1b5f3747fbf824c02d5d069a3bc199a64256c9a65ff7d096c960a57b0a9167512d3c86db5ebe63e6eb7ba936bd49c0bf05bbd7d3392d3f222c203db328ff8a0919cb21dc0e959107c85b9280c5f")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x44, 0x5, 0x0, 0x30, 0x3}, {0x41000, 0x25000, 0x0, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x6, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x40000, 0x3, 0x5c, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x1, 0x3, 0x7, 0xad, 0x7f, 0x46, 0xc, 0xe, 0x82}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0x13, 0x1, 0xfd}, {0x40000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x71}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7ffb}, 0x80000031, 0x0, 0x2000, 0x42024, 0xa, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]})

11.270891237s ago: executing program 46 (id=686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b0000001c04010029bd7000fefbd72547f00000", @ANYRES32=r2, @ANYBLOB="0800bb060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getaddr={0x5c, 0x16, 0x4, 0x70bd25, 0x25dfdbfb, {0xa, 0x78, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IFA_CACHEINFO={0x14, 0x6, {0x1000, 0x4, 0x7, 0x6c44}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xf8af}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4015}, 0x0)

5.343844763s ago: executing program 5 (id=795):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r2, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r3, 0x0, r4})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x76}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

4.498851874s ago: executing program 5 (id=802):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xabf, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7ea, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x1, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x3, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x5, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x1ff, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x3, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1fb, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x9}, {0x5, 0xc, 0x3, 0x80, 0x5, 0x4}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x1ffd, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0xb, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x9b, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x800, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x1, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0xa, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r5)
sendmsg$NFC_CMD_SE_IO(r5, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x338, r6, 0x420, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0xa3, 0x19, "c18e6f12ef38e52ed63d642fc2d28a29241e6881dfbf5335d1398f4fe428ee8f779738a1be7ff0118acc83e8c1263933fb7adff4b71d5be87ecaa5caac47762518fdd486f0a26b7ab4571cb8f924759acd723560855d0dbed460f7544e5acea50f02682ab5e45746e3197fd9de4c4d8aaa1c0b88e017a0125d6e25a7fe5370b6b77cb7e5725efe3cd3340db3916069578bb8ff455de8a0f7df3c226984a91f"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x85, 0x19, "5c1085ecd24b81287a77298457fd5c1a59d6c29b038ac631299af64deeb4d55e51b7e0e82e4c89aaa65fc4e09730d02fb8a2310202ea0a1b6bf54a9d970b63b992a2b44da614d39376a31f75c89c9f2103d4e819e2c8a30ba6ab5674162a77b30cd2fa02c4cfe83fb9f00f5142cb0a4a1451bf35725a9443d0f1f245cafa899a57"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_SE_APDU={0xc3, 0x19, "9408a8be7482040cb5d8e5956141b1b15cf2bae95735c2f3c620aea6d85272dc7f10de8148f33c1a62345cd5bdab88e3039ca6aba7dd20b582b57c149e04a22214a5fd6906291d4bb6ae96c21ce86866e06d66be70e137565f44a694d0ebb8116ac38a2e54f193ee926805acfa366b2bf49fd5b620a76c5ab03e10859a0e70f86a3f5a76c7153877cf0786d03730a3ff14f7edbc1ba546730ceba5e0f0fd7b97bfe9d4ac80fc23d9de4fd8a39180ec92a828f0fb170b9d139a4df887d10a27"}, @NFC_ATTR_SE_APDU={0x27, 0x19, "4576aa5967702d7e7ba79d1bdc93614de212a90449032bc242f024dbcb423b4ae33b3d"}, @NFC_ATTR_SE_APDU={0xf1, 0x19, "b400bd70853033b04c37fb79144119c5eceb4d28ba8e353f00c1b8ff9fd258aa7de8a6d89e4c47c4daa3ce4347f8849a27df879a57e9ac2abfec17e589308598a5a7adb89f2d6670e1cc92fa6dfe933c9b9a6dd01f8f6dcd1653b1fc9471cbbc608ba1df4bc8164d9f4263b3831db2be53e21b38891fb79457d123d27a061a2ef976e6cbbbde7daebf39fd94d02f62df8eb10f0e1faf956df4f605cc499965b2af8355d96501751b86ef2e4cbe6c43962fdfd24804a04e7c0f9dffc4eaeb3dd89e7377fc0c3e31291b3740911de1008829757a36b9737c741c22ff6d9979b04b825128a287279f7d1b38455df1"}]}, 0x338}, 0x1, 0x0, 0x0, 0x44074}, 0x4)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)
lstat(0x0, 0x0)
rename(0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x63, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xabf, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7ea, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x1, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x3, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x5, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x1ff, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x3, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1fb, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x9}, {0x5, 0xc, 0x3, 0x80, 0x5, 0x4}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x1ffd, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0xb, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x9b, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x800, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x1, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0xa, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r5) (async)
sendmsg$NFC_CMD_SE_IO(r5, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x338, r6, 0x420, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0xa3, 0x19, "c18e6f12ef38e52ed63d642fc2d28a29241e6881dfbf5335d1398f4fe428ee8f779738a1be7ff0118acc83e8c1263933fb7adff4b71d5be87ecaa5caac47762518fdd486f0a26b7ab4571cb8f924759acd723560855d0dbed460f7544e5acea50f02682ab5e45746e3197fd9de4c4d8aaa1c0b88e017a0125d6e25a7fe5370b6b77cb7e5725efe3cd3340db3916069578bb8ff455de8a0f7df3c226984a91f"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x85, 0x19, "5c1085ecd24b81287a77298457fd5c1a59d6c29b038ac631299af64deeb4d55e51b7e0e82e4c89aaa65fc4e09730d02fb8a2310202ea0a1b6bf54a9d970b63b992a2b44da614d39376a31f75c89c9f2103d4e819e2c8a30ba6ab5674162a77b30cd2fa02c4cfe83fb9f00f5142cb0a4a1451bf35725a9443d0f1f245cafa899a57"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_SE_APDU={0xc3, 0x19, "9408a8be7482040cb5d8e5956141b1b15cf2bae95735c2f3c620aea6d85272dc7f10de8148f33c1a62345cd5bdab88e3039ca6aba7dd20b582b57c149e04a22214a5fd6906291d4bb6ae96c21ce86866e06d66be70e137565f44a694d0ebb8116ac38a2e54f193ee926805acfa366b2bf49fd5b620a76c5ab03e10859a0e70f86a3f5a76c7153877cf0786d03730a3ff14f7edbc1ba546730ceba5e0f0fd7b97bfe9d4ac80fc23d9de4fd8a39180ec92a828f0fb170b9d139a4df887d10a27"}, @NFC_ATTR_SE_APDU={0x27, 0x19, "4576aa5967702d7e7ba79d1bdc93614de212a90449032bc242f024dbcb423b4ae33b3d"}, @NFC_ATTR_SE_APDU={0xf1, 0x19, "b400bd70853033b04c37fb79144119c5eceb4d28ba8e353f00c1b8ff9fd258aa7de8a6d89e4c47c4daa3ce4347f8849a27df879a57e9ac2abfec17e589308598a5a7adb89f2d6670e1cc92fa6dfe933c9b9a6dd01f8f6dcd1653b1fc9471cbbc608ba1df4bc8164d9f4263b3831db2be53e21b38891fb79457d123d27a061a2ef976e6cbbbde7daebf39fd94d02f62df8eb10f0e1faf956df4f605cc499965b2af8355d96501751b86ef2e4cbe6c43962fdfd24804a04e7c0f9dffc4eaeb3dd89e7377fc0c3e31291b3740911de1008829757a36b9737c741c22ff6d9979b04b825128a287279f7d1b38455df1"}]}, 0x338}, 0x1, 0x0, 0x0, 0x44074}, 0x4) (async)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async)
write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) (async)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) (async)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) (async)
lstat(0x0, 0x0) (async)
rename(0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x63, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async)

1.618724387s ago: executing program 6 (id=843):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a888be00000002817e660501000000000088a8080022eb00020000200cf00802000000000000020004941308006558ffffffff3dcc792fa3e16f4f480e78a26c30e308d81a287e45d0988c9b8786baf89d00f6cf128d4f953614b149aa7f768d9b8083d1a7abc7bd39014feda79604505363e13736b4e5998133e17e7168d4b07dc89233cb80"], 0xfd78)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000007c00)=0x8, 0x4)

1.45582322s ago: executing program 6 (id=846):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x3c}, 0x28)
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0)
ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000040))
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002240)=@get={0xe0, 0x13, 0x1, 0x70bd28, 0x25dfdbfe, {{'ghash\x00'}, '\x00', '\x00', 0x2000, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x4040800}, 0x40080)

1.339583372s ago: executing program 5 (id=847):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x800})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x3})
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000fd0200030000000006001d"], 0x2c}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaf43deeb21b1b3ca7d3e447aaaa00000000000086dd604dd386e45b75cef80d61000000000000000000000010a6fe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="504200009078003c"], 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x82, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xffffffff, 0x1000006, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0xceb8, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x102, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0xaaf6, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0xfffffff9, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf39, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x207, 0x53cf697b, 0x4, 0x6, 0x9, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x405, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x3, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x40042)
write$binfmt_aout(r5, &(0x7f0000000480)=ANY=[], 0x125)
socket$nl_rdma(0x10, 0x3, 0x14)

1.338221069s ago: executing program 6 (id=849):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300) (async)
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
setns(0xc9, 0x0)
r2 = socket(0x8, 0x2, 0x0)
ioctl$sock_SIOCINQ(r2, 0x400461f1, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
r5 = socket(0x1, 0x803, 0x0) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8c1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r10=>0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0000000000000e24f6a14099891db09b0800450000270000000000079078ac080001ac1414aa040010040000000045002000000000000000000000000000ffffffff"], 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (rerun: 32)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async)
chdir(&(0x7f0000000100)='./file0\x00') (async)
unlink(&(0x7f00000002c0)='./file0\x00')

1.117220293s ago: executing program 5 (id=851):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000002340)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000001, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x20}}}}}}}}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef)

999.512856ms ago: executing program 6 (id=853):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

846.003303ms ago: executing program 5 (id=855):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='measure uid>1', 0xd)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x134, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xa3, 0x6, "70501c10b03ecfd053a64425ea4ee0a0422990c1e503b446c7d3f4d63efb4971be54f40fe3876c8f7cfa6523d9b895348c11002af53531d4f94050facc9fc4441be408810afef0207b4ca172bf18193ffe9ef57eac645b5db30f5921d7a687ee518f52ba40df6908a68fbfa9249fbe235770f825b7e1a3ec5cd189a924fbef0a4d73fd9f4c38f4b49ddd3a1087d7854742717735ce70ed4fef94807d8fc6ab"}, @NFTA_TABLE_USERDATA={0x72, 0x6, "b68b576f684d69b73f399316d0f6734ed37e7b4619a401e754c6dffce4094a297ce5032b43cd00524b292f187a8c9cecccb1fc75587055235d1ee7f0da1263a678d11534f526cd5473bf04c4be4cf39a5112d514d0b97a9abde9a62f631dc17aa3afbaf69867d1f10abf3cd4a6dd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="0a00e800ffffffffffff00000a001800030303030303000005005300010000000a00e80008021100000100000a00e800ffffffffffff00001c00e700fe07627ba9dd0471fd4c503521e1d9fa70ff1c1f03ab3f6c0a00e800ffffffffffff00000a00180003030303030300000800050007"], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) (async)
write(r1, &(0x7f0000000200)='measure uid>1', 0xd) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x134, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xa3, 0x6, "70501c10b03ecfd053a64425ea4ee0a0422990c1e503b446c7d3f4d63efb4971be54f40fe3876c8f7cfa6523d9b895348c11002af53531d4f94050facc9fc4441be408810afef0207b4ca172bf18193ffe9ef57eac645b5db30f5921d7a687ee518f52ba40df6908a68fbfa9249fbe235770f825b7e1a3ec5cd189a924fbef0a4d73fd9f4c38f4b49ddd3a1087d7854742717735ce70ed4fef94807d8fc6ab"}, @NFTA_TABLE_USERDATA={0x72, 0x6, "b68b576f684d69b73f399316d0f6734ed37e7b4619a401e754c6dffce4094a297ce5032b43cd00524b292f187a8c9cecccb1fc75587055235d1ee7f0da1263a678d11534f526cd5473bf04c4be4cf39a5112d514d0b97a9abde9a62f631dc17aa3afbaf69867d1f10abf3cd4a6dd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="0a00e800ffffffffffff00000a001800030303030303000005005300010000000a00e80008021100000100000a00e800ffffffffffff00001c00e700fe07627ba9dd0471fd4c503521e1d9fa70ff1c1f03ab3f6c0a00e800ffffffffffff00000a00180003030303030300000800050007"], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)

757.629214ms ago: executing program 6 (id=856):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
setuid(0xee00)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589b"], 0xfdef)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setpriority(0x1, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010f700060100000000000000000000000016f99d1b3b0f3f7be2386c3c00000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c00028008000119a901349dcbef3e4012d4f5865aea5acf6810f7ad6c0c5357008b7a0717c8ccd17aeb32eef087105e451cb7604722df442d46d7ae42b0eba259738c00b9499a3df2d270b79a00c5a3436fe0102e27b807a7"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

618.703588ms ago: executing program 6 (id=858):
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x302)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syzkaller0\x00', @broadcast})
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x2, 0x3}, {0x8, 0x5}, {0xf}]}, @fwd={0xf}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @float={0x7, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000140)=""/120, 0x92, 0x78, 0x1, 0x1, 0x10000, @value=r1}, 0x28)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x3, 0x3, 0x4, {0x1, @sliced={0x9, [0x80, 0xfff8, 0x7, 0x100, 0x10, 0xd, 0x9, 0x9, 0x1, 0x10, 0x0, 0x3, 0x1, 0x9, 0xc5, 0x100, 0x39b, 0x6, 0x8, 0x5, 0x6, 0x401, 0xd, 0xfff, 0x8, 0x2, 0x0, 0xfff, 0xfffd, 0x4, 0x1da, 0x5bed, 0xd9a, 0x2, 0x42, 0x0, 0x6, 0x4, 0x51b, 0x5, 0x8001, 0x9, 0x8000, 0x5, 0x3, 0x7, 0x3, 0xfffc], 0xe4}}, 0x2})
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, <r4=>0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_STATFS(r3, &(0x7f00000023c0)={0x60, 0x0, r4, {{0x943, 0xd17, 0x2, 0x6, 0x8, 0x0, 0xfffffff8}}}, 0x60)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000002440), &(0x7f0000002480)=0x4)
setxattr$incfs_id(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500), &(0x7f0000002540)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000025c0)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000003380)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003340)={&(0x7f0000002600)=@newtclass={0xd20, 0x28, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff3, 0xb}, {0x8, 0xfff1}, {0xb, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7b}}, @tclass_kind_options=@c_htb={{0x8}, {0xcc8, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x9}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x0, 0x4, 0x5d0, 0x7ff, 0x8}, {0x6d, 0x2, 0x2e, 0x8, 0x1}, 0x9, 0x5, 0x1, 0xfff, 0xc9ca}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x814, 0x5, 0x0, 0x9, 0x3, 0x301, 0xff, 0xc, 0xcd, 0x9, 0x2cc, 0x7, 0xffff, 0xffffff11, 0x10, 0x8cd, 0x5, 0x10, 0x8, 0x4, 0x10001, 0x0, 0x7ec, 0xa, 0x9, 0xf, 0x6, 0x0, 0x2b306f9a, 0x2, 0xfffffffc, 0x90e1, 0x3, 0x2, 0xf0a, 0xd, 0xffff3a18, 0x1000000, 0x9, 0x0, 0x9, 0x3, 0xfffffffb, 0x10001, 0x401, 0x8000, 0x7, 0x0, 0x4, 0x100, 0x2, 0x401, 0x4, 0x3, 0x1, 0xd, 0x40, 0x5, 0xc, 0xa8e9, 0x8000, 0x7, 0x8888, 0x80000000, 0x7fffffff, 0x200, 0xfffffff5, 0x6, 0x8, 0x9, 0xfffffff9, 0x0, 0x7, 0x6, 0x2, 0x8, 0x5, 0x3, 0x9, 0x5, 0x5, 0xffff, 0x100, 0x9, 0x3ff, 0x0, 0x4, 0x2, 0x5, 0xffff, 0xfffeffff, 0x1, 0x80000001, 0x7, 0x3, 0xfffffffe, 0x3, 0x9, 0x8000, 0x1, 0x9, 0x1, 0x7, 0x5, 0x6, 0x5, 0x800, 0x2, 0xffffed1c, 0x776ca10, 0x6, 0x5, 0xb, 0x7, 0x3, 0x3, 0x8, 0x8000, 0x1, 0x2, 0xfffffffb, 0x1, 0x7, 0x5, 0x0, 0xfb20, 0x4, 0x69, 0x7, 0x2, 0xe834, 0xa, 0x2, 0x1, 0x8, 0x7, 0x7, 0x7, 0x3, 0x5, 0x5, 0x0, 0x3, 0x7ff, 0xbd85, 0x2, 0x8001, 0x62, 0x9, 0x800, 0x9, 0x3ff, 0x1, 0x4, 0x49, 0x8, 0x0, 0x9, 0x8, 0x5, 0x0, 0x3, 0xf0, 0x1, 0x6, 0x400, 0x0, 0x7, 0x800, 0x6, 0x3, 0x7, 0xb971, 0x1, 0x1, 0x2, 0x7, 0x2, 0xe20, 0x7fffffff, 0xff, 0x9, 0x1, 0x200, 0x5, 0x9, 0xfffffff5, 0xff, 0x6, 0x4, 0x9, 0x7, 0xfffffff9, 0x2a0, 0x0, 0x6, 0x5, 0xa, 0x3, 0x7fffffff, 0x2, 0x572, 0x8, 0xffffffff, 0x0, 0x7, 0x8, 0x2, 0x80, 0x8001, 0x7, 0x3, 0x7fffffff, 0x3, 0x40, 0x2, 0xe, 0xb7, 0x2, 0x80000001, 0x1c00000, 0x7, 0x9, 0x8, 0xd, 0x4, 0x86a0, 0x6, 0x3, 0x6, 0x2, 0x8, 0x8, 0x7c, 0x986, 0x80000001, 0x2, 0x0, 0x7, 0x3b678039, 0x81, 0x3, 0x4, 0x0, 0x1, 0xa7, 0xd, 0x7, 0xffffffff, 0x260f2534, 0xff, 0x5, 0x0, 0x8110, 0x32]}, @TCA_HTB_RATE64={0xc, 0x6, 0xffffffffffffff8e}, @TCA_HTB_CTAB={0x404, 0x3, [0x200000, 0x8, 0x1, 0x3cab, 0x5, 0xd, 0x2, 0x0, 0x9, 0x8, 0xb6, 0x6, 0x7c, 0xb, 0x8, 0x5e804f22, 0x8, 0x7, 0x101, 0x7f, 0x4, 0x0, 0x2, 0x2, 0x90e7, 0x9, 0x4, 0x5, 0x80, 0x1, 0x5, 0xe, 0xfffffffe, 0x2, 0x7, 0x7, 0x4, 0x8, 0x4, 0x4, 0x8, 0x100, 0x8, 0x9, 0x9, 0x265, 0x400, 0x3, 0xfffffff7, 0x1, 0x87, 0xf92, 0x400, 0x6b, 0x5, 0xb38d6b3, 0xb, 0xea, 0xea4, 0x0, 0x0, 0x656c, 0x9, 0xa6, 0x73, 0xaa5, 0x8, 0x6, 0x3af7, 0x8, 0x0, 0x3, 0x6fdf, 0x5, 0x10000, 0x7ff, 0x22b1, 0xea, 0x4, 0xf36, 0x4, 0x0, 0x2, 0x3, 0x0, 0xfffffffb, 0x3, 0x9, 0x7, 0x2, 0x6, 0x0, 0x9, 0x2, 0x4, 0xf, 0x1ff, 0x5, 0x9, 0x5, 0x9, 0x3, 0x6, 0x101, 0x4, 0x9, 0x100, 0x4, 0x1, 0x9, 0x4, 0x1, 0x8, 0x6a, 0x6, 0xf, 0x9e, 0x1, 0x0, 0xffffffff, 0x401, 0x479, 0x1, 0x7f, 0x2, 0x5, 0x1, 0x80000000, 0x2, 0x4, 0x80000001, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffcd6, 0x10001, 0x1, 0xc4, 0x10001, 0x1, 0xa3, 0x0, 0x5, 0xfffffffe, 0x3, 0x393, 0xa2, 0x8, 0x6, 0x5, 0x1, 0x3, 0x9, 0x2, 0x101, 0x20, 0x400, 0xfffffd66, 0x2, 0x6, 0x7f, 0xf5, 0x4, 0x0, 0x0, 0x80, 0x1, 0x4, 0xffff1ff6, 0x0, 0x800, 0x400, 0xfffffffb, 0xfffffffa, 0x7, 0x3, 0x0, 0x5, 0xff, 0x0, 0xc, 0x4, 0xfffffffc, 0x8, 0xfffffff7, 0x9, 0x5, 0x10001, 0x9, 0x40, 0x5, 0x6, 0x4, 0x5, 0x3, 0x400, 0x1, 0x5, 0x2, 0x40, 0x1, 0x7, 0x4, 0xc, 0x8, 0x5, 0xfffffffd, 0x3, 0x7, 0xb, 0x7, 0x81, 0xd, 0xfffffffe, 0x3ff, 0x10001, 0x3, 0x9, 0x8, 0x3, 0x0, 0x2, 0x4, 0x6, 0xfffffffb, 0xa, 0x10000, 0xfffffffa, 0x0, 0x80000001, 0x8, 0x6, 0xfffffffc, 0x3, 0x4f6, 0x3, 0x3b40, 0x2, 0xb41e, 0x3d, 0x80, 0x8, 0x888, 0x6, 0x9, 0x8, 0x306cfb0f, 0x7ff, 0xd, 0x3, 0x2, 0x4, 0x3, 0x6]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xfd, 0x0, 0x0, 0x90, 0xdd42, 0xb}, {0x0, 0x0, 0xc, 0x1, 0xff, 0x56a}, 0x9, 0x6, 0x3, 0x4, 0x8}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x1, 0x8, 0xff, 0x5, 0x2}, {0x4, 0x0, 0x400, 0x1, 0xd2c5, 0x4}, 0x2, 0xffffff80, 0xfffffffe, 0x7, 0xd}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x800}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x9, 0xfffffff8, 0x7f, 0x2, 0x0, 0x3, 0x9912, 0xa, 0xf227, 0x5, 0x8, 0xb9, 0x0, 0x1, 0x8, 0x55, 0xffff, 0x9c96, 0x6ad7, 0x5a, 0x200, 0x3, 0x10001, 0x3, 0x0, 0x1, 0x2, 0x0, 0x3, 0x0, 0x94, 0x9, 0xffff, 0xfffffff6, 0x1000, 0x4, 0x6cad, 0x7, 0xffff7597, 0x8, 0x9, 0x2, 0xfffffffe, 0x401, 0xa7a, 0x1, 0xfb, 0xa, 0x100, 0x5, 0x7, 0xffff0000, 0x10000, 0x7ff, 0x5, 0x3c, 0x81, 0x6, 0x8, 0x0, 0x8001, 0xb2, 0x296, 0x7, 0x3f15f548, 0x40, 0x8, 0x7, 0x9, 0x3, 0x2, 0x6, 0x4, 0x6ec, 0xc, 0x8, 0xf, 0xd3c, 0x1, 0x4, 0xd008, 0xd, 0xffffffff, 0x9, 0xffffff71, 0xa, 0x4, 0x5, 0x1ff, 0x3, 0x0, 0xf71, 0xa, 0x4, 0x0, 0x4, 0x7fff, 0x7fffffff, 0x1, 0x2d, 0xfffffbff, 0x1000, 0x6, 0x4c, 0x8, 0x6, 0x10, 0xffff, 0x3, 0x7bd75f61, 0x1, 0xca2b, 0x6, 0x8, 0xffffb53f, 0x1, 0x6, 0x3, 0x3, 0x80, 0x80000000, 0x1ff, 0x10, 0xb, 0x100, 0x5, 0x4, 0xfffffa51, 0xffff, 0x9, 0xf590dcd, 0x3, 0x7, 0x5, 0xd, 0x68, 0x3, 0x4, 0x10001, 0xffffc958, 0xe5, 0x9, 0x6, 0x2, 0x18, 0x2, 0x401, 0x5, 0x3, 0x8a, 0x7fff, 0x505, 0xe13f, 0x7ff, 0x41cb, 0xf, 0xb26, 0x3, 0x1, 0x6, 0xd, 0x4, 0xcc73, 0x1, 0x0, 0x10, 0x3, 0x6, 0x79b58c9c, 0xffff, 0x0, 0x7, 0x3, 0x8, 0x4, 0xf6c, 0x7, 0x3, 0x460, 0xffffffff, 0x8, 0x99400000, 0x4, 0x8, 0x0, 0x2, 0x4, 0x2, 0x7, 0x53a, 0x9, 0x57, 0x0, 0x1, 0x2, 0x9, 0xfffffff9, 0x5, 0xf9, 0x9, 0x7, 0xbe, 0x401, 0x4, 0x4, 0x2, 0x0, 0x0, 0x5, 0x2, 0x2, 0xfffffff9, 0x0, 0x80000000, 0x107b, 0xff, 0x9, 0x9, 0x730d, 0xf, 0x10000, 0x9, 0x401, 0x28, 0xfffffffc, 0x8, 0x8, 0x8, 0x7, 0x400, 0x1, 0x8, 0xf, 0x5, 0x4000000, 0x1, 0x6, 0x5bdf, 0x5, 0x6, 0x4, 0x8, 0x80000000, 0x4, 0x5, 0x10001, 0xce7f, 0x0, 0x1, 0x7f, 0x446b, 0x800, 0x7, 0x9, 0x9]}]}}]}, 0xd20}, 0x1, 0x0, 0x0, 0x880}, 0x28851)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000033c0)={0x3a, @broadcast, 0x4e24, 0x4, 'sh\x00', 0x0, 0xb, 0x5b}, 0x2c)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000003400)={0x0, 0x3fa1, 0x80000, 0x3, 0x142}, &(0x7f0000003480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52a, 0x10, 0x1, 0xda}, <r9=>0xffffffffffffffff, 0x0, <r10=>0x0, <r11=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x65ec, 0x4, 0x2, 0x334}, <r12=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xafd3, 0x80c00, 0x0, 0x135, 0x0, r2}, <r13=>0xffffffffffffffff, 0x0, <r14=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc086, 0x0, 0x3, 0x36e}}], 0x4, &(0x7f0000004700)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x602}, 0x0, <r15=>0x0, '\x00', {0x3, 0x28f, 0x0, &(0x7f0000003700)=@buf_1k="2f696530c53b3a23d1211cd3777d8504986fb21e22c07615f360499c6937b6e2050d4fc68353990247237dc8e3c282770abee14fc8dd8a7c56c16265064b60e2089964ae85be0b3d2044cbd05057366fdfef9c4097713751b4caff01588fdba0fafd377b3dd0c18afb97fbd16029046916ba104e6ff5cc4c1d0e61ab5829401f160b1289e3d130b0a574c2a4604d75d716c43a9042cff1e08438796557ea3e8ee4f39c0e6f3ac62d2bb0594ae13a4ce7321ee59d1cfaf6658226d4f577cfa645da99626463608692611bd70b779add641d18fe6f22bfa6d35edec007e885569108741e5a3e5a253ebc709868cedbe86c36dcdba7ff348d34a4470618de040bc228e6ff383312b579d44499bb987303cb105240902b135c2897b236b5e4b9f05d9c83c7a2444ec2f9fda2ef595f6e50aaff3d3b1fa7fe4ae6afa265b2b377ddcada3ce605b6c3b5ffb9e2f1f7ee2dd4b584061c0bd17467feacc51f1a8bf9afab95b6833e424ac5469f39c540d53da92e580c509552de1e3f5ea5618789ef541b38f88627a89164f0029533728732b0db21ea911b9649dae59e26cd99aef32006a25115d33a28c5d912880e33deb887f10e5d99845ed35dc2e118b79f02f0c0d9525e7fc26a0c1f830ae7b159050cbf39b0f6a3ce66552f1d993318d9aae4ccd97d441ea202071baec335d81d67ffe03da9c0ea8e5083544d480bfd8cbd07104332498ec6584c58c4801090781b2f4d42a79ed621214c32c7cdb65bf47164c2225b1330c486b9f7f49816ddfa558351259503af55ace509dd84e25b18c0b9c5bd25ba43ecab57fbcbde6bc84ee0a2a4408fba63038bf16d9c3e776c5be91d83031fea37e2460c973820c998969811fe471a48d4a6feb85fb9a7e9d52f778c1faf3ba8d2d4e8ece16662db6e454a0b675eda1a484f04330dbbb164fb39bee814b874859916daa286fa2a69f71ef0e463fff53e91ac44727a7aa3118966c2ba5882ef46d8d6551f5d5859dcea17c80759d69462adefb837593d916b930a83452cd545c28086a09605d4915cd8782620bce39db8d56171f4e79fe73d9b2f08a68ec53045cf5ac916b17ffda255dfc609ef436117e6abc04eb1dbeb54050748c27428dc09023a81a8df93e3a5c1d28f4ec9e03a598352832d8d55d3581dc57fab145a9ab45eeeb0d123c54e1d4a2af4a825fc9901624321398b9f13e484a652ec64cd268ef29616406b42e0d73204ceede993555f7b62f6a3342eea577e7d50886f9acbe1eb19f5c1b25d5b9642349dc8361fec76c77ad233d39108c78e21bc28d6419ac11fff12ba32c69da35be967929d99bf91906a8a41a132c0498483189f8ff8b6797cd3f709b81ab369525fa36ce8b08e3fdb2bb5745ebbfebb6473071d2392cf1a8955801d275bd2c4de1a3c33214dc0d6de16d07a7ca4fb5ff5866c47265e"}}, &(0x7f0000004780)=<r16=>0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000047c0)={0x0, 0x94ed, 0x0, 0x1, 0x1a2}, &(0x7f0000004840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc75f, 0x800, 0x2, 0x108}}, {0x0, 0x0, <r17=>0xffffffffffffffff, {0x0, 0x9525, 0x800, 0x2, 0x106}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe631, 0x48840, 0x2, 0x3}, 0xffffffffffffffff, 0x0, 0x0, <r18=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9237, 0x800, 0x0, 0x351}}], 0x4, &(0x7f0000005ac0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, <r19=>0x0, '\x00', {0x0, 0x8f0, 0x0, &(0x7f0000004ac0)=@buf_4k="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"}}, &(0x7f0000005b40))
syz_ublk_process_io(r16, 0x1, 0x1, &(0x7f0000006b80)=@ublk_io_need_get_data_sqe={0x2e, 0x9, 0x0, r17, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x0, 0x31d, 0x4, &(0x7f0000005b80)=@buf_1k="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"}}, 0x1)
syz_io_uring_setup(0x3722, &(0x7f0000006c00)={0x0, 0xfd09, 0x8000, 0x0, 0x15c, 0x0, r9}, &(0x7f0000006c80)=<r20=>0x0, &(0x7f0000006cc0), &(0x7f0000006d00))
syz_ublk_add_dev(r13, 0x0, r10, r11, &(0x7f0000006d80)={0x2e, 0x20, 0x0, <r21=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r19, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000006d40)=@new_dev={0x1, 0x7a6, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff}}}, &(0x7f0000006e00))
ioctl$UBLK_U_CMD_DEL_DEV(r12, 0xc0207505, &(0x7f0000006e40)={<r22=>0x0})
syz_io_uring_submit$UBLK(r20, r14, r18, &(0x7f0000006ec0)=@ublk_end_user_recovery_sqe={0x2e, 0x10, 0x0, r21, 0xc0207511, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r15, '\x00', {r22, 0xffff, 0x0, 0x0, r5}})
r23 = syz_open_dev$usbmon(&(0x7f0000006f40), 0xffffffff, 0x0)
read$usbmon(r23, &(0x7f0000006f80)=""/4096, 0x1000)
r24 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000007f80)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r24, 0xc038586a, &(0x7f00000080c0)={<r25=>0xffffffffffffffff, &(0x7f0000007fc0)='[){#\x00', 0x800, &(0x7f0000008000)={@align=0xe1, {0x1ff, 0x3, 0xfffffffb, 0x81}}, 0xfffffc00, &(0x7f0000008040), &(0x7f0000008080)=0x6})
recvmsg(r25, &(0x7f0000008500)={&(0x7f0000008100)=@generic, 0x80, &(0x7f0000008440)=[{&(0x7f0000008180)=""/224, 0xe0}, {&(0x7f0000008280)=""/199, 0xc7}, {&(0x7f0000008380)=""/49, 0x31}, {&(0x7f00000083c0)=""/92, 0x5c}], 0x4, &(0x7f0000008480)=""/100, 0x64}, 0x60)
r26 = accept4$packet(r25, &(0x7f0000008540), &(0x7f0000008580)=0x14, 0x0)
setsockopt$packet_drop_memb(r26, 0x107, 0x2, &(0x7f00000085c0)={r8, 0x1, 0x6, @remote}, 0x10)

617.830941ms ago: executing program 5 (id=859):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x154, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xab}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x17c20}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x46}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004804}, 0x4004014)
r5 = accept4$alg(r1, 0x0, 0x0, 0x0)
read$alg(r5, &(0x7f0000002300)=""/4128, 0x1020)
sendmmsg$alg(r5, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="b1029f", 0x3}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r8, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chroot(0x0)
lsetxattr$security_evm(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x5, 0x0, 0x17, 0x46}, 0x9, 0x1)
bind$bt_hci(r6, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c)

488.470914ms ago: executing program 7 (id=860):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x2000481, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x800)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x0)

410.215346ms ago: executing program 7 (id=861):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="88420000000000002800128008000100677265001c000280050016000100000008000100", @ANYRES32=r1, @ANYBLOB="05000900090000001400030067656e657665310000000000000000009c00188098000180060002002800000008000100060000005200020067656e6576653100d6faa91356e3f2324dee8b71a960d3ba19ae61d903f09dbf9bc513531fbec61de2c0e12f2d73650f4927c46d11ac18488e5fb9d93441e8b36ac52563bedc4cef39b2ec9465f40000140005001264404108a2aff8e539dd6cb079a27114000500bf9af0efef8ab96fd073d439852a451b0500060009000000"], 0xf8}}, 0x26040090) (async)
socket(0x2, 0x3, 0xff) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0)
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYBLOB="2046ab5d42c79db3cadb978508719f5b2e808d17b4388e67534f8ec80efd8233dbe6fb6963af20cb7d30091babf71b094eba1aa4ef19c20800d06340070e96cb760b2e12e449a43f58b6181bed09b02f9b83d505fd12e38e7f90035bac4f9626ca82a62aabb8839e71c1f034608a04a590673a3ee782b40d8a7c26ec9ed6ef7618a12880105ba3d2f01b"], 0x8) (async)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) (async)
listen(r2, 0x100004) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4) (async)
sendmmsg(r4, &(0x7f0000004d40)=[{{&(0x7f0000000080)=@generic={0x29, "e06001d55ddfe49c1ad89762a7af7d93ebc4fde89e4d1aacc2978e4f40095939bb33d271200be6423a580ced65191294998d9c74b9df63d3bc3e4c0202bf5baf3a08a113b681b200fe4eff759cbaa4afa048751e11b85efa9aaa4ac866bae1e4262f36be4d12034842667b7627e8598d75268ae7b6b374992697523f3ef4"}, 0x80, 0x0}}], 0x1, 0x24008010)

410.04476ms ago: executing program 8 (id=862):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = dup(r1)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000050005"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

409.817404ms ago: executing program 8 (id=863):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r2 = syz_io_uring_setup(0x1a7, &(0x7f00000000c0)={0x0, 0x62a8, 0x1, 0x0, 0x50}, &(0x7f0000000040)=<r3=>0x0, 0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x800, 0x70bd26, 0x25dfdbfc, {0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0x6}]}, 0x24}}, 0x0)

290.132407ms ago: executing program 8 (id=864):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

287.793612ms ago: executing program 8 (id=865):
socket$nl_route(0x10, 0x3, 0x0)

287.463203ms ago: executing program 7 (id=866):
setns(0xc9, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x4000, 0x0, 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x4008005)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x16)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00', 0x7101})
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x70100, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FITHAW(r3, 0xc0045878)
fchown(r2, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(r2, &(0x7f0000001500)='./dev\x00', 0x1e9)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./dev/sda1\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0)
ioctl$TUNSETIFF(r4, 0x40e8662e, 0x0)

287.269011ms ago: executing program 8 (id=867):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000040)=0x7)
r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0x3e, 0xc, 0x4, 0x0, 0xba62, {0x0, 0xea60}, {0x7, 0x8, 0x3, 0x3, 0xc, 0xe, "ca5e10ea"}, 0x1, 0x4, {}, 0xfffffff4, 0x0, <r2=>0xffffffffffffffff})
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000140))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r3, <r4=>0xffffffffffffffff}, 0x4)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x9, @sdr={0x50313134}})
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x4, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000003c0)='GPL\x00', 0x98dc, 0x6b, &(0x7f0000000400)=""/107, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x8, 0x4, 0xbb}, 0x10, 0xd878, 0xffffffffffffffff, 0x3, &(0x7f0000000500)=[0x1, r4, r3, r4], &(0x7f0000000540)=[{0x5, 0x1, 0x4, 0x1}, {0x2, 0x3, 0xc, 0x8}, {0x4, 0x4, 0x4, 0x9}], 0x10, 0x4}, 0x94)
fstat(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x8)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000001800)={0xcadf8c4c134ee2b6, 0x0, &(0x7f0000000700)=""/75, &(0x7f0000000780)=""/96, &(0x7f0000000800)=""/4096, 0x9000})
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000001a40)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000001880)=[{0x20, 0x0, [0x8, 0x7, 0x588, 0x4, 0x584, 0x200, 0x2, 0xef6, 0x40, 0xa8a7ef1, 0x1, 0x80000001, 0x2, 0xf44, 0x2, 0x9]}, {0x34, 0x0, [0x2, 0x81, 0x49, 0x9, 0x7, 0x3, 0xd, 0x7, 0x8, 0x44, 0x3, 0x9, 0x7ff, 0x7, 0x6, 0x2]}, {0x3, 0x0, [0x1, 0x8, 0xdf, 0x6, 0x3ff, 0x101, 0x9, 0xfffffff9, 0x1, 0x1, 0x9, 0x0, 0x4, 0x3, 0xfffff51b, 0xb4e1]}, {0x0, 0x0, [0xffff3157, 0x6, 0x4, 0x7ff, 0xffffff1a, 0x6, 0x4, 0x0, 0x0, 0x7, 0x3, 0x9, 0xfffffff9, 0x0, 0x8d1, 0x4]}, {0x3, 0x0, [0x12e2, 0xffff0001, 0x8, 0xd5, 0x2, 0x3, 0x4, 0x2, 0x8, 0x1, 0xbe15, 0x80, 0xf, 0xfffffffa, 0xccc, 0x7fff]}, {0x6, 0x0, [0x9, 0x800, 0xe0dd, 0x1, 0x8f, 0xff, 0x6, 0x18000, 0xfffeffff, 0x5, 0x1, 0x9, 0x7, 0xeee, 0xde, 0x9]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001b80)={<r9=>r7, &(0x7f0000001a80)='%-010d \x00', 0x800, &(0x7f0000001ac0)={@_ha_fsid={[0x5, 0x7]}, {0x7, 0x2, 0x101, 0x9}}, 0x3b, &(0x7f0000001b00)={@_ha_fsid}, &(0x7f0000001b40)=0xffff})
preadv(r9, &(0x7f0000001f40)=[{&(0x7f0000001bc0)=""/249, 0xf9}, {&(0x7f0000001cc0)=""/236, 0xec}, {&(0x7f0000001dc0)=""/203, 0xcb}, {&(0x7f0000001ec0)=""/101, 0x65}], 0x4, 0x8, 0x7f)
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r10, 0x7a9, &(0x7f0000001fc0)={{@local, 0x5}, 0x8, 0xc4ec, 0x2, 0xffffffff, 0xc04040e, 0x7d, 0x91a, 0xff})
r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002000), 0x20d381, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000002040), &(0x7f0000002080)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f00000020c0), 0x100, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x100)
setresuid(r6, r6, r12)
io_uring_enter(r11, 0x62ab, 0xbae4, 0x60, &(0x7f00000021c0)={[0xc9]}, 0x8)
accept4$inet(r11, &(0x7f0000002200)={0x2, 0x0, @initdev}, &(0x7f0000002240)=0x10, 0x800)
statx(r9, &(0x7f0000002280)='./file0\x00', 0x100, 0x0, &(0x7f00000022c0))
r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r13, 0x4068aea3, &(0x7f00000023c0)={0xdf, 0x0, 0x4000})

189.915229ms ago: executing program 8 (id=868):
r0 = socket(0x400000000010, 0x3, 0x1fe)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000280)={0x1, 0xa, 0x2})
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(r2)
r3 = socket(0x2000000015, 0x80005, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}, 0x1c)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000680)={r6, 0x1fb, 0x0, 0x1, 0x0, [], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x7]})
r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40008, 0x5})
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}})
recvmsg$unix(r2, &(0x7f00000005c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000440)=""/188, 0xbc}], 0x7, &(0x7f0000000580)=[@cred={{0x1c}}], 0x20}, 0x2001)

119.298912ms ago: executing program 7 (id=869):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x404c814)
write(r0, &(0x7f0000000000)="2400000020005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

118.922568ms ago: executing program 7 (id=870):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001040400060404009bbc7a46e3988285dcdf12f213e6f768fe", 0x69}], 0x1}, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0xe4e, 0x9, 0x9, 0x4e, 0x120000, 0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x40000)

0s ago: executing program 7 (id=871):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = dup2(r1, r1)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)
setns(0xc9, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 ff ff ff f7 d8 64 89 01 48
[  177.615767][ T8851] RSP: 002b:00007fb31a43b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  177.615792][ T8851] RAX: ffffffffffffffda RBX: 00007fb319825fa0 RCX: 00007fb31959e159
[  177.615824][ T8851] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  177.615839][ T8851] RBP: 00007fb31963503b R08: 0000000000000000 R09: 0000000000000000
[  177.615851][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.615864][ T8851] R13: 00007fb319826038 R14: 00007fb319825fa0 R15: 00007ffdcd2762c8
[  177.615892][ T8851]  </TASK>
[  177.715256][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.715339][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.715407][ T8818] bridge_slave_0: entered allmulticast mode
[  177.716512][ T8818] bridge_slave_0: entered promiscuous mode
[  177.718899][ T8818] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.719014][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.719113][ T8818] bridge_slave_1: entered allmulticast mode
[  177.720241][ T8818] bridge_slave_1: entered promiscuous mode
[  177.779373][ T5839] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.799055][ T8818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.801228][ T8818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.821693][ T8818] team0: Port device team_slave_0 added
[  177.823084][ T8818] team0: Port device team_slave_1 added
[  177.837844][ T8818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.837856][ T8818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.837870][ T8818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.838887][ T8818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.838895][ T8818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.838908][ T8818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.863023][ T8818] hsr_slave_0: entered promiscuous mode
[  177.863454][ T8818] hsr_slave_1: entered promiscuous mode
[  177.863749][ T8818] debugfs: 'hsr0' already exists in 'hsr'
[  177.863760][ T8818] Cannot create hsr debugfs directory
[  177.914452][ T5839] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.937222][ T8863] FAULT_INJECTION: forcing a failure.
[  177.937222][ T8863] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.937243][ T8863] CPU: 2 UID: 0 PID: 8863 Comm: syz.2.589 Not tainted syzkaller #0 PREEMPT(full) 
[  177.937256][ T8863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  177.937263][ T8863] Call Trace:
[  177.937266][ T8863]  <TASK>
[  177.937271][ T8863]  dump_stack_lvl+0x100/0x190
[  177.937291][ T8863]  should_fail_ex.cold+0x5/0xa
[  177.937308][ T8863]  strncpy_from_user+0x3b/0x2d0
[  177.937322][ T8863]  do_getname+0x78/0x390
[  177.937347][ T8863]  do_sys_openat2+0xc7/0x1e0
[  177.937363][ T8863]  ? __pfx_do_sys_openat2+0x10/0x10
[  177.937378][ T8863]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  177.937394][ T8863]  ? __fget_files+0x21f/0x3d0
[  177.937409][ T8863]  __x64_sys_openat+0x12d/0x210
[  177.937425][ T8863]  ? __pfx___x64_sys_openat+0x10/0x10
[  177.937439][ T8863]  ? ksys_write+0x1ac/0x250
[  177.937455][ T8863]  do_syscall_64+0x123/0x790
[  177.937470][ T8863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.937482][ T8863] RIP: 0033:0x7fb31959e159
[  177.937492][ T8863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.937502][ T8863] RSP: 002b:00007fb31a43b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  177.937514][ T8863] RAX: ffffffffffffffda RBX: 00007fb319825fa0 RCX: 00007fb31959e159
[  177.937521][ T8863] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  177.937528][ T8863] RBP: 00007fb31a43b090 R08: 0000000000000000 R09: 0000000000000000
[  177.937534][ T8863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.937541][ T8863] R13: 00007fb319826038 R14: 00007fb319825fa0 R15: 00007ffdcd2762c8
[  177.937554][ T8863]  </TASK>
[  178.037953][ T8818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.119564][ T8818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.142939][ T5839] bridge_slave_1: left allmulticast mode
[  178.142957][ T5839] bridge_slave_1: left promiscuous mode
[  178.143074][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.145856][ T5839] bridge_slave_0: left allmulticast mode
[  178.145873][ T5839] bridge_slave_0: left promiscuous mode
[  178.145977][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.297867][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.303180][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.309593][ T5839] bond0 (unregistering): Released all slaves
[  178.345799][ T8818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.434135][   T43] audit: type=1400 audit(1789157221.455:776): avc:  denied  { write } for  pid=8872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  178.470745][ T8818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.594891][ T5839] hsr_slave_0: left promiscuous mode
[  178.595584][ T5839] hsr_slave_1: left promiscuous mode
[  178.598276][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.598295][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.601315][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.601332][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.616888][ T5839] veth1_macvtap: left promiscuous mode
[  178.616923][ T5839] veth0_macvtap: left promiscuous mode
[  178.618438][ T5839] veth1_vlan: left promiscuous mode
[  178.618506][ T5839] veth0_vlan: left promiscuous mode
[  178.832391][ T5839] team0 (unregistering): Port device team_slave_1 removed
[  178.842886][ T5839] team0 (unregistering): Port device team_slave_0 removed
[  178.962262][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2
[  179.138513][ T8818] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  179.140569][ T8818] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  179.141192][ T8818] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  179.144194][ T8818] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  179.144763][ T8818] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  179.156919][ T8818] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  179.157454][ T8818] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  179.172164][ T8818] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  179.235826][ T8818] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.256475][ T5748] Bluetooth: hci3: command tx timeout
[  179.281466][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3
[  179.290578][ T8818] 8021q: adding VLAN 0 to HW filter on device team0
[  179.296714][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.296800][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.302668][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.302763][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.531564][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4
[  179.572384][   T65] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  179.651397][ T8818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.705947][ T8818] veth0_vlan: entered promiscuous mode
[  179.715260][ T8818] veth1_vlan: entered promiscuous mode
[  179.745638][ T8818] veth0_macvtap: entered promiscuous mode
[  179.754080][ T8818] veth1_macvtap: entered promiscuous mode
[  179.770540][ T8818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.782394][ T8818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.854492][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5
[  179.878648][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.878883][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.879165][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.879457][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.898137][ T8912] netlink: 'syz.2.594': attribute type 2 has an invalid length.
[  179.934958][ T8912] : entered promiscuous mode
[  179.974473][ T8928] could not allocate digest TFM handle crc32-generic
[  180.015535][ T7236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.015553][ T7236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.049942][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.049962][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.095759][ T8939] FAULT_INJECTION: forcing a failure.
[  180.095759][ T8939] name failslab, interval 1, probability 0, space 0, times 0
[  180.095783][ T8939] CPU: 0 UID: 0 PID: 8939 Comm: syz.2.598 Not tainted syzkaller #0 PREEMPT(full) 
[  180.095839][ T8939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  180.095847][ T8939] Call Trace:
[  180.095851][ T8939]  <TASK>
[  180.095856][ T8939]  dump_stack_lvl+0x100/0x190
[  180.095879][ T8939]  should_fail_ex.cold+0x5/0xa
[  180.095898][ T8939]  should_failslab+0xc2/0x120
[  180.095915][ T8939]  __kmalloc_noprof+0xfc/0x840
[  180.095928][ T8939]  ? handler_new_ref+0x1ab/0xc60
[  180.095949][ T8939]  handler_new_ref+0x1ab/0xc60
[  180.095971][ T8939]  v4l2_ctrl_new+0xe67/0x23a0
[  180.095994][ T8939]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  180.096013][ T8939]  ? handler_new_ref+0x7cb/0xc60
[  180.096035][ T8939]  v4l2_ctrl_new_std+0x1bb/0x290
[  180.096065][ T8939]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  180.096086][ T8939]  ? __mutex_unlock_slowpath+0x35d/0x930
[  180.096107][ T8939]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  180.096127][ T8939]  ? __asan_memcpy+0x3c/0x60
[  180.096139][ T8939]  ? find_ref+0x209/0x420
[  180.096158][ T8939]  handler_new_ref+0x82f/0xc60
[  180.096181][ T8939]  v4l2_ctrl_new+0xe67/0x23a0
[  180.096224][ T8939]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  180.096251][ T8939]  v4l2_ctrl_new_std+0x1bb/0x290
[  180.096277][ T8939]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  180.096301][ T8939]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  180.096320][ T8939]  ? media_request_object_init+0x105/0x180
[  180.096340][ T8939]  vicodec_open+0x2a6/0xf70
[  180.096352][ T8939]  ? kobject_get_unless_zero+0xe0/0x200
[  180.096375][ T8939]  v4l2_open+0x1d2/0x490
[  180.096394][ T8939]  ? __pfx_v4l2_open+0x10/0x10
[  180.096412][ T8939]  chrdev_open+0x234/0x6a0
[  180.096428][ T8939]  ? __pfx_chrdev_open+0x10/0x10
[  180.096444][ T8939]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  180.096466][ T8939]  do_dentry_open+0x6ab/0x14d0
[  180.096479][ T8939]  ? __pfx_chrdev_open+0x10/0x10
[  180.096497][ T8939]  vfs_open+0x82/0x3f0
[  180.096514][ T8939]  path_openat+0x19fa/0x2440
[  180.096531][ T8939]  ? __pfx_path_openat+0x10/0x10
[  180.096553][ T8939]  do_file_open+0x20e/0x430
[  180.096570][ T8939]  ? __pfx_do_file_open+0x10/0x10
[  180.096595][ T8939]  ? _raw_spin_unlock+0x28/0x50
[  180.096608][ T8939]  ? alloc_fd+0x471/0x7a0
[  180.096628][ T8939]  do_sys_openat2+0x10f/0x1e0
[  180.096644][ T8939]  ? __pfx_do_sys_openat2+0x10/0x10
[  180.096666][ T8939]  __x64_sys_openat+0x12d/0x210
[  180.096684][ T8939]  ? __pfx___x64_sys_openat+0x10/0x10
[  180.096707][ T8939]  do_syscall_64+0x123/0x790
[  180.096724][ T8939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.096738][ T8939] RIP: 0033:0x7fb31959e159
[  180.096749][ T8939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.096761][ T8939] RSP: 002b:00007fb31a43b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  180.096775][ T8939] RAX: ffffffffffffffda RBX: 00007fb319825fa0 RCX: 00007fb31959e159
[  180.096783][ T8939] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  180.096790][ T8939] RBP: 00007fb31963503b R08: 0000000000000000 R09: 0000000000000000
[  180.096798][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.096811][ T8939] R13: 00007fb319826038 R14: 00007fb319825fa0 R15: 00007ffdcd2762c8
[  180.096828][ T8939]  </TASK>
[  180.110774][ T8945] netlink: 52 bytes leftover after parsing attributes in process `syz.3.579'.
[  180.110791][ T8945] netlink: 52 bytes leftover after parsing attributes in process `syz.3.579'.
[  180.110800][ T8945] netlink: 52 bytes leftover after parsing attributes in process `syz.3.579'.
[  180.130155][ T8942] FAULT_INJECTION: forcing a failure.
[  180.130155][ T8942] name failslab, interval 1, probability 0, space 0, times 0
[  180.130175][ T8942] CPU: 0 UID: 0 PID: 8942 Comm: syz.9.599 Not tainted syzkaller #0 PREEMPT(full) 
[  180.130187][ T8942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  180.130193][ T8942] Call Trace:
[  180.130197][ T8942]  <TASK>
[  180.130202][ T8942]  dump_stack_lvl+0x100/0x190
[  180.130221][ T8942]  should_fail_ex.cold+0x5/0xa
[  180.130238][ T8942]  should_failslab+0xc2/0x120
[  180.130252][ T8942]  kmem_cache_alloc_noprof+0x92/0x6a0
[  180.130264][ T8942]  ? alloc_empty_file+0x5b/0x1c0
[  180.130281][ T8942]  alloc_empty_file+0x5b/0x1c0
[  180.130296][ T8942]  path_openat+0xdb/0x2440
[  180.130311][ T8942]  ? __pfx_path_openat+0x10/0x10
[  180.130328][ T8942]  do_file_open+0x20e/0x430
[  180.130343][ T8942]  ? __pfx_do_file_open+0x10/0x10
[  180.130365][ T8942]  ? _raw_spin_unlock+0x28/0x50
[  180.130377][ T8942]  ? alloc_fd+0x471/0x7a0
[  180.130394][ T8942]  do_sys_openat2+0x10f/0x1e0
[  180.130409][ T8942]  ? __pfx_do_sys_openat2+0x10/0x10
[  180.130424][ T8942]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  180.130439][ T8942]  ? __fget_files+0x21f/0x3d0
[  180.130454][ T8942]  __x64_sys_openat+0x12d/0x210
[  180.130469][ T8942]  ? __pfx___x64_sys_openat+0x10/0x10
[  180.130483][ T8942]  ? ksys_write+0x1ac/0x250
[  180.130512][ T8942]  do_syscall_64+0x123/0x790
[  180.130529][ T8942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.130542][ T8942] RIP: 0033:0x7faaecf9e159
[  180.130552][ T8942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.130562][ T8942] RSP: 002b:00007faaede00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  180.130573][ T8942] RAX: ffffffffffffffda RBX: 00007faaed225fa0 RCX: 00007faaecf9e159
[  180.130580][ T8942] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  180.130587][ T8942] RBP: 00007faaede00090 R08: 0000000000000000 R09: 0000000000000000
[  180.130593][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.130599][ T8942] R13: 00007faaed226038 R14: 00007faaed225fa0 R15: 00007fffe658f7f8
[  180.130613][ T8942]  </TASK>
[  181.336932][   T65] Bluetooth: hci3: command tx timeout
[  182.439277][ T8974] could not open pipe file descriptor
[  182.495114][   T43] kauditd_printk_skb: 12 callbacks suppressed
[  182.495132][   T43] audit: type=1400 audit(1789157225.515:789): avc:  denied  { read } for  pid=8975 comm="syz.9.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  182.933216][   T43] audit: type=1400 audit(1789157225.955:790): avc:  denied  { write } for  pid=8980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  182.986356][   T43] audit: type=1400 audit(1789157226.005:791): avc:  denied  { write } for  pid=8983 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.116404][   T43] audit: type=1400 audit(1789157226.135:792): avc:  denied  { write } for  pid=8986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.173240][   T43] audit: type=1400 audit(1789157226.195:793): avc:  denied  { write } for  pid=8989 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.269268][   T43] audit: type=1400 audit(1789157226.295:794): avc:  denied  { write } for  pid=8992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.316568][   T43] audit: type=1400 audit(1789157226.345:795): avc:  denied  { write } for  pid=8996 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.385888][ T9001] FAULT_INJECTION: forcing a failure.
[  183.385888][ T9001] name failslab, interval 1, probability 0, space 0, times 0
[  183.385918][ T9001] CPU: 0 UID: 0 PID: 9001 Comm: syz.2.611 Not tainted syzkaller #0 PREEMPT(full) 
[  183.385939][ T9001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  183.385950][ T9001] Call Trace:
[  183.385955][ T9001]  <TASK>
[  183.385962][ T9001]  dump_stack_lvl+0x100/0x190
[  183.386008][ T9001]  should_fail_ex.cold+0x5/0xa
[  183.386034][ T9001]  should_failslab+0xc2/0x120
[  183.386063][ T9001]  kmem_cache_alloc_noprof+0x92/0x6a0
[  183.386084][ T9001]  ? security_file_alloc+0x34/0x2c0
[  183.386109][ T9001]  security_file_alloc+0x34/0x2c0
[  183.386131][ T9001]  init_file+0x95/0x480
[  183.386154][ T9001]  alloc_empty_file+0x79/0x1c0
[  183.386179][ T9001]  path_openat+0xdb/0x2440
[  183.386228][ T9001]  ? __pfx_path_openat+0x10/0x10
[  183.386258][ T9001]  do_file_open+0x20e/0x430
[  183.386281][ T9001]  ? __pfx_do_file_open+0x10/0x10
[  183.386320][ T9001]  ? _raw_spin_unlock+0x28/0x50
[  183.386346][ T9001]  ? alloc_fd+0x471/0x7a0
[  183.386375][ T9001]  do_sys_openat2+0x10f/0x1e0
[  183.386399][ T9001]  ? __pfx_do_sys_openat2+0x10/0x10
[  183.386424][ T9001]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  183.386447][ T9001]  ? __fget_files+0x21f/0x3d0
[  183.386477][ T9001]  __x64_sys_openat+0x12d/0x210
[  183.386502][ T9001]  ? __pfx___x64_sys_openat+0x10/0x10
[  183.386526][ T9001]  ? ksys_write+0x1ac/0x250
[  183.386552][ T9001]  do_syscall_64+0x123/0x790
[  183.386578][ T9001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.386597][ T9001] RIP: 0033:0x7fb31959e159
[  183.386613][ T9001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.386629][ T9001] RSP: 002b:00007fb31a43b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  183.386647][ T9001] RAX: ffffffffffffffda RBX: 00007fb319825fa0 RCX: 00007fb31959e159
[  183.386659][ T9001] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  183.386670][ T9001] RBP: 00007fb31a43b090 R08: 0000000000000000 R09: 0000000000000000
[  183.386680][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.386690][ T9001] R13: 00007fb319826038 R14: 00007fb319825fa0 R15: 00007ffdcd2762c8
[  183.386715][ T9001]  </TASK>
[  183.406381][   T65] Bluetooth: hci3: command tx timeout
[  184.073728][   T43] audit: type=1400 audit(1789157227.095:796): avc:  denied  { write } for  pid=9009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.133982][   T43] audit: type=1400 audit(1789157227.155:797): avc:  denied  { write } for  pid=9012 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.356972][   T43] audit: type=1400 audit(1789157228.375:798): avc:  denied  { setattr } for  pid=9026 comm="syz.2.616" name="video36" dev="devtmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  185.487000][   T65] Bluetooth: hci3: command tx timeout
[  185.656164][ T9035] FAULT_INJECTION: forcing a failure.
[  185.656164][ T9035] name failslab, interval 1, probability 0, space 0, times 0
[  185.657391][ T9035] CPU: 2 UID: 0 PID: 9035 Comm: syz.9.618 Not tainted syzkaller #0 PREEMPT(full) 
[  185.657428][ T9035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  185.657438][ T9035] Call Trace:
[  185.657448][ T9035]  <TASK>
[  185.657457][ T9035]  dump_stack_lvl+0x100/0x190
[  185.657493][ T9035]  should_fail_ex.cold+0x5/0xa
[  185.657523][ T9035]  should_failslab+0xc2/0x120
[  185.657548][ T9035]  __kmalloc_noprof+0xfc/0x840
[  185.657572][ T9035]  ? handler_new_ref+0x1ab/0xc60
[  185.657619][ T9035]  handler_new_ref+0x1ab/0xc60
[  185.657655][ T9035]  v4l2_ctrl_new+0xe67/0x23a0
[  185.657692][ T9035]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  185.657723][ T9035]  ? handler_new_ref+0x7cb/0xc60
[  185.657758][ T9035]  v4l2_ctrl_new_std+0x1bb/0x290
[  185.657794][ T9035]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  185.657826][ T9035]  ? __mutex_unlock_slowpath+0x35d/0x930
[  185.657857][ T9035]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  185.657885][ T9035]  ? __asan_memcpy+0x3c/0x60
[  185.657904][ T9035]  ? find_ref+0x209/0x420
[  185.657932][ T9035]  handler_new_ref+0x82f/0xc60
[  185.657972][ T9035]  v4l2_ctrl_new+0xe67/0x23a0
[  185.658009][ T9035]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  185.658050][ T9035]  v4l2_ctrl_new_std+0x1bb/0x290
[  185.658108][ T9035]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  185.658142][ T9035]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  185.658213][ T9035]  ? media_request_object_init+0x105/0x180
[  185.658250][ T9035]  vicodec_open+0x2a6/0xf70
[  185.658271][ T9035]  ? kobject_get_unless_zero+0xe0/0x200
[  185.658303][ T9035]  v4l2_open+0x1d2/0x490
[  185.658347][ T9035]  ? __pfx_v4l2_open+0x10/0x10
[  185.658379][ T9035]  chrdev_open+0x234/0x6a0
[  185.658406][ T9035]  ? __pfx_chrdev_open+0x10/0x10
[  185.658427][ T9035]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  185.658462][ T9035]  do_dentry_open+0x6ab/0x14d0
[  185.658483][ T9035]  ? __pfx_chrdev_open+0x10/0x10
[  185.658512][ T9035]  vfs_open+0x82/0x3f0
[  185.658540][ T9035]  path_openat+0x19fa/0x2440
[  185.658582][ T9035]  ? __pfx_path_openat+0x10/0x10
[  185.658617][ T9035]  do_file_open+0x20e/0x430
[  185.658646][ T9035]  ? __pfx_do_file_open+0x10/0x10
[  185.658691][ T9035]  ? _raw_spin_unlock+0x28/0x50
[  185.658716][ T9035]  ? alloc_fd+0x471/0x7a0
[  185.658749][ T9035]  do_sys_openat2+0x10f/0x1e0
[  185.658776][ T9035]  ? __pfx_do_sys_openat2+0x10/0x10
[  185.658812][ T9035]  __x64_sys_openat+0x12d/0x210
[  185.658840][ T9035]  ? __pfx___x64_sys_openat+0x10/0x10
[  185.658877][ T9035]  do_syscall_64+0x123/0x790
[  185.658907][ T9035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.658929][ T9035] RIP: 0033:0x7faaecf9e159
[  185.658949][ T9035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.658968][ T9035] RSP: 002b:00007faaede00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  185.658990][ T9035] RAX: ffffffffffffffda RBX: 00007faaed225fa0 RCX: 00007faaecf9e159
[  185.659006][ T9035] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  185.659021][ T9035] RBP: 00007faaed03503b R08: 0000000000000000 R09: 0000000000000000
[  185.659035][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.659047][ T9035] R13: 00007faaed226038 R14: 00007faaed225fa0 R15: 00007fffe658f7f8
[  185.659078][ T9035]  </TASK>
[  185.935197][ T9046] netlink: 96 bytes leftover after parsing attributes in process `syz.9.621'.
[  186.134958][ T9053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.957456][ T9085] ªªªªªª: renamed from vlan0 (while UP)
[  188.971047][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.973586][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.974833][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.975639][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.976140][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.226633][ T9060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  189.229705][ T9059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  189.355961][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.501296][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.556662][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.556788][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.556901][ T9088] bridge_slave_0: entered allmulticast mode
[  189.558254][ T9088] bridge_slave_0: entered promiscuous mode
[  189.562141][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.562214][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.562315][ T9088] bridge_slave_1: entered allmulticast mode
[  189.563890][ T9088] bridge_slave_1: entered promiscuous mode
[  189.610059][ T9088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.615414][ T9088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.663746][   T43] kauditd_printk_skb: 7 callbacks suppressed
[  189.663791][   T43] audit: type=1400 audit(1789157232.685:806): avc:  denied  { write } for  pid=9126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.685103][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.700632][ T9088] team0: Port device team_slave_0 added
[  189.706737][ T9088] team0: Port device team_slave_1 added
[  189.769283][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.769299][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  189.769320][ T9088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.770900][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.770912][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  189.770934][ T9088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.773264][   T43] audit: type=1400 audit(1789157232.795:807): avc:  denied  { write } for  pid=9135 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.824028][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.846476][ T9138] Invalid option length (480) for dns_resolver key
[  189.881000][ T9088] hsr_slave_0: entered promiscuous mode
[  189.881781][ T9088] hsr_slave_1: entered promiscuous mode
[  189.882286][ T9088] debugfs: 'hsr0' already exists in 'hsr'
[  189.882303][ T9088] Cannot create hsr debugfs directory
[  190.091332][   T12] bridge_slave_1: left allmulticast mode
[  190.091358][   T12] bridge_slave_1: left promiscuous mode
[  190.091540][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.094833][   T12] bridge_slave_0: left allmulticast mode
[  190.094861][   T12] bridge_slave_0: left promiscuous mode
[  190.095041][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.141879][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.9.640'.
[  190.141903][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.9.640'.
[  190.192536][   T43] audit: type=1400 audit(1789157233.215:808): avc:  denied  { mount } for  pid=9146 comm="syz.9.641" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  190.254558][   T43] audit: type=1400 audit(1789157233.275:809): avc:  denied  { watch watch_reads } for  pid=9146 comm="syz.9.641" path="/63/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  190.276074][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.284654][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.285987][   T12] bond0 (unregistering): Released all slaves
[  190.324411][   T43] audit: type=1400 audit(1789157233.345:810): avc:  denied  { unmount } for  pid=8155 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  190.497095][ T9152] bond1: Unable to set up delay as MII monitoring is disabled
[  190.499690][ T9152] bond1 (unregistering): Released all slaves
[  190.607654][   T43] audit: type=1400 audit(1789157233.635:811): avc:  denied  { write } for  pid=9156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.659780][   T12] hsr_slave_0: left promiscuous mode
[  190.660982][   T12] hsr_slave_1: left promiscuous mode
[  190.661551][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.661565][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.665032][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.665045][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.677917][   T12] veth1_macvtap: left promiscuous mode
[  190.677941][   T12] veth0_macvtap: left promiscuous mode
[  190.677987][   T12] veth1_vlan: left promiscuous mode
[  190.678017][   T12] veth0_vlan: left promiscuous mode
[  190.702090][   T43] audit: type=1400 audit(1789157233.725:812): avc:  denied  { write } for  pid=9159 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.704372][ T9161] autofs: Unknown parameter '¸í4h¿Ûíi&SD¦_‘‡÷LMEwK7žÐ¦ã"w©CÙ�ñ¿ØÔùH)ÿ
U #Š½qý»¯]”ÑæW]V°º{Jˆ�bÁçÕ˜za¶	 ¬�Ò¼‚ô½¥ƒüÖ± L3ô4úÙyÙBP¾`ó±¸懅¶Íà{ïÆL0?êíM#I�ˆ;;ÞtºêU“—÷2 É¤þ8Q'
[  190.733756][   T43] audit: type=1400 audit(1789157233.755:813): avc:  denied  { map } for  pid=9160 comm="syz.9.644" path="socket:[38213]" dev="sockfs" ino=38213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  190.770626][   T43] audit: type=1400 audit(1789157233.795:814): avc:  denied  { watch_mount watch_reads } for  pid=9160 comm="syz.9.644" path="/66/file0" dev="9p" ino=74212615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  190.785211][   T43] audit: type=1400 audit(1789157233.805:815): avc:  denied  { mounton } for  pid=9160 comm="syz.9.644" path="/66/file0/file0" dev="9p" ino=74212645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  190.801389][ T9161] overlay: ./file0 is not a directory
[  190.919347][   T12] team0 (unregistering): Port device team_slave_1 removed
[  190.926739][   T12] team0 (unregistering): Port device team_slave_0 removed
[  191.022115][ T5444] 8021q: adding VLAN 0 to HW filter on device eth26
[  191.101091][ T5748] Bluetooth: hci0: command tx timeout
[  191.216918][ T9178] netlink: 16 bytes leftover after parsing attributes in process `syz.9.648'.
[  191.216944][ T9178] netlink: 16 bytes leftover after parsing attributes in process `syz.9.648'.
[  191.333947][ T9184] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(256.8192.244), cmd(5)
[  191.439903][ T5444] 8021q: adding VLAN 0 to HW filter on device eth27
[  191.681237][ T5444] 8021q: adding VLAN 0 to HW filter on device eth28
[  191.925722][ T5444] 8021q: adding VLAN 0 to HW filter on device eth29
[  192.385370][ T9088] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.389404][ T9088] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  192.389829][ T9088] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  192.395674][ T9088] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  192.397062][ T9088] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  192.405884][ T9088] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  192.410188][ T9088] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  192.413331][ T9088] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  192.475480][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.484493][ T9088] 8021q: adding VLAN 0 to HW filter on device team0
[  192.490566][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.490655][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.492316][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.492399][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.509439][ T9088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.509454][ T9088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.818917][ T9088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.853919][ T9088] veth0_vlan: entered promiscuous mode
[  192.864487][ T9088] veth1_vlan: entered promiscuous mode
[  192.894561][ T9088] veth0_macvtap: entered promiscuous mode
[  192.897558][ T9088] veth1_macvtap: entered promiscuous mode
[  192.906133][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.913807][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.969378][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.969425][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.969452][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.969482][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.029672][ T7198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.029695][ T7198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.050338][ T7236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.050366][ T7236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.166423][ T5748] Bluetooth: hci0: command tx timeout
[  193.452072][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  193.462233][ T1131] ata1.00: configured for UDMA/100
[  193.595681][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'.
[  193.595705][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'.
[  193.735233][ T9292] FAULT_INJECTION: forcing a failure.
[  193.735233][ T9292] name failslab, interval 1, probability 0, space 0, times 0
[  193.735263][ T9292] CPU: 2 UID: 0 PID: 9292 Comm: syz.0.658 Not tainted syzkaller #0 PREEMPT(full) 
[  193.735283][ T9292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  193.735294][ T9292] Call Trace:
[  193.735301][ T9292]  <TASK>
[  193.735308][ T9292]  dump_stack_lvl+0x100/0x190
[  193.735339][ T9292]  should_fail_ex.cold+0x5/0xa
[  193.735371][ T9292]  should_failslab+0xc2/0x120
[  193.735395][ T9292]  __kmalloc_noprof+0xfc/0x840
[  193.735415][ T9292]  ? tomoyo_encode2+0xfb/0x3c0
[  193.735442][ T9292]  tomoyo_encode2+0xfb/0x3c0
[  193.735466][ T9292]  tomoyo_encode+0x29/0x50
[  193.735486][ T9292]  tomoyo_realpath_from_path+0x18c/0x690
[  193.735513][ T9292]  tomoyo_check_open_permission+0x2af/0x3c0
[  193.735543][ T9292]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  193.735581][ T9292]  ? hook_file_open+0x248/0x8e0
[  193.735623][ T9292]  ? path_get+0x61/0x80
[  193.735651][ T9292]  tomoyo_file_open+0x6b/0x90
[  193.735676][ T9292]  security_file_open+0xb5/0x1e0
[  193.735699][ T9292]  do_dentry_open+0x588/0x14d0
[  193.735726][ T9292]  vfs_open+0x82/0x3f0
[  193.735796][ T9292]  path_openat+0x19fa/0x2440
[  193.735823][ T9292]  ? __pfx_path_openat+0x10/0x10
[  193.735852][ T9292]  do_file_open+0x20e/0x430
[  193.735876][ T9292]  ? __pfx_do_file_open+0x10/0x10
[  193.735918][ T9292]  ? _raw_spin_unlock+0x28/0x50
[  193.735938][ T9292]  ? alloc_fd+0x471/0x7a0
[  193.735969][ T9292]  do_sys_openat2+0x10f/0x1e0
[  193.735994][ T9292]  ? __pfx_do_sys_openat2+0x10/0x10
[  193.736020][ T9292]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  193.736046][ T9292]  ? __fget_files+0x21f/0x3d0
[  193.736071][ T9292]  __x64_sys_openat+0x12d/0x210
[  193.736097][ T9292]  ? __pfx___x64_sys_openat+0x10/0x10
[  193.736120][ T9292]  ? ksys_write+0x1ac/0x250
[  193.736148][ T9292]  do_syscall_64+0x123/0x790
[  193.736175][ T9292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.736210][ T9292] RIP: 0033:0x7f082259e159
[  193.736226][ T9292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.736244][ T9292] RSP: 002b:00007f0823435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  193.736264][ T9292] RAX: ffffffffffffffda RBX: 00007f0822825fa0 RCX: 00007f082259e159
[  193.736276][ T9292] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  193.736288][ T9292] RBP: 00007f0823435090 R08: 0000000000000000 R09: 0000000000000000
[  193.736299][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.736310][ T9292] R13: 00007f0822826038 R14: 00007f0822825fa0 R15: 00007ffc03e63378
[  193.736335][ T9292]  </TASK>
[  193.737497][ T9292] ERROR: Out of memory at tomoyo_realpath_from_path.
[  193.893991][ T9298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.659'.
[  194.848679][ T1442] ieee802154 phy0 wpan0: encryption failed: -22
[  194.848732][ T1442] ieee802154 phy1 wpan1: encryption failed: -22
[  194.986015][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'.
[  195.246506][ T5748] Bluetooth: hci0: command tx timeout
[  195.883548][   T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.888975][   T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.890119][   T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.895544][   T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.898195][   T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.156720][ T5839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.253874][ T5839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.344358][ T5839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.442377][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.442484][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.442553][ T9338] bridge_slave_0: entered allmulticast mode
[  196.443529][ T9338] bridge_slave_0: entered promiscuous mode
[  196.446146][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.446309][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.446401][ T9338] bridge_slave_1: entered allmulticast mode
[  196.453170][ T9338] bridge_slave_1: entered promiscuous mode
[  196.483059][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.486181][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.508343][ T5839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.522387][ T9338] team0: Port device team_slave_0 added
[  196.523703][ T9338] team0: Port device team_slave_1 added
[  196.540250][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.540267][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.540286][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.541867][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.541879][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.541899][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.571062][ T9338] hsr_slave_0: entered promiscuous mode
[  196.571991][ T9338] hsr_slave_1: entered promiscuous mode
[  196.572476][ T9338] debugfs: 'hsr0' already exists in 'hsr'
[  196.572493][ T9338] Cannot create hsr debugfs directory
[  196.711895][ T5839] bridge_slave_1: left allmulticast mode
[  196.711912][ T5839] bridge_slave_1: left promiscuous mode
[  196.712024][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.713910][ T5839] bridge_slave_0: left allmulticast mode
[  196.713923][ T5839] bridge_slave_0: left promiscuous mode
[  196.715305][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.818499][   T43] kauditd_printk_skb: 39 callbacks suppressed
[  196.818514][   T43] audit: type=1400 audit(1789157239.835:855): avc:  denied  { write } for  pid=9358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.864873][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.873171][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.874824][ T5839] bond0 (unregistering): Released all slaves
[  196.887618][   T43] audit: type=1400 audit(1789157239.915:856): avc:  denied  { write } for  pid=9361 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.961754][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6
[  197.174194][   T43] audit: type=1400 audit(1789157240.195:857): avc:  denied  { write } for  pid=9366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.248855][   T43] audit: type=1400 audit(1789157240.275:858): avc:  denied  { write } for  pid=9369 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.249538][ T5839] hsr_slave_0: left promiscuous mode
[  197.250270][ T5839] hsr_slave_1: left promiscuous mode
[  197.250894][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.250909][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.251691][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.251706][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.265689][ T5839] veth1_macvtap: left promiscuous mode
[  197.265726][ T5839] veth0_macvtap: left promiscuous mode
[  197.265808][ T5839] veth1_vlan: left promiscuous mode
[  197.265861][ T5839] veth0_vlan: left promiscuous mode
[  197.326418][   T65] Bluetooth: hci0: command tx timeout
[  197.467686][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  197.467708][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  197.531223][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.666'.
[  197.531389][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.666'.
[  197.531506][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.666'.
[  197.531617][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.666'.
[  197.531773][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.666'.
[  197.533796][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.666'.
[  197.533924][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.666'.
[  197.534040][ T9382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.666'.
[  197.554394][ T5839] team0 (unregistering): Port device team_slave_1 removed
[  197.575748][ T5839] team0 (unregistering): Port device team_slave_0 removed
[  197.637722][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7
[  197.690684][ T9386] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  197.764026][   T43] audit: type=1400 audit(1789157240.785:859): avc:  denied  { write } for  pid=9387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.845832][   T43] audit: type=1400 audit(1789157240.865:860): avc:  denied  { write } for  pid=9392 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.914117][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8
[  197.976867][   T65] Bluetooth: hci1: command tx timeout
[  198.018767][   T43] audit: type=1400 audit(1789157241.045:861): avc:  denied  { write } for  pid=9400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.098063][   T43] audit: type=1400 audit(1789157241.125:862): avc:  denied  { write } for  pid=9403 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.157168][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9
[  198.220520][   T43] audit: type=1400 audit(1789157241.245:863): avc:  denied  { write } for  pid=9406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.274897][ T9414] ip6tnl1: entered allmulticast mode
[  198.279772][ T5839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  198.280002][ T5839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  198.280764][   T43] audit: type=1400 audit(1789157241.305:864): avc:  denied  { write } for  pid=9412 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.317373][  T851] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  198.396621][  T851] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  198.455907][ T9426] sctp: [Deprecated]: syz.0.675 (pid 9426) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.455907][ T9426] Use struct sctp_sack_info instead
[  198.457010][ T9426] sctp: [Deprecated]: syz.0.675 (pid 9426) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.457010][ T9426] Use struct sctp_sack_info instead
[  198.667433][   T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  198.705737][ T9338] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  198.710933][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  198.711813][ T9338] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  198.714517][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  198.715431][ T9338] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  198.720144][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  198.721062][ T9338] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  198.727550][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  198.772728][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.778743][ T9338] 8021q: adding VLAN 0 to HW filter on device team0
[  198.782997][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.783047][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.783859][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.783900][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.081055][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.254723][ T9338] veth0_vlan: entered promiscuous mode
[  199.260641][ T9338] veth1_vlan: entered promiscuous mode
[  199.275007][ T9338] veth0_macvtap: entered promiscuous mode
[  199.277910][ T9338] veth1_macvtap: entered promiscuous mode
[  199.286359][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.291215][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.340026][ T5581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.362206][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.362237][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.362256][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.415434][ T7235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.415455][ T7235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.446254][ T7236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.446269][ T7236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.454111][ T9480] nft_compat: unsupported protocol 1
[  199.530321][ T9487] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  199.612341][ T9483] infiniband syz0: set active
[  199.617494][ T9483] infiniband syz0: added bond0
[  199.649158][ T9483] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  199.649196][ T9483] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  199.649232][ T9483] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  199.693663][ T9483] RDS/IB: syz0: added
[  199.693923][ T9483] smc: adding ib device syz0 with port count 1
[  199.694017][ T9483] smc:    ib device syz0 port 1 has no pnetid
[  199.994472][ T9519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.057683][   T65] Bluetooth: hci1: command tx timeout
[  200.100288][ T9523] netlink: 'syz.0.684': attribute type 16 has an invalid length.
[  200.100307][ T9523] netlink: 'syz.0.684': attribute type 17 has an invalid length.
[  200.121905][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.126141][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.180331][ T9523] ip6tnl1: left allmulticast mode
[  200.200972][ T9523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9523 comm=syz.0.684
[  200.201104][ T5581] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  200.218061][   T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  200.315492][ T9482] ima: policy update completed
[  200.346616][  T851] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  200.506671][ T8316] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  200.657399][ T8316] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  200.658360][ T8316] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  200.658389][ T8316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  200.658413][ T8316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  200.660352][ T8316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.660375][ T8316] usb 5-1: Product: syz
[  200.660389][ T8316] usb 5-1: Manufacturer: syz
[  200.660402][ T8316] usb 5-1: SerialNumber: syz
[  200.664633][ T8316] usb 5-1: config 0 descriptor??
[  200.674070][ T9531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  200.736914][ T8316] rc_core: IR keymap rc-streamzap not found
[  200.736927][ T8316] Registered IR keymap rc-empty
[  200.738511][ T8316] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0
[  200.744594][ T8316] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input12
[  200.806744][ T5581] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  200.806933][ T5581] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  200.881119][ T9531] overlay: Bad value for 'uuid'
[  201.390127][ T1040] usb 5-1: USB disconnect, device number 7
[  201.972688][   T43] kauditd_printk_skb: 52 callbacks suppressed
[  201.972708][   T43] audit: type=1800 audit(1789157244.995:917): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  201.985353][   T43] audit: type=1800 audit(1789157245.005:918): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  202.031452][   T43] audit: type=1800 audit(1789157245.055:919): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  202.086489][   T43] audit: type=1800 audit(1789157245.115:920): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  202.123991][   T43] audit: type=1800 audit(1789157245.145:921): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  202.134943][   T65] Bluetooth: hci1: command tx timeout
[  202.172432][   T43] audit: type=1800 audit(1789157245.195:922): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  202.193538][ T9561] netlink: 'syz.0.691': attribute type 3 has an invalid length.
[  202.201597][   T43] audit: type=1400 audit(1789157245.225:923): avc:  denied  { read } for  pid=9560 comm="syz.0.691" dev="nsfs" ino=4026532995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  202.201844][   T43] audit: type=1400 audit(1789157245.225:924): avc:  denied  { open } for  pid=9560 comm="syz.0.691" path="net:[4026532995]" dev="nsfs" ino=4026532995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  202.203017][   T43] audit: type=1400 audit(1789157245.225:925): avc:  denied  { lock } for  pid=9560 comm="syz.0.691" path="socket:[37623]" dev="sockfs" ino=37623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  203.053281][   T43] audit: type=1800 audit(1789157246.075:926): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[  203.424205][ T9577] FAULT_INJECTION: forcing a failure.
[  203.424205][ T9577] name failslab, interval 1, probability 0, space 0, times 0
[  203.424238][ T9577] CPU: 1 UID: 0 PID: 9577 Comm: syz.0.694 Not tainted syzkaller #0 PREEMPT(full) 
[  203.424260][ T9577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  203.424273][ T9577] Call Trace:
[  203.424281][ T9577]  <TASK>
[  203.424289][ T9577]  dump_stack_lvl+0x100/0x190
[  203.424325][ T9577]  should_fail_ex.cold+0x5/0xa
[  203.424353][ T9577]  should_failslab+0xc2/0x120
[  203.424379][ T9577]  __kmalloc_noprof+0xfc/0x840
[  203.424401][ T9577]  ? handler_new_ref+0x1ab/0xc60
[  203.424437][ T9577]  handler_new_ref+0x1ab/0xc60
[  203.424473][ T9577]  v4l2_ctrl_new+0xe67/0x23a0
[  203.424512][ T9577]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  203.424569][ T9577]  ? handler_new_ref+0x7cb/0xc60
[  203.424608][ T9577]  v4l2_ctrl_new_std+0x1bb/0x290
[  203.424646][ T9577]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  203.424681][ T9577]  ? __mutex_unlock_slowpath+0x35d/0x930
[  203.424720][ T9577]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  203.424753][ T9577]  ? __asan_memcpy+0x3c/0x60
[  203.424774][ T9577]  ? find_ref+0x209/0x420
[  203.424805][ T9577]  handler_new_ref+0x82f/0xc60
[  203.424842][ T9577]  v4l2_ctrl_new+0xe67/0x23a0
[  203.424878][ T9577]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  203.424918][ T9577]  v4l2_ctrl_new_std+0x1bb/0x290
[  203.424955][ T9577]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  203.424990][ T9577]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  203.425019][ T9577]  ? media_request_object_init+0x105/0x180
[  203.425049][ T9577]  vicodec_open+0x2a6/0xf70
[  203.425069][ T9577]  ? kobject_get_unless_zero+0xe0/0x200
[  203.425107][ T9577]  v4l2_open+0x1d2/0x490
[  203.425136][ T9577]  ? __pfx_v4l2_open+0x10/0x10
[  203.425165][ T9577]  chrdev_open+0x234/0x6a0
[  203.425191][ T9577]  ? __pfx_chrdev_open+0x10/0x10
[  203.425215][ T9577]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  203.425252][ T9577]  do_dentry_open+0x6ab/0x14d0
[  203.425273][ T9577]  ? __pfx_chrdev_open+0x10/0x10
[  203.425303][ T9577]  vfs_open+0x82/0x3f0
[  203.425332][ T9577]  path_openat+0x19fa/0x2440
[  203.425364][ T9577]  ? __pfx_path_openat+0x10/0x10
[  203.425396][ T9577]  do_file_open+0x20e/0x430
[  203.425423][ T9577]  ? __pfx_do_file_open+0x10/0x10
[  203.425467][ T9577]  ? _raw_spin_unlock+0x28/0x50
[  203.425488][ T9577]  ? alloc_fd+0x471/0x7a0
[  203.425522][ T9577]  do_sys_openat2+0x10f/0x1e0
[  203.425550][ T9577]  ? __pfx_do_sys_openat2+0x10/0x10
[  203.425588][ T9577]  __x64_sys_openat+0x12d/0x210
[  203.425617][ T9577]  ? __pfx___x64_sys_openat+0x10/0x10
[  203.425655][ T9577]  do_syscall_64+0x123/0x790
[  203.425685][ T9577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.425706][ T9577] RIP: 0033:0x7f082259e159
[  203.425735][ T9577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.425755][ T9577] RSP: 002b:00007f0823435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  203.425776][ T9577] RAX: ffffffffffffffda RBX: 00007f0822825fa0 RCX: 00007f082259e159
[  203.425789][ T9577] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  203.425803][ T9577] RBP: 00007f082263503b R08: 0000000000000000 R09: 0000000000000000
[  203.425815][ T9577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.425828][ T9577] R13: 00007f0822826038 R14: 00007f0822825fa0 R15: 00007ffc03e63378
[  203.425857][ T9577]  </TASK>
[  203.619489][ T9582] overlayfs: missing 'lowerdir'
[  203.826310][ T9591] __nla_validate_parse: 36 callbacks suppressed
[  203.826330][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'.
[  203.826349][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'.
[  203.894513][ T9593] kernel read not supported for file /policy (pid: 9593 comm: syz.0.700)
[  203.980359][ T9599] ip6erspan0: entered allmulticast mode
[  204.208806][   T65] Bluetooth: hci1: command tx timeout
[  204.296571][    C2] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  204.296592][    C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  204.410646][ T9608] FAULT_INJECTION: forcing a failure.
[  204.410646][ T9608] name failslab, interval 1, probability 0, space 0, times 0
[  204.410676][ T9608] CPU: 1 UID: 0 PID: 9608 Comm: syz.0.704 Not tainted syzkaller #0 PREEMPT(full) 
[  204.410698][ T9608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  204.410709][ T9608] Call Trace:
[  204.410715][ T9608]  <TASK>
[  204.410722][ T9608]  dump_stack_lvl+0x100/0x190
[  204.410755][ T9608]  should_fail_ex.cold+0x5/0xa
[  204.410779][ T9608]  should_failslab+0xc2/0x120
[  204.410800][ T9608]  __kvmalloc_node_noprof+0x113/0x9b0
[  204.410822][ T9608]  ? v4l2_ctrl_new+0x4a6/0x23a0
[  204.410853][ T9608]  v4l2_ctrl_new+0x4a6/0x23a0
[  204.410881][ T9608]  ? kasan_save_stack+0x3f/0x50
[  204.410897][ T9608]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  204.410920][ T9608]  ? handler_new_ref+0x7cb/0xc60
[  204.410946][ T9608]  v4l2_ctrl_new_std+0x1bb/0x290
[  204.410972][ T9608]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  204.410996][ T9608]  ? __mutex_unlock_slowpath+0x35d/0x930
[  204.411021][ T9608]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  204.411047][ T9608]  ? __asan_memcpy+0x3c/0x60
[  204.411063][ T9608]  ? find_ref+0x209/0x420
[  204.411088][ T9608]  handler_new_ref+0x82f/0xc60
[  204.411120][ T9608]  v4l2_ctrl_new+0xe67/0x23a0
[  204.411152][ T9608]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  204.411189][ T9608]  v4l2_ctrl_new_std+0x1bb/0x290
[  204.411232][ T9608]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  204.411264][ T9608]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  204.411290][ T9608]  ? media_request_object_init+0x105/0x180
[  204.411314][ T9608]  vicodec_open+0x2a6/0xf70
[  204.411328][ T9608]  ? kobject_get_unless_zero+0xe0/0x200
[  204.411359][ T9608]  v4l2_open+0x1d2/0x490
[  204.411380][ T9608]  ? __pfx_v4l2_open+0x10/0x10
[  204.411400][ T9608]  chrdev_open+0x234/0x6a0
[  204.411421][ T9608]  ? __pfx_chrdev_open+0x10/0x10
[  204.411440][ T9608]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  204.411467][ T9608]  do_dentry_open+0x6ab/0x14d0
[  204.411482][ T9608]  ? __pfx_chrdev_open+0x10/0x10
[  204.411506][ T9608]  vfs_open+0x82/0x3f0
[  204.411529][ T9608]  path_openat+0x19fa/0x2440
[  204.411552][ T9608]  ? __pfx_path_openat+0x10/0x10
[  204.411578][ T9608]  do_file_open+0x20e/0x430
[  204.411598][ T9608]  ? __pfx_do_file_open+0x10/0x10
[  204.411636][ T9608]  ? _raw_spin_unlock+0x28/0x50
[  204.411653][ T9608]  ? alloc_fd+0x471/0x7a0
[  204.411704][ T9608]  do_sys_openat2+0x10f/0x1e0
[  204.411731][ T9608]  ? __pfx_do_sys_openat2+0x10/0x10
[  204.411760][ T9608]  __x64_sys_openat+0x12d/0x210
[  204.411782][ T9608]  ? __pfx___x64_sys_openat+0x10/0x10
[  204.411813][ T9608]  do_syscall_64+0x123/0x790
[  204.411836][ T9608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.411855][ T9608] RIP: 0033:0x7f082259e159
[  204.411871][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.411887][ T9608] RSP: 002b:00007f0823435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  204.411905][ T9608] RAX: ffffffffffffffda RBX: 00007f0822825fa0 RCX: 00007f082259e159
[  204.411917][ T9608] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  204.411927][ T9608] RBP: 00007f082263503b R08: 0000000000000000 R09: 0000000000000000
[  204.411937][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.411946][ T9608] R13: 00007f0822826038 R14: 00007f0822825fa0 R15: 00007ffc03e63378
[  204.411969][ T9608]  </TASK>
[  204.894198][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  204.894216][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  204.973779][   T65] Bluetooth: Unknown BR/EDR signaling command 0x00
[  204.973802][   T65] Bluetooth: Wrong link type (-22)
[  205.086411][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  205.132322][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  205.133407][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  205.134283][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  205.136100][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  205.144515][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  205.463815][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.625612][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.786131][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.887064][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.282418][   T12] bridge_slave_1: left allmulticast mode
[  206.282444][   T12] bridge_slave_1: left promiscuous mode
[  206.282609][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.284640][   T12] bridge_slave_0: left allmulticast mode
[  206.284655][   T12] bridge_slave_0: left promiscuous mode
[  206.284753][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.285665][ T9669] FAULT_INJECTION: forcing a failure.
[  206.285665][ T9669] name failslab, interval 1, probability 0, space 0, times 0
[  206.285690][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.0.713 Not tainted syzkaller #0 PREEMPT(full) 
[  206.285709][ T9669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  206.285719][ T9669] Call Trace:
[  206.285725][ T9669]  <TASK>
[  206.285732][ T9669]  dump_stack_lvl+0x100/0x190
[  206.285763][ T9669]  should_fail_ex.cold+0x5/0xa
[  206.285787][ T9669]  should_failslab+0xc2/0x120
[  206.285809][ T9669]  __kmalloc_noprof+0xfc/0x840
[  206.285828][ T9669]  ? handler_new_ref+0x1ab/0xc60
[  206.285857][ T9669]  handler_new_ref+0x1ab/0xc60
[  206.285889][ T9669]  v4l2_ctrl_new+0xe67/0x23a0
[  206.285923][ T9669]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  206.285950][ T9669]  ? handler_new_ref+0x7cb/0xc60
[  206.285981][ T9669]  v4l2_ctrl_new_std+0x1bb/0x290
[  206.286013][ T9669]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  206.286041][ T9669]  ? __mutex_unlock_slowpath+0x35d/0x930
[  206.286070][ T9669]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  206.286096][ T9669]  ? __asan_memcpy+0x3c/0x60
[  206.286115][ T9669]  ? find_ref+0x209/0x420
[  206.286140][ T9669]  handler_new_ref+0x82f/0xc60
[  206.286170][ T9669]  v4l2_ctrl_new+0xe67/0x23a0
[  206.286232][ T9669]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  206.286270][ T9669]  v4l2_ctrl_new_std+0x1bb/0x290
[  206.286304][ T9669]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  206.286342][ T9669]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  206.286370][ T9669]  ? media_request_object_init+0x105/0x180
[  206.286398][ T9669]  vicodec_open+0x2a6/0xf70
[  206.286414][ T9669]  ? kobject_get_unless_zero+0xe0/0x200
[  206.286446][ T9669]  v4l2_open+0x1d2/0x490
[  206.286472][ T9669]  ? __pfx_v4l2_open+0x10/0x10
[  206.286494][ T9669]  chrdev_open+0x234/0x6a0
[  206.286517][ T9669]  ? __pfx_chrdev_open+0x10/0x10
[  206.286538][ T9669]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  206.286568][ T9669]  do_dentry_open+0x6ab/0x14d0
[  206.286587][ T9669]  ? __pfx_chrdev_open+0x10/0x10
[  206.286612][ T9669]  vfs_open+0x82/0x3f0
[  206.286636][ T9669]  path_openat+0x19fa/0x2440
[  206.286661][ T9669]  ? __pfx_path_openat+0x10/0x10
[  206.286688][ T9669]  do_file_open+0x20e/0x430
[  206.286710][ T9669]  ? __pfx_do_file_open+0x10/0x10
[  206.286748][ T9669]  ? _raw_spin_unlock+0x28/0x50
[  206.286766][ T9669]  ? alloc_fd+0x471/0x7a0
[  206.286795][ T9669]  do_sys_openat2+0x10f/0x1e0
[  206.286819][ T9669]  ? __pfx_do_sys_openat2+0x10/0x10
[  206.286850][ T9669]  __x64_sys_openat+0x12d/0x210
[  206.286874][ T9669]  ? __pfx___x64_sys_openat+0x10/0x10
[  206.286905][ T9669]  do_syscall_64+0x123/0x790
[  206.286928][ T9669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.286946][ T9669] RIP: 0033:0x7f082259e159
[  206.286962][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.286981][ T9669] RSP: 002b:00007f0823435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  206.286999][ T9669] RAX: ffffffffffffffda RBX: 00007f0822825fa0 RCX: 00007f082259e159
[  206.287011][ T9669] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  206.287022][ T9669] RBP: 00007f082263503b R08: 0000000000000000 R09: 0000000000000000
[  206.287032][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.287042][ T9669] R13: 00007f0822826038 R14: 00007f0822825fa0 R15: 00007ffc03e63378
[  206.287066][ T9669]  </TASK>
[  206.602847][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.613448][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.615491][   T12] bond0 (unregistering): Released all slaves
[  206.625343][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.626308][ T9633] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.626928][ T9633] bridge_slave_0: entered allmulticast mode
[  206.629836][ T9633] bridge_slave_0: entered promiscuous mode
[  206.647067][ T9633] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.647979][ T9633] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.648407][ T9633] bridge_slave_1: entered allmulticast mode
[  206.651532][ T9633] bridge_slave_1: entered promiscuous mode
[  206.721532][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11
[  206.740041][ T9633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.744015][ T9633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.744240][   T12] : left promiscuous mode
[  206.946848][ T9683] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  207.038026][ T9633] team0: Port device team_slave_0 added
[  207.040555][ T9633] team0: Port device team_slave_1 added
[  207.071806][   T43] kauditd_printk_skb: 68 callbacks suppressed
[  207.071827][   T43] audit: type=1800 audit(1789157250.095:995): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229278 res=0 errno=0
[  207.074710][   T43] audit: type=1800 audit(1789157250.095:996): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=229282 res=0 errno=0
[  207.076762][   T43] audit: type=1800 audit(1789157250.105:997): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=229286 res=0 errno=0
[  207.077602][   T43] audit: type=1800 audit(1789157250.105:998): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=229285 res=0 errno=0
[  207.092236][   T43] audit: type=1800 audit(1789157250.115:999): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229354 res=0 errno=0
[  207.092470][ T9683] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  207.094585][   T43] audit: type=1800 audit(1789157250.115:1000): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=229358 res=0 errno=0
[  207.112924][   T43] audit: type=1400 audit(1789157250.125:1001): avc:  denied  { write } for  pid=9684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  207.184654][   T43] audit: type=1800 audit(1789157250.205:1002): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  207.212562][   T43] audit: type=1400 audit(1789157250.235:1003): avc:  denied  { write } for  pid=9687 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  207.247946][   T65] Bluetooth: hci3: command tx timeout
[  207.254540][   T43] audit: type=1800 audit(1789157250.275:1004): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  207.297855][ T9633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.297871][ T9633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.297890][ T9633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.299360][ T9633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.299569][ T9633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.299591][ T9633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.304998][ T9693] ip6gre1: entered promiscuous mode
[  207.305019][ T9693] ip6gre1: entered allmulticast mode
[  207.306867][ T9693] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.306908][ T9693] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.327593][ T9696] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.327643][ T9696] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.387283][ T7844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.387527][ T7844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.416531][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.445407][ T9633] hsr_slave_0: entered promiscuous mode
[  207.454488][ T9633] hsr_slave_1: entered promiscuous mode
[  207.455036][ T9633] debugfs: 'hsr0' already exists in 'hsr'
[  207.455054][ T9633] Cannot create hsr debugfs directory
[  207.591412][ T9707] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  207.598098][ T9707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  207.797574][ T9714] FAULT_INJECTION: forcing a failure.
[  207.797574][ T9714] name failslab, interval 1, probability 0, space 0, times 0
[  207.797603][ T9714] CPU: 1 UID: 0 PID: 9714 Comm: syz.0.721 Not tainted syzkaller #0 PREEMPT(full) 
[  207.797625][ T9714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  207.797635][ T9714] Call Trace:
[  207.797641][ T9714]  <TASK>
[  207.797648][ T9714]  dump_stack_lvl+0x100/0x190
[  207.797679][ T9714]  should_fail_ex.cold+0x5/0xa
[  207.797704][ T9714]  should_failslab+0xc2/0x120
[  207.797736][ T9714]  __kmalloc_cache_noprof+0x91/0x6d0
[  207.797762][ T9714]  ? __pfx_vicodec_s_ctrl+0x10/0x10
[  207.797789][ T9714]  ? v4l2_m2m_ctx_init+0x4d/0x380
[  207.797816][ T9714]  ? __pfx_queue_init+0x10/0x10
[  207.797840][ T9714]  v4l2_m2m_ctx_init+0x4d/0x380
[  207.797866][ T9714]  vicodec_open+0x6dc/0xf70
[  207.797886][ T9714]  v4l2_open+0x1d2/0x490
[  207.797910][ T9714]  ? __pfx_v4l2_open+0x10/0x10
[  207.797932][ T9714]  chrdev_open+0x234/0x6a0
[  207.797954][ T9714]  ? __pfx_chrdev_open+0x10/0x10
[  207.797976][ T9714]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  207.798037][ T9714]  do_dentry_open+0x6ab/0x14d0
[  207.798054][ T9714]  ? __pfx_chrdev_open+0x10/0x10
[  207.798079][ T9714]  vfs_open+0x82/0x3f0
[  207.798104][ T9714]  path_openat+0x19fa/0x2440
[  207.798129][ T9714]  ? __pfx_path_openat+0x10/0x10
[  207.798157][ T9714]  do_file_open+0x20e/0x430
[  207.798180][ T9714]  ? __pfx_do_file_open+0x10/0x10
[  207.798217][ T9714]  ? _raw_spin_unlock+0x28/0x50
[  207.798237][ T9714]  ? alloc_fd+0x471/0x7a0
[  207.798266][ T9714]  do_sys_openat2+0x10f/0x1e0
[  207.798289][ T9714]  ? __pfx_do_sys_openat2+0x10/0x10
[  207.798321][ T9714]  __x64_sys_openat+0x12d/0x210
[  207.798345][ T9714]  ? __pfx___x64_sys_openat+0x10/0x10
[  207.798376][ T9714]  do_syscall_64+0x123/0x790
[  207.798401][ T9714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.798419][ T9714] RIP: 0033:0x7f082259e159
[  207.798435][ T9714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.798451][ T9714] RSP: 002b:00007f0823435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  207.798468][ T9714] RAX: ffffffffffffffda RBX: 00007f0822825fa0 RCX: 00007f082259e159
[  207.798480][ T9714] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  207.798490][ T9714] RBP: 00007f082263503b R08: 0000000000000000 R09: 0000000000000000
[  207.798501][ T9714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  207.798511][ T9714] R13: 00007f0822826038 R14: 00007f0822825fa0 R15: 00007ffc03e63378
[  207.798534][ T9714]  </TASK>
[  207.837251][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  207.844167][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  207.846400][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  207.849847][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  207.855968][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  207.916954][   T12] hsr_slave_0: left promiscuous mode
[  207.934666][   T12] hsr_slave_1: left promiscuous mode
[  207.935773][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.935799][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.942078][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.942101][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.950482][   T12] batman_adv: batadv0: Interface deactivated: ipvlan2
[  207.950501][   T12] batman_adv: batadv0: Removing interface: ipvlan2
[  207.968055][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.989397][   T12] veth1_macvtap: left promiscuous mode
[  207.989429][   T12] veth0_macvtap: left promiscuous mode
[  207.989511][   T12] veth1_vlan: left promiscuous mode
[  207.989566][   T12] veth0_vlan: left promiscuous mode
[  208.345656][   T12] team0 (unregistering): Port device team_slave_1 removed
[  208.362922][   T12] team0 (unregistering): Port device team_slave_0 removed
[  208.915127][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10
[  209.103431][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.116447][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.117483][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.118372][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.119312][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.256067][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12
[  209.336431][ T5748] Bluetooth: hci3: command tx timeout
[  209.582565][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.582614][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.582681][ T9718] bridge_slave_0: entered allmulticast mode
[  209.583487][ T9718] bridge_slave_0: entered promiscuous mode
[  209.584701][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.584746][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.584801][ T9718] bridge_slave_1: entered allmulticast mode
[  209.585492][ T9718] bridge_slave_1: entered promiscuous mode
[  209.635244][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.638256][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.760788][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.773105][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13
[  209.775118][ T9718] team0: Port device team_slave_0 added
[  209.795036][ T9718] team0: Port device team_slave_1 added
[  209.845777][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.853401][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.853412][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.853425][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.864437][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.864447][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.864461][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.875112][ T9633] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  209.877754][ T9633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  209.896328][ T9633] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  209.900705][ T9633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  209.903693][ T9633] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  209.906178][ T9633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  209.909017][ T9633] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  209.916165][ T9633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  209.951124][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.961468][ T9718] hsr_slave_0: entered promiscuous mode
[  209.962265][ T9718] hsr_slave_1: entered promiscuous mode
[  209.962569][ T9718] debugfs: 'hsr0' already exists in 'hsr'
[  209.962584][ T9718] Cannot create hsr debugfs directory
[  209.976374][ T5748] Bluetooth: hci4: command tx timeout
[  210.083826][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.523787][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.523848][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.523963][ T9757] bridge_slave_0: entered allmulticast mode
[  210.525156][ T9757] bridge_slave_0: entered promiscuous mode
[  210.581465][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.594411][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.594531][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.594659][ T9757] bridge_slave_1: entered allmulticast mode
[  210.596044][ T9757] bridge_slave_1: entered promiscuous mode
[  210.631468][ T9757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.637876][ T9757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.669159][ T9633] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.673596][ T9757] team0: Port device team_slave_0 added
[  210.689208][ T9757] team0: Port device team_slave_1 added
[  210.720040][ T9757] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.720056][ T9757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.720073][ T9757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.722288][ T9633] 8021q: adding VLAN 0 to HW filter on device team0
[  210.724064][ T9757] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.724078][ T9757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.724103][ T9757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.772898][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.772989][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.817415][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.843226][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.843315][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.848336][ T9757] hsr_slave_0: entered promiscuous mode
[  210.848784][ T9757] hsr_slave_1: entered promiscuous mode
[  210.849658][ T9757] debugfs: 'hsr0' already exists in 'hsr'
[  210.849677][ T9757] Cannot create hsr debugfs directory
[  210.933316][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.039821][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.176474][    C3] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  211.176486][    C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  211.176581][ T5748] Bluetooth: hci0: command tx timeout
[  211.205583][   T12] bridge_slave_1: left allmulticast mode
[  211.205609][   T12] bridge_slave_1: left promiscuous mode
[  211.205805][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.224813][   T12] bridge_slave_0: left allmulticast mode
[  211.224839][   T12] bridge_slave_0: left promiscuous mode
[  211.225065][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.248496][   T12] bridge_slave_1: left allmulticast mode
[  211.248521][   T12] bridge_slave_1: left promiscuous mode
[  211.248686][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.250846][   T12] bridge_slave_0: left allmulticast mode
[  211.250867][   T12] bridge_slave_0: left promiscuous mode
[  211.251012][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.406418][ T5748] Bluetooth: hci3: command tx timeout
[  211.453899][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.457047][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.466923][   T12] bond0 (unregistering): Released all slaves
[  211.593282][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.595864][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.597571][   T12] bond0 (unregistering): Released all slaves
[  211.665981][ T9633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.958938][ T9633] veth0_vlan: entered promiscuous mode
[  211.968779][ T9633] veth1_vlan: entered promiscuous mode
[  212.033137][ T9633] veth0_macvtap: entered promiscuous mode
[  212.056320][ T5748] Bluetooth: hci4: command tx timeout
[  212.092241][ T9633] veth1_macvtap: entered promiscuous mode
[  212.103228][   T43] kauditd_printk_skb: 86 callbacks suppressed
[  212.103248][   T43] audit: type=1400 audit(1789157255.125:1091): avc:  denied  { write } for  pid=9848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.159007][ T9633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.164803][ T9633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.194840][ T9702] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.195240][ T9702] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.195776][ T9702] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.196949][   T43] audit: type=1400 audit(1789157255.205:1092): avc:  denied  { write } for  pid=9851 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.204148][   T43] audit: type=1800 audit(1789157255.225:1093): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250161 res=0 errno=0
[  212.228917][ T9702] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.339985][ T7198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.340000][ T7198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.341226][   T43] audit: type=1800 audit(1789157255.365:1094): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250287 res=0 errno=0
[  212.370679][ T7198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.370696][ T7198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.397551][   T43] audit: type=1800 audit(1789157255.425:1095): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=192463 res=0 errno=0
[  212.417405][   T43] audit: type=1400 audit(1789157255.445:1096): avc:  denied  { write } for  pid=9854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.434504][   T43] audit: type=1800 audit(1789157255.455:1097): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  212.461449][   T43] audit: type=1800 audit(1789157255.485:1098): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  212.482121][ T9858] FAULT_INJECTION: forcing a failure.
[  212.482121][ T9858] name failslab, interval 1, probability 0, space 0, times 0
[  212.482154][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: syz.7.710 Not tainted syzkaller #0 PREEMPT(full) 
[  212.482177][ T9858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  212.482189][ T9858] Call Trace:
[  212.482196][ T9858]  <TASK>
[  212.482208][ T9858]  dump_stack_lvl+0x100/0x190
[  212.482239][ T9858]  should_fail_ex.cold+0x5/0xa
[  212.482267][ T9858]  should_failslab+0xc2/0x120
[  212.482322][ T9858]  __kvmalloc_node_noprof+0x113/0x9b0
[  212.482346][ T9858]  ? bucket_table_alloc.isra.0+0x88/0x460
[  212.482374][ T9858]  ? bucket_table_alloc.isra.0+0x88/0x460
[  212.482405][ T9858]  bucket_table_alloc.isra.0+0x88/0x460
[  212.482431][ T9858]  __rhashtable_init_noprof+0x43a/0x890
[  212.482459][ T9858]  ipc_init_ids+0x99/0x280
[  212.482477][ T9858]  copy_ipcs+0x5c0/0x7e0
[  212.482495][ T9858]  create_new_namespaces+0x20a/0xac0
[  212.482516][ T9858]  ? security_capable+0x80/0x260
[  212.482544][ T9858]  unshare_nsproxy_namespaces+0xf2/0x220
[  212.482566][ T9858]  ksys_unshare+0x4a2/0xa70
[  212.482586][ T9858]  ? __pfx_ksys_unshare+0x10/0x10
[  212.482616][ T9858]  __x64_sys_unshare+0x31/0x40
[  212.482636][ T9858]  do_syscall_64+0x123/0x790
[  212.482661][ T9858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.482679][ T9858] RIP: 0033:0x7fa4e4f9e159
[  212.482696][ T9858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.482713][ T9858] RSP: 002b:00007fa4e5e60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  212.482731][ T9858] RAX: ffffffffffffffda RBX: 00007fa4e5225fa0 RCX: 00007fa4e4f9e159
[  212.482744][ T9858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200
[  212.482755][ T9858] RBP: 00007fa4e503503b R08: 0000000000000000 R09: 0000000000000000
[  212.482768][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.482780][ T9858] R13: 00007fa4e5226038 R14: 00007fa4e5225fa0 R15: 00007fff2a0eb9e8
[  212.482802][ T9858]  </TASK>
[  212.579763][   T43] audit: type=1400 audit(1789157255.605:1099): avc:  denied  { write } for  pid=9859 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.733594][   T43] audit: type=1400 audit(1789157255.755:1100): avc:  denied  { write } for  pid=9863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  213.023590][   T12] hsr_slave_0: left promiscuous mode
[  213.025388][   T12] hsr_slave_1: left promiscuous mode
[  213.025950][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.025965][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.027250][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.027267][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.048868][   T12] hsr_slave_0: left promiscuous mode
[  213.050874][   T12] hsr_slave_1: left promiscuous mode
[  213.051361][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.051374][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.054533][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.054556][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.081379][   T12] veth1_macvtap: left promiscuous mode
[  213.081415][   T12] veth0_macvtap: left promiscuous mode
[  213.081463][   T12] veth1_vlan: left promiscuous mode
[  213.081478][   T12] veth0_vlan: left promiscuous mode
[  213.088775][   T12] veth1_macvtap: left promiscuous mode
[  213.088843][   T12] veth0_macvtap: left promiscuous mode
[  213.088926][   T12] veth1_vlan: left promiscuous mode
[  213.089039][   T12] veth0_vlan: left promiscuous mode
[  213.246355][ T5748] Bluetooth: hci0: command tx timeout
[  213.383926][   T12] team0 (unregistering): Port device team_slave_1 removed
[  213.390674][   T12] team0 (unregistering): Port device team_slave_0 removed
[  213.496364][ T5748] Bluetooth: hci3: command tx timeout
[  213.568690][   T12] team0 (unregistering): Port device team_slave_1 removed
[  213.573956][   T12] team0 (unregistering): Port device team_slave_0 removed
[  214.136626][ T5748] Bluetooth: hci4: command tx timeout
[  214.302652][   T12] IPVS: stop unused estimator thread 0...
[  214.308773][ T9901] erspan1: entered promiscuous mode
[  214.308793][ T9901] erspan1: entered allmulticast mode
[  214.793673][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14
[  214.957894][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15
[  215.137895][ T9941] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  215.165448][ T5444] 8021q: adding VLAN 0 to HW filter on device eth16
[  215.197477][ T9718] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  215.211809][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  215.216713][ T9718] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  215.225997][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  215.227227][ T9718] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  215.231103][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  215.252480][ T9718] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  215.257201][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  215.264169][ T9946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  215.304622][ T9757] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  215.307264][ T9757] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  215.307778][ T9757] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  215.314375][ T9757] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  215.314945][ T9757] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  215.321263][ T9757] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  215.322139][ T9757] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  215.326099][ T9757] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  215.326449][ T5748] Bluetooth: hci0: command tx timeout
[  215.407603][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.421623][ T9718] 8021q: adding VLAN 0 to HW filter on device team0
[  215.427268][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.427316][ T7235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.431005][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.432899][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.432943][ T7235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.447812][ T9757] 8021q: adding VLAN 0 to HW filter on device team0
[  215.459925][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.460020][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.461666][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.461751][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.722266][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.766532][ T9996] gadgetfs: bound to dummy_udc driver
[  215.790976][ T9757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.923872][ T5444] 8021q: adding VLAN 0 to HW filter on device eth17
[  215.994939][ T9718] veth0_vlan: entered promiscuous mode
[  216.002256][ T9718] veth1_vlan: entered promiscuous mode
[  216.026117][ T9718] veth0_macvtap: entered promiscuous mode
[  216.041001][ T9718] veth1_macvtap: entered promiscuous mode
[  216.074050][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.089214][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.152761][ T9757] veth0_vlan: entered promiscuous mode
[  216.160199][ T5809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.177727][ T9757] veth1_vlan: entered promiscuous mode
[  216.217707][   T65] Bluetooth: hci4: command tx timeout
[  216.266512][ T9702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.266554][ T9702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.307952][ T7207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.307975][ T7207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.315122][ T9757] veth0_macvtap: entered promiscuous mode
[  216.318906][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  216.323596][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  216.324396][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  216.325206][ T9757] veth1_macvtap: entered promiscuous mode
[  216.325989][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  216.326696][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  216.360614][ T7236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.360638][ T7236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.373567][ T9757] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.386575][    T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  216.390646][ T7844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.399830][ T9757] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.424620][ T5444] 8021q: adding VLAN 0 to HW filter on device eth21
[  216.547008][T10033] netlink: 36 bytes leftover after parsing attributes in process `syz.5.720'.
[  216.547096][T10032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.720'.
[  216.557323][    T9] usb 12-1: Using ep0 maxpacket: 8
[  216.559112][    T9] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  216.581637][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.582387][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.582637][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.583678][    T9] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.583698][    T9] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  216.583729][    T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.583964][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.614314][    T9] usb 12-1: config 0 descriptor??
[  216.632758][ T7198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.632781][ T7198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.691926][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.691948][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.799486][ T5809] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.857954][ T5444] 8021q: adding VLAN 0 to HW filter on device eth30
[  216.921352][ T5809] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.004566][ T5809] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.095565][ T5809] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.107361][   T43] kauditd_printk_skb: 71 callbacks suppressed
[  217.107372][   T43] audit: type=1800 audit(1789157260.135:1172): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259198 res=0 errno=0
[  217.109962][ T1691] logitech-hidpp-device 0003:046D:C082.0005: hidraw1: USB HID v0.00 Device [syz0] on syz0
[  217.154599][T10076] fido_id[10076]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  217.174035][   T43] audit: type=1800 audit(1789157260.195:1173): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  217.189523][ T5444] 8021q: adding VLAN 0 to HW filter on device eth31
[  217.231909][   T43] audit: type=1800 audit(1789157260.255:1174): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  217.238948][   T43] audit: type=1800 audit(1789157260.265:1175): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=3689 res=0 errno=0
[  217.248708][   T43] audit: type=1800 audit(1789157260.275:1176): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=24211 res=0 errno=0
[  217.282014][   T43] audit: type=1800 audit(1789157260.305:1177): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259965 res=0 errno=0
[  217.285913][   T43] audit: type=1800 audit(1789157260.305:1178): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=259970 res=0 errno=0
[  217.290330][   T43] audit: type=1800 audit(1789157260.315:1179): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=259974 res=0 errno=0
[  217.292156][   T43] audit: type=1800 audit(1789157260.315:1180): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=259973 res=0 errno=0
[  217.292187][   T43] audit: type=1800 audit(1789157260.315:1181): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=259976 res=0 errno=0
[  217.382894][ T5809] bridge_slave_1: left allmulticast mode
[  217.382911][ T5809] bridge_slave_1: left promiscuous mode
[  217.383026][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.398764][ T5809] bridge_slave_0: left allmulticast mode
[  217.398781][ T5809] bridge_slave_0: left promiscuous mode
[  217.398950][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.406562][   T65] Bluetooth: hci0: command tx timeout
[  217.432471][T10092] xt_policy: neither incoming nor outgoing policy selected
[  217.432573][T10092] xt_policy: neither incoming nor outgoing policy selected
[  217.574750][ T1181] smc: removing ib device syz0
[  217.581033][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.582614][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.583585][ T5809] bond0 (unregistering): Released all slaves
[  217.682236][ T1181] smbdirect: ib_dev[syz0] removed
[  217.792899][T10102] ata1.00: invalid multi_count 128 ignored
[  217.862986][T10025] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.863032][T10025] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.863112][T10025] bridge_slave_0: entered allmulticast mode
[  217.879101][T10025] bridge_slave_0: entered promiscuous mode
[  217.881875][T10025] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.881955][T10025] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.882052][T10025] bridge_slave_1: entered allmulticast mode
[  217.901738][T10025] bridge_slave_1: entered promiscuous mode
[  218.015565][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.025892][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.063550][T10121] overlay: ./file0 is not a directory
[  218.098144][T10025] team0: Port device team_slave_0 added
[  218.100519][T10025] team0: Port device team_slave_1 added
[  218.192442][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.192459][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.192481][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.200150][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.200161][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.200179][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.278528][T10025] hsr_slave_0: entered promiscuous mode
[  218.279099][T10025] hsr_slave_1: entered promiscuous mode
[  218.279539][T10025] debugfs: 'hsr0' already exists in 'hsr'
[  218.279551][T10025] Cannot create hsr debugfs directory
[  218.446441][   T65] Bluetooth: hci2: command tx timeout
[  218.517473][T10147] No such timeout policy "syz1"
[  218.519064][T10147] 9p: Bad value for 'rfdno'
[  218.555717][T10143] overlayfs: failed to resolve './file0': -2
[  218.623912][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.758'.
[  218.870204][T10156] devpts: Unknown parameter 'wlan0'
[  218.887905][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.6.760'.
[  219.097163][T10172] overlayfs: conflicting lowerdir path
[  219.145235][    T9] usb 12-1: USB disconnect, device number 2
[  219.229686][T10177] bridge_slave_0: left allmulticast mode
[  219.229714][T10177] bridge_slave_0: left promiscuous mode
[  219.229906][T10177] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.253667][T10177] bridge_slave_1: left allmulticast mode
[  219.253692][T10177] bridge_slave_1: left promiscuous mode
[  219.253854][T10177] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.320343][T10177] bond0: (slave bond_slave_0): Releasing backup interface
[  219.320773][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.6.769'.
[  219.343812][T10177] bond0: (slave bond_slave_1): Releasing backup interface
[  219.383418][T10177] team0: Port device team_slave_0 removed
[  219.388340][T10177] team0: Port device team_slave_1 removed
[  219.388732][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.388744][T10177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.390483][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.390500][T10177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.393838][T10177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  219.523700][T10190] netlink: 276 bytes leftover after parsing attributes in process `syz.6.770'.
[  219.662390][T10207] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  219.716560][ T5809] hsr_slave_0: left promiscuous mode
[  219.717189][ T5809] hsr_slave_1: left promiscuous mode
[  219.717554][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.717565][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.718021][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.718031][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.723051][ T5809] veth1_macvtap: left promiscuous mode
[  219.723084][ T5809] veth0_macvtap: left promiscuous mode
[  219.723175][ T5809] veth1_vlan: left promiscuous mode
[  219.723230][ T5809] veth0_vlan: left promiscuous mode
[  219.860599][ T5809] team0 (unregistering): Port device team_slave_1 removed
[  219.865840][ T5809] team0 (unregistering): Port device team_slave_0 removed
[  219.886359][ T5843] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  219.973138][T10025] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  219.976751][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  219.977413][T10025] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  219.993912][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  219.996821][T10025] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  220.008514][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  220.009441][T10025] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  220.013447][T10025] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  220.043347][T10225] SELinux:  unknown common socke0
[  220.043396][T10225] SELinux:  invalid class
[  220.051971][T10225] SELinux: failed to load policy
[  220.053359][   T65] Bluetooth: hci4: connection err: -111
[  220.056725][ T5843] usb 12-1: Using ep0 maxpacket: 8
[  220.057653][ T5843] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  220.058824][ T5843] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.058838][ T5843] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  220.058855][ T5843] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.072246][ T5843] usb 12-1: config 0 descriptor??
[  220.094136][T10225] libceph: secret too big 3051
[  220.158193][T10025] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.170827][T10025] 8021q: adding VLAN 0 to HW filter on device team0
[  220.177202][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.178356][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.191698][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.191781][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.228906][T10025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.228921][T10025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.414188][T10255] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  220.470126][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.538187][   T65] Bluetooth: hci2: command tx timeout
[  220.624962][T10025] veth0_vlan: entered promiscuous mode
[  220.634978][T10025] veth1_vlan: entered promiscuous mode
[  220.655337][T10025] veth0_macvtap: entered promiscuous mode
[  220.660801][T10025] veth1_macvtap: entered promiscuous mode
[  220.669759][T10025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.673890][T10025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.718254][ T5809] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.718291][ T5809] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.718315][ T5809] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.718338][ T5809] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.767674][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.767689][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.784116][ T7198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.784130][ T7198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.077278][ T8460] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  221.148563][T10318] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  221.226555][ T8460] usb 13-1: Using ep0 maxpacket: 8
[  221.227315][ T8460] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  221.229061][ T8460] usb 13-1: config index 0 descriptor too short (expected 74, got 45)
[  221.229084][ T8460] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  221.229097][ T8460] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  221.229109][ T8460] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  221.229122][ T8460] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  221.229133][ T8460] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.229152][ T8460] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.434086][ T8460] usb 13-1: usb_control_msg returned -32
[  221.434111][ T8460] usbtmc 13-1:16.0: can't read capabilities
[  221.988734][T10375] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  221.989152][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.794'.
[  221.989525][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.794'.
[  222.054986][T10379] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  222.163798][   T43] kauditd_printk_skb: 185 callbacks suppressed
[  222.163818][   T43] audit: type=1800 audit(1789157265.185:1367): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  222.184994][   T43] audit: type=1400 audit(1789157265.205:1368): avc:  denied  { write } for  pid=10389 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  222.267069][   T43] audit: type=1800 audit(1789157265.285:1369): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  222.269680][   T43] audit: type=1400 audit(1789157265.295:1370): avc:  denied  { write } for  pid=10394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  222.283957][T10398] 9pnet_virtio: no channels available for device syz
[  222.285594][   T43] audit: type=1800 audit(1789157265.305:1371): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.799" name="attach" dev="sysfs" ino=36583 res=0 errno=0
[  222.295521][T10399] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  222.295544][T10399] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  222.298190][T10399] vhci_hcd vhci_hcd.0: Device attached
[  222.299000][T10402] vhci_hcd: connection closed
[  222.299284][ T5581] vhci_hcd vhci_hcd.6: stop threads
[  222.299902][ T5581] vhci_hcd vhci_hcd.6: release socket
[  222.299923][ T5581] vhci_hcd vhci_hcd.6: disconnect device
[  222.335855][   T43] audit: type=1400 audit(1789157265.355:1372): avc:  denied  { write } for  pid=10404 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  222.430791][   T43] audit: type=1400 audit(1789157265.455:1373): avc:  denied  { write } for  pid=10406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  222.495002][   T43] audit: type=1400 audit(1789157265.515:1374): avc:  denied  { write } for  pid=10409 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  222.580930][   T43] audit: type=1400 audit(1789157265.605:1375): avc:  denied  { write } for  pid=10411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  222.606433][   T65] Bluetooth: hci2: command tx timeout
[  222.632202][ T5825] usb 12-1: USB disconnect, device number 3
[  222.639244][   T43] audit: type=1400 audit(1789157265.665:1376): avc:  denied  { write } for  pid=10414 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  222.667666][T10417] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  222.855669][T10429] netlink: 'syz.6.801': attribute type 33 has an invalid length.
[  222.914731][T10440] netlink: 'syz.7.804': attribute type 10 has an invalid length.
[  222.926370][T10440] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  222.963905][T10445] netlink: 'syz.5.802': attribute type 64 has an invalid length.
[  222.985730][T10453] netlink: 'syz.5.802': attribute type 64 has an invalid length.
[  223.375869][    C2] vxcan1: j1939_tp_rxtimer: 0xffff888054819400: rx timeout, send abort
[  223.417886][T10485] Cannot find set identified by id 0 to match
[  223.481623][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.7.812'.
[  223.512936][T10497] SELinux: ebitmap: empty map
[  223.512965][T10497] SELinux: failed to load policy
[  223.513810][T10497] fuse: Unknown parameter 'f`70x0000000000000007'
[  223.554551][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.814'.
[  223.554567][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.814'.
[  223.554582][T10499] netlink: 'syz.7.814': attribute type 15 has an invalid length.
[  223.569804][T10499] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  223.570212][ T5444] 8021q: adding VLAN 0 to HW filter on device eth32
[  223.850392][ T8460] usb 13-1: USB disconnect, device number 2
[  223.876852][    C2] vxcan1: j1939_tp_rxtimer: 0xffff888054819000: rx timeout, send abort
[  223.953812][T10526] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  224.048792][T10541] sd 0:0:0:0: PR command failed: 1026
[  224.048816][T10541] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  224.048836][T10541] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  224.065246][T10541] libceph: resolve '4' (ret=-3): failed
[  224.084019][T10536] syzkaller0: entered promiscuous mode
[  224.084039][T10536] syzkaller0: entered allmulticast mode
[  224.376904][    C2] vxcan1: j1939_tp_rxtimer: 0xffff888054819000: abort rx timeout. Force session deactivation
[  224.438825][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18
[  224.568319][ T9405] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  224.600268][ T5444] 8021q: adding VLAN 0 to HW filter on device eth19
[  224.687058][   T65] Bluetooth: hci2: command tx timeout
[  224.727973][ T9405] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  224.731131][ T9405] usb 11-1: config 27 has an invalid descriptor of length 139, skipping remainder of the config
[  224.731150][ T9405] usb 11-1: too many endpoints for config 27 interface 0 altsetting 0: 66, using maximum allowed: 30
[  224.731167][ T9405] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 132, changing to 11
[  224.731181][ T9405] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10113, setting to 1024
[  224.731198][ T9405] usb 11-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66
[  224.731218][ T9405] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.733547][T10572] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  224.750835][ T9405] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  224.762979][ T9405] usb 11-1: invalid MIDI out EP 0
[  224.780241][T10621] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = 3, id = 0
[  224.882314][T10628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.885769][T10627] netfs: Cache "CacheFiles" added (type cachefiles)
[  224.885800][T10627] CacheFiles: File cache on CacheFiles registered
[  224.886558][T10627] CacheFiles: File cache on CacheFiles unregistering
[  224.886565][T10627] netfs: Withdrawing cache "CacheFiles" (0 objs)
[  225.094319][ T5444] 8021q: adding VLAN 0 to HW filter on device eth20
[  225.109204][ T5581] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  225.206644][   T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.206685][   T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.206703][   T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.206720][   T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  225.312179][ T9405] snd-usb-audio 11-1:27.0: probe with driver snd-usb-audio failed with error -22
[  225.321396][ T9405] usb 11-1: USB disconnect, device number 3
[  225.445493][ T5444] 8021q: adding VLAN 0 to HW filter on device eth22
[  225.634121][T10653] ip_tables: iptables: counters copy to user failed while replacing table
[  225.870525][T10431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  226.062547][T10685] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.849:10685
[  226.100540][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.849'.
[  226.122594][T10685] vlan2: entered promiscuous mode
[  226.122614][T10685] hsr0: entered promiscuous mode
[  226.122875][T10685] vlan2: entered allmulticast mode
[  226.122929][T10685] hsr0: entered allmulticast mode
[  226.122941][T10685] hsr_slave_0: entered allmulticast mode
[  226.122953][T10685] hsr_slave_1: entered allmulticast mode
[  226.128793][T10688] hsr_slave_0: left promiscuous mode
[  226.131233][T10688] hsr_slave_1: left promiscuous mode
[  226.192056][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'.
[  226.216941][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.849'.
[  226.217039][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.849'.
[  226.217132][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.849'.
[  226.328796][T10699] TC_ACT_REPEAT abuse ?
[  226.563746][T10709] ima: policy update completed
[  226.660426][T10727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63248 sclass=netlink_route_socket pid=10727 comm=syz.6.856
[  226.811020][T10738] evm: overlay not supported
[  226.981654][T10754] netlink: 'syz.8.863': attribute type 2 has an invalid length.
[  226.984767][T10754] : entered promiscuous mode
[  227.035538][T10761] __nla_validate_parse: 30 callbacks suppressed
[  227.035551][T10761] netlink: 92 bytes leftover after parsing attributes in process `syz.7.861'.
[  227.202759][   T43] kauditd_printk_skb: 310 callbacks suppressed
[  227.202773][   T43] audit: type=1800 audit(1789157270.225:1556): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  227.202800][   T43] audit: type=1400 audit(1789157270.225:1557): avc:  denied  { write } for  pid=10780 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  227.248094][   T43] audit: type=1800 audit(1789157270.275:1558): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  227.319514][   T43] audit: type=1800 audit(1789157270.345:1559): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  227.460161][T10793] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.871/10793
[  227.460179][T10793] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.460206][T10793] CPU: 2 UID: 0 PID: 10793 Comm: syz.7.871 Not tainted syzkaller #0 PREEMPT(full) 
[  227.460219][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.460228][T10793] Call Trace:
[  227.460231][T10793]  <TASK>
[  227.460236][T10793]  dump_stack_lvl+0x100/0x190
[  227.460255][T10793]  check_preemption_disabled+0xd2/0xe0
[  227.460273][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.460287][T10793]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.460303][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.460317][T10793]  trace_kfree_skb+0x18b/0x230
[  227.460334][T10793]  sk_skb_reason_drop+0xb7/0x1b0
[  227.460349][T10793]  mptcp_destroy_common+0x2d8/0x430
[  227.460366][T10793]  mptcp_destroy+0x9b/0x120
[  227.460380][T10793]  __mptcp_destroy_sock+0x1ad/0x3f0
[  227.460393][T10793]  __mptcp_close+0x757/0xa90
[  227.460410][T10793]  ? __pfx___mptcp_close+0x10/0x10
[  227.460425][T10793]  ? __local_bh_enable_ip+0xa5/0x120
[  227.460438][T10793]  mptcp_close+0x28/0xe0
[  227.460453][T10793]  inet_release+0xed/0x200
[  227.460468][T10793]  __sock_release+0xb3/0x260
[  227.460481][T10793]  ? __pfx_sock_close+0x10/0x10
[  227.460493][T10793]  sock_close+0x1c/0x30
[  227.460505][T10793]  __fput+0x3ff/0xb50
[  227.460532][T10793]  task_work_run+0x150/0x240
[  227.460552][T10793]  ? __pfx_task_work_run+0x10/0x10
[  227.460573][T10793]  exit_to_user_mode_loop+0x1d8/0x700
[  227.460587][T10793]  ? rcu_is_watching+0x13/0xc0
[  227.460603][T10793]  do_syscall_64+0x661/0x790
[  227.460620][T10793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.460632][T10793] RIP: 0033:0x7fa4e4f9e159
[  227.460642][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.460652][T10793] RSP: 002b:00007fa4e5e60028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  227.460664][T10793] RAX: 0000000000000000 RBX: 00007fa4e5225fa0 RCX: 00007fa4e4f9e159
[  227.460670][T10793] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  227.460677][T10793] RBP: 00007fa4e503503b R08: 0000000000000000 R09: 0000000000000000
[  227.460683][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.460694][T10793] R13: 00007fa4e5226038 R14: 00007fa4e5225fa0 R15: 00007fff2a0eb9e8
[  227.460709][T10793]  </TASK>
[  227.463238][T10793] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.871/10793
[  227.463257][T10793] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.463286][T10793] CPU: 2 UID: 0 PID: 10793 Comm: syz.7.871 Not tainted syzkaller #0 PREEMPT(full) 
[  227.463304][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.463312][T10793] Call Trace:
[  227.463319][T10793]  <TASK>
[  227.463325][T10793]  dump_stack_lvl+0x100/0x190
[  227.463350][T10793]  check_preemption_disabled+0xd2/0xe0
[  227.463373][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.463390][T10793]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.463410][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.463427][T10793]  trace_kfree_skb+0x18b/0x230
[  227.463447][T10793]  sk_skb_reason_drop+0xb7/0x1b0
[  227.463465][T10793]  mptcp_destroy_common+0x2d8/0x430
[  227.463485][T10793]  mptcp_destroy+0x9b/0x120
[  227.463502][T10793]  __mptcp_destroy_sock+0x1ad/0x3f0
[  227.463517][T10793]  __mptcp_close+0x757/0xa90
[  227.463538][T10793]  ? __pfx___mptcp_close+0x10/0x10
[  227.463556][T10793]  ? __local_bh_enable_ip+0xa5/0x120
[  227.463601][T10793]  mptcp_close+0x28/0xe0
[  227.463623][T10793]  inet_release+0xed/0x200
[  227.463644][T10793]  __sock_release+0xb3/0x260
[  227.463659][T10793]  ? __pfx_sock_close+0x10/0x10
[  227.463676][T10793]  sock_close+0x1c/0x30
[  227.463698][T10793]  __fput+0x3ff/0xb50
[  227.463722][T10793]  task_work_run+0x150/0x240
[  227.463742][T10793]  ? __pfx_task_work_run+0x10/0x10
[  227.463766][T10793]  exit_to_user_mode_loop+0x1d8/0x700
[  227.463782][T10793]  ? rcu_is_watching+0x13/0xc0
[  227.463802][T10793]  do_syscall_64+0x661/0x790
[  227.463822][T10793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.463836][T10793] RIP: 0033:0x7fa4e4f9e159
[  227.463849][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.463864][T10793] RSP: 002b:00007fa4e5e60028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  227.463879][T10793] RAX: 0000000000000000 RBX: 00007fa4e5225fa0 RCX: 00007fa4e4f9e159
[  227.463889][T10793] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  227.463897][T10793] RBP: 00007fa4e503503b R08: 0000000000000000 R09: 0000000000000000
[  227.463905][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.463913][T10793] R13: 00007fa4e5226038 R14: 00007fa4e5225fa0 R15: 00007fff2a0eb9e8
[  227.463932][T10793]  </TASK>
[  227.464068][T10793] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.871/10793
[  227.464082][T10793] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.464112][T10793] CPU: 2 UID: 0 PID: 10793 Comm: syz.7.871 Not tainted syzkaller #0 PREEMPT(full) 
[  227.464132][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.464143][T10793] Call Trace:
[  227.464148][T10793]  <TASK>
[  227.464156][T10793]  dump_stack_lvl+0x100/0x190
[  227.464185][T10793]  check_preemption_disabled+0xd2/0xe0
[  227.464210][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.464232][T10793]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.464259][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.464283][T10793]  trace_kfree_skb+0x18b/0x230
[  227.464308][T10793]  sk_skb_reason_drop+0xb7/0x1b0
[  227.464331][T10793]  mptcp_destroy_common+0x2d8/0x430
[  227.464358][T10793]  mptcp_destroy+0x9b/0x120
[  227.464379][T10793]  __mptcp_destroy_sock+0x1ad/0x3f0
[  227.464397][T10793]  __mptcp_close+0x757/0xa90
[  227.464417][T10793]  ? __pfx___mptcp_close+0x10/0x10
[  227.464434][T10793]  ? __local_bh_enable_ip+0xa5/0x120
[  227.464452][T10793]  mptcp_close+0x28/0xe0
[  227.464471][T10793]  inet_release+0xed/0x200
[  227.464490][T10793]  __sock_release+0xb3/0x260
[  227.464505][T10793]  ? __pfx_sock_close+0x10/0x10
[  227.464520][T10793]  sock_close+0x1c/0x30
[  227.464534][T10793]  __fput+0x3ff/0xb50
[  227.464555][T10793]  task_work_run+0x150/0x240
[  227.464575][T10793]  ? __pfx_task_work_run+0x10/0x10
[  227.464599][T10793]  exit_to_user_mode_loop+0x1d8/0x700
[  227.464615][T10793]  ? rcu_is_watching+0x13/0xc0
[  227.464636][T10793]  do_syscall_64+0x661/0x790
[  227.464655][T10793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.464669][T10793] RIP: 0033:0x7fa4e4f9e159
[  227.464681][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.464703][T10793] RSP: 002b:00007fa4e5e60028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  227.464717][T10793] RAX: 0000000000000000 RBX: 00007fa4e5225fa0 RCX: 00007fa4e4f9e159
[  227.464727][T10793] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  227.464736][T10793] RBP: 00007fa4e503503b R08: 0000000000000000 R09: 0000000000000000
[  227.464744][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.464751][T10793] R13: 00007fa4e5226038 R14: 00007fa4e5225fa0 R15: 00007fff2a0eb9e8
[  227.464769][T10793]  </TASK>
[  227.464908][T10793] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.871/10793
[  227.464922][T10793] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.464952][T10793] CPU: 2 UID: 0 PID: 10793 Comm: syz.7.871 Not tainted syzkaller #0 PREEMPT(full) 
[  227.464970][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.464980][T10793] Call Trace:
[  227.464986][T10793]  <TASK>
[  227.464992][T10793]  dump_stack_lvl+0x100/0x190
[  227.465020][T10793]  check_preemption_disabled+0xd2/0xe0
[  227.465047][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.465068][T10793]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.465094][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.465114][T10793]  trace_kfree_skb+0x18b/0x230
[  227.465138][T10793]  sk_skb_reason_drop+0xb7/0x1b0
[  227.465158][T10793]  mptcp_destroy_common+0x2d8/0x430
[  227.465184][T10793]  mptcp_destroy+0x9b/0x120
[  227.465204][T10793]  __mptcp_destroy_sock+0x1ad/0x3f0
[  227.465222][T10793]  __mptcp_close+0x757/0xa90
[  227.465271][T10793]  ? __pfx___mptcp_close+0x10/0x10
[  227.465297][T10793]  ? __local_bh_enable_ip+0xa5/0x120
[  227.465320][T10793]  mptcp_close+0x28/0xe0
[  227.465344][T10793]  inet_release+0xed/0x200
[  227.465369][T10793]  __sock_release+0xb3/0x260
[  227.465391][T10793]  ? __pfx_sock_close+0x10/0x10
[  227.465411][T10793]  sock_close+0x1c/0x30
[  227.465430][T10793]  __fput+0x3ff/0xb50
[  227.465452][T10793]  task_work_run+0x150/0x240
[  227.465475][T10793]  ? __pfx_task_work_run+0x10/0x10
[  227.465507][T10793]  exit_to_user_mode_loop+0x1d8/0x700
[  227.465528][T10793]  ? rcu_is_watching+0x13/0xc0
[  227.465553][T10793]  do_syscall_64+0x661/0x790
[  227.465579][T10793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.465597][T10793] RIP: 0033:0x7fa4e4f9e159
[  227.465611][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.465629][T10793] RSP: 002b:00007fa4e5e60028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  227.465646][T10793] RAX: 0000000000000000 RBX: 00007fa4e5225fa0 RCX: 00007fa4e4f9e159
[  227.465656][T10793] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  227.465666][T10793] RBP: 00007fa4e503503b R08: 0000000000000000 R09: 0000000000000000
[  227.465676][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.465694][T10793] R13: 00007fa4e5226038 R14: 00007fa4e5225fa0 R15: 00007fff2a0eb9e8
[  227.465720][T10793]  </TASK>
[  227.465882][T10793] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.871/10793
[  227.465896][T10793] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.465924][T10793] CPU: 2 UID: 0 PID: 10793 Comm: syz.7.871 Not tainted syzkaller #0 PREEMPT(full) 
[  227.465944][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.465953][T10793] Call Trace:
[  227.465957][T10793]  <TASK>
[  227.465961][T10793]  dump_stack_lvl+0x100/0x190
[  227.465977][T10793]  check_preemption_disabled+0xd2/0xe0
[  227.465993][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.466006][T10793]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.466021][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.466036][T10793]  trace_kfree_skb+0x18b/0x230
[  227.466052][T10793]  sk_skb_reason_drop+0xb7/0x1b0
[  227.466066][T10793]  mptcp_destroy_common+0x2d8/0x430
[  227.466082][T10793]  mptcp_destroy+0x9b/0x120
[  227.466094][T10793]  __mptcp_destroy_sock+0x1ad/0x3f0
[  227.466106][T10793]  __mptcp_close+0x757/0xa90
[  227.466124][T10793]  ? __pfx___mptcp_close+0x10/0x10
[  227.466139][T10793]  ? __local_bh_enable_ip+0xa5/0x120
[  227.466152][T10793]  mptcp_close+0x28/0xe0
[  227.466166][T10793]  inet_release+0xed/0x200
[  227.466181][T10793]  __sock_release+0xb3/0x260
[  227.466213][T10793]  ? __pfx_sock_close+0x10/0x10
[  227.466226][T10793]  sock_close+0x1c/0x30
[  227.466239][T10793]  __fput+0x3ff/0xb50
[  227.466256][T10793]  task_work_run+0x150/0x240
[  227.466273][T10793]  ? __pfx_task_work_run+0x10/0x10
[  227.466293][T10793]  exit_to_user_mode_loop+0x1d8/0x700
[  227.466306][T10793]  ? rcu_is_watching+0x13/0xc0
[  227.466321][T10793]  do_syscall_64+0x661/0x790
[  227.466336][T10793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.466347][T10793] RIP: 0033:0x7fa4e4f9e159
[  227.466355][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.466365][T10793] RSP: 002b:00007fa4e5e60028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  227.466375][T10793] RAX: 0000000000000000 RBX: 00007fa4e5225fa0 RCX: 00007fa4e4f9e159
[  227.466382][T10793] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  227.466389][T10793] RBP: 00007fa4e503503b R08: 0000000000000000 R09: 0000000000000000
[  227.466395][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.466401][T10793] R13: 00007fa4e5226038 R14: 00007fa4e5225fa0 R15: 00007fff2a0eb9e8
[  227.466414][T10793]  </TASK>
[  227.467398][T10793] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.871/10793
[  227.467411][T10793] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.467432][T10793] CPU: 2 UID: 0 PID: 10793 Comm: syz.7.871 Not tainted syzkaller #0 PREEMPT(full) 
[  227.467445][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.467452][T10793] Call Trace:
[  227.467456][T10793]  <TASK>
[  227.467460][T10793]  dump_stack_lvl+0x100/0x190
[  227.467481][T10793]  check_preemption_disabled+0xd2/0xe0
[  227.467504][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.467523][T10793]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  227.467549][T10793]  ? mptcp_destroy_common+0x2d8/0x430
[  227.467570][T10793]  trace_kfree_skb+0x18b/0x230
[  227.467623][T10793]  sk_skb_reason_drop+0xb7/0x1b0
[  227.467648][T10793]  mptcp_destroy_common+0x2d8/0x430
[  227.467673][T10793]  mptcp_destroy+0x9b/0x120
[  227.467701][T10793]  __mptcp_destroy_sock+0x1ad/0x3f0
[  227.467719][T10793]  __mptcp_close+0x757/0xa90
[  227.467736][T10793]  ? __pfx___mptcp_close+0x10/0x10
[  227.467754][T10793]  ? __local_bh_enable_ip+0xa5/0x120
[  227.467775][T10793]  mptcp_close+0x28/0xe0
[  227.467798][T10793]  inet_release+0xed/0x200
[  227.467823][T10793]  __sock_release+0xb3/0x260
[  227.467840][T10793]  ? __pfx_sock_close+0x10/0x10
[  227.467858][T10793]  sock_close+0x1c/0x30
[  227.467877][T10793]  __fput+0x3ff/0xb50
[  227.467904][T10793]  task_work_run+0x150/0x240
[  227.467929][T10793]  ? __pfx_task_work_run+0x10/0x10
[  227.467978][T10793]  exit_to_user_mode_loop+0x1d8/0x700
[  227.467999][T10793]  ? rcu_is_watching+0x13/0xc0
[  227.468023][T10793]  do_syscall_64+0x661/0x790
[  227.468046][T10793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.468063][T10793] RIP: 0033:0x7fa4e4f9e159
[  227.468076][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.468092][T10793] RSP: 002b:00007fa4e5e60028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  227.468109][T10793] RAX: 0000000000000000 RBX: 00007fa4e5225fa0 RCX: 00007fa4e4f9e159
[  227.468121][T10793] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  227.468133][T10793] RBP: 00007fa4e503503b R08: 0000000000000000 R09: 0000000000000000
[  227.468144][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.468155][T10793] R13: 00007fa4e5226038 R14: 00007fa4e5225fa0 R15: 00007fff2a0eb9e8
[  227.468171][T10793]  </TASK>
[  229.086432][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  233.958439][   T43] kauditd_printk_skb: 11 callbacks suppressed
[  233.958457][   T43] audit: type=1400 audit(1789157276.985:1566): avc:  denied  { write } for  pid=10826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.026992][   T43] audit: type=1400 audit(1789157277.055:1567): avc:  denied  { write } for  pid=10829 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.165092][   T43] audit: type=1400 audit(1789157277.185:1568): avc:  denied  { write } for  pid=10832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.238602][   T43] audit: type=1400 audit(1789157277.265:1569): avc:  denied  { write } for  pid=10835 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.696297][   T43] audit: type=1400 audit(1789157277.715:1570): avc:  denied  { write } for  pid=10838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.752138][   T43] audit: type=1400 audit(1789157277.775:1571): avc:  denied  { write } for  pid=10841 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.854656][   T43] audit: type=1400 audit(1789157277.875:1572): avc:  denied  { write } for  pid=10844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.928514][   T43] audit: type=1400 audit(1789157277.955:1573): avc:  denied  { write } for  pid=10847 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  235.045109][   T43] audit: type=1400 audit(1789157278.065:1574): avc:  denied  { write } for  pid=10850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  235.121886][   T43] audit: type=1400 audit(1789157278.145:1575): avc:  denied  { write } for  pid=10853 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1