last executing test programs:

2m48.143326937s ago: executing program 3 (id=644):
r0 = io_uring_setup(0x41, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x301, 0x0, 0x0})
timer_create(0x2, 0x0, &(0x7f0000000940))
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
timer_gettime(0x0, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x2000000, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000240)={0x5, 0x1, '\x00', @zc_export={r0}}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x800)
setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f00000000c0), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0xfffffffffffffd34}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)

2m48.142088139s ago: executing program 3 (id=645):
setns(0xc9, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x43)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="b7", 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x1, 0xfffffffe, 0x0, [{0x4, 0xc, 0x4, '\x00', 0x38}, {0x80, 0xfe, 0x7c, '\x00', 0x2f}, {0x2, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x1, '\x00', 0x6}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0xb, 0x1, '\x00', 0x7}, {0x2, 0x6, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x16, 0x24, 0xa9, '\x00', 0x1}, {0x7, 0x1, 0x17, '\x00', 0x4}, {0x6, 0xc, 0x5, '\x00', 0x3}, {0x19, 0x10, 0x8c, '\x00', 0x4}, {0x5, 0xc0, 0x3, '\x00', 0x3}, {0x8, 0x2, 0xcb, '\x00', 0x1}, {0x7, 0x6, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x6, 0x5, '\x00', 0xf7}, {0x7, 0x7, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x85, 0xaa, '\x00', 0xff}]}})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]})
recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
socket(0x400000000010, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0x6}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xd}}}]}, 0x3c}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)

2m47.832437563s ago: executing program 3 (id=646):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x551000, 0x0)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000440))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000100)='bfs\x00', 0x1004000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/tracing/options/context-info\x00', 0x4002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe})
ioctl(r2, 0x8b22, &(0x7f0000000040))
sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2, 0x3, 0x1, 0x0, 0x2d, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x10}, @sadb_lifetime={0x4, 0x2, 0xd, 0x8, 0x5, 0x4}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e22, 0x63, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@local, 0x9, 0x10, 0x14}, @sadb_x_sec_ctx={0x1a, 0x18, 0x7b, 0x9, 0xc4, "1ec3014f3404f330f7106ac1a0afdd26d20cd1b7f2f314317953a474b267ece85bd156ce6a86d7fe2ff8f57a17a07f7e84a1767dfbbca8f44c0cdf1502e79211753066bbabf74cfeb4e79406fddf0f892686b431a2210e8a47a66ae9c4672109f7af9102138829b01ef3157b996d0d713593d0aec8c0495a03f62276b28f3b668ecb5bdb255385e67161ad8311dd84cb8d5f08177ace98fcda8930596adeb7e9f8ce00b927349a096f11028b907b2656f172e030d4d66299e67a08e408da8b7287c33f2b"}]}, 0x168}}, 0x84)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001880)=@nat={'nat\x00', 0x670, 0x5, 0x6b0, 0x0, 0x490, 0xfeffffff, 0x368, 0x490, 0x618, 0x618, 0xffffffff, 0x618, 0x618, 0x5, 0x0, {[{{@uncond, 0x0, 0x308, 0x368, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1f, 0x0, 0x0, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x4, 0x5, 0x4, 0x5, 0x4], 0x6, 0x2}, {0x1, [0x5, 0x5, 0x3, 0x5, 0x1, 0x4], 0x3}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x5, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x710)
umount2(&(0x7f0000000180)='./debug/tracing/options/context-info\x00', 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4)
unlinkat(r1, &(0x7f00000003c0)='./debug\x00', 0x0)

2m47.77295766s ago: executing program 3 (id=647):
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x2, 0x300) (async)
socket$kcm(0x11, 0x2, 0x300)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000900)="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", 0x1c3}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000100)={0x5, 0x20, [0xc3cf, 0x4, 0xac45, 0x9], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000100)={0x5, 0x20, [0xc3cf, 0x4, 0xac45, 0x9], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f620553d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4000090)
r4 = syz_clone(0x802300, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r4, 0x0)
syz_pidfd_open(r4, 0x0) (async)
syz_pidfd_open(r4, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) (async)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
close(r8) (async)
close(r8)
ioctl$KVM_CREATE_VM(r8, 0x40045506, 0x23) (async)
ioctl$KVM_CREATE_VM(r8, 0x40045506, 0x23)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1000b05fac4bc2277f615097be58655d2cbd7000fd3821c7814efda5dbdf25140000007a9fe24124b77d6d1796a6ab060002000000000000000800010002", @ANYRES32=r2, @ANYBLOB="08001d00", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

2m47.682490234s ago: executing program 3 (id=648):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close_range(r1, r0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={<r8=>0x0, 0xc347}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000180)={r8, 0x3}, 0x8)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x10, 0x803, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
close_range(r1, r0, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xc347}, &(0x7f00000000c0)=0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000180)={r8, 0x3}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)

2m47.441544667s ago: executing program 3 (id=649):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000180)="b6b6040e38e169e8a5e19d64252142a16e28ea1e2aa32fd588259ae2eae77e8e7b08d53a3f1e566842c85abda9df1c508e1091030c25a56ba67c9952cf6d5cf409c3e2dfcf65edf2ad9314d0b4841db547cdc7afdf524cc94cf50adbb0a467eb37276ae346caa668cc34d0728842260530ff8adb8fdf0c37c44aef9b73cb766e10a5e03673c9677897e4a264598f775f0c24d5fba56500c6eb0720969ab407938fe1b34ab4452cff1123e7a8752ffe7cb6", 0xb1)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x8, 0x4})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1a)
eventfd(0xb66)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4004050)
eventfd2(0x625, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x5, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x7, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x126, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0x80000ff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x3, 0x8001, 0x1, 0x8, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x80000009]}, 0x45c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
write(r6, &(0x7f0000000100)="a621ca1ae7501d2be1ae82bd946143b39c9e53c10a", 0x15)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf040}, 0x20004800)
recvmmsg(r7, &(0x7f00000002c0), 0x220, 0x100, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045)
io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)

2m47.41479888s ago: executing program 32 (id=649):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000180)="b6b6040e38e169e8a5e19d64252142a16e28ea1e2aa32fd588259ae2eae77e8e7b08d53a3f1e566842c85abda9df1c508e1091030c25a56ba67c9952cf6d5cf409c3e2dfcf65edf2ad9314d0b4841db547cdc7afdf524cc94cf50adbb0a467eb37276ae346caa668cc34d0728842260530ff8adb8fdf0c37c44aef9b73cb766e10a5e03673c9677897e4a264598f775f0c24d5fba56500c6eb0720969ab407938fe1b34ab4452cff1123e7a8752ffe7cb6", 0xb1)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x8, 0x4})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1a)
eventfd(0xb66)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4004050)
eventfd2(0x625, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x5, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x7, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x126, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0x80000ff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x3, 0x8001, 0x1, 0x8, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x80000009]}, 0x45c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
write(r6, &(0x7f0000000100)="a621ca1ae7501d2be1ae82bd946143b39c9e53c10a", 0x15)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf040}, 0x20004800)
recvmmsg(r7, &(0x7f00000002c0), 0x220, 0x100, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045)
io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)

2m46.317916865s ago: executing program 2 (id=664):
r0 = socket$inet(0x2, 0x80004, 0x1)
getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
getsockopt$inet6_mreq(r1, 0x29, 0x26f4358e87f5a595, &(0x7f0000000100)={@empty}, &(0x7f0000000140)=0x14)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xa4, 0xffff}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r1, {0xa4, 0xffff}}, './file0\x00'})
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x4, 0x4, 0x7fffffffffffffff, 0x9}], 0x1, 0x20, 0x1, 0xa}) (async)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x4, 0x4, 0x7fffffffffffffff, 0x9}], 0x1, 0x20, 0x1, 0xa})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000240)={0x2, 0x5, 0x3, 0x8, 0x2, [0x4, 0xfffffff7, 0xfffffffa, 0xd2]})
ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000002c0)={0x3, 0x2, 0x3})
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r1)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x900, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x801) (async)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x900, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x801)
ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000440))
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000480)={0x1, 0x1000, "eba020dcdb29b49f5e435a9551b1736cb57eacda12115a7115a6f21a3ec83a0854b1284d9337ee7947db97e7c86e6b705304b38a0600a648e28bef1b1b6a73f1f210a1166fa2cf7d019509c60898619dcc30e5b7fa1e90c6f62991ad8100855ba4f4d39f9b209727d5f56695941c1321a94906f16d52feb2eeb9d6abccb5888c77d9532b32e244b4377ec2cb92d3941e106dc4a7ec7b896d9f666f853c2330f66696228105757aa3410acd6e004cc1317bcc35f7c21061aedacee30c727721849c924ad60b30ca7b0f4f78792f43e07df70ee782466c58c4699de11b57346669ee72f3af08ab930826e3f8ffe34bc4d5013a8e22112533e7da6ba5ad9b2da26bb4828e5c18dd6da451a794ff3b3e437c2171c8eb51266c5607085c593ecacce2d18807eb8ed369e8a8b8c60a92fc768b99cac290f9c45e96aa1d8de291680dc0c6b53337b83f970f2e94950fece6df89fff495ef66b922f1f5da1a2723f799925ad90f3312d5ada3d4af0983e83cb4b32f0637a451bcd1a468bf8127dedc77d2445e007c3c94c0cce050ebb7156ce3d6a84066fd90a2397c77bfb63a30ae2835f722f4c0facf1cf6dfe03103f955e82c35a3283f98021d39a396d9fb0df44f982cc3e5a755ca1f8a08442264904cc6e7f6cb8402cecd2a4d8454268b98ce6dc3171874f6e13d2b4604dae093ad05a0caee61912506d12f608d52b9777301c7da233504661e9642934e47c9c3f5d19e39ff082e666043a405a0ad963d30badc9110bd6ec9844272886e555341af92cf04d6df6cdfce60b9677538d6c8397b4560a75352b83b5af576661a3e65c208e24a11926b2f6e9cd0392565e0d8300ac8cb2920d171191b598135506f6bd896634f1106b422456c46c249c7c9474b224409655753cadc40361980ffa74a96494ccad7f7e8067de3dda257cf6b0622895ed5e74a56d59f601f3a128086bed2914bf566dcd9eede8a96121f718db3047fb08c200942c4603029f32f092b6e172115f8e133b553f9537d0d43dfefef1a18d83dc04af6b6e5128161cb461fb95e2ded7e30dcbf60716aabcbad73601db7defb076110e3979a8074716a5bc0bac3353243a7582cc6767f441c6132533c3a16553bcb49df39962bbeb4551927c5811037d49ff740b435dc06db265070ab7516fcbe77c98e758b6269e04a6d37b913fd51479a357664dd6e41d0e20cc8d992657497cc9fee830cdc4022e1b9641c177487ea3cf10b22978572618991a9ae36a47934d818f142f5ae55ee7b0fd25b43c2aeded427e84c8f3ad7e1360de138b3a40a13800b2fa04614f30c36eddf58ed02125dca7d3abd8fc25114142ca7a9b56c23a5ce7610ecc48c2d6bc228f475f0b933e09358ad948032d592b3b0310a4a8ef35a56e1b0f1e8ba205d5e2e96055bfdef817d274787591e8ef821828050678763e5a0259cb9308e608aabdf775a729f0a31aa894f7c99b8ba18074356ceae12cd5f068c00829196094c618397e38801fd4c064f4bad06c07843087ca4c094eed44fec14ed21f261230ab607e31eb016e1ea1f08ee9446bbc2f63303e4abbbdbd8757c9e9c94fa20019018abcfbdab319e739ffb064fc6b0e2e1d077f794d7f30597a7aabb9064090ee1b6ddd3594005a94f1344f8c0a2af16ca2651d70bd78922553126e023a685b13dfb7573a44195ee1ba5eb3a9e3d174d187116c51062b5cd3b7e9bee53d9e84386658498804019bb34ac829855590a4e77328b70409835c29837e6238ad5b74b55925afbc7539759ca523fe82dd5c55c772cc935b98fb9d2d6ccd4fde6e77858a179a74053e1b37cc9c17a147b44c7a180fc38927cd9232c2b3bed4db0acc2abe92233b16defc40baf92bbe0fad50ea34d2b5073b1fc613ebe96fc0630bf87224489283502ed816c042cab755f8c9d2dd07e16249bfcac1d42fa039f8915bb2c2d52f3bea8e0ee1e7fcea96512143f3d63c36ce80ad3006c6abd7e349d7a856537faf73c78a50fc7a58ee75ff06c6be435312688496f3cc42118a2ba83220c8f60385e0bea0929d0bc8ba88bbe92e8569349c34e0609b62cbbbb946e467b7e392ed2d633dd84e99f0a2d8abd85d94b49cd170f32ce25b94d944c9dc58d04aef9ca8604e7b403461397c02033b3c5ac9882637493af6c5daad9d681e02e41c9d193640c2222bba2179c5307918ca9388d6dcd2150f6bf04594b3fd267d807723263a9f0ae83350c03bf84e882cee282555e9a543dfcfce31f629142adc8b5f56b017bc256ceaeebe3bce6dd84604f4e8043c60a789d8950660d2ac865a5eeed28d8aff671973a07ddc8cb4a7f3842d0d33370a8c26cbbad4d250cce2cf6a81e8c9ee75a4f710bd14d72ba092c3b5ef3c86eb39fb7d067795eb4b97c0951528f769b3c1544395f5027e4290637003ee503c2641c09c6c6e19e4d5b273c86de94796e3f1881f937a82accb6c1e335f75d5f09a5ca6a0ad0898047b5e91a228ee82c00aaea6873d4ce0861d9445e683d1a79201b5d10be3d259c45bda143d93876e994f7d618d5445a7950c510201d458ee143aa2a1c85d788de9538425b6b75edbef2f166a1910f7b3805ced828c0e356e965ee193146b9f8a53ba5a87257852dd8e7b9961b919355ad71a17a6f838d116d98cbb07be58881c2b090e3c46bd8a7effaea075d5951061a28883e44aa6d8f6d241142724aba663218b619fa2cfbedbaf6672216b131c75ddfe1ecc902044c6bb8ef5a0b4cd34990e36fc139ebc280385296e9a1a552d47e8a602edc95ef7f60f5b261b041e57d9321e7c9904dbc6b1255b622c5e9b4e4606cf7c03950c51bf73cda282355faa413e74bea5e5ebb5c945a01e2431019982e0f2e14d9868e731e5e263334d8b098ef200493c88174cc7bb17e274819e70ee227ed495fd5c28e0a335846dc228b711534e534569b9b7fbdb419dd07a06e77920c1ff6c735b6bfbad6012334c64a5d0f85a393652d6edc207069d5cd348dcc8f665bd85b37031db03b5b4c4588ef3e2e84f382a8b14c5fa5d2a4edd337879f1d16b722706da36614bd1b3bfd1d5eaa5259fbef164c1d9ff31615c0c5a857be26b60138e7dcae514c554aa41f12945029ef228fb47ef8704ee67a4529ba38b70676c1f321893a43c4fe5c0f872bf6b8e2a853c6d4cb8217580feb23f8eb48c3465f6b6602d21e909f83fe788f819702096c3b23b7e26e51bade962a992e264716cef07725bc5283ca48f9b9b2aa89784de88c38662c16040e5b746b6d9329d77c19273c930767778fdfce88ee0efa865c3d4e2acf3e693cfd494cd94013cbb53dcbf5c9694ef8fb89627e84e7d82aefbe47f53919561ee3bf65c16a97099553bfe9ca02fca247e8fd3cce7a940b5a29124d079fb293aeedb2a71174218ae2688ff494139fee402ea34ffcc172aabf65345659138de65a62580524bdcc0c9997b0203123affaa20605e23046077fa0fcf9cb5e748f6d0a863905eb6635b26742c2cb699212429065081997f62ab13bfb679659855ffa302a3dae05ba68d83110e16ae69870415aef3b6a525e6db2527bdcfc786592fec0d88606a6142ac048f5e1ea580525bb2fda09a939a2776d78b72b868f2a63e83d8ad661319b5f047f0803ad1669cd55ab77f9c0bc25ac5211bcf864e3b889507279cc46019471a2f35bf354fe887a945a6178d8726f2e3ab8de9d88b6542825aa8c568b45c294017159ffed5ccec0a7c93c42e698f54247a28573c37c9383706fc29a7c6316937c1a3c51009666757522b9210aeeee97adfbf89c7428ebae3b6dfde3bd2c0462e1225271534c204843a515395a2959841769a81c54b497501ed7c3776fb8fe7b944c2f6255a4baac938abac2955231ee24f196c6b54d12435fa23538ad076a2db25059121fb8caf3036045e759ea03d7c783836adc59fde48de14d06512a1806c4717832dd346042404f0d2dd0aac527bf1172e404790d841d2b7dc084ef625caf247e2dec7ab1b39d2c01893270b9c655bd61b05673eb344f6d0486e5e4b410f516571b64cae58ba7e011fdcabf901508a4fcc72e77b56be9e5143f0f020b9e5582ceac8e00dc117aa975d55044f76d1e79be418c25c3fbd7acd897b65106886b1e1f9f9bff109aeae7ffa2680451258e02767aa02a65a5deb120026de32e02626339c4923e9239a737f660614114dd8cd1e09a668d65766627657afac4c1621a6a2892e756b03a9806d40045e94c0ad5be5e7c6af4574e5b813c61d40974bbd18d818a5bc9ed00838d4585356e7a15ed1884af6b3246b04e66b94b0c17b70f705e33a39c0008f78794e63037973297a6c16b449052c4cd4cc788131937e0788f02d43e4e978b4f14833497587a1a1397aa8b158771d9abe4c76ab08fedd991f7669fcb97eee32d8f3fa96ed94451676270f25394ca5ce44b806617a3dfe9515efe86e620349d719bc3efbe78b27978160cad553cb963c54f047fd607eba4fcec267c6b58f5f219a74ea69954dbfe599a281783825389600c64b445a3fc75f418e9f5ca7829a5f9ff4029f874dd1269ba4001c27be766b7e4348e81a524d5154ee6d0cdf7354d0c40a3694c13ef0608049fdeec0e7ad921aa5ba050645c7dc82411105f12d069cc7014a2474fc2a021b6c929f6b34677296e817002b139d05b373f89d8fb8b7a8956639f1375659bce79197a8758345126ce4a0b56e83613c7e3d624c0e84bff5858068a1d654a25046926c8898b60dbebf14abbe19ec2a8cc63f1bcabce5265dd0c29afc39b92c4a0147bd07c2494d3710fdd46fa99f14a16d8daa3d088f40c9d3359ad37c26807a963d0e28b602eb8bb9d188473addb0e299c953a99d0ed6d01f1518eb247c0b2f9ba4dd6d3de442a4286abd58c7d08ecf46ff1447c4e67de31401e617f0434127e9915b124422e958fdf138039fb807b67eb89ed8fc257f9e0605909dec69d91f38f0d285df3ba3124b9193b209e19787227243e7aec1e14c409a9fd0954b6820bcb9b8bb08a7875487d9117102a7ec50285f08ebc3445801f6065e1d243c6175d2c18d9f0656002e1b1bcdd99d836c7b539a1ab62de096ee92da34b513f3440e88542528eb53f995ad995685e27d905f791eab1245279605f7837cff05019d895e4e7a028dd1402b343c575bbdb52a135fe481f6d7c2d8c5a06f60d7d92cb89f1d8431e33234cc15965bc6cc76ea2e096ab370e3022ec7dcc3ed1b0dcedc7eea6d328aac20baa9951c85b011d9f2051aa6059196dc1c271b9812f1aaed0cf704e656244d846ab4c2ab2a636045fee86707c20fcd258df9f3053ced1f9eb75f9927499df2a48261c48e5df3010ca6a997d190b788053e5d3d8725fb38ffb9c72129a3fa7c0cd767e2128bdeea105caaa9bf5c16504da30727489a7898ced3de77f4386b209a49afd6453eee687f619dc6543fde6d126b26d43841b08f088df3fcc55188ebadcb72a1945cef3afadbcfd64fa96a2655f1f0c096e7bdcb821c8fbbcc0bbe0646bcaa2cfe0e939812a20740fd46ec09bb3589e5817e2d9ea2176211a4f79d077a1cd545ba5124cf5b4a5926cc7fc04077f22a51960efdad11194a74abd74c19a91fdd76f16fab34e9f9594519790d379147187a57b781f9daf64c1662530d63e0295348097c829b4a01ae648290833cccc53487f835fdef96d6697ea415fab5c00109a3c48d7427fd4fa9e9627af32af17b6270e99739177d17c6454cbf0df57c47d285a8448eb3097e891e203debbf528aca7bf40893df3d6184844b0a7e6a833"}) (async)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000480)={0x1, 0x1000, "eba020dcdb29b49f5e435a9551b1736cb57eacda12115a7115a6f21a3ec83a0854b1284d9337ee7947db97e7c86e6b705304b38a0600a648e28bef1b1b6a73f1f210a1166fa2cf7d019509c60898619dcc30e5b7fa1e90c6f62991ad8100855ba4f4d39f9b209727d5f56695941c1321a94906f16d52feb2eeb9d6abccb5888c77d9532b32e244b4377ec2cb92d3941e106dc4a7ec7b896d9f666f853c2330f66696228105757aa3410acd6e004cc1317bcc35f7c21061aedacee30c727721849c924ad60b30ca7b0f4f78792f43e07df70ee782466c58c4699de11b57346669ee72f3af08ab930826e3f8ffe34bc4d5013a8e22112533e7da6ba5ad9b2da26bb4828e5c18dd6da451a794ff3b3e437c2171c8eb51266c5607085c593ecacce2d18807eb8ed369e8a8b8c60a92fc768b99cac290f9c45e96aa1d8de291680dc0c6b53337b83f970f2e94950fece6df89fff495ef66b922f1f5da1a2723f799925ad90f3312d5ada3d4af0983e83cb4b32f0637a451bcd1a468bf8127dedc77d2445e007c3c94c0cce050ebb7156ce3d6a84066fd90a2397c77bfb63a30ae2835f722f4c0facf1cf6dfe03103f955e82c35a3283f98021d39a396d9fb0df44f982cc3e5a755ca1f8a08442264904cc6e7f6cb8402cecd2a4d8454268b98ce6dc3171874f6e13d2b4604dae093ad05a0caee61912506d12f608d52b9777301c7da233504661e9642934e47c9c3f5d19e39ff082e666043a405a0ad963d30badc9110bd6ec9844272886e555341af92cf04d6df6cdfce60b9677538d6c8397b4560a75352b83b5af576661a3e65c208e24a11926b2f6e9cd0392565e0d8300ac8cb2920d171191b598135506f6bd896634f1106b422456c46c249c7c9474b224409655753cadc40361980ffa74a96494ccad7f7e8067de3dda257cf6b0622895ed5e74a56d59f601f3a128086bed2914bf566dcd9eede8a96121f718db3047fb08c200942c4603029f32f092b6e172115f8e133b553f9537d0d43dfefef1a18d83dc04af6b6e5128161cb461fb95e2ded7e30dcbf60716aabcbad73601db7defb076110e3979a8074716a5bc0bac3353243a7582cc6767f441c6132533c3a16553bcb49df39962bbeb4551927c5811037d49ff740b435dc06db265070ab7516fcbe77c98e758b6269e04a6d37b913fd51479a357664dd6e41d0e20cc8d992657497cc9fee830cdc4022e1b9641c177487ea3cf10b22978572618991a9ae36a47934d818f142f5ae55ee7b0fd25b43c2aeded427e84c8f3ad7e1360de138b3a40a13800b2fa04614f30c36eddf58ed02125dca7d3abd8fc25114142ca7a9b56c23a5ce7610ecc48c2d6bc228f475f0b933e09358ad948032d592b3b0310a4a8ef35a56e1b0f1e8ba205d5e2e96055bfdef817d274787591e8ef821828050678763e5a0259cb9308e608aabdf775a729f0a31aa894f7c99b8ba18074356ceae12cd5f068c00829196094c618397e38801fd4c064f4bad06c07843087ca4c094eed44fec14ed21f261230ab607e31eb016e1ea1f08ee9446bbc2f63303e4abbbdbd8757c9e9c94fa20019018abcfbdab319e739ffb064fc6b0e2e1d077f794d7f30597a7aabb9064090ee1b6ddd3594005a94f1344f8c0a2af16ca2651d70bd78922553126e023a685b13dfb7573a44195ee1ba5eb3a9e3d174d187116c51062b5cd3b7e9bee53d9e84386658498804019bb34ac829855590a4e77328b70409835c29837e6238ad5b74b55925afbc7539759ca523fe82dd5c55c772cc935b98fb9d2d6ccd4fde6e77858a179a74053e1b37cc9c17a147b44c7a180fc38927cd9232c2b3bed4db0acc2abe92233b16defc40baf92bbe0fad50ea34d2b5073b1fc613ebe96fc0630bf87224489283502ed816c042cab755f8c9d2dd07e16249bfcac1d42fa039f8915bb2c2d52f3bea8e0ee1e7fcea96512143f3d63c36ce80ad3006c6abd7e349d7a856537faf73c78a50fc7a58ee75ff06c6be435312688496f3cc42118a2ba83220c8f60385e0bea0929d0bc8ba88bbe92e8569349c34e0609b62cbbbb946e467b7e392ed2d633dd84e99f0a2d8abd85d94b49cd170f32ce25b94d944c9dc58d04aef9ca8604e7b403461397c02033b3c5ac9882637493af6c5daad9d681e02e41c9d193640c2222bba2179c5307918ca9388d6dcd2150f6bf04594b3fd267d807723263a9f0ae83350c03bf84e882cee282555e9a543dfcfce31f629142adc8b5f56b017bc256ceaeebe3bce6dd84604f4e8043c60a789d8950660d2ac865a5eeed28d8aff671973a07ddc8cb4a7f3842d0d33370a8c26cbbad4d250cce2cf6a81e8c9ee75a4f710bd14d72ba092c3b5ef3c86eb39fb7d067795eb4b97c0951528f769b3c1544395f5027e4290637003ee503c2641c09c6c6e19e4d5b273c86de94796e3f1881f937a82accb6c1e335f75d5f09a5ca6a0ad0898047b5e91a228ee82c00aaea6873d4ce0861d9445e683d1a79201b5d10be3d259c45bda143d93876e994f7d618d5445a7950c510201d458ee143aa2a1c85d788de9538425b6b75edbef2f166a1910f7b3805ced828c0e356e965ee193146b9f8a53ba5a87257852dd8e7b9961b919355ad71a17a6f838d116d98cbb07be58881c2b090e3c46bd8a7effaea075d5951061a28883e44aa6d8f6d241142724aba663218b619fa2cfbedbaf6672216b131c75ddfe1ecc902044c6bb8ef5a0b4cd34990e36fc139ebc280385296e9a1a552d47e8a602edc95ef7f60f5b261b041e57d9321e7c9904dbc6b1255b622c5e9b4e4606cf7c03950c51bf73cda282355faa413e74bea5e5ebb5c945a01e2431019982e0f2e14d9868e731e5e263334d8b098ef200493c88174cc7bb17e274819e70ee227ed495fd5c28e0a335846dc228b711534e534569b9b7fbdb419dd07a06e77920c1ff6c735b6bfbad6012334c64a5d0f85a393652d6edc207069d5cd348dcc8f665bd85b37031db03b5b4c4588ef3e2e84f382a8b14c5fa5d2a4edd337879f1d16b722706da36614bd1b3bfd1d5eaa5259fbef164c1d9ff31615c0c5a857be26b60138e7dcae514c554aa41f12945029ef228fb47ef8704ee67a4529ba38b70676c1f321893a43c4fe5c0f872bf6b8e2a853c6d4cb8217580feb23f8eb48c3465f6b6602d21e909f83fe788f819702096c3b23b7e26e51bade962a992e264716cef07725bc5283ca48f9b9b2aa89784de88c38662c16040e5b746b6d9329d77c19273c930767778fdfce88ee0efa865c3d4e2acf3e693cfd494cd94013cbb53dcbf5c9694ef8fb89627e84e7d82aefbe47f53919561ee3bf65c16a97099553bfe9ca02fca247e8fd3cce7a940b5a29124d079fb293aeedb2a71174218ae2688ff494139fee402ea34ffcc172aabf65345659138de65a62580524bdcc0c9997b0203123affaa20605e23046077fa0fcf9cb5e748f6d0a863905eb6635b26742c2cb699212429065081997f62ab13bfb679659855ffa302a3dae05ba68d83110e16ae69870415aef3b6a525e6db2527bdcfc786592fec0d88606a6142ac048f5e1ea580525bb2fda09a939a2776d78b72b868f2a63e83d8ad661319b5f047f0803ad1669cd55ab77f9c0bc25ac5211bcf864e3b889507279cc46019471a2f35bf354fe887a945a6178d8726f2e3ab8de9d88b6542825aa8c568b45c294017159ffed5ccec0a7c93c42e698f54247a28573c37c9383706fc29a7c6316937c1a3c51009666757522b9210aeeee97adfbf89c7428ebae3b6dfde3bd2c0462e1225271534c204843a515395a2959841769a81c54b497501ed7c3776fb8fe7b944c2f6255a4baac938abac2955231ee24f196c6b54d12435fa23538ad076a2db25059121fb8caf3036045e759ea03d7c783836adc59fde48de14d06512a1806c4717832dd346042404f0d2dd0aac527bf1172e404790d841d2b7dc084ef625caf247e2dec7ab1b39d2c01893270b9c655bd61b05673eb344f6d0486e5e4b410f516571b64cae58ba7e011fdcabf901508a4fcc72e77b56be9e5143f0f020b9e5582ceac8e00dc117aa975d55044f76d1e79be418c25c3fbd7acd897b65106886b1e1f9f9bff109aeae7ffa2680451258e02767aa02a65a5deb120026de32e02626339c4923e9239a737f660614114dd8cd1e09a668d65766627657afac4c1621a6a2892e756b03a9806d40045e94c0ad5be5e7c6af4574e5b813c61d40974bbd18d818a5bc9ed00838d4585356e7a15ed1884af6b3246b04e66b94b0c17b70f705e33a39c0008f78794e63037973297a6c16b449052c4cd4cc788131937e0788f02d43e4e978b4f14833497587a1a1397aa8b158771d9abe4c76ab08fedd991f7669fcb97eee32d8f3fa96ed94451676270f25394ca5ce44b806617a3dfe9515efe86e620349d719bc3efbe78b27978160cad553cb963c54f047fd607eba4fcec267c6b58f5f219a74ea69954dbfe599a281783825389600c64b445a3fc75f418e9f5ca7829a5f9ff4029f874dd1269ba4001c27be766b7e4348e81a524d5154ee6d0cdf7354d0c40a3694c13ef0608049fdeec0e7ad921aa5ba050645c7dc82411105f12d069cc7014a2474fc2a021b6c929f6b34677296e817002b139d05b373f89d8fb8b7a8956639f1375659bce79197a8758345126ce4a0b56e83613c7e3d624c0e84bff5858068a1d654a25046926c8898b60dbebf14abbe19ec2a8cc63f1bcabce5265dd0c29afc39b92c4a0147bd07c2494d3710fdd46fa99f14a16d8daa3d088f40c9d3359ad37c26807a963d0e28b602eb8bb9d188473addb0e299c953a99d0ed6d01f1518eb247c0b2f9ba4dd6d3de442a4286abd58c7d08ecf46ff1447c4e67de31401e617f0434127e9915b124422e958fdf138039fb807b67eb89ed8fc257f9e0605909dec69d91f38f0d285df3ba3124b9193b209e19787227243e7aec1e14c409a9fd0954b6820bcb9b8bb08a7875487d9117102a7ec50285f08ebc3445801f6065e1d243c6175d2c18d9f0656002e1b1bcdd99d836c7b539a1ab62de096ee92da34b513f3440e88542528eb53f995ad995685e27d905f791eab1245279605f7837cff05019d895e4e7a028dd1402b343c575bbdb52a135fe481f6d7c2d8c5a06f60d7d92cb89f1d8431e33234cc15965bc6cc76ea2e096ab370e3022ec7dcc3ed1b0dcedc7eea6d328aac20baa9951c85b011d9f2051aa6059196dc1c271b9812f1aaed0cf704e656244d846ab4c2ab2a636045fee86707c20fcd258df9f3053ced1f9eb75f9927499df2a48261c48e5df3010ca6a997d190b788053e5d3d8725fb38ffb9c72129a3fa7c0cd767e2128bdeea105caaa9bf5c16504da30727489a7898ced3de77f4386b209a49afd6453eee687f619dc6543fde6d126b26d43841b08f088df3fcc55188ebadcb72a1945cef3afadbcfd64fa96a2655f1f0c096e7bdcb821c8fbbcc0bbe0646bcaa2cfe0e939812a20740fd46ec09bb3589e5817e2d9ea2176211a4f79d077a1cd545ba5124cf5b4a5926cc7fc04077f22a51960efdad11194a74abd74c19a91fdd76f16fab34e9f9594519790d379147187a57b781f9daf64c1662530d63e0295348097c829b4a01ae648290833cccc53487f835fdef96d6697ea415fab5c00109a3c48d7427fd4fa9e9627af32af17b6270e99739177d17c6454cbf0df57c47d285a8448eb3097e891e203debbf528aca7bf40893df3d6184844b0a7e6a833"})
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000014c0), 0x4)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r1)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000017c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)={0x1e8, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0xffff}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x239}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x41c3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf0}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) (async)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000017c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)={0x1e8, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0xffff}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x239}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x41c3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf0}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840)
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000001800)={0x5})
ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000001840))
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000001880)={'vlan0\x00', 0x7})
ioctl$SNDCTL_TMR_METRONOME(r2, 0x40045407)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={r2, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000001a40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={r2, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000001a40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000001cc0)={&(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000001cc0)={&(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5})
ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000001d00)=""/42)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil})
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001d80))
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000001dc0)={r1, 0x5, 0x1, r3}) (async)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000001dc0)={r1, 0x5, 0x1, r3})

2m46.192485825s ago: executing program 2 (id=666):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000012000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001000000000000000000dd41ad085abb53c29a02c6173cee85ff00003e0000000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)

2m46.132791181s ago: executing program 2 (id=667):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
r4 = syz_clone(0x80080011, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x100)
r5 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000700000006000000090000", @ANYRES32, @ANYBLOB], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
fsopen(&(0x7f0000000240)='nfs4\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000180)='environ\x00')
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x38}, 0x2}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r6)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="080028bd7000ffdbdf250100000014000100fe80000000000000000000000000003c0500060003000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004080}, 0x44801)

2m44.703504862s ago: executing program 2 (id=678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
fcntl$lock(r0, 0x6, 0x0)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xc000)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000180)={0x1, r6, 0x1285e00, 0xd, 0x7fff, 0x7})
ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0x2a, '\x00', @data=0x4}]})
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9})
io_setup(0x9, &(0x7f00000016c0))
io_setup(0x81, &(0x7f0000001700))
io_setup(0x80, &(0x7f0000001940))
io_setup(0x2, &(0x7f0000001980))
io_setup(0xd6, &(0x7f0000001a80))
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000140)={0x14})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f0000001740)=ANY=[@ANYBLOB="08000800000400008b000500ff07456f00c800660000401190780a010102ac1414194e204e2300b4907804000000970600000800000000000000979d6dbf4aea24ee8f47670c0382395a74236ceef54ff96014db3857e803e8b3b742d7ec5cdcb781cfd411430292339b565b60cee292bf76438bdd9863663ebfc68c70cdfafb908fcaeb60cf959bdfbc8a569f220927aa53f8cb81d18a8c5c2957687802d33a90980afa9af589fafd68b029bcc2d1b5affc95935f78c3eb6bdbcb63edafbe28cd8d1a842b7900ddffffffffffffff00000000000000"], 0xd6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="600100001036425b7e314f160001000000000000000000ac14144400000000001b7500000000000a0000200000000080935cf227e044f764c71301d4593dc97b0c9772a276141158ca215a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020057000000000000001c001700000000002abd70000000000000000000000000000000000005002100020000004c001400686d6163287368613235362900"/280], 0x160}}, 0x4004004)
r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08ff07bd7000fcdbd725030000000800020001000000080004007f0000010c000300f0ff0000000000ab5e0006000300000041bc7039e4bc4913baaaaf8df10f2022625f69ff3104cc274ed6bdb85b024e776f3701c98794b619def5e86f9bf8eb8ae1d7b8d285bf03dd11149191507ee48484c5dc4eecbe3dee"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x1e90463685971422)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x11)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400"], 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000001c0)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)

2m43.001841976s ago: executing program 2 (id=692):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000026000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r4, &(0x7f0000000280)='0', 0x1) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) (async)
r7 = fcntl$dupfd(r5, 0x0, r6)
ioctl$TCFLSH(r7, 0x400455c8, 0x1)
ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfffffffffffffefc}) (async)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, 0x0}) (async)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
fsetxattr$security_ima(r8, &(0x7f0000000080), &(0x7f00000001c0)=@v2={0x3, 0x1, 0xe, 0x2, 0x47, "e7736e311f1b6eac467b4ece29e5b61196ebf3ed1d9ea670d689252f4489bb185a04fb63b7882801078bfcda756c795823388d459496bfc222658b64e4ac7318419506daf5d9a1"}, 0x50, 0x3)

2m42.871528448s ago: executing program 2 (id=693):
syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5)
close(r3)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r2, @ANYBLOB="fc2dc29ce5ed541500070040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r0, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80006}, 0xc)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xf, 0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}]}}]}, 0xfffffffffffffd8c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f00000000c0)=0x58, 0x80000000000005)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50)

2m27.826798466s ago: executing program 33 (id=693):
syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5)
close(r3)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r2, @ANYBLOB="fc2dc29ce5ed541500070040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r0, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80006}, 0xc)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xf, 0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}]}}]}, 0xfffffffffffffd8c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f00000000c0)=0x58, 0x80000000000005)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50)

2m20.993373711s ago: executing program 1 (id=924):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x5, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x8b0a, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x3ff, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0xffffffff, 0x2e6bf783, 0x80000001, 0x5, 0x8, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x81, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x0, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="a6c934d6438b595a0b28000000", @ANYRES16=r2, @ANYBLOB="010000000100fddbdf250800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100000001000000"], 0x28}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x34}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) (async)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) (async)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}})
r9 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000580)=<r11=>0x0, &(0x7f0000000180)=<r12=>0x0)
syz_io_uring_submit(r10, r11, r12, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r9, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r9}}) (async)
syz_io_uring_submit(r10, r11, r12, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r9, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r9}})
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) (async)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0)
syz_ublk_setup_io_uring(0x5488, &(0x7f0000000180)={0x0, 0x9fa6, 0x4000, 0x3, 0x27f, 0x0, r4}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=<r13=>0x0)
r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
r15 = getpgid(0x0)
syz_ublk_add_dev(r4, r6, r11, r13, &(0x7f0000000380)={0x2e, 0x20, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, r14, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x3, 0xfcd, 0x0, 0x0, 0x1000, 0xffffffff, r15, 0x0, 0x100}}}, &(0x7f0000000400))
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x1, r4, 0x1}) (async)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x1, r4, 0x1})
futex(0x0, 0x8, 0x801, 0x0, 0x0, 0xfffffffd)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) (async)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)="012567f5ae804c28d1445b3a804638662417d8876818239887b926662669fad253c92bcc0401da42b7886b79bdeb63722f7e15ebc986e147b7ab73a13d675c8fa27d191b2d38ad45365c5132de00ef23980586e22c38ba4eea08d2a4fb487ea04a4c88e4fcf4d0bb92eff738781cc9cd9322fceb99e10d6e8641ba3d43d788bfeff59b985971b7faab6c132b7722b627e7e23296f5e5ece611228cffb240c2880f0f949e069373220346137a6cd1ac8d5d46e9db711784c13321cfd0dfbcd8429e04f1bf56e20978527ca95ad96349bd9500b3c7", 0xd4, 0x7)

2m20.701609373s ago: executing program 1 (id=930):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0xca}]}, 0x18}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYBLOB="ef00000000000000140012"], 0x4c}, 0x1, 0x0, 0x0, 0x24000880}, 0x8010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002dc0)=[{&(0x7f00000019c0)={0x0, &(0x7f0000001980)="c6cf8a", 0x0, 0x3}, &(0x7f0000001a00)="03ab92148f60480fd30810108c67d3267c9931e099ed7c930fc8c251555f0c7ccf3d9424a53dad869a", 0x1, 0x29}], 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50)

2m20.620563628s ago: executing program 1 (id=931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYBLOB="e9c932c379aaf2e98d5aa4e4cea1e5e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x4088004)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', <r2=>0x0, 0x10, 0x40, 0x87, 0x7ff, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x66, 0x0, 0x8b, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x6, [{@broadcast, 0x8}, {@broadcast, 0x2}, {@private=0xa010102, 0x9}]}, @rr={0x7, 0x13, 0x55, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101]}, @generic={0x83, 0xa, "8914ab69ebd50d1a"}, @rr={0x7, 0xf, 0xe, [@empty, @multicast2, @remote]}]}}}}})
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000340)={r2, 0x1, 0x6, @local}, 0x10)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f00000008c0)='./mnt\x00', &(0x7f0000001600)='ceph\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
r5 = dup(r3)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3)
syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x3d, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x2, 0x761, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4d}}}, &(0x7f0000000440)=<r6=>0x0)
syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000500)={0x0, 0x23e5, 0x1, 0x3, 0x20a, 0x0, r5}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f22, 0x8, 0x2, 0x80027f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x228c, 0x20, 0x0, 0xb3, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ed3, 0x4000, 0x3, 0x309, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8aa3, 0x1000, 0x3, 0x117, 0x0, r5}}], 0x4, &(0x7f0000003080)={0x2e, 0x6, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3ff}, 0x0, 0x0, '\x00', {0x2, 0x45a, 0x0, &(0x7f0000002080)=@buf_512="b86028261495e26deffba69871a63f548dd544e7afb66b7ea3e036a49241b32148e6e7cfe3c85f3f71c785d0397ec351c6b0be6cf96e4043c85b0ccaed768fd93d8e6cf365b8ac15bc3e33e4b1eaa644aa303fc5aa961b25fc7e3df04d2ac88aa463120348fe9e3a40073880ec2801642e9b738168975fa3bbe51d5b145db92ace2886933082232db736bbac804c589256e96fda10b6c74884cab2b78df600857992d974b4ce32e2c93f9d07e662534c83b84840881f348aaacb509a274d4bc618521c4fb8cc2b2ef5ef1638efc7bec5299b0fbf00182f3b2b11475eb5e0ae627b849726e10aa855cf265cf99e9ec4a242c7272201fd0348311ca437e1cea09acb4f99511dd414ac8df93dc5519669e6dc5ad404f0ccf1d29d521644d04b410b1fcb1563c3660a7ccf8b682f6e83d38c7f895c37b7c8b94ea02e10b25e4a73d113d6e3da3c17d426898d73ca4ad613dce2d52752978e2e0ed6af48abd886f6a4f6690471ae7597916ad8bd0c33613e8bac449e32a9b335afc1e5d52990535f103fe68a322677fa7d9b17a44fc27d38ab545afe6f0e7ba3eee4fd5f91a65b0cb4c5012d9d09ddd9890eb68e79155d1ebd6697621f55a962e0a1a89be927bb093635323827936d6466a5e9b1980dc2a728867dd12805425a2310e3168395358c726859581bc9461e4adeb4a107e8d8a62617ac8fe82ff9645c713acd83a009b7cc"}}, &(0x7f0000003100))
syz_io_uring_setup(0x2c64, &(0x7f0000003140)={0x0, 0x66d3, 0x400, 0x0, 0xc1, 0x0, r5}, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240))
syz_ublk_setup_queues(r5, r6, &(0x7f0000000940)={0x0, 0xb9a1, 0x1000, 0x5, 0x177, 0x0, r5}, &(0x7f0000003280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1276, 0x1, 0x1, 0x264}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x40, 0x1, 0x66, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a09, 0x8000, 0x0, 0xa5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa685, 0x2000, 0x0, 0x1b2, 0x0, r5}}], 0x4, &(0x7f0000000800)={0x2e, 0x2, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x2, 0x63a, 0x0, &(0x7f0000003500)=@buf_max_buf="e2922be051e337a30288a5f41d76d185097e22d596cf8bfc5d1ea49c510bb995497635656d92ff68856cb15ce99fc09acfdd5556ea9711b8dbc2cc673b14b2d74f5f563014c1c653416f9f9b3a613cb999c873bff73fd632c978be38b68b7ece552136f1de5ead8d390c107abc88ab080e417196000c858e71c5de938d12edb512738e6a03546cef3fb69e85d124d1cfe2fd86b51d8373f953aef67d9f07d02d099eebe37665999128cb8f625b5c3c2b7237fb8018ead1f411064045b6e14fc76dd91ea306c4b8530a4ca051d928881b2887a5b75f66e8a2545e3b7e31f62228cfd2833dbec075d26abd4eadb280e58bba60ba7b3ec6f44b4970f40ec08af4b186a67cca5f0d6688e463903e99c5ed39960f9fa73fb30859ef195f59456c43bc8c2c4a9243956d78a8285f5ec28bc3e486feeaba1396bc0de5be33b288b02fcf9d9e7b000de06b8eb80785c9ee82aa2e6d0bb77fdb19402fe0abc63482054d0d37ba7429a488a1931c517433dccb4bb1f28f1f69b3c220315ff5a2fc4838ef822ad7c2d828d0aa88832c4381aa4e3e10f6ddfd2e27487e0257479756778b6327a070a7e9510a0a73521aba246bf9780c3a39e8be78e8883515e68b75571f375d0c5fc525dad03e326b3fd0c3220227687b19ab02f634be9ca44029746bcc861d40931abbe3d11a60cf0d94214ba54b31058a52a3d325d855dfb74dd0b6014bad24cee972a94221bec4be0ee49a70e6d27ebeb0a2148bf3fcc7782d07a28adf708d16ba120c534df76149f2c7e07b37db75061581f08378553104d725cf557883c49f8a7f695c96082296a99bc37b09dcb3e787a5eed1853c7768b3289e21568cc099eb086312bc43b8859fe4aa538a578c5a8f0bf83084feb1c1eec53f9560942828f48cfcb32aa69d10518b9b09d2be5f7f2ead703a89854b50937e965d268e6f4c0d11efee9bbf72f6e3d1b8b444fcef132f9e28273cd4ec105371b0eac7cd2d712bc71d2576c241266148fd0328459f7ef6c531605eb0f849d25ed50fb739db0a84af566224fd5243c6fa983c9b691ac748383e57cb6e0ec68a34281bd355cff06dc8086db600206e19a82df22cbde5204f025d7b3733c40504c4c6e93854ab9c61b666ccdffd4868ca06302aa508f832ce1978f4f5a2559dc823be02a407adf844d3426555e3137fb28aa6b5e033e47f1bc9465da8e07817a46a26b82d8f832fb2e6b255596a9f07a74dee8c5bed9b60402abb6c6bac5d17dee550ee101784d6edd3a066a82c27111fb150027ae79313e30823b9c01065d0c2da3bcbd96f5ddb803b8ddbc8418cd1198201408b939927cce82b301e7c6b382b66d706c17cb7643dd326c9bb582660432f3cfb9bba5c4cdadf893d56d5b7e422aa80ed85521d62571e96dbe9e2dc3bcb7dad1420ad17d938abf7d4657c45ea993e86fc643cd9c2b0994248cb1d89c8eaf62da0270d8fb8afe5b091a3cce7ace371c86450391daa4529d39bada27295c826c6ed52b46e579e58eb2468833e72dd35d2b647e69b12edb2eb9354c4b0eabe13c80933a992ff9b17f91aba359b6150688bf1620402cdf1c50c681c6d9e87fc3fdb0d8aab4e34d1c671a55121e2cd0e49d7cefce80455724c7d0963cdf54fdfbf6188ca851e9958dd5719bcda31ff36ee06c9863f871d934c65b9c1e3a60f6b865544a88c57e4806f0c131740aa40f9b8a358cc4c2d84302ffae874d6010b1cd6ba625d4ed7476f3604abc86d1a152682c59d90c3e251d9d692b4e4f4e6096fbeb453abe5d24b0fc7581f6135326fba61dad3a290fa24eb28999394d77329bc52f2cbf953500961d9c17e1db72ddc3a9ae0f46e557eba80cc0b2654e5f249f4e174f0aaefb81470778a314ba6eb45f39e367e272ebef206f4ba1022bbc6056d76726e2062aee34a2c09b601638a3b1fe62f9b5f039a00c7a485af1bdaa3b5097d5bb8ae482551d04e40439be073a34bc22813613647afea389350a39a8aacd33e747dd6f41bd26feb4072acb96abd739dc2058f777e626d9a43adfccf5ae389dda4e7fc6abea3e6d9aa0e9a3afa4b79923f82d42bbc09ca32c4667db747528de844ff4668ac6dafeb9b6694d2ede0f16dc4cb7ae124c41b0f9cacd8ef7f39c67685408423d6c65afc8f52c54ac4a8e3ab898dc209c052869ca22161ee064cf1bca166673cb7c60d1658b80f00109e8f9359b447b0b78ddd88a37dd74318710c76967bafcba2599a090a62fb0cc915f375cef942c7510f330652731427e2b7c2a0b2572c3f07f69efec9208d68a66043f372d6aafa245e7d8c74d4d38a2b75314c8757a8eebc49e57836287c02868726d1e2abf1ccf36a7ba3eaeee50e763cca12b07bc7d08de507d65dfcd4e20c68e2a6f5bc64710609845a7e95375ca328d13ba7f6af2177197a66b5fde29731ab4c14ce07ebfe38b068f242c77c39c1f78a559fca2d225f8dd03cd816886085569b65b640e84abe1fba2cf5ff348a21cda052f58f50987b7da27228588709eeb628cc400b800b416a13bfb651366b59302f38f0311a1aed40c193afba620c2e000595146eb294c0e7f608fecd8e110b2c744af6b7031ff827c3e1336bebf1583ef4d113273f921d7b2f2cbeef56e11539d3a8c87ade141260d68c26b3a847979d189d7455e72663f21e38925df8009162b336be6b2afa0385373f0b928c016666101141f6ac27a93c16f19f8a0d6f4b7b699bc28c9aa9e063e105d53594d05369da0191d8a985c294dac2e67fb89ae779de5414151e125550358e1080f8c298c20f00d706fa49213fbeff16d0d8864c3a29a7cd7d4f105008fea935dda7efdc0dbab368010075d24ac5638d7cb0120c58950fe28c34031d2d0afb9fa1b89e48946a62578406cffae818e51f2528e1ed7893ccb33c763eaf2743bdcd508c31b7d3c36ebbc55dd623b77386f92d72a95ebce849955ad65f026fd3926e939f7bf2fc993915709928e31336608e0b5b6a2b1fb57912984b16587778bf7f83391b8af8e45d358b839f6698fd79ad88a1af948959ba04db919fed710977f0a15e089f21f60ceb061ce288e10ddbbde2d6a47272dca78df0c14e80434620539b96d7843ff038950453ecb9136a3479e95d7787160a8c58bd17b07c6093a3e373e85efb2a6d512bbf104371d3ddaa63e30a2437c90f975780f5b69307b7f42892d35f0d730c0b52be49427bcbabe9981aeb1d2ba6206b2e30d18e5bda202360615ebd7aeffe8bcb47fe3b0ca2888990d6fe5cc719d0115907a67de8754fcde301bd598d398d61d39f3baeee18198684498a4d2842286238e9e7bd64f3f44b9c818df700fa219e8a7da5957ebc9cc991a31dc149924f8fc8660914a586865fb815154a2054ebf58592a48c806b372f11b5ef934cba31d48e4fa571df282cad341094d0af991f6e28b6705187e37908447eb36a35146becc3ee2514094bc24146a8d42ee36744f0cfcd82decab070050fa97dab1058e7b9b37418664c8f9f91e82230f414a0b37ee240e47ba39a992501dc737ac0ae612bbc56ba14c9a913e83cefe4718a48db518d04a79ef2a9f8567e36021fda770fce98ed682aa55dd1801f2deb3f8705a7b143d7b69422359d06a319fc4536594413a1ea59548c413098098898961fd71aa8185350c7bda674659ebc870a94b6e15ade23b08bb6edc14f642c39665be3f59063395eba072a5781c84d949a50960a042bbf80c2c389b73b6b4a426556b3f5a713cf3504fdbd6ca584e1f703c2b3219f32fcd153b4c42905809de6a7660f29ec99eb26c82953ae26daa6b9f38c97e3b4c9ff1672c15b75e89be4faa567cf4e805d5c16082740ac514da213ff4e99e156881ae3da56436fef8849c407a4f5b51d4437137fff4a094d198ad1c57e6d5bb85a73dfd1ecad1189c760e5139bb7ba4c31d93842f5d784d1ca129457e467ef68414e5228e239ca4cf2150d875ecbb0a4d3ebd9223e10914a697ca473559292006f5a8832f4b5d9807a8b77f770a3aa6fd2b12dcb2869eb937c13add0602e6e72290d0ae4cf759b9cf8711b957da1c2331928652c5762d75a6a4f4a640d7b4e24c134c7b994284db7e3260a0f894e21d54b29fa8d644b12481269a6097e27c54eaeba4d1e794c8b4fa7413b843c5015f53f6eabbf6bce4aae4e0aeb0fe98e7162d581a98abc1d9f4ba7689ebaedae366d316e95952f5d25078bb9a54338b65e16e66771bc8fada0646762ec3453398f66e92da764458d7281a578dc10c2d5c9446deaa8f3a82bf73d5dae5a815e9ddc846fcac567b565b556077aca1a2707a47e3a56ed428eb818cb7a9e4178be2857be36c42d1dd8523ed9f56fc11ddf46856318eb5126b2dea17a6d9a71b8140910744054d62ccd8edadb5dee0538a5d1cf67c58cc5f7743c512883618537183b80fc76d1acfd8dc8cc19d2fb90f60d8c6f5a2181530b8928e2f687558fd26ab42d91fc77c8eaef322ef0d1df6c4068cd61c2c0a57e86ce95e31bd0aa00c5e199d0dda2ff820ac4eeb2290c2f4ccf3a1daaf318effa62ad2d1daeda887146f2df1fd49b343cb0b4139e67983c03ee50f7b3612db231581ee6999051cd1efcf62d5e72e61c6b6e79fb5324465e66afe774d9c263ba805c296e92f21e8c20431febc2633093b3d1465751d2e317a1e7194251a684853c86c32b4d513b022031ea758701da515f15833a09656d8d9e8f119f7fe0d9199f83604842c623ba7665129564c99b2c6b5071bb2cba043f5fef266fc16ae72026c2d9df17a13b4201a1ef601e0040fecfbbcef80d1c3b17b8699e07a4c14ac9f98e365714be2ee082efc2bd314345fba4911b1b734c722bc8e564fcb49cec84aabd9fc8b2a97b48d6dde4123d3474ee70a6f0ba29602f7e7b60f4500bf9eaace3517f608bab9a27c5c970fc51c31c7e1c51c4848787fe25ec7ec14004e10962edd1d801cb818ea24b8c3c72cdfe8b273f96a4302eabfaf8d79d23bc7c0c2c333ae5ba044bfb6681e3a3fffc6a18310e7aec2a731de1fd099b09d2914d97e5d91d6feee5a2f93a81d28f954fb08315191a6be4e832d90ae14558e8498c6e684c0deec3239f70c85ac1f2c9a006690d817ee410d2c9e83f00ca393bdcdad1b4431f147b68f88a695ec0be8c02f33035ad87db278e361e1c055d28a893de59572e405d73e6c387bb7c8f7792f6c6da8678e6d1e17431092deffe623647214a2e97225670bd95e0e7e4e3ddee7471f5f1c2b0784b7aa40f9781817caeb37903c03ae5e5e341e3adc1b4b6939c744c81cb96aa71194b795ea62b1ed256e05673456f89a57aa77a0edd8ef75733efd10059d24cdd0307f19c60fae3b45a9e358da40aae0e2c884cff56fabeb836f3991f0cae3effd36d2e572ab2511ec1aaf082082b7027194822f7696e508ee9f265e9cb228ad1838d4d3b353d6f228748b1dd35467239527d7884a629dd3c8646bb728ad4ba87e91748e5cf2f0aa967a36269238ddda753a2c5e7745f43ea25fd400b646715666bcd3bdca20b46d900dea977b672334b0675e071213c36479e3095b9aab643c3977d4c31155a0ca11612d6a0f425fb471a243b54c4a45511f89a11bc769ae893119c78992047d30a4cb0df591517848957631cdf52982271ddcdb4ba018ff5b3ddf05e1ec47a1d549b4036974bc425e0c92e09a83e281be09087239c6ee901a5c1edf4ed3aa6735b54e88bbe850390eca6b6b06de537d7c8c798d2a97c15b19ec955e87b7dd15bb20842ed84ccef00be5f5f18c87ef07cc21a126d0c01247d34"}}, &(0x7f0000004580))
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x47, 0x1, 0x2, 0xc, 0x6b, 0x8}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000000)

2m20.619517294s ago: executing program 1 (id=933):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0})
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x18c00, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1})
write(r1, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c", 0x21)
ioctl(r1, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001")

2m20.562640789s ago: executing program 1 (id=934):
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0x0, 0x0, <r0=>0x0]})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0xff, 0x400000)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r0, 0xb0b0b0b0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x800}}, './file0\x00'})
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000200))
socketpair(0x18, 0x4, 0x2, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x38, 0x20, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) (async)
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000380)=',!@\x00') (async)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000003c0)=0x1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x400, 0x7, 0x7, {{}, {}, {0x14, 0x19, {0x1, 0x0, 0x3, 0x20}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x84001, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, '/dev/dri/card#\x00'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0xa1) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r7, 0x22, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfb, 0xa}}}}, [""]}, 0x28}}, 0x400c000) (async)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000840)=0x4) (async)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000880)={0x2, r2}) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb4, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\xcd+'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3ff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008100}, 0x4080) (async, rerun: 64)
sync_file_range(r1, 0x9628, 0x5, 0x6) (async, rerun: 64)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000a80)={0x7ff, 0x9, {<r10=>0xffffffffffffffff}, {0xee01}, 0xfffffffffffff9e5, 0x88b}) (async)
lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
sendmsg$nl_generic(r4, &(0x7f0000001200)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000b80)={0x630, 0x12, 0x8, 0x70bd27, 0x25dfdbff, {0x1}, [@nested={0x1a9, 0x42, 0x0, 0x1, [@nested={0x4, 0xd}, @typed={0x13, 0xe8, 0x0, 0x0, @str='/dev/dri/card#\x00'}, @typed={0x8, 0x24, 0x0, 0x0, @pid=r10}, @typed={0x8, 0xd3, 0x0, 0x0, @uid=r11}, @generic="1bfaec30c13065cb428375e63b704c8b69b0e66f0b3762c49ce349a255c02ddd99f7e622aae867ff89c3cb613cf6cbb6fff2e1e9a6b839a89f9d0c12f484e64ab2c497b113582ab9d71c7b065dc93df2718cad7425b68f785fca3f6bd0582bdf56fdb07bf08c87fd7d5d97c7cb9f339a2872a0765366b7154d503a20fbed16405fe382ee66d0fbbc7bbf4225a751c1b6d173895925c32736fb9581e5b45a728664001e", @nested={0x4, 0x4e}, @generic="6aa639b1419efacc66a29de526cd9d4a803ce47069bb14a0c2ac93b09efde26680b11aa063cebac66c6540bf9dbd222783a236c36647bb727be270c574dad9821182e8915cf39304b30d6af870d4cddb63ddc69c1c1a397b7facebf688175adc46dd3907e93d9cac6b9959ffc63a34ab2fb20505a9e2f35cfd4aa0c96eed34278f34130a78c1191f44c7a8e2e64acf7f62ca259bbb61af3b7b99d0c89ce19b4232a7f12136c5e46abf2bb8c2ce32da808b2b3e06aeaf", @generic="3fadf72a78f2c30be825871de25ee2cb4f181cd9c9c75768", @nested={0x4, 0x143}, @nested={0x4, 0x121}]}, @generic="0c7ab80ce73c24a316d683e9b1784a17a9", @generic="d241e1aa0a8f414ae2cc081c83c94fad1e", @nested={0x337, 0xc9, 0x0, 0x1, [@nested={0x4, 0x163}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}}, @generic="fcca1b3a818ef9e017d3b507f37d8feb81f850edb3ff69edce6096e0cf8dcc659c5d879cbf26fc83a45e9f55a20edda0091809a4bc159a2ef8455fcd7b7a45d46051af9a10d8736481bd388da96a99dcd536cd7aca43fe914ebc36a1b9ffa8843a1ab149585b18636c3da485b73d1ed7b2529c9126ee3412f4331abd4331729a4a3d1073843b62", @generic="57558cbaf10acf7084e1e7a697b05513a47fc6494a164f030f0adf3a401545a51caefd9d2ba528410b6344249fc21f3fec50429db9efddc276b5846e56425341dc57a01459f8919e5a3e5f08a1570dea1667318e2340a214d677e930bd1c32027d3dad6c0867a623b0c78377b2f6bc876f242577656264f4ca09da4e740797d54cde1b5e00fc70669dcc6649f537ac3d046c719ab6412d20f31c53559c4f139bfee1610b723dce5772275e6bb9ac21a14005d654297e04d8", @nested={0x4, 0x73}, @generic="093ba70c2216f24939d85b97bb9f2b522b39c8c9d12ed8aef7012289110497c545a155532dc805460feb849881cc947726c1efef48fcc04733d82e67c6ecf63678442d316d71cfdb2b50f0ec7ee4c1cefc83918aa325ae4e79969fe224e2906fe6d2b0b24a86780a08b127405fe1a48f4ddbee25752270dd629151196ddb6edcc09d8daacecec31b4d6ccc34a063883ae11573fd3c0aaf20be31d7b16ed05e366e16055373abeb81dd52974d57d1a181", @generic="90b8ec3f3828a519588030a030714aa1186e20b1d25eb8101f638897fe12cfb14847d6f68b401a794521ef3be9645f8fbbd39f508cb1b610e98767da4ac5f2da5f2a972f81ef5a8ff545e1df935921d7", @nested={0x4, 0x52}, @generic="57e28eb00fd3610d8e638b382f17d4238ab67cd197c57c579803589ed0fd62a229f11354c588ea6e8bda3b8fa935813fca94ab5e96ee407938fce24032cb96c9f3c84145e4335de9887e95e97d9da332500c54e724409d35cc409c238a15aa0083f90ba59edb774656acf89d007c419f777f4c645782d195ac0e5d9e4e0926feae012e0930a51e05c421c15b549209519954e4e2a16076d1d55678b71b748572250f32adeb01c7836f464af4fc46aa3253b4d5dc8b01586791699b1ee98f0d34c1569cdc76f326a09468bf78e29090b129efa850"]}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x3f, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="4dece092da38399ca68003882469b11613712349d7a5477f9e11fbd425ee7044f417a60ad26de7d81756796563110dcbba1451507f0d71aa8cae90b18fb8283959129ba4ccb4f0bbf6e1bf4d01f13c073dd515de348e1d0bb880441dc13ca9d76cfc223a2d951b41c0bede4434e9d0b7ff54b1c210ecaec7fcded7798c14273d318ec07c0cab8b5b00fd72fb54d4c64e532f1b72fde55cf50ff24306822950169bdb3c7a93311af615b3f9390827014736247095abb7f3b2eec4cf27ef844a219857c9d745baee92a980fe4509faa92d9bde8f255ff8c35ff2d535cb48b2c3a503ae66f95770377f6fdc9eb1d5e6829191cba9b290863a"]}, 0x630}, 0x1, 0x0, 0x0, 0x880}, 0x80) (async)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000012c0)={&(0x7f0000001240)=[0x0], &(0x7f0000001280)=[{}], r0, 0x0, '\x00', 0x1, 0x1})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001340), r9)
sendmsg$NLBL_MGMT_C_LISTDEF(r12, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x64, r13, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000050}, 0x80) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0x80002, 0x0) (async)
sendmsg$AUDIT_SET(r3, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, 0x3e9, 0x0, 0x70bd25, 0x25dfdbfe, {0x26, 0x0, 0x1, r10, 0x6, 0xcdf0, 0x7, 0x3, 0x0, 0x3}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)

2m20.328284453s ago: executing program 1 (id=936):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
r0 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0)
write(r7, &(0x7f0000000300)='1', 0x1)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9)
getsockname$packet(r9, &(0x7f0000000440)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
sendmmsg$inet(r8, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtclass={0x0, 0x28, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x17, 0xd}, {0xb, 0xffed}, {0x5}}, [@TCA_RATE={0x0, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_clsact, @TCA_RATE={0x0, 0x5, {0x4, 0x81}}, @TCA_RATE={0x0, 0x5, {0x7, 0x6}}, @tclass_kind_options=@c_mqprio]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)

2m4.830321908s ago: executing program 34 (id=936):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
r0 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0)
write(r7, &(0x7f0000000300)='1', 0x1)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9)
getsockname$packet(r9, &(0x7f0000000440)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
sendmmsg$inet(r8, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtclass={0x0, 0x28, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x17, 0xd}, {0xb, 0xffed}, {0x5}}, [@TCA_RATE={0x0, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_clsact, @TCA_RATE={0x0, 0x5, {0x4, 0x81}}, @TCA_RATE={0x0, 0x5, {0x7, 0x6}}, @tclass_kind_options=@c_mqprio]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)

6.910549759s ago: executing program 0 (id=2205):
r0 = syz_clone(0x91024100, &(0x7f0000000100)="887432cc9bf7ffffc2028586fafc30985b175efb50e92833f4db9c29f83cffe4e91cc1f1af76c79d1a31e9fc42af888d7f248371d4678dc2f00a5ceeab50d2ce1db62cca0300f6498ef240d3cec033f9d9143beb3ceb20f300ced410111862dd0e06f14422ddabe93fb826ffe0cf473af1d377c3abd6727849d33d9b95e96c5b324da7410420b1851500d0082868c6442033d62fda910475d52463c7f93bee9088", 0xa1, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYRES16=r0], 0x159c}}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2007)

6.838787456s ago: executing program 0 (id=2206):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0)

6.838465299s ago: executing program 0 (id=2207):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) (fail_nth: 1)

6.795001353s ago: executing program 0 (id=2208):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$inet(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x40002121, &(0x7f00000011c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

6.732444017s ago: executing program 0 (id=2210):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x104, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x28}}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x14014)

3.966434067s ago: executing program 0 (id=2216):
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()

2.016626398s ago: executing program 6 (id=2242):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000))
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
faccessat2(r3, &(0x7f0000000040)='\x00', 0x1, 0x1300)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0x2c}}, 0x8d0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newchain={0x2c, 0x64, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {0xfff2, 0xfff1}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.921526275s ago: executing program 6 (id=2244):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0xffffffffffffff8f, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCMGET(r4, 0x5415, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r7)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x8000)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={<r11=>r6, 0x7, 0x4, 0x1})
ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611)
r12 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r12, &(0x7f0000002400)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x39ff}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="14000000000000003e000000430000000100000000000000"], 0x18}}], 0x1, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r13=>0x0})
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x9, 0xf0, @vifc_lcl_ifindex=r13, @local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="80010000100013072dbd70000000000000000000000000000000000000000000fe8000000000000000000000000000aa4e2100000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x4400c0c0}, 0x40082)

1.599724777s ago: executing program 6 (id=2250):
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xa, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getchain={0x3c, 0x66, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xe}, {0x5, 0xfff2}, {0xc, 0xb}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x2}]}, 0x3c}}, 0x4048004)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20b0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044890)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7fffffff, 0x8, 0x6, 0x8, 0x80000000}, 0x5, 0x0, 0x8, 0x81, 0x8001, 0xf, 0x19, 0x4, 0x8, 0xd7, {0xf0000000, 0xffff, 0x8, 0x800, 0x1, 0x6}}}}]}, 0x78}}, 0x4000)
recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3}, 0xffb}, {{0x0, 0xffffffd9, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x10022, 0x0)
socket$netlink(0x10, 0x3, 0x9)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r8, 0x89ec, &(0x7f0000000340)={0xb5, 0x3})
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13)

680.447514ms ago: executing program 4 (id=2261):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x68}}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14)
timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500))
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000700)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000380))

680.17971ms ago: executing program 6 (id=2262):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x10)
socket$inet6(0xa, 0x80003, 0x6)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

619.720964ms ago: executing program 6 (id=2264):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0)

615.785305ms ago: executing program 4 (id=2265):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f00000000c0)=[{0x19, '\x00', @data=0x80000000, 0x7}, {0x12, '\x00', @data, 0x1f}]}) (async)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f00000000c0)=[{0x19, '\x00', @data=0x80000000, 0x7}, {0x12, '\x00', @data, 0x1f}]})

520.448165ms ago: executing program 6 (id=2266):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000640)={0x10, 0x30, 0xfa00, {&(0x7f0000000600)={<r1=>0xffffffffffffffff}, 0x4, {0xa, 0x4e21, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd621}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000680)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0), r1}}, 0x18)
syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0xfd, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x2, 0x6, 0x0, 0x40, {{0xb, 0x24, 0x6, 0x0, 0x0, "bca1c272ccb3"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x9d}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xfc, 0xb, 0x8}}}}}]}}]}}, 0x0) (async, rerun: 32)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000000780)=""/15, 0xf}, {&(0x7f00000007c0)=""/14, 0xe}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000000840)=""/26, 0x1a}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/234, 0xea}, {&(0x7f0000000a40)=""/206, 0xce}, {&(0x7f0000000b40)=""/200, 0xc8}], 0x9, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x10062) (async, rerun: 32)
mkdir(&(0x7f0000000300)='./bus\x00', 0x63) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xa8) (async, rerun: 64)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x4000) (async, rerun: 64)
r3 = getuid()
syz_usb_connect(0x4, 0x8a, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000207c11908b4049b007b6962f1d68955ffc2400102030109027800020600000809046d8000d625d7090904b387084d1ad70909050b00ff0306020e090580110004f2010107250100994bab0905080110007f080309050c00000204fa250725010c7661000905800300040900060905b3d8845f07fb04072501f805030009050300400008000409"], &(0x7f0000000500)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x7, 0x80, 0x1, 0x40, 0x25}, 0x49, &(0x7f0000000440)={0x5, 0xf, 0x49, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xb, 0xf, 0x2f, [0xff0000, 0xf, 0xff1f80, 0xc0, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0xd, 0xc7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x9, 0xfa, 0x7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x0, 0xa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0x2, 0x3600, 0x3}]}, 0x1, [{0x15, &(0x7f00000004c0)=@string={0x15, 0x3, "6b509f086d9118eb40b2be5febc220037b10ee"}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}, {@workdir={'workdir', 0x3d, './bus'}}], [{@uid_eq={'uid', 0x3d, r2}}, {@appraise_type}, {@euid_gt={'euid>', r3}}]})

519.949234ms ago: executing program 4 (id=2267):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$char_usb(r1, &(0x7f0000000600)="64e9", 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r2, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, 0x0, 0x30, 0x0, @val=@kprobe_multi=@syms={0x0, 0x2, &(0x7f0000000400)=[&(0x7f00000001c0)='\x00', &(0x7f0000000480)='\x96\x15U\xba\x05(O\xc1\r\xdc\xa5H\n^\xbb~\xe4\x1aj\x93\xddL\xf4\xa6\xb7\xca\x92\x162\x1c\xb3\x8b\a\xcb\xcf\xe1\xdd\x98O\xcc\b*\x1b\x1a6\xe5\xec(\x01\x00\x00\x00\xe0J|\xa1\"E)\x1eh\xe1\xfe\xb8\xc4>}WX\x8a\x9b\xdb\xa7\xe4\x97\xbc\xbb\xf9\xcd\x1f\x01\x96x\x88Y.\x8e\x16\\\xab\xc8\xfa\xf5\x15\v\n\xafH\xad@\x85kp'], 0x0, 0x81}}, 0x30)
write(r0, &(0x7f0000000080)='4', 0x1)

422.685041ms ago: executing program 5 (id=2269):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0)

352.291564ms ago: executing program 5 (id=2270):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x54, 0x2, r1, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004c08b7a6bc498a"], 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28)

352.105412ms ago: executing program 5 (id=2271):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x10)
socket$inet6(0xa, 0x80003, 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

271.957398ms ago: executing program 4 (id=2272):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804)
sendto$inet6(r1, &(0x7f0000000100)="8c", 0x1, 0x81, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0, 0x1}, 0x1c)
shutdown(r1, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002e0000000c0005000000000000000000060006000000000008000200", @ANYRES32=r3, @ANYBLOB="05002b"], 0x38}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002e0000000c0005000000000000000000060006000000000008000200", @ANYRES32=r3, @ANYBLOB="05002b"], 0x38}}, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x9}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x9}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/ports/1\x00', 0x200) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/ports/1\x00', 0x200)
sendto$packet(r0, &(0x7f0000000180)="fcf386515951b70b31aecd3a83157d9e62c69fc2d3f6f6d3d77b607d230d807fccd2206611517d185625aa82d578ea6d321dfac40eea49c296683db1a121ccb9aaf9e8cf6744401b8c5349080d581c25c19bc0b7a10462907f7ba7980c3b8a20287cdb29440563c681b358dcb5b72ed6f698ae12480b4859923ac1fd60922c4c9e13a4e4b1e789948f952ea1c5d6b848426641c9ffc261", 0x97, 0x20040000, &(0x7f0000000240)={0x11, 0x19, r5, 0x1, 0x35}, 0x14) (async)
sendto$packet(r0, &(0x7f0000000180)="fcf386515951b70b31aecd3a83157d9e62c69fc2d3f6f6d3d77b607d230d807fccd2206611517d185625aa82d578ea6d321dfac40eea49c296683db1a121ccb9aaf9e8cf6744401b8c5349080d581c25c19bc0b7a10462907f7ba7980c3b8a20287cdb29440563c681b358dcb5b72ed6f698ae12480b4859923ac1fd60922c4c9e13a4e4b1e789948f952ea1c5d6b848426641c9ffc261", 0x97, 0x20040000, &(0x7f0000000240)={0x11, 0x19, r5, 0x1, 0x35}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x42, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x8f}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7fff, 0x7, 0x1}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x98}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@mpls_getroute={0x68, 0x1a, 0x10, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x9, 0xfd, 0x1, 0x1, 0x2, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x10, r5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xab}, @RTA_OIF={0x8, 0x4, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x1, 0x4, r7}}, @RTA_MULTIPATH={0xc, 0x9, {0xfffd, 0x16, 0x5, r5}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8, 0x4, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010)

202.536002ms ago: executing program 5 (id=2273):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x10)
socket$inet6(0xa, 0x80003, 0x6)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

195.722454ms ago: executing program 4 (id=2274):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a3100000000140003800800014000000000080002400000000030000000160a0102000b000000000000010000000900020073797a31000000000900010073797a0380140000001000010000000000000000000000000a"], 0xb8}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd589, 0x80, 0x2, 0x1e1}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040), &(0x7f0000000180))
syz_io_uring_submit(r5, r3, r4, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x14, 0x33, 0x800, 0x70bd2b, 0x25dfdbfb, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x404c080)

104.391417ms ago: executing program 5 (id=2275):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{0x488, 0x0, 0x200}, {0x211, 0x0, 0x7fffffff}, {0xb6e, 0x0, 0x7}]})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x150}})

104.075256ms ago: executing program 4 (id=2276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r2, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f00000000c0)='./file0\x00', 0x10002, 0xa) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x10002, 0xa)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}}, 0x18)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x8000, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0880757df26bcd26fd0000059078ac1414ff0a01010086080000000201020000000074440c4b3c357436a186cd4ffdc81133360b656270592ae4fe96df7faf7965d9c252ce8c2eec0f686f8c0e0244c7487b26f8ce2e9004e365784afe", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00fffe90780000"], 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

0s ago: executing program 5 (id=2277):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000})
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000540)={0x2710, 0x3c0, 0x1c0, 0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='N', 0x1, 0x20004084, 0x0, 0xfffffffffffffe50)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x4}, 0x67be})
recvmmsg$unix(r3, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x36102, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r5, &(0x7f0000000240)="579a6b60dc790d393b944898bea5cbfd237ad5ad738d2f31cec2e99d02da32e6f0477567a2f465d7a55c6861fe0e0e296e61256b3d487f7138940b7e0989f3df87a97f5f1d81ffdc7b7d8b2486d0fd3eba066e34f33c26c3c9077100b6ba05ff6d15ce3262a13c7bd64fb1e0bc2eb253c73485dc042346c8d7aeb5571642ee7b616f84d321dfc2cbbbb3ee1cbf707855d2605da3b57b9998f8982910955488932aa10aa8f26d83609ced1299ebf4df8e06eae5151bb54d0cec6a782f1e07fd6ba11ecb538e8de1c369eed4", 0xcb)

kernel console output (not intermixed with test programs):

ssed to DLM device : 33
[  201.286520][T11718] 
[  201.286578][T11718] dlm: Unknown command passed to DLM device : 33
[  201.286578][T11718] 
[  201.326468][T11727] FAULT_INJECTION: forcing a failure.
[  201.326468][T11727] name failslab, interval 1, probability 0, space 0, times 0
[  201.326503][T11727] CPU: 2 UID: 0 PID: 11727 Comm: syz.5.1453 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  201.326552][T11727] Tainted: [L]=SOFTLOCKUP
[  201.326561][T11727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  201.326572][T11727] Call Trace:
[  201.326578][T11727]  <TASK>
[  201.326587][T11727]  dump_stack_lvl+0x100/0x190
[  201.326636][T11727]  should_fail_ex.cold+0x5/0xa
[  201.326662][T11727]  should_failslab+0xc2/0x120
[  201.326690][T11727]  kmem_cache_alloc_noprof+0x92/0x6a0
[  201.326711][T11727]  ? mntput_no_expire+0x21/0x220
[  201.326730][T11727]  ? alloc_empty_file+0x5b/0x1c0
[  201.326758][T11727]  alloc_empty_file+0x5b/0x1c0
[  201.326783][T11727]  dentry_open+0x46/0xd0
[  201.326805][T11727]  vfs_open_tree+0x852/0xae0
[  201.326829][T11727]  ? __pfx_vfs_open_tree+0x10/0x10
[  201.326859][T11727]  __x64_sys_open_tree+0xa3/0x150
[  201.326884][T11727]  do_syscall_64+0x123/0x790
[  201.326914][T11727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.326933][T11727] RIP: 0033:0x7f53f859e159
[  201.326967][T11727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.326983][T11727] RSP: 002b:00007f53f93cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  201.327004][T11727] RAX: ffffffffffffffda RBX: 00007f53f8825fa0 RCX: 00007f53f859e159
[  201.327016][T11727] RDX: 0000000000089901 RSI: 0000200000000180 RDI: 0000000000000006
[  201.327028][T11727] RBP: 00007f53f8635024 R08: 0000000000000000 R09: 0000000000000000
[  201.327042][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.327053][T11727] R13: 00007f53f8826038 R14: 00007f53f8825fa0 R15: 00007fff84911d28
[  201.327080][T11727]  </TASK>
[  201.327932][T11718] dummy0: entered allmulticast mode
[  201.478818][T11715] dummy0: left allmulticast mode
[  201.647179][T11749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.647194][T11749] IPv6: NLM_F_CREATE should be set when creating new route
[  201.647220][T11749] IPv6: NLM_F_CREATE should be set when creating new route
[  201.824595][T11760] bonding: bond0 is being deleted...
[  201.886106][T11760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.901119][T11760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.907225][T11760] bond0 (unregistering): Released all slaves
[  202.044335][T11763] fuse: fd is not a fuse device
[  202.153376][T11769] bridge0: port 3(bond0) entered blocking state
[  202.153788][T11769] bridge0: port 3(bond0) entered forwarding state
[  202.155750][T11769] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.455766][T11773] Bluetooth: hci0: unsupported parameter 5134
[  202.457261][T11773] Bluetooth: hci0: unsupported parameter 8192
[  202.457308][T11773] Bluetooth: hci0: unsupported parameter 5134
[  202.457336][T11773] Bluetooth: hci0: unsupported parameter 8192
[  202.458321][T11773] 9pnet_virtio: no channels available for device syz
[  202.731962][T11784] event trace: Could not enable event p
[  202.813157][T11797] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20003
[  202.867178][ T5878] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[  203.012658][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1472'.
[  203.019349][ T5878] usb 9-1: not running at top speed; connect to a high speed hub
[  203.019452][ T5878] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  203.026765][ T5878] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  203.035277][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.039382][ T5878] usb 9-1: Product: syz
[  203.039430][ T5878] usb 9-1: Manufacturer: syz
[  203.039451][ T5878] usb 9-1: SerialNumber: syz
[  203.052014][ T5878] oti6858 9-1:1.0: oti6858 converter detected
[  203.085192][ T5878] usb 9-1: oti6858 converter now attached to ttyUSB0
[  203.092178][T11810] macvtap0: entered allmulticast mode
[  203.092238][T11810] veth0_macvtap: entered allmulticast mode
[  203.132966][T11816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=11816 comm=syz.5.1475
[  203.221308][T11820] echo interval is out of bounds
[  203.221308][T11820] 
[  203.224027][T11820] CIFS: VFS: echo interval is out of bounds
[  203.276418][T11822] netlink: 'syz.5.1477': attribute type 4 has an invalid length.
[  203.298094][T11822] netlink: 'syz.5.1477': attribute type 4 has an invalid length.
[  203.309941][T11822] fuse: fd is not a fuse device
[  203.481604][ T5878] usb 9-1: USB disconnect, device number 18
[  203.500683][ T5878] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  203.509541][   T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  203.513043][ T5878] oti6858 9-1:1.0: device disconnected
[  203.548611][ T5729] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  203.548709][ T5729] Bluetooth: hci3: Injecting HCI hardware error event
[  203.554639][ T5729] Bluetooth: hci3: hardware error 0x00
[  204.153288][T11852] 9pnet_virtio: no channels available for device syz
[  204.554598][T11856] loop8: detected capacity change from 0 to 7
[  204.562602][   T43] kauditd_printk_skb: 144 callbacks suppressed
[  204.562686][   T43] audit: type=1800 audit(204.436:3265): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  204.581225][T11856]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  204.581306][T11856] loop8: partition table partially beyond EOD, truncated
[  204.582297][T11856] loop8: p1 size 1905483274 extends beyond EOD, truncated
[  204.584325][T11856] loop8: p2 start 121280928 is beyond EOD, truncated
[  204.590245][   T43] audit: type=1800 audit(204.466:3266): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16785 res=0 errno=0
[  204.622455][   T43] audit: type=1400 audit(204.506:3267): avc:  denied  { setattr } for  pid=11858 comm="syz.6.1488" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  204.654094][   T43] audit: type=1800 audit(204.536:3268): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  204.667297][   T43] audit: type=1800 audit(204.546:3269): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181104 res=0 errno=0
[  204.685221][   T43] audit: type=1800 audit(204.566:3270): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="dev" dev="sysfs" ino=16825 res=0 errno=0
[  204.697903][   T43] audit: type=1800 audit(204.586:3271): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  204.728172][   T43] audit: type=1800 audit(204.616:3272): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  204.748429][   T43] audit: type=1800 audit(204.636:3273): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  204.764904][T11867] netlink: 'syz.0.1490': attribute type 1 has an invalid length.
[  204.815010][T11867] 8021q: adding VLAN 0 to HW filter on device bond2
[  204.824737][   T43] audit: type=1400 audit(204.706:3274): avc:  denied  { ioctl } for  pid=11870 comm="syz.6.1491" path="socket:[47982]" dev="sockfs" ino=47982 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  204.853696][T11876] bond2: (slave geneve3): making interface the new active one
[  204.856817][T11876] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  204.873434][T11880] Unsupported ieee802154 address type: 0
[  204.895208][T11881] IPVS: length: 92 != 8
[  204.898770][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  204.898886][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  204.898917][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  204.898945][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  205.000518][T11884] netlink: 'syz.5.1493': attribute type 7 has an invalid length.
[  205.000927][T11884] 8021q: VLANs not supported on vxcan1
[  205.095523][T11888] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1495'.
[  205.128538][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'.
[  205.236226][T11903] netlink: 'syz.5.1500': attribute type 10 has an invalid length.
[  205.272184][T11908] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22
[  205.318941][T11916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1504'.
[  205.319054][T11916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1504'.
[  205.319507][T11916] geneve0: entered promiscuous mode
[  205.587048][T11943] MTD: Couldn't look up './cgroup': -15
[  205.587110][T11943] ./cgroup: Can't lookup blockdev
[  205.624496][T11948] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  205.624569][T11948] nbd: couldn't find device at index 131080
[  205.635538][ T5729] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  205.688017][T11949] lo: entered promiscuous mode
[  205.692812][T11949] bond0: entered promiscuous mode
[  205.694117][T11949] dummy0: entered promiscuous mode
[  205.695842][T11949] eql: entered promiscuous mode
[  205.696124][T11949] ifb0: entered promiscuous mode
[  205.696874][T11949] ifb1: entered promiscuous mode
[  205.701523][T11949] e1000 0000:00:06.0 eth0: entered promiscuous mode
[  205.706060][T11949] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[  205.706839][T11949] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[  205.710485][T11949] hwsim0: entered promiscuous mode
[  205.711565][T11949] ieee802154 phy0 wpan0: entered promiscuous mode
[  205.711940][T11949] teql0: entered promiscuous mode
[  205.711957][T11949] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  205.883732][T11957] overlayfs: unescaped trailing colons in lowerdir mount option.
[  205.963441][T11960] veth0_virt_wifi: entered promiscuous mode
[  205.978385][T11960] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  205.978415][T11960] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  205.978565][T11960] vhci_hcd vhci_hcd.0: Device attached
[  206.058175][T11966] fuseblk: Unknown parameter 'd}i“>¾<¢ŸÓ(ʽvS/EƒYÿ<ñÿö±ù6t¾³Ó�G��I£'óîÛøMi©©UÇÚ½À�'
[  206.215545][   T42] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0306.0005/input/input17
[  206.218338][   T25] usb 10-1: new low-speed USB device number 22 using dummy_hcd
[  206.222942][ T5832] usb 47-1: new low-speed USB device number 3 using vhci_hcd
[  206.242373][   T42] hid-generic 0005:0009:0306.0005: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  206.372571][   T25] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  206.374675][   T25] usb 10-1: config 0 has no interfaces?
[  206.374700][   T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.376627][   T25] usb 10-1: config 0 descriptor??
[  206.581692][T11960] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1512'.
[  206.581795][T11960] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1512'.
[  206.586819][T11961] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2
[  206.591127][ T5801] vhci_hcd vhci_hcd.5: stop threads
[  206.591150][ T5801] vhci_hcd vhci_hcd.5: release socket
[  206.592734][ T5801] vhci_hcd vhci_hcd.5: disconnect device
[  206.609402][   T25] usb 10-1: USB disconnect, device number 22
[  206.724276][T11990] nfs: Unknown parameter 'MÝÊ
ÝÉÄþ¡îØô
Nâ%#ðËKþý¬‚µv)!ùQXÆ®MØÄÈ̘ILDqTæ•ìQDãùÌÙmâf'
[  206.844521][T11997] nvmet_tcp: enabling port 1 (127.0.0.1:8009)
[  206.849834][T11997] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  206.849998][T11997] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  206.850719][T12001] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  206.851336][T11999] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  207.012888][T12012] gfs2: error -5 reading superblock
[  207.031203][T12011] Bluetooth: MGMT ver 1.23
[  207.049952][T12012] bond1: entered promiscuous mode
[  207.074789][T12014] netlink: 'syz.4.1527': attribute type 1 has an invalid length.
[  207.112754][T12014] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.128647][T12014] bond0: (slave geneve3): making interface the new active one
[  207.136621][T12014] bond0: (slave geneve3): Enslaving as an active interface with an up link
[  207.350795][T11690] Bluetooth: hci6: Frame reassembly failed (-84)
[  208.275946][T12075] netlink: 'syz.6.1540': attribute type 11 has an invalid length.
[  208.284962][T12075] 8021q: VLANs not supported on xfrm0
[  208.502457][T12089] netlink: 'syz.6.1543': attribute type 4 has an invalid length.
[  208.571274][T12095] fuse: fd is not a fuse device
[  208.873309][T12103] openvswitch: netlink: VXLAN extension message has 8 unknown bytes.
[  209.385100][ T5727] Bluetooth: hci5: unexpected event for opcode 0x2019
[  209.398909][ T5729] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  209.399842][ T9631] 9pnet_virtio virtio2: p9_virtio_remove: waiting for device in use.
[  209.568980][   T43] kauditd_printk_skb: 154 callbacks suppressed
[  209.569042][   T43] audit: type=1800 audit(209.456:3429): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  209.583939][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1556'.
[  209.614385][T12140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1556'.
[  209.646768][   T43] audit: type=1800 audit(209.526:3430): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  209.673991][   T43] audit: type=1800 audit(209.556:3431): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  209.703166][   T43] audit: type=1800 audit(209.586:3432): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  209.732688][   T43] audit: type=1800 audit(209.606:3433): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  209.748452][   T43] audit: type=1400 audit(209.636:3434): avc:  denied  { read } for  pid=12147 comm="syz.4.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  209.769611][   T43] audit: type=1800 audit(209.656:3435): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  209.770738][   T43] audit: type=1400 audit(209.656:3436): avc:  denied  { block_suspend } for  pid=12147 comm="syz.4.1560" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  209.808159][T12157] bond0: entered allmulticast mode
[  209.808214][T12157] geneve3: entered allmulticast mode
[  209.818621][   T43] audit: type=1800 audit(209.706:3437): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  209.834611][   T43] audit: type=1800 audit(209.716:3438): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  209.884605][T12165] team0: entered allmulticast mode
[  209.884682][T12165] team_slave_0: entered allmulticast mode
[  209.884718][T12165] team_slave_1: entered allmulticast mode
[  210.065300][T12170] loop4: detected capacity change from 0 to 7
[  210.074015][T12170]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  210.074086][T12170] loop4: partition table partially beyond EOD, truncated
[  210.074238][T12170] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  210.127496][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1568'.
[  210.127567][T12177] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1568'.
[  210.134344][ T8316] udevd[8316]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  210.346389][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1571'.
[  210.350266][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1571'.
[  210.359654][T12189] bond0: entered promiscuous mode
[  210.361278][T12189] geneve3: entered promiscuous mode
[  210.363832][T12189] gretap0: entered promiscuous mode
[  210.366217][T12189] debugfs: 'hsr1' already exists in 'hsr'
[  210.368083][T12189] Cannot create hsr debugfs directory
[  210.370050][T12189] hsr1: entered promiscuous mode
[  210.405705][T12192] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.444678][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1573'.
[  210.460117][T12192] netlink: 'syz.4.1573': attribute type 39 has an invalid length.
[  210.493262][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1574'.
[  210.501889][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1574'.
[  210.511127][T12194] option changes via remount are deprecated (pid=12190 comm=syz.6.1572)
[  210.511180][T12194] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 ""
[  210.512497][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1572'.
[  210.527767][T12199] fuse: fd is not a fuse device
[  210.531078][T12199] xt_hashlimit: size too large, truncated to 1048576
[  211.117185][   T35] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  211.247139][   T35] usb 9-1: device descriptor read/64, error -71
[  211.297106][ T5832] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  211.499982][   T35] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  211.637097][   T35] usb 9-1: device descriptor read/64, error -71
[  211.747347][   T35] usb usb9-port1: attempt power cycle
[  212.087122][   T35] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  212.118188][   T35] usb 9-1: device descriptor read/8, error -71
[  212.330225][T12234] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  212.334918][T12234] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1584'.
[  212.351633][T12234] bond0 (unregistering): left promiscuous mode
[  212.351679][T12234] bond_slave_0: left promiscuous mode
[  212.351865][T12234] bond_slave_1: left promiscuous mode
[  212.356162][T12241] iommufd_mock iommufd_mock0: Adding to iommu group 2
[  212.364036][T12234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.371597][T12234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.376116][T12234] bond0 (unregistering): Released all slaves
[  212.387550][   T35] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  212.427700][   T35] usb 9-1: device descriptor read/8, error -71
[  212.506096][T12247] vivid-000: =================  START STATUS  =================
[  212.506156][T12247] vivid-000: Test Pattern: 75% Colorbar
[  212.514245][T12247] vivid-000: Fill Percentage of Frame: 4
[  212.514259][T12247] vivid-000: Horizontal Movement: No Movement
[  212.514269][T12247] vivid-000: Vertical Movement: No Movement
[  212.514279][T12247] vivid-000: OSD Text Mode: All
[  212.514288][T12247] vivid-000: Show Border: false
[  212.514298][T12247] vivid-000: Show Square: false
[  212.514307][T12247] vivid-000: Sensor Flipped Horizontally: true
[  212.514316][T12247] vivid-000: Sensor Flipped Vertically: false
[  212.514326][T12247] vivid-000: Insert SAV Code in Image: false
[  212.514335][T12247] vivid-000: Insert EAV Code in Image: false
[  212.514344][T12247] vivid-000: Insert Video Guard Band: false
[  212.514354][T12247] vivid-000: Reduced Framerate: false
[  212.514363][T12247] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  212.514373][T12247] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  212.514383][T12247] vivid-000: Enable Capture Cropping: true
[  212.514392][T12247] vivid-000: Enable Capture Composing: true
[  212.514402][T12247] vivid-000: Enable Capture Scaler: true
[  212.514411][T12247] vivid-000: Timestamp Source: Start of Exposure
[  212.514421][T12247] vivid-000: Colorspace: sRGB
[  212.514430][T12247] vivid-000: Transfer Function: Default
[  212.514439][T12247] vivid-000: Y'CbCr Encoding: Default
[  212.514448][T12247] vivid-000: HSV Encoding: Hue 0-179
[  212.514458][T12247] vivid-000: Quantization: Default
[  212.514467][T12247] vivid-000: Apply Alpha To Red Only: false
[  212.514496][T12247] vivid-000: Standard Aspect Ratio: 4x3
[  212.514507][T12247] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  212.514520][T12247] vivid-000: DV Timings: 640x480p59 inactive
[  212.514539][T12247] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  212.514550][T12247] vivid-000: Maximum EDID Blocks: 2
[  212.514559][T12247] vivid-000: Limited RGB Range (16-235): false
[  212.514569][T12247] vivid-000: Rx RGB Quantization Range: Automatic
[  212.514579][T12247] vivid-000: Power Present: 0x00000001
[  212.514590][T12247] tpg source WxH: 3840x2160 (Y'CbCr)
[  212.514596][T12247] tpg field: 1
[  212.514599][T12247] tpg crop: (0,0)/3840x2160
[  212.514606][T12247] tpg compose: (0,0)/3840x2160
[  212.514612][T12247] tpg colorspace: 8
[  212.514615][T12247] tpg transfer function: 0/2
[  212.514620][T12247] tpg Y'CbCr encoding: 0/1
[  212.514624][T12247] tpg quantization: 0/2
[  212.514629][T12247] tpg RGB range: 0/2
[  212.514633][T12247] vivid-000: ==================  END STATUS  ==================
[  212.524098][T12248] vivid-000: =================  START STATUS  =================
[  212.524110][T12248] vivid-000: Test Pattern: 75% Colorbar
[  212.524122][T12248] vivid-000: Fill Percentage of Frame: 4
[  212.524134][T12248] vivid-000: Horizontal Movement: No Movement
[  212.524144][T12248] vivid-000: Vertical Movement: No Movement
[  212.524154][T12248] vivid-000: OSD Text Mode: All
[  212.524164][T12248] vivid-000: Show Border: false
[  212.524173][T12248] vivid-000: Show Square: false
[  212.524183][T12248] vivid-000: Sensor Flipped Horizontally: true
[  212.524193][T12248] vivid-000: Sensor Flipped Vertically: false
[  212.524202][T12248] vivid-000: Insert SAV Code in Image: false
[  212.524212][T12248] vivid-000: Insert EAV Code in Image: false
[  212.524222][T12248] vivid-000: Insert Video Guard Band: false
[  212.530968][T12248] vivid-000: Reduced Framerate: false
[  212.530981][T12248] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  212.530993][T12248] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  212.531005][T12248] vivid-000: Enable Capture Cropping: true
[  212.531016][T12248] vivid-000: Enable Capture Composing: true
[  212.531026][T12248] vivid-000: Enable Capture Scaler: true
[  212.531037][T12248] vivid-000: Timestamp Source: Start of Exposure
[  212.531049][T12248] vivid-000: Colorspace: sRGB
[  212.531059][T12248] vivid-000: Transfer Function: Default
[  212.531069][T12248] vivid-000: Y'CbCr Encoding: Default
[  212.531091][T12248] vivid-000: HSV Encoding: Hue 0-179
[  212.531106][T12248] vivid-000: Quantization: Default
[  212.531121][T12248] vivid-000: Apply Alpha To Red Only: false
[  212.531135][T12248] vivid-000: Standard Aspect Ratio: 4x3
[  212.531151][T12248] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  212.531171][T12248] vivid-000: DV Timings: 640x480p59 inactive
[  212.531191][T12248] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  212.531205][T12248] vivid-000: Maximum EDID Blocks: 2
[  212.531216][T12248] vivid-000: Limited RGB Range (16-235): false
[  212.531228][T12248] vivid-000: Rx RGB Quantization Range: Automatic
[  212.531239][T12248] vivid-000: Power Present: 0x00000001
[  212.531251][T12248] tpg source WxH: 3840x2160 (Y'CbCr)
[  212.531258][T12248] tpg field: 1
[  212.531262][T12248] tpg crop: (0,0)/3840x2160
[  212.531270][T12248] tpg compose: (0,0)/3840x2160
[  212.531277][T12248] tpg colorspace: 8
[  212.531281][T12248] tpg transfer function: 0/2
[  212.531286][T12248] tpg Y'CbCr encoding: 0/1
[  212.531291][T12248] tpg quantization: 0/2
[  212.531296][T12248] tpg RGB range: 0/2
[  212.531301][T12248] vivid-000: ==================  END STATUS  ==================
[  212.540430][   T35] usb usb9-port1: unable to enumerate USB device
[  212.606747][T12258] tmpfs: Cannot enable quota on remount
[  212.666681][T12262] fuse: fd is not a fuse device
[  212.673239][T12260] gfs2: error -5 reading superblock
[  212.827750][   T74] block nbd1: Possible stuck request ffff888028d10000: control (read@0,1024B). Runtime 90 seconds
[  212.827795][   T74] block nbd1: Possible stuck request ffff888028d101c0: control (read@1024,1024B). Runtime 90 seconds
[  212.827830][   T74] block nbd1: Possible stuck request ffff888028d10380: control (read@2048,1024B). Runtime 90 seconds
[  212.827857][   T74] block nbd1: Possible stuck request ffff888028d10540: control (read@3072,1024B). Runtime 90 seconds
[  212.850128][ T5100] block nbd2: Possible stuck request ffff888028d8e000: control (read@0,1024B). Runtime 90 seconds
[  212.850215][ T5100] block nbd2: Possible stuck request ffff888028d8e1c0: control (read@1024,1024B). Runtime 90 seconds
[  212.850271][ T5100] block nbd2: Possible stuck request ffff888028d8e380: control (read@2048,1024B). Runtime 90 seconds
[  212.850296][ T5100] block nbd2: Possible stuck request ffff888028d8e540: control (read@3072,1024B). Runtime 90 seconds
[  213.131794][T12287] can: request_module (can-proto-0) failed.
[  213.149975][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1600'.
[  213.387185][ T5729] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  213.387275][ T5729] Bluetooth: hci5: Injecting HCI hardware error event
[  213.574383][T12314] tmpfs: Unknown parameter 'g'
[  213.588403][T12311] FAT-fs (nullb0): bogus number of reserved sectors
[  213.589349][T12311] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  213.593545][T12311] SELinux:  Context system_u:object_r:wtmp_t:s0 is not valid (left unmapped).
[  213.619775][T12317] tmpfs: Unknown parameter 'g'
[  213.739577][T12328] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  213.791536][T12331] ata1.00: invalid multi_count 1 ignored
[  213.807182][ T5832] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  213.928538][T12339] overlayfs: failed to resolve './file0/file0': -2
[  213.962171][ T5832] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  213.965215][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.965245][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.971828][ T5832] usb 10-1: config 0 descriptor??
[  214.150214][T12349] bridge3: the hash_elasticity option has been deprecated and is always 16
[  214.185186][ T5832] usbhid 10-1:0.0: can't add hid device: -71
[  214.185291][ T5832] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  214.187178][ T5832] usb 10-1: USB disconnect, device number 23
[  214.592015][   T43] kauditd_printk_skb: 106 callbacks suppressed
[  214.592130][   T43] audit: type=1800 audit(214.476:3545): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  214.623600][   T43] audit: type=1400 audit(214.506:3546): avc:  denied  { mounton } for  pid=12386 comm="syz.4.1633" path="/318/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  214.640196][T12387] XFS (mtdblock0): Invalid superblock magic number
[  214.667171][ T5832] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  214.677092][   T43] audit: type=1800 audit(214.556:3547): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  214.686748][T12396] ip_tables: iptables: counters copy to user failed while replacing table
[  214.819082][ T5832] usb 10-1: Using ep0 maxpacket: 32
[  214.824221][ T5832] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  214.830063][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.836113][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.845124][ T5832] usb 10-1: config 0 descriptor??
[  214.847780][   T43] audit: type=1800 audit(214.726:3548): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  214.856245][   T43] audit: type=1800 audit(214.736:3549): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184463 res=0 errno=0
[  214.856293][   T43] audit: type=1800 audit(214.736:3550): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=184492 res=0 errno=0
[  214.856326][   T43] audit: type=1800 audit(214.736:3551): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=184470 res=0 errno=0
[  214.856359][   T43] audit: type=1800 audit(214.736:3552): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=184471 res=0 errno=0
[  214.856391][   T43] audit: type=1800 audit(214.736:3553): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=184472 res=0 errno=0
[  214.928585][ T5832] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  214.928988][T12401] fuse: fd is not a fuse device
[  214.943714][ T5832] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  214.952504][   T43] audit: type=1800 audit(214.836:3554): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  214.987600][T12404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=7 (14 ns) > initial count (6 ns). Using initial count to start timer.
[  215.043222][T12403] fuse: fd is not a fuse device
[  215.346785][ T5832] usb 10-1: USB disconnect, device number 24
[  215.354593][ T5832] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[  215.885758][T12440] __nla_validate_parse: 6 callbacks suppressed
[  215.885842][T12440] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1648'.
[  215.983533][T12447] Invalid ELF header type: 3 != 1
[  215.983809][T12447] Invalid ELF header type: 3 != 1
[  215.983941][T12447] Invalid ELF header type: 3 != 1
[  215.984075][T12447] Invalid ELF header type: 3 != 1
[  215.984208][T12447] Invalid ELF header type: 3 != 1
[  215.984321][T12447] Invalid ELF header type: 3 != 1
[  215.984429][T12447] Invalid ELF header type: 3 != 1
[  215.984540][T12447] Invalid ELF header type: 3 != 1
[  215.984649][T12447] Invalid ELF header type: 3 != 1
[  215.984769][T12447] Invalid ELF header type: 3 != 1
[  215.984877][T12447] Invalid ELF header type: 3 != 1
[  215.984981][T12447] Invalid ELF header type: 3 != 1
[  215.985085][T12447] Invalid ELF header type: 3 != 1
[  215.985204][T12447] Invalid ELF header type: 3 != 1
[  215.985338][T12447] Invalid ELF header type: 3 != 1
[  215.991203][T12447] Invalid ELF header type: 3 != 1
[  215.991338][T12447] Invalid ELF header type: 3 != 1
[  215.991464][T12447] Invalid ELF header type: 3 != 1
[  215.991602][T12447] Invalid ELF header type: 3 != 1
[  215.991760][T12447] Invalid ELF header type: 3 != 1
[  215.991893][T12447] Invalid ELF header type: 3 != 1
[  215.992027][T12447] Invalid ELF header type: 3 != 1
[  215.992169][T12447] Invalid ELF header type: 3 != 1
[  215.992356][T12447] Invalid ELF header type: 3 != 1
[  215.992505][T12447] Invalid ELF header type: 3 != 1
[  215.992654][T12447] Invalid ELF header type: 3 != 1
[  215.992777][T12447] Invalid ELF header type: 3 != 1
[  215.992905][T12447] Invalid ELF header type: 3 != 1
[  215.993027][T12447] Invalid ELF header type: 3 != 1
[  215.993154][T12447] Invalid ELF header type: 3 != 1
[  215.993460][T12447] Invalid ELF header type: 3 != 1
[  215.993599][T12447] Invalid ELF header type: 3 != 1
[  215.993723][T12447] Invalid ELF header type: 3 != 1
[  217.014758][T12469] netlink: 'syz.5.1657': attribute type 1 has an invalid length.
[  217.092464][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.118732][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.227553][ T5729] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  217.793918][T12506] overlayfs: failed to resolve 'ower2': -2
[  218.074671][T12511] fuse: fd is not a fuse device
[  218.288524][T12516] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  218.496082][T12531] kvm: kvm [12529]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40
[  218.519246][T12534] kvm: kvm [12529]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40
[  218.626721][T12540] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1676'.
[  218.773041][T12549] printk: console [ttyS0] disabled
[  218.796916][T12549] printk: console [ttyS0] enabled
[  218.801705][T12549] batadv_slave_0: Caught tx_queue_len zero misconfig
[  218.805567][T12549] fuse: fd is not a fuse device
[  218.904497][T12556] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1683'.
[  219.607467][ T9631] 9pnet_virtio virtio2: p9_virtio_remove: waiting for device in use.
[  219.834631][   T43] kauditd_printk_skb: 93 callbacks suppressed
[  219.837864][   T43] audit: type=1800 audit(219.716:3648): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  219.937437][   T43] audit: type=1800 audit(219.826:3649): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  219.976703][   T43] audit: type=1800 audit(219.856:3650): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  219.988078][T12602] netlink: 'syz.4.1692': attribute type 1 has an invalid length.
[  220.016169][T12602] bond3: (slave geneve4): making interface the new active one
[  220.020121][T12602] bond3: (slave geneve4): Enslaving as an active interface with an up link
[  220.027572][ T5773] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  220.027635][ T5773] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  220.027682][ T5773] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  220.027728][ T5773] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20004 - 0
[  220.047529][   T43] audit: type=1800 audit(219.936:3651): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  220.152823][   T43] audit: type=1800 audit(220.036:3652): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  220.221507][   T43] audit: type=1400 audit(220.106:3653): avc:  denied  { map } for  pid=12607 comm="syz.4.1694" path="socket:[52787]" dev="sockfs" ino=52787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.229343][   T43] audit: type=1400 audit(220.106:3654): avc:  denied  { read } for  pid=12607 comm="syz.4.1694" path="socket:[52787]" dev="sockfs" ino=52787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.251933][   T43] audit: type=1800 audit(220.136:3655): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  220.292058][   T43] audit: type=1800 audit(220.176:3656): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  220.438865][   T43] audit: type=1800 audit(220.326:3657): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  220.522201][T12621] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.535048][T12621] team0: left allmulticast mode
[  220.535109][T12621] team_slave_0: left allmulticast mode
[  220.535173][T12621] team_slave_1: left allmulticast mode
[  220.659204][T12621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.668619][T12621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.834029][T12621] geneve0: left promiscuous mode
[  221.000556][T12621] bond0: left allmulticast mode
[  221.002331][T12621] geneve3: left allmulticast mode
[  221.008815][T12621] hsr1: left promiscuous mode
[  221.037131][ T5800] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.037207][ T5800] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  221.037263][ T5800] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.037294][ T5800] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  221.037330][ T5800] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.037347][ T5800] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  221.037366][ T5800] netdevsim netdevsim4 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.037381][ T5800] netdevsim netdevsim4 ÿÿÿÿÿÿ: unset [1, 1] type 2 family 0 port 20004 - 0
[  222.014326][T12572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  222.136226][T12654] netlink: 'syz.6.1702': attribute type 1 has an invalid length.
[  222.221386][T12666] fuse: fd is not a fuse device
[  222.609782][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'.
[  222.616832][T12687] SELinux:  policydb version 0 does not match my version range 15-35
[  222.620299][T12687] SELinux: failed to load policy
[  222.621504][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1711'.
[  222.724890][T12690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  222.902188][T12695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1714'.
[  222.910115][T12695] ip6t_hbh: too many supported opts specified
[  226.303428][ T5137] udevd[5137]: worker [6808] /devices/virtual/block/nbd1 is taking a long time
[  226.306716][ T5137] udevd[5137]: worker [7016] /devices/virtual/block/nbd2 is taking a long time
[  229.757152][ T9631] 9pnet_virtio virtio2: p9_virtio_remove: waiting for device in use.
[  239.957365][ T9631] 9pnet_virtio virtio2: p9_virtio_remove: waiting for device in use.
[  242.907517][   T74] block nbd1: Possible stuck request ffff888028d10000: control (read@0,1024B). Runtime 120 seconds
[  242.907599][   T74] block nbd1: Possible stuck request ffff888028d101c0: control (read@1024,1024B). Runtime 120 seconds
[  242.907650][   T74] block nbd1: Possible stuck request ffff888028d10380: control (read@2048,1024B). Runtime 120 seconds
[  242.907673][   T74] block nbd1: Possible stuck request ffff888028d10540: control (read@3072,1024B). Runtime 120 seconds
[  242.918358][ T5100] block nbd2: Possible stuck request ffff888028d8e000: control (read@0,1024B). Runtime 120 seconds
[  242.918405][ T5100] block nbd2: Possible stuck request ffff888028d8e1c0: control (read@1024,1024B). Runtime 120 seconds
[  242.918430][ T5100] block nbd2: Possible stuck request ffff888028d8e380: control (read@2048,1024B). Runtime 120 seconds
[  242.918453][ T5100] block nbd2: Possible stuck request ffff888028d8e540: control (read@3072,1024B). Runtime 120 seconds
[  245.476542][   T43] kauditd_printk_skb: 35 callbacks suppressed
[  245.476633][   T43] audit: type=1800 audit(245.356:3693): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186988 res=0 errno=0
[  245.478273][   T43] audit: type=1400 audit(245.366:3694): avc:  denied  { mount } for  pid=12702 comm="syz.4.1719" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  245.486826][   T43] audit: type=1800 audit(245.366:3695): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187007 res=0 errno=0
[  245.507137][   T43] audit: type=1400 audit(245.386:3696): avc:  denied  { write } for  pid=12702 comm="syz.4.1719" name="hidraw0" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  245.507213][   T43] audit: type=1400 audit(245.396:3697): avc:  denied  { write } for  pid=12702 comm="syz.4.1719" path="/dev/hidraw0" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  245.512918][ T2319] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  245.514991][   T43] audit: type=1800 audit(245.396:3698): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  245.515023][   T43] audit: type=1400 audit(245.396:3699): avc:  denied  { setopt } for  pid=12708 comm="syz.0.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  245.533940][T12707] ubi0: attaching mtd0
[  245.547993][T12707] ubi0: scanning is finished
[  245.548022][T12707] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  245.586698][   T43] audit: type=1800 audit(245.466:3700): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187060 res=0 errno=0
[  245.595408][ T2319] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  245.612193][T12703] hid-generic 0003:0627:0001.0001: pid 12703 passed too large report
[  245.652345][   T43] audit: type=1800 audit(245.536:3701): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=187009 res=0 errno=0
[  245.697209][T12707] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  245.765391][   T43] audit: type=1800 audit(245.646:3702): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  245.773869][T12715] netlink: 'syz.6.1717': attribute type 10 has an invalid length.
[  245.780810][T12715] team0: Port device dummy0 added
[  246.062491][T12742] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1726'.
[  246.347648][T12751] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1727'.
[  246.493303][T12760] binder: 12759:12760 ioctl c0306201 0 returned -14
[  246.764787][T12771] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  246.811026][T12774] netlink: 'syz.5.1732': attribute type 1 has an invalid length.
[  246.897430][ T5916] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  247.047602][ T5916] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  247.050077][T12782] netlink: 'syz.5.1735': attribute type 1 has an invalid length.
[  247.056416][ T5916] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.063219][ T5916] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  247.063322][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.075275][T12782] bond3: option mode: invalid value (13)
[  247.094121][T12782] bond3 (unregistering): Released all slaves
[  247.110895][ T5916] idmouse 9-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  247.307362][T12795] netlink: 'syz.5.1735': attribute type 10 has an invalid length.
[  247.307455][T12795] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1735'.
[  247.401398][T12797] fuse: fd is not a fuse device
[  247.523204][T12807] macvtap1: entered promiscuous mode
[  247.523272][T12807] vlan0: entered promiscuous mode
[  247.525803][T12807] team0: Device macvtap1 is up. Set it down before adding it as a team port
[  247.528076][T12807] vlan0: left promiscuous mode
[  248.669163][ T5086] Bluetooth: hci5: hardware error 0x00
[  248.910337][ T5817] usb 9-1: USB disconnect, device number 24
[  248.912890][ T5817] idmouse 9-1:1.0: disconnected
[  249.108133][ T5729] Bluetooth: hci5: unexpected cc 0x1407 length: 11 > 9
[  249.108195][ T5729] Bluetooth: hci5: unexpected event for opcode 0x1407
[  249.108606][T12873] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  249.908209][T12909] misc userio: Begin command sent, but we're already running
[  250.117482][ T9631] 9pnet_virtio virtio2: p9_virtio_remove: waiting for device in use.
[  250.154923][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'.
[  250.204487][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'.
[  250.212386][T12919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12919 comm=syz.4.1766
[  250.350440][T12930] loop7: detected capacity change from 0 to 7
[  250.430878][T12930] Dev loop7: unable to read RDB block 7
[  250.433387][T12930]  loop7: unable to read partition table
[  250.436248][T12930] loop7: partition table beyond EOD, truncated
[  250.440395][T12930] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  250.519601][   T43] kauditd_printk_skb: 94 callbacks suppressed
[  250.519655][   T43] audit: type=1800 audit(250.406:3797): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  250.568226][   T43] audit: type=1800 audit(250.456:3798): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0
[  250.594798][   T43] audit: type=1800 audit(250.476:3799): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  250.632921][   T43] audit: type=1800 audit(250.516:3800): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  250.643490][   T43] audit: type=1800 audit(250.526:3801): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  250.646756][T12942] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000)
[  250.710167][   T43] audit: type=1800 audit(250.596:3802): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  250.748943][   T43] audit: type=1800 audit(250.636:3803): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  250.787161][   T43] audit: type=1800 audit(250.676:3804): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  250.876601][   T43] audit: type=1800 audit(250.756:3805): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  250.884167][   T43] audit: type=1400 audit(250.766:3806): avc:  denied  { write } for  pid=12944 comm="syz.0.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  250.908950][ T5086] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  251.005160][T12964] syzkaller1: entered promiscuous mode
[  251.006804][T12964] syzkaller1: entered allmulticast mode
[  251.632460][T12978] netlink: 'syz.6.1783': attribute type 7 has an invalid length.
[  251.650633][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'.
[  251.665555][T12983] ip6t_srh: unknown srh invflags 51E8
[  251.866028][T12997] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1789'.
[  251.876459][T12980] bridge4: port 1(veth0_to_bond) entered blocking state
[  251.876547][T12980] bridge4: port 1(veth0_to_bond) entered disabled state
[  251.876620][T12980] veth0_to_bond: entered allmulticast mode
[  251.891614][T12980] veth0_to_bond: entered promiscuous mode
[  252.049335][T13009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1794'.
[  252.141201][T13018] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  252.155505][T13019] hfsplus: unable to find HFS+ superblock
[  252.157695][T13018] hfsplus: unable to find HFS+ superblock
[  252.266124][T13029] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1800'.
[  252.341466][T13035] netlink: 'syz.6.1803': attribute type 5 has an invalid length.
[  252.609917][T13054] openvswitch: netlink: Invalid VLAN frame
[  253.327094][   T42] usb 11-1: new full-speed USB device number 16 using dummy_hcd
[  253.347213][ T5915] usb 10-1: new full-speed USB device number 25 using dummy_hcd
[  253.508861][   T42] usb 11-1: unable to get BOS descriptor or descriptor too short
[  253.512050][   T42] usb 11-1: not running at top speed; connect to a high speed hub
[  253.514641][   T42] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  253.521468][   T42] usb 11-1: config 14 has an invalid interface number: 57 but max is 1
[  253.524510][   T42] usb 11-1: config 14 has an invalid interface number: 228 but max is 1
[  253.527320][   T42] usb 11-1: config 14 has no interface number 0
[  253.527331][   T42] usb 11-1: config 14 has no interface number 1
[  253.527369][   T42] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  253.527380][   T42] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  253.527392][   T42] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  253.527404][   T42] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  253.527417][   T42] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  253.527429][   T42] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  253.527440][   T42] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  253.527457][   T42] usb 11-1: config 14 interface 57 has no altsetting 0
[  253.527466][   T42] usb 11-1: config 14 interface 228 has no altsetting 0
[  253.544103][ T5915] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  253.576262][   T42] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.579997][   T42] usb 11-1: Product: syz
[  253.581760][   T42] usb 11-1: Manufacturer: syz
[  253.583359][   T42] usb 11-1: SerialNumber: syz
[  253.590868][ T5915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.591007][ T5915] usb 10-1: Product: syz
[  253.591044][ T5915] usb 10-1: Manufacturer: syz
[  253.591081][ T5915] usb 10-1: SerialNumber: syz
[  254.020691][T13081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13081 comm=syz.0.1814
[  254.022842][ T5915] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  254.135638][   T42] legousbtower 11-1:14.57: interrupt endpoints not found
[  254.545940][   T42] legousbtower 11-1:14.228: get version request failed: -121
[  254.546073][   T42] legousbtower 11-1:14.228: probe with driver legousbtower failed with error -121
[  254.644149][T13083] binder: 13060:13083 ioctl c0306201 2000000001c0 returned -14
[  254.700287][T13084] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1810'.
[  254.760620][T13061] hsr_slave_0: left promiscuous mode
[  254.763149][T13061] hsr_slave_1: left promiscuous mode
[  255.447499][ T2319] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  255.607566][ T2319] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  255.608695][ T2319] usb 9-1: config 1 has an invalid interface number: 3 but max is 0
[  255.608714][ T2319] usb 9-1: config 1 has no interface number 0
[  255.610626][ T2319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.610643][ T2319] usb 9-1: Product: syz
[  255.610655][ T2319] usb 9-1: Manufacturer: syz
[  255.610665][ T2319] usb 9-1: SerialNumber: syz
[  255.615356][   T43] kauditd_printk_skb: 85 callbacks suppressed
[  255.615367][   T43] audit: type=1800 audit(255.496:3892): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190820 res=0 errno=0
[  255.618526][ T2319] usb 9-1: 3:1 : does not exist
[  255.618615][ T2319] usb 9-1: 3:2 : does not exist
[  255.636412][   T43] audit: type=1800 audit(255.496:3893): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=190852 res=0 errno=0
[  255.636465][   T43] audit: type=1800 audit(255.496:3894): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=190827 res=0 errno=0
[  255.636735][   T43] audit: type=1800 audit(255.496:3895): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=190828 res=0 errno=0
[  255.656694][   T43] audit: type=1800 audit(255.536:3896): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=190849 res=0 errno=0
[  255.656751][   T43] audit: type=1800 audit(255.536:3897): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=190850 res=0 errno=0
[  255.656811][   T43] audit: type=1800 audit(255.536:3898): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=190829 res=0 errno=0
[  255.656846][   T43] audit: type=1800 audit(255.536:3899): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=190851 res=0 errno=0
[  255.670473][   T43] audit: type=1800 audit(255.536:3900): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190872 res=0 errno=0
[  255.670508][   T43] audit: type=1800 audit(255.536:3901): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190891 res=0 errno=0
[  255.708377][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  255.974885][   T42] usb 10-1: USB disconnect, device number 25
[  256.001703][   T42] usblp0: removed
[  256.229720][   T42] usb 11-1: USB disconnect, device number 16
[  256.377520][   T25] usb 9-1: USB disconnect, device number 25
[  256.420848][T13153] syzkaller1: entered promiscuous mode
[  256.420915][T13153] syzkaller1: entered allmulticast mode
[  256.423113][T13152] ALSA: mixer_oss: invalid OSS volume ''
[  256.454752][T13150] kvm [13149]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  256.458635][T13150] kvm [13149]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  256.497612][T13157] batman_adv: batadv0: Adding interface: wlan0
[  256.497670][T13157] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.497716][T13157] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active
[  256.942199][T13167] netlink: 'syz.5.1840': attribute type 2 has an invalid length.
[  256.956398][T13167] netlink: 'syz.5.1840': attribute type 2 has an invalid length.
[  256.956451][T13167] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.1840'.
[  256.956891][T13167] lo: Caught tx_queue_len zero misconfig
[  256.956912][T13167] netlink: 'syz.5.1840': attribute type 14 has an invalid length.
[  257.002464][T13172] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1842'.
[  257.574067][T13226] openvswitch: netlink: IP tunnel dst address not specified
[  257.610526][T13228] CIFS: Attempting to mount //127.0.0.1/share
[  257.622365][T13228] CIFS: VFS: Error connecting to socket. Aborting operation.
[  257.622497][T13228] CIFS: VFS: cifs_mount failed w/return code = -111
[  257.698261][T13235] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  257.758818][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'.
[  257.971807][T13252] netlink: 'syz.4.1859': attribute type 21 has an invalid length.
[  257.971850][T13252] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1859'.
[  257.971912][T13252] netlink: 'syz.4.1859': attribute type 5 has an invalid length.
[  257.971935][T13252] netlink: 'syz.4.1859': attribute type 6 has an invalid length.
[  257.971956][T13252] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1859'.
[  258.074249][T13252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  258.096103][T13252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  258.096167][T13252] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[  258.096188][T13252] UDF-fs: Scanning with blocksize 512 failed
[  258.096669][T13252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  258.096745][T13252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  258.096783][T13252] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[  258.096808][T13252] UDF-fs: Scanning with blocksize 1024 failed
[  258.097497][T13252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  258.097564][T13252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  258.097586][T13252] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[  258.097606][T13252] UDF-fs: Scanning with blocksize 2048 failed
[  258.097833][T13252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  258.097892][T13252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  258.097915][T13252] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[  258.097935][T13252] UDF-fs: Scanning with blocksize 4096 failed
[  258.097953][T13252] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  258.234034][T13265] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«=
[  258.234070][T13265] [U] J"—e:ÀÆ"


[  258.376023][T13271] loop6: detected capacity change from 0 to 8
[  258.430962][T13280] overlay: filesystem on ./file0 not supported as upperdir
[  258.575250][T13271] loop6: detected capacity change from 8 to 7
[  258.595163][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.595310][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.599455][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.599510][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.599618][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.599664][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.599758][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.599806][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.607820][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.607884][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.627305][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.627409][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.627923][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.627994][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.628407][T13271] ldm_validate_partition_table(): Disk read failed.
[  258.628516][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.628586][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.629122][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.629175][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.629291][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  258.629338][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  258.629490][T13271] Dev loop6: unable to read RDB block 0
[  258.629956][T13271]  loop6: unable to read partition table
[  258.630297][T13271] loop6: partition table beyond EOD, truncated
[  258.630338][T13271] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·�¶žMܾ`*ÎîZ´Ç5�¡]�z(¿Ťî4+hGËpX��„Ïgm
[  258.630338][T13271] ü òæôØ.BÊL_seÔ) failed (rc=-5)
[  258.732025][T13287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=13287 comm=syz.5.1868
[  258.844276][T13283] netlink: 'syz.6.1867': attribute type 10 has an invalid length.
[  258.850968][T13283] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  259.400956][T13335] FAULT_INJECTION: forcing a failure.
[  259.400956][T13335] name failslab, interval 1, probability 0, space 0, times 0
[  259.401013][T13335] CPU: 2 UID: 0 PID: 13335 Comm: syz.5.1881 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  259.401051][T13335] Tainted: [L]=SOFTLOCKUP
[  259.401058][T13335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  259.401067][T13335] Call Trace:
[  259.401072][T13335]  <TASK>
[  259.401080][T13335]  dump_stack_lvl+0x100/0x190
[  259.401133][T13335]  should_fail_ex.cold+0x5/0xa
[  259.401157][T13335]  should_failslab+0xc2/0x120
[  259.401179][T13335]  kmem_cache_alloc_noprof+0x92/0x6a0
[  259.401193][T13335]  ? __pfx_map_id_range_down+0x10/0x10
[  259.401208][T13335]  ? rcu_is_watching+0x13/0xc0
[  259.401227][T13335]  ? security_inode_alloc+0x3b/0x2c0
[  259.401250][T13335]  security_inode_alloc+0x3b/0x2c0
[  259.401271][T13335]  inode_init_always_gfp+0xc6f/0xfb0
[  259.401291][T13335]  alloc_inode+0x8e/0x250
[  259.401312][T13335]  sock_alloc+0x44/0x280
[  259.401330][T13335]  ? security_socket_create+0x7f/0x250
[  259.401351][T13335]  __sock_create+0xc2/0x860
[  259.401372][T13335]  __sys_socket+0x14d/0x260
[  259.401390][T13335]  ? __pfx___sys_socket+0x10/0x10
[  259.401417][T13335]  __x64_sys_socket+0x72/0xb0
[  259.401435][T13335]  ? lockdep_hardirqs_on+0x7d/0x110
[  259.401455][T13335]  do_syscall_64+0x123/0x790
[  259.401473][T13335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.401488][T13335] RIP: 0033:0x7f53f859e159
[  259.401500][T13335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.401514][T13335] RSP: 002b:00007f53f93cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  259.401530][T13335] RAX: ffffffffffffffda RBX: 00007f53f8825fa0 RCX: 00007f53f859e159
[  259.401539][T13335] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[  259.401547][T13335] RBP: 00007f53f8635024 R08: 0000000000000000 R09: 0000000000000000
[  259.401555][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.401563][T13335] R13: 00007f53f8826038 R14: 00007f53f8825fa0 R15: 00007fff84911d28
[  259.401582][T13335]  </TASK>
[  259.401672][T13335] socket: no more sockets
[  259.499573][T13341] macvtap1: entered promiscuous mode
[  259.499620][T13341] vlan0: entered promiscuous mode
[  259.500586][T13341] team0: Device macvtap1 is up. Set it down before adding it as a team port
[  259.504378][T13341] vlan0: left promiscuous mode
[  259.629700][T13345] veth1_macvtap: left promiscuous mode
[  259.629749][T13345] macsec0: entered promiscuous mode
[  259.636209][T13345] veth1_macvtap: entered promiscuous mode
[  259.636474][T13345] macsec0: left promiscuous mode
[  259.644923][T13345] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[  259.758010][T13347] ufs: ufs_fill_super(): bad magic number
[  259.764478][T13348] ufs: ufs_fill_super(): bad magic number
[  260.290924][ T9631] 9pnet_virtio virtio2: p9_virtio_remove: waiting for device in use.
[  260.321343][T13397] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1898'.
[  260.659525][   T43] kauditd_printk_skb: 102 callbacks suppressed
[  260.661337][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1904'.
[  260.665769][   T43] audit: type=1400 audit(260.546:4004): avc:  denied  { setattr } for  pid=13424 comm="syz.4.1904" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  260.754691][   T43] audit: type=1800 audit(260.636:4005): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  260.872144][   T43] audit: type=1800 audit(260.756:4006): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  260.950763][   T43] audit: type=1800 audit(260.836:4007): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  260.980877][   T43] audit: type=1800 audit(260.866:4008): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  261.023973][   T43] audit: type=1800 audit(260.906:4009): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  261.068955][   T43] audit: type=1800 audit(260.956:4010): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  261.105723][   T43] audit: type=1800 audit(260.986:4011): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191764 res=0 errno=0
[  261.105794][   T43] audit: type=1800 audit(260.986:4012): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=191768 res=0 errno=0
[  261.120844][   T43] audit: type=1800 audit(261.006:4013): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  261.163192][T13445] block2mtd: illegal erase size
[  261.488824][    C3] vcan0: j1939_tp_rxtimer: 0xffff888049ccc400: rx timeout, send abort
[  261.562447][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'.
[  261.562519][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'.
[  261.745582][T13486] netlink: 'syz.5.1921': attribute type 3 has an invalid length.
[  261.745962][T13486] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1921'.
[  261.989253][    C3] vcan0: j1939_tp_rxtimer: 0xffff888049ccec00: rx timeout, send abort
[  261.991331][    C3] vcan0: j1939_tp_rxtimer: 0xffff888049ccc400: abort rx timeout. Force session deactivation
[  262.044078][T13492] netlink: 1096 bytes leftover after parsing attributes in process `syz.4.1923'.
[  262.273009][T13510] vxcan0: tx address claim with dlc 180
[  262.395932][T13512] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  262.489369][    C3] vcan0: j1939_tp_rxtimer: 0xffff888049ccec00: abort rx timeout. Force session deactivation
[  262.584456][T13527] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1933'.
[  262.584628][T13527] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1933'.
[  262.756413][T13526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.264603][ T5439] 8021q: adding VLAN 0 to HW filter on device eth1
[  263.426573][T13552] fuse: fd is not a fuse device
[  263.635115][T13556] 9pnet_virtio: no channels available for device syz
[  263.635944][T13556] openvswitch: netlink: IP tunnel TTL not specified.
[  263.635958][T13556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.643855][ T6061] IPVS: starting estimator thread 0...
[  263.648225][   T42] usb 9-1: new low-speed USB device number 26 using dummy_hcd
[  263.709047][T13561] netlink: 'syz.0.1941': attribute type 1 has an invalid length.
[  263.736337][T13561] bond0: entered allmulticast mode
[  263.747362][T13557] IPVS: using max 43 ests per chain, 103200 per kthread
[  263.756841][T13561] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  263.757026][T13561] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  263.765353][T13561] bond0: (slave vti0): making interface the new active one
[  263.765413][T13561] vti0: entered allmulticast mode
[  263.787581][T13561] bond0: (slave vti0): Enslaving as an active interface with an up link
[  263.795717][T13561] bond0 (unregistering): (slave vti0): Releasing backup interface
[  263.795790][T13561] vti0: left allmulticast mode
[  263.807858][   T42] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  263.809182][   T42] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  263.809267][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  263.809288][   T42] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  263.809306][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  263.809324][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  263.810388][   T42] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  263.810418][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  263.810437][   T42] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  263.810454][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  263.810472][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  263.811423][   T42] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  263.811557][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  263.811576][   T42] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  263.811592][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  263.811609][   T42] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  263.814462][   T42] usb 9-1: string descriptor 0 read error: -22
[  263.814556][   T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.822972][   T42] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  263.824766][T13561] bond0 (unregistering): Released all slaves
[  264.038653][   T25] usb 9-1: USB disconnect, device number 26
[  264.258994][T13573] /dev: Can't lookup blockdev
[  264.419945][T13585] <
[  264.682078][T13592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1949'.
[  264.876316][T13598] netlink: 'syz.6.1951': attribute type 12 has an invalid length.
[  264.876351][T13598] netlink: 'syz.6.1951': attribute type 29 has an invalid length.
[  264.876431][T13598] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1951'.
[  264.876454][T13598] netlink: 'syz.6.1951': attribute type 1 has an invalid length.
[  264.876473][T13598] netlink: 'syz.6.1951': attribute type 2 has an invalid length.
[  264.876493][T13598] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1951'.
[  265.403802][T13626] fuse: fd is not a fuse device
[  265.522677][T13637] ip6t_rpfilter: unknown options
[  265.553661][T13635] overlayfs: failed to resolve './bus': -2
[  265.616708][T13647] netlink: 'syz.0.1964': attribute type 29 has an invalid length.
[  265.616886][T13648] netlink: 'syz.0.1964': attribute type 29 has an invalid length.
[  265.713136][   T43] kauditd_printk_skb: 89 callbacks suppressed
[  265.713217][   T43] audit: type=1800 audit(265.596:4103): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  265.776174][   T43] audit: type=1800 audit(265.656:4104): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  265.799471][   T43] audit: type=1800 audit(265.686:4105): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  265.823711][T13653] overlayfs: missing 'lowerdir'
[  265.909493][   T43] audit: type=1800 audit(265.796:4106): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  265.966691][   T43] audit: type=1800 audit(265.846:4107): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  266.019947][T13662] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  266.020003][T13662] overlayfs: missing 'lowerdir'
[  266.065418][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'.
[  266.065503][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'.
[  266.095310][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'.
[  266.095376][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'.
[  266.118891][   T43] audit: type=1800 audit(266.006:4108): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  266.180216][   T43] audit: type=1800 audit(266.056:4109): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  266.229891][   T43] audit: type=1800 audit(266.116:4110): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  266.272077][   T43] audit: type=1800 audit(266.156:4111): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  266.272642][T13672] 9pnet_virtio: no channels available for device syz
[  266.304108][T13674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13674 comm=syz.4.1975
[  266.309951][T13674] netlink: 'syz.4.1975': attribute type 1 has an invalid length.
[  266.313914][   T43] audit: type=1800 audit(266.196:4112): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  266.313959][T13674] netlink: 'syz.4.1975': attribute type 1 has an invalid length.
[  266.364074][ T1162] nvmet: connect request for invalid subsystem testsubsys!
[  266.366517][T13672] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  266.404250][T13678] netlink: 'syz.5.1973': attribute type 10 has an invalid length.
[  266.411269][T13678] bridge0: port 4(syz_tun) entered disabled state
[  266.413892][T13678] syz_tun: left allmulticast mode
[  266.416055][T13678] bridge0: port 4(syz_tun) entered disabled state
[  266.427611][T13678] syz_tun: entered allmulticast mode
[  266.431395][T13678] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  266.567619][T13689] iommufd_mock iommufd_mock0: Adding to iommu group 2
[  266.711393][T13706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13706 comm=syz.4.1983
[  266.929050][T13711] iommufd_mock iommufd_mock0: Adding to iommu group 2
[  266.995019][T13711] netlink: 'syz.4.1984': attribute type 11 has an invalid length.
[  267.093690][T13715] __nla_validate_parse: 3 callbacks suppressed
[  267.096256][T13715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1985'.
[  267.453935][T13722] overlayfs: failed to resolve './file1': -2
[  267.630927][T13726] overlay: Unknown parameter 'permit_directio'
[  267.807886][T13730] binder: 13729:13730 ioctl 4018620d 0 returned -22
[  267.819841][T13730] binder: 13729:13730 ioctl c0306201 200000000640 returned -22
[  267.830751][T13733] binder: 13729:13733 ioctl 4018620d 0 returned -22
[  267.831275][T13737] binder: 13729:13737 ioctl c0306201 200000000640 returned -22
[  267.920577][T13744] IPv6: syztnl0: Disabled Multicast RS
[  267.990787][T13752] fuse: Unknown parameter 'nd'
[  268.034016][T13755] overlayfs: failed to verify upper (402/file1, ino=2221, err=-116)
[  268.034096][T13755] overlayfs: failed to verify index dir 'upper' xattr
[  268.034121][T13755] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  268.040247][T13752] gadgetfs: bound to dummy_udc driver
[  268.042533][T13754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.042732][T13754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.042935][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.043129][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.043603][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.043782][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.044294][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.044492][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.044882][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.046697][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.047274][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.047467][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.189113][T13772] binder: 13771:13772 ioctl c018620c 200000000040 returned -1
[  268.241849][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2003'.
[  268.664017][T13820] netlink: 42 bytes leftover after parsing attributes in process `syz.0.2016'.
[  268.695640][T13820] vcan1: entered allmulticast mode
[  269.515712][T13876] team0: Port device dummy0 removed
[  269.523283][T13876] bridge_slave_0: left allmulticast mode
[  269.523339][T13876] bridge_slave_0: left promiscuous mode
[  269.523783][T13876] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.535227][T13876] bridge_slave_1: left allmulticast mode
[  269.535301][T13876] bridge_slave_1: left promiscuous mode
[  269.535438][T13876] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.545978][T13876] bond0: (slave veth0_to_bond): Releasing backup interface
[  269.581514][T13876] bond0: (slave bond_slave_0): Releasing backup interface
[  269.610098][T13876] bond0: (slave bond_slave_1): Releasing backup interface
[  269.655467][T13876] team0: Port device team_slave_0 removed
[  269.661540][T13876] team0: Port device team_slave_1 removed
[  269.662903][T13876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  269.662947][T13877] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2025'.
[  269.669654][T13875] tipc: Started in network mode
[  269.669670][T13875] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  269.669751][T13875] tipc: Enabled bearer <eth:team0>, priority 0
[  269.792803][T13897] bond2: (slave macvlan0): Device is not bonding slave
[  269.792857][T13897] bond2: option active_slave: invalid value (macvlan0)
[  269.797882][T13897] bond2 (unregistering): Released all slaves
[  270.187358][   T10] usb 11-1: new low-speed USB device number 17 using dummy_hcd
[  270.342446][   T10] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  270.348050][   T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  270.348115][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  270.348176][   T10] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.348214][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  270.348253][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  270.373605][   T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  270.373681][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  270.373752][   T10] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.373795][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  270.373844][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  270.403012][   T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  270.403086][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  270.403151][   T10] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.403189][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  270.403227][   T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  270.431209][   T10] usb 11-1: string descriptor 0 read error: -22
[  270.431301][   T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.456507][   T10] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  270.537291][ T9631] 9pnet_virtio virtio2: p9_virtio_remove: waiting for device in use.
[  270.667581][ T5915] tipc: Node number set to 11578026
[  270.785484][ T5915] usb 11-1: USB disconnect, device number 17
[  270.828352][   T43] kauditd_printk_skb: 80 callbacks suppressed
[  270.830305][   T43] audit: type=1800 audit(270.716:4193): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  270.840174][   T43] audit: type=1800 audit(270.726:4194): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193900 res=0 errno=0
[  270.846768][   T43] audit: type=1800 audit(270.726:4195): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=193904 res=0 errno=0
[  270.940530][   T43] audit: type=1800 audit(270.826:4196): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  270.986851][   T43] audit: type=1800 audit(270.866:4197): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  271.038127][   T43] audit: type=1800 audit(270.926:4198): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  271.086195][   T43] audit: type=1400 audit(270.966:4199): avc:  denied  { ioctl } for  pid=13932 comm="syz.5.2036" path="/307/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=6411 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  271.087553][T13936] 9pnet_virtio: no channels available for device syz
[  271.096488][   T43] audit: type=1800 audit(270.976:4200): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  271.120219][   T43] audit: type=1800 audit(271.006:4201): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  271.151761][T13938] lo: entered promiscuous mode
[  271.155244][T13938] tunl0: entered promiscuous mode
[  271.162610][T13938] gre0: entered promiscuous mode
[  271.171188][T13938] gretap0: entered promiscuous mode
[  271.173355][T13938] erspan0: entered promiscuous mode
[  271.180089][T13938] ip_vti0: entered promiscuous mode
[  271.181938][T13938] ip6_vti0: entered promiscuous mode
[  271.184193][T13938] sit0: entered promiscuous mode
[  271.186330][T13938] ip6tnl0: entered promiscuous mode
[  271.191032][T13938] ip6gre0: entered promiscuous mode
[  271.195948][T13938] syz_tun: entered promiscuous mode
[  271.201586][T13938] ip6gretap0: entered promiscuous mode
[  271.212185][T13938] bridge0: entered promiscuous mode
[  271.215325][T13938] vcan0: entered promiscuous mode
[  271.220446][T13938] bond0: entered promiscuous mode
[  271.223625][T13938] tipc: Resetting bearer <eth:team0>
[  271.226165][T13938] team0: entered promiscuous mode
[  271.231075][T13938] dummy0: entered promiscuous mode
[  271.233226][T13938] nlmon0: entered promiscuous mode
[  271.235046][T13938] vxcan0: entered promiscuous mode
[  271.235731][T13938] vxcan1: entered promiscuous mode
[  271.236336][T13938] veth0: entered promiscuous mode
[  271.240020][T13938] veth1: entered promiscuous mode
[  271.246066][T13938] wg0: entered promiscuous mode
[  271.249523][T13938] wg1: entered promiscuous mode
[  271.251909][T13938] wg2: entered promiscuous mode
[  271.253287][T13938] veth0_to_bridge: entered promiscuous mode
[  271.254622][T13938] bridge_slave_0: entered promiscuous mode
[  271.256231][T13938] veth1_to_bridge: entered promiscuous mode
[  271.261327][T13938] bridge_slave_1: entered promiscuous mode
[  271.262849][T13938] veth0_to_bond: entered promiscuous mode
[  271.262970][T13938] bond_slave_0: entered promiscuous mode
[  271.269916][T13938] veth1_to_bond: entered promiscuous mode
[  271.272850][T13938] bond_slave_1: entered promiscuous mode
[  271.275103][T13938] veth0_to_team: entered promiscuous mode
[  271.280136][T13938] team_slave_0: entered promiscuous mode
[  271.282241][T13938] veth1_to_team: entered promiscuous mode
[  271.284663][T13938] team_slave_1: entered promiscuous mode
[  271.284901][T13938] veth0_to_batadv: entered promiscuous mode
[  271.289587][T13938] batadv_slave_0: entered promiscuous mode
[  271.294986][T13938] veth1_to_batadv: entered promiscuous mode
[  271.296472][T13938] batadv_slave_1: entered promiscuous mode
[  271.298405][T13938] xfrm0: entered promiscuous mode
[  271.299325][T13938] veth0_to_hsr: entered promiscuous mode
[  271.302311][T13938] veth1_to_hsr: entered promiscuous mode
[  271.304300][T13938] hsr0: entered promiscuous mode
[  271.305398][T13938] veth1_virt_wifi: entered promiscuous mode
[  271.306433][T13938] veth0_virt_wifi: entered promiscuous mode
[  271.308889][T13938] virt_wifi0: entered promiscuous mode
[  271.311623][T13938] vlan0: entered promiscuous mode
[  271.313013][T13938] vlan1: entered promiscuous mode
[  271.314244][T13938] macvlan0: entered promiscuous mode
[  271.337359][T13938] macvlan1: entered promiscuous mode
[  271.338807][T13938] ipvlan0: entered promiscuous mode
[  271.338991][T13938] ipvlan1: entered promiscuous mode
[  271.377449][T13938] macvtap0: entered promiscuous mode
[  271.379023][T13938] macsec0: entered promiscuous mode
[  271.380434][T13938] geneve0: entered promiscuous mode
[  271.381812][T13938] geneve1: entered promiscuous mode
[  271.388897][T13938] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  271.392613][T13938] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[  271.398479][T13938] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[  271.403147][T13938] netdevsim netdevsim6 netdevsim3: entered promiscuous mode
[  271.439544][T13938] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  271.484051][T13938] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode
[  271.485023][T13938] vxlan0: entered promiscuous mode
[  271.485092][T13938] mac80211_hwsim hwsim20 caif0: entered promiscuous mode
[  271.485161][T13938] K: entered promiscuous mode
[  271.487872][T13938] syzkaller0: entered promiscuous mode
[  271.488400][T13938] bridge1: entered promiscuous mode
[  271.507192][ T5773] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.511743][ T5773] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.515518][ T5773] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.515556][ T5773] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.546767][   T43] audit: type=1800 audit(271.426:4202): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  271.576338][T13941] Invalid argument reading file caps for ./file0
[  271.665881][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2040'.
[  271.722186][T13949] fuse: fd is not a fuse device
[  271.745666][T13951] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  271.781777][T13949] ieee802154 phy0 wpan0: encryption failed: -22
[  271.812936][ T1174] IPVS: starting estimator thread 0...
[  271.897436][T13955] IPVS: using max 43 ests per chain, 103200 per kthread
[  271.989397][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'.
[  271.989442][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'.
[  272.021089][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.022977][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.023261][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.024677][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.024889][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.025912][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.026157][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.039987][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.040283][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.047931][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.048205][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.048494][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.050733][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.052566][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.053382][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.054306][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.054590][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.054925][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.056045][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.057296][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.060163][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.060838][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.061037][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.061327][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.061516][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.061695][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.061929][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.062448][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.062728][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.062925][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.063113][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.063638][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.063844][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.064029][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.064209][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.064388][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.064739][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.065873][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.066068][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.066279][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.066625][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.067374][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.068066][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.068190][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.068380][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.068492][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.068720][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.069170][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.069530][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.070310][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.070562][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.070803][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.071423][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.072262][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.072888][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.073725][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.074381][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.074605][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.076093][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.077621][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.077780][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.077923][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.078249][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.078681][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.078877][T13968] program syz.5.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.447954][T14008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'.
[  272.462748][T14007] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[  272.676399][T14015] cgroup: Unknown subsys name 'cpuset'
[  272.708705][T14017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40192 sclass=netlink_route_socket pid=14017 comm=syz.6.2056
[  272.866236][T14038] fuse: fd is not a fuse device
[  272.989712][   T74] block nbd1: Possible stuck request ffff888028d10000: control (read@0,1024B). Runtime 150 seconds
[  272.989853][   T74] block nbd1: Possible stuck request ffff888028d101c0: control (read@1024,1024B). Runtime 150 seconds
[  272.989904][   T74] block nbd1: Possible stuck request ffff888028d10380: control (read@2048,1024B). Runtime 150 seconds
[  272.989953][   T74] block nbd1: Possible stuck request ffff888028d10540: control (read@3072,1024B). Runtime 150 seconds
[  272.995639][ T5100] block nbd2: Possible stuck request ffff888028d8e000: control (read@0,1024B). Runtime 150 seconds
[  272.995663][ T5100] block nbd2: Possible stuck request ffff888028d8e1c0: control (read@1024,1024B). Runtime 150 seconds
[  272.995677][ T5100] block nbd2: Possible stuck request ffff888028d8e380: control (read@2048,1024B). Runtime 150 seconds
[  272.995690][ T5100] block nbd2: Possible stuck request ffff888028d8e540: control (read@3072,1024B). Runtime 150 seconds
[  273.159211][T14045] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  273.161934][T14045] overlayfs: failed to set xattr on upper
[  273.164047][T14045] overlayfs: ...falling back to redirect_dir=nofollow.
[  273.166758][T14045] overlayfs: ...falling back to index=off.
[  273.169216][T14045] overlayfs: ...falling back to uuid=null.
[  273.171450][T14045] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  273.269946][T14049] xt_hl: Unknown Hop Limit match mode: 206
[  273.558069][T14068] fuse: fd is not a fuse device
[  273.908751][T14082] xt_CT: You must specify a L4 protocol and not use inversions on it
[  273.958717][T14085] fuse: fd is not a fuse device
[  274.076760][ T1174] IPVS: starting estimator thread 0...
[  274.145767][T14100] veth0_macvtap: Caught tx_queue_len zero misconfig
[  274.152722][T14102] 9pnet_virtio: no channels available for device syz
[  274.158930][T14096] IPVS: using max 43 ests per chain, 103200 per kthread
[  274.173516][T14102] No control pipe specified
[  274.199974][T14109] exFAT-fs (nullb0): invalid boot record signature
[  274.200030][T14109] exFAT-fs (nullb0): failed to read boot sector
[  274.200084][T14109] exFAT-fs (nullb0): failed to recognize exfat type
[  274.289974][T14117] ptrace attach of "/syz-executor exec"[10562] was attempted by ""[14117]
[  274.338356][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2084'.
[  274.342512][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2082'.
[  274.463529][T14125] vivid-007: =================  START STATUS  =================
[  274.463602][T14125] vivid-007: Generate PTS: true
[  274.463669][T14125] vivid-007: Generate SCR: true
[  274.463688][T14125] tpg source WxH: 320x240 (Y'CbCr)
[  274.463699][T14125] tpg field: 1
[  274.463705][T14125] tpg crop: (0,0)/320x240
[  274.463716][T14125] tpg compose: (0,0)/320x240
[  274.463727][T14125] tpg colorspace: 8
[  274.463733][T14125] tpg transfer function: 0/0
[  274.463741][T14125] tpg Y'CbCr encoding: 0/0
[  274.463750][T14125] tpg quantization: 0/0
[  274.463757][T14125] tpg RGB range: 0/2
[  274.463764][T14125] vivid-007: ==================  END STATUS  ==================
[  274.609590][T14135] 9pnet_virtio: no channels available for device syz
[  274.705708][T14143] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  274.705781][T14143] overlayfs: failed to set xattr on upper
[  274.705808][T14143] overlayfs: ...falling back to redirect_dir=nofollow.
[  274.705826][T14143] overlayfs: ...falling back to metacopy=off.
[  274.705843][T14143] overlayfs: ...falling back to index=off.
[  274.705859][T14143] overlayfs: ...falling back to uuid=null.
[  274.782270][T14138] SELinux:  Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped).
[  275.159214][T14152] comedi comedi3: comedi_test: 4 microvolt, 2 microsecond waveform attached
[  275.369915][T14166] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[  275.415479][T14169] tipc: Resetting bearer <eth:team0>
[  275.419726][T14170] sctp: [Deprecated]: syz.6.2098 (pid 14170) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.419726][T14170] Use struct sctp_sack_info instead
[  275.469367][T14170] validate_nla: 2 callbacks suppressed
[  275.470027][T14170] netlink: 'syz.6.2098': attribute type 19 has an invalid length.
[  275.850468][   T43] kauditd_printk_skb: 124 callbacks suppressed
[  275.850538][   T43] audit: type=1800 audit(275.736:4327): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  275.863428][   T43] audit: type=1800 audit(275.746:4328): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  275.893412][   T43] audit: type=1400 audit(275.776:4329): avc:  denied  { append } for  pid=14206 comm="syz.5.2112" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  275.974815][   T43] audit: type=1800 audit(275.856:4330): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  276.016089][   T43] audit: type=1800 audit(275.896:4331): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  276.038970][   T43] audit: type=1800 audit(275.926:4332): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  276.083985][   T43] audit: type=1800 audit(275.966:4333): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  276.115744][   T43] audit: type=1800 audit(275.996:4334): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  276.133689][   T43] audit: type=1800 audit(276.016:4335): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  276.146487][   T43] audit: type=1800 audit(276.026:4336): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194602 res=0 errno=0
[  276.162476][T11696] Bluetooth: hci0: Frame reassembly failed (-84)
[  276.360666][T14237] xt_NFQUEUE: number of total queues is 0
[  276.513417][T14240] Bluetooth: ISO socket layer initialized
[  276.648688][T14199] orangefs_mount: mount request failed with -4
[  276.748274][T14250] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1401313872 (22421021952 ns) > initial count (834926096 ns). Using initial count to start timer.
[  276.850441][T14255] xt_hashlimit: size too large, truncated to 1048576
[  276.956771][T14267] overlay: Unknown parameter 'obj_role'
[  276.961022][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'.
[  277.128075][T14282] netlink: 'syz.0.2134': attribute type 1 has an invalid length.
[  277.737244][ T5915] usb 10-1: new full-speed USB device number 26 using dummy_hcd
[  277.887753][ T5915] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  277.892872][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.897850][ T5915] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  277.901878][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.907468][ T5915] usb 10-1: config 0 descriptor??
[  277.911394][ T5915] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  277.911705][ T5915] dvb-usb: bulk message failed: -22 (3/0)
[  277.924910][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  277.927867][ T5915] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  277.927912][ T5915] usb 10-1: media controller created
[  277.938689][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  277.953610][ T5915] dvb-usb: bulk message failed: -22 (6/0)
[  277.953738][ T5915] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  277.962016][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input19
[  277.965957][ T5915] dvb-usb: schedule remote query interval to 150 msecs.
[  277.965976][ T5915] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  278.022229][T14304] /dev/sg0: Can't lookup blockdev
[  278.023849][T14304] fuse: fd is not a fuse device
[  278.121267][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  278.121365][ T5915] dvb-usb: error while querying for an remote control event.
[  278.123549][T14306] nvme_fabrics: missing parameter 'transport=%s'
[  278.123563][T14306] nvme_fabrics: missing parameter 'nqn=%s'
[  278.192685][ T5086] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  278.228829][   T10] usb 10-1: USB disconnect, device number 26
[  278.325039][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  278.920882][T14325] 9pnet_virtio: no channels available for device syz
[  278.963819][T14330] xt_l2tp: missing protocol rule (udp|l2tpip)
[  279.067780][T14334] loop7: detected capacity change from 0 to 1
[  279.203085][T14334] loop7: detected capacity change from 1 to 0
[  279.260603][T14339] fuse: fd is not a fuse device
[  279.545194][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2161'.
[  279.570821][T14369] 8021q: adding VLAN 0 to HW filter on device bond4
[  279.642866][T14377] gadgetfs: bound to dummy_udc driver
[  279.876680][T14431] fuse: fd is not a fuse device
[  280.393974][T14453] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  280.404264][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2176'.
[  280.407821][T14453] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  280.438803][T14458] hpfs: Bad magic ... probably not HPFS
[  280.501842][T14462] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  280.501915][T14462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  280.693247][T14481] jffs2: notice: (14481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  280.709558][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2185'.
[  280.788664][T14487] program syz.5.2187 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.789862][T14486] IPVS: Unknown mcast interface: netpci0
[  280.853317][T14490] pimreg: entered allmulticast mode
[  280.859802][   T43] kauditd_printk_skb: 128 callbacks suppressed
[  280.859855][   T43] audit: type=1800 audit(280.746:4465): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  280.860144][T14490] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  280.866136][   T43] audit: type=1804 audit(280.746:4466): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2188" name="/newroot/466/file0" dev="tmpfs" ino=2633 res=1 errno=0
[  280.906832][   T43] audit: type=1800 audit(280.786:4467): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  280.924312][   T43] audit: type=1400 audit(280.806:4468): avc:  denied  { create } for  pid=14494 comm="syz.4.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  280.933346][   T43] audit: type=1800 audit(280.816:4469): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0
[  280.949864][   T43] audit: type=1800 audit(280.836:4470): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  280.966055][   T43] audit: type=1400 audit(280.846:4471): avc:  denied  { create } for  pid=14498 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  280.967798][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'.
[  280.969582][   T43] audit: type=1400 audit(280.856:4472): avc:  denied  { write } for  pid=14498 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  280.969591][T14500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2193'.
[  280.972776][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2192'.
[  280.996038][   T43] audit: type=1800 audit(280.876:4473): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0
[  281.085810][   T43] audit: type=1800 audit(280.966:4474): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0
[  281.096655][T14513] /dev/sr0: Can't open blockdev
[  281.102364][T14513] fuse: fd is not a fuse device
[  281.381071][T14538] fuse: fd is not a fuse device
[  281.462568][T14546] FAULT_INJECTION: forcing a failure.
[  281.462568][T14546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.462628][T14546] CPU: 0 UID: 0 PID: 14546 Comm: syz.0.2207 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.462655][T14546] Tainted: [L]=SOFTLOCKUP
[  281.462660][T14546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  281.462667][T14546] Call Trace:
[  281.462671][T14546]  <TASK>
[  281.462676][T14546]  dump_stack_lvl+0x100/0x190
[  281.462715][T14546]  should_fail_ex.cold+0x5/0xa
[  281.462732][T14546]  _copy_from_user+0x2e/0xd0
[  281.462753][T14546]  copy_msghdr_from_user+0x9f/0x4c0
[  281.462772][T14546]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  281.462789][T14546]  ? lock_acquire+0x1d1/0x380
[  281.462801][T14546]  ? get_pid_task+0x2a/0x250
[  281.462817][T14546]  ___sys_sendmsg+0x106/0x1e0
[  281.462832][T14546]  ? __pfx____sys_sendmsg+0x10/0x10
[  281.462846][T14546]  ? get_pid_task+0x106/0x250
[  281.462865][T14546]  ? find_held_lock+0x2b/0x80
[  281.462892][T14546]  __sys_sendmsg+0x160/0x210
[  281.462904][T14546]  ? __pfx___sys_sendmsg+0x10/0x10
[  281.462923][T14546]  do_syscall_64+0x123/0x790
[  281.462940][T14546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.462953][T14546] RIP: 0033:0x7fa78a39e159
[  281.462962][T14546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.462972][T14546] RSP: 002b:00007fa78b2af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.462983][T14546] RAX: ffffffffffffffda RBX: 00007fa78a625fa0 RCX: 00007fa78a39e159
[  281.462990][T14546] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  281.462996][T14546] RBP: 00007fa78b2af090 R08: 0000000000000000 R09: 0000000000000000
[  281.463002][T14546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.463009][T14546] R13: 00007fa78a626038 R14: 00007fa78a625fa0 R15: 00007ffd438cb338
[  281.463025][T14546]  </TASK>
[  281.945787][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2211'.
[  281.975926][T14560] fuse: fd is not a fuse device
[  284.259550][T14529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  284.292884][T14566] ata1.00: invalid cdb length 6
[  284.343597][T14566] bridge2: entered promiscuous mode
[  284.343653][T14566] bridge2: entered allmulticast mode
[  284.470218][T14569] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  284.470261][T14569] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  284.470513][T14569] udc dummy_udc.0: failed to start g1: -22
[  284.470625][T14569] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  284.492098][T14569] UDC core: g1: couldn't find an available UDC or it's busy
[  284.629568][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.629888][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.630136][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.630399][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.630786][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.631020][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.631247][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.631479][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.631810][T14601] ip_tables: iptables: counters copy to user failed while replacing table
[  284.685735][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2225'.
[  284.689002][T14607] comedi comedi1: mpc624: I/O port conflict (0x140,16)
[  284.798016][T14611] FAULT_INJECTION: forcing a failure.
[  284.798016][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.798108][T14611] CPU: 2 UID: 0 PID: 14611 Comm: syz.5.2226 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  284.798169][T14611] Tainted: [L]=SOFTLOCKUP
[  284.798177][T14611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  284.798187][T14611] Call Trace:
[  284.798193][T14611]  <TASK>
[  284.798201][T14611]  dump_stack_lvl+0x100/0x190
[  284.798232][T14611]  should_fail_ex.cold+0x5/0xa
[  284.798258][T14611]  _copy_from_iter+0x1f4/0x1690
[  284.798286][T14611]  ? __asan_memset+0x23/0x50
[  284.798313][T14611]  ? __pfx__copy_from_iter+0x10/0x10
[  284.798340][T14611]  ? __pfx___alloc_skb+0x10/0x10
[  284.798376][T14611]  netlink_sendmsg+0x808/0xda0
[  284.798406][T14611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.798433][T14611]  ? selinux_socket_sendmsg+0x198/0x2f0
[  284.798464][T14611]  ____sys_sendmsg+0xa4d/0xbe0
[  284.798484][T14611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.798513][T14611]  ? __pfx_____sys_sendmsg+0x10/0x10
[  284.798541][T14611]  ? lock_acquire+0x1d1/0x380
[  284.798560][T14611]  ? get_pid_task+0x2a/0x250
[  284.798586][T14611]  ___sys_sendmsg+0x190/0x1e0
[  284.798611][T14611]  ? __pfx____sys_sendmsg+0x10/0x10
[  284.798634][T14611]  ? get_pid_task+0x106/0x250
[  284.798667][T14611]  ? find_held_lock+0x2b/0x80
[  284.798706][T14611]  __sys_sendmsg+0x160/0x210
[  284.798725][T14611]  ? __pfx___sys_sendmsg+0x10/0x10
[  284.798756][T14611]  do_syscall_64+0x123/0x790
[  284.798785][T14611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.798804][T14611] RIP: 0033:0x7f53f859e159
[  284.798820][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.798836][T14611] RSP: 002b:00007f53f93cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  284.798854][T14611] RAX: ffffffffffffffda RBX: 00007f53f8825fa0 RCX: 00007f53f859e159
[  284.798866][T14611] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  284.798876][T14611] RBP: 00007f53f93cb090 R08: 0000000000000000 R09: 0000000000000000
[  284.798887][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.798896][T14611] R13: 00007f53f8826038 R14: 00007f53f8825fa0 R15: 00007fff84911d28
[  284.798918][T14611]  </TASK>
[  284.996437][T14621] netlink: 'syz.4.2228': attribute type 11 has an invalid length.
[  284.996492][T14621] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2228'.
[  285.035625][T14621] can0: slcan on ttyS3.
[  285.175675][T12483] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  285.461988][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2236'.
[  285.552846][T14651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8468 sclass=netlink_route_socket pid=14651 comm=syz.5.2234
[  285.850602][T14614] can0 (unregistered): slcan off ttyS3.
[  285.879216][   T43] kauditd_printk_skb: 63 callbacks suppressed
[  285.879297][   T43] audit: type=1400 audit(285.766:4538): avc:  denied  { write } for  pid=14656 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  285.963793][   T43] audit: type=1800 audit(285.846:4539): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0
[  285.994125][   T43] audit: type=1326 audit(285.876:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.4.2237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6759e159 code=0x7ffc0000
[  285.995887][   T43] audit: type=1326 audit(285.876:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.4.2237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6759e159 code=0x7ffc0000
[  285.996215][   T43] audit: type=1326 audit(285.876:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.4.2237" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb6759e159 code=0x7ffc0000
[  285.996515][   T43] audit: type=1326 audit(285.876:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.4.2237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6759e159 code=0x7ffc0000
[  285.998597][   T43] audit: type=1326 audit(285.886:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.4.2237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6759e159 code=0x7ffc0000
[  286.001586][   T43] audit: type=1326 audit(285.886:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.4.2237" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbb6759e159 code=0x7ffc0000
[  286.001615][   T43] audit: type=1326 audit(285.886:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.4.2237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6759e159 code=0x7ffc0000
[  286.001637][   T43] audit: type=1326 audit(285.886:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.4.2237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6759e159 code=0x7ffc0000
[  286.034841][T14646] kvm: user requested TSC rate below hardware speed
[  286.406639][T14691] netlink: 'syz.6.2244': attribute type 1 has an invalid length.
[  286.463635][T14691] 8021q: adding VLAN 0 to HW filter on device bond2
[  286.543302][T14699] tipc: Started in network mode
[  286.543406][T14699] tipc: Node identity ac1414aa, cluster identity 4711
[  286.543484][T14699] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  286.622604][T14694] bond2: (slave geneve2): making interface the new active one
[  286.626088][T14694] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  286.664528][T14703] fuse: fd is not a fuse device
[  286.691092][ T5801] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.691212][ T5801] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.691245][ T5801] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.691277][ T5801] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.465365][T14731] can: request_module (can-proto-0) failed.
[  287.718187][T14746] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  287.726399][T14748] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  287.783063][T14757] overlay: Unknown parameter 'uid'
[  287.940985][T14768] Cannot find add_set index 65532 as target
[  288.017220][ T5916] usb 11-1: new high-speed USB device number 18 using dummy_hcd
[  288.064247][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'.
[  288.108038][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2274'.
[  288.167704][ T5916] usb 11-1: Using ep0 maxpacket: 16
[  288.168380][ T5916] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  288.169419][ T5916] usb 11-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16
[  288.169442][ T5916] usb 11-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023
[  288.169462][ T5916] usb 11-1: config 1 interface 0 has no altsetting 0
[  288.173668][ T5916] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.173698][ T5916] usb 11-1: Product: syz
[  288.173710][ T5916] usb 11-1: Manufacturer: syz
[  288.173724][ T5916] usb 11-1: SerialNumber: syz
[  288.182556][T14755] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  288.182611][T14755] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  288.356412][   T44] INFO: task syz.2.693:8565 blocked in I/O wait for more than 143 seconds.
[  288.356497][   T44]       Tainte
** replaying previous printk message **
[  288.356497][   T44]       Tainted: G             L      syzkaller #0
[  288.356553][   T44] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.356578][   T44] task:syz.2.693       state:D stack:24888 pid:8565  tgid:8562  ppid:5728   task_flags:0x400140 flags:0x00080002
[  288.356632][   T44] Call Trace:
[  288.356643][   T44]  <TASK>
[  288.356652][   T44]  __schedule+0x1259/0x6920
[  288.356680][   T44]  ? __lock_acquire+0x4c5/0x1ec0
[  288.356698][   T44]  ? lock_acquire+0x1d1/0x380
[  288.356712][   T44]  ? lock_acquire+0x1d1/0x380
[  288.356724][   T44]  ? __pfx___schedule+0x10/0x10
[  288.356735][   T44]  ? find_held_lock+0x2b/0x80
[  288.356751][   T44]  ? schedule+0x225/0x2c0
[  288.356765][   T44]  schedule+0xdd/0x2c0
[  288.356776][   T44]  io_schedule+0x8a/0xf0
[  288.356791][   T44]  folio_wait_bit_common+0x414/0xa80
[  288.356818][   T44]  ? folio_wait_bit_common+0x2a0/0xa80
[  288.356844][   T44]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  288.356862][   T44]  ? __pfx_wake_page_function+0x10/0x10
[  288.356885][   T44]  ? __pfx___might_resched+0x10/0x10
[  288.356902][   T44]  ? compaction_free+0x17d/0x470
[  288.356927][   T44]  migrate_pages_batch+0x165f/0x4680
[  288.357382][   T44]  ? print_kernel_ident+0x10/0x40
[  288.357408][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  288.357427][   T44]  ? __pfx_compaction_free+0x10/0x10
[  288.357463][   T44]  ? __pfx_migrate_pages_batch+0x10/0x10
[  288.357486][   T44]  ? rcu_is_watching+0x13/0xc0
[  288.357513][   T44]  ? __schedule+0x315b/0x6920
[  288.357543][   T44]  migrate_pages_sync+0x4db/0x880
[  288.357570][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  288.357588][   T44]  ? __pfx_compaction_free+0x10/0x10
[  288.357611][   T44]  ? __pfx_migrate_pages_sync+0x10/0x10
[  288.357646][   T44]  migrate_pages+0x1a83/0x2850
[  288.357672][   T44]  ? isolate_migratepages_block+0xd74/0x6200
[  288.357698][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  288.357713][   T44]  ? __pfx_compaction_free+0x10/0x10
[  288.357738][   T44]  ? __pfx_migrate_pages+0x10/0x10
[  288.357767][   T44]  ? __pfx_isolate_migratepages_block+0x10/0x10
[  288.357791][   T44]  ? __pfx___might_resched+0x10/0x10
[  288.357808][   T44]  ? putback_movable_pages+0x7f1/0xc00
[  288.357833][   T44]  compact_zone+0x2643/0x4640
[  288.357862][   T44]  ? debug_object_free+0x295/0x550
[  288.357887][   T44]  ? __entry_text_end+0x598d/0x102039
[  288.357911][   T44]  ? __pfx_compact_zone+0x10/0x10
[  288.357928][   T44]  ? __flush_work+0xa38/0xcb0
[  288.357961][   T44]  ? __flush_work+0xa38/0xcb0
[  288.357997][   T44]  compact_node+0x17f/0x2c0
[  288.358024][   T44]  ? __pfx_compact_node+0x10/0x10
[  288.358070][   T44]  ? __lru_add_drain_all+0x4a6/0x820
[  288.358099][   T44]  sysctl_compaction_handler+0x141/0x210
[  288.358160][   T44]  proc_sys_call_handler+0x47f/0x5a0
[  288.358192][   T44]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  288.358218][   T44]  ? splice_from_pipe_next+0x1ec/0x5a0
[  288.358244][   T44]  iter_file_splice_write+0x830/0x10b0
[  288.358789][   T44]  ? __pfx_iter_file_splice_write+0x10/0x10
[  288.358811][   T44]  ? __pfx_copy_splice_read+0x10/0x10
[  288.358833][   T44]  ? __pfx_iter_file_splice_write+0x10/0x10
[  288.358849][   T44]  direct_splice_actor+0x192/0x690
[  288.358866][   T44]  splice_direct_to_actor+0x345/0xa30
[  288.358882][   T44]  ? __pfx_direct_splice_actor+0x10/0x10
[  288.358898][   T44]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  288.358915][   T44]  ? lock_acquire+0x1d1/0x380
[  288.358929][   T44]  do_splice_direct+0x174/0x240
[  288.358944][   T44]  ? __pfx_do_splice_direct+0x10/0x10
[  288.358969][   T44]  ? avc_policy_seqno+0x9/0x20
[  288.358984][   T44]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  288.358999][   T44]  ? rw_verify_area+0xce/0x6d0
[  288.359017][   T44]  do_sendfile+0xadc/0xe20
[  288.359037][   T44]  ? __pfx_do_sendfile+0x10/0x10
[  288.359059][   T44]  __x64_sys_sendfile64+0x154/0x220
[  288.359073][   T44]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  288.359133][   T44]  do_syscall_64+0x123/0x790
[  288.359150][   T44]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.359163][   T44] RIP: 0033:0x7fd2a8b9e159
[  288.359172][   T44] RSP: 002b:00007fd2a9aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  288.359189][   T44] RAX: ffffffffffffffda RBX: 00007fd2a8e26090 RCX: 00007fd2a8b9e159
[  288.359196][   T44] RDX: 00002000000000c0 RSI: 000000000000000a RDI: 000000000000000b
[  288.359203][   T44] RBP: 00007fd2a8c35024 R08: 0000000000000000 R09: 0000000000000000
[  288.359209][   T44] R10: 0080000000000005 R11: 0000000000000246 R12: 0000000000000000
[  288.359217][   T44] R13: 00007fd2a8e26128 R14: 00007fd2a8e26090 R15: 00007ffe74acaca8
[  288.359231][   T44]  </TASK>
[  288.359331][   T44] 
[  288.359331][   T44] Showing all locks held in the system:
[  288.359343][   T44] locks held by khungtaskd/44: 1, last CPU#0:
[  288.359351][   T44]  #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  288.359389][   T44] locks held by kworker/u35:0/67: 2, on CPU#1:
[  288.359398][   T44]  #0: ffff8880275cf940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  288.359431][   T44]  #1: ffffc90000b4fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  288.359521][   T44] locks held by syslogd/5119: 1, last CPU#2:
[  288.359529][   T44]  #0: ffff888025dc8e70 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30
[  288.359569][   T44] locks held by klogd/5126: 1, last CPU#2:
[  288.359577][   T44]  #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unix_dgram_sendmsg+0x653/0x1810
[  288.359610][   T44] locks held by getty/5528: 2, on CPU#2:
[  288.359617][   T44]  #0: ffff8880221300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  288.359648][   T44]  #1: ffffc900000eb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  288.359692][   T44] locks held by kworker/2:5/5916: 4, on CPU#2:
[  288.359700][   T44]  #0: ffff88802299c140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  288.359731][   T44]  #1: ffffc90004d77d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  288.359761][   T44]  #2: ffff88802650e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[  288.359789][   T44]  #3: ffff88803453d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  288.359820][   T44] locks held by kworker/u35:1/6420: 2, on CPU#2:
[  288.359827][   T44]  #0: ffff8880275cf940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  288.359857][   T44]  #1: ffffc90023a5fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  288.359887][   T44] locks held by kworker/u35:2/6421: 2, on CPU#2:
[  288.359895][   T44]  #0: ffff8880275cf940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  288.359926][   T44]  #1: ffffc90023bb7d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  288.359961][   T44] locks held by kworker/u35:3/6422: 2, on CPU#3:
[  288.359969][   T44]  #0: ffff888027f61940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  288.360000][   T44]  #1: ffffc90023ddfd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  288.360031][   T44] locks held by udevd/6808: 1, on CPU#0:
[  288.360038][   T44]  #0: ffff888028124350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  288.360070][   T44] locks held by udevd/7016: 1, on CPU#3:
[  288.360077][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  288.360111][   T44] locks held by kworker/u35:4/8392: 2, on CPU#2:
[  288.360118][   T44]  #0: ffff888027f61940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  288.360149][   T44]  #1: ffffc9002eef7d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  288.360179][   T44] locks held by kworker/u35:5/8402: 2, on CPU#2:
[  288.360187][   T44]  #0: ffff888027f61940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  288.360216][   T44]  #1: ffffc9002642fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  288.360248][   T44] locks held by syz.2.693/8565: 1, on CPU#2:
[  288.360255][   T44]  #0: ffff88802c40a460 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30
[  288.360290][   T44] locks held by udevd/9621: 5, on CPU#3:
[  288.360297][   T44]  #0: ffff888061028168 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  288.360328][   T44]  #1: ffff88803a84e518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[  288.360353][   T44]  #2: ffff888049ff6080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0
[  288.360388][   T44]  #3: ffff888013d15a58 (kn->active#15){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0
[  288.360422][   T44]  #4: ffff88803453d1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  288.360460][   T44] locks held by pr/ttyS0/12551: 2, last CPU#3:
[  288.360468][   T44]  #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[  288.360497][   T44]  #1: ffffffff9bc60c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[  288.360535][   T44] locks held by syz.0.2216/14573: 1, on CPU#0:
[  288.360543][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  288.360573][   T44] locks held by syz.0.2216/14577: 1, on CPU#3:
[  288.360581][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  288.360611][   T44] locks held by syz.0.2216/14588: 1, on CPU#3:
[  288.360618][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  288.360648][   T44] locks held by syz.0.2216/14591: 1, on CPU#0:
[  288.360655][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  288.360685][   T44] locks held by syz.0.2216/14595: 1, on CPU#0:
[  288.360692][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  288.360722][   T44] locks held by syz.0.2216/14605: 1, on CPU#2:
[  288.360730][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  288.360760][   T44] locks held by syz.0.2216/14608: 1, on CPU#2:
[  288.360767][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  288.360797][   T44] locks held by syz.0.2216/14609: 1, on CPU#2:
[  288.360805][   T44]  #0: ffff8880289dd350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  288.360837][   T44] locks held by syz.4.2276/14778: 1, on CPU#0:
[  288.360845][   T44]  #0: ffffffff8edf7e38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0
[  288.360878][   T44] locks held by syz.5.2277/14786: 2, last CPU#0:
[  288.360885][   T44]  #0: ffff888035617678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  288.360913][   T44]  #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  288.360938][   T44] 
[  288.360940][   T44] =============================================
[  288.360940][   T44] 
[  288.360946][   T44] NMI backtrace for cpu 0
[  288.360997][   T44] CPU: 0 UID: 0 PID: 44 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.361012][   T44] Tainted: [L]=SOFTLOCKUP
[  288.361016][   T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  288.361022][   T44] Call Trace:
[  288.361027][   T44]  <TASK>
[  288.361032][   T44]  dump_stack_lvl+0x100/0x190
[  288.361052][   T44]  nmi_cpu_backtrace.cold+0x12d/0x151
[  288.361070][   T44]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  288.361083][   T44]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  288.361102][   T44]  sys_info+0x141/0x190
[  288.361123][   T44]  watchdog+0xcb1/0x1030
[  288.361147][   T44]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  288.361174][   T44]  ? __pfx_watchdog+0x10/0x10
[  288.361191][   T44]  ? __kthread_parkme+0x18f/0x230
[  288.361221][   T44]  ? kthread+0x13a/0x450
[  288.361242][   T44]  ? __pfx_watchdog+0x10/0x10
[  288.361258][   T44]  kthread+0x373/0x450
[  288.361278][   T44]  ? __pfx_kthread+0x10/0x10
[  288.361299][   T44]  ret_from_fork+0x730/0xd60
[  288.361321][   T44]  ? __pfx_ret_from_fork+0x10/0x10
[  288.361346][   T44]  ? __switch_to+0x800/0x10f0
[  288.361369][   T44]  ? __pfx_kthread+0x10/0x10
[  288.361393][   T44]  ret_from_fork_asm+0x1a/0x30
[  288.361422][   T44]  </TASK>
[  288.361430][   T44] Sending NMI from CPU 0 to CPUs 2-3:
[  288.361484][    C2] NMI backtrace for cpu 2
[  288.361516][    C2] CPU: 2 UID: 0 PID: 5711 Comm: sshd-session Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.361538][    C2] Tainted: [L]=SOFTLOCKUP
[  288.361543][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  288.361551][    C2] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70
[  288.361573][    C2] Code: 00 be 03 00 00 00 5b e9 12 a4 1d 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 0c d4 7f 12 <48> 8b 34 24 65 48 8b 15 f0 d3 7f 12 48 63 c8 a9 00 01 00 ff 74 1e
[  288.361586][    C2] RSP: 0018:ffffc90005ba7e50 EFLAGS: 00000296
[  288.361599][    C2] RAX: 8000000000000000 RBX: ffff8880396fe380 RCX: ffffffff829e0f3a
[  288.361608][    C2] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff888027b68000
[  288.361617][    C2] RBP: ffff8880396fe380 R08: 0000000000000007 R09: 0000000000000003
[  288.361626][    C2] R10: ffff8880396fe380 R11: 0000000000000000 R12: ffffffffffffffff
[  288.361634][    C2] R13: 0000561119c09830 R14: dffffc0000000000 R15: 0000000000040000
[  288.361643][    C2] FS:  00007eff10245300(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000
[  288.361670][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  288.361681][    C2] CR2: 00007fb051ab273d CR3: 000000003df43000 CR4: 0000000000352ef0
[  288.361690][    C2] Call Trace:
[  288.361695][    C2]  <TASK>
[  288.361700][    C2]  fdget_pos+0x1a5/0x380
[  288.361724][    C2]  ksys_read+0x71/0x250
[  288.361744][    C2]  ? __pfx_ksys_read+0x10/0x10
[  288.361766][    C2]  do_syscall_64+0x123/0x790
[  288.361783][    C2]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.361796][    C2] RIP: 0033:0x7eff0faa7407
[  288.361806][    C2] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  288.361818][    C2] RSP: 002b:00007ffca3934b80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  288.361830][    C2] RAX: ffffffffffffffda RBX: 00007eff10245300 RCX: 00007eff0faa7407
[  288.361839][    C2] RDX: 0000000000040000 RSI: 0000561119c09830 RDI: 0000000000000004
[  288.361846][    C2] RBP: 00007ffca3934c30 R08: 0000000000000000 R09: 0000000000000000
[  288.361854][    C2] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  288.361862][    C2] R13: 0000000000000004 R14: 0000561119b43180 R15: 0000000000000004
[  288.361876][    C2]  </TASK>
[  288.361882][    C3] NMI backtrace for cpu 3
[  288.361902][    C3] CPU: 3 UID: 0 PID: 12551 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.361926][    C3] Tainted: [L]=SOFTLOCKUP
[  288.361933][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  288.361942][    C3] RIP: 0010:io_serial_out+0x8f/0xb0
[  288.361967][    C3] Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d e9 96 af 22 06 e8 81 38 cf fc eb a0 e8 0a 39 cf
[  288.361982][    C3] RSP: 0018:ffffc900057e79e0 EFLAGS: 00000002
[  288.361995][    C3] RAX: 000000000000005b RBX: 00000000000003f8 RCX: 0000000000000000
[  288.362004][    C3] RDX: 00000000000003f8 RSI: ffffffff85afc695 RDI: ffffffff9bc60ca0
[  288.362013][    C3] RBP: ffffffff9bc60c60 R08: 0000000000000001 R09: 000000000000001f
[  288.362022][    C3] R10: 0000000000000000 R11: 6154202020202020 R12: 0000000000000000
[  288.362031][    C3] R13: 000000000000005b R14: 000000000000000e R15: ffffc900057e7da8
[  288.362040][    C3] FS:  0000000000000000(0000) GS:ffff8880d5e64000(0000) knlGS:0000000000000000
[  288.362069][    C3] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  288.362082][    C3] CR2: 00007fff84912088 CR3: 00000000661dd000 CR4: 0000000000352ef0
[  288.362092][    C3] Call Trace:
[  288.362098][    C3]  <TASK>
[  288.362105][    C3]  __serial8250_console_fifo_write+0xd6/0x290
[  288.362157][    C3]  ? __pfx_io_serial_out+0x10/0x10
[  288.362182][    C3]  serial8250_console_write+0xf46/0x1330
[  288.362201][    C3]  ? __pfx_serial8250_console_write+0x10/0x10
[  288.362223][    C3]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[  288.362249][    C3]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[  288.362277][    C3]  nbcon_emit_next_record+0x8f7/0xa70
[  288.362304][    C3]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  288.362327][    C3]  ? nbcon_context_try_acquire+0x3a6/0xc60
[  288.362350][    C3]  ? do_raw_spin_lock+0x190/0x260
[  288.362371][    C3]  ? __pfx___cant_migrate+0x10/0x10
[  288.362391][    C3]  ? _raw_spin_lock_irqsave+0x42/0x60
[  288.362417][    C3]  nbcon_emit_one+0x1a8/0x2b0
[  288.362442][    C3]  ? __pfx_nbcon_emit_one+0x10/0x10
[  288.362468][    C3]  nbcon_kthread_func+0x613/0x7d0
[  288.362494][    C3]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  288.362522][    C3]  ? __kthread_parkme+0x18f/0x230
[  288.362540][    C3]  ? kthread+0x13a/0x450
[  288.362557][    C3]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  288.362578][    C3]  kthread+0x373/0x450
[  288.362597][    C3]  ? __pfx_kthread+0x10/0x10
[  288.362618][    C3]  ret_from_fork+0x730/0xd60
[  288.362636][    C3]  ? __pfx_ret_from_fork+0x10/0x10
[  288.362656][    C3]  ? __switch_to+0x800/0x10f0
[  288.362679][    C3]  ? __pfx_kthread+0x10/0x10
[  288.362699][    C3]  ret_from_fork_asm+0x1a/0x30
[  288.362724][    C3]  </TASK>
[  288.363485][   T44] Kernel panic - not syncing: hung_task: blocked tasks
[  288.920277][   T44] CPU: 0 UID: 0 PID: 44 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.923597][   T44] Tainted: [L]=SOFTLOCKUP
[  288.925023][   T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  288.928333][   T44] Call Trace:
[  288.929442][   T44]  <TASK>
[  288.930438][   T44]  dump_stack_lvl+0x100/0x190
[  288.931979][   T44]  vpanic+0x553/0x970
[  288.933311][   T44]  ? __pfx_vpanic+0x10/0x10
[  288.934694][   T44]  panic+0xd1/0xe0
[  288.935872][   T44]  ? __pfx_panic+0x10/0x10
[  288.937237][   T44]  ? wq_watchdog_touch+0xec/0x1a0
[  288.938781][   T44]  ? nmi_trigger_cpumask_backtrace+0x206/0x2a0
[  288.940704][   T44]  ? watchdog.cold+0x1ec/0x234
[  288.942149][   T44]  watchdog.cold+0x1fd/0x234
[  288.943560][   T44]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  288.945317][   T44]  ? __pfx_watchdog+0x10/0x10
[  288.946954][   T44]  ? __kthread_parkme+0x18f/0x230
[  288.948605][   T44]  ? kthread+0x13a/0x450
[  288.950085][   T44]  ? __pfx_watchdog+0x10/0x10
[  288.951738][   T44]  kthread+0x373/0x450
[  288.953054][   T44]  ? __pfx_kthread+0x10/0x10
[  288.954460][   T44]  ret_from_fork+0x730/0xd60
[  288.955955][   T44]  ? __pfx_ret_from_fork+0x10/0x10
[  288.957653][   T44]  ? __switch_to+0x800/0x10f0
[  288.959255][   T44]  ? __pfx_kthread+0x10/0x10
[  288.960764][   T44]  ret_from_fork_asm+0x1a/0x30
[  288.962445][   T44]  </TASK>
[  288.964007][   T44] Kernel Offset: disabled
[  288.965433][   T44] Rebooting in 86400 seconds..