last executing test programs:

5m49.491939672s ago: executing program 32 (id=5068):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)

5m21.476092662s ago: executing program 33 (id=5228):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x9, 0x2}, 0x30, 0x0)
landlock_restrict_self(r0, 0x2)
r1 = open(&(0x7f0000000280)='.\x00', 0x2880, 0x0)
fcntl$notify(r1, 0x402, 0x8000001f)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

5m14.953084604s ago: executing program 0 (id=5392):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xa91, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x22, 0x0)

5m14.787954929s ago: executing program 0 (id=5394):
syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x5, 0x1, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8})

5m11.608513539s ago: executing program 0 (id=5444):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38)

5m11.262682161s ago: executing program 0 (id=5449):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00')

5m11.224849335s ago: executing program 0 (id=5450):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)

5m10.804537132s ago: executing program 0 (id=5455):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x9})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r1, r1, 0xf, 0xfffffffffffffff8, 0x3fff})

5m10.616947019s ago: executing program 34 (id=5455):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x9})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r1, r1, 0xf, 0xfffffffffffffff8, 0x3fff})

4m33.346923126s ago: executing program 1 (id=5850):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)

4m33.337150117s ago: executing program 1 (id=5852):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m33.213263813s ago: executing program 1 (id=5854):
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0)

4m33.197486136s ago: executing program 1 (id=5856):
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)

4m32.311746339s ago: executing program 1 (id=5863):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

4m32.269932643s ago: executing program 1 (id=5864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

4m17.194631091s ago: executing program 35 (id=5864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m25.667719722s ago: executing program 7 (id=6823):
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x5814)
close_range(r0, 0xffffffffffffffff, 0x0)

3m25.58218936s ago: executing program 7 (id=6824):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0xfd}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3m25.472714225s ago: executing program 7 (id=6825):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x40080c4, &(0x7f0000000040)={0xa, 0x4e27, 0x80000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x12}, 0x1c)

3m25.280887846s ago: executing program 7 (id=6829):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00')

3m25.255974251s ago: executing program 7 (id=6831):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0)

3m25.02813991s ago: executing program 7 (id=6832):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000, 0x140611})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

3m24.97122298s ago: executing program 36 (id=6832):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000, 0x140611})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2m17.099188988s ago: executing program 6 (id=7761):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000})

2m16.899607865s ago: executing program 6 (id=7764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfb}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x26044028}, 0x20000800)

2m16.523230676s ago: executing program 6 (id=7772):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/tomoyo/profile\x00', 0x1, 0xd8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m16.135022257s ago: executing program 6 (id=7778):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)

2m16.020726758s ago: executing program 6 (id=7779):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xff6e, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8040, 0x3, 0x20000000, 0x1, 0x9}}]}, {0x4}, {0xc, 0x3f, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x20008054)

2m15.630077799s ago: executing program 6 (id=7783):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)
recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x8}], 0x1, 0x2000, 0x0)
close(0x4)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000)

2m15.291413691s ago: executing program 37 (id=7783):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)
recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x8}], 0x1, 0x2000, 0x0)
close(0x4)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000)

2m5.344829679s ago: executing program 9 (id=7889):
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x0, 0x8001, 0x3, 0xfffffff9, 0x200800})
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000010c0)=0xffffffffffffffff, 0x4)

2m4.68471169s ago: executing program 9 (id=7899):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

2m4.39379517s ago: executing program 9 (id=7901):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

2m4.230454582s ago: executing program 9 (id=7904):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m4.113756588s ago: executing program 9 (id=7905):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

2m3.469844971s ago: executing program 9 (id=7912):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

2m3.336196475s ago: executing program 38 (id=7912):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

1m51.239537466s ago: executing program 2 (id=8001):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000400"], 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x28970, 0x1f280, 0x0, 0x8000399})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x5, 0x0, 0xcd}}, 0xf0}}, 0x0)
io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0)

1m51.158183132s ago: executing program 2 (id=8004):
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1)

1m50.99767456s ago: executing program 2 (id=8007):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b26e53f07030000002a900683749e821dab8b9236592b0004000093"], 0x0}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x2, 0x7])

1m47.880471132s ago: executing program 2 (id=8033):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

1m47.827282717s ago: executing program 2 (id=8034):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0x80000000, 0x4)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
recvmmsg(r0, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)

1m47.498355124s ago: executing program 2 (id=8036):
socket$tipc(0x1e, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x400)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffff0, @empty, 0xfffffffc, 0x3}, 0x20)
syz_open_dev$cec(0x0, 0x0, 0x180)
connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800, @loopback, 0xffff}, 0x20)

1m47.364759335s ago: executing program 39 (id=8036):
socket$tipc(0x1e, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x400)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffff0, @empty, 0xfffffffc, 0x3}, 0x20)
syz_open_dev$cec(0x0, 0x0, 0x180)
connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800, @loopback, 0xffff}, 0x20)

3.974376008s ago: executing program 3 (id=9034):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = open(&(0x7f00000002c0)='./file1\x00', 0x4c27e, 0x1bb)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r2, 0x0)
fallocate(r2, 0x0, 0x9e1f, 0x575)
r3 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f20d835080000000f22d82e0f019e280000006447dfdef3400f086626f20f79ed66660fd12c48263e262e660f38808f71790000470f07c4a1ff707d00b0d97f00", 0x41}], 0x1, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)

3.740916823s ago: executing program 3 (id=9040):
r0 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0x5410, 0x80, 0x1, 0x80}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r8, 0x3}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r4})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

3.615055928s ago: executing program 3 (id=9043):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0x9, 0x6, 0xfff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xf, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xfec00000, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x3, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x7, 0xc, 0xb0, 0x91}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.550244867s ago: executing program 4 (id=9044):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000)
creat(&(0x7f0000000000)='./file0\x00', 0x78)
socket(0x2, 0x805, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.310351239s ago: executing program 3 (id=9047):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b3ebb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e05f37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2293f9d5c3b90400000000000000c2796827d61dcc3a633bffff250b5a293e3877adc1640edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e597afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043183988050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e75ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b280000000000000001fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a6758eaf8bb81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee8f22b539d825b3aa9e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x2, 0x80001, 0xbf22, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1, 0x4000}, 0x50)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0x0, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0x1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0xd44b, 0x0, 0x10000, 0xfffffffffffdffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.129584421s ago: executing program 3 (id=9049):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
syz_usb_disconnect(0xffffffffffffffff)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

2.220804917s ago: executing program 4 (id=9057):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1101, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.930477586s ago: executing program 8 (id=9064):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='2', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='2', 0x1)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')

1.911134614s ago: executing program 4 (id=9065):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x2, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0x4, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0xceb8, 0x10001006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x6, 0x48c93690, 0x40, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x2000004, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x207, 0x53cf697b, 0x4, 0x6, 0x9, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000003, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x405, 0x8, 0x10, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.847975128s ago: executing program 8 (id=9067):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x90b8}}}}}, 0x0)

1.795031667s ago: executing program 4 (id=9069):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
dup3(r3, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000b00)='x'})

1.757035225s ago: executing program 8 (id=9070):
r0 = io_uring_setup(0x667, &(0x7f0000000300)={0x0, 0xa14a, 0x800, 0x2, 0x238})
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
creat(&(0x7f00000000c0)='./file0\x00', 0x2a)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.737167102s ago: executing program 4 (id=9072):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0)

1.629797998s ago: executing program 8 (id=9073):
close(0xffffffffffffffff)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4)

990.659263ms ago: executing program 8 (id=9074):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(0x0, 0x0, 0x0, 0x0, r0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

806.665757ms ago: executing program 4 (id=9075):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9360, 0x0)

762.337829ms ago: executing program 5 (id=9076):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(r0)
r1 = inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r0, 0xa, 0x22)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

679.046179ms ago: executing program 5 (id=9077):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f0000000000)='./file0\x00', 0xe0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0)

641.325369ms ago: executing program 5 (id=9078):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
close(0x4)

559.945348ms ago: executing program 5 (id=9079):
syz_open_procfs(0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = gettid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4})
capset(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8)
read(r3, &(0x7f0000000280)=""/240, 0xf0)

559.475301ms ago: executing program 5 (id=9080):
mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000104)=0x4, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4)
bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000440)='\x00\x00\x00\x00', &(0x7f0000000480)=@udp=r0}, 0x20)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r2, 0x0, 0x40, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/62, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)

460.182413ms ago: executing program 5 (id=9081):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

89.917412ms ago: executing program 8 (id=9082):
r0 = socket$inet6(0x10, 0x80002, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x8, 0xfffffffd}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x800, 0x45407}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f", 0x8, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000)

0s ago: executing program 3 (id=9083):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x80)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002)

0s ago: executing program 3 (id=9085):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f0000000800)=[{r0, 0x1030}], 0x1, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

text=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  515.238299][T25005] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  515.251195][T24668] usb 13-1: USB disconnect, device number 8
[  515.263554][T25005] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  515.278084][T25005] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  515.319175][T25005] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  515.325353][T25005] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  515.346757][T25005] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  515.363310][T25005] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  515.378986][T25005] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  515.486812][T25005] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.508024][T25005] 8021q: adding VLAN 0 to HW filter on device team0
[  515.515187][  T166] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.516878][T25238] overlayfs: failed to clone upperpath
[  515.518420][  T166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.532940][  T166] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.536141][  T166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.633838][T25241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8101'.
[  515.644268][T25241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8101'.
[  516.061075][T25005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.555765][T25005] veth0_vlan: entered promiscuous mode
[  516.569673][T25005] veth1_vlan: entered promiscuous mode
[  516.641681][T25005] veth0_macvtap: entered promiscuous mode
[  516.647526][T25005] veth1_macvtap: entered promiscuous mode
[  516.659877][T25005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.669355][T25005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.761292][T22929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.887202][T22926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.920142][T22926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.986489][T22926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.181788][  T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.218434][  T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.296834][  T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.307825][  T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.358005][   T42] kauditd_printk_skb: 24 callbacks suppressed
[  517.358024][   T42] audit: type=1400 audit(1786657143.102:4659): avc:  denied  { write } for  pid=25299 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.503747][   T42] audit: type=1800 audit(1786657143.252:4660): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  517.537852][   T42] audit: type=1800 audit(1786657143.262:4661): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  517.702903][   T42] audit: type=1400 audit(1786657143.452:4662): avc:  denied  { write } for  pid=25308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.847792][   T42] audit: type=1400 audit(1786657143.582:4663): avc:  denied  { write } for  pid=25315 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.931117][   T42] audit: type=1800 audit(1786657143.672:4664): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  518.057622][   T42] audit: type=1400 audit(1786657143.802:4665): avc:  denied  { write } for  pid=25317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  518.153629][   T42] audit: type=1800 audit(1786657143.902:4666): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  518.387396][   T42] audit: type=1400 audit(1786657144.132:4667): avc:  denied  { write } for  pid=25326 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  518.449083][   T42] audit: type=1800 audit(1786657144.192:4668): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  519.258333][T25351] tipc: Started in network mode
[  519.272309][T25351] tipc: Node identity ac141441, cluster identity 4711
[  519.291287][T25351] tipc: Enabled bearer <udp:syz2>, priority 10
[  519.476636][T25358] 9pnet_virtio: no channels available for device syz
[  519.528919][    C2] vcan0: j1939_tp_rxtimer: 0xffff88803e754c00: rx timeout, send abort
[  520.031885][    C2] vcan0: j1939_tp_rxtimer: 0xffff88803e754c00: abort rx timeout. Force session deactivation
[  520.042017][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8129'.
[  520.114249][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  520.224999][T25376] overlay: filesystem on ./bus not supported
[  520.243458][T25378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8132'.
[  520.249760][T25378] netlink: 'syz.3.8132': attribute type 7 has an invalid length.
[  520.256824][T25378] netlink: 'syz.3.8132': attribute type 8 has an invalid length.
[  520.268141][T25378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8132'.
[  520.290249][   T10] usb 9-1: Using ep0 maxpacket: 32
[  520.426037][ T5823] tipc: Node number set to 2886997057
[  520.463170][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  520.465796][   T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  520.481151][   T10] usb 9-1: unable to read config index 0 descriptor/start: -71
[  520.483521][   T10] usb 9-1: can't read configurations, error -71
[  520.548259][T25387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8135'.
[  522.245914][T25450] netlink: 2040 bytes leftover after parsing attributes in process `syz.3.8154'.
[  522.253738][T25450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8154'.
[  522.503057][   T42] kauditd_printk_skb: 41 callbacks suppressed
[  522.503074][   T42] audit: type=1800 audit(1786657148.252:4710): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  522.546743][T25454] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8156'.
[  522.722262][   T42] audit: type=1800 audit(1786657148.462:4711): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  522.761533][   T42] audit: type=1400 audit(1786657148.482:4712): avc:  denied  { write } for  pid=25457 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  522.974990][   T42] audit: type=1400 audit(1786657148.722:4713): avc:  denied  { write } for  pid=25463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  523.019814][   T42] audit: type=1800 audit(1786657148.762:4714): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  523.076825][   T42] audit: type=1800 audit(1786657148.822:4715): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  523.186554][   T42] audit: type=1400 audit(1786657148.932:4716): avc:  denied  { write } for  pid=25472 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  523.233916][   T42] audit: type=1800 audit(1786657148.972:4717): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  523.309661][T25480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8165'.
[  523.332653][   T42] audit: type=1800 audit(1786657149.052:4718): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  523.567114][   T42] audit: type=1800 audit(1786657149.312:4719): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  523.585787][T25493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8168'.
[  523.829294][T25503] ip_tables: iptables: counters copy to user failed while replacing table
[  523.835158][T25501] syzkaller1: entered promiscuous mode
[  523.841716][T25501] syzkaller1: entered allmulticast mode
[  525.105726][T25550] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.108960][T25550] bridge0: port 2(bridge_slave_1) entered listening state
[  525.112275][T25550] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.115454][T25550] bridge0: port 1(bridge_slave_0) entered listening state
[  525.622703][T25563] netlink: 'syz.4.8194': attribute type 8 has an invalid length.
[  525.630315][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8194'.
[  525.802517][T25550] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  525.867933][T25563] veth1_to_team: entered promiscuous mode
[  525.897999][T25563] gretap0: entered promiscuous mode
[  525.923189][T25563] veth1_to_team: left promiscuous mode
[  525.933004][T25569] netlink: 'syz.8.8195': attribute type 1 has an invalid length.
[  525.958450][T25563] gretap0: left promiscuous mode
[  526.049325][T25569] bond4: entered promiscuous mode
[  526.064012][T25569] 8021q: adding VLAN 0 to HW filter on device bond4
[  526.153478][T25579] 8021q: adding VLAN 0 to HW filter on device bond4
[  526.171212][T25579] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address
[  526.190277][T25579] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  526.222515][T25579] bond4: (slave xfrm1): making interface the new active one
[  526.229318][T25579] xfrm1: entered promiscuous mode
[  526.355679][T25579] xfrm1: left promiscuous mode
[  526.459960][T25595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8202'.
[  526.466230][T25595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8202'.
[  526.661951][T22936] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  526.668093][T22936] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  526.677152][T22936] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  526.683858][T22936] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  528.171103][   T42] kauditd_printk_skb: 52 callbacks suppressed
[  528.171126][   T42] audit: type=1800 audit(1786657153.912:4772): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  528.196493][   T42] audit: type=1800 audit(1786657153.942:4773): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314968 res=0 errno=0
[  528.261147][T25627] sd 0:0:0:0: PR command failed: 1026
[  528.263960][   T42] audit: type=1400 audit(1786657154.012:4774): avc:  denied  { ioctl } for  pid=25626 comm="syz.4.8216" path="/29/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  528.265558][T25627] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  528.276973][T25627] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  528.325785][   T42] audit: type=1800 audit(1786657154.072:4775): pid=25623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.8213" name="/" dev="fuse" ino=1 res=0 errno=0
[  528.376143][   T42] audit: type=1800 audit(1786657154.122:4776): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  528.462714][   T42] audit: type=1800 audit(1786657154.212:4777): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  528.515430][T25634] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8218'.
[  528.696096][   T42] audit: type=1800 audit(1786657154.432:4778): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  528.758667][   T42] audit: type=1800 audit(1786657154.502:4779): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  528.807554][   T42] audit: type=1400 audit(1786657154.552:4780): avc:  denied  { write } for  pid=25636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  528.870546][   T42] audit: type=1800 audit(1786657154.622:4781): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  529.408348][T25652] bond5: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  529.412918][T25652] bond5: entered allmulticast mode
[  529.431854][T25652] bond5: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  529.532201][T25658] Bluetooth: Invalid esc byte 0x03
[  530.065742][T25672] netlink: 'syz.3.8230': attribute type 1 has an invalid length.
[  530.092076][T25672] 8021q: adding VLAN 0 to HW filter on device bond5
[  530.720087][ T5823] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[  530.777076][T21640] rpcbind: server 127.0.0.1 not responding, timed out
[  530.870766][ T5823] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  530.894177][ T5823] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  530.898418][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  530.906871][ T5823] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  530.915622][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  530.922659][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  530.930880][ T5823] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  530.934638][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  530.941606][ T5823] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  530.948697][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  530.956972][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  530.964764][ T5823] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  530.967144][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  530.973964][ T5823] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  530.982264][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  530.989100][ T5823] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  530.995629][ T5823] usb 9-1: string descriptor 0 read error: -22
[  530.997688][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.027576][T25689] kvm: pic: level sensitive irq not supported
[  531.237794][T25694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8239'.
[  531.341312][T25694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8239'.
[  533.596577][ T9872] usb 9-1: USB disconnect, device number 4
[  533.629732][   T42] kauditd_printk_skb: 29 callbacks suppressed
[  533.629745][   T42] audit: type=1800 audit(1786657159.372:4811): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  534.088196][   T42] audit: type=1400 audit(1786657159.832:4812): avc:  denied  { write } for  pid=25713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  534.130111][T24550] Bluetooth: hci1: command 0x0406 tx timeout
[  534.464559][   T42] audit: type=1400 audit(1786657160.212:4813): avc:  denied  { write } for  pid=25716 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  534.589119][   T42] audit: type=1800 audit(1786657160.332:4814): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  534.619283][   T42] audit: type=1800 audit(1786657160.362:4815): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  534.667443][   T42] audit: type=1400 audit(1786657160.412:4816): avc:  denied  { cmd } for  pid=25724 comm="syz.5.8249" path="socket:[113342]" dev="sockfs" ino=113342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  534.704344][   T42] audit: type=1800 audit(1786657160.452:4817): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  534.808017][   T42] audit: type=1800 audit(1786657160.552:4818): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  535.753428][   T42] audit: type=1800 audit(1786657161.492:4819): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  535.891729][   T42] audit: type=1400 audit(1786657161.632:4820): avc:  denied  { write } for  pid=25746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  536.589576][T25772] overlayfs: failed to resolve './cgroup': -2
[  537.010242][T24362] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  537.174764][T24362] usb 9-1: Using ep0 maxpacket: 32
[  537.187625][T24362] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  537.203407][T24362] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  537.210312][T24362] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  537.218750][T24362] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  537.225926][T24362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  537.229516][T24362] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  537.234827][T24362] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  537.239392][T24362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.619255][T25795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  538.070930][T25804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  538.075563][T25804] syzkaller0: MTU too low for tipc bearer
[  538.077446][T25804] tipc: Disabling bearer <eth:syzkaller0>
[  538.549841][T25809] IPVS: lc: FWM 3 0x00000003 - no destination available
[  538.554649][T24362] IPVS: starting estimator thread 0...
[  538.642426][T25814] IPVS: using max 42 ests per chain, 100800 per kthread
[  538.914568][   T42] kauditd_printk_skb: 22 callbacks suppressed
[  538.914586][   T42] audit: type=1800 audit(1786657164.662:4843): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316218 res=0 errno=0
[  538.936815][T25825] ceph: No mds server is up or the cluster is laggy
[  538.966074][   T42] audit: type=1800 audit(1786657164.712:4844): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  539.408440][   T42] audit: type=1800 audit(1786657165.152:4845): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  539.536169][   T42] audit: type=1800 audit(1786657165.282:4846): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  539.763143][T24362] usb 9-1: USB disconnect, device number 5
[  539.924543][   T42] audit: type=1800 audit(1786657165.672:4847): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  539.991827][   T42] audit: type=1800 audit(1786657165.742:4848): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  540.021092][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  540.160882][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  540.180681][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  540.280463][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  540.375931][    C2] bridge0: port 1(bridge_slave_0) entered learning state
[  540.380937][    C2] bridge0: port 2(bridge_slave_1) entered learning state
[  540.398176][   T42] audit: type=1800 audit(1786657166.142:4849): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  540.410604][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  540.520434][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  540.559588][   T42] audit: type=1800 audit(1786657166.302:4850): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  541.150695][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  541.159825][   T42] audit: type=1800 audit(1786657166.902:4851): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  541.176997][   T42] audit: type=1800 audit(1786657166.912:4852): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316391 res=0 errno=0
[  541.249685][T25871] bond5: entered allmulticast mode
[  541.257497][T25871] ip6gre2: entered allmulticast mode
[  541.538589][T25869] bond5: left allmulticast mode
[  541.541807][T25869] ip6gre2: left allmulticast mode
[  541.642115][T25877] overlayfs: failed to clone upperpath
[  542.010503][ T6389] usb 13-1: new low-speed USB device number 9 using dummy_hcd
[  542.180707][ T6389] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  542.187620][ T6389] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  542.192853][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  542.199227][ T6389] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  542.210049][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  542.216436][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  542.231216][ T6389] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  542.233976][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  542.237325][ T6389] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  542.250063][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  542.251112][ T9837] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  542.260058][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  542.275970][ T6389] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  542.278352][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  542.290276][ T6389] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  542.309386][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  542.316936][ T6389] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  542.326139][ T6389] usb 13-1: string descriptor 0 read error: -22
[  542.328066][ T6389] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.401198][ T9837] usb 9-1: Using ep0 maxpacket: 32
[  542.432969][ T9837] usb 9-1: unable to get BOS descriptor or descriptor too short
[  542.436109][ T9837] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  542.442038][ T9837] usb 9-1: unable to read config index 0 descriptor/start: -71
[  542.445193][ T9837] usb 9-1: can't read configurations, error -71
[  543.052076][T25902] netlink: 'syz.4.8305': attribute type 1 has an invalid length.
[  543.075379][T25902] 8021q: adding VLAN 0 to HW filter on device bond1
[  543.120725][T25902] bond1: (slave geneve2): making interface the new active one
[  543.125657][T25902] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  543.481348][T25914] fuse: fd is not a fuse device
[  543.570411][T25917] overlayfs: failed to clone upperpath
[  543.981111][T21881] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  544.016120][   T42] kauditd_printk_skb: 22 callbacks suppressed
[  544.016139][   T42] audit: type=1400 audit(1786657169.762:4875): avc:  denied  { write } for  pid=25930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  544.107838][   T42] audit: type=1400 audit(1786657169.852:4876): avc:  denied  { write } for  pid=25937 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  544.134205][T21881] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  544.141759][T21881] usb 9-1: config 0 has no interfaces?
[  544.146175][T21881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.159779][   T42] audit: type=1800 audit(1786657169.902:4877): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317054 res=0 errno=0
[  544.172305][   T42] audit: type=1800 audit(1786657169.912:4878): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=317083 res=0 errno=0
[  544.182079][   T42] audit: type=1800 audit(1786657169.912:4879): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=317061 res=0 errno=0
[  544.194774][   T42] audit: type=1800 audit(1786657169.912:4880): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=317062 res=0 errno=0
[  544.204577][   T42] audit: type=1800 audit(1786657169.912:4881): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=317063 res=0 errno=0
[  544.776995][T22014] usb 13-1: USB disconnect, device number 9
[  544.814977][T25945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.820759][   T42] audit: type=1800 audit(1786657170.562:4882): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  544.916373][   T42] audit: type=1800 audit(1786657170.662:4883): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  545.113390][   T42] audit: type=1800 audit(1786657170.862:4884): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  545.706351][T25945] bond2: left promiscuous mode
[  545.784952][T25945] bond5: left promiscuous mode
[  545.787270][T25945] ip6gre2: left promiscuous mode
[  545.800924][T25945] geneve3: left promiscuous mode
[  545.920285][   T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  545.925051][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.928898][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  545.935362][   T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  545.939295][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.943992][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  546.070322][   T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  546.074052][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  546.077973][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  546.088954][   T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  546.101829][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  546.110485][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  546.355423][T25986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8335'.
[  546.436389][T25986] hsr_slave_1 (unregistering): left promiscuous mode
[  546.580094][T25990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8338'.
[  546.717034][T22014] usb 9-1: USB disconnect, device number 8
[  547.666134][T26005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  547.674097][T26005] batadv_slave_1: entered promiscuous mode
[  548.126978][ T5434] veth0_vlan: left promiscuous mode
[  548.152077][T22014] veth0_vlan: entered promiscuous mode
[  549.039234][T26068] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  549.050102][T26068] overlayfs: failed to set xattr on upper
[  549.052614][T26068] overlayfs: ...falling back to redirect_dir=nofollow.
[  549.068686][T26068] overlayfs: ...falling back to index=off.
[  549.074833][   T42] kauditd_printk_skb: 39 callbacks suppressed
[  549.074850][   T42] audit: type=1800 audit(1786657174.822:4924): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  549.083960][T26068] overlayfs: ...falling back to uuid=null.
[  549.091327][T26069] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  549.288936][   T42] audit: type=1800 audit(1786657175.032:4925): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  549.380117][   T42] audit: type=1800 audit(1786657175.122:4926): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  549.453546][   T42] audit: type=1800 audit(1786657175.202:4927): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  549.554585][T26082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8362'.
[  549.684860][   T42] audit: type=1800 audit(1786657175.432:4928): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  549.803794][   T42] audit: type=1800 audit(1786657175.552:4929): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  549.975485][   T42] audit: type=1800 audit(1786657175.722:4930): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  550.060412][   T42] audit: type=1800 audit(1786657175.812:4931): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0
[  550.099172][   T42] audit: type=1800 audit(1786657175.842:4932): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  550.200401][   T42] audit: type=1800 audit(1786657175.942:4933): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317545 res=0 errno=0
[  550.214548][T26099] 9pnet_virtio: no channels available for device syz
[  550.237914][T26097] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  552.229114][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8392'.
[  552.235373][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8392'.
[  552.678200][T26175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8397'.
[  552.694410][T26175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8397'.
[  552.973146][T26186] bond7: entered promiscuous mode
[  553.433170][T26213] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  553.435550][T26213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  553.450264][T26213] vhci_hcd vhci_hcd.0: Device attached
[  553.469033][T26214] vhci_hcd: connection closed
[  553.483951][   T12] vhci_hcd vhci_hcd.4: stop threads
[  553.493946][   T12] vhci_hcd vhci_hcd.4: release socket
[  553.496495][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  554.024984][T26239] kvm: Disabled LAPIC found during irq injection
[  554.441740][   T42] kauditd_printk_skb: 40 callbacks suppressed
[  554.441761][   T42] audit: type=1800 audit(1786657180.152:4974): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  554.583516][   T42] audit: type=1800 audit(1786657180.322:4975): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  554.864331][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8430'.
[  554.873840][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8430'.
[  554.910647][   T42] audit: type=1800 audit(1786657180.662:4976): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  555.047358][T26293] SELinux:  Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped).
[  555.060907][   T42] audit: type=1400 audit(1786657180.802:4977): avc:  denied  { relabelto } for  pid=26292 comm="syz.4.8432" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0"
[  555.127114][   T42] audit: type=1400 audit(1786657180.812:4978): avc:  denied  { associate } for  pid=26292 comm="syz.4.8432" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=452 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0"
[  555.177347][   T42] audit: type=1400 audit(1786657180.832:4979): avc:  denied  { read } for  pid=26292 comm="syz.4.8432" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0"
[  555.217662][   T42] audit: type=1400 audit(1786657180.832:4980): avc:  denied  { open } for  pid=26292 comm="syz.4.8432" path="/79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0"
[  555.252134][   T42] audit: type=1804 audit(1786657180.832:4981): pid=26293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.8432" name="/newroot/79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=452 res=1 errno=0
[  555.282415][   T42] audit: type=1800 audit(1786657180.832:4982): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  555.295993][   T42] audit: type=1400 audit(1786657180.862:4983): avc:  denied  { unlink } for  pid=25005 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0"
[  555.665416][T26306] netlink: 'syz.4.8439': attribute type 1 has an invalid length.
[  555.686981][T26306] 8021q: adding VLAN 0 to HW filter on device bond2
[  555.709404][T26310] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8438'.
[  555.740101][    C2] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.742868][    C2] bridge0: topology change detected, propagating
[  555.745818][    C2] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.749380][    C2] bridge0: topology change detected, propagating
[  556.204449][T26334] overlayfs: failed to clone upperpath
[  556.329503][T24362] IPVS: starting estimator thread 0...
[  556.413058][T26347] bond6: entered promiscuous mode
[  556.415699][T26347] 8021q: adding VLAN 0 to HW filter on device bond6
[  556.461148][T26345] IPVS: using max 43 ests per chain, 103200 per kthread
[  556.495381][T26347] 8021q: adding VLAN 0 to HW filter on device bond6
[  556.498819][T26347] bond6: (slave ipip2): The slave device specified does not support setting the MAC address
[  556.504470][T26347] bond6: (slave ipip2): Error -95 calling set_mac_address
[  556.567818][T26350] kvm: pic: single mode not supported
[  556.574342][T26350] kvm: pic: level sensitive irq not supported
[  556.592333][T26350] kvm: pic: single mode not supported
[  556.597130][T26350] kvm: pic: level sensitive irq not supported
[  556.602453][T26350] kvm: pic: single mode not supported
[  556.605173][T26350] kvm: pic: level sensitive irq not supported
[  556.611140][T26350] kvm: pic: single mode not supported
[  556.615125][T26350] kvm: pic: single mode not supported
[  557.488380][T26389] overlayfs: failed to clone upperpath
[  558.527052][T26433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  558.529520][T26433] IPv6: NLM_F_CREATE should be set when creating new route
[  558.648118][T26433] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.651365][T26433] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.781960][T26446] CIFS: Attempting to mount //127.0.0.1/share
[  558.822882][T26433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  558.860316][T26433] veth0_vlan: left promiscuous mode
[  559.060253][T22936] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  559.067220][T22936] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.073030][T22936] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  559.079515][T22936] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.086006][T22936] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  559.092592][T22936] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.095821][T22936] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  559.098645][T22936] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.496618][   T42] kauditd_printk_skb: 37 callbacks suppressed
[  559.496632][   T42] audit: type=1400 audit(1786657185.242:5021): avc:  denied  { write } for  pid=26462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  559.545918][   T42] audit: type=1400 audit(1786657185.292:5022): avc:  denied  { write } for  pid=26465 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  559.617751][   T42] audit: type=1400 audit(1786657185.362:5023): avc:  denied  { write } for  pid=26467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  559.636799][T26446] CIFS: VFS: Error connecting to socket. Aborting operation.
[  559.638996][T26446] CIFS: VFS: cifs_mount failed w/return code = -4
[  559.697831][   T42] audit: type=1800 audit(1786657185.442:5024): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  559.727292][   T42] audit: type=1400 audit(1786657185.472:5025): avc:  denied  { write } for  pid=26474 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  559.854241][   T42] audit: type=1800 audit(1786657185.602:5026): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  559.944535][   T42] audit: type=1800 audit(1786657185.692:5027): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  560.136981][T26490] overlayfs: failed to get index nlink (file0/file1, err=-61)
[  560.147922][   T42] audit: type=1800 audit(1786657185.892:5028): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  560.466767][   T42] audit: type=1400 audit(1786657186.212:5029): avc:  denied  { write } for  pid=26494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  560.547622][   T42] audit: type=1400 audit(1786657186.292:5030): avc:  denied  { write } for  pid=26500 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  560.788993][T26518] loop5: detected capacity change from 0 to 7
[  560.801626][T26518] Dev loop5: unable to read RDB block 7
[  560.806122][T26518]  loop5: AHDI p1 p2 p3
[  560.809848][T26518] loop5: partition table partially beyond EOD, truncated
[  560.814318][T26518] loop5: p1 start 1601398130 is beyond EOD, truncated
[  560.817174][T26518] loop5: p2 start 1702059890 is beyond EOD, truncated
[  561.083969][T26525] netlink: 'syz.8.8509': attribute type 4 has an invalid length.
[  561.294087][T26531] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8512'.
[  561.369363][T26523] netlink: 'syz.8.8509': attribute type 4 has an invalid length.
[  561.804341][T26552] netlink: 'syz.3.8520': attribute type 4 has an invalid length.
[  561.823736][T26552] netlink: 'syz.3.8520': attribute type 4 has an invalid length.
[  562.462099][T26571] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  562.528401][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x450e instead
[  562.541465][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x201f instead
[  562.548003][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xa1dd instead
[  562.560633][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xb959 instead
[  562.567481][T26576] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  562.567481][T26576] The task syz.4.8527 (26576) triggered the difference, watch for misbehavior.
[  562.573163][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xb2f3 instead
[  562.589147][T26572] kvm: pic: non byte read
[  562.591100][T26572] kvm: pic: non byte read
[  562.593063][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x72cf instead
[  562.597305][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9d6c instead
[  562.605316][T26572] kvm: pic: non byte read
[  562.610790][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xc09d instead
[  562.621527][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x49d8 instead
[  562.630993][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x96c2 instead
[  562.638152][T26575] jffs2: Further such events for this erase block will not be printed
[  562.642015][T26580] Bluetooth: MGMT ver 1.23
[  562.644046][T26580] Bluetooth: hci0: load_link_keys: too big key_count value 3968
[  562.646031][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xe7a0 instead
[  562.655936][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0ced instead
[  562.664425][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x7b90 instead
[  562.669572][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xf052 instead
[  562.675907][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x3623 instead
[  562.679338][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x9f75 instead
[  562.683645][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5c7c instead
[  562.687229][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xd53d instead
[  562.691482][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x77fd instead
[  562.694803][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xaff0 instead
[  562.699093][T26575] jffs2: Further such events for this erase block will not be printed
[  562.720497][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x5238 instead
[  562.724505][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x2919 instead
[  562.727959][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x8e44 instead
[  562.732012][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x742e instead
[  562.735336][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x856b instead
[  562.738905][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x67e7 instead
[  562.743452][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x972c instead
[  562.746867][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xf3ba instead
[  562.753560][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xbec4 instead
[  562.758442][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x5167 instead
[  562.763291][T26575] jffs2: Further such events for this erase block will not be printed
[  562.775983][ T1435] ieee802154 phy0 wpan0: encryption failed: -22
[  562.778306][ T1435] ieee802154 phy1 wpan1: encryption failed: -22
[  562.793992][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x8885 instead
[  562.798226][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x3e63 instead
[  562.802732][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xf447 instead
[  562.806372][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xb7ae instead
[  562.809724][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x342a instead
[  562.814756][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xf99d instead
[  562.818098][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x61a4 instead
[  562.822015][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xdd50 instead
[  562.825356][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x22a4 instead
[  562.828628][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xba93 instead
[  562.833481][T26575] jffs2: Further such events for this erase block will not be printed
[  562.839551][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x18ea instead
[  562.847405][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x15f7 instead
[  562.854012][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x8b60 instead
[  562.859646][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xcfc2 instead
[  562.867122][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x435b instead
[  562.876229][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x5f16 instead
[  562.883144][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x90bc instead
[  562.888667][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xa87e instead
[  562.892989][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x4057 instead
[  562.896289][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x4556 instead
[  562.899606][T26575] jffs2: Further such events for this erase block will not be printed
[  562.903689][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xedf6 instead
[  562.907031][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xc376 instead
[  562.911152][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xb0cc instead
[  562.914457][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x0557 instead
[  562.917728][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xf9cf instead
[  562.921918][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xbefa instead
[  562.925204][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xe703 instead
[  562.928463][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x01d3 instead
[  562.932519][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x811b instead
[  562.935835][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x7b6b instead
[  562.941427][T26575] jffs2: Further such events for this erase block will not be printed
[  562.945040][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4765 instead
[  562.948638][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x90f8 instead
[  562.951424][T26572] kvm: pic: non byte read
[  562.953613][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xa6de instead
[  562.958033][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x0e13 instead
[  562.962003][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x990d instead
[  562.965670][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x31eb instead
[  562.969236][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xbf8e instead
[  562.974167][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xf378 instead
[  562.978337][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xa5c9 instead
[  562.984869][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x2beb instead
[  562.992094][T26575] jffs2: Further such events for this erase block will not be printed
[  562.995365][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xc94e instead
[  562.999021][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x1de0 instead
[  563.003126][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x97da instead
[  563.006568][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xdd53 instead
[  563.009919][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x62d3 instead
[  563.013642][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x6ccf instead
[  563.017341][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xb37c instead
[  563.025346][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x23f2 instead
[  563.038166][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xf446 instead
[  563.044367][T26586] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input42
[  563.046844][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x3d08 instead
[  563.052954][T26575] jffs2: Further such events for this erase block will not be printed
[  563.056685][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x8a32 instead
[  563.060939][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xa0dd instead
[  563.077209][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x1906 instead
[  563.091635][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x731f instead
[  563.096781][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x0264 instead
[  563.124210][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x7a29 instead
[  563.130370][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbeda instead
[  563.138923][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x7636 instead
[  563.156957][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x1d08 instead
[  563.171166][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xce94 instead
[  563.184627][T26593] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8536'.
[  563.203280][T26575] jffs2: Further such events for this erase block will not be printed
[  563.237655][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xd470 instead
[  563.257023][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x6c71 instead
[  563.260098][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8536'.
[  563.266558][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xfc15 instead
[  563.287267][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x1000 instead
[  563.290936][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xee67 instead
[  563.294510][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x8421 instead
[  563.298139][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xa83d instead
[  563.301881][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x48f6 instead
[  563.305514][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xbfdc instead
[  563.309453][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x39f1 instead
[  563.324887][T26575] jffs2: Further such events for this erase block will not be printed
[  563.331349][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x9fb7 instead
[  563.334870][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0710 instead
[  563.338815][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xb350 instead
[  563.344631][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x5df9 instead
[  563.347927][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x3cf8 instead
[  563.352942][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xcc3f instead
[  563.356231][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x762f instead
[  563.359415][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x9808 instead
[  563.363013][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x573d instead
[  563.373055][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x3f0c instead
[  563.383218][T26575] jffs2: Further such events for this erase block will not be printed
[  563.388338][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x14b0 instead
[  563.392912][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x8b84 instead
[  563.396845][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x6b97 instead
[  563.400610][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xead3 instead
[  563.403897][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x8699 instead
[  563.407182][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xda38 instead
[  563.413159][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x52d6 instead
[  563.416681][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x79b0 instead
[  563.430944][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xba6e instead
[  563.437747][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xfcd3 instead
[  563.447551][T26575] jffs2: Further such events for this erase block will not be printed
[  563.456363][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xbfbe instead
[  563.473117][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x2ce8 instead
[  563.481782][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x3b59 instead
[  563.492185][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x3437 instead
[  563.497950][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xbcce instead
[  563.504266][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x9320 instead
[  563.507748][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xdffc instead
[  563.514334][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xd65e instead
[  563.517802][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x4553 instead
[  563.523344][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xf3c9 instead
[  563.526917][T26575] jffs2: Further such events for this erase block will not be printed
[  563.529970][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x1213 instead
[  563.534345][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xc768 instead
[  563.538375][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xf750 instead
[  563.543267][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x4654 instead
[  563.546725][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x0fe7 instead
[  563.550716][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x586f instead
[  563.554081][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x7ef3 instead
[  563.557473][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x729e instead
[  563.562090][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xb961 instead
[  563.566380][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x16d6 instead
[  563.580186][T26575] jffs2: Further such events for this erase block will not be printed
[  563.583814][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xf12d instead
[  563.587156][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xa733 instead
[  563.590734][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x4ab4 instead
[  563.595418][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xb8a4 instead
[  563.599024][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x19c1 instead
[  563.602386][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xb51a instead
[  563.605624][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x7078 instead
[  563.608942][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xc33d instead
[  563.612163][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xa6e8 instead
[  563.618466][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xa5ca instead
[  563.622789][T26575] jffs2: Further such events for this erase block will not be printed
[  563.627091][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xffcc instead
[  563.630697][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xd719 instead
[  563.634896][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xcc6c instead
[  563.638755][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x7d62 instead
[  563.657399][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x3177 instead
[  563.686997][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x353e instead
[  563.700361][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x2187 instead
[  563.714690][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x849a instead
[  563.718735][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xd40b instead
[  563.723016][T26575] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xbb67 instead
[  563.726440][T26575] jffs2: Further such events for this erase block will not be printed
[  563.730947][T26575] jffs2: notice: (26575) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 2 orphan) and 8 of xref (0 dead, 2 orphan) found.
[  563.875917][T26619] fuse: fd is not a fuse device
[  563.916829][T26621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8547'.
[  564.765580][   T42] kauditd_printk_skb: 47 callbacks suppressed
[  564.765594][   T42] audit: type=1800 audit(1786657190.512:5078): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  564.856407][   T42] audit: type=1800 audit(1786657190.602:5079): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  564.873293][   T42] audit: type=1400 audit(1786657190.622:5080): avc:  denied  { append } for  pid=26661 comm="syz.8.8563" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[  564.891803][   T42] audit: type=1800 audit(1786657190.622:5081): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  564.929838][   T42] audit: type=1800 audit(1786657190.672:5082): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  564.962944][T26667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8565'.
[  565.052828][T26671] netlink: 'syz.8.8566': attribute type 1 has an invalid length.
[  565.082053][T26671] 8021q: adding VLAN 0 to HW filter on device bond6
[  565.173699][   T42] audit: type=1800 audit(1786657190.922:5083): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  565.199061][   T42] audit: type=1800 audit(1786657190.932:5084): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  565.217273][   T42] audit: type=1800 audit(1786657190.952:5085): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  565.349820][   T42] audit: type=1800 audit(1786657191.092:5086): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  565.426134][   T42] audit: type=1800 audit(1786657191.172:5087): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  565.498562][T26693] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  565.532701][T26692] binder: 26691:26692 ioctl c0306201 200000000080 returned -14
[  565.537720][T26692] binder: 26691:26692 ioctl c0306201 2000000003c0 returned -14
[  565.845921][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8579'.
[  566.061157][T26709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8580'.
[  566.302272][T26712] XFS (mtdblock0): Invalid superblock magic number
[  566.414914][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8584'.
[  566.812526][T26734] netlink: 'syz.5.8590': attribute type 1 has an invalid length.
[  566.916060][T26734] 8021q: adding VLAN 0 to HW filter on device bond9
[  566.936474][T26734] bond8: (slave bond9): making interface the new active one
[  566.958866][T26734] bond8: (slave bond9): Enslaving as an active interface with an up link
[  566.963536][T26736] fuse: root generation should be zero
[  566.984986][T26734] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8590'.
[  567.019819][T26744] bond8: (slave gretap1): Enslaving as a backup interface with an up link
[  567.031808][T26734] 8021q: adding VLAN 0 to HW filter on device bond8
[  567.255166][T26758] IPVS: lc: FWM 3 0x00000003 - no destination available
[  567.492308][T26764] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6170, delta: 1
[  567.497616][T26764] ref_ctr increment failed for inode: 0x7f6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888022e09980
[  567.509426][T26762] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6170, delta: -1
[  567.513954][T26762] ref_ctr decrement failed for inode: 0x7f6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888022e09980
[  567.521599][T26762] uprobe: syz.8.8598:26762 failed to unregister, leaking uprobe
[  568.013332][T26771] fuse: fd is not a fuse device
[  568.279083][T26790] fuse: fd is not a fuse device
[  568.850154][ T5723] Bluetooth: hci0: command tx timeout
[  568.990772][T26800] tipc: Failed to remove unknown binding: 66,0,0/0:1185252472/1185252473
[  568.997630][T26800] tipc: Failed to remove unknown binding: 66,0,0/0:1185252472/1185252473
[  569.249426][T26810] new mount options do not match the existing superblock, will be ignored
[  569.399789][T26812] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  569.779575][   T42] kauditd_printk_skb: 29 callbacks suppressed
[  569.779594][   T42] audit: type=1800 audit(1786657195.522:5117): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  570.093692][   T42] audit: type=1800 audit(1786657195.842:5118): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  570.202457][T26851] binder: 26849:26851 ioctl c0306201 200000000100 returned -14
[  570.287813][T26854] fuse: fd is not a fuse device
[  570.362329][   T42] audit: type=1800 audit(1786657196.112:5119): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  570.467000][   T42] audit: type=1800 audit(1786657196.212:5120): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  570.631295][   T42] audit: type=1800 audit(1786657196.372:5121): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  570.720601][T26863] lo: entered allmulticast mode
[  570.729393][T26863] tunl0: entered allmulticast mode
[  570.739703][T26863] gre0: entered allmulticast mode
[  570.768816][T26863] gretap0: entered allmulticast mode
[  570.773204][T26865] cgroup: Setting release_agent not allowed
[  570.809716][T26863] erspan0: entered allmulticast mode
[  570.814648][   T42] audit: type=1800 audit(1786657196.552:5122): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  570.831752][T26863] ip_vti0: entered allmulticast mode
[  570.844906][T26863] ip6_vti0: entered allmulticast mode
[  570.855270][T26863] sit0: entered allmulticast mode
[  570.865559][T26863] ip6tnl0: entered allmulticast mode
[  570.875826][T26863] ip6gre0: entered allmulticast mode
[  570.877276][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8642'.
[  570.911808][T26863] ip6gretap0: entered allmulticast mode
[  570.924114][T26863] bond0: entered allmulticast mode
[  570.926340][T26863] bond_slave_0: entered allmulticast mode
[  570.928768][T26863] bond_slave_1: entered allmulticast mode
[  570.939180][T26863] team0: entered allmulticast mode
[  570.941574][T26863] team_slave_0: entered allmulticast mode
[  570.943926][T26863] team_slave_1: entered allmulticast mode
[  570.951764][T26876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8642'.
[  570.952408][T26863] dummy0: entered allmulticast mode
[  570.973428][T26863] nlmon0: entered allmulticast mode
[  570.978733][T26863] batadv0: entered allmulticast mode
[  570.992624][T26863] vxcan0: entered allmulticast mode
[  570.996987][T26863] vxcan1: entered allmulticast mode
[  571.000712][T26863] veth0: entered allmulticast mode
[  571.006525][T26863] veth1: entered allmulticast mode
[  571.045015][T26863] wg0: entered allmulticast mode
[  571.065498][T26863] wg1: entered allmulticast mode
[  571.079406][T26863] wg2: entered allmulticast mode
[  571.083777][T26863] veth0_to_bridge: entered allmulticast mode
[  571.093529][T26863] bridge_slave_0: entered allmulticast mode
[  571.099174][T26863] veth1_to_bridge: entered allmulticast mode
[  571.105009][T26863] bridge_slave_1: entered allmulticast mode
[  571.111958][T26863] veth0_to_bond: entered allmulticast mode
[  571.119955][T26863] veth1_to_bond: entered allmulticast mode
[  571.130596][T26863] veth0_to_team: entered allmulticast mode
[  571.216795][T26863] veth1_to_team: entered allmulticast mode
[  571.334445][T26863] veth0_to_batadv: entered allmulticast mode
[  571.342251][T26863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  571.344755][T26863] batadv_slave_0: entered allmulticast mode
[  571.351328][T26863] veth1_to_batadv: entered allmulticast mode
[  571.356985][T26863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.361183][T26863] batadv_slave_1: entered allmulticast mode
[  571.368958][T26863] xfrm0: entered allmulticast mode
[  571.389146][T26863] veth0_to_hsr: entered allmulticast mode
[  571.419440][T26863] hsr_slave_0: entered allmulticast mode
[  571.426293][T26863] veth1_to_hsr: entered allmulticast mode
[  571.564063][T26863] hsr_slave_1: entered allmulticast mode
[  571.568903][T26863] hsr0: entered allmulticast mode
[  571.574264][T26863] veth1_virt_wifi: entered allmulticast mode
[  571.632080][T26863] veth0_virt_wifi: entered allmulticast mode
[  571.646200][T26863] virt_wifi0: entered allmulticast mode
[  571.650484][T26863] veth1_vlan: entered allmulticast mode
[  571.659315][T26863] veth0_vlan: entered allmulticast mode
[  571.671038][T26863] vlan0: entered allmulticast mode
[  571.688362][T26863] vlan1: entered allmulticast mode
[  571.700973][T26863] macvlan0: entered allmulticast mode
[  571.767643][T26863] macvlan1: entered allmulticast mode
[  571.774158][T26863] ipvlan0: entered allmulticast mode
[  571.777355][T26863] ipvlan1: entered allmulticast mode
[  571.779767][T26863] veth1_macvtap: entered allmulticast mode
[  571.793561][T26863] veth0_macvtap: entered allmulticast mode
[  571.808855][T26863] macvtap0: entered allmulticast mode
[  571.816207][T26863] macsec0: entered allmulticast mode
[  571.826969][T26863] geneve0: entered allmulticast mode
[  571.834922][T26863] geneve1: entered allmulticast mode
[  571.842471][T26863] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  571.849075][T26863] netdevsim netdevsim8 netdevsim1: entered allmulticast mode
[  571.855818][T26863] netdevsim netdevsim8 netdevsim2: entered allmulticast mode
[  571.866921][T26863] netdevsim netdevsim8 netdevsim3: entered allmulticast mode
[  571.885907][T26863] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode
[  571.895204][T26863] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  571.900475][T26863] @: entered allmulticast mode
[  571.906185][T26863] sit1: entered allmulticast mode
[  571.935680][T26863] bond1: entered allmulticast mode
[  571.941771][T26863] ipip0: entered allmulticast mode
[  571.978936][T26863] bridge1: entered allmulticast mode
[  571.998794][T26863] ip6gre1: entered allmulticast mode
[  572.006006][T26863] bond2: entered allmulticast mode
[  572.010469][T26863] bond3: entered allmulticast mode
[  572.012649][T26863] geneve2: entered allmulticast mode
[  572.017800][T26863] gtp0: entered allmulticast mode
[  572.022242][T26863] veth2: entered allmulticast mode
[  572.025866][T26863] veth3: entered allmulticast mode
[  572.028018][T26863] bond4: entered allmulticast mode
[  572.036787][T26863] bridge0: entered allmulticast mode
[  572.043264][T26863] bond6: entered allmulticast mode
[  572.046764][T26863] vlan2: entered allmulticast mode
[  572.055361][T26863] bridge2: entered allmulticast mode
[  572.115600][   T42] audit: type=1800 audit(1786657197.862:5123): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  572.150225][T22936] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  572.159072][T22936] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  572.164631][T22936] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  572.167557][T22936] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  572.170421][T22936] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  572.173158][T22936] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  572.176273][T22936] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  572.179240][T22936] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  572.190416][   T42] audit: type=1800 audit(1786657197.932:5124): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  572.192945][T22936] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  572.236026][   T42] audit: type=1800 audit(1786657197.982:5125): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  572.274166][   T42] audit: type=1800 audit(1786657197.982:5126): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=321403 res=0 errno=0
[  572.291261][T22926] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  572.296907][T22926] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  572.308053][T22926] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  574.150851][T26946] netlink: 'syz.5.8663': attribute type 1 has an invalid length.
[  574.198870][T26946] bond10: entered promiscuous mode
[  574.202289][T26946] 8021q: adding VLAN 0 to HW filter on device bond10
[  574.227421][T26948] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  574.250089][T26948] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  574.253932][T26948] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  574.264504][T26948] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  574.374925][T26946] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  574.400157][T26946] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  574.406506][T26946] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  574.784315][   T42] kauditd_printk_skb: 82 callbacks suppressed
[  574.784329][   T42] audit: type=1400 audit(1786657200.532:5209): avc:  denied  { append } for  pid=26960 comm="syz.4.8668" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  574.793603][T26963] binder_alloc: 26961: binder_alloc_buf size 12312 failed, no address space
[  574.796324][   T42] audit: type=1800 audit(1786657200.532:5210): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  574.840134][T26963] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  574.863356][   T42] audit: type=1800 audit(1786657200.612:5211): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  574.890875][   T42] audit: type=1800 audit(1786657200.632:5212): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  575.319229][   T42] audit: type=1800 audit(1786657201.062:5213): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  575.354366][   T42] audit: type=1800 audit(1786657201.102:5214): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  575.796696][   T42] audit: type=1800 audit(1786657201.542:5215): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=322753 res=0 errno=0
[  575.818953][   T42] audit: type=1800 audit(1786657201.562:5216): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  575.884937][   T42] audit: type=1800 audit(1786657201.632:5217): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  576.068468][   T42] audit: type=1800 audit(1786657201.812:5218): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  576.264792][T27007] tipc: Cannot configure node identity twice
[  576.267469][T27007] tipc: Cannot configure node identity twice
[  576.272055][T27007] tipc: New replicast peer: 127.0.0.1
[  576.274284][T27007] tipc: Enabled bearer <udp:syz0>, priority 10
[  576.882141][ T9830] IPVS: starting estimator thread 0...
[  576.886871][T27033] IPVS: wrr: TCP 127.0.0.1:21 - no destination available
[  577.000247][T27034] IPVS: using max 42 ests per chain, 100800 per kthread
[  577.270471][ T9830] tipc: Node number set to 1272940055
[  578.304170][T27049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8702'.
[  579.521293][ T1343] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  579.681034][ T1343] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  579.687946][ T1343] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  579.695930][ T1343] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  579.706937][ T1343] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.714717][ T1343] usb 9-1: Product: syz
[  579.716452][ T1343] usb 9-1: Manufacturer: syz
[  579.723879][ T1343] usb 9-1: SerialNumber: syz
[  579.960889][T27100] overlayfs: failed to clone upperpath
[  579.965800][   T42] kauditd_printk_skb: 94 callbacks suppressed
[  579.965816][   T42] audit: type=1800 audit(1786657205.712:5313): pid=27100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.8720" name="file1" dev="tmpfs" ino=5902 res=0 errno=0
[  580.009392][   T42] audit: type=1800 audit(1786657205.752:5314): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  580.079330][   T42] audit: type=1800 audit(1786657205.822:5315): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  580.239544][   T42] audit: type=1800 audit(1786657205.982:5316): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  580.270118][   T42] audit: type=1800 audit(1786657205.992:5317): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=324053 res=0 errno=0
[  580.297401][   T42] audit: type=1800 audit(1786657206.032:5318): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  580.392615][   T42] audit: type=1800 audit(1786657206.142:5319): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.8726" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0
[  580.435339][   T42] audit: type=1800 audit(1786657206.182:5320): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  580.518113][   T42] audit: type=1800 audit(1786657206.262:5321): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  580.567238][   T42] audit: type=1800 audit(1786657206.312:5322): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.8731" name="enabled" dev="sysfs" ino=59139 res=0 errno=0
[  580.805826][T27141] overlayfs: failed to resolve '/�_�^���7tz��������k�
6�$x��L����Q���)f	���»Zg"ps��P��j��mW�`�~A��t�3��?�"��;5���	�h�y��': -2
[  580.988242][T27150] team0 (unregistering): Port device team_slave_0 removed
[  580.995106][T27150] team0 (unregistering): Port device team_slave_1 removed
[  581.236386][T27160] syzkaller0: entered promiscuous mode
[  581.242322][T27160] syzkaller0: entered allmulticast mode
[  581.538591][T27169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  581.543739][T27169] block device autoloading is deprecated and will be removed.
[  581.684050][T27173] fuse: fd is not a fuse device
[  582.292339][ T9825] usb 9-1: USB disconnect, device number 9
[  582.559010][T27202] ref_ctr increment failed for inode: 0x334 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802bb272c0
[  582.571158][T27198] uprobe: syz.4.8758:27198 failed to unregister, leaking uprobe
[  583.065446][T27224] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  583.147527][T27227] kvm: pic: single mode not supported
[  583.877778][T27263] tipc: Failed to remove unknown binding: 66,0,0/0:70127342/70127344
[  583.882494][T27263] tipc: Failed to remove unknown binding: 66,0,0/0:70127342/70127343
[  583.885555][T27263] tipc: Failed to remove unknown binding: 66,0,0/0:70127342/70127344
[  583.888121][T27263] tipc: Failed to remove unknown binding: 66,0,0/0:70127342/70127343
[  584.491094][T27271] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  584.715461][T27294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8791'.
[  584.855226][T27300] kvm: pic: non byte read
[  584.857404][T27300] kvm: pic: non byte read
[  584.859902][T27300] kvm: pic: non byte read
[  584.974683][   T42] kauditd_printk_skb: 47 callbacks suppressed
[  584.974702][   T42] audit: type=1800 audit(1786657210.722:5370): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  585.006224][   T42] audit: type=1800 audit(1786657210.752:5371): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  585.064888][   T42] audit: type=1800 audit(1786657210.812:5372): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  585.206327][   T42] audit: type=1800 audit(1786657210.952:5373): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  585.215378][T27300] kvm: pic: non byte read
[  585.269207][   T42] audit: type=1800 audit(1786657211.012:5374): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  585.463413][T27325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8802'.
[  585.535983][T27325] bridge3: port 1(dummy0) entered blocking state
[  585.538933][T27325] bridge3: port 1(dummy0) entered disabled state
[  585.552579][T27325] dummy0: entered allmulticast mode
[  585.565857][T27325] dummy0: entered promiscuous mode
[  585.570535][   T42] audit: type=1800 audit(1786657211.312:5375): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  585.587259][T27328] netlink: 'syz.5.8802': attribute type 10 has an invalid length.
[  585.594975][T27328] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8802'.
[  585.619241][T27328] dummy0: left allmulticast mode
[  585.621129][T27328] bridge3: port 1(dummy0) entered disabled state
[  585.671476][   T42] audit: type=1800 audit(1786657211.422:5376): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  585.704479][   T42] audit: type=1800 audit(1786657211.452:5377): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=328982 res=0 errno=0
[  585.732685][   T42] audit: type=1800 audit(1786657211.452:5378): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=328986 res=0 errno=0
[  585.753972][   T42] audit: type=1400 audit(1786657211.452:5379): avc:  denied  { bind } for  pid=27334 comm="syz.8.8806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  585.755934][T27340] netlink: 'syz.3.8808': attribute type 2 has an invalid length.
[  585.881495][T27340] : entered promiscuous mode
[  586.112553][ T5823] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  586.241050][T27349] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  586.270957][ T5823] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  586.281737][ T5823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.302126][ T5823] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  586.311127][ T5823] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  586.325556][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.328557][ T5823] usb 9-1: Product: syz
[  586.332340][ T5823] usb 9-1: Manufacturer: syz
[  586.337989][ T5823] usb 9-1: SerialNumber: syz
[  586.906860][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8819'.
[  586.913358][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8819'.
[  586.983528][T27375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8820'.
[  587.086278][T27381] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27381 comm=syz.3.8820
[  588.642756][ T5823] usb 9-1: USB disconnect, device number 10
[  589.270137][T27416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27416 comm=syz.8.8831
[  589.281936][T27416] netlink: 'syz.8.8831': attribute type 3 has an invalid length.
[  589.284483][T27416] netlink: 'syz.8.8831': attribute type 3 has an invalid length.
[  589.864983][T27436] netlink: 'syz.4.8839': attribute type 1 has an invalid length.
[  589.905608][T27436] 8021q: adding VLAN 0 to HW filter on device bond3
[  589.965190][T27436] vlan4: entered allmulticast mode
[  589.968098][T27436] macsec0: entered allmulticast mode
[  589.970629][T27436] bond3: (slave vlan4): Error -34 calling dev_set_mtu
[  589.982845][T27442] binder_alloc: 27440: binder_alloc_buf, no vma
[  590.079684][   T42] kauditd_printk_skb: 42 callbacks suppressed
[  590.079696][   T42] audit: type=1800 audit(1786657215.822:5422): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  590.098831][T27444] syzkaller0: entered promiscuous mode
[  590.100696][T27444] syzkaller0: entered allmulticast mode
[  590.107379][T27441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  590.124135][T27439] tipc: Resetting bearer <eth:syzkaller0>
[  590.142872][T27439] tipc: Disabling bearer <eth:syzkaller0>
[  590.248178][   T42] audit: type=1800 audit(1786657215.992:5423): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  590.297732][   T42] audit: type=1800 audit(1786657216.042:5424): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  590.391055][T27466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8848'.
[  590.430905][T27464] XFS (mtdblock0): Invalid superblock magic number
[  590.477965][   T42] audit: type=1800 audit(1786657216.212:5425): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  590.716791][T27478] syz.8.8850 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  590.723153][T27478] CPU: 2 UID: 0 PID: 27478 Comm: syz.8.8850 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  590.723194][T27478] Tainted: [L]=SOFTLOCKUP
[  590.723201][T27478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  590.723215][T27478] Call Trace:
[  590.723233][T27478]  <TASK>
[  590.723271][T27478]  dump_stack_lvl+0x100/0x190
[  590.723309][T27478]  dump_header+0xfb/0x606
[  590.723332][T27478]  oom_kill_process.cold+0xd/0x330
[  590.723361][T27478]  out_of_memory+0x340/0x14f0
[  590.723418][T27478]  ? __pfx_out_of_memory+0x10/0x10
[  590.723457][T27478]  mem_cgroup_out_of_memory+0xc6/0x130
[  590.723481][T27478]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  590.723503][T27478]  ? find_held_lock+0x2b/0x80
[  590.723529][T27478]  ? do_raw_spin_unlock+0x145/0x1e0
[  590.723558][T27478]  ? _raw_spin_unlock+0x28/0x50
[  590.723584][T27478]  try_charge_memcg+0x6e5/0xdf0
[  590.723617][T27478]  ? __pfx_try_charge_memcg+0x10/0x10
[  590.723640][T27478]  ? find_held_lock+0x2b/0x80
[  590.723654][T27478]  ? rcu_read_unlock+0x17/0x60
[  590.723679][T27478]  ? rcu_read_unlock+0x17/0x60
[  590.723711][T27478]  __memcg_slab_post_alloc_hook+0x469/0x1160
[  590.723743][T27478]  ? kasan_save_track+0x14/0x30
[  590.723765][T27478]  kmem_cache_alloc_lru_noprof+0x583/0x6a0
[  590.723789][T27478]  ? alloc_inode+0x183/0x250
[  590.723819][T27478]  alloc_inode+0x183/0x250
[  590.723843][T27478]  new_inode+0x22/0x1c0
[  590.723868][T27478]  autofs_get_inode+0x20/0x330
[  590.723889][T27478]  autofs_fill_super+0x1a9/0x8e0
[  590.723908][T27478]  ? rcu_is_watching+0x12/0xc0
[  590.723936][T27478]  ? __pfx_autofs_fill_super+0x10/0x10
[  590.723954][T27478]  get_tree_nodev+0xdd/0x190
[  590.723981][T27478]  autofs_get_tree+0x1b9/0x2b0
[  590.724002][T27478]  vfs_get_tree+0x92/0x320
[  590.724028][T27478]  vfs_cmd_create+0xd7/0x2a0
[  590.724055][T27478]  __do_sys_fsconfig+0x55a/0xcb0
[  590.724081][T27478]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  590.724127][T27478]  do_syscall_64+0x115/0x870
[  590.724157][T27478]  ? clear_bhb_loop+0x70/0xc0
[  590.724183][T27478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.724204][T27478] RIP: 0033:0x7f301919e0d9
[  590.724224][T27478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.724243][T27478] RSP: 002b:00007f301a073028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  590.724287][T27478] RAX: ffffffffffffffda RBX: 00007f3019426090 RCX: 00007f301919e0d9
[  590.724301][T27478] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  590.724313][T27478] RBP: 00007f3019235024 R08: 0000000000000000 R09: 0000000000000000
[  590.724327][T27478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  590.724340][T27478] R13: 00007f3019426128 R14: 00007f3019426090 R15: 00007fffed46fd08
[  590.724371][T27478]  </TASK>
[  590.724506][T27478] memory: usage 0kB, limit 0kB, failcnt 33
[  590.774016][T27481] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  590.832732][T27478] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  590.835158][T27478] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  590.837333][T27478] Memory cgroup stats for /syz8/test:
[  590.837572][T27478] cache 0
[  590.840376][T27478] rss 0
[  590.841256][T27478] rss_huge 0
[  590.842338][T27478] shmem 0
[  590.843325][T27478] mapped_file 0
[  590.844463][T27478] dirty 0
[  590.845442][T27478] writeback 0
[  590.846490][T27478] workingset_refault_anon 0
[  590.847884][T27478] workingset_refault_file 0
[  590.849359][T27478] swap 0
[  590.851178][T27478] swapcached 0
[  590.852383][T27478] pgpgin 0
[  590.853476][T27478] pgpgout 0
[  590.854522][T27478] pgfault 0
[  590.855599][T27478] pgmajfault 0
[  590.856733][T27478] inactive_anon 0
[  590.857935][T27478] active_anon 0
[  590.859115][T27478] inactive_file 0
[  590.860514][T27478] active_file 0
[  590.861849][T27478] unevictable 0
[  590.863023][T27478] hierarchical_memory_limit 0
[  590.864527][T27478] hierarchical_memsw_limit 9223372036854771712
[  590.866483][T27478] total_cache 0
[  590.867635][T27478] total_rss 0
[  590.868782][T27478] total_rss_huge 0
[  590.870252][T27478] total_shmem 0
[  590.871676][T27478] total_mapped_file 0
[  590.873174][T27478] total_dirty 0
[  590.874482][T27478] total_writeback 0
[  590.875773][T27478] total_workingset_refault_anon 0
[  590.877326][T27478] total_workingset_refault_file 0
[  590.879050][T27478] total_swap 0
[  590.880632][T27478] total_swapcached 0
[  590.882174][T27478] total_pgpgin 0
[  590.883456][T27478] total_pgpgout 0
[  590.884709][T27478] total_pgfault 0
[  590.886188][T27478] total_pgmajfault 0
[  590.887702][T27478] total_inactive_anon 0
[  590.889311][T27478] total_active_anon 0
[  590.891033][T27478] total_inactive_file 0
[  590.892746][T27478] total_active_file 0
[  590.894253][T27478] total_unevictable 0
[  590.895872][T27478] anon_cost 0
[  590.897208][T27478] file_cost 0
[  590.898497][T27478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.8850,pid=27474,uid=0
[  590.910523][T27478] Memory cgroup out of memory: Killed process 27474 (syz.8.8850) total-vm:104432kB, anon-rss:2704kB, file-rss:22996kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  590.978380][   T42] audit: type=1800 audit(1786657216.722:5426): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  591.190130][   T42] audit: type=1800 audit(1786657216.932:5427): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  591.255237][   T42] audit: type=1804 audit(1786657217.002:5428): pid=27486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.8853" name="bus" dev="ramfs" ino=132879 res=1 errno=0
[  591.273795][   T42] audit: type=1804 audit(1786657217.002:5429): pid=27486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.8853" name="bus" dev="ramfs" ino=132879 res=1 errno=0
[  591.938759][   T42] audit: type=1800 audit(1786657217.682:5430): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  591.945549][T27505] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8862'.
[  591.993958][   T42] audit: type=1800 audit(1786657217.712:5431): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330092 res=0 errno=0
[  592.953280][T27527] zram: Can't change algorithm for initialized device
[  592.970935][T27527] zram: Cannot change disksize for initialized device
[  593.268891][T27534] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8873'.
[  593.287770][T27534] bond11: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  593.297355][T27534] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8873'.
[  593.301544][T27534] bond11: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  593.389456][T27542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8875'.
[  593.419756][T27542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27542 comm=syz.5.8875
[  593.565082][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  593.569254][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  593.579567][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  593.585927][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  593.590182][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  593.594901][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  593.599100][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  593.604134][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  593.609348][T27549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27549 comm=syz.4.8878
[  594.605701][T27568] overlayfs: failed to clone upperpath
[  594.722308][T27575] netlink: 'syz.5.8889': attribute type 1 has an invalid length.
[  594.774550][T27575] bond12: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  594.782388][T27575] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8889'.
[  594.788069][T27575] 8021q: adding VLAN 0 to HW filter on device bond12
[  594.807178][T12547] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  594.856982][T27578] kvm: requested 136609 ns i8254 timer period limited to 200000 ns
[  594.863544][T27578] kvm: requested 117333 ns i8254 timer period limited to 200000 ns
[  594.869019][T27578] kvm: requested 19276 ns i8254 timer period limited to 200000 ns
[  594.874437][T27578] kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[  594.878183][T27578] kvm: requested 89676 ns i8254 timer period limited to 200000 ns
[  594.891682][T27578] kvm: requested 23466 ns i8254 timer period limited to 200000 ns
[  594.895784][T27578] kvm: requested 186895 ns i8254 timer period limited to 200000 ns
[  594.899870][T27578] kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[  594.906562][T27578] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  594.910663][T27578] kvm: requested 180190 ns i8254 timer period limited to 200000 ns
[  594.940716][T22931] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  595.070308][ T1343] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  595.231037][ T1343] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  595.236542][ T1343] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  595.241657][ T1343] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  595.245788][ T1343] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.255075][   T42] kauditd_printk_skb: 19 callbacks suppressed
[  595.255091][   T42] audit: type=1800 audit(1786657221.002:5451): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=331060 res=0 errno=0
[  595.272669][   T42] audit: type=1800 audit(1786657221.012:5452): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=331089 res=0 errno=0
[  595.290326][   T42] audit: type=1800 audit(1786657221.012:5453): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=331067 res=0 errno=0
[  595.309469][   T42] audit: type=1800 audit(1786657221.012:5454): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=331068 res=0 errno=0
[  595.326183][   T42] audit: type=1800 audit(1786657221.012:5455): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=331069 res=0 errno=0
[  595.692059][   T42] audit: type=1800 audit(1786657221.442:5456): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  595.855117][   T42] audit: type=1800 audit(1786657221.602:5457): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  596.151766][   T42] audit: type=1800 audit(1786657221.892:5458): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  596.197636][   T42] audit: type=1800 audit(1786657221.942:5459): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  596.199097][T27614] syzkaller0: entered promiscuous mode
[  596.207925][T27614] syzkaller0: entered allmulticast mode
[  596.229739][   T42] audit: type=1800 audit(1786657221.972:5460): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=331202 res=0 errno=0
[  596.581413][T27621] kvm: pic: non byte write
[  596.717973][T27629] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  597.160725][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  597.826480][ T1343] usb 9-1: USB disconnect, device number 11
[  598.067017][T27659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8918'.
[  598.196566][T27664] bond0: (slave bond_slave_0): Releasing backup interface
[  598.206758][T27664] bond0: (slave bond_slave_1): Releasing backup interface
[  598.214809][T27664] team0: Port device team_slave_0 removed
[  598.218944][T27664] team0: Port device team_slave_1 removed
[  598.223015][T27664] batman_adv: batadv0: Removing interface: batadv_slave_0
[  598.225600][T27666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8921'.
[  598.232902][T27664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  598.235954][T27664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  598.288061][T27664] team0: Mode changed to "loadbalance"
[  599.528049][T27701] gadgetfs: bound to dummy_udc driver
[  599.783325][T27712] netlink: 'syz.4.8938': attribute type 1 has an invalid length.
[  599.840344][T27712] 8021q: adding VLAN 0 to HW filter on device bond4
[  599.877358][T27714] bond4: (slave dummy0): making interface the new active one
[  599.892189][T27714] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  599.937154][T27712] 
: renamed from dummy0 (while UP)
[  600.477056][   T42] kauditd_printk_skb: 26 callbacks suppressed
[  600.477076][   T42] audit: type=1800 audit(1786657226.222:5487): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  600.577634][   T42] audit: type=1800 audit(1786657226.322:5488): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  600.646351][   T42] audit: type=1800 audit(1786657226.392:5489): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  600.814825][   T42] audit: type=1800 audit(1786657226.562:5490): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  601.089541][   T42] audit: type=1800 audit(1786657226.832:5491): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0
[  601.158980][   T42] audit: type=1800 audit(1786657226.902:5492): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  601.185414][   T42] audit: type=1800 audit(1786657226.912:5493): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336043 res=0 errno=0
[  601.269261][   T42] audit: type=1800 audit(1786657227.012:5494): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336230 res=0 errno=0
[  601.292909][   T42] audit: type=1800 audit(1786657227.042:5495): pid=14222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=336139 res=0 errno=0
[  601.295468][T27744] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  601.308466][T27744] block device autoloading is deprecated and will be removed.
[  601.473833][   T42] audit: type=1800 audit(1786657227.212:5496): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  602.275546][T27775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  602.284353][T27775] team0: No ports can be present during mode change
[  603.132315][T27799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  603.277050][T27810] netlink: 'syz.8.8975': attribute type 1 has an invalid length.
[  603.296109][T27810] 8021q: adding VLAN 0 to HW filter on device bond7
[  603.324344][T27810] dummy0: left allmulticast mode
[  603.335339][T27810] bond7: (slave dummy0): making interface the new active one
[  603.339621][T27810] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  603.351149][T27810] 
: renamed from dummy0 (while UP)
[  606.240862][T27869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8995'.
[  606.444356][   T42] kauditd_printk_skb: 28 callbacks suppressed
[  606.444450][   T42] audit: type=1800 audit(1786657232.192:5525): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  606.471338][   T42] audit: type=1800 audit(1786657232.222:5526): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  607.042696][T27878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8997'.
[  607.192013][T27880] netlink: 'syz.4.8999': attribute type 1 has an invalid length.
[  607.223047][T27880] 8021q: adding VLAN 0 to HW filter on device bond5
[  607.288700][T27880] bond5: (slave veth7): Enslaving as an active interface with a down link
[  607.318801][T27880] netlink: 'syz.4.8999': attribute type 10 has an invalid length.
[  607.324434][T27880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8999'.
[  607.328607][T27880] 
: entered promiscuous mode
[  607.347795][T27880] bond4: (slave 
): Releasing active interface
[  607.358617][T27883] Cannot find del_set index 4 as target
[  607.377597][   T42] audit: type=1800 audit(1786657233.122:5527): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  607.384127][T27883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input43
[  607.398653][   T42] audit: type=1800 audit(1786657233.132:5528): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=337819 res=0 errno=0
[  607.444842][T27886] binder: 27885:27886 unknown command 0
[  607.449352][T27886] binder: 27885:27886 ioctl c0306201 2000000001c0 returned -22
[  607.456801][   T42] audit: type=1800 audit(1786657233.202:5529): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  607.507670][   T42] audit: type=1800 audit(1786657233.252:5530): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=337835 res=0 errno=0
[  607.530642][   T42] audit: type=1800 audit(1786657233.252:5531): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=337838 res=0 errno=0
[  607.538005][T27888] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  607.543579][T27888] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  607.556344][   T42] audit: type=1800 audit(1786657233.262:5532): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=337837 res=0 errno=0
[  607.567540][   T42] audit: type=1800 audit(1786657233.272:5533): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=337836 res=0 errno=0
[  607.577844][   T42] audit: type=1800 audit(1786657233.272:5534): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=337827 res=0 errno=0
[  607.648459][T27892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9004'.
[  607.654373][T27892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9004'.
[  608.037729][T27908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9008'.
[  608.049534][T27908] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  608.326715][T27921] CIFS: Attempting to mount //127.0.0.1/test
[  608.424718][T27921] CIFS: VFS: Error connecting to socket. Aborting operation.
[  608.431279][T27921] CIFS: VFS: cifs_mount failed w/return code = -4
[  608.473192][T27923] xt_CT: No such helper "netbios-ns"
[  608.660253][T27937] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9020'.
[  608.665763][T27937] tipc: Started in network mode
[  608.667476][T27937] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  608.670571][T27937] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  608.719129][T27938] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  608.761816][T27940] netlink: 'syz.8.9021': attribute type 3 has an invalid length.
[  608.765351][T27940] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9021'.
[  608.826282][T27943] netlink: 'syz.8.9022': attribute type 8 has an invalid length.
[  608.829015][T27943] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9022'.
[  608.845609][T27943] bond0: entered promiscuous mode
[  608.854717][T27943] gretap0: entered promiscuous mode
[  608.857776][T27943] team0: entered promiscuous mode
[  608.860490][T27943] debugfs: 'hsr1' already exists in 'hsr'
[  608.862617][T27943] Cannot create hsr debugfs directory
[  608.873751][T27943] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  608.878047][T27943] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  608.886227][T27943] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network
[  608.893413][T27943] hsr1: entered promiscuous mode
[  609.014255][T27950] 9pnet_virtio: no channels available for device syz
[  609.108241][ T5823] bridge0: entered promiscuous mode
[  609.225721][T27959] netlink: 'syz.8.9028': attribute type 1 has an invalid length.
[  609.315920][T27962] 8021q: adding VLAN 0 to HW filter on device bond9
[  609.319790][T27962] bond8: (slave bond9): making interface the new active one
[  609.329145][T27962] bond8: (slave bond9): Enslaving as an active interface with an up link
[  609.359678][T27959] bond8: (slave gretap1): Enslaving as a backup interface with an up link
[  609.810404][T24550] Bluetooth: hci0: command 0x0405 tx timeout
[  609.918249][T27999] create_pit_timer: 8 callbacks suppressed
[  609.918283][T27999] kvm: requested 186057 ns i8254 timer period limited to 200000 ns
[  609.948819][T27999] kvm: requested 179352 ns i8254 timer period limited to 200000 ns
[  609.955730][T27999] kvm: requested 103923 ns i8254 timer period limited to 200000 ns
[  609.960870][T27999] kvm: requested 181028 ns i8254 timer period limited to 200000 ns
[  609.965876][T27999] kvm: requested 186057 ns i8254 timer period limited to 200000 ns
[  609.988958][T27999] kvm: requested 179352 ns i8254 timer period limited to 200000 ns
[  609.995732][T27999] kvm: requested 63695 ns i8254 timer period limited to 200000 ns
[  609.999646][T27999] kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[  610.003875][T27999] kvm: requested 122361 ns i8254 timer period limited to 200000 ns
[  610.008801][T27999] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  610.125343][T28008] fuse: fd is not a fuse device
[  610.203739][T28010] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  610.361083][T28018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9049'.
[  611.448642][T28046] lo: entered allmulticast mode
[  611.452959][T28045] lo: left allmulticast mode
[  611.478153][   T42] kauditd_printk_skb: 48 callbacks suppressed
[  611.478175][   T42] audit: type=1800 audit(1786657237.222:5583): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  611.522577][   T42] audit: type=1800 audit(1786657237.272:5584): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  611.553393][   T42] audit: type=1400 audit(1786657237.302:5585): avc:  denied  { write } for  pid=28051 comm="syz.8.9064" name="configs" dev="configfs" ino=42662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  611.566328][   T42] audit: type=1800 audit(1786657237.302:5586): pid=28052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.9064" name="num_groups" dev="configfs" ino=137740 res=0 errno=0
[  611.577358][   T42] audit: type=1800 audit(1786657237.302:5587): pid=28052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.9064" name="midi1_num_groups" dev="configfs" ino=137741 res=0 errno=0
[  611.602771][   T42] audit: type=1800 audit(1786657237.352:5588): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  611.662238][T28062] binder: 28060:28062 ioctl c0306201 200000000c40 returned -14
[  611.685902][   T42] audit: type=1800 audit(1786657237.432:5589): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  611.710826][   T42] audit: type=1804 audit(1786657237.462:5590): pid=28066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.9070" name="/newroot/495/file0" dev="tmpfs" ino=2703 res=1 errno=0
[  611.718424][   T42] audit: type=1800 audit(1786657237.462:5591): pid=28066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.9070" name="file0" dev="tmpfs" ino=2703 res=0 errno=0
[  611.747506][T28066] uprobe: syz.8.9070:28066 failed to unregister, leaking uprobe
[  611.784309][   T42] audit: type=1800 audit(1786657237.532:5592): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0
[  611.895913][T24550] Bluetooth: hci0: command 0x0405 tx timeout
[  613.489685][T28102] ------------[ cut here ]------------
[  613.494439][T28102] len > ((int)(~0U >> 1))
[  613.494457][T28102] WARNING: ./include/linux/skbuff.h:2864 at gre_tap_xmit+0x528/0x630, CPU#3: syz.3.9085/28102
[  613.500088][T28102] Modules linked in:
[  613.505396][T28102] CPU: 3 UID: 0 PID: 28102 Comm: syz.3.9085 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  613.509607][T28102] Tainted: [L]=SOFTLOCKUP
[  613.511436][T28102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  613.515451][T28102] RIP: 0010:gre_tap_xmit+0x528/0x630
[  613.517941][T28102] Code: 4c 89 e6 48 89 df e8 87 f0 ff ff e9 85 fd ff ff e8 0d d7 c3 f7 45 29 f5 41 83 c5 3f 44 89 ed 83 e5 c0 eb a4 e8 f9 d6 c3 f7 90 <0f> 0b 90 e9 f5 fb ff ff e8 eb d6 c3 f7 44 89 fe 89 ef e8 91 d0 c3
[  613.525513][T28102] RSP: 0018:ffffc900039b71c8 EFLAGS: 00010283
[  613.527952][T28102] RAX: 0000000000000276 RBX: ffff88803dba68c0 RCX: ffffc9003122b000
[  613.531174][T28102] RDX: 0000000000080000 RSI: ffffffff8a469c87 RDI: ffff888057760000
[  613.534351][T28102] RBP: 00000000ffffff44 R08: 0000000000000005 R09: 0000000000000000
[  613.537537][T28102] R10: 00000000ffffff44 R11: 0000000000000000 R12: ffff888056d86000
[  613.540709][T28102] R13: ffffffffffffff44 R14: ffff88803dba6990 R15: 0000000000000000
[  613.543849][T28102] FS:  00007f32cd38c6c0(0000) GS:ffff8880d60e9000(0000) knlGS:0000000000000000
[  613.547314][T28102] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  613.549946][T28102] CR2: 00007f32cc770180 CR3: 00000000366ec000 CR4: 0000000000352ef0
[  613.553167][T28102] DR0: 0000000000000000 DR1: 0000000000000053 DR2: 0000000000000000
[  613.556066][T28102] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  613.559096][T28102] Call Trace:
[  613.560585][T28102]  <TASK>
[  613.561815][T28102]  dev_hard_start_xmit+0x121/0x760
[  613.563925][T28102]  ? validate_xmit_skb_list+0x110/0x160
[  613.566166][T28102]  sch_direct_xmit+0x1b2/0xc70
[  613.568159][T28102]  ? lock_acquire+0x1b9/0x370
[  613.570237][T28102]  ? __pfx_sch_direct_xmit+0x10/0x10
[  613.572494][T28102]  ? do_raw_spin_lock+0x1c0/0x260
[  613.574583][T28102]  __dev_queue_xmit+0x27ac/0x4970
[  613.576651][T28102]  ? kmalloc_reserve+0x148/0x350
[  613.578672][T28102]  ? __pfx___dev_queue_xmit+0x10/0x10
[  613.580918][T28102]  ? __sanitizer_cov_trace_const_cmp4+0x10/0x20
[  613.583409][T28102]  ? __lock_acquire+0x49f/0x1a40
[  613.585392][T28102]  ? netif_skb_features+0x9cf/0x13f0
[  613.587454][T28102]  ? skb_set_owner_w+0x37d/0x780
[  613.589468][T28102]  vlan_dev_hard_start_xmit+0x2cf/0x470
[  613.591873][T28102]  __dev_direct_xmit+0x5b3/0x750
[  613.593900][T28102]  ? __pfx___dev_direct_xmit+0x10/0x10
[  613.601879][T28102]  ? preempt_schedule_thunk+0x16/0x40
[  613.604262][T28102]  xsk_generic_xmit+0x2267/0x44a0
[  613.606363][T28102]  ? __lock_acquire+0x49f/0x1a40
[  613.608670][T28102]  ? __pfx_xsk_generic_xmit+0x10/0x10
[  613.610878][T28102]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  613.613281][T28102]  ? __pollwait+0x276/0x490
[  613.615226][T28102]  xsk_poll+0x2a5/0x840
[  613.616915][T28102]  ? __fget_files+0x21f/0x3d0
[  613.618880][T28102]  ? __pfx_xsk_poll+0x10/0x10
[  613.620926][T28102]  sock_poll+0x160/0x510
[  613.622690][T28102]  ? __pfx_sock_poll+0x10/0x10
[  613.624629][T28102]  do_sys_poll+0x6e5/0xe90
[  613.626525][T28102]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  613.628924][T28102]  ? __pfx_do_sys_poll+0x10/0x10
[  613.630989][T28102]  ? __lock_acquire+0x49f/0x1a40
[  613.632617][T28102]  ? futex_unqueue+0x13d/0x2c0
[  613.634478][T28102]  ? __pfx___pollwait+0x10/0x10
[  613.636379][T28102]  ? __pfx_pollwake+0x10/0x10
[  613.638189][T28102]  ? do_futex+0x190/0x440
[  613.639958][T28102]  ? set_user_sigmask+0x1e1/0x270
[  613.646241][T28102]  ? __pfx_set_user_sigmask+0x10/0x10
[  613.648392][T28102]  ? find_held_lock+0x2b/0x80
[  613.650262][T28102]  __x64_sys_ppoll+0x2b5/0x350
[  613.651921][T28102]  ? __pfx___x64_sys_ppoll+0x10/0x10
[  613.653646][T28102]  do_syscall_64+0x115/0x870
[  613.655182][T28102]  ? clear_bhb_loop+0x70/0xc0
[  613.656672][T28102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.658543][T28102] RIP: 0033:0x7f32cc59e0d9
[  613.660385][T28102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.667378][T28102] RSP: 002b:00007f32cd38c028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  613.670343][T28102] RAX: ffffffffffffffda RBX: 00007f32cc825fa0 RCX: 00007f32cc59e0d9
[  613.672770][T28102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000800
[  613.675245][T28102] RBP: 00007f32cc635024 R08: 0000000000000000 R09: 0000000000000000
[  613.677657][T28102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  613.680500][T28102] R13: 00007f32cc826038 R14: 00007f32cc825fa0 R15: 00007ffd368a1da8
[  613.683170][T28102]  </TASK>
[  613.684171][T28102] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  613.686517][T28102] CPU: 3 UID: 0 PID: 28102 Comm: syz.3.9085 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  613.689947][T28102] Tainted: [L]=SOFTLOCKUP
[  613.691255][T28102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  613.694241][T28102] Call Trace:
[  613.695312][T28102]  <TASK>
[  613.696248][T28102]  dump_stack_lvl+0x100/0x190
[  613.697688][T28102]  vpanic+0x552/0x970
[  613.698907][T28102]  ? __pfx_vpanic+0x10/0x10
[  613.700340][T28102]  panic+0xd1/0xe0
[  613.701487][T28102]  ? __pfx_panic+0x10/0x10
[  613.702865][T28102]  check_panic_on_warn.cold+0x19/0x34
[  613.704504][T28102]  ? gre_tap_xmit+0x528/0x630
[  613.706217][T28102]  __warn.cold+0x191/0x318
[  613.707612][T28102]  __report_bug+0x30f/0x440
[  613.709023][T28102]  ? gre_tap_xmit+0x528/0x630
[  613.710519][T28102]  ? __pfx___report_bug+0x10/0x10
[  613.712411][T28102]  ? __kernel_text_address+0xd/0x30
[  613.714223][T28102]  ? do_raw_spin_lock+0x128/0x260
[  613.716118][T28102]  ? find_held_lock+0x2b/0x80
[  613.717828][T28102]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  613.719939][T28102]  ? gre_tap_xmit+0x528/0x630
[  613.721431][T28102]  report_bug+0xb2/0x220
[  613.722910][T28102]  ? gre_tap_xmit+0x528/0x630
[  613.724641][T28102]  handle_bug+0x16a/0x2a0
[  613.726327][T28102]  exc_invalid_op+0x17/0x50
[  613.727803][T28102]  asm_exc_invalid_op+0x1a/0x20
[  613.729422][T28102] RIP: 0010:gre_tap_xmit+0x528/0x630
[  613.731332][T28102] Code: 4c 89 e6 48 89 df e8 87 f0 ff ff e9 85 fd ff ff e8 0d d7 c3 f7 45 29 f5 41 83 c5 3f 44 89 ed 83 e5 c0 eb a4 e8 f9 d6 c3 f7 90 <0f> 0b 90 e9 f5 fb ff ff e8 eb d6 c3 f7 44 89 fe 89 ef e8 91 d0 c3
[  613.738170][T28102] RSP: 0018:ffffc900039b71c8 EFLAGS: 00010283
[  613.740187][T28102] RAX: 0000000000000276 RBX: ffff88803dba68c0 RCX: ffffc9003122b000
[  613.742758][T28102] RDX: 0000000000080000 RSI: ffffffff8a469c87 RDI: ffff888057760000
[  613.745303][T28102] RBP: 00000000ffffff44 R08: 0000000000000005 R09: 0000000000000000
[  613.748089][T28102] R10: 00000000ffffff44 R11: 0000000000000000 R12: ffff888056d86000
[  613.750906][T28102] R13: ffffffffffffff44 R14: ffff88803dba6990 R15: 0000000000000000
[  613.753735][T28102]  ? gre_tap_xmit+0x527/0x630
[  613.755514][T28102]  ? gre_tap_xmit+0x527/0x630
[  613.757213][T28102]  dev_hard_start_xmit+0x121/0x760
[  613.758804][T28102]  ? validate_xmit_skb_list+0x110/0x160
[  613.760463][T28102]  sch_direct_xmit+0x1b2/0xc70
[  613.762127][T28102]  ? lock_acquire+0x1b9/0x370
[  613.763986][T28102]  ? __pfx_sch_direct_xmit+0x10/0x10
[  613.765663][T28102]  ? do_raw_spin_lock+0x1c0/0x260
[  613.767228][T28102]  __dev_queue_xmit+0x27ac/0x4970
[  613.768774][T28102]  ? kmalloc_reserve+0x148/0x350
[  613.770317][T28102]  ? __pfx___dev_queue_xmit+0x10/0x10
[  613.771949][T28102]  ? __sanitizer_cov_trace_const_cmp4+0x10/0x20
[  613.773800][T28102]  ? __lock_acquire+0x49f/0x1a40
[  613.775398][T28102]  ? netif_skb_features+0x9cf/0x13f0
[  613.776991][T28102]  ? skb_set_owner_w+0x37d/0x780
[  613.778508][T28102]  vlan_dev_hard_start_xmit+0x2cf/0x470
[  613.780207][T28102]  __dev_direct_xmit+0x5b3/0x750
[  613.781719][T28102]  ? __pfx___dev_direct_xmit+0x10/0x10
[  613.783330][T28102]  ? preempt_schedule_thunk+0x16/0x40
[  613.784906][T28102]  xsk_generic_xmit+0x2267/0x44a0
[  613.786398][T28102]  ? __lock_acquire+0x49f/0x1a40
[  613.787881][T28102]  ? __pfx_xsk_generic_xmit+0x10/0x10
[  613.789466][T28102]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  613.791466][T28102]  ? __pollwait+0x276/0x490
[  613.793074][T28102]  xsk_poll+0x2a5/0x840
[  613.794553][T28102]  ? __fget_files+0x21f/0x3d0
[  613.796292][T28102]  ? __pfx_xsk_poll+0x10/0x10
[  613.798092][T28102]  sock_poll+0x160/0x510
[  613.799736][T28102]  ? __pfx_sock_poll+0x10/0x10
[  613.801230][T28102]  do_sys_poll+0x6e5/0xe90
[  613.802723][T28102]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  613.804942][T28102]  ? __pfx_do_sys_poll+0x10/0x10
[  613.806766][T28102]  ? __lock_acquire+0x49f/0x1a40
[  613.808646][T28102]  ? futex_unqueue+0x13d/0x2c0
[  613.810413][T28102]  ? __pfx___pollwait+0x10/0x10
[  613.812253][T28102]  ? __pfx_pollwake+0x10/0x10
[  613.814080][T28102]  ? do_futex+0x190/0x440
[  613.815769][T28102]  ? set_user_sigmask+0x1e1/0x270
[  613.817706][T28102]  ? __pfx_set_user_sigmask+0x10/0x10
[  613.819738][T28102]  ? find_held_lock+0x2b/0x80
[  613.821574][T28102]  __x64_sys_ppoll+0x2b5/0x350
[  613.823203][T28102]  ? __pfx___x64_sys_ppoll+0x10/0x10
[  613.824888][T28102]  do_syscall_64+0x115/0x870
[  613.826713][T28102]  ? clear_bhb_loop+0x70/0xc0
[  613.828478][T28102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.830267][T28102] RIP: 0033:0x7f32cc59e0d9
[  613.831942][T28102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.838689][T28102] RSP: 002b:00007f32cd38c028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  613.841944][T28102] RAX: ffffffffffffffda RBX: 00007f32cc825fa0 RCX: 00007f32cc59e0d9
[  613.844294][T28102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000800
[  613.847353][T28102] RBP: 00007f32cc635024 R08: 0000000000000000 R09: 0000000000000000
[  613.850015][T28102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  613.852766][T28102] R13: 00007f32cc826038 R14: 00007f32cc825fa0 R15: 00007ffd368a1da8
[  613.855748][T28102]  </TASK>
[  613.857399][T28102] Kernel Offset: disabled
[  613.859078][T28102] Rebooting in 86400 seconds..