last executing test programs:

5m21.138097322s ago: executing program 32 (id=98):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x1, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], 0x3}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)

4m58.635691721s ago: executing program 33 (id=719):
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, 0x0, 0x44000)
sendmsg$DEVLINK_CMD_PORT_SET(r0, 0x0, 0x4040090)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
syz_emit_vhci(&(0x7f0000001040)=ANY=[@ANYBLOB="02c9"], 0x11)

4m34.765125923s ago: executing program 34 (id=903):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x1800, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)

4m23.192844304s ago: executing program 35 (id=966):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x4, 0x4, 0xfd, 0x0, 0xfe, 0x6, 0x100}, [@RTA_NH_ID={0x8, 0x1e, 0x87b}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x84, 0x0, 0x4, 0x0, 0xf8, 0x60, 0x2000}}}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="59c0c1be8e07ea259f9444c05f14c2fab59b8c54ab6a059349d21c00372be133f87a5751e43ae2bf624af58821c7a94b20b0ffc99271ec7877a95e121a3a633e20f5175a11113e2ebfdfacbb3d84de834ed2bdbe8553662d7eee7da149330b344e03845fce7644f3df22f8419efe8c6517e43a08f84a18e3b8984fe3965c5f157f79f74003214849680ac41ccdb6cdfbb91bb8c68ef69667278dd2a5f01e04a9e50ed98d9c043967e3537e5ed08978d27ac57a8fb8cc70d97c0f"])
r2 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x400800, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000440)={0x0, 0x1, 0xc37a, '\x00', &(0x7f0000000400)=0x6})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000001c0)=0x30)
creat(&(0x7f0000000380)='./file0\x00', 0x1a0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none')

3m23.798521626s ago: executing program 4 (id=2244):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}, 0x1, 0x300}, 0x0)

3m23.700111671s ago: executing program 4 (id=2246):
r0 = syz_open_dev$sg(&(0x7f0000000340), 0x3bd98cae, 0x401) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100"], 0x6c}}, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffe85, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0xffffffff, 0x10001, 0x44da, 0x2}}}}]}, 0x48}}, 0x0) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)={0x0, 0x1, 0x7f}) (async)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r4) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3a8, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r9 = socket(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}}, 0x14}}, 0x0) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32)
r11 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000380)=0x6e, 0x80800)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async)
sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000200000000ffdbdf251000000034000280080001003893000008000200c10000000800020001000000080002000b000000084002000500000008000100ff7f00000c00038008000300ff63d634"], 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)

3m23.511520443s ago: executing program 4 (id=2251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000019000100000000000000000080200000001100050000000014000f"], 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000023c0)={0x0, 'bond_slave_1\x00', {0x1}, 0x109})

3m23.448327144s ago: executing program 4 (id=2253):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) (async)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) (async)
sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='smb3\x00', 0x0, &(0x7f0000000380)='acl')
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x10, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x20000005, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x10, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x20000005, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810)
close_range(r0, 0xffffffffffffffff, 0x0)

3m23.151491654s ago: executing program 4 (id=2259):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x492492492492672, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x84, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8de0, 0x6}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x48801}, 0x885)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
setrlimit(0x7, &(0x7f0000000400))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000540)='%\x00', &(0x7f0000000580)='./file1\x00', 0xffffffffffffffff)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x7, 0x7, 0x582b04d7, 0x0, 0x1, 0xfffffff9})

3m23.099962818s ago: executing program 4 (id=2261):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, 0x0, 0x40080, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x700, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0xe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]})
setitimer(0x1, 0x0, 0x0)

3m8.070151983s ago: executing program 36 (id=2261):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, 0x0, 0x40080, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x700, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0xe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]})
setitimer(0x1, 0x0, 0x0)

2m28.898873635s ago: executing program 1 (id=3188):
mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='#1:syz1.'], &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000380))
set_mempolicy(0x1, &(0x7f0000000000)=0x2, 0x7)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r2)

2m28.700576761s ago: executing program 1 (id=3192):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf2481808000000000000000000014000100fc0200000000000000000a0000000000140002"], 0x44}}, 0x884)

2m28.629695865s ago: executing program 1 (id=3193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2m28.52002395s ago: executing program 1 (id=3197):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400000000ffffffffffffff8c", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2m28.320752383s ago: executing program 1 (id=3201):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000980))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200))
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20)
write(r3, &(0x7f0000000440)='1', 0x1)
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m27.387863459s ago: executing program 1 (id=3215):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80002, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

2m27.141155271s ago: executing program 8 (id=3218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000fe001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

2m27.140854858s ago: executing program 8 (id=3219):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x6, 0x8, 0x5, 0x1ff}})
listen(r1, 0x400008)
shutdown(r1, 0x0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="8e28004000", @ANYRES16=r2, @ANYBLOB="a1ab00000000f8dbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB='@', @ANYRESOCT=0x0, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x44011)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
r6 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_BLKTRACESTOP(r6, 0x1275, 0x0)
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)
r7 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x541b, &(0x7f0000000640))
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
open(0x0, 0x400, 0x1)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'})
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r9, @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2m27.092039536s ago: executing program 8 (id=3220):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x22000000)

2m27.001141068s ago: executing program 7 (id=3221):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0)
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000080)={0x0, 0x5185, 0x80000, 0x2, 0x289}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_enter(r0, 0x5baf, 0x79d6, 0x0, &(0x7f00000001c0)={[0x5a]}, 0x8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
exit(0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x8008550e, &(0x7f0000000380)=0x8)

2m27.000819957s ago: executing program 8 (id=3222):
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000003b00000000fe8000000000000000000000000000aa"], 0x0)

2m26.951094203s ago: executing program 8 (id=3223):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000980))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200))
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20)
write(r3, &(0x7f0000000440)='1', 0x1)
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m26.130382861s ago: executing program 7 (id=3228):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x6, 0x8, 0x5, 0x1ff}})
listen(r1, 0x400008)
shutdown(r1, 0x0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="8e28004000", @ANYRES16=r2, @ANYBLOB="a1ab00000000f8dbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB='@', @ANYRESOCT=0x0, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x44011)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
r6 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_BLKTRACESTOP(r6, 0x1275, 0x0)
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)
r7 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x541b, &(0x7f0000000640))
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
open(0x0, 0x400, 0x1)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'})
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r9, @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2m26.110502114s ago: executing program 8 (id=3229):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="800066180a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x5, 0x1, 0xa, 0xd, 0x1, 0x7, 0xc, 0x2d, 0x7f, 0x6, 0x8, 0xf5, 0x9}, {0xf, 0x9, 0x0, 0x6, 0x8, 0xe, 0xc, 0x1, 0x8, 0x3, 0x46, 0xe8}, {0x0, 0x7, 0xe8, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x6, 0x8, 0x4, 0x4, 0x2b0d}], 0xf})

2m26.084337812s ago: executing program 7 (id=3230):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000500240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

2m25.8692752s ago: executing program 7 (id=3233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000031c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

2m25.807198619s ago: executing program 7 (id=3237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000980))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200))
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20)
write(r3, &(0x7f0000000440)='1', 0x1)
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m24.931027039s ago: executing program 7 (id=3245):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000600240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

2m24.760463433s ago: executing program 6 (id=3250):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002)
ioctl$FE_SET_PROPERTY(r2, 0x40106f52, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file3\x00', 0x52001, 0x0) (async, rerun: 64)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)=ANY=[@ANYBLOB="1201500200000020c016e17540000102035003090300040203010005092104003c01221a090905810300020401750000000000000000"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async, rerun: 64)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x60) (rerun: 64)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000100)={0x1}) (async, rerun: 32)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, r4, 0x3000006, 0x12, r5, 0x0) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x3a5800, 0x88)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) (async)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async, rerun: 32)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x5, 0x4, 0x42, 0x5ff2, 0x0}) (rerun: 32)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) (async)
syz_emit_ethernet(0x1a, 0x0, 0x0)

2m23.991235185s ago: executing program 6 (id=3251):
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc02000000000000000000f500000000fe8000000000000000000000000000aa"], 0x0)

2m23.771095187s ago: executing program 6 (id=3252):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2m23.770640936s ago: executing program 6 (id=3253):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
inotify_init() (async)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000100)='./file1\x00', 0x84242, 0x2)
sendfile(r1, r1, 0x0, 0x7f03)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20500, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'gre0\x00', <r4=>0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r6, r5, 0x0) (async)
r7 = dup3(r6, r5, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x7ff, 0x4, 0x26000, 0xffffffffffffffff, 0x6, '\x00', r4, r7, 0x3, 0x0, 0x0, 0xb}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x7ff, 0x4, 0x26000, 0xffffffffffffffff, 0x6, '\x00', r4, r7, 0x3, 0x0, 0x0, 0xb}, 0x50)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4})
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$getregs(0xe, r9, 0xffffffffffffffff, &(0x7f0000000400)=""/130)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)=ANY=[@ANYBLOB='g\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00002abd7004fddbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="38003300c010fe00080211000000080211000001505050505050ea2c27008c18d30a0ecb5b2ea863c943328ecb23028659a85b4f2fb44834"], 0x54}}, 0x8800)
timer_create(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=<r14=>0x0)
timer_settime(r14, 0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) (async)
timer_settime(r14, 0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580))
sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe0, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "396264a1978b28720d0d79d86d96d8177dc29f0803"}}, {0xbc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb5, 0x2, "2bec40073a6768e0ce003663d94b4ce55158c769738e7b4672c49e12e764010065e7ad86266483cddd46cc4c0e03ea41cdc74f66d6b76bd3cc571e96b72bca0e9d56639fbb681700c4f6e3701a2e4140b8e8fe8502d65c4cc8d4d722d3addb813e5b95f8a7bafb664fe287cfb87328cc7679676bf7f6467765d6bc3cfe7fda194879bfc88acfec97f220b27cd1cb0574439f9f191bb2243d4f4217cc5d3dc3d182041f0b0de0abd697c05b29aa2a36c2da"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004800}, 0x80)

2m23.691255642s ago: executing program 6 (id=3254):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000980))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200))
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20)
write(r3, &(0x7f0000000440)='1', 0x1)
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m23.340147916s ago: executing program 6 (id=3255):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400000000fffffffffffffffe", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2m23.251250735s ago: executing program 37 (id=3255):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400000000fffffffffffffffe", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2m0.435664254s ago: executing program 38 (id=3215):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80002, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

2m0.435521548s ago: executing program 39 (id=3229):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="800066180a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x5, 0x1, 0xa, 0xd, 0x1, 0x7, 0xc, 0x2d, 0x7f, 0x6, 0x8, 0xf5, 0x9}, {0xf, 0x9, 0x0, 0x6, 0x8, 0xe, 0xc, 0x1, 0x8, 0x3, 0x46, 0xe8}, {0x0, 0x7, 0xe8, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x6, 0x8, 0x4, 0x4, 0x2b0d}], 0xf})

2m0.435469347s ago: executing program 40 (id=3245):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000600240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

1m23.396972643s ago: executing program 9 (id=3742):
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='bfq', 0x3)

1m23.330158267s ago: executing program 9 (id=3743):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @broadcast, 0x0, 0xffffff00, 0xd, 0x8, {@mac=@remote, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x8000, 0xffff, 0x2, 0x8, 0x3, 0x7, 'wlan0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x4c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1, 0x1}}}, {{@arp={@remote, @rand_addr=0x64010101, 0x0, 0xffffffff, 0x6, 0xd, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="f6a86e5a0628", {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3cf0, 0x3, 0x6, 0xc, 0x5, 0x3, 'bridge_slave_1\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x69}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8119e2448f54", @mac=@random="6380e1e62702", @multicast1, @multicast2, 0xf}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0xff000000, 0x10, 0x4, {@empty, {[0x1266162ceef65399, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0xa, 0x1, 0x4, 0x3, 0x6, 0xf, 'pim6reg0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

1m23.240327402s ago: executing program 9 (id=3745):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0)

1m23.240128731s ago: executing program 9 (id=3746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$bpf(0x0, 0x0, 0x0, 0x1a3c899, &(0x7f0000000580)=ANY=[@ANYBLOB="7375810000000000000064866208f1d42f505b02ded402bbfeb72c2c2dfb799e874598acc934c6c0e3d5ad"])
listns(&(0x7f00000003c0), 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001"], 0xbc}}, 0x0)

1m23.200339412s ago: executing program 9 (id=3748):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='0000:00:1d.7\x00', 0xd)
io_uring_setup(0x5501, &(0x7f0000000080)={0x0, 0x4178, 0x400, 0x0, 0x110})
r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x9, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x8b4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x85c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_RATE64={0xc, 0x4, 0xa8f882b1ff403446}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3b, 0x0, 0xf89, 0x4, 0x2, 0x1}, {0xff, 0x2, 0xc9, 0x5, 0x5, 0x1000}, 0x5, 0x8, 0x5d3}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xf, 0xe, 0x6, 0xa, 0x6, 0x587, 0xc, 0xc54, 0x0, 0x10, 0x8, 0x7fff, 0x3, 0x7a, 0x52a9, 0x1ff, 0x7, 0x9f, 0x1d1a, 0x81, 0x4, 0x6, 0x24f, 0x1, 0x9, 0x7186, 0xffffffc0, 0x80, 0xffffffff, 0x6, 0xc, 0xbcd, 0x200, 0x9, 0x400, 0x7, 0x7, 0x7fffffff, 0x9, 0xb09, 0x5, 0x6, 0x1000, 0x400, 0x2, 0x7a, 0x6, 0x4, 0x8, 0x10001, 0x9, 0x9, 0x5, 0x56d7, 0x8, 0x8, 0xa, 0x7, 0x4b8, 0x1, 0x8009, 0x3, 0xe00, 0xffffff62, 0x87e, 0x75ab, 0xffff, 0x5, 0xfffffffa, 0x16f, 0x7, 0x2, 0x4, 0xfffffbff, 0x8, 0x4, 0x8, 0xfffffff7, 0x10001, 0x2, 0x145, 0x0, 0xfffffffd, 0x6, 0xfffffffc, 0x7, 0x3, 0x5, 0x7, 0x1, 0x9, 0x80, 0x9, 0x80, 0x1, 0x1, 0x8, 0x8, 0xb55, 0xd38f, 0x0, 0x4, 0x200, 0xfff, 0xff, 0xfff, 0x4, 0x3ff, 0x4, 0x71, 0xc07, 0x1, 0x10001, 0x2, 0x2, 0xa77, 0xf0, 0x5, 0xfffffffc, 0x0, 0x1, 0x1c0000, 0x6, 0x9, 0x400, 0x8, 0x4, 0x0, 0x6d, 0x4, 0x9, 0x7, 0xf, 0x1, 0x7, 0x4, 0xd, 0x1, 0x8, 0x7, 0x3, 0x3, 0x9, 0x98a2, 0x6e76, 0x5, 0x8, 0x0, 0xc, 0x2, 0x3, 0x10000, 0x7fffffff, 0x2, 0x10000009, 0x3a, 0xfb0, 0x5, 0x6, 0x9, 0xc4000000, 0x7fffffff, 0x848, 0x3, 0x6, 0x9, 0x3, 0x40, 0xf89b, 0x6, 0x60000000, 0x0, 0xd9, 0x29e, 0xfb64, 0x0, 0x80, 0x1, 0x1, 0x2, 0x1547e00, 0x0, 0xe78, 0x6, 0x10, 0x4, 0xfffffffc, 0xc, 0x478b2a76, 0xfff, 0x3, 0x80000001, 0x7, 0x2, 0x7, 0x2, 0x4, 0x0, 0x1b3, 0x8, 0x6, 0x61, 0x2, 0x101, 0x3, 0x4f9b, 0xd, 0x400, 0x86, 0x5c9, 0x7, 0xff, 0x7, 0x6, 0x8, 0x7, 0xa, 0x8, 0x7, 0x3, 0x3, 0x2, 0xffffffff, 0xffff, 0xf5d, 0x1ff, 0x7, 0x2, 0xfffff607, 0x5, 0x2, 0x3, 0xde4, 0x932, 0x1, 0x4, 0x6, 0x7, 0x236, 0x5, 0x9, 0x5e, 0x2, 0xcc69, 0x1, 0xe, 0xffffc14e, 0x33a, 0x7, 0x2, 0x9a, 0xffa7, 0x4, 0x7, 0x9]}, @TCA_TBF_BURST={0x8, 0x6, 0x80000000}, @TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x80000001, 0x0, 0x8, 0x7, 0x2, 0x4, 0xfffffffd, 0x2, 0x80000000, 0x7, 0x8, 0xdfd, 0x8, 0x8207, 0x9, 0xfffffff7, 0x8, 0x7, 0x1, 0x1, 0xb, 0x80, 0x401, 0x6, 0x1, 0xfff, 0x959, 0x8, 0x9, 0x1, 0x4, 0x9, 0xffff, 0x9a, 0x0, 0x8001, 0x8, 0x6, 0x3, 0x7, 0x3, 0x89, 0x7, 0x6, 0xffffff89, 0x99, 0x67, 0x6, 0x5, 0x1, 0xb, 0xb, 0x0, 0x0, 0x2, 0x9, 0x84d, 0x6, 0x8, 0x6, 0xb91, 0x4, 0xff, 0x1, 0x7, 0x43, 0x9, 0xe0000000, 0x1, 0x1, 0x8, 0x8, 0x2, 0x1400000, 0x80000001, 0x5d, 0x97, 0x3, 0x1, 0xa98, 0x1, 0x9, 0x8001, 0x1, 0x4, 0x4, 0xf, 0x7, 0x6, 0x6f76, 0x0, 0x7fffffff, 0x0, 0x4, 0x0, 0x5, 0xf, 0x9, 0x1, 0x1, 0x401, 0x2, 0x3, 0x8, 0x10, 0x5, 0x81, 0x1d5, 0x4, 0x0, 0xc, 0x6, 0x4, 0xb, 0x8, 0x5, 0x1, 0x1, 0x7, 0xfffffffd, 0x10, 0x2, 0x8, 0xfffffff7, 0x45f, 0x6, 0x6b0, 0xfff, 0x0, 0x5, 0x8, 0x9, 0x40, 0xe, 0x4, 0x512, 0x8, 0xd19, 0x7, 0x9000, 0x0, 0x6, 0x2, 0x9, 0x6, 0x7f, 0x9, 0x6, 0x3, 0x8, 0x4000003, 0x6, 0x8, 0x6, 0x800, 0x249, 0x9, 0xfffffffe, 0x9, 0x5c5708c2, 0x8, 0x7, 0x1, 0x800, 0xfd30, 0x7ff, 0x0, 0x8, 0x2, 0x5, 0x7fff, 0x2, 0x1000, 0x0, 0x1174, 0x7bf5, 0x101, 0x0, 0x5, 0xcb4c, 0x2, 0x0, 0x8, 0x3, 0xfffffff7, 0x4f2d0789, 0x6, 0x9, 0x0, 0x4, 0x7ff, 0x1, 0xb53, 0x2, 0x7, 0x5, 0x10001, 0x8, 0x40000000, 0x0, 0x7fffffff, 0x9, 0xc9bb, 0x6, 0xe5e, 0xe, 0x3, 0x5, 0x80, 0x7fffffff, 0x9, 0x3, 0x8, 0x2, 0x7, 0x9, 0x2, 0x5, 0x80000000, 0xa9f9, 0x8aecae6, 0x8, 0x7, 0x8ef, 0xffffffff, 0x9, 0x7, 0xfffffff7, 0x0, 0x1ff, 0x5, 0x765, 0x800, 0x7f, 0x7, 0x8, 0x8001, 0x7fff, 0x9, 0x81, 0xe, 0x2, 0xffffffff, 0x89e, 0x80000001, 0x9, 0x800, 0x10001, 0x9, 0x46bb, 0x2, 0x3, 0x9, 0x1b89, 0x500a3fbd]}, @TCA_TBF_RATE64={0xc, 0x4, 0x321b5fc7d6c82b1c}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4b}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x8b4}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0)
flock(r1, 0x1)
open(&(0x7f0000000180)='.\x00', 0x0, 0x0)

1m23.014914133s ago: executing program 9 (id=3754):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x1, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x4, {0x2, 0x8, 0x0, 0x1, 0x10000, 0x0, 0x5, 0x0, 0x9, 0xc000, 0x0, r1, r2, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose}, {@posixacl}], [{@uid_eq={'uid', 0x3d, r1}}, {@subj_user={'subj_user', 0x3d, '127.0.0.1\x00'}}, {@pcr={'pcr', 0x3d, 0x28}}, {@audit}]}})

1m7.983026316s ago: executing program 41 (id=3754):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x1, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x4, {0x2, 0x8, 0x0, 0x1, 0x10000, 0x0, 0x5, 0x0, 0x9, 0xc000, 0x0, r1, r2, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose}, {@posixacl}], [{@uid_eq={'uid', 0x3d, r1}}, {@subj_user={'subj_user', 0x3d, '127.0.0.1\x00'}}, {@pcr={'pcr', 0x3d, 0x28}}, {@audit}]}})

3.570433639s ago: executing program 5 (id=4813):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0) (async)
mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x8, 0x0) (rerun: 32)
openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0) (async)
pipe2$9p(&(0x7f00000000c0), 0x5080)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0xfffe, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x229, 0x7, 0x0})
ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0)

3.380204968s ago: executing program 0 (id=4820):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty=0x1000000}, 0xc)
syz_io_uring_setup(0x4eac, &(0x7f0000000000)={0x0, 0x9e8c, 0x20, 0x0, 0x8e}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
r1 = socket(0xdd030602324cc067, 0x2, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r5=>0x0})
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1}, {0x306, @remote}, 0x48, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'pimreg0\x00'})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4)
sendto$packet(r4, &(0x7f0000000800)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xfffffd6d, 0x20004041, &(0x7f0000000540)={0xc9, 0x1c, r5, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x0, 0x47, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x13}, 0x7, 0x80, 0xfffffffc, 0xdc63}})

3.223462355s ago: executing program 0 (id=4822):
prctl$PR_SET_IO_FLUSHER(0x4a, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='0\n', 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x301, 0x8000000, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fff}]}, 0x30}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$TIOCCONS(r3, 0x541d)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000096000a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

3.145746032s ago: executing program 0 (id=4825):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 20)

2.755865874s ago: executing program 5 (id=4829):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/raw\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) (async, rerun: 32)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 32)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0xfffffffd)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/183) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) (async, rerun: 32)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 32)
ioctl$RTC_WIE_OFF(r4, 0x7010)
close_range(r0, 0xffffffffffffffff, 0x0)

2.755568369s ago: executing program 0 (id=4830):
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000003f00000000000000000000aa"], 0x0)

2.667581209s ago: executing program 0 (id=4832):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x3f000000)

2.599014573s ago: executing program 5 (id=4835):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100000000000000000000003f", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

2.554254066s ago: executing program 0 (id=4837):
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000100)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0)
getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x2)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000a00)='A', 0x1}], 0x1)
close(0x3)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)

2.501737303s ago: executing program 5 (id=4838):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}}, 0x4084)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r1 = gettid()
splice(r0, &(0x7f0000000180)=0xd, r0, &(0x7f00000001c0)=0x7, 0x8, 0x0)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000000380)=<r2=>0x0)
r3 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000000380))
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$KVM_CREATE_VM(r4, 0x40086806, 0x21)
ioctl$BLKTRACESETUP(r4, 0x6801, 0x0)
ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x1, 0x9}, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}])
timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r5 = gettid()
tkill(r5, 0x16)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000040280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.476493858s ago: executing program 5 (id=4839):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 21)

2.240568534s ago: executing program 5 (id=4841):
r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
write$char_usb(r3, &(0x7f0000006800)="13", 0x1)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1c000000180a01040000000000001e000a0000040800074000000006140000001100010000000000000000000000000a"], 0x44}, 0x1, 0x0, 0x0, 0x4082}, 0x8000)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010009000000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e696d300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25)
setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x0, 0x0, 0x2)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

610.36513ms ago: executing program 3 (id=4860):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="7f6705d26559"})
write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x32, 0x7a0b, @local, @loopback}}}}, 0x3e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

469.862248ms ago: executing program 2 (id=4861):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={<r5=>0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x88, 0x2f5, 0x0, 0x2, 0x6}, &(0x7f00000002c0)=0x98)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={r5, 0x55, "bf7fecd0a311b9fd89fa0d7a8801b7b8707e1347a479f861eac72ea43cd8df6cc289b71873c54693138b5c259b7f39206cd58e366614cd77dce064a162246fe94138f41852f7decd967774fefa37af1dbc97c927e7"}, &(0x7f0000000400)=0x5d)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x57ff, 0x0, 0x0, 0xe, 0x4, 0x2e1}, 0x20)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0xfffffffc, 0x0, 0x5b, 0xa5, "612a95dda1865286b86ec76ce2de51cd3e6fc29ed474e1f3d9280066a8862aa2942d34f14a454e38a02aa89b0c60cb6ec8ccfba5d6bb2daac611521b19d900", 0x3d}, 0x60)

393.92142ms ago: executing program 3 (id=4862):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)='0x0', 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854)
write(r4, &(0x7f0000000340)="07000000010001", 0x7)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="20000000410007012dbd7000fedbdf250300000000000000080009"], 0x20}}, 0xc000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x2}]}, 0x24}}, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x400, 0x1, 0x317}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000000))

357.323555ms ago: executing program 2 (id=4863):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

356.042468ms ago: executing program 3 (id=4864):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100001002abd700002d4df2500000000", @ANYRES32=r1, @ANYBLOB="94e406008353000020001280110001006272696467655f736c6176650000000008000580040018"], 0x40}}, 0x200088c2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002f00090027bd7000fedbdf250400000004001f"], 0xcc}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

325.57874ms ago: executing program 2 (id=4865):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6011010000641100fe8000000000000000000500000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)

250.776031ms ago: executing program 2 (id=4866):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000)

249.175369ms ago: executing program 3 (id=4867):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf2481808000000000000000000014000100fc020000000000028900000000000000140002"], 0x44}}, 0x884)

179.977116ms ago: executing program 3 (id=4868):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000104000000000000000000000300", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

179.415899ms ago: executing program 2 (id=4869):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x1ff}}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00')
munmap(&(0x7f000006e000/0x1000)=nil, 0x1000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffe, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x8, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x200007, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x20004, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x466, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x6, 0xa7, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000ee000095", @ANYRES64=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x19}, 0x94)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x68, 0x0, 0x814, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x5e}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xfb}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x16}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x10)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000001c0)=""/121)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x26e1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x4})
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x4}, 0x38)

87.761118ms ago: executing program 2 (id=4870):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r0, 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0x1)
r1 = creat(&(0x7f0000000580)='./file2\x00', 0x0)
r2 = fanotify_init(0xf00, 0x0)
fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x45)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)

0s ago: executing program 3 (id=4871):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$kcm(0x29, 0x5, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r1], 0x84}}, 0x20008040)

kernel console output (not intermixed with test programs):

bute type 1 has an invalid length.
[  331.450397][   T42] audit: type=1400 audit(1785453879.590:1239): avc:  denied  { write } for  pid=18458 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  331.470090][T18457] bond9: entered promiscuous mode
[  331.472005][T18457] 8021q: adding VLAN 0 to HW filter on device bond9
[  331.501047][T18466] comedi comedi2: comedi_config --init_data is deprecated
[  331.593569][T18457] bond9: (slave bridge1): making interface the new active one
[  331.600209][T18457] bridge1: entered promiscuous mode
[  331.606597][T18457] bond9: (slave bridge1): Enslaving as an active interface with an up link
[  331.631681][T18476] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3988'.
[  331.649826][T18480] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7
[  331.660253][T18479] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7
[  331.663047][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  331.668790][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  331.672362][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  331.676901][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  331.696582][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.750841][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  331.754174][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  331.756838][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  331.761431][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  331.767492][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.889876][T18494] netlink: 'syz.3.3991': attribute type 1 has an invalid length.
[  331.945237][T18489] netlink: 'syz.3.3991': attribute type 63 has an invalid length.
[  331.952602][T18494] bond10: entered promiscuous mode
[  331.954765][T18494] 8021q: adding VLAN 0 to HW filter on device bond10
[  331.989757][T18513] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  331.993583][T18513] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3997'.
[  332.015514][   T42] audit: type=1400 audit(1785453880.150:1240): avc:  denied  { read write } for  pid=18514 comm="syz.3.3998" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  332.035093][   T42] audit: type=1400 audit(1785453880.150:1241): avc:  denied  { open } for  pid=18514 comm="syz.3.3998" path="/156/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  332.039913][T18515] program syz.3.3998 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.056104][   T42] audit: type=1400 audit(1785453880.170:1242): avc:  denied  { ioctl } for  pid=18514 comm="syz.3.3998" path="/156/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  332.086225][   T42] audit: type=1400 audit(1785453880.220:1243): avc:  denied  { unmount } for  pid=16088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  332.177576][T18531] libceph: secret too big 3051
[  332.256547][T18540] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  332.284076][T18540] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4007'.
[  332.317029][T18541] bond8: entered promiscuous mode
[  332.323737][T18541] 8021q: adding VLAN 0 to HW filter on device bond8
[  332.351963][T18548] team_slave_0: entered promiscuous mode
[  332.354478][T18548] team_slave_0: left promiscuous mode
[  332.445182][T18552] program syz.0.4010 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.539988][T18570] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  332.682603][T18477] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.693498][T18477] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.702879][T18477] bridge_slave_0: entered allmulticast mode
[  332.714343][T18477] bridge_slave_0: entered promiscuous mode
[  332.724680][T18477] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.731753][T18477] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.737246][T18477] bridge_slave_1: entered allmulticast mode
[  332.745150][T18477] bridge_slave_1: entered promiscuous mode
[  332.750358][T18578] overlayfs: failed to decode file handle (len=8, type=8192, flags=0, err=-22)
[  332.793564][T18585] bond11: entered promiscuous mode
[  332.796356][T18585] 8021q: adding VLAN 0 to HW filter on device bond11
[  332.808744][T18477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.818891][T18477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.818992][T18591] program syz.2.4021 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.852765][T18477] team0: Port device team_slave_0 added
[  332.856440][T18477] team0: Port device team_slave_1 added
[  332.911343][T18597] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  332.934700][T18477] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.945227][T18477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.977388][T18477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.999488][T18603] bridge0: port 3(syz_tun) entered blocking state
[  333.002099][T18603] bridge0: port 3(syz_tun) entered disabled state
[  333.004674][T18603] syz_tun: entered allmulticast mode
[  333.013048][T18603] syz_tun: entered promiscuous mode
[  333.016085][T18603] bridge0: port 3(syz_tun) entered blocking state
[  333.018519][T18603] bridge0: port 3(syz_tun) entered forwarding state
[  333.027238][T18603] bridge0: port 3(syz_tun) entered disabled state
[  333.030945][T18603] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.035484][T18603] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.043352][T18477] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.049809][T18477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.059681][T18477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.098063][T18477] hsr_slave_0: entered promiscuous mode
[  333.102306][T18477] hsr_slave_1: entered promiscuous mode
[  333.104841][T18477] debugfs: 'hsr0' already exists in 'hsr'
[  333.107001][T18477] Cannot create hsr debugfs directory
[  333.113452][T18615] validate_nla: 2 callbacks suppressed
[  333.113465][T18615] netlink: 'syz.3.4029': attribute type 1 has an invalid length.
[  333.135589][T18615] bond12: entered promiscuous mode
[  333.137721][T18615] 8021q: adding VLAN 0 to HW filter on device bond12
[  333.614069][T18644] team_slave_0: entered promiscuous mode
[  333.616566][T18644] team_slave_0: left promiscuous mode
[  333.879235][ T5745] Bluetooth: hci4: command tx timeout
[  333.900870][T18661] netlink: 'syz.0.4038': attribute type 1 has an invalid length.
[  333.931416][T18661] bond9: entered promiscuous mode
[  333.939137][T18661] 8021q: adding VLAN 0 to HW filter on device bond9
[  333.992383][T18674] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  334.018648][T18676] kernel read not supported for file /sg0 (pid: 18676 comm: syz.2.4040)
[  334.184161][T18477] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  334.202826][T18477] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  334.214761][T18477] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  334.224844][T18477] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  334.228706][T18693] program syz.0.4047 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  334.240780][T18477] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  334.261397][T18477] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  334.267418][T18477] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  334.281561][T18477] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  334.335294][T18477] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.347377][T18477] 8021q: adding VLAN 0 to HW filter on device team0
[  334.353376][T16059] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  334.361045][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.363435][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.387723][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.390141][ T8431] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.510365][T16059] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  334.518532][T16059] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.527942][T16059] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.540664][T16059] usb 8-1: config 0 interface 0 has no altsetting 0
[  334.544737][T16059] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.548427][T16059] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.559921][T16059] usb 8-1: config 0 interface 0 has no altsetting 0
[  334.565631][T16059] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.574469][T16059] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.578916][T16059] usb 8-1: config 0 interface 0 has no altsetting 0
[  334.583027][T16059] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.586599][T16059] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.595178][T16059] usb 8-1: config 0 interface 0 has no altsetting 0
[  334.598198][T16059] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.601766][T16059] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.606520][T16059] usb 8-1: config 0 interface 0 has no altsetting 0
[  334.610223][T18718] syzkaller0: entered promiscuous mode
[  334.612173][T18718] syzkaller0: entered allmulticast mode
[  334.614690][T16059] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.617743][T16059] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.624256][T16059] usb 8-1: config 0 interface 0 has no altsetting 0
[  334.627286][T18718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.632178][T16059] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.635373][T16059] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.640636][T16059] usb 8-1: config 0 interface 0 has no altsetting 0
[  334.643828][T16059] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.646874][T16059] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.651001][T16059] usb 8-1: config 0 interface 0 has no altsetting 0
[  334.655854][T16059] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  334.662360][T16059] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  334.668447][T16059] usb 8-1: Product: syz
[  334.671584][T16059] usb 8-1: Manufacturer: syz
[  334.675365][T16059] usb 8-1: SerialNumber: syz
[  334.692079][T16059] usb 8-1: config 0 descriptor??
[  334.704057][T16059] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[  334.827750][T18477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.983467][T18743] netlink: 'syz.2.4050': attribute type 1 has an invalid length.
[  335.006439][T18743] bond12: entered promiscuous mode
[  335.011567][T18743] 8021q: adding VLAN 0 to HW filter on device bond12
[  335.020788][T18743] __nla_validate_parse: 11 callbacks suppressed
[  335.020809][T18743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4050'.
[  335.035178][   T56] usb 8-1: USB disconnect, device number 5
[  335.055336][   T56] yurex 8-1:0.0: USB YUREX #0 now disconnected
[  335.110575][T18477] veth0_vlan: entered promiscuous mode
[  335.117403][T18477] veth1_vlan: entered promiscuous mode
[  335.137253][T18477] veth0_macvtap: entered promiscuous mode
[  335.142351][T18477] veth1_macvtap: entered promiscuous mode
[  335.153031][T18477] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.158979][T18477] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.163817][T18755] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4051'.
[  335.177544][ T5817] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.281803][ T5817] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.308550][T18707] tipc: Resetting bearer <eth:syzkaller0>
[  335.387662][T18707] tipc: Disabling bearer <eth:syzkaller0>
[  335.438853][ T8425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.442421][ T8425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.452972][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.467842][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.530240][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.533655][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.620331][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4056'.
[  335.664675][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.665047][T18777] team_slave_0: entered promiscuous mode
[  335.667806][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.675535][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.678920][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.687078][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.688203][T18777] team_slave_0: left promiscuous mode
[  335.690550][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.695909][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.700838][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.705462][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.716645][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: unknown main item tag 0x0
[  335.739430][ T5851] hid-generic 0004:FFFFFFFF:0000.0013: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  335.771857][T18790] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  335.786582][T18790] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4059'.
[  335.899960][   T56] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  335.959897][ T5745] Bluetooth: hci4: command tx timeout
[  335.988799][T18812] binder: BC_ATTEMPT_ACQUIRE not supported
[  335.994516][T18812] binder: 18810:18812 ioctl c0306201 200000000000 returned -22
[  335.994688][T18816] binder: BC_ATTEMPT_ACQUIRE not supported
[  336.000650][T18816] binder: 18810:18816 ioctl c0306201 200000000000 returned -22
[  336.068973][   T56] usb 8-1: config 0 has no interfaces?
[  336.085935][   T56] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  336.094994][T18825] overlayfs: failed to resolve './file2': -2
[  336.096943][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.108494][   T56] usb 8-1: config 0 descriptor??
[  336.142754][T18830] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4069'.
[  336.168204][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'.
[  336.201938][T18835] team_slave_0: entered promiscuous mode
[  336.206017][T18835] team_slave_0: left promiscuous mode
[  336.510932][   T42] kauditd_printk_skb: 31 callbacks suppressed
[  336.510948][   T42] audit: type=1400 audit(1785453884.640:1275): avc:  denied  { connect } for  pid=18860 comm="syz.0.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  336.655983][T18871] netlink: 'syz.2.4081': attribute type 1 has an invalid length.
[  336.679693][T18871] bond13: entered promiscuous mode
[  336.683038][T18871] 8021q: adding VLAN 0 to HW filter on device bond13
[  336.692249][T18871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4081'.
[  337.076344][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4084'.
[  337.085132][T18878] team_slave_0: entered promiscuous mode
[  337.087793][T18878] team_slave_0: left promiscuous mode
[  337.375006][T18882] kvm: pic: non byte write
[  337.508755][   T42] audit: type=1400 audit(1785453885.640:1276): avc:  denied  { ioctl } for  pid=18889 comm="syz.0.4089" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  337.538019][T18890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4089'.
[  337.541155][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4089'.
[  337.555158][   T42] audit: type=1400 audit(1785453885.690:1277): avc:  denied  { getopt } for  pid=18889 comm="syz.0.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  337.791737][T18904] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  337.819708][   T42] audit: type=1400 audit(1785453885.950:1278): avc:  denied  { write } for  pid=18891 comm="syz.5.4090" name="8" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  337.828464][   T42] audit: type=1400 audit(1785453885.960:1279): avc:  denied  { add_name } for  pid=18891 comm="syz.5.4090" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:"
[  337.842281][   T42] audit: type=1400 audit(1785453885.960:1280): avc:  denied  { create } for  pid=18891 comm="syz.5.4090" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  337.848807][   T42] audit: type=1400 audit(1785453885.960:1281): avc:  denied  { associate } for  pid=18891 comm="syz.5.4090" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  337.855891][   T42] audit: type=1400 audit(1785453885.960:1282): avc:  denied  { read write open } for  pid=18891 comm="syz.5.4090" path="/8/file1" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  337.867534][   T42] audit: type=1400 audit(1785453886.010:1283): avc:  denied  { mounton } for  pid=18891 comm="syz.5.4090" path="/8/my_config" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  337.916406][   T42] audit: type=1400 audit(1785453886.050:1284): avc:  denied  { rmdir } for  pid=18477 comm="syz-executor" name="my_config" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  338.069970][T18920] IPv6: NLM_F_CREATE should be specified when creating new route
[  338.073727][T18920] netlink: 'syz.5.4099': attribute type 1 has an invalid length.
[  338.158591][T18919] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  338.163814][T18919] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  338.488079][T18930] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  338.633648][ T6047] hid-generic 0009:0009:0004.0014: hidraw2: <UNKNOWN> HID v8.00 Device [syz1] on syz1
[  338.648522][ T5837] usb 8-1: USB disconnect, device number 6
[  338.745332][T18935] fido_id[18935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  338.832989][T18942] team_slave_0: entered promiscuous mode
[  338.835743][T18942] team_slave_0: left promiscuous mode
[  338.957000][T18952] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  339.013039][T18954] fuse: Unknown parameter '0000000000000000000500000000000000000004'
[  339.227760][T18975] netlink: 'syz.5.4118': attribute type 1 has an invalid length.
[  339.233213][T18973] team_slave_0: entered promiscuous mode
[  339.236343][T18973] team_slave_0: left promiscuous mode
[  339.405424][T18987] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  339.637663][T19003] team0 (unregistering): Port device team_slave_0 removed
[  339.656316][T19003] team0 (unregistering): Port device team_slave_1 removed
[  339.728961][T16021] IPVS: starting estimator thread 0...
[  339.821242][T19023] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  339.859278][T19018] IPVS: using max 22 ests per chain, 52800 per kthread
[  340.096883][T19033] netlink: 'syz.3.4139': attribute type 1 has an invalid length.
[  340.148136][T19036] __nla_validate_parse: 10 callbacks suppressed
[  340.148157][T19036] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4139'.
[  341.427910][T19056] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  341.439914][T19056] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4145'.
[  342.988575][T19033] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  343.038815][T19068] program syz.3.4149 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  343.047276][T19069] program syz.3.4149 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  343.128288][T19072] zonefs (loop3) ERROR: Not a zoned block device
[  343.302828][   T42] kauditd_printk_skb: 5 callbacks suppressed
[  343.302846][   T42] audit: type=1800 audit(1785453891.440:1290): pid=19072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4150" name="baSourceID" dev="configfs" ino=87279 res=0 errno=0
[  343.408633][T19087] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4154'.
[  343.500992][T19100] team0 (unregistering): Port device team_slave_0 removed
[  343.515141][T19100] team0 (unregistering): Port device team_slave_1 removed
[  343.712575][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4165'.
[  344.007294][   T42] audit: type=1400 audit(1785453892.140:1291): avc:  denied  { remove_name } for  pid=19119 comm="syz.2.4168" name="uac2.usb0" dev="configfs" ino=40267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  344.017368][   T42] audit: type=1400 audit(1785453892.150:1292): avc:  denied  { rmdir } for  pid=19119 comm="syz.2.4168" name="uac2.usb0" dev="configfs" ino=40267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  344.299346][T16059] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  344.469153][T16059] usb 7-1: Using ep0 maxpacket: 8
[  344.473162][T16059] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  344.477352][T16059] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  344.483475][T16059] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  344.487696][T16059] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  344.493379][T16059] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  344.497105][T16059] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.711720][T16059] usb 7-1: GET_CAPABILITIES returned 0
[  344.713838][T16059] usbtmc 7-1:16.0: can't read capabilities
[  346.766284][T19112] team_slave_0: entered promiscuous mode
[  346.768988][T19112] team_slave_0: left promiscuous mode
[  346.873347][T19124] netlink: 'syz.3.4169': attribute type 1 has an invalid length.
[  346.937965][T19131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4169'.
[  346.938245][    T9] usb 7-1: USB disconnect, device number 7
[  347.005648][T19124] bond13: entered promiscuous mode
[  347.013741][T19124] 8021q: adding VLAN 0 to HW filter on device bond13
[  347.035753][T19130] team0 (unregistering): Port device team_slave_0 removed
[  347.084877][T19130] team0 (unregistering): Port device team_slave_1 removed
[  347.198206][T19143] team0 (unregistering): Port device team_slave_0 removed
[  347.207325][T19148] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4177'.
[  347.231217][T19143] team0 (unregistering): Port device team_slave_1 removed
[  347.335768][T19154] overlay: Unknown parameter 'fowner<00000000000000000000'
[  347.442851][T19165] overlayfs: failed to get inode (-116)
[  347.443573][T19167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4185'.
[  347.454411][T19165] overlayfs: failed to get inode (-116)
[  347.463189][T19152] syzkaller0: entered promiscuous mode
[  347.465561][T19152] syzkaller0: entered allmulticast mode
[  347.472570][T19152] tipc: Started in network mode
[  347.475819][T19152] tipc: Node identity fe4b20f3d235, cluster identity 4711
[  347.480823][T19152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.489959][T19151] tipc: Resetting bearer <eth:syzkaller0>
[  347.540816][T19151] tipc: Disabling bearer <eth:syzkaller0>
[  347.597215][T19175] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4188'.
[  347.710229][T19184] overlayfs: overlapping lowerdir path
[  347.722812][T19182] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4189'.
[  347.725956][T19182] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4189'.
[  347.910688][T19206] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4199'.
[  348.226823][T19229] kvm: user requested TSC rate below hardware speed
[  348.248776][T19228] kvm: user requested TSC rate below hardware speed
[  348.266406][T19233] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4208'.
[  348.266720][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4209'.
[  348.283464][T19227] xt_NFQUEUE: number of queues (5) out of range (got 65536)
[  348.285869][T19231] team_slave_0: entered promiscuous mode
[  348.297135][T19231] batadv0: entered promiscuous mode
[  348.305757][T19231] debugfs: 'hsr1' already exists in 'hsr'
[  348.312272][T19231] Cannot create hsr debugfs directory
[  348.314235][T19231] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  348.331792][T19231] team_slave_0: left promiscuous mode
[  348.341695][T19238] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4211'.
[  348.344802][T19231] batadv0: left promiscuous mode
[  348.348218][   T42] audit: type=1326 audit(1785453896.480:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.358872][   T42] audit: type=1326 audit(1785453896.480:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.376351][   T42] audit: type=1326 audit(1785453896.480:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.406201][   T42] audit: type=1326 audit(1785453896.480:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.425632][   T42] audit: type=1326 audit(1785453896.480:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.461037][   T42] audit: type=1326 audit(1785453896.480:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79f355e84e code=0x7ffc0000
[  348.467968][   T42] audit: type=1326 audit(1785453896.480:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.475685][   T42] audit: type=1326 audit(1785453896.490:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.482791][   T42] audit: type=1326 audit(1785453896.490:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.495071][   T42] audit: type=1326 audit(1785453896.490:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.3.4211" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f79f359e019 code=0x7ffc0000
[  348.727001][T19260] syzkaller1: entered promiscuous mode
[  348.731465][T19260] syzkaller1: entered allmulticast mode
[  348.749792][    C3] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  348.757098][    C3] sr 2:0:0:0: [sr0] tag#5 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[  348.881325][T19269] team_slave_0: entered promiscuous mode
[  348.886375][T19269] batadv0: entered promiscuous mode
[  348.888341][T19269] debugfs: 'hsr1' already exists in 'hsr'
[  348.890986][T19269] Cannot create hsr debugfs directory
[  348.893184][T19269] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  348.897500][T19269] team_slave_0: left promiscuous mode
[  348.900461][T19269] batadv0: left promiscuous mode
[  349.139686][ T5851] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  349.290769][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.294794][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.298225][ T5851] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  349.304444][ T5851] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  349.307665][ T5851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.334504][ T5851] usb 8-1: config 0 descriptor??
[  349.436865][T19304] nbd: illegal input index 67111936
[  349.590868][T19314] team_slave_0: entered promiscuous mode
[  349.598638][T19314] batadv0: entered promiscuous mode
[  349.601589][T19314] debugfs: 'hsr1' already exists in 'hsr'
[  349.603553][T19314] Cannot create hsr debugfs directory
[  349.605410][T19314] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  349.615734][T19314] team_slave_0: left promiscuous mode
[  349.618042][T19314] batadv0: left promiscuous mode
[  349.779429][T19330] netlink: 'syz.5.4245': attribute type 4 has an invalid length.
[  349.800969][ T5851] usbhid 8-1:0.0: can't add hid device: -71
[  349.803038][ T5851] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  349.816300][ T5851] usb 8-1: USB disconnect, device number 7
[  350.069629][T16059] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  350.251269][T16059] usb 10-1: config 0 has no interfaces?
[  350.255264][T16059] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  350.263573][T16059] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.282853][T16059] usb 10-1: config 0 descriptor??
[  350.319563][T19365] team_slave_0: entered promiscuous mode
[  350.324356][T19365] batadv0: entered promiscuous mode
[  350.326715][T19365] debugfs: 'hsr1' already exists in 'hsr'
[  350.328590][T19365] Cannot create hsr debugfs directory
[  350.331447][T19365] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  350.336289][T19365] team_slave_0: left promiscuous mode
[  350.338828][T19365] batadv0: left promiscuous mode
[  350.407477][T19369] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  350.413955][T19371] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  350.526425][T19330] input: syz0 as /devices/virtual/input/input35
[  350.570153][T19369] /dev/sr0: Can't open blockdev
[  350.618259][ T5851] usb 10-1: USB disconnect, device number 4
[  350.701435][T19385] netlink: 'syz.0.4260': attribute type 1 has an invalid length.
[  350.718222][T19385] bond10: entered promiscuous mode
[  350.720375][T19385] 8021q: adding VLAN 0 to HW filter on device bond10
[  350.838771][T19395] trusted_key: encrypted_key: insufficient parameters specified
[  350.950275][T16021] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  351.109509][T16021] usb 7-1: Using ep0 maxpacket: 8
[  351.114105][T16021] usb 7-1: too many configurations: 101, using maximum allowed: 8
[  351.120301][T16021] usb 7-1: unable to read config index 0 descriptor/start: -61
[  351.123629][T16021] usb 7-1: can't read configurations, error -61
[  351.270897][T16021] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  351.452715][T16021] usb 7-1: Using ep0 maxpacket: 8
[  351.457222][T16021] usb 7-1: too many configurations: 101, using maximum allowed: 8
[  351.461143][T16021] usb 7-1: unable to read config index 0 descriptor/start: -61
[  351.464176][T16021] usb 7-1: can't read configurations, error -61
[  351.471054][T16021] usb usb7-port1: attempt power cycle
[  351.589310][ T6047] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  351.769162][ T6047] usb 10-1: Using ep0 maxpacket: 8
[  351.773076][ T6047] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  351.777239][ T6047] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  351.781446][ T6047] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  351.785629][ T6047] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  351.791095][ T6047] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  351.794902][ T6047] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.809386][T16021] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  351.829985][T16021] usb 7-1: Using ep0 maxpacket: 8
[  351.834991][T16021] usb 7-1: too many configurations: 101, using maximum allowed: 8
[  351.845592][T16021] usb 7-1: unable to read config index 0 descriptor/start: -61
[  351.851022][T16021] usb 7-1: can't read configurations, error -61
[  351.971498][T19432] __nla_validate_parse: 18 callbacks suppressed
[  351.971519][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'.
[  351.992447][T19432] team_slave_0: entered promiscuous mode
[  351.996102][T19432] batadv0: entered promiscuous mode
[  351.999308][T16021] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  352.009169][T19432] debugfs: 'hsr1' already exists in 'hsr'
[  352.016338][T19432] Cannot create hsr debugfs directory
[  352.018811][T19432] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  352.026505][T16021] usb 7-1: Using ep0 maxpacket: 8
[  352.028802][T16021] usb 7-1: too many configurations: 101, using maximum allowed: 8
[  352.036172][T16021] usb 7-1: unable to read config index 0 descriptor/start: -61
[  352.043225][T16021] usb 7-1: can't read configurations, error -61
[  352.047267][T16021] usb usb7-port1: unable to enumerate USB device
[  352.054001][T19432] team_slave_0: left promiscuous mode
[  352.058663][T19432] batadv0: left promiscuous mode
[  352.062915][ T6047] usb 10-1: GET_CAPABILITIES returned 0
[  352.065410][ T6047] usbtmc 10-1:16.0: can't read capabilities
[  352.367542][T19449] bpf: Bad value for 'uid'
[  352.368356][T19450] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  352.487718][T19458] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4288'.
[  352.703184][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4292'.
[  352.712820][T19474] team_slave_0: entered promiscuous mode
[  352.715727][T19474] batadv0: entered promiscuous mode
[  352.717962][T19474] debugfs: 'hsr1' already exists in 'hsr'
[  352.720494][T19474] Cannot create hsr debugfs directory
[  352.722364][T19474] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  352.726613][T19474] team_slave_0: left promiscuous mode
[  352.728900][T19474] batadv0: left promiscuous mode
[  352.813850][T19476] netlink: 'syz.0.4293': attribute type 1 has an invalid length.
[  352.817244][T19476] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4293'.
[  352.954225][T19488] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4297'.
[  353.022987][T19491] file system registered
[  353.403695][T19501] FAULT_INJECTION: forcing a failure.
[  353.403695][T19501] name failslab, interval 1, probability 0, space 0, times 0
[  353.414801][T19501] CPU: 0 UID: 0 PID: 19501 Comm: syz.0.4301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  353.414833][T19501] Tainted: [L]=SOFTLOCKUP
[  353.414839][T19501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  353.414850][T19501] Call Trace:
[  353.414875][T19501]  <TASK>
[  353.414883][T19501]  dump_stack_lvl+0x100/0x190
[  353.414976][T19501]  should_fail_ex.cold+0x5/0xa
[  353.415030][T19501]  should_failslab+0xc2/0x120
[  353.415077][T19501]  __kmalloc_noprof+0xfc/0x820
[  353.415112][T19501]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  353.415148][T19501]  kernfs_fop_write_iter+0x26a/0x5f0
[  353.415174][T19501]  vfs_write+0x6ac/0x1050
[  353.415212][T19501]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  353.415239][T19501]  ? __pfx_vfs_write+0x10/0x10
[  353.415282][T19501]  ksys_write+0x12a/0x250
[  353.415311][T19501]  ? __pfx_ksys_write+0x10/0x10
[  353.415346][T19501]  do_syscall_64+0x115/0x870
[  353.415374][T19501]  ? clear_bhb_loop+0x40/0x90
[  353.415399][T19501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.415419][T19501] RIP: 0033:0x7fac52f9e019
[  353.415435][T19501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.415453][T19501] RSP: 002b:00007fac53d8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  353.415481][T19501] RAX: ffffffffffffffda RBX: 00007fac53225fa0 RCX: 00007fac52f9e019
[  353.415494][T19501] RDX: 0000000000000005 RSI: 0000200000000500 RDI: 0000000000000003
[  353.415505][T19501] RBP: 00007fac53d8c090 R08: 0000000000000000 R09: 0000000000000000
[  353.415516][T19501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.415528][T19501] R13: 00007fac53226038 R14: 00007fac53225fa0 R15: 00007fff519a3948
[  353.415554][T19501]  </TASK>
[  353.701905][T19510] netlink: 'syz.0.4304': attribute type 1 has an invalid length.
[  353.753067][T19507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4304'.
[  353.768981][T19510] bond11: entered promiscuous mode
[  353.773250][T19510] 8021q: adding VLAN 0 to HW filter on device bond11
[  353.893417][T19521] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4306'.
[  353.913328][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4310'.
[  353.920045][T19525] team_slave_0: entered promiscuous mode
[  353.945482][T19525] batadv0: entered promiscuous mode
[  353.962788][T19525] debugfs: 'hsr1' already exists in 'hsr'
[  353.965954][T19525] Cannot create hsr debugfs directory
[  353.968511][T19525] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  353.999417][T19525] team_slave_0: left promiscuous mode
[  354.002603][T19525] batadv0: left promiscuous mode
[  354.006118][T19531] FAULT_INJECTION: forcing a failure.
[  354.006118][T19531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.012024][T19531] CPU: 2 UID: 0 PID: 19531 Comm: syz.0.4313 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  354.012052][T19531] Tainted: [L]=SOFTLOCKUP
[  354.012059][T19531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  354.012069][T19531] Call Trace:
[  354.012076][T19531]  <TASK>
[  354.012083][T19531]  dump_stack_lvl+0x100/0x190
[  354.012113][T19531]  should_fail_ex.cold+0x5/0xa
[  354.012138][T19531]  _copy_from_iter+0x1f4/0x1690
[  354.012218][T19531]  ? __pfx__copy_from_iter+0x10/0x10
[  354.012259][T19531]  ? trace_kmalloc+0xeb/0x110
[  354.012283][T19531]  ? __kasan_kmalloc+0xaa/0xb0
[  354.012306][T19531]  ? __kmalloc_noprof+0x343/0x820
[  354.012327][T19531]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  354.012356][T19531]  kernfs_fop_write_iter+0x186/0x5f0
[  354.012384][T19531]  vfs_write+0x6ac/0x1050
[  354.012412][T19531]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  354.012438][T19531]  ? __pfx_vfs_write+0x10/0x10
[  354.012481][T19531]  ksys_write+0x12a/0x250
[  354.012512][T19531]  ? __pfx_ksys_write+0x10/0x10
[  354.012546][T19531]  do_syscall_64+0x115/0x870
[  354.012566][T19531]  ? clear_bhb_loop+0x40/0x90
[  354.012588][T19531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.012616][T19531] RIP: 0033:0x7fac52f9e019
[  354.012631][T19531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.012649][T19531] RSP: 002b:00007fac53d8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  354.012667][T19531] RAX: ffffffffffffffda RBX: 00007fac53225fa0 RCX: 00007fac52f9e019
[  354.012679][T19531] RDX: 0000000000000005 RSI: 0000200000000500 RDI: 0000000000000003
[  354.012690][T19531] RBP: 00007fac53d8c090 R08: 0000000000000000 R09: 0000000000000000
[  354.012701][T19531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.012711][T19531] R13: 00007fac53226038 R14: 00007fac53225fa0 R15: 00007fff519a3948
[  354.012736][T19531]  </TASK>
[  354.233043][T19548] netlink: 'syz.3.4317': attribute type 1 has an invalid length.
[  354.250539][T19545] netlink: 'syz.2.4318': attribute type 1 has an invalid length.
[  354.268232][T19548] bond14: entered promiscuous mode
[  354.274991][T19548] 8021q: adding VLAN 0 to HW filter on device bond14
[  354.326994][   T56] usb 10-1: USB disconnect, device number 5
[  354.628745][T19565] VFS: Mount too revealing
[  354.633985][T19565] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4322'.
[  354.775713][T19585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4329'.
[  354.794381][T19585] team_slave_0: entered promiscuous mode
[  354.801955][T19585] batadv0: entered promiscuous mode
[  354.810169][T19585] debugfs: 'hsr1' already exists in 'hsr'
[  354.812763][T19585] Cannot create hsr debugfs directory
[  354.815142][T19585] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  354.821172][T19585] team_slave_0: left promiscuous mode
[  354.825473][T19585] batadv0: left promiscuous mode
[  354.984924][T19592] netlink: 'syz.5.4331': attribute type 1 has an invalid length.
[  355.008111][T19592] bond1: entered promiscuous mode
[  355.011585][T19592] 8021q: adding VLAN 0 to HW filter on device bond1
[  355.213939][T19600] bridge0: port 4(macvlan2) entered blocking state
[  355.216263][T19600] bridge0: port 4(macvlan2) entered disabled state
[  355.218631][T19600] macvlan2: entered allmulticast mode
[  355.223470][T19600] macvlan2: left allmulticast mode
[  355.249414][T16021] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  355.351478][T19607] FAULT_INJECTION: forcing a failure.
[  355.351478][T19607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.356533][T19607] CPU: 3 UID: 0 PID: 19607 Comm: syz.5.4340 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  355.356554][T19607] Tainted: [L]=SOFTLOCKUP
[  355.356559][T19607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  355.356567][T19607] Call Trace:
[  355.356584][T19607]  <TASK>
[  355.356589][T19607]  dump_stack_lvl+0x100/0x190
[  355.356671][T19607]  should_fail_ex.cold+0x5/0xa
[  355.356704][T19607]  _copy_from_user+0x2e/0xd0
[  355.356748][T19607]  kstrtouint_from_user+0xd6/0x1d0
[  355.356762][T19607]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  355.356775][T19607]  ? __lock_acquire+0x49f/0x1a40
[  355.356820][T19607]  proc_fail_nth_write+0x83/0x220
[  355.356853][T19607]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  355.356877][T19607]  vfs_write+0x2aa/0x1050
[  355.356905][T19607]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  355.356926][T19607]  ? __pfx_vfs_write+0x10/0x10
[  355.356944][T19607]  ? __fget_files+0x215/0x3d0
[  355.356969][T19607]  ? __fget_files+0x21f/0x3d0
[  355.356986][T19607]  ksys_write+0x12a/0x250
[  355.357010][T19607]  ? __pfx_ksys_write+0x10/0x10
[  355.357044][T19607]  do_syscall_64+0x115/0x870
[  355.357065][T19607]  ? clear_bhb_loop+0x40/0x90
[  355.357081][T19607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.357094][T19607] RIP: 0033:0x7fe1c715e84e
[  355.357105][T19607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  355.357117][T19607] RSP: 002b:00007fe1c7fdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  355.357134][T19607] RAX: ffffffffffffffda RBX: 00007fe1c7fdf6c0 RCX: 00007fe1c715e84e
[  355.357146][T19607] RDX: 0000000000000001 RSI: 00007fe1c7fdf0a0 RDI: 0000000000000004
[  355.357156][T19607] RBP: 00007fe1c7fdf090 R08: 0000000000000000 R09: 0000000000000000
[  355.357167][T19607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.357177][T19607] R13: 00007fe1c7426038 R14: 00007fe1c7425fa0 R15: 00007ffdc318cd48
[  355.357204][T19607]  </TASK>
[  355.450959][T16021] usb 8-1: Using ep0 maxpacket: 8
[  355.463786][T16021] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  355.471412][T16021] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  355.475453][T16021] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  355.480290][T16021] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  355.486240][T16021] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  355.491421][T16021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.514631][T19612] team_slave_0: entered promiscuous mode
[  355.525798][T19612] batadv0: entered promiscuous mode
[  355.539775][T19612] debugfs: 'hsr1' already exists in 'hsr'
[  355.542371][T19612] Cannot create hsr debugfs directory
[  355.544950][T19612] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  355.563884][T19612] team_slave_0: left promiscuous mode
[  355.567948][T19612] batadv0: left promiscuous mode
[  355.635515][T19618] netlink: 'syz.0.4343': attribute type 1 has an invalid length.
[  355.746647][T19618] bond12: entered promiscuous mode
[  355.753305][T16021] usb 8-1: GET_CAPABILITIES returned 0
[  355.758424][T16021] usbtmc 8-1:16.0: can't read capabilities
[  355.760067][T19618] 8021q: adding VLAN 0 to HW filter on device bond12
[  355.947247][T19637] geneve2: entered promiscuous mode
[  355.951217][T19637] geneve2: entered allmulticast mode
[  356.333039][   T42] kauditd_printk_skb: 30 callbacks suppressed
[  356.333052][   T42] audit: type=1400 audit(1785453904.470:1333): avc:  denied  { mounton } for  pid=19661 comm="syz.5.4358" path="/76/file0/file0" dev="hugetlbfs" ino=89431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[  356.344212][T19662] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  356.349288][T19662] overlayfs: failed to set xattr on upper
[  356.351675][T19662] overlayfs: ...falling back to redirect_dir=nofollow.
[  356.355853][T19662] overlayfs: ...falling back to index=off.
[  356.358339][T19662] overlayfs: ...falling back to uuid=null.
[  356.361203][T19662] overlayfs: maximum fs stacking depth exceeded
[  356.522741][   T42] audit: type=1400 audit(1785453904.660:1334): avc:  denied  { setattr } for  pid=19667 comm="syz.5.4361" name="XDP" dev="sockfs" ino=88491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  356.537308][T19668] openvswitch: netlink: Message has 512 unknown bytes.
[  356.544857][   T42] audit: type=1400 audit(1785453904.690:1335): avc:  denied  { ioctl } for  pid=19667 comm="syz.5.4361" path="socket:[88491]" dev="sockfs" ino=88491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  356.723022][T19673] IPv6: NLM_F_REPLACE set, but no existing node found!
[  357.006962][T19691] __nla_validate_parse: 7 callbacks suppressed
[  357.006980][T19691] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4371'.
[  357.040812][T19693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4372'.
[  357.198209][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'.
[  357.204943][T19703] team_slave_0: entered promiscuous mode
[  357.207835][T19703] batadv0: entered promiscuous mode
[  357.210219][T19703] debugfs: 'hsr1' already exists in 'hsr'
[  357.212195][T19703] Cannot create hsr debugfs directory
[  357.214185][T19703] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  357.218877][T19703] team_slave_0: left promiscuous mode
[  357.222728][T19703] batadv0: left promiscuous mode
[  357.342704][T19707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4377'.
[  357.467608][   T42] audit: type=1400 audit(1785453905.600:1336): avc:  denied  { accept } for  pid=19711 comm="syz.2.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  357.647290][T19719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4381'.
[  357.879003][T16021] hid_parser_main: 142 callbacks suppressed
[  357.879033][T16021] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  357.896237][T16021] hid-generic 0000:0000:0000.0015: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  357.950238][T19723] fido_id[19723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  357.986258][T13031] usb 8-1: USB disconnect, device number 8
[  358.002312][T19725] netlink: 'syz.2.4383': attribute type 1 has an invalid length.
[  358.051034][   T42] audit: type=1400 audit(1785453906.190:1337): avc:  denied  { create } for  pid=19728 comm="syz.0.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  358.093612][   T42] audit: type=1400 audit(1785453906.230:1338): avc:  denied  { write } for  pid=19728 comm="syz.0.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  358.103248][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4384'.
[  358.131742][T19725] bond14: entered promiscuous mode
[  358.140540][T19725] 8021q: adding VLAN 0 to HW filter on device bond14
[  358.360089][T19750] gtp0: entered promiscuous mode
[  358.362465][T19750] gtp0: entered allmulticast mode
[  358.508939][T19762] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  358.602038][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4402'.
[  358.620174][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4402'.
[  358.827332][T19797] 9p: Bad value for 'rfdno'
[  358.857052][   T42] audit: type=1400 audit(1785453906.990:1339): avc:  denied  { read } for  pid=19799 comm="syz.3.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  358.877621][   T42] audit: type=1400 audit(1785453906.990:1340): avc:  denied  { bind } for  pid=19799 comm="syz.3.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  358.887459][T19802] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  358.889157][   T42] audit: type=1400 audit(1785453906.990:1341): avc:  denied  { listen } for  pid=19799 comm="syz.3.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  358.975372][   T42] audit: type=1400 audit(1785453907.110:1342): avc:  denied  { cmd } for  pid=19805 comm="syz.3.4412" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  359.274415][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4420'.
[  359.303120][T19828] team_slave_0: entered promiscuous mode
[  359.310231][T19828] batadv0: entered promiscuous mode
[  359.313897][T19828] debugfs: 'hsr1' already exists in 'hsr'
[  359.320932][T19828] Cannot create hsr debugfs directory
[  359.323999][T19828] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  359.335866][T19828] team_slave_0: left promiscuous mode
[  359.341680][T19828] batadv0: left promiscuous mode
[  359.358350][T19836] netlink: 'syz.3.4424': attribute type 11 has an invalid length.
[  359.364349][T19836] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4424'.
[  359.655851][T19864] binder: 19862:19864 ioctl c0306201 0 returned -14
[  359.776008][T19876] team_slave_0: entered promiscuous mode
[  359.785057][T19876] batadv0: entered promiscuous mode
[  359.788167][T19876] debugfs: 'hsr1' already exists in 'hsr'
[  359.797151][T19876] Cannot create hsr debugfs directory
[  359.803873][T19876] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  359.809029][T19876] team_slave_0: left promiscuous mode
[  359.815236][T19876] batadv0: left promiscuous mode
[  359.818795][T19878] input: syz0 as /devices/virtual/input/input36
[  359.894503][T19884] ipt_REJECT: TCP_RESET invalid for non-tcp
[  359.907435][T19884] netlink: 'syz.3.4443': attribute type 3 has an invalid length.
[  359.918020][T19884] netlink: 'syz.3.4443': attribute type 2 has an invalid length.
[  360.163445][T19906] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  360.272308][T19924] netlink: 'syz.0.4456': attribute type 1 has an invalid length.
[  360.330092][T19924] bond13: entered promiscuous mode
[  360.335210][T19924] 8021q: adding VLAN 0 to HW filter on device bond13
[  360.364137][T19936] team_slave_0: entered promiscuous mode
[  360.380260][T19936] batadv0: entered promiscuous mode
[  360.382545][T19936] debugfs: 'hsr1' already exists in 'hsr'
[  360.388787][T19936] Cannot create hsr debugfs directory
[  360.393755][T19936] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  360.405485][T19936] team_slave_0: left promiscuous mode
[  360.410505][T19936] batadv0: left promiscuous mode
[  360.590559][T19955] xt_NFQUEUE: number of queues (5) out of range (got 65536)
[  360.643541][T19961] netlink: 'syz.5.4474': attribute type 1 has an invalid length.
[  360.680990][T19961] bond2: entered promiscuous mode
[  360.691610][T19961] 8021q: adding VLAN 0 to HW filter on device bond2
[  360.716888][T19965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=19965 comm=syz.3.4475
[  360.922339][T19985] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  360.993679][T19988] team_slave_0: entered promiscuous mode
[  360.998346][T19988] batadv0: entered promiscuous mode
[  361.003730][T19988] debugfs: 'hsr1' already exists in 'hsr'
[  361.006802][T19988] Cannot create hsr debugfs directory
[  361.009040][T19988] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  361.016239][T19988] team_slave_0: left promiscuous mode
[  361.023875][T19988] batadv0: left promiscuous mode
[  361.063352][T19992] loop2: detected capacity change from 0 to 7
[  361.066944][T19992] Dev loop2: unable to read RDB block 7
[  361.069604][T15955] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.070088][T15955] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.086378][T15955] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.089026][T15955] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.103021][T19992]  loop2: AHDI p1 p2 p3
[  361.104884][T19992] loop2: partition table partially beyond EOD, truncated
[  361.109713][T19992] loop2: p1 start 1601398130 is beyond EOD, truncated
[  361.112573][T19992] loop2: p2 start 1702059890 is beyond EOD, truncated
[  361.128467][T19995] 8021q: VLANs not supported on syzkaller1
[  361.157065][ T5147] Dev loop2: unable to read RDB block 7
[  361.159488][ T5147]  loop2: AHDI p1 p2 p3
[  361.164754][ T5147] loop2: partition table partially beyond EOD, truncated
[  361.168750][ T5147] loop2: p1 start 1601398130 is beyond EOD, truncated
[  361.173171][ T5147] loop2: p2 start 1702059890 is beyond EOD, truncated
[  361.238406][T19999] netlink: 'syz.2.4486': attribute type 1 has an invalid length.
[  361.266934][T19999] bond15: entered promiscuous mode
[  361.269366][T19999] 8021q: adding VLAN 0 to HW filter on device bond15
[  361.383572][   T42] kauditd_printk_skb: 5 callbacks suppressed
[  361.383590][   T42] audit: type=1400 audit(1785453909.520:1348): avc:  denied  { map } for  pid=20011 comm="syz.2.4494" path="/proc/878/pagemap" dev="proc" ino=90706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  361.713741][T20034] netlink: 'syz.2.4504': attribute type 1 has an invalid length.
[  361.751116][T20034] bond16: entered promiscuous mode
[  361.754477][T20034] 8021q: adding VLAN 0 to HW filter on device bond16
[  361.785659][   T42] audit: type=1400 audit(1785453909.920:1349): avc:  denied  { validate_trans } for  pid=20033 comm="syz.5.4503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  361.935113][   T42] audit: type=1400 audit(1785453910.070:1350): avc:  denied  { mounton } for  pid=20040 comm="syz.3.4507" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1
[  361.955192][T20052] CIFS mount error: No usable UNC path provided in device string!
[  361.955192][T20052] 
[  361.961169][T20052] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  362.079630][   T42] audit: type=1400 audit(1785453910.220:1351): avc:  denied  { write } for  pid=20057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  362.176289][   T42] audit: type=1400 audit(1785453910.310:1352): avc:  denied  { write } for  pid=20064 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  362.199293][   T56] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  362.282083][T20075] netlink: 'syz.0.4517': attribute type 1 has an invalid length.
[  362.330568][T20075] bond14: entered promiscuous mode
[  362.333234][T20075] 8021q: adding VLAN 0 to HW filter on device bond14
[  362.359450][   T56] usb 8-1: Using ep0 maxpacket: 32
[  362.362609][   T56] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.369409][   T56] usb 8-1: config 0 has no interfaces?
[  362.379291][   T56] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  362.383104][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.393407][   T56] usb 8-1: config 0 descriptor??
[  362.432016][   T42] audit: type=1400 audit(1785453910.570:1353): avc:  denied  { write } for  pid=20081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  362.508816][T20089] __nla_validate_parse: 14 callbacks suppressed
[  362.508832][T20089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4520'.
[  362.571282][   T42] audit: type=1400 audit(1785453910.710:1354): avc:  denied  { write } for  pid=20092 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  362.657951][   T56] usb 8-1: string descriptor 0 read error: -71
[  362.665316][   T56] usb 8-1: USB disconnect, device number 9
[  362.733401][   T42] audit: type=1400 audit(1785453910.870:1355): avc:  denied  { write } for  pid=20100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  362.820509][T20106] 9pnet_fd: p9_fd_create_tcp (20106): problem connecting socket to 127.0.0.1
[  362.824716][T20109] openvswitch: netlink: IP tunnel dst address not specified
[  362.843335][   T42] audit: type=1400 audit(1785453910.980:1356): avc:  denied  { write } for  pid=20108 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  362.935387][   T42] audit: type=1400 audit(1785453911.070:1357): avc:  denied  { write } for  pid=20117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  362.976454][T20126] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  362.997287][T20127] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  363.003082][T20126] netlink: 'syz.0.4532': attribute type 4 has an invalid length.
[  363.216353][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4539'.
[  363.227750][T20154] team_slave_0: entered promiscuous mode
[  363.238809][T20154] batadv0: entered promiscuous mode
[  363.241966][T20154] debugfs: 'hsr1' already exists in 'hsr'
[  363.244070][T20154] Cannot create hsr debugfs directory
[  363.245909][T20154] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  363.254225][T20154] team_slave_0: left promiscuous mode
[  363.269503][T20154] batadv0: left promiscuous mode
[  363.412345][T20165] tipc: Started in network mode
[  363.414012][T20165] tipc: Node identity , cluster identity 4711
[  363.416419][T20165] tipc: Failed to obtain node identity
[  363.418287][T20165] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  363.424669][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4544'.
[  363.427987][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4544'.
[  366.208298][T20176] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  366.388783][T20201] netlink: 'syz.2.4558': attribute type 1 has an invalid length.
[  366.414106][T20201] bond17: entered promiscuous mode
[  366.416811][T20201] 8021q: adding VLAN 0 to HW filter on device bond17
[  366.499260][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4559'.
[  366.518959][T20210] team_slave_0: entered promiscuous mode
[  366.525755][T20210] batadv0: entered promiscuous mode
[  366.539161][T20210] debugfs: 'hsr1' already exists in 'hsr'
[  366.541983][T20210] Cannot create hsr debugfs directory
[  366.544432][T20210] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  366.557280][T20210] team_slave_0: left promiscuous mode
[  366.575123][T20210] batadv0: left promiscuous mode
[  366.697257][T20223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4564'.
[  366.835740][T20246] netlink: 'syz.3.4569': attribute type 1 has an invalid length.
[  366.870348][T20246] bond15: entered promiscuous mode
[  366.872581][T20246] 8021q: adding VLAN 0 to HW filter on device bond15
[  367.012396][T20264] SELinux: security_context_str_to_sid (5ýÆÉ]ÖS9q#“�ë) failed with errno=-22
[  367.076997][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4579'.
[  367.263826][T20286] netlink: 'syz.0.4585': attribute type 1 has an invalid length.
[  367.296229][T20286] bond15: entered promiscuous mode
[  367.298439][T20286] 8021q: adding VLAN 0 to HW filter on device bond15
[  367.538098][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.547260][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.552810][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.556578][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.563977][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.567479][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.570747][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.574105][   T42] kauditd_printk_skb: 5 callbacks suppressed
[  367.574119][   T42] audit: type=1400 audit(1785453915.710:1363): avc:  denied  { ioctl } for  pid=20300 comm="syz.3.4593" path="/276/file0/file1" dev="9p" ino=75267659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  367.587042][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.590474][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.593774][   T56] hid-generic 0006:0008:0008.0016: unknown main item tag 0x0
[  367.603496][   T56] hid-generic 0006:0008:0008.0016: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1
[  367.659796][T20308] fido_id[20308]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  367.917798][T20320] netlink: 'syz.3.4597': attribute type 1 has an invalid length.
[  367.930790][T20320] bond17: entered promiscuous mode
[  367.933124][T20320] 8021q: adding VLAN 0 to HW filter on device bond17
[  368.107198][T20336] erspan0: entered promiscuous mode
[  368.172375][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4608'.
[  368.189443][T20343] team_slave_0: entered promiscuous mode
[  368.192343][T20343] batadv0: entered promiscuous mode
[  368.194486][T20343] debugfs: 'hsr1' already exists in 'hsr'
[  368.196287][T20343] Cannot create hsr debugfs directory
[  368.199550][T20343] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  368.206992][T20343] team_slave_0: left promiscuous mode
[  368.213381][T20343] batadv0: left promiscuous mode
[  368.524076][T20368] syzkaller1: entered promiscuous mode
[  368.526495][T20368] syzkaller1: entered allmulticast mode
[  368.539747][T20368] tmpfs: Unknown parameter 'grpquotaimit'
[  368.559609][T20370] netlink: 'syz.3.4619': attribute type 1 has an invalid length.
[  368.565687][T20374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4620'.
[  368.568635][T20374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4620'.
[  368.580633][T20374] binder_alloc: 20373: binder_alloc_buf, no vma
[  368.597953][T20370] bond18: entered promiscuous mode
[  368.603113][T20370] 8021q: adding VLAN 0 to HW filter on device bond18
[  368.709603][T20385] Invalid ELF header type: 3 != 1
[  368.709849][   T42] audit: type=1400 audit(1785453916.840:1364): avc:  denied  { module_load } for  pid=20384 comm="syz.0.4623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  368.712745][T20385] Invalid ELF header type: 3 != 1
[  368.723188][T20385] Invalid ELF header type: 3 != 1
[  368.725061][T20385] Invalid ELF header type: 3 != 1
[  368.727012][T20385] Invalid ELF header type: 2 != 1
[  368.731068][T20385] Invalid ELF header type: 2 != 1
[  368.791354][T20389] Invalid ELF header type: 2 != 1
[  369.021738][T20399] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.4628'.
[  369.071765][T20403] syzkaller1: entered promiscuous mode
[  369.073558][T20403] syzkaller1: entered allmulticast mode
[  369.079451][T20403] tmpfs: Unknown parameter 'grpquotaimit'
[  369.087840][T20405] openvswitch: netlink: IP tunnel dst address not specified
[  369.092260][T20405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.211718][T20409] netlink: 'syz.2.4632': attribute type 1 has an invalid length.
[  369.270579][T20409] bond18: entered promiscuous mode
[  369.272783][T20409] 8021q: adding VLAN 0 to HW filter on device bond18
[  369.593657][T20425] binder: 20424:20425 ioctl c0306201 200000000080 returned -14
[  369.786905][T20435] kvm: apic: phys broadcast and lowest prio
[  369.808495][T20442] MTRR 0 not used
[  369.812300][T20442] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.4646'.
[  369.886539][   T42] audit: type=1400 audit(1785453918.020:1365): avc:  denied  { setattr } for  pid=20447 comm="syz.5.4648" name="" dev="pipefs" ino=94327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  369.965933][    C3] sd 0:0:0:0: [sda] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  369.969385][    C3] sd 0:0:0:0: [sda] tag#2 CDB: Test Unit Ready 
[  370.207199][T20472] syzkaller1: entered promiscuous mode
[  370.209019][T20472] syzkaller1: entered allmulticast mode
[  370.219160][T20472] tmpfs: Unknown parameter 'grpquotaimit'
[  370.290289][T20474] macvlan0: entered promiscuous mode
[  370.296897][T20474] netlink: 'syz.0.4658': attribute type 1 has an invalid length.
[  370.300034][T20474] netlink: 'syz.0.4658': attribute type 2 has an invalid length.
[  370.306043][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4658'.
[  370.309457][T20474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=20474 comm=syz.0.4658
[  370.313842][T20474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4658'.
[  370.323217][T20474] bond0: entered promiscuous mode
[  370.324912][T20474] bond_slave_0: entered promiscuous mode
[  370.327991][T20474] bond_slave_1: entered promiscuous mode
[  370.331714][T20474] gretap0: entered promiscuous mode
[  370.334055][T20474] debugfs: 'hsr1' already exists in 'hsr'
[  370.335940][T20474] Cannot create hsr debugfs directory
[  370.337872][T20474] hsr1: entered promiscuous mode
[  370.440364][T20481] netlink: 'syz.0.4660': attribute type 1 has an invalid length.
[  370.464153][T20481] bond16: entered promiscuous mode
[  370.466171][T20481] 8021q: adding VLAN 0 to HW filter on device bond16
[  370.517884][T20491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4662'.
[  370.536587][T20491] team_slave_0: entered promiscuous mode
[  370.540123][T20491] batadv0: entered promiscuous mode
[  370.542397][T20491] hsr2: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  370.546968][T20491] team_slave_0: left promiscuous mode
[  370.550374][T20491] batadv0: left promiscuous mode
[  370.614960][   T42] audit: type=1400 audit(1785453918.750:1366): avc:  denied  { read } for  pid=20485 comm="syz.5.4661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  370.801132][T20508] i2c i2c-0: Failed to register i2c client ptn36502 at 0x1a (-16)
[  371.017862][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4672'.
[  371.035005][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4672'.
[  371.055714][T20520] team_slave_0: entered promiscuous mode
[  371.062102][T20520] batadv0: entered promiscuous mode
[  371.065216][T20520] debugfs: 'hsr1' already exists in 'hsr'
[  371.067649][T20520] Cannot create hsr debugfs directory
[  371.072222][T20520] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  371.080241][T20520] team_slave_0: left promiscuous mode
[  371.084002][T20520] batadv0: left promiscuous mode
[  371.261489][T20537] syz.0.4680: calling unsupported SCSI_IOCTL_SEND_COMMAND
[  371.632441][T20559] sctp: [Deprecated]: syz.5.4689 (pid 20559) Use of int in max_burst socket option.
[  371.632441][T20559] Use struct sctp_assoc_value instead
[  371.848848][T20585] program syz.5.4700 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  371.962060][T20593] netlink: 'syz.0.4701': attribute type 29 has an invalid length.
[  371.969808][T20596] netlink: 'syz.5.4703': attribute type 1 has an invalid length.
[  371.976017][T20594] netlink: 'syz.2.4704': attribute type 9 has an invalid length.
[  371.979607][T20597] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0
[  372.031669][T20596] bond3: entered promiscuous mode
[  372.037658][T20596] 8021q: adding VLAN 0 to HW filter on device bond3
[  372.254308][T20611] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  373.021888][T20648] team_slave_0: entered promiscuous mode
[  373.029005][T20648] batadv0: entered promiscuous mode
[  373.036048][T20648] hsr2: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  373.046310][   T42] audit: type=1400 audit(1785453921.180:1367): avc:  granted  { setsecparam } for  pid=20650 comm="syz.2.4725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  373.078029][T20648] team_slave_0: left promiscuous mode
[  373.082603][   T42] audit: type=1400 audit(1785453921.220:1368): avc:  denied  { read } for  pid=20650 comm="syz.2.4725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  373.097588][T20648] batadv0: left promiscuous mode
[  373.478264][T20665] netlink: 'syz.2.4731': attribute type 1 has an invalid length.
[  373.514651][T20665] bond19: entered promiscuous mode
[  373.521859][T20665] 8021q: adding VLAN 0 to HW filter on device bond19
[  373.859772][T20686] __nla_validate_parse: 5 callbacks suppressed
[  373.859792][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4737'.
[  373.881731][T20686] team_slave_0: entered promiscuous mode
[  373.893912][T20686] batadv0: entered promiscuous mode
[  373.901612][T20686] debugfs: 'hsr1' already exists in 'hsr'
[  373.905904][T20686] Cannot create hsr debugfs directory
[  373.907873][T20686] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  373.928231][T20686] team_slave_0: left promiscuous mode
[  373.943039][T20688] FAULT_INJECTION: forcing a failure.
[  373.943039][T20688] name failslab, interval 1, probability 0, space 0, times 0
[  373.948160][T20688] CPU: 0 UID: 0 PID: 20688 Comm: syz.0.4738 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  373.948187][T20688] Tainted: [L]=SOFTLOCKUP
[  373.948193][T20688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  373.948203][T20688] Call Trace:
[  373.948228][T20688]  <TASK>
[  373.948236][T20688]  dump_stack_lvl+0x100/0x190
[  373.948324][T20688]  should_fail_ex.cold+0x5/0xa
[  373.948366][T20688]  should_failslab+0xc2/0x120
[  373.948412][T20688]  __kmalloc_noprof+0xfc/0x820
[  373.948440][T20688]  ? __pfx_dynamic_dname+0x10/0x10
[  373.948473][T20688]  ? tomoyo_encode2+0xfb/0x3c0
[  373.948527][T20688]  tomoyo_encode2+0xfb/0x3c0
[  373.948547][T20688]  tomoyo_encode+0x29/0x50
[  373.948558][T20688]  tomoyo_realpath_from_path+0x18c/0x690
[  373.948581][T20688]  tomoyo_path_number_perm+0x23c/0x580
[  373.948604][T20688]  ? tomoyo_path_number_perm+0x22e/0x580
[  373.948629][T20688]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  373.948672][T20688]  ? find_held_lock+0x2b/0x80
[  373.948714][T20688]  ? __fget_files+0x215/0x3d0
[  373.948728][T20688]  ? hook_file_ioctl_common+0x140/0x440
[  373.948746][T20688]  ? __fget_files+0x215/0x3d0
[  373.948768][T20688]  ? __fget_files+0x21f/0x3d0
[  373.948789][T20688]  security_file_ioctl+0xd3/0x230
[  373.948829][T20688]  __x64_sys_ioctl+0xb7/0x210
[  373.948857][T20688]  do_syscall_64+0x115/0x870
[  373.948882][T20688]  ? clear_bhb_loop+0x40/0x90
[  373.948902][T20688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.948923][T20688] RIP: 0033:0x7fac52f9e019
[  373.948937][T20688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  373.948952][T20688] RSP: 002b:00007fac53d8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  373.948977][T20688] RAX: ffffffffffffffda RBX: 00007fac53225fa0 RCX: 00007fac52f9e019
[  373.948987][T20688] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  373.948994][T20688] RBP: 00007fac53d8c090 R08: 0000000000000000 R09: 0000000000000000
[  373.949004][T20688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  373.949014][T20688] R13: 00007fac53226038 R14: 00007fac53225fa0 R15: 00007fff519a3948
[  373.949067][T20688]  </TASK>
[  374.099208][T20688] ERROR: Out of memory at tomoyo_realpath_from_path.
[  374.123430][T20686] batadv0: left promiscuous mode
[  374.320453][   T42] audit: type=1400 audit(1785453922.460:1369): avc:  denied  { mount } for  pid=20692 comm="syz.2.4740" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  374.338335][   T42] audit: type=1400 audit(1785453922.470:1370): avc:  denied  { create } for  pid=20692 comm="syz.2.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  374.367359][   T42] audit: type=1400 audit(1785453922.470:1371): avc:  denied  { write } for  pid=20692 comm="syz.2.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  374.381953][   T42] audit: type=1400 audit(1785453922.500:1372): avc:  denied  { unmount } for  pid=16087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  374.400734][   T42] audit: type=1400 audit(1785453922.500:1373): avc:  denied  { recv } for  pid=5719 comm="syz-executor" saddr=127.0.0.1 src=45712 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  374.417275][T20697] openvswitch: netlink: Flow key attribute not present in set flow.
[  374.424371][   T42] audit: type=1400 audit(1785453922.500:1374): avc:  denied  { recv } for  pid=5719 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=45712 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  374.437699][T20695] FAULT_INJECTION: forcing a failure.
[  374.437699][T20695] name failslab, interval 1, probability 0, space 0, times 0
[  374.449436][   T42] audit: type=1400 audit(1785453922.520:1375): avc:  denied  { read write } for  pid=16087 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  374.457791][T20695] CPU: 0 UID: 0 PID: 20695 Comm: syz.5.4741 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  374.457812][T20695] Tainted: [L]=SOFTLOCKUP
[  374.457816][T20695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  374.457823][T20695] Call Trace:
[  374.457836][T20695]  <TASK>
[  374.457842][T20695]  dump_stack_lvl+0x100/0x190
[  374.457869][T20695]  should_fail_ex.cold+0x5/0xa
[  374.457886][T20695]  should_failslab+0xc2/0x120
[  374.457907][T20695]  __kmalloc_noprof+0xfc/0x820
[  374.457920][T20695]  ? rcu_is_watching+0x12/0xc0
[  374.458039][T20695]  ? tomoyo_realpath_from_path+0xb6/0x690
[  374.458055][T20695]  tomoyo_realpath_from_path+0xb6/0x690
[  374.458071][T20695]  tomoyo_path_number_perm+0x23c/0x580
[  374.458088][T20695]  ? tomoyo_path_number_perm+0x22e/0x580
[  374.458106][T20695]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  374.458137][T20695]  ? find_held_lock+0x2b/0x80
[  374.458147][T20695]  ? __fget_files+0x215/0x3d0
[  374.458160][T20695]  ? hook_file_ioctl_common+0x140/0x440
[  374.458173][T20695]  ? __fget_files+0x215/0x3d0
[  374.458187][T20695]  ? __fget_files+0x21f/0x3d0
[  374.458201][T20695]  security_file_ioctl+0xd3/0x230
[  374.458246][T20695]  __x64_sys_ioctl+0xb7/0x210
[  374.458265][T20695]  do_syscall_64+0x115/0x870
[  374.458278][T20695]  ? clear_bhb_loop+0x40/0x90
[  374.458293][T20695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.458305][T20695] RIP: 0033:0x7fe1c719e019
[  374.458316][T20695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  374.458328][T20695] RSP: 002b:00007fe1c7fdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  374.458346][T20695] RAX: ffffffffffffffda RBX: 00007fe1c7425fa0 RCX: 00007fe1c719e019
[  374.458354][T20695] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  374.458361][T20695] RBP: 00007fe1c7fdf090 R08: 0000000000000000 R09: 0000000000000000
[  374.458368][T20695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.458374][T20695] R13: 00007fe1c7426038 R14: 00007fe1c7425fa0 R15: 00007ffdc318cd48
[  374.458389][T20695]  </TASK>
[  374.458395][T20695] ERROR: Out of memory at tomoyo_realpath_from_path.
[  374.539653][   T42] audit: type=1400 audit(1785453922.520:1376): avc:  denied  { open } for  pid=16087 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  374.546964][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4744'.
[  374.561814][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4744'.
[  374.573994][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4744'.
[  374.621777][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4744'.
[  374.625627][ T5817] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.628798][ T5817] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.633335][ T5817] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.638844][ T5817] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.643488][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4744'.
[  374.652146][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4744'.
[  374.745312][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4748'.
[  374.757731][T20714] team_slave_0: entered promiscuous mode
[  374.762819][T20714] batadv0: entered promiscuous mode
[  374.766115][T20714] hsr2: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  374.772320][T20714] team_slave_0: left promiscuous mode
[  374.777489][T20714] batadv0: left promiscuous mode
[  374.911613][    C3] sd 0:0:0:0: [sda] tag#9 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  374.914721][    C3] sd 0:0:0:0: [sda] tag#9 CDB: Test Unit Ready 
[  375.173365][T20738] FAULT_INJECTION: forcing a failure.
[  375.173365][T20738] name failslab, interval 1, probability 0, space 0, times 0
[  375.198687][T20738] CPU: 0 UID: 0 PID: 20738 Comm: syz.3.4758 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  375.198708][T20738] Tainted: [L]=SOFTLOCKUP
[  375.198712][T20738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  375.198720][T20738] Call Trace:
[  375.198724][T20738]  <TASK>
[  375.198729][T20738]  dump_stack_lvl+0x100/0x190
[  375.198750][T20738]  should_fail_ex.cold+0x5/0xa
[  375.198767][T20738]  should_failslab+0xc2/0x120
[  375.198783][T20738]  __kmalloc_noprof+0xfc/0x820
[  375.198797][T20738]  ? __pfx_dynamic_dname+0x10/0x10
[  375.198815][T20738]  ? tomoyo_encode2+0xfb/0x3c0
[  375.198831][T20738]  tomoyo_encode2+0xfb/0x3c0
[  375.198844][T20738]  tomoyo_encode+0x29/0x50
[  375.198854][T20738]  tomoyo_realpath_from_path+0x18c/0x690
[  375.198869][T20738]  tomoyo_path_number_perm+0x23c/0x580
[  375.198886][T20738]  ? tomoyo_path_number_perm+0x22e/0x580
[  375.198904][T20738]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  375.198935][T20738]  ? find_held_lock+0x2b/0x80
[  375.198945][T20738]  ? __fget_files+0x215/0x3d0
[  375.198957][T20738]  ? hook_file_ioctl_common+0x140/0x440
[  375.198970][T20738]  ? __fget_files+0x215/0x3d0
[  375.198984][T20738]  ? __fget_files+0x21f/0x3d0
[  375.198998][T20738]  security_file_ioctl+0xd3/0x230
[  375.199017][T20738]  __x64_sys_ioctl+0xb7/0x210
[  375.199036][T20738]  do_syscall_64+0x115/0x870
[  375.199067][T20738]  ? clear_bhb_loop+0x40/0x90
[  375.199084][T20738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.199096][T20738] RIP: 0033:0x7f79f359e019
[  375.199106][T20738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.199118][T20738] RSP: 002b:00007f79f43c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  375.199130][T20738] RAX: ffffffffffffffda RBX: 00007f79f3825fa0 RCX: 00007f79f359e019
[  375.199138][T20738] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  375.199144][T20738] RBP: 00007f79f43c1090 R08: 0000000000000000 R09: 0000000000000000
[  375.199151][T20738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.199158][T20738] R13: 00007f79f3826038 R14: 00007f79f3825fa0 R15: 00007ffd5469a858
[  375.199173][T20738]  </TASK>
[  375.208302][T20741] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4759'.
[  375.232151][T20738] ERROR: Out of memory at tomoyo_realpath_from_path.
[  375.514479][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4763'.
[  375.560635][T20753] team_slave_0: entered promiscuous mode
[  375.572327][T20753] batadv0: entered promiscuous mode
[  375.577434][T20753] debugfs: 'hsr1' already exists in 'hsr'
[  375.589320][T20753] Cannot create hsr debugfs directory
[  375.591321][T20753] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  375.628186][T20753] team_slave_0: left promiscuous mode
[  375.642607][T20753] batadv0: left promiscuous mode
[  375.859335][T20776] geneve2: entered promiscuous mode
[  375.864408][T20776] geneve2: entered allmulticast mode
[  375.952395][T20781] FAULT_INJECTION: forcing a failure.
[  375.952395][T20781] name failslab, interval 1, probability 0, space 0, times 0
[  375.969390][T20781] CPU: 2 UID: 0 PID: 20781 Comm: syz.2.4773 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  375.969445][T20781] Tainted: [L]=SOFTLOCKUP
[  375.969453][T20781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  375.969463][T20781] Call Trace:
[  375.969480][T20781]  <TASK>
[  375.969487][T20781]  dump_stack_lvl+0x100/0x190
[  375.969579][T20781]  should_fail_ex.cold+0x5/0xa
[  375.969644][T20781]  should_failslab+0xc2/0x120
[  375.969694][T20781]  __kmalloc_noprof+0xfc/0x820
[  375.969725][T20781]  ? lsm_blob_alloc+0x68/0x90
[  375.969777][T20781]  lsm_blob_alloc+0x68/0x90
[  375.969791][T20781]  security_task_alloc+0x2a/0x260
[  375.969809][T20781]  copy_process+0x2b94/0x8030
[  375.969871][T20781]  ? __pfx_copy_process+0x10/0x10
[  375.969896][T20781]  ? __kasan_kmalloc+0xaa/0xb0
[  375.969921][T20781]  ? lockdep_init_map_type+0x5c/0x250
[  375.969956][T20781]  ? lockdep_init_map_type+0x5c/0x250
[  375.969980][T20781]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  375.970014][T20781]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  375.970055][T20781]  vhost_task_create+0x1db/0x370
[  375.970086][T20781]  ? __pfx_vhost_task_create+0x10/0x10
[  375.970115][T20781]  ? __pfx_vhost_task_fn+0x10/0x10
[  375.970141][T20781]  ? __pfx___mutex_lock+0x10/0x10
[  375.970170][T20781]  ? kasan_quarantine_put+0x104/0x240
[  375.970220][T20781]  kvm_mmu_post_init_vm+0x1b3/0x360
[  375.970253][T20781]  kvm_arch_vcpu_ioctl_run+0x66/0x1960
[  375.970282][T20781]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  375.970320][T20781]  kvm_vcpu_ioctl+0x730/0x1700
[  375.970344][T20781]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  375.970367][T20781]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  375.970400][T20781]  ? do_vfs_ioctl+0x226/0x13e0
[  375.970438][T20781]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  375.970464][T20781]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  375.970519][T20781]  ? __fget_files+0x215/0x3d0
[  375.970537][T20781]  ? hook_file_ioctl_common+0x140/0x440
[  375.970577][T20781]  ? selinux_file_ioctl+0x13b/0x290
[  375.970605][T20781]  ? selinux_file_ioctl+0xb6/0x290
[  375.970632][T20781]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  375.970655][T20781]  __x64_sys_ioctl+0x18e/0x210
[  375.970683][T20781]  do_syscall_64+0x115/0x870
[  375.970705][T20781]  ? clear_bhb_loop+0x40/0x90
[  375.970731][T20781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.970748][T20781] RIP: 0033:0x7ffac719e019
[  375.970763][T20781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.970778][T20781] RSP: 002b:00007ffac7fbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  375.970798][T20781] RAX: ffffffffffffffda RBX: 00007ffac7425fa0 RCX: 00007ffac719e019
[  375.970809][T20781] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  375.970820][T20781] RBP: 00007ffac7fbc090 R08: 0000000000000000 R09: 0000000000000000
[  375.970831][T20781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.970842][T20781] R13: 00007ffac7426038 R14: 00007ffac7425fa0 R15: 00007ffdd3db6c18
[  375.970868][T20781]  </TASK>
[  376.184684][T20798] netlink: 'syz.3.4776': attribute type 1 has an invalid length.
[  376.319955][T20798] bond19: entered promiscuous mode
[  376.329896][T20798] 8021q: adding VLAN 0 to HW filter on device bond19
[  376.596881][T20820] FAULT_INJECTION: forcing a failure.
[  376.596881][T20820] name failslab, interval 1, probability 0, space 0, times 0
[  376.601894][T20820] CPU: 2 UID: 0 PID: 20820 Comm: syz.3.4785 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  376.601912][T20820] Tainted: [L]=SOFTLOCKUP
[  376.601916][T20820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  376.601923][T20820] Call Trace:
[  376.601928][T20820]  <TASK>
[  376.601933][T20820]  dump_stack_lvl+0x100/0x190
[  376.601954][T20820]  should_fail_ex.cold+0x5/0xa
[  376.601971][T20820]  should_failslab+0xc2/0x120
[  376.601988][T20820]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  376.602004][T20820]  ? copy_process+0x69a/0x8030
[  376.602024][T20820]  copy_process+0x69a/0x8030
[  376.602048][T20820]  ? __pfx_copy_process+0x10/0x10
[  376.602065][T20820]  ? __kasan_kmalloc+0xaa/0xb0
[  376.602080][T20820]  ? lockdep_init_map_type+0x5c/0x250
[  376.602097][T20820]  ? lockdep_init_map_type+0x5c/0x250
[  376.602112][T20820]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  376.602128][T20820]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  376.602150][T20820]  vhost_task_create+0x1db/0x370
[  376.602164][T20820]  ? __pfx_vhost_task_create+0x10/0x10
[  376.602181][T20820]  ? __pfx_vhost_task_fn+0x10/0x10
[  376.602196][T20820]  ? __pfx___mutex_lock+0x10/0x10
[  376.602239][T20820]  ? kasan_quarantine_put+0x104/0x240
[  376.602256][T20820]  kvm_mmu_post_init_vm+0x1b3/0x360
[  376.602274][T20820]  kvm_arch_vcpu_ioctl_run+0x66/0x1960
[  376.602293][T20820]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  376.602309][T20820]  kvm_vcpu_ioctl+0x730/0x1700
[  376.602324][T20820]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  376.602337][T20820]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  376.602353][T20820]  ? do_vfs_ioctl+0x226/0x13e0
[  376.602384][T20820]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  376.602403][T20820]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  376.602433][T20820]  ? __fget_files+0x215/0x3d0
[  376.602444][T20820]  ? hook_file_ioctl_common+0x140/0x440
[  376.602463][T20820]  ? selinux_file_ioctl+0x13b/0x290
[  376.602481][T20820]  ? selinux_file_ioctl+0xb6/0x290
[  376.602499][T20820]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  376.602513][T20820]  __x64_sys_ioctl+0x18e/0x210
[  376.602531][T20820]  do_syscall_64+0x115/0x870
[  376.602544][T20820]  ? clear_bhb_loop+0x40/0x90
[  376.602558][T20820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.602571][T20820] RIP: 0033:0x7f79f359e019
[  376.602581][T20820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.602592][T20820] RSP: 002b:00007f79f43c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  376.602604][T20820] RAX: ffffffffffffffda RBX: 00007f79f3825fa0 RCX: 00007f79f359e019
[  376.602611][T20820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  376.602618][T20820] RBP: 00007f79f43c1090 R08: 0000000000000000 R09: 0000000000000000
[  376.602624][T20820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.602631][T20820] R13: 00007f79f3826038 R14: 00007f79f3825fa0 R15: 00007ffd5469a858
[  376.602646][T20820]  </TASK>
[  376.768419][T20827] vhci_hcd vhci_hcd.0: remove, state 4
[  376.774906][T20827] usb usb38: USB disconnect, device number 1
[  376.889873][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  376.891728][ T5817] vhci_hcd vhci_hcd.0: release socket
[  376.893472][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  376.900369][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  376.902033][ T5817] vhci_hcd vhci_hcd.0: release socket
[  376.905959][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  376.922487][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  376.924082][ T5817] vhci_hcd vhci_hcd.0: release socket
[  376.925897][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  376.932692][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  376.936750][ T5817] vhci_hcd vhci_hcd.0: release socket
[  376.940966][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  376.947759][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  376.959219][ T5817] vhci_hcd vhci_hcd.0: release socket
[  376.961706][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  376.973503][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  376.975483][ T5817] vhci_hcd vhci_hcd.0: release socket
[  376.979481][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  376.989384][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  376.989859][   T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  376.991129][ T5817] vhci_hcd vhci_hcd.0: release socket
[  376.991142][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  376.991333][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.009348][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.011066][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.017200][T20827] vhci_hcd vhci_hcd.0: USB bus 38 deregistered
[  377.046131][T20827] vhci_hcd vhci_hcd.0: remove, state 4
[  377.048678][T20827] usb usb37: USB disconnect, device number 1
[  377.142673][   T10] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  377.149879][T20840] netlink: 'syz.0.4793': attribute type 1 has an invalid length.
[  377.153201][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  377.160153][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.164708][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.168904][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  377.176223][T20840] bond17: entered promiscuous mode
[  377.180670][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.183238][T20840] 8021q: adding VLAN 0 to HW filter on device bond17
[  377.192220][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.194662][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.197423][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.200980][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.207071][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  377.214341][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.216656][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.221285][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.223583][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.226062][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.230716][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  377.230916][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.233666][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.238584][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.240170][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.245963][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  377.246659][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.249410][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.256124][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.260871][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  377.262101][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.264015][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.267091][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.269868][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.270649][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  377.278045][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.278721][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.283333][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.284325][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.287033][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  377.288164][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.292669][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.293548][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.297183][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.299547][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.304298][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.304575][   T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  377.306953][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.310981][   T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  377.313344][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.315974][   T10] usb 7-1: Product: syz
[  377.315991][   T10] usb 7-1: Manufacturer: syz
[  377.321714][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.322974][   T10] usb 7-1: SerialNumber: syz
[  377.326350][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.331024][ T5817] vhci_hcd vhci_hcd.0: stop threads
[  377.331683][   T10] usb 7-1: config 0 descriptor??
[  377.332846][ T5817] vhci_hcd vhci_hcd.0: release socket
[  377.345672][ T5817] vhci_hcd vhci_hcd.0: disconnect device
[  377.349781][T20827] vhci_hcd vhci_hcd.0: USB bus 37 deregistered
[  377.362433][   T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  377.366409][ T6047] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  377.545900][   T24] usb 7-1: USB disconnect, device number 12
[  377.551027][   T24] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  377.594542][T20860] 8021q: adding VLAN 0 to HW filter on device bond20
[  377.606566][T20860] bond6: (slave veth0_to_bond): Releasing backup interface
[  377.618831][T20860] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  377.619341][T20858] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  377.623845][T20858] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  377.625601][T20860] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  377.626505][T20858] udc dummy_udc.0: failed to start g1: -22
[  377.638680][ T6047] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  377.642023][T20858] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  377.656459][T20858] UDC core: g1: couldn't find an available UDC or it's busy
[  378.071354][   T42] kauditd_printk_skb: 182 callbacks suppressed
[  378.071370][   T42] audit: type=1400 audit(1785453926.210:1559): avc:  denied  { unmount } for  pid=16087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  378.157802][   T24] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  378.429245][T20845] ceph: No mds server is up or the cluster is laggy
[  378.910888][ T1444] ieee802154 phy1 wpan1: encryption failed: -22
[  384.033175][   T42] audit: type=1400 audit(1785453932.170:1560): avc:  denied  { egress } for  pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  384.046748][   T42] audit: type=1400 audit(1785453932.170:1561): avc:  denied  { sendto } for  pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  395.645356][   T42] audit: type=1400 audit(1785453943.780:1562): avc:  denied  { create } for  pid=20880 comm="syz.0.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  395.646015][T20882] __nla_validate_parse: 10 callbacks suppressed
[  395.646030][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4804'.
[  395.648435][T20881] netlink: 'syz.2.4807': attribute type 1 has an invalid length.
[  395.654450][   T42] audit: type=1400 audit(1785453943.780:1563): avc:  denied  { create } for  pid=20878 comm="syz.5.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  395.674516][T20881] bond20: entered promiscuous mode
[  395.674964][   T42] audit: type=1400 audit(1785453943.780:1564): avc:  denied  { write } for  pid=20878 comm="syz.5.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  395.677103][T20881] 8021q: adding VLAN 0 to HW filter on device bond20
[  395.684501][   T42] audit: type=1400 audit(1785453943.800:1565): avc:  denied  { write } for  pid=20880 comm="syz.0.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  395.694956][   T42] audit: type=1400 audit(1785453943.800:1566): avc:  denied  { read } for  pid=20880 comm="syz.0.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  395.702291][   T42] audit: type=1400 audit(1785453943.800:1567): avc:  denied  { ioctl } for  pid=20880 comm="syz.0.4806" path="socket:[95857]" dev="sockfs" ino=95857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  395.712138][T20882] Cannot find del_set index 3 as target
[  395.714569][   T42] audit: type=1400 audit(1785453943.800:1568): avc:  denied  { setopt } for  pid=20878 comm="syz.5.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  395.730688][   T42] audit: type=1400 audit(1785453943.820:1569): avc:  denied  { create } for  pid=20878 comm="syz.5.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  395.752496][   T42] audit: type=1400 audit(1785453943.820:1570): avc:  denied  { connect } for  pid=20878 comm="syz.5.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  395.761368][   T42] audit: type=1400 audit(1785453943.820:1571): avc:  denied  { ioctl } for  pid=20878 comm="syz.5.4804" path="socket:[95863]" dev="sockfs" ino=95863 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  395.807768][T20889] FAULT_INJECTION: forcing a failure.
[  395.807768][T20889] name failslab, interval 1, probability 0, space 0, times 0
[  395.813480][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4812'.
[  395.817008][T20889] CPU: 2 UID: 0 PID: 20889 Comm: syz.3.4808 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  395.817036][T20889] Tainted: [L]=SOFTLOCKUP
[  395.817043][T20889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  395.817054][T20889] Call Trace:
[  395.817060][T20889]  <TASK>
[  395.817068][T20889]  dump_stack_lvl+0x100/0x190
[  395.817100][T20889]  should_fail_ex.cold+0x5/0xa
[  395.817125][T20889]  should_failslab+0xc2/0x120
[  395.817151][T20889]  kmem_cache_alloc_noprof+0x91/0x6a0
[  395.817175][T20889]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  395.817205][T20889]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  395.817235][T20889]  mmu_topup_memory_caches+0x25/0x170
[  395.817264][T20889]  kvm_mmu_load+0xe2/0x2570
[  395.817290][T20889]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  395.817309][T20889]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  395.817332][T20889]  ? __pfx_kvm_mmu_load+0x10/0x10
[  395.817355][T20889]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  395.817377][T20889]  ? kvm_check_and_inject_events+0x873/0x12a0
[  395.817403][T20889]  ? record_steal_time+0x3a0/0xbb0
[  395.817426][T20889]  vcpu_run+0x3aaa/0x5de0
[  395.817461][T20889]  ? __pfx_vcpu_run+0x10/0x10
[  395.817496][T20889]  ? rcu_is_watching+0x12/0xc0
[  395.817543][T20889]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  395.817569][T20889]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  395.817602][T20889]  kvm_vcpu_ioctl+0x730/0x1700
[  395.817625][T20889]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  395.817646][T20889]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  395.817672][T20889]  ? do_vfs_ioctl+0x226/0x13e0
[  395.817699][T20889]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  395.817725][T20889]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  395.817763][T20889]  ? __fget_files+0x215/0x3d0
[  395.817786][T20889]  ? hook_file_ioctl_common+0x140/0x440
[  395.817813][T20889]  ? selinux_file_ioctl+0x13b/0x290
[  395.817837][T20889]  ? selinux_file_ioctl+0xb6/0x290
[  395.817864][T20889]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  395.817885][T20889]  __x64_sys_ioctl+0x18e/0x210
[  395.817914][T20889]  do_syscall_64+0x115/0x870
[  395.817936][T20889]  ? clear_bhb_loop+0x40/0x90
[  395.817959][T20889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.817978][T20889] RIP: 0033:0x7f79f359e019
[  395.817995][T20889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.818012][T20889] RSP: 002b:00007f79f43c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  395.818031][T20889] RAX: ffffffffffffffda RBX: 00007f79f3825fa0 RCX: 00007f79f359e019
[  395.818042][T20889] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  395.818053][T20889] RBP: 00007f79f43c1090 R08: 0000000000000000 R09: 0000000000000000
[  395.818064][T20889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  395.818075][T20889] R13: 00007f79f3826038 R14: 00007f79f3825fa0 R15: 00007ffd5469a858
[  395.818100][T20889]  </TASK>
[  396.107781][T20920] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  396.200309][T20924] netlink: 'syz.3.4818': attribute type 1 has an invalid length.
[  396.231367][T20924] bond21: entered promiscuous mode
[  396.233244][T20924] 8021q: adding VLAN 0 to HW filter on device bond21
[  396.316864][T20920] printk: legacy console [ttyGS0] disabled
[  396.342509][T20937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4822'.
[  396.396383][T20939] FAULT_INJECTION: forcing a failure.
[  396.396383][T20939] name failslab, interval 1, probability 0, space 0, times 0
[  396.403024][T20939] CPU: 0 UID: 0 PID: 20939 Comm: syz.0.4825 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  396.403044][T20939] Tainted: [L]=SOFTLOCKUP
[  396.403048][T20939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  396.403056][T20939] Call Trace:
[  396.403060][T20939]  <TASK>
[  396.403065][T20939]  dump_stack_lvl+0x100/0x190
[  396.403086][T20939]  should_fail_ex.cold+0x5/0xa
[  396.403102][T20939]  should_failslab+0xc2/0x120
[  396.403119][T20939]  kmem_cache_alloc_noprof+0x91/0x6a0
[  396.403134][T20939]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  396.403152][T20939]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  396.403170][T20939]  mmu_topup_memory_caches+0x25/0x170
[  396.403189][T20939]  kvm_mmu_load+0xe2/0x2570
[  396.403205][T20939]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  396.403218][T20939]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  396.403232][T20939]  ? __pfx_kvm_mmu_load+0x10/0x10
[  396.403247][T20939]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  396.403262][T20939]  ? kvm_check_and_inject_events+0x873/0x12a0
[  396.403279][T20939]  ? record_steal_time+0x3a0/0xbb0
[  396.403293][T20939]  vcpu_run+0x3aaa/0x5de0
[  396.403315][T20939]  ? __pfx_vcpu_run+0x10/0x10
[  396.403337][T20939]  ? rcu_is_watching+0x12/0xc0
[  396.403357][T20939]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  396.403380][T20939]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  396.403401][T20939]  kvm_vcpu_ioctl+0x730/0x1700
[  396.403415][T20939]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  396.403428][T20939]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  396.403444][T20939]  ? do_vfs_ioctl+0x226/0x13e0
[  396.403462][T20939]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  396.403479][T20939]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  396.403510][T20939]  ? __fget_files+0x215/0x3d0
[  396.403526][T20939]  ? hook_file_ioctl_common+0x140/0x440
[  396.403551][T20939]  ? selinux_file_ioctl+0x13b/0x290
[  396.403573][T20939]  ? selinux_file_ioctl+0xb6/0x290
[  396.403619][T20939]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  396.403640][T20939]  __x64_sys_ioctl+0x18e/0x210
[  396.403668][T20939]  do_syscall_64+0x115/0x870
[  396.403687][T20939]  ? clear_bhb_loop+0x40/0x90
[  396.403710][T20939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.403727][T20939] RIP: 0033:0x7fac52f9e019
[  396.403741][T20939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.403758][T20939] RSP: 002b:00007fac53d8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  396.403775][T20939] RAX: ffffffffffffffda RBX: 00007fac53225fa0 RCX: 00007fac52f9e019
[  396.403787][T20939] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  396.403811][T20939] RBP: 00007fac53d8c090 R08: 0000000000000000 R09: 0000000000000000
[  396.403822][T20939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  396.403832][T20939] R13: 00007fac53226038 R14: 00007fac53225fa0 R15: 00007fff519a3948
[  396.403857][T20939]  </TASK>
[  396.514057][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4826'.
[  396.524665][T20949] team_slave_0: entered promiscuous mode
[  396.528170][T20949] batadv0: entered promiscuous mode
[  396.532109][T20949] debugfs: 'hsr1' already exists in 'hsr'
[  396.534508][T20949] Cannot create hsr debugfs directory
[  396.536703][T20949] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  396.549688][T20949] team_slave_0: left promiscuous mode
[  396.557659][T20949] batadv0: left promiscuous mode
[  396.966530][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4836'.
[  396.971751][T20985] usb usb1: usbfs: process 20985 (syz.0.4837) did not claim interface 0 before use
[  396.982497][T20983] team_slave_0: entered promiscuous mode
[  396.986463][T20983] batadv0: entered promiscuous mode
[  396.992841][T20983] debugfs: 'hsr1' already exists in 'hsr'
[  396.994747][T20983] Cannot create hsr debugfs directory
[  396.995008][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4838'.
[  396.996589][T20983] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  396.999845][T20987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4838'.
[  397.006218][T20983] team_slave_0: left promiscuous mode
[  397.008601][T20983] batadv0: left promiscuous mode
[  397.070205][T20989] FAULT_INJECTION: forcing a failure.
[  397.070205][T20989] name failslab, interval 1, probability 0, space 0, times 0
[  397.074450][T20989] CPU: 3 UID: 0 PID: 20989 Comm: syz.5.4839 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  397.074469][T20989] Tainted: [L]=SOFTLOCKUP
[  397.074473][T20989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  397.074480][T20989] Call Trace:
[  397.074502][T20989]  <TASK>
[  397.074507][T20989]  dump_stack_lvl+0x100/0x190
[  397.074580][T20989]  should_fail_ex.cold+0x5/0xa
[  397.074612][T20989]  should_failslab+0xc2/0x120
[  397.074645][T20989]  kmem_cache_alloc_noprof+0x91/0x6a0
[  397.074667][T20989]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  397.074692][T20989]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  397.074710][T20989]  mmu_topup_memory_caches+0x25/0x170
[  397.074735][T20989]  kvm_mmu_load+0xe2/0x2570
[  397.074751][T20989]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  397.074769][T20989]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  397.074783][T20989]  ? __pfx_kvm_mmu_load+0x10/0x10
[  397.074798][T20989]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  397.074813][T20989]  ? kvm_check_and_inject_events+0x873/0x12a0
[  397.074831][T20989]  ? record_steal_time+0x3a0/0xbb0
[  397.074845][T20989]  vcpu_run+0x3aaa/0x5de0
[  397.074868][T20989]  ? __pfx_vcpu_run+0x10/0x10
[  397.074889][T20989]  ? rcu_is_watching+0x12/0xc0
[  397.074926][T20989]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  397.074944][T20989]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  397.074965][T20989]  kvm_vcpu_ioctl+0x730/0x1700
[  397.074979][T20989]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  397.074992][T20989]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  397.075014][T20989]  ? do_vfs_ioctl+0x226/0x13e0
[  397.075040][T20989]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  397.075057][T20989]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  397.075151][T20989]  ? __fget_files+0x215/0x3d0
[  397.075163][T20989]  ? hook_file_ioctl_common+0x140/0x440
[  397.075186][T20989]  ? selinux_file_ioctl+0x13b/0x290
[  397.075204][T20989]  ? selinux_file_ioctl+0xb6/0x290
[  397.075223][T20989]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  397.075237][T20989]  __x64_sys_ioctl+0x18e/0x210
[  397.075255][T20989]  do_syscall_64+0x115/0x870
[  397.075272][T20989]  ? clear_bhb_loop+0x40/0x90
[  397.075287][T20989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.075299][T20989] RIP: 0033:0x7fe1c719e019
[  397.075310][T20989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.075322][T20989] RSP: 002b:00007fe1c7fdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  397.075341][T20989] RAX: ffffffffffffffda RBX: 00007fe1c7425fa0 RCX: 00007fe1c719e019
[  397.075349][T20989] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  397.075356][T20989] RBP: 00007fe1c7fdf090 R08: 0000000000000000 R09: 0000000000000000
[  397.075367][T20989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  397.075373][T20989] R13: 00007fe1c7426038 R14: 00007fe1c7425fa0 R15: 00007ffdc318cd48
[  397.075388][T20989]  </TASK>
[  397.145579][T20993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.179949][T20993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.349250][   T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  397.499177][   T10] usb 8-1: Using ep0 maxpacket: 32
[  397.516215][   T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  397.521622][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  397.548773][   T10] usb 8-1: string descriptor 0 read error: -22
[  397.551504][   T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  397.554954][   T10] usb 8-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3
[  397.564370][   T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  397.566831][T20999] ip_tables: iptables: counters copy to user failed while replacing table
[  397.567616][   T10] dw2102: su3000_power_ctrl: 1, initialized 0
[  397.572958][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  397.582706][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  397.586813][   T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  397.590566][   T10] usb 8-1: media controller created
[  397.592685][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  397.595012][   T10] dw2102: i2c transfer failed.
[  397.601854][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  397.604153][   T10] dw2102: i2c transfer failed.
[  397.606099][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  397.608409][   T10] dw2102: i2c transfer failed.
[  397.610841][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  397.613250][   T10] dw2102: i2c transfer failed.
[  397.615210][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  397.617524][   T10] dw2102: i2c transfer failed.
[  397.623092][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  397.625247][   T10] dw2102: i2c transfer failed.
[  397.626861][   T10] dvb-usb: MAC address: 02:02:02:02:02:02
[  397.640355][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  397.656423][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  397.659239][   T10] dw2102: command 0x0e transfer failed.
[  397.661129][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  397.662962][   T10] dw2102: command 0x0e transfer failed.
[  397.679294][   T24] usb 10-1: Using ep0 maxpacket: 32
[  397.682348][   T24] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  397.685693][   T24] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  397.690609][   T24] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  397.694274][   T24] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  397.702566][   T24] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  397.705623][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.708236][   T24] usb 10-1: Product: syz
[  397.709985][   T24] usb 10-1: Manufacturer: syz
[  397.711559][   T24] usb 10-1: SerialNumber: syz
[  397.724780][    C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  397.737079][   T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input38
[  397.859010][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4844'.
[  397.949865][   T24] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  397.957773][   T24]  (id 0x00)
[  397.965287][T21010] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  397.969982][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  397.976921][   T10] dw2102: command 0x0e transfer failed.
[  397.981184][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  397.988242][   T10] dw2102: command 0x0e transfer failed.
[  397.992400][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  397.995595][   T10] dw2102: command 0x51 transfer failed.
[  398.019548][   T10] DVB: Unable to find symbol ds3000_attach()
[  398.020999][   T24] rc_core: IR keymap rc-imon-pad not found
[  398.021866][   T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  398.024200][   T24] Registered IR keymap rc-empty
[  398.028606][   T24] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  398.034832][   T24] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  398.080241][   T10] rc_core: IR keymap rc-su3000 not found
[  398.082341][   T10] Registered IR keymap rc-empty
[  398.085529][   T10] rc rc1: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc1
[  398.092170][   T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc1/input40
[  398.099810][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  398.102430][   T10] dw2102: su3000_power_ctrl: 0, initialized 1
[  398.105055][   T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  398.110251][T21010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4846'.
[  398.116834][   T10] usb 8-1: USB disconnect, device number 10
[  398.163489][   T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0
[  398.164835][   T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  398.169982][   T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input39
[  398.189793][   T24] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:6> initialized
[  398.314088][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4848'.
[  398.329040][T21021] team_slave_0: entered promiscuous mode
[  398.334393][T21021] batadv0: entered promiscuous mode
[  398.336498][T21021] debugfs: 'hsr1' already exists in 'hsr'
[  398.338347][T21021] Cannot create hsr debugfs directory
[  398.340499][T21021] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  398.345011][T21021] team_slave_0: left promiscuous mode
[  398.347325][T21021] batadv0: left promiscuous mode
[  398.449634][T21025] FAULT_INJECTION: forcing a failure.
[  398.449634][T21025] name failslab, interval 1, probability 0, space 0, times 0
[  398.454755][T21025] CPU: 2 UID: 0 PID: 21025 Comm: syz.3.4850 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  398.454779][T21025] Tainted: [L]=SOFTLOCKUP
[  398.454785][T21025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  398.454796][T21025] Call Trace:
[  398.454803][T21025]  <TASK>
[  398.454810][T21025]  dump_stack_lvl+0x100/0x190
[  398.454838][T21025]  should_fail_ex.cold+0x5/0xa
[  398.454863][T21025]  should_failslab+0xc2/0x120
[  398.454883][T21025]  kmem_cache_alloc_noprof+0x91/0x6a0
[  398.454912][T21025]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  398.454939][T21025]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  398.454962][T21025]  mmu_topup_memory_caches+0x25/0x170
[  398.454989][T21025]  kvm_mmu_load+0xe2/0x2570
[  398.455012][T21025]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  398.455031][T21025]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  398.455048][T21025]  ? __pfx_kvm_mmu_load+0x10/0x10
[  398.455069][T21025]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  398.455090][T21025]  ? kvm_check_and_inject_events+0x873/0x12a0
[  398.455113][T21025]  ? record_steal_time+0x3a0/0xbb0
[  398.455135][T21025]  vcpu_run+0x3aaa/0x5de0
[  398.455164][T21025]  ? __pfx_vcpu_run+0x10/0x10
[  398.455196][T21025]  ? rcu_is_watching+0x12/0xc0
[  398.455225][T21025]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  398.455249][T21025]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  398.455276][T21025]  kvm_vcpu_ioctl+0x730/0x1700
[  398.455297][T21025]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  398.455317][T21025]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  398.455339][T21025]  ? do_vfs_ioctl+0x226/0x13e0
[  398.455361][T21025]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  398.455384][T21025]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  398.455419][T21025]  ? __fget_files+0x215/0x3d0
[  398.455436][T21025]  ? hook_file_ioctl_common+0x140/0x440
[  398.455459][T21025]  ? selinux_file_ioctl+0x13b/0x290
[  398.455485][T21025]  ? selinux_file_ioctl+0xb6/0x290
[  398.455510][T21025]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  398.455527][T21025]  __x64_sys_ioctl+0x18e/0x210
[  398.455545][T21025]  do_syscall_64+0x115/0x870
[  398.455559][T21025]  ? clear_bhb_loop+0x40/0x90
[  398.455573][T21025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.455585][T21025] RIP: 0033:0x7f79f359e019
[  398.455595][T21025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.455609][T21025] RSP: 002b:00007f79f43c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  398.455626][T21025] RAX: ffffffffffffffda RBX: 00007f79f3825fa0 RCX: 00007f79f359e019
[  398.455638][T21025] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  398.455648][T21025] RBP: 00007f79f43c1090 R08: 0000000000000000 R09: 0000000000000000
[  398.455659][T21025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  398.455670][T21025] R13: 00007f79f3826038 R14: 00007f79f3825fa0 R15: 00007ffd5469a858
[  398.455687][T21025]  </TASK>
[  398.944457][T21050] syzkaller1: entered promiscuous mode
[  398.946999][T21050] syzkaller1: entered allmulticast mode
[  399.060091][T21052] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.198505][T21063] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.306189][T21072] team_slave_0: entered promiscuous mode
[  399.308982][T21072] batadv0: entered promiscuous mode
[  399.313819][T21072] debugfs: 'hsr1' already exists in 'hsr'
[  399.315546][T21072] Cannot create hsr debugfs directory
[  399.317491][T21072] hsr1: Slave A (team_slave_0) is not up; please bring it up to get a fully working HSR network
[  399.323162][T21072] team_slave_0: left promiscuous mode
[  399.325389][T21072] batadv0: left promiscuous mode
[  399.490959][T21081] libceph: resolve '4' (ret=-3): failed
[  399.512459][T21079] 
[  399.513588][T21079] ======================================================
[  399.516444][T21079] WARNING: possible circular locking dependency detected
[  399.519130][T21079] syzkaller #0 Tainted: G             L     
[  399.521807][T21079] ------------------------------------------------------
[  399.524825][T21079] syz.2.4870/21079 is trying to acquire lock:
[  399.527308][T21079] ffff888028bebbc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkcg_deactivate_policy+0x167/0x600
[  399.531298][T21079] 
[  399.531298][T21079] but task is already holding lock:
[  399.534232][T21079] ffff888057f790b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0
[  399.537894][T21079] 
[  399.537894][T21079] which lock already depends on the new lock.
[  399.537894][T21079] 
[  399.541748][T21079] 
[  399.541748][T21079] the existing dependency chain (in reverse order) is:
[  399.545467][T21079] 
[  399.545467][T21079] -> #5 (&eq->sysfs_lock){+.+.}-{4:4}:
[  399.548387][T21079]        lock_acquire+0x1b9/0x370
[  399.550443][T21079]        __mutex_lock+0x1a4/0x1bd0
[  399.552424][T21079]        elevator_exit+0x88/0xf0
[  399.554460][T21079]        elevator_switch+0x3a7/0x7e0
[  399.556239][T21079]        elevator_change+0x352/0x530
[  399.557911][T21079]        elevator_set_none+0x92/0xf0
[  399.559645][T21079]        blk_unregister_queue+0x178/0x310
[  399.561402][T21079]        __del_gendisk+0x2e3/0xb20
[  399.563043][T21079]        del_gendisk+0x10e/0x1b0
[  399.564718][T21079]        nbd_dev_remove+0x3b/0xe0
[  399.566437][T21079]        process_one_work+0xa23/0x1940
[  399.568114][T21079]        worker_thread+0x5ef/0xe50
[  399.569700][T21079]        kthread+0x370/0x450
[  399.571218][T21079]        ret_from_fork+0x72b/0xd50
[  399.572769][T21079]        ret_from_fork_asm+0x1a/0x30
[  399.574430][T21079] 
[  399.574430][T21079] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  399.576992][T21079]        lock_acquire+0x1b9/0x370
[  399.578590][T21079]        __mutex_lock+0x1a4/0x1bd0
[  399.580155][T21079]        elevator_change+0x1bc/0x530
[  399.581797][T21079]        elv_iosched_store+0x3be/0x460
[  399.583443][T21079]        queue_attr_store+0x25f/0x2f0
[  399.585360][T21079]        sysfs_kf_write+0xf2/0x150
[  399.587029][T21079]        kernfs_fop_write_iter+0x3e0/0x5f0
[  399.588881][T21079]        vfs_write+0x6ac/0x1050
[  399.590462][T21079]        ksys_write+0x12a/0x250
[  399.592325][T21079]        do_syscall_64+0x115/0x870
[  399.594426][T21079]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.597189][T21079] 
[  399.597189][T21079] -> #3 (&q->q_usage_counter(io)#17){++++}-{0:0}:
[  399.600582][T21079]        lock_acquire+0x1b9/0x370
[  399.602621][T21079]        blk_alloc_queue+0x610/0x790
[  399.604725][T21079]        blk_mq_alloc_queue+0x174/0x290
[  399.606953][T21079]        __blk_mq_alloc_disk+0x29/0x120
[  399.609164][T21079]        loop_add+0x498/0xb60
[  399.611146][T21079]        loop_init+0x1d3/0x200
[  399.613099][T21079]        do_one_initcall+0x11d/0x700
[  399.615067][T21079]        kernel_init_freeable+0x6ea/0x7b0
[  399.617350][T21079]        kernel_init+0x1f/0x1e0
[  399.619320][T21079]        ret_from_fork+0x72b/0xd50
[  399.621056][T21079]        ret_from_fork_asm+0x1a/0x30
[  399.622778][T21079] 
[  399.622778][T21079] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  399.625182][T21079]        lock_acquire+0x1b9/0x370
[  399.626856][T21079]        fs_reclaim_acquire+0xc4/0x100
[  399.628564][T21079]        prepare_alloc_pages+0x166/0x5f0
[  399.630352][T21079]        __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  399.632324][T21079]        __alloc_pages_noprof+0xb/0x110
[  399.634001][T21079]        pcpu_populate_chunk+0x118/0x990
[  399.635726][T21079]        pcpu_alloc_noprof+0x881/0x1ca0
[  399.637419][T21079]        iommu_dma_init_fq+0x1da/0x7e0
[  399.639120][T21079]        iommu_setup_dma_ops+0x11df/0x1620
[  399.640865][T21079]        bus_iommu_probe+0x264/0x550
[  399.642553][T21079]        iommu_device_register+0x1af/0x280
[  399.644314][T21079]        intel_iommu_init+0x2020/0x2990
[  399.646063][T21079]        pci_iommu_init+0x3c/0x80
[  399.647631][T21079]        do_one_initcall+0x11d/0x700
[  399.649235][T21079]        kernel_init_freeable+0x6ea/0x7b0
[  399.651018][T21079]        kernel_init+0x1f/0x1e0
[  399.652498][T21079]        ret_from_fork+0x72b/0xd50
[  399.654073][T21079]        ret_from_fork_asm+0x1a/0x30
[  399.655670][T21079] 
[  399.655670][T21079] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  399.658059][T21079]        lock_acquire+0x1b9/0x370
[  399.659610][T21079]        __mutex_lock+0x1a4/0x1bd0
[  399.661244][T21079]        pcpu_alloc_noprof+0xe87/0x1ca0
[  399.662916][T21079]        percpu_ref_init+0x37/0x3f0
[  399.664536][T21079]        blkg_alloc+0xf0/0xf80
[  399.666035][T21079]        blkg_conf_prep+0x46e/0xf10
[  399.667643][T21079]        tg_set_conf.isra.0+0x1ed/0x500
[  399.669339][T21079]        cgroup_file_write+0x1e6/0x8a0
[  399.671045][T21079]        kernfs_fop_write_iter+0x3e0/0x5f0
[  399.672880][T21079]        vfs_write+0x6ac/0x1050
[  399.674452][T21079]        ksys_write+0x12a/0x250
[  399.676016][T21079]        do_syscall_64+0x115/0x870
[  399.677594][T21079]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.679552][T21079] 
[  399.679552][T21079] -> #0 (&q->blkcg_mutex){+.+.}-{4:4}:
[  399.681858][T21079]        check_prev_add+0xeb/0xe60
[  399.683428][T21079]        __lock_acquire+0x136c/0x1a40
[  399.685119][T21079]        lock_acquire+0x1b9/0x370
[  399.686643][T21079]        __mutex_lock+0x1a4/0x1bd0
[  399.688249][T21079]        blkcg_deactivate_policy+0x167/0x600
[  399.690080][T21079]        bfq_exit_queue+0x29d/0x430
[  399.691637][T21079]        blk_mq_exit_sched+0x20e/0x4e0
[  399.693222][T21079]        elevator_exit+0x93/0xf0
[  399.694712][T21079]        elevator_switch+0x3a7/0x7e0
[  399.696337][T21079]        elevator_change+0x352/0x530
[  399.697916][T21079]        elevator_set_none+0x92/0xf0
[  399.699552][T21079]        blk_unregister_queue+0x178/0x310
[  399.701220][T21079]        __del_gendisk+0x2e3/0xb20
[  399.702789][T21079]        del_gendisk+0x10e/0x1b0
[  399.704306][T21079]        loop_control_ioctl+0x4f8/0x620
[  399.706155][T21079]        __x64_sys_ioctl+0x18e/0x210
[  399.708037][T21079]        do_syscall_64+0x115/0x870
[  399.709620][T21079]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.711566][T21079] 
[  399.711566][T21079] other info that might help us debug this:
[  399.711566][T21079] 
[  399.714625][T21079] Chain exists of:
[  399.714625][T21079]   &q->blkcg_mutex --> &q->elevator_lock --> &eq->sysfs_lock
[  399.714625][T21079] 
[  399.718700][T21079]  Possible unsafe locking scenario:
[  399.718700][T21079] 
[  399.721056][T21079]        CPU0                    CPU1
[  399.722762][T21079]        ----                    ----
[  399.724484][T21079]   lock(&eq->sysfs_lock);
[  399.725941][T21079]                                lock(&q->elevator_lock);
[  399.728228][T21079]                                lock(&eq->sysfs_lock);
[  399.730330][T21079]   lock(&q->blkcg_mutex);
[  399.731740][T21079] 
[  399.731740][T21079]  *** DEADLOCK ***
[  399.731740][T21079] 
[  399.734311][T21079] 3 locks held by syz.2.4870/21079:
[  399.736230][T21079]  #0: ffff888028bf43a0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0x106/0x1b0
[  399.739491][T21079]  #1: ffff888028bebd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530
[  399.742573][T21079]  #2: ffff888057f790b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0
[  399.745875][T21079] 
[  399.745875][T21079] stack backtrace:
[  399.748162][T21079] CPU: 0 UID: 0 PID: 21079 Comm: syz.2.4870 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  399.748182][T21079] Tainted: [L]=SOFTLOCKUP
[  399.748187][T21079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  399.748194][T21079] Call Trace:
[  399.748200][T21079]  <TASK>
[  399.748206][T21079]  dump_stack_lvl+0x100/0x190
[  399.748227][T21079]  print_circular_bug.cold+0x178/0x1c7
[  399.748252][T21079]  check_noncircular+0x146/0x160
[  399.748270][T21079]  check_prev_add+0xeb/0xe60
[  399.748284][T21079]  __lock_acquire+0x136c/0x1a40
[  399.748300][T21079]  lock_acquire+0x1b9/0x370
[  399.748313][T21079]  ? blkcg_deactivate_policy+0x167/0x600
[  399.748331][T21079]  ? __pfx___might_resched+0x10/0x10
[  399.748347][T21079]  __mutex_lock+0x1a4/0x1bd0
[  399.748360][T21079]  ? blkcg_deactivate_policy+0x167/0x600
[  399.748375][T21079]  ? blkcg_deactivate_policy+0x167/0x600
[  399.748391][T21079]  ? mark_held_locks+0x40/0x70
[  399.748403][T21079]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  399.748415][T21079]  ? __pfx___mutex_lock+0x10/0x10
[  399.748427][T21079]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  399.748438][T21079]  ? percpu_ref_is_zero+0xe7/0x150
[  399.748453][T21079]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  399.748470][T21079]  ? __blk_freeze_queue_start+0xd2/0x460
[  399.748486][T21079]  ? blkcg_deactivate_policy+0x167/0x600
[  399.748501][T21079]  blkcg_deactivate_policy+0x167/0x600
[  399.748518][T21079]  bfq_exit_queue+0x29d/0x430
[  399.748530][T21079]  ? __pfx_bfq_exit_queue+0x10/0x10
[  399.748542][T21079]  blk_mq_exit_sched+0x20e/0x4e0
[  399.748559][T21079]  elevator_exit+0x93/0xf0
[  399.748573][T21079]  elevator_switch+0x3a7/0x7e0
[  399.748587][T21079]  elevator_change+0x352/0x530
[  399.748601][T21079]  elevator_set_none+0x92/0xf0
[  399.748615][T21079]  ? __pfx_elevator_set_none+0x10/0x10
[  399.748631][T21079]  ? kobject_put+0xb9/0x640
[  399.748647][T21079]  blk_unregister_queue+0x178/0x310
[  399.748662][T21079]  __del_gendisk+0x2e3/0xb20
[  399.748674][T21079]  ? del_gendisk+0xb9/0x1b0
[  399.748685][T21079]  ? __pfx___del_gendisk+0x10/0x10
[  399.748697][T21079]  ? up_write+0x2e5/0x5c0
[  399.748712][T21079]  del_gendisk+0x10e/0x1b0
[  399.748724][T21079]  loop_control_ioctl+0x4f8/0x620
[  399.748737][T21079]  ? __pfx_loop_control_ioctl+0x10/0x10
[  399.748749][T21079]  ? selinux_file_ioctl+0x13b/0x290
[  399.748778][T21079]  ? selinux_file_ioctl+0xb6/0x290
[  399.748798][T21079]  ? __pfx_loop_control_ioctl+0x10/0x10
[  399.748811][T21079]  __x64_sys_ioctl+0x18e/0x210
[  399.748830][T21079]  do_syscall_64+0x115/0x870
[  399.748842][T21079]  ? clear_bhb_loop+0x40/0x90
[  399.748856][T21079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.748868][T21079] RIP: 0033:0x7ffac719e019
[  399.748878][T21079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.748890][T21079] RSP: 002b:00007ffac7fbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  399.748901][T21079] RAX: ffffffffffffffda RBX: 00007ffac7425fa0 RCX: 00007ffac719e019
[  399.748909][T21079] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007
[  399.748915][T21079] RBP: 00007ffac723500c R08: 0000000000000000 R09: 0000000000000000
[  399.748922][T21079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.748929][T21079] R13: 00007ffac7426038 R14: 00007ffac7425fa0 R15: 00007ffdd3db6c18
[  399.748939][T21079]  </TASK>
[  401.397114][   T10] usb 10-1: USB disconnect, device number 6
[  404.523565][ T5817] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.527522][ T5817] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  404.592851][ T5817] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.596935][ T5817] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  404.663826][ T5817] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.667235][ T5817] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  404.732862][ T5817] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.736401][ T5817] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  404.815110][   T42] kauditd_printk_skb: 259 callbacks suppressed
[  404.815128][   T42] audit: type=1400 audit(1785453952.950:1831): avc:  denied  { read } for  pid=5449 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  404.825794][   T42] audit: type=1400 audit(1785453952.960:1832): avc:  denied  { search } for  pid=5449 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.835295][   T42] audit: type=1400 audit(1785453952.960:1833): avc:  denied  { search } for  pid=5449 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.849437][   T42] audit: type=1400 audit(1785453952.960:1834): avc:  denied  { search } for  pid=5449 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.857245][ T5817] bridge_slave_1: left allmulticast mode
[  404.857776][   T42] audit: type=1400 audit(1785453952.960:1835): avc:  denied  { read } for  pid=5449 comm="dhcpcd" name="n78" dev="tmpfs" ino=22595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  404.859875][ T5817] bridge_slave_1: left promiscuous mode
[  404.867396][   T42] audit: type=1400 audit(1785453952.960:1836): avc:  denied  { open } for  pid=5449 comm="dhcpcd" path="/run/udev/data/n78" dev="tmpfs" ino=22595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  404.869334][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.876809][   T42] audit: type=1400 audit(1785453952.960:1837): avc:  denied  { getattr } for  pid=5449 comm="dhcpcd" path="/run/udev/data/n78" dev="tmpfs" ino=22595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  404.886859][   T42] audit: type=1400 audit(1785453953.000:1838): avc:  denied  { read } for  pid=5449 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  404.893953][   T42] audit: type=1400 audit(1785453953.020:1839): avc:  denied  { read } for  pid=21098 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.894307][ T5817] bridge_slave_0: left allmulticast mode
[  404.901968][   T42] audit: type=1400 audit(1785453953.020:1840): avc:  denied  { read open } for  pid=21098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  404.904307][ T5817] bridge_slave_0: left promiscuous mode
[  404.913289][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.917397][ T5817] wg0: left allmulticast mode
[  404.984632][ T5817] bond5 (unregistering): (slave geneve2): Releasing active interface
[  405.003913][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.009564][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.013097][ T5817] bond0 (unregistering): Released all slaves
[  405.017199][ T5817] bond1 (unregistering): Released all slaves
[  405.022367][ T5817] bond2 (unregistering): Released all slaves
[  405.027539][ T5817] bond3 (unregistering): Released all slaves
[  405.032513][ T5817] bond4 (unregistering): Released all slaves
[  405.036600][ T5817] bond5 (unregistering): Released all slaves
[  405.040879][ T5817] bond6 (unregistering): Released all slaves
[  405.045861][ T5449] 8021q: adding VLAN 0 to HW filter on device eth1
[  405.172547][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2
[  405.281981][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3
[  405.326949][ T5817] hsr_slave_0: left promiscuous mode
[  405.331465][ T5817] hsr_slave_1: left promiscuous mode
[  405.333508][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.335895][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.338657][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.341261][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.345587][ T5817] veth0_macvtap: left allmulticast mode
[  405.347422][ T5817] veth0_macvtap: left promiscuous mode
[  405.349500][ T5817] veth1_vlan: left promiscuous mode
[  405.351219][ T5817] veth0_vlan: left promiscuous mode
[  405.416464][ T5817] team0 (unregistering): Port device team_slave_1 removed
[  405.434931][ T5817] team0 (unregistering): Port device team_slave_0 removed
[  405.461942][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4