last executing test programs:

2m28.454217885s ago: executing program 1 (id=1117):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2)
ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000002080)={0x0, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739", 0x0, 0x100, 0x0, 0x1})
sendfile(r1, r0, &(0x7f0000000180)=0xd, 0x3fffff)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550)
ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) (async)
ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000002080)={0x0, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739", 0x0, 0x100, 0x0, 0x1}) (async)
sendfile(r1, r0, &(0x7f0000000180)=0xd, 0x3fffff) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) (async)
ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) (async)

2m28.453939562s ago: executing program 1 (id=1118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x640, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000000140))
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x80, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x440400, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2dc, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4a0262a9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a8bcf60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6c9b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2a1e027a}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e2f61fde04d1c8953e49090fb9a1260b9fb604d96763c22d21be"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb0}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "8f9daa00e42818e53f4493edabad8ef457fbac978e810feb92c0d9a37cad94deb922b28858be3c0e69f6a042f18d2a906e02978cb6cfcea4efac66e15eca02dd8b516c7ec84e91068174a953bd8ab6f6173f0c87fcd85c92ed3549cb952df7b267d485a5f64653a9b25c55f81bfad34c390d1f9caebc7ade5770b84190f192598ba285a1fc47afdf202055e5db3eab1fa564f648ad71eb631edf"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2f4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "325e43366aa675c779c586bd50ad3fd01da90204b41902f22602720f"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "49c5e7d37955964194bc5782798d3386d4ff2562e3e382fccd"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "84184dc1e83b8dde6a3e047b4f4050848b45f718ecb0590ee8339d3a72cdbc4e9e6279"}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2m28.38445341s ago: executing program 1 (id=1119):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000140009050000000000000000021088fe", @ANYRES32=r2, @ANYBLOB="08000800660400000c000200ac14"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x12)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000040))

2m28.274530208s ago: executing program 1 (id=1122):
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3)
ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5392, &(0x7f0000000080))
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000300)={&(0x7f0000000200)=""/219, 0xdb, 0x0, 0xffffff81})
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x2003, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x12e, &(0x7f0000000400)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x2f, 0x4, 0x0, 0x0, 0x120, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0xf, 0x1f, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @rr={0x7, 0x17, 0x4e, [@private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0x23, 0x4a, [@private=0xa010100, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @lsrr={0x83, 0x2b, 0x31, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @multicast2, @rand_addr=0x64010101, @multicast2]}, @lsrr={0x83, 0x2b, 0x15, [@dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @loopback]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0x5, [0x4000006]}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='bic', 0x408082, &(0x7f0000000100)={@_ha_fsid={[0x1, 0xc]}, {0x8, 0xa4, 0xc5}}, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0xff})

2m28.054445491s ago: executing program 1 (id=1123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x98}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
syz_emit_ethernet(0xca, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@noop, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000720008002bbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0800010001000000080001000000000008000100000000000800010001000000080001000000000008000100000000005a460278e6e91b91c738c5b1562fbc29abed10a7c6c96de95c33b82d63420925d39e900982204e78d4fdf233a4d61cd32556575ceaed8e3ae2280491f21da9a8b9ef2dd6edacdb5744a99e1c386a25705dfaf454db9589eeee8acebffb96ae5344618b368b28cac3468d83ba445e97eb2a194c510bf8ff95445a894acd86d420286372ff8ea94c0d38af82ad30"], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x40014)
sendto$packet(r5, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

2m27.703296642s ago: executing program 1 (id=1126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r3, 0x6, 0x28000000}, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r3, 0x8001}, &(0x7f00000000c0)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xf}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x40000)

2m27.623550023s ago: executing program 32 (id=1126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r3, 0x6, 0x28000000}, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r3, 0x8001}, &(0x7f00000000c0)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xf}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x40000)

1m55.313676442s ago: executing program 2 (id=1709):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000100)=ANY=[@ANYBLOB="120100030000002030144b4740000102030109021f00010104900509040000010103930409050500000000094004250100b95ab0f1a14973339bd43a8d46c2cecd0763d8c7b307f4013d20b38f460be3c98ee7effd7909318e9c4eeaa12db0798eb2"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r2, 0x0, 0x20000000002)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async)
pipe2(&(0x7f0000000040), 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000100)=ANY=[@ANYBLOB="120100030000002030144b4740000102030109021f00010104900509040000010103930409050500000000094004250100b95ab0f1a14973339bd43a8d46c2cecd0763d8c7b307f4013d20b38f460be3c98ee7effd7909318e9c4eeaa12db0798eb2"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) (async)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(r0, r2, 0x0, 0x20000000002) (async)

1m54.524568815s ago: executing program 2 (id=1717):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x40000010, 0x0, 0x1}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpid()
connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x400000000000247, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x3d, '\x00', @data=0xf, 0x9465}]})
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000180)="031ec477861f84d3b84db8fdb3151439929010e9878738d0ddb86bf48bd5a9362585684deb6a71a680259539ee79ef3300b1f4f0908701df8bae646748578c8a0e8c49f5", 0x44)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040890)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)}, 0x40000)
close(r3)

1m54.312213494s ago: executing program 2 (id=1718):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x20000980)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1m54.243322156s ago: executing program 2 (id=1719):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x183)
mount$bind(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x381091, 0x0)
chroot(&(0x7f0000000b40)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00')
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cb, 0x0)

1m54.243126064s ago: executing program 2 (id=1720):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001540), 0x80, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x2}, {0x1, 0x1}, {0x4, 0x2}], "5cda8a443957083e"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x80000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)='\v', 0x1}], 0x1}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40)
ioctl$CDROM_GET_MCN(r0, 0x5311, 0x0)

1m53.790806332s ago: executing program 2 (id=1724):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x13, {0x7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)

1m53.707635324s ago: executing program 33 (id=1724):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x13, {0x7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)

1m40.904175678s ago: executing program 0 (id=1934):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 32)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$BLKPG(r4, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffffd, 0x20003, 0x3}}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "bfbc0cc891939b07a80400000000000000e3fed6fcb7b45a35e6008940440face64c34a3ebba9fecd752e0269894d2e85ea8df1142b3a4"}, 0x42)

1m40.035715377s ago: executing program 0 (id=1946):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x89102, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async)
socket(0x10, 0x803, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400001f", @ANYRES16=r3, @ANYBLOB="030300000000000000002a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e1e, @private=0xa010101}, {0x2, 0xfffd, @local}, {0x2, 0x4e27, @empty}, 0x1c9, 0x0, 0x0, 0x0, 0xfff6, 0x0, 0x4, 0x8}) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async)
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@rand_addr, 0x8}, {@empty}]}]}}}}}}}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x3, '\x00', @buffer={"dbe4e1e4438b113957812e5e06087b82f7732f57f25fbc2ab6fee7bbaa4459d4", 0x20}, 0x40}, {0xa, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x1, @uvalue=0x2}, {0x2, @svalue=0xa}, {0x0, @svalue=0xee}]}, 0x7b3}, {0x1a, '\x00', @buffer={"6ec190283a8cc61aa9c9e87940989ce36c189075f1513b6faea3f510efe03f93", 0x20}, 0x40}, {0x1e, '\x00', @data=0x4d55, 0x745}, {0x38, '\x00', @data=0x7, 0x9}, {0x2b, '\x00', @data=0x4, 0xbd}, {0x32, '\x00', @buffer={"36a4a4255f9fb936e2c4f2de7e5e3ad7880ad29ce682ab12e13758f94ea4656b", 0x20}, 0x3034}, {0x2e, '\x00', @data=0x9, 0x9}, {0x3a, '\x00', @data=0x8, 0x10000}]})

1m39.79422684s ago: executing program 0 (id=1948):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)
r1 = memfd_secret(0x80000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0xe6d87000)

1m39.794028563s ago: executing program 0 (id=1949):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000400))
r2 = socket$kcm(0x2d, 0x2, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={<r5=>r2})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r5})
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="44702113d1b50c2565830180c20000010180c20000000800450000200200000010119078ffffffff0000000000004e20000c907801080000"], 0x0)
r6 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000140))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

1m39.713604262s ago: executing program 0 (id=1951):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "abde67c76fecc338ca2f9851cc"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "831533b03b"}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ae1448fece559673ac48b44212"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x9c}}, 0x40)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = eventfd2(0x43, 0x1)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x1, r3})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00'})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r7, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x20, 0x117, 0x2, 0x8, "36a31a42d8a5a0ec"}], 0x20}], 0x1, 0x40800)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, &(0x7f0000001400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x108) (async)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, &(0x7f0000001400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x108)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00', @ANYRES16=r9, @ANYBLOB="040000000000fedbdf25030000005800018044000400d5fe01000a000000000000000000000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000000000bb000000800d0001007564703a73797a3200000000"], 0x6c}}, 0x0)

1m39.433068054s ago: executing program 0 (id=1954):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x209000, &(0x7f0000000200)='workdir')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x0, 0x7}, {0x5, 0xe1, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x8000, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'tunl0\x00', <r3=>0x0})
r4 = gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x34, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'nr0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x80, 0x46, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x4008080}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', <r11=>0x0, 0x700, 0x1, 0x3ff, 0x4, {{0xc, 0x4, 0x3, 0x2, 0x30, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@end, @lsrr={0x83, 0x1b, 0xf4, [@loopback, @private=0xa010101, @loopback, @multicast1, @rand_addr=0x64010101, @local]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000b00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x208, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x48890)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x13c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x88}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7cf1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2d45}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xda21}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xce68}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffc01}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r12 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6)
io_setup(0x7d, &(0x7f0000000600)=<r13=>0x0)
io_submit(r13, 0x4000000000000242, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r12, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r12}])

1m39.34608321s ago: executing program 34 (id=1954):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x209000, &(0x7f0000000200)='workdir')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x0, 0x7}, {0x5, 0xe1, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x8000, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'tunl0\x00', <r3=>0x0})
r4 = gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x34, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'nr0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x80, 0x46, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x4008080}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', <r11=>0x0, 0x700, 0x1, 0x3ff, 0x4, {{0xc, 0x4, 0x3, 0x2, 0x30, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@end, @lsrr={0x83, 0x1b, 0xf4, [@loopback, @private=0xa010101, @loopback, @multicast1, @rand_addr=0x64010101, @local]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000b00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x208, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x48890)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x13c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x88}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7cf1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2d45}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xda21}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xce68}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffc01}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r12 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6)
io_setup(0x7d, &(0x7f0000000600)=<r13=>0x0)
io_submit(r13, 0x4000000000000242, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r12, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r12}])

1m14.251597117s ago: executing program 6 (id=2360):
r0 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x100)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0)
ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1)

1m14.151876885s ago: executing program 6 (id=2363):
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x17ba, 0x100, 0x1, 0x256})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m14.146923035s ago: executing program 6 (id=2365):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x100000000, 0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x77, 0x0, 0x74fe, 0xe, 0x200000000000003, 0x24a6, 0x8, 0x104, 0x544c, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x6, 0x5, 0xfffffffffffffffd, 0xf439})
bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r4=>0x0})
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/2:0:0:0\x00', 0x84080, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x90, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4ab04}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x7}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0xff}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x8}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0xa}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x5}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x2}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x5}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x7}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
recvmsg(r6, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x3)

1m14.037709903s ago: executing program 6 (id=2366):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r0, &(0x7f0000002840)=""/4096, 0x1000)
ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000014c0))
r1 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x189893, 0x0)
umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70b92a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xfffffffffffffd9a, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0xfffffc01, 0xfffffff8, 0x0, 0x3, 0x677, 0x1ff, 0x3, 0x400007c}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x44041}, 0x810)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0xe)

1m13.440354143s ago: executing program 6 (id=2372):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x15, 0x3, 'lblcr\x00', 0xb}, 0x2c)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x80000001, 0x3, 0xffffffffffffffff, 0x4, 0x2]}, &(0x7f0000000140)=0x78)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r1, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @empty}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff7d})
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
getdents(r2, &(0x7f0000000800)=""/4096, 0x1000)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000040))

1m13.214829344s ago: executing program 6 (id=2374):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x96ddd24724514d54, 0x0, @fd_index=0x5, 0x7, 0x0, 0x3, 0x4, 0x1, {0x0, r7}})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4044091}, 0x4010800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
syz_emit_ethernet(0x4c, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60010100001611fffe80000000000000000000000000e8baff020000000000000100000e2200169078ac49de6039123efe94414a9e21be"], 0x0)

1m13.120312695s ago: executing program 35 (id=2374):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x96ddd24724514d54, 0x0, @fd_index=0x5, 0x7, 0x0, 0x3, 0x4, 0x1, {0x0, r7}})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4044091}, 0x4010800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
syz_emit_ethernet(0x4c, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60010100001611fffe80000000000000000000000000e8baff020000000000000100000e2200169078ac49de6039123efe94414a9e21be"], 0x0)

44.353057926s ago: executing program 4 (id=2774):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
writev(r2, &(0x7f0000000440)=[{&(0x7f00000001c0)="2c1cbf6d78c76cca14f0b1dfd5af514fcc6f5bd69ce4df3145e02c97dd3c0a", 0x1f}], 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x7f, 0x8, 0x0, 0x1000, 0xe, 0x7, 0x0, 0xb, 0x9, 0x7, 0x0, 0x0, 0x6, 0x10, 0xa, 0x4, 0x7f, 0x9f, '\x00', 0x6b})

43.423610253s ago: executing program 4 (id=2790):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x20, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000801}, 0x400)
ioctl$VT_DISALLOCATE(r0, 0x5608)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000000c0)={0x0, 0x8, 0xffffffe9, 0x7, 0x4})

43.26838876s ago: executing program 4 (id=2791):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4000000)

43.264528326s ago: executing program 4 (id=2793):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)

43.180861629s ago: executing program 4 (id=2794):
r0 = socket$alg(0x26, 0x5, 0x0)
write$fb(0xffffffffffffffff, &(0x7f0000000280)="0cdebff7021a034b2efee0eb7739df6dc7b25360df064436a1644fcc9cb9fb66d1a31995af7eb5cac5aaedea5053bc2c186fbc25c275b1924762687e9a1fd42478a77cd398818a736f86e2b1d546f0b4bcb72e258a70d351f294b651c0347b565f9dc062b5955e96068535fa771bdc26a7af08fb174ca6f7ffdf65631f0e000fd1c69b916853542b920405e489307f3ace0122351f2847301c71f5f887b4", 0x9e)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000780))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x800)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1)
ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000200))
sendmmsg$alg(r2, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f0000000a80)="e8700e444d50a969ff", 0x9}], 0x2}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000900)=""/83, 0x53}], 0x2}, 0x50)

43.180431154s ago: executing program 4 (id=2795):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
rt_sigprocmask(0x1, &(0x7f0000000140)={[0x5]}, 0x0, 0x8)
r3 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000000380)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0)
timer_delete(r4)
r5 = gettid()
tkill(r5, 0x16)
r6 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r6, 0xffff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r7, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x1}}, 0x3c)
fcntl$addseals(r6, 0x409, 0x3)
close(0x3)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "c8444943470da91b", "42dfac0e0b8a3296e5394b0000000000008000", "e7198360", "f7a5c1777af05eaa"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "fc61e289aaafc471", "8b0e121baf178243cd855c24ae4a4d33c45c0f2e96b7b990e23efd0a031fdaf0", "f3286ef0", "0917ce994fc5ed93"}, 0x38)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r6, 0x4, 0x0, 0x2000})
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
r9 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
lseek(r9, 0x2004, 0x0)

26.938294915s ago: executing program 36 (id=2795):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
rt_sigprocmask(0x1, &(0x7f0000000140)={[0x5]}, 0x0, 0x8)
r3 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000000380)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0)
timer_delete(r4)
r5 = gettid()
tkill(r5, 0x16)
r6 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r6, 0xffff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r7, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x1}}, 0x3c)
fcntl$addseals(r6, 0x409, 0x3)
close(0x3)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "c8444943470da91b", "42dfac0e0b8a3296e5394b0000000000008000", "e7198360", "f7a5c1777af05eaa"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "fc61e289aaafc471", "8b0e121baf178243cd855c24ae4a4d33c45c0f2e96b7b990e23efd0a031fdaf0", "f3286ef0", "0917ce994fc5ed93"}, 0x38)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r6, 0x4, 0x0, 0x2000})
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
r9 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
lseek(r9, 0x2004, 0x0)

1.706978599s ago: executing program 8 (id=3271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0)
writev(r1, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000000b00)="3bca", 0x2}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x5}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000001880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x1190, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "c3b186f008a532b1d02001de4aa89c7f4ce1cbed959c5f461ebb159d2d124ed60d64d54bc2ce3724316cacb13dd6206ade9b35f1cab659ccc76663755addf28c9be65ef71f4cdec0b134f5d8d232858ba965ef5941e7927aa46205690b02090affc910ddf9f819355ea73aedbc3f70d433853bc19a348746a26a00bcd1eba65f6a7356dda056ec71b8b53e8ea405e328b8dfd11f0208b776b1a6cc1f0e8177f2b8deb581b58698dd270a3a9832b91bd5297fecb95cb225ad97035bdddba6b610bab5495a4066858e4803b4d6a20a5d8741f6e320bf3b896b4f2f6d91507c8730f377178483a15fdd44709cb31bb4417f8148ccb332690fe1f548e620c9c340ed986d03654d9d4180ae3e651eb33800703cbd6ba1e0b2d8d2c69780219957bf2f00a82014c8788a71cb0cdd92ac201421d00fa15ee29c5ebf6193466d4a29f33bb08e220a13e0146fd2f9b6d4e15bd26ac8b63dbf88b8392a4d78a819a1b648ae298fcbad17075e6ceb6345d336edbba7d875974962ae3162d90d859f6d196ae90734c1f77b0f71f85df963877faacfc294766ce6e09868e74b6fdf4e58220a970feee57400d1c9b647397adbf3604ba45d0e9cf7b6565929b2c1c182d967d1bdcb439fb846d71281e1a49894d3ae04bbb1dde58cdfce5fdfff67645bea55aa3c5f201464e6f09e18863e53813233f96af0c568a3e0dc51554010a282ec9190118760b2f831f2d2c9b96b9ad86bf37f0d638bb88f2c10b8575d3fbf244dc5d4d77a61c3aa6f1a427f7f8f5f9a54dc91393fbfeff37c9a48a867610a9f1db4178852b2318790cf62631f4098ea1d8ddd5d13eeb8c02b88757a9cb8911f31c702951b4fa64665bb6a0a4a4e57f3c23d36948ff47d604a774e7d28000172e684c3c80cadc15a1799d363cf85bfc2758e8448843c258caed5dc395fc06fbe6571376aa8f36d8b32bf591a1c4148b280ddaeb4fdff48275c934c6d194ca286ddfc6b4b6e6eec95f0d08cb7d0ecae7dc24a3b054206043aedcd1eb5ece160697f7a0e6e2e07ba85e3cb4018943df60960ce7e621b3040176d9e6650be535d6203a926b249a5461e2a79b9795f7aa9d53c0766b990731a0eaa56a069cd1548767e210339c2ace6f8f6b29e015b1115612eaa4c15cd5d8283e6f98592afec20b017db0d85b056437394db788d19041525545f3399d11e6663f19fb058ac056162ad5d7b76ca1653055e6c0924b902d7445732373f5386f086f83d8d30a2cb6ff14a816d363db00945d9d4e9198a0593ad93fba693d7ad0ba3f7755934f616f209eb69ca35d7a747396cc344af331594501a37dcff20e6b3f6446be9a692c45ae968c98cd744c8ac602ebb0038d15f1fd97398a443c105b74f44213265c5558b1c972d33433904fe80495fc67baf5069e0134e3ca3e49aed9b1e4bb38b88748c4e2c6b668e5100a540e93754ae89392e51c24f4e84c1e59dfc7483a26b3b21fd823c0ec431fd302c60e6bdd8810e65a91c2583ddb417a739c5c756919d69bf6d00b7d9e6ac36e2c2687384120bd0036e53e41146fd4a19fa234fe630b89dbb8701b7e470bafa83179756c3696ac346ddcc562d6ade0282a6801517c36664782624092c09b2a1163160a03bbc0dc00265c4cddcbbacf52da385df217d517b94a5b161aa83f94609349c7259d979758f000f97c8c6dd238f6872c2e23ee167c434c6171dccf74fc72c18b1ae7633f4e9b71c279e5e1cccc128f6d87c392838d2d2055d3761b0f18260cee8178402ea841701aa1b75b8805f91ac552698253c1e0ece524ab9e4965226205a7765cfccd0270c2cda20638d992802d435a46efa2cc00b4d2e9abcf2ae7b8dcd003b7358ea9fbfcc77130738016a1a2e0472c5636fce289733f10bbcd22d1c91076e26db5fc9cdce363c02dd76f92f07dad5d15e2e6571fc0ac48fa39037259d085f90334690c3091e9e002e1492c1eef72d367f0cbd5cee59662c8be87b9c33b4181e787ada54cf5642d70f2399175925cd6bf9e1b27ca0da616b0339a0386158af965590bafa1094445417ad6d253b22b2857fd6f1ae6d123f90f47794c6decb06f7e33f088cf84f5c207e3f4e24553fde18fe64da029d95d59cccd50602cbc196c32ecc80650104cb395dfd255744424c7a18dd8e036a75504c5fc799fd6f9ad5cc3ad06e28062e4adacb49486a8c431ef79427ba8fd6b8b2642b39fa56bed56d76cd190533a4f1715cc2a9fdc0af006600c9e40636ecffbb4d0c3682b479f4802115cc4fe277d3d6d6a6aa6d4c674493f69a68adf53934c48d0383b7e2675c885e0a8c7f28c14b8e8575418daca93f749bb230c9ccd1ce509c305a75787ec7793c9b2829e2dfcb0e7ed4c4ad43f3c45281dee57a912eb60378b9d28c0c9c6c319d6e6834978ee6d8ab85fe5cef1e92114c51dc9272df804f3ed82e44c4e9a48c75cc5ca347dbd7f041139af8aadda2326b700a6312b80202fd36afa0ee60124c9f1a6428a8de5841cbc9705ae62448131258d47de21084fd1142929997b11ebbc20919ed25cb315274dcc8395bdfae7b3d906e968645d3259aa2f761fa18027612e14c43e22e34d47e255430d2d3f7fda6499f1f636b05a263de2278e6d833025084e1e5b15162b83bad9de3d7da121abc3f249ba22d31b86c28cccac7c4cd145fc7c175dacf599851272b868b180bca828bcb98cc565c078034f1ce5aade4b3cc8551ef9544e5d5889d9b74a37df18cdcab6950c015d1d7ca5002e13f4a61eb2ee1a7b349c86ab8e0eeb30193e6713d8fccd4da31a152767c3cbc24f9f87e224493e2a09b917e817d536af033bb17da0b828ab992a142037b298f372b5ef6c1abe54a5f3269fad91121cfc7fa142d7e4680cde0c88340c445046aa9bb3ed3de68a212ce8e7754d915beb0b7d5ba63a33a98fbc75a370bc247ec718e1826e6a55f7c99fb8fd6a2f3a4d9f01cb739f71b7576bc4ee17703d0a1532b57fb9369ba2c72ca042167363eff61037abd2824ae1b2e12e45026a2af1802469b5372afde548dae4da1d0770c84b57137570be2c4a88782514b9282bec48b218144608582989c90ff3dbec8b8c92a32b17e5a13e47db08c87dc95ff32e2bf1f4fee98fe13a1a9fb4cc894eca77d75be4e4983dd5885968f9ced7e8cf7bb64a59668ef6fd0471c4bfc9b7c30d8ebbdc968cd396d1ad5745cae7269e11ab2d8c8e36ffa35537634ab6c995eafc0d840d7d22af0b178a09060dc8de96c7393e3addc636646cbedaeb5646eaf5bec4944605ac84e501f30453585ad0fc693b1440374a17947d970973c43a231284cd5e1e41b6cba59511669dfacb391d8a0295379df7dc9859736d99f642d3ab9ce9a12ae117b44a67c1200f0ac15a564488191fa9b2cdbe3e6b8341b38b08279178be03ca17b01edec6fc324349275f612ae7b176b4f5982f4a6f5ca657f806700e318bcf3553c5e2bcc37bcf46a43602c96eca31889b15d64695e963ed83e4d3ae080a2f72a01b2ba52c6459d79f94c58d04a3f861316973d20470b696c4616de1fe7ea31ae74baf15b12b51853f784b00cdd8c2415b1ed399f2664f1f3573f6ab74d4c6c60608611fee0846b826a357a11da22161c8cdbdf594744aaa4f7a14d6247e540c3d4a3d597c188e606c125d72806685a53467094b212e5d1162c9043e61b343730b854525cfa50cee4e535a47665180f7a637c043761c81215ae6beac1f91a73f3aa48cb1704ba67e76efeffd204bb6a504e230f1f25cf7f23697f79073149d056907f1e7fb3fc7570bb44c003fc6e54c861a74d6808beb30b35689aeb9e98cea54775f86b6244abdc835108540f70b887bff68b9e963cdd5ba082608d9a676041ae6078927c43e6657bee653d261bf569dadf07480113e76ef105d00e42819691f5db40c4a39957fbef05da6940692e9234f7528eec11f2d61cb04edb3f8e0a7f28966aea2cad4087f28a2229d79c3b045f7328bbfa2c4cff6f12b3efcf296c9afae56176e8e4312831ef5db107dd4e3033a5ebf2e3be246336991195f26e3594c06146080fc1583bf846421caefea331650bca860767ea2c94a60ee54d3743ff2bdb1c95983e56fb8222ffce6ed67eda3976357acc682916435a4843335e83b8a06e535554ab7d8ee9fc30be0ba6ea499d69efb5bcf69fa798071aa2e818db0f21b3bdb748b47245e3d592ee657d15982adeabd10ac672e59652eb1b0221ebfc2e3b098b8f425183c0e903f28836933b259518adadb4f369df927a457ac896f657c74ecb6c36a55c6503b44c25aed1f014ea82368f0819d763efe8f32534be6af060c38a4ae07c353748463a7e5817bcdc8cffc9806a867fd52d6aa2cbcec73cb71ac6ee0097a5464cc8e3fe2f563c82313806a9815251783e0f0e449b398cc3eb2401fea7fb121ce7e7a6ee211684e782fa016c6d01b4af7b62fe90691a5f04b8770aaa0b73ea54620eb7e8076454cfdb0b3564d942e34d9dcf8446b3af9a537d0f0ef702b36eea3c1b834eab8eb2ca293521663b25c1a91f2de24cf242d6a39ef0c6ea068ada84dc3d7d7fbaf7923e8c26eb1f7f5bca20b1ce978b09d971c0e0f6f6af8c71aee0e49525f0d76c713a1f3d5a2e5b0e65bb023af0353b588c23bb4314cba92325afada09677b4cf91f89da43057891f41dbc4ffef52e5f45319660c55e47a3be59c286c44f863debb7d617bfe59c7283c1db898d5e1a1df99c61c551f7c0c67cf026d3b6a91bec137a11cbf62c701e706974b1dd62580c5e7325e72fda942d84e407d19794fadcacbc1bb3db3ed109ad22ecc35c2e57c2b95ad7dede42d1aad88a63a9d8cd52da41fbe77e13204d65873596716fd871273fe4fb53c811e490a6a143dfb818b2402e0cdf86802f1b62716a4834eb075bde123722b6f3e30279360baef624a914a96743caf6877cd51f0b76e2aea22cbb6fdf7be1aa8bb835dd5574d42b09c056287b3ab371670c318b588f13a2dd8594f5b2412a87293afd9d89d4fb732f8fbdb26a2298daaf8d1c248cabdb7c7427e8f90deb2ac5b5b780cfc6525b156ee55d0fa8c7df811dd60abec207bef148746194edaeab96a078e9b19abfc06bb8a5e17341abe5b3402cc3000d0af95e781e55a55b78f686b8acefda7436b9aff6afcd352b6fc1ce1a88cb25bb0b130660c9e846c35bc217ec8fece8cd00a761270413d94e7723a7db66598a02c5ed4a44058a4f4e1d7d83ecf339c7c9ec0214a152cdd4ff63087bbe503709a82a9244b3f1dc5b1c6cbf2f966aaedc943fe8c293cd18c42c8a56c2cdbab31db42db1ceef2b3acaa9a2db3b91382413c451a7de2d329300acdd2c9500d94c54123f41dc6f64fb5fcdb31bb460d727687a0c50cbd7b84e701254d47c9d9ced49b82bc7d9a7fea3eb2ca40195395fe5c9ccca7fa3446fd7622cf6bd9977adbd4d71d16f348e2f72e42bb6d73eec16ad159cc051114045eb38b88fa281399639c01d4ae36f6f1c6b6a358d6017000abef55af7d4f2b5f36b4eb4d553398c214ee3f82086b89524ff1266b1c0871c523c797f8d81d745e6f7d40e996381fd88f260aa988a24cf41220d75a03c859fac3cc68a29a993e36ff19dc95fd973b05d11aa313eadef87095f2c58155a3856527dbbeda00c29d9bede790728109a5e77644bff70f344e0fb9fc22ef4693505af558ba827c79a9c32057cc69120ee6beeadbb495ac317a69e69d2f59820f4b6e569f305560ef9e521b5296c9d399bd37c49a8d2c2413bd3339650b7351bc85fa00613555721fc72cc9"}, @NL80211_ATTR_VENDOR_DATA={0x94, 0xc5, "21e6ee130bf7911d00fcfb6ee1ea13941ad8b12b245fc78f4e447fe2edf283e4b2da205a4b0732ea6e53b9d79d316cbbc2723c3a518ce12ef2cced58cce580fa41c2f4ba13664591aaeec6929ef9b18f11ce105364345e59de234a7ea4632ee6d17110e813e7eda4ba77be572aa20040ae73a8d206af442caa0b473b95b638ca262ac39d1737821a239054d16bfe6822"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xa1, 0xc5, "364c1117838c6f0b66ce3c20591c4c93ffd1a3b50214c96e22a4904c4ee4942ac449b5f29685195621b901671439a44250dd195b677975b7f746a74735935fe13ef44edef022d97aac2fbb17cc1861bbcdff67258ddd8bb84e4f8ebf7c2eb1e07e98302cdca4107260127ad8741bdfa333bc136223342e89d965463107c841ab3a2029e019d51f4126bedf03405a13a93891562861c11f58c5ae6e5555"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x1d, 0xc5, "317fb798e53816f99d5fc0610e9b8b8e201196fe77912c6be5"}]}, 0x1190}, 0x1, 0x0, 0x0, 0x4}, 0x48000)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x9}, 0x94)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020303000000000000000000020000100800010001000000d3a423f321bdd8ea900b3518b56ed853b6ad3dffb52be28c454006"], 0x1c}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0)
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x200000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044005}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x50802, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="1c002d800a"], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xa3f, 0x2f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4040000)

1.632786522s ago: executing program 8 (id=3273):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x101441)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902"], 0x0)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0)
mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x204001, 0x0)

1.43997519s ago: executing program 5 (id=3278):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async)
madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) (async)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async)
mremap(&(0x7f0000787000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

1.227610695s ago: executing program 5 (id=3283):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
socket$inet6(0xa, 0x80001, 0x0) (async)
r1 = socket$inet6(0xa, 0x80001, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000f4}]})
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88)
socket$alg(0x26, 0x5, 0x0) (async)
socket$alg(0x26, 0x5, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0xb86026a, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x200fc5, 0xcd, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"}) (async)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x200fc5, 0xcd, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"})
syz_open_pts(r0, 0x0) (async)
r5 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x1)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r6 = socket(0x10, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a555"], 0x1c}}, 0x0)
fanotify_init(0xf00, 0x0)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x5, 0x5, 0x3, 0x9, 0x1a, "7a39ee40693cb0522a38e63dc44ceafa8688f7"}) (async)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x5, 0x5, 0x3, 0x9, 0x1a, "7a39ee40693cb0522a38e63dc44ceafa8688f7"})

643.779718ms ago: executing program 7 (id=3286):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a80040004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x50}}, 0xc0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x50, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x50}}, 0x8000004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x15c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa32}, @TIPC_NLA_NODE_ID={0x57, 0x3, "e066c529471463e1928676874b3a4104cc2b680f96eb0ee30c1e5e39cc6111fc02ba3704c48051c15b0ac168012c98430fb71779cf4445865abbd97eb791a189f883378f9eb2c7eb96f24d6b0949201a0bb4f6"}, @TIPC_NLA_NODE_ID={0x72, 0x3, "378eba9dd0cb29f77d9fe92c6f60f6d667c1159221545a3ec1eead037b80a9e3704f52be4ff2ec47d2c8be822939df7766eb07c99f034a330f21876a6c2246292873978571c696ef86dfa94cbd75bcfe2cfe68ffcd89155354a9fffbd9cb88788694c7ba4dc7f22e3a2aeacb0d45"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)

643.5404ms ago: executing program 7 (id=3287):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)

551.935201ms ago: executing program 7 (id=3288):
r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000000)='usrquota')
write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7)

460.287969ms ago: executing program 7 (id=3289):
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44c, 0x24, 0x300, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x420, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x7be4222a42d71d59}, @TCA_TBF_PRATE64={0xc, 0x5, 0x4f7c3717ee3d365c}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x3, 0x8, 0x7, 0x7, 0x1ff, 0x401, 0x4, 0x80000001, 0x3, 0x8, 0x1ff, 0x789f, 0x80000001, 0x6, 0x6, 0x5, 0xffffffff, 0x7, 0x7ff, 0x1, 0xb, 0x2, 0x4, 0xc061, 0x0, 0x9, 0x0, 0x3, 0x5, 0x1, 0x9, 0x4, 0x5, 0xfffffff9, 0xfff, 0x9f, 0x4e7, 0x2, 0x9, 0x3, 0x9, 0x5, 0xd, 0x6, 0x0, 0x0, 0x5, 0x2, 0xfffffffc, 0x800, 0x3, 0x5c, 0x6, 0x3, 0x401, 0xfffffff8, 0x1ff, 0x80000001, 0xfffffff8, 0x4, 0x0, 0x4, 0xd, 0x1, 0xbb, 0x9, 0x4, 0x6, 0x48d, 0x0, 0x0, 0x7, 0x9, 0x7, 0x9, 0xffffffff, 0xfff, 0x7ff, 0x4, 0x9, 0x4e91a49e, 0xe, 0xff, 0x3f, 0x3e, 0xc3, 0x1ff, 0x80, 0x3, 0x0, 0xe0, 0x4, 0x2, 0x7ff, 0x7, 0x7fff, 0x8, 0x4, 0x7, 0x0, 0x7, 0x1, 0x2, 0x0, 0x2, 0x7, 0x4, 0xffffff6f, 0x8, 0xa, 0x6, 0x7, 0x9, 0x7, 0x5, 0xcf0, 0x8ed, 0x20000, 0x4, 0xa83, 0x7, 0x0, 0xfffffff1, 0xf, 0x2, 0x0, 0x0, 0x9, 0x3d, 0x6, 0x6, 0x7, 0x1, 0x7, 0x6, 0x7fff, 0x7fff, 0x80000000, 0xdf, 0x1, 0x8, 0x7, 0x8, 0x2, 0x8, 0x81, 0x2, 0x6, 0xd6c, 0x4, 0xbda, 0xf310, 0x5, 0x8, 0xfffffffc, 0x4, 0x6, 0x5, 0x7, 0x800, 0x10001, 0xd69c, 0x2, 0x3, 0x400, 0x5, 0xb, 0x342, 0x3, 0x7, 0x30000, 0x2, 0x9, 0x7, 0x400, 0x0, 0x3, 0x7, 0x6, 0xcc0, 0x2, 0x9, 0x1000, 0xd5e1, 0x5, 0x9, 0x7fff, 0x5, 0x80, 0x8, 0x0, 0x1e3c, 0xfff, 0x1, 0x2, 0xffffff80, 0x2, 0x8, 0x0, 0x8, 0x4, 0x1ff, 0x2, 0xbac, 0x4, 0x0, 0x533, 0x6, 0x9, 0x6, 0x7, 0xffffffff, 0x0, 0xf8, 0x3, 0xa9, 0x30d, 0xa, 0xc, 0x401, 0x80000001, 0xffffffff, 0x7ff, 0x4, 0x758b, 0x7, 0x352, 0x1, 0xe, 0x9, 0x8, 0xf, 0x11000, 0x7, 0x2, 0x0, 0x101, 0x1, 0x8000, 0xb7b, 0x10000, 0xd, 0x5, 0x6, 0x9, 0x4c, 0x2, 0x1, 0x62fb5793, 0x5, 0x3, 0x9, 0x7fffffff, 0x5, 0xe0c]}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0x2, 0x12)
shutdown(r0, 0x1)

459.796951ms ago: executing program 7 (id=3290):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001ac0))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) (async)
chdir(&(0x7f0000000000)='./file0\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) (async)
ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001ac0)) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)

458.508754ms ago: executing program 3 (id=3291):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota'])
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='ext4\x00', 0x3002000, &(0x7f0000000180)='tmpfs\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0)
getresuid(&(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280), &(0x7f00000002c0))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10)
recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
setxattr$security_capability(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000300)=@v3={0x3000000, [{0x6, 0xffffffff}, {0x2575, 0x9}], r1}, 0x18, 0x2)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = io_uring_setup(0x2b01, &(0x7f0000000380)={0x0, 0x3ddf, 0x8, 0x1, 0x390})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000004c0)=[r3], 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r7, 0x1, 0x0, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0)

374.527001ms ago: executing program 7 (id=3292):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1846f800fb0a78eeff3c20f1670e1699", 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40c4844)
readv(r3, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

300.306576ms ago: executing program 3 (id=3293):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x401, 0x2f})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000280)={<r2=>0x0, "55c482cd068ae9e5101213e54a5f1233"})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001280)={{r0}, r1, 0x14, @unused=[0x8, 0x2, 0x6, 0x9], @devid=r2})

299.784323ms ago: executing program 3 (id=3294):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2, 0x0, 0x40010}, 0x80)

247.088575ms ago: executing program 3 (id=3295):
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880)
mkdir(&(0x7f0000000940)='./file0\x00', 0x51)
mount$9p_rdma(&(0x7f0000002180), &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f00000024c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,loose,sq=0x0000000000000100,timeout=0x0000000000000008'])

246.111956ms ago: executing program 5 (id=3296):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)

244.24755ms ago: executing program 3 (id=3297):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xa, 0x42418, 0x2, 0xffff, 0x0, 0x7dfb, 0x0, 0x0, 0x10, 0x88}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000364800000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7fb, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
ppoll(&(0x7f0000000080)=[{r3, 0x40e0}], 0x1, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
unshare(0x22020600)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46f, 0x10000, @value=r5}, 0x28)
r6 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6)

172.373857ms ago: executing program 8 (id=3298):
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r0 = socket$inet_sctp(0x2, 0x29a253f7047941e8, 0x84) (async)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) (async)
r2 = socket$inet(0x2, 0x80001, 0x84)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000003c0)={r4, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}})
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r6, r7, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x15, 0x0, &(0x7f0000000280))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r10 = dup3(r9, r8, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)
r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r12, &(0x7f0000001280)={0x2020}, 0x2020)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={r5, 0x0, 0x20}, 0xc) (async)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r5, 0x1, 0x2, 0x1d, 0x101, 0x401}, 0x14)

171.783787ms ago: executing program 8 (id=3299):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$inet6(0xa, 0x1, 0x100) (async)
socket$inet6(0xa, 0x1, 0x100)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0xfffffffe) (async)
listen(r3, 0xfffffffe)
socket(0xa, 0x1, 0x0) (async)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0xe64, 0x3, @empty, 0x9}, 0x1c)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) (async)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c)
connect$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async)
connect$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) (async)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1)
r7 = accept4$unix(r3, 0x0, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000", 0x37}, {&(0x7f0000000140)="e8c0a85cd3351f43a118767a631e20d8616bd56dbfbd924835d93da09483316120e9293466", 0x25}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)
pselect6(0x40, &(0x7f0000000380)={0x245, 0x2, 0x0, 0x1, 0x50, 0x0, 0x19d1, 0xa}, &(0x7f0000000400)={0x9, 0x7, 0x7, 0x2, 0xa144, 0x1b, 0x401, 0x7}, &(0x7f00000004c0)={0x8000000000000000, 0x2, 0x7ffffffffffffffe, 0x800, 0x17fffffff, 0x99a, 0x80000000, 0x4}, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000580)={&(0x7f0000000540)={[0x635]}, 0x8}) (async)
pselect6(0x40, &(0x7f0000000380)={0x245, 0x2, 0x0, 0x1, 0x50, 0x0, 0x19d1, 0xa}, &(0x7f0000000400)={0x9, 0x7, 0x7, 0x2, 0xa144, 0x1b, 0x401, 0x7}, &(0x7f00000004c0)={0x8000000000000000, 0x2, 0x7ffffffffffffffe, 0x800, 0x17fffffff, 0x99a, 0x80000000, 0x4}, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000580)={&(0x7f0000000540)={[0x635]}, 0x8})
recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) (async)
recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000005c0)="40a241ee894c5461d1a56370bb4626f5722d5ec8357230bc7fcda15c93c319a313fd8477983adebbb8a493d1ca98469387a8ea54b21702bd0098757fe0cc6c8174462fa390515bfe0914c42f6c9284fa36c7e29270", 0x55, r0}, 0x68)
sendmmsg$unix(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="941d", 0x2}], 0x1, 0x0, 0x0, 0x800}}], 0x1, 0x40000)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r7, @ANYRES16=r10, @ANYRESOCT=r10], 0x188}, 0x1, 0x0, 0x0, 0x811}, 0x8880) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r7, @ANYRES16=r10, @ANYRESOCT=r10], 0x188}, 0x1, 0x0, 0x0, 0x811}, 0x8880)
close_range(r1, 0xffffffffffffffff, 0x0)

76.441396ms ago: executing program 8 (id=3300):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
sendto$inet6(r0, &(0x7f0000000200)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xfffffffd}, 0x1c)
shutdown(r0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x4009b8d, 0x40, 0x8, 0x400, 0x8, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x1000000000000000, 0x8, 0x5, 0x8e4, 0xe5a, 0x6, 0xb, 0x3, 0x0, 0x6, 0x4, 0xfffd, 0x0, 0x3, 0x3ffffa})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', <r3=>0x0})
socket$unix(0x1, 0x1, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, <r4=>0x0})
ptrace(0x11, r4)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b0001006d61637365630000140002800500090001000000050008000100000008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)

75.707688ms ago: executing program 5 (id=3301):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc018620b, &(0x7f0000000000))

75.293428ms ago: executing program 5 (id=3302):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x141ac3)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x4e, 0x0, 0x7, 0x39, 0xff, 0x9, 0x6, 0x5, 0xa, 0x3, 0x7, 0xffff, 0xa1d1, 0x2, 0x8d, 0x1, [0xcff7, 0x9]}})
sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_dest={0x18, 0x114, 0x2, {0x5}}], 0x18}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10001, 0x3, "810000cc2b008000000000fa25ffffff00"})
r8 = syz_open_pts(r7, 0x141601)
fcntl$setstatus(r8, 0x4, 0x102800)
write(r8, &(0x7f0000000000)="d5", 0xb840c58f)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
read$FUSE(r6, &(0x7f00000042c0)={0x2020}, 0x2020)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x7)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

75.123693ms ago: executing program 3 (id=3303):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x0, 0x13, "e14f7db8b55660cc68b2f3bd4b6a9911724a1c"})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={<r4=>0x0, 0x3}, &(0x7f0000000200)=0x8) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, &(0x7f0000000840)={0x9, {"a2e339084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3263078b089b39333b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b3f300d316d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02ccf156f3da001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a5031e54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58ceecce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ef9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766cf3817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b000000000000000000000000000000000000000000000000ac6b429961f8c30a00", 0x1000}}, 0x214) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r4, 0x5}, &(0x7f0000000280)=0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x30c, 0x0, 0x8})
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)

307.828µs ago: executing program 5 (id=3304):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x55}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xc85c3, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, &(0x7f00000003c0))
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x200, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @local}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x24040001}, 0x4884)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3dfe772b007a098f7f62696e"])
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000440)={0x79, 0x0, 0x385})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r8, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xd, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}})
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f00000004c0)={[{@name={'name', 0x3d, '!'}}, {@subsystem='blkio'}]})
ioctl$FE_GET_PROPERTY(r9, 0x80106f53, &(0x7f0000000080)={0x6, &(0x7f00000001c0)=[{0xb, '\x00', @data=0x2abe, 0x1}]})

0s ago: executing program 8 (id=3305):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x8, 0x100073, 0x100000}, 0x35)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x60, 0x1, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf4e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x108}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6b}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xa056}, 0x24800)

kernel console output (not intermixed with test programs):

[T14139] binder: BINDER_SET_CONTEXT_MGR already set
[  219.772220][T14139] binder: 14137:14139 ioctl 4018620d 200000000200 returned -16
[  219.775548][T14139] binder: BINDER_SET_CONTEXT_MGR already set
[  219.778892][T14139] binder: 14137:14139 ioctl 4018620d 200000000200 returned -16
[  219.782791][T14139] binder: BINDER_SET_CONTEXT_MGR already set
[  219.785412][T14139] binder: 14137:14139 ioctl 4018620d 200000000200 returned -16
[  219.790406][T14139] binder: BINDER_SET_CONTEXT_MGR already set
[  219.793553][T14139] binder: 14137:14139 ioctl 4018620d 200000000200 returned -16
[  220.023268][ T5982] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  220.067660][T14160] overlayfs: statfs failed on './file0'
[  220.122509][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2403'.
[  220.138666][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2403'.
[  220.148059][T14167] bpq0: entered promiscuous mode
[  220.172580][ T5982] usb 10-1: device descriptor read/64, error -71
[  220.200628][T14169] xt_ecn: cannot match TCP bits for non-tcp packets
[  220.236447][T11143] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  220.315696][T14175] new mount options do not match the existing superblock, will be ignored
[  220.362427][T14181] o2cb: This node has not been configured.
[  220.366420][T14181] o2cb: Cluster check failed. Fix errors before retrying.
[  220.369481][T14181] (syz.3.2408,14181,2):user_dlm_register:674 ERROR: status = -22
[  220.373010][T14181] (syz.3.2408,14181,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0"
[  220.407515][T11143] usb 12-1: Using ep0 maxpacket: 8
[  220.411441][T14184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2410'.
[  220.414232][T11143] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  220.418848][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  220.423546][T11143] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  220.428824][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  220.433762][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  220.439247][ T5982] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  220.441398][T11143] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  220.446884][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  220.453052][T11143] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  220.458044][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  220.460574][ T5943] Bluetooth: hci0: command tx timeout
[  220.470922][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  220.482242][T11143] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  220.485580][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  220.490553][T11143] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  220.496081][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  220.500923][T11143] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  220.511387][T11143] usb 12-1: string descriptor 0 read error: -22
[  220.514732][T11143] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  220.518460][T11143] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.530594][T11143] adutux 12-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  220.561406][T14196] binder: 14195:14196 ioctl f504 0 returned -22
[  220.588091][ T5982] usb 10-1: device descriptor read/64, error -71
[  220.716309][ T5982] usb usb10-port1: attempt power cycle
[  220.822557][   T34] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  220.883990][   T40] kauditd_printk_skb: 308 callbacks suppressed
[  220.884006][   T40] audit: type=1400 audit(3547220443.226:2643): avc:  denied  { read } for  pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  220.917743][   T12] bridge_slave_1: left allmulticast mode
[  220.921266][   T12] bridge_slave_1: left promiscuous mode
[  220.923984][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.928721][   T12] bridge_slave_0: left allmulticast mode
[  220.931800][   T12] bridge_slave_0: left promiscuous mode
[  220.934531][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.939628][   T12] veth0_to_bond: left allmulticast mode
[  220.941592][   T12] veth0_to_bond: left promiscuous mode
[  220.943615][   T12] bridge1: port 2(veth0_to_bond) entered disabled state
[  220.947328][   T12] veth5: left allmulticast mode
[  220.948965][   T12] veth5: left promiscuous mode
[  220.951085][   T12] bridge1: port 1(veth5) entered disabled state
[  220.979429][   T12] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  220.982593][   T34] usb 8-1: device descriptor read/64, error -71
[  220.986201][   T12] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  221.078496][ T5982] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  221.111168][ T5982] usb 10-1: device descriptor read/8, error -71
[  221.167049][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.170945][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.174258][   T12] bond0 (unregistering): Released all slaves
[  221.179176][   T12] bond1 (unregistering): Released all slaves
[  221.185807][   T12] bond2 (unregistering): Released all slaves
[  221.192711][   T12] bond3 (unregistering): Released all slaves
[  221.210560][   T40] audit: type=1400 audit(3547220443.536:2644): avc:  denied  { search } for  pid=5644 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  221.220035][   T40] audit: type=1400 audit(3547220443.536:2645): avc:  denied  { search } for  pid=5644 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  221.227060][   T40] audit: type=1400 audit(3547220443.536:2646): avc:  denied  { search } for  pid=5644 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  221.234537][   T40] audit: type=1400 audit(3547220443.536:2647): avc:  denied  { read } for  pid=5644 comm="dhcpcd" name="n128" dev="tmpfs" ino=12210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  221.247273][   T40] audit: type=1400 audit(3547220443.536:2648): avc:  denied  { open } for  pid=5644 comm="dhcpcd" path="/run/udev/data/n128" dev="tmpfs" ino=12210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  221.254858][   T40] audit: type=1400 audit(3547220443.536:2649): avc:  denied  { getattr } for  pid=5644 comm="dhcpcd" path="/run/udev/data/n128" dev="tmpfs" ino=12210 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  221.260191][   T34] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  221.263484][   T40] audit: type=1400 audit(3547220443.583:2650): avc:  denied  { read open } for  pid=14199 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  221.281985][   T40] audit: type=1400 audit(3547220443.583:2651): avc:  denied  { getattr } for  pid=14199 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  221.291544][   T40] audit: type=1400 audit(3547220443.602:2652): avc:  denied  { add_name } for  pid=14198 comm="dhcpcd-run-hook" name="resolv.conf.eth10.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  221.366119][ T5982] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  221.390374][ T5982] usb 10-1: device descriptor read/8, error -71
[  221.409220][   T34] usb 8-1: device descriptor read/64, error -71
[  221.423439][T14210] netlink: 'syz.4.2415': attribute type 1 has an invalid length.
[  221.428328][T14211] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  221.429740][T14210] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  221.491140][T14226] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2417'.
[  221.520051][ T5982] usb usb10-port1: unable to enumerate USB device
[  221.532433][   T12] hsr_slave_0: left promiscuous mode
[  221.535193][   T12] hsr_slave_1: left promiscuous mode
[  221.536825][   T34] usb usb8-port1: attempt power cycle
[  221.538012][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.542000][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.664488][   T12] team0 (unregistering): Port device team_slave_1 removed
[  221.671232][   T12] team0 (unregistering): Port device team_slave_0 removed
[  221.834505][T14236] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2419'.
[  221.909653][   T34] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  221.942436][   T34] usb 8-1: device descriptor read/8, error -71
[  222.218816][   T34] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  222.251664][   T34] usb 8-1: device descriptor read/8, error -71
[  222.368826][   T34] usb usb8-port1: unable to enumerate USB device
[  222.528054][   T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  222.666622][ T5943] Bluetooth: hci0: command tx timeout
[  222.687843][   T34] usb 9-1: Using ep0 maxpacket: 8
[  222.691883][   T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  222.696510][   T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  222.700276][   T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  222.703467][   T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  222.707779][   T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  222.711453][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.924869][ T7747] usb 12-1: USB disconnect, device number 2
[  222.934830][   T34] usb 9-1: GET_CAPABILITIES returned 0
[  222.937297][   T34] usbtmc 9-1:16.0: can't read capabilities
[  223.647115][T13457] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  223.815359][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2424'.
[  223.823649][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2424'.
[  223.842851][T13457] usb 10-1: unable to get BOS descriptor or descriptor too short
[  223.849445][T13457] usb 10-1: unable to read config index 0 descriptor/start: -71
[  223.852121][T13457] usb 10-1: can't read configurations, error -71
[  223.981075][T14293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65300 sclass=netlink_route_socket pid=14293 comm=syz.7.2433
[  224.131753][T14299] fuse: Bad value for 'fd'
[  224.241826][T14302] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2437'.
[  224.246367][ T5982] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  224.250713][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2437'.
[  224.437004][ T5982] usb 8-1: config 0 has no interfaces?
[  224.438947][ T5982] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  224.442047][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.448227][ T5982] usb 8-1: config 0 descriptor??
[  224.581058][T14326] IPv6: sit1: Disabled Multicast RS
[  224.583309][T14326] sit1: entered allmulticast mode
[  224.678974][ T5982] usb 8-1: USB disconnect, device number 28
[  224.719939][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2447'.
[  225.277829][   T29] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  225.436152][T14346] netlink: 'syz.3.2450': attribute type 4 has an invalid length.
[  225.450572][   T29] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  225.453479][   T29] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.458122][   T29] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  225.461739][   T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.466296][   T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.468985][ T5995] usb 9-1: USB disconnect, device number 10
[  225.472157][   T29] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  225.475559][   T29] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  225.478283][   T29] usb 10-1: Product: syz
[  225.479731][   T29] usb 10-1: Manufacturer: syz
[  225.491871][   T29] cdc_wdm 10-1:1.0: skipping garbage
[  225.493662][   T29] cdc_wdm 10-1:1.0: skipping garbage
[  225.496722][   T29] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  225.498707][   T29] cdc_wdm 10-1:1.0: Unknown control protocol
[  225.502870][T14348] autofs4:pid:14348:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371)
[  225.648897][T14358] bond1: (slave sit0): Device is not bonding slave
[  225.652596][T14358] bond1: option active_slave: invalid value (sit0)
[  225.656097][T14362] Invalid source name
[  225.657114][T14358] bond1 (unregistering): Released all slaves
[  225.658133][T14362] UBIFS error (pid: 14362): cannot open "./file0", error -22
[  225.687693][T14357] cgroup: fork rejected by pids controller in /syz3
[  225.736299][ T5943] Bluetooth: hci0: command tx timeout
[  225.793531][   T53] usb 10-1: USB disconnect, device number 18
[  225.803223][T14362] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2455'.
[  225.902982][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.909658][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.912925][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.927329][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.930961][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.933981][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.946362][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.949971][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.953105][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.960593][ T5995] hid-generic 0000:800100:7B3200.000A: unknown main item tag 0x0
[  225.977688][ T5995] hid-generic 0000:800100:7B3200.000A: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on 
[  226.027007][T14479] fido_id[14479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  226.143507][   T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.206794][T14489] bridge1: the hash_elasticity option has been deprecated and is always 16
[  226.261913][   T40] kauditd_printk_skb: 215 callbacks suppressed
[  226.261928][   T40] audit: type=1400 audit(3547220448.274:2868): avc:  denied  { create } for  pid=14495 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  226.273806][   T40] audit: type=1400 audit(3547220448.274:2869): avc:  denied  { bind } for  pid=14495 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  226.284685][   T40] audit: type=1400 audit(3547220448.293:2870): avc:  denied  { create } for  pid=14497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  226.288357][   T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  226.292608][   T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.294688][   T40] audit: type=1400 audit(3547220448.293:2871): avc:  denied  { read write } for  pid=14497 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  226.300476][   T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  226.311920][   T40] audit: type=1400 audit(3547220448.293:2872): avc:  denied  { open } for  pid=14497 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  226.326902][   T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  226.327843][   T40] audit: type=1400 audit(3547220448.293:2873): avc:  denied  { ioctl } for  pid=14497 comm="syz-executor" path="socket:[68666]" dev="sockfs" ino=68666 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  226.333876][   T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  226.347296][   T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  226.370355][   T40] audit: type=1400 audit(3547220448.377:2874): avc:  denied  { unmount } for  pid=11825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  226.379433][   T40] audit: type=1400 audit(3547220448.377:2875): avc:  denied  { read } for  pid=14497 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  226.387290][   T40] audit: type=1400 audit(3547220448.377:2876): avc:  denied  { open } for  pid=14497 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  226.395561][   T40] audit: type=1400 audit(3547220448.377:2877): avc:  denied  { mounton } for  pid=14497 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  226.445679][   T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.572913][T14497] chnl_net:caif_netlink_parms(): no params data found
[  226.655394][   T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.675259][T14497] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.678407][T14497] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.681911][T14497] bridge_slave_0: entered allmulticast mode
[  226.686726][T14497] bridge_slave_0: entered promiscuous mode
[  226.691948][T14497] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.695316][T14497] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.698821][T14497] bridge_slave_1: entered allmulticast mode
[  226.702824][T14497] bridge_slave_1: entered promiscuous mode
[  226.707269][T14532] 8021q: adding VLAN 0 to HW filter on device bond7
[  226.754459][T14497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.760436][T14537] netlink: 'syz.7.2474': attribute type 3 has an invalid length.
[  226.766314][T14497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.799517][T14497] team0: Port device team_slave_0 added
[  226.806355][T14497] team0: Port device team_slave_1 added
[  226.843685][T14497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.846335][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.855345][T14497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.869614][T14497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.887929][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.900265][T14497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.933199][   T80] bridge_slave_1: left allmulticast mode
[  226.938167][   T80] bridge_slave_1: left promiscuous mode
[  226.940326][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.946089][   T80] bridge_slave_0: left allmulticast mode
[  226.948056][   T80] bridge_slave_0: left promiscuous mode
[  226.950114][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.963570][T14548] fuse: Unknown parameter 'subj_role'
[  227.129569][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.139062][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.148715][   T80] bond0 (unregistering): Released all slaves
[  227.221301][T14497] hsr_slave_0: entered promiscuous mode
[  227.224738][T14497] hsr_slave_1: entered promiscuous mode
[  227.228474][T14497] debugfs: 'hsr0' already exists in 'hsr'
[  227.230888][T14497] Cannot create hsr debugfs directory
[  227.434178][  T167] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x78
[  227.553580][   T80] hsr_slave_0: left promiscuous mode
[  227.556473][   T80] hsr_slave_1: left promiscuous mode
[  227.558617][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.561877][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.565249][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.567855][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.575226][   T80] veth1_macvtap: left promiscuous mode
[  227.577352][   T80] veth0_macvtap: left promiscuous mode
[  227.579415][   T80] veth1_vlan: left promiscuous mode
[  227.580259][T13457] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  227.582906][   T80] veth0_vlan: left promiscuous mode
[  227.706059][   T80] team0 (unregistering): Port device team_slave_1 removed
[  227.718943][   T80] team0 (unregistering): Port device team_slave_0 removed
[  227.732566][T14584] 9p: Could not find request transport: virTio
[  227.742026][T13457] usb 10-1: config index 0 descriptor too short (expected 47116, got 36)
[  227.745914][T13457] usb 10-1: config 7 has too many interfaces: 204, using maximum allowed: 32
[  227.748956][T13457] usb 10-1: config 7 has an invalid descriptor of length 102, skipping remainder of the config
[  227.753704][T13457] usb 10-1: config 7 has 0 interfaces, different from the descriptor's value: 204
[  227.758678][T13457] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  227.762202][T13457] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.990424][T14600] fuse: Bad value for 'fd'
[  227.994234][T14603] fuse: Bad value for 'fd'
[  228.015317][T13457] usb 10-1: string descriptor 0 read error: -71
[  228.025879][T13457] usb 10-1: USB disconnect, device number 19
[  228.139867][T14616] netlink: 'syz.4.2491': attribute type 1 has an invalid length.
[  228.451625][T14497] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  228.456248][T14497] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  228.460531][T14497] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  228.465830][T14497] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  228.524238][T14497] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.537610][T14497] 8021q: adding VLAN 0 to HW filter on device team0
[  228.546432][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.549226][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.551692][ T5943] Bluetooth: hci1: command tx timeout
[  228.564016][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.566398][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.731264][T14497] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.761834][T14497] veth0_vlan: entered promiscuous mode
[  228.772715][T14497] veth1_vlan: entered promiscuous mode
[  228.791918][T14497] veth0_macvtap: entered promiscuous mode
[  228.797370][T14497] veth1_macvtap: entered promiscuous mode
[  228.807746][T14497] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.814924][T14497] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.822694][T10321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.826709][  T167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.830332][  T167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.833808][  T167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.878234][  T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.889693][  T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.908287][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.911206][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.951274][T14643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32272 sclass=netlink_route_socket pid=14643 comm=syz.5.2494
[  228.998743][T14650] netlink: 4376 bytes leftover after parsing attributes in process `syz.4.2495'.
[  229.002806][T14650] netlink: 4376 bytes leftover after parsing attributes in process `syz.4.2495'.
[  229.010038][T14650] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  229.010226][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2496'.
[  229.295019][T14683] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  229.302419][T14683] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  229.308091][T14683] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  229.311422][T14683] UDF-fs: Scanning with blocksize 512 failed
[  229.315949][T14683] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  229.322481][T14683] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  229.330140][T14683] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  229.333633][T14683] UDF-fs: Scanning with blocksize 1024 failed
[  229.336937][T14683] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  229.341597][T14683] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  229.345980][T14683] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  229.350271][T14683] UDF-fs: Scanning with blocksize 2048 failed
[  229.353510][T14683] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  229.359121][T14683] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  229.364137][T14683] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  229.367477][T14683] UDF-fs: Scanning with blocksize 4096 failed
[  229.370206][T14683] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  229.552002][ T5982] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  229.703364][T14695] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  229.746748][ T5982] usb 9-1: Using ep0 maxpacket: 8
[  229.757890][ T5982] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  229.762046][ T5982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.776860][ T5982] pvrusb2: Hardware description: Terratec Grabster AV400
[  229.780467][ T5982] pvrusb2: **********
[  229.782362][ T5982] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  229.788993][ T5982] pvrusb2: Important functionality might not be entirely working.
[  229.792452][ T5982] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  229.797740][ T5982] pvrusb2: **********
[  229.990355][ T2494] pvrusb2: Invalid write control endpoint
[  230.027459][ T2494] pvrusb2: Invalid write control endpoint
[  230.031389][ T2494] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  230.037035][ T2494] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  230.040191][ T2494] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  230.044096][ T2494] pvrusb2: Device being rendered inoperable
[  230.052174][ T2494] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  230.057990][ T2494] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  230.067088][ T2494] pvrusb2: Attached sub-driver cx25840
[  230.071155][ T2494] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  230.074754][ T2494] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  230.201422][T14680] pvrusb2: Attempted to execute control transfer when device not ok
[  230.207000][ T5998] usb 9-1: USB disconnect, device number 11
[  230.767179][ T5943] Bluetooth: hci1: command tx timeout
[  231.693383][   T40] kauditd_printk_skb: 234 callbacks suppressed
[  231.693399][   T40] audit: type=1400 audit(3547220453.368:3112): avc:  denied  { create } for  pid=14708 comm="syz.4.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  231.696112][T14709] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2512'.
[  231.696744][   T40] audit: type=1400 audit(3547220453.368:3113): avc:  denied  { ioctl } for  pid=14708 comm="syz.4.2512" path="socket:[70145]" dev="sockfs" ino=70145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  231.722138][   T40] audit: type=1400 audit(3547220453.396:3114): avc:  denied  { bpf } for  pid=14708 comm="syz.4.2512" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  231.722456][T14709] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2512'.
[  231.733077][T14709] bridge0: left promiscuous mode
[  231.735071][T14709] bridge0: left allmulticast mode
[  231.738893][T14709] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2512'.
[  231.750305][   T40] audit: type=1400 audit(3547220453.425:3115): avc:  denied  { unlink } for  pid=14708 comm="syz.4.2512" name="#48" dev="tmpfs" ino=2304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  231.758011][   T40] audit: type=1400 audit(3547220453.425:3116): avc:  denied  { mount } for  pid=14708 comm="syz.4.2512" name="/" dev="overlay" ino=2299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  231.771175][   T40] audit: type=1400 audit(3547220453.453:3117): avc:  denied  { unmount } for  pid=9902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  231.803098][   T40] audit: type=1400 audit(3547220453.481:3118): avc:  denied  { read } for  pid=14710 comm="syz.4.2513" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  231.810262][   T40] audit: type=1400 audit(3547220453.481:3119): avc:  denied  { open } for  pid=14710 comm="syz.4.2513" path="net:[4026532895]" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  231.817933][   T40] audit: type=1400 audit(3547220453.481:3120): avc:  denied  { read } for  pid=14710 comm="syz.4.2513" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  231.827153][   T40] audit: type=1400 audit(3547220453.481:3121): avc:  denied  { create } for  pid=14710 comm="syz.4.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  232.047067][T14721] netlink: 'syz.4.2516': attribute type 1 has an invalid length.
[  232.062581][T14721] 8021q: adding VLAN 0 to HW filter on device bond9
[  232.074484][T14721] bond9: (slave geneve2): making interface the new active one
[  232.086160][T14721] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  232.090293][   T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.094207][   T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.098328][   T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.101717][   T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.158197][T14729] SELinux:  Context #! ./file0 is not valid (left unmapped).
[  232.167192][T14729] overlayfs: missing 'lowerdir'
[  232.657127][T14687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  232.715253][T14748] netlink: 'syz.4.2523': attribute type 3 has an invalid length.
[  232.719609][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2523'.
[  232.925159][T14768] tipc: MTU too low for tipc bearer
[  232.984417][ T5943] Bluetooth: hci1: command tx timeout
[  233.002817][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2531'.
[  233.029459][T14774] Invalid logical block size (536872960)
[  233.038828][T14774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2533'.
[  233.067550][T14777] geneve2: entered promiscuous mode
[  233.071265][T14777] geneve2: entered allmulticast mode
[  233.073597][   T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  233.077792][   T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  233.082602][   T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  233.086924][   T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  233.154635][   T58] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  233.244243][T14789] nfs4: Bad value for 'source'
[  233.341958][   T58] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  233.345767][   T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.347541][T14793] Bluetooth: MGMT ver 1.23
[  233.352166][   T58] usb 9-1: Product: syz
[  233.354004][   T58] usb 9-1: Manufacturer: syz
[  233.356144][   T58] usb 9-1: SerialNumber: syz
[  233.670643][T14808] netlink: 'syz.3.2542': attribute type 2 has an invalid length.
[  233.763537][T14808] SELinux:  policydb version 1402900228 does not match my version range 15-35
[  233.767080][T14808] SELinux: failed to load policy
[  233.797561][T14765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.801567][T14765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.824959][T14765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.833070][T14765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.836466][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2544'.
[  233.852667][   T58] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  233.860554][   T58] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  233.866778][   T58] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  233.872972][   T58] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  233.878076][   T58] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  233.887777][   T58] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[  233.912766][T14814] usb 9-1: USB disconnect, device number 12
[  234.004171][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2551'.
[  234.035163][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'.
[  234.041439][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2552'.
[  234.046287][T14837] Invalid logical block size (536872960)
[  234.089681][T14840] syz_tun: entered allmulticast mode
[  234.131930][T14845] Cannot find add_set index 0 as target
[  234.295614][T14862] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(39)
[  234.298038][T14862] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  234.308994][T14862] vhci_hcd vhci_hcd.0: Device attached
[  234.345042][T14874] /dev/nullb0: Can't lookup blockdev
[  234.358085][T14866] vhci_hcd: connection closed
[  234.359350][T10321] vhci_hcd vhci_hcd.3: stop threads
[  234.362738][T10321] vhci_hcd vhci_hcd.3: release socket
[  234.364527][T10321] vhci_hcd vhci_hcd.3: disconnect device
[  234.443292][T14886] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  234.529720][T14879] openvswitch: netlink: Flow key attr not present in new flow.
[  234.634712][T14895] cgroup: Unknown subsys name 'smackfsroot'
[  234.892611][T14833] syz_tun: left allmulticast mode
[  234.942598][T14917] geneve2: entered promiscuous mode
[  234.945060][T14917] geneve2: entered allmulticast mode
[  234.948129][   T61] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  234.951963][   T61] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  234.956025][   T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  234.959703][   T13] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  234.975335][T14921] Bluetooth: MGMT ver 1.23
[  235.101125][T14935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  235.128389][T14946] netlink: 'syz.7.2583': attribute type 1 has an invalid length.
[  235.131521][T14946] netlink: 'syz.7.2583': attribute type 1 has an invalid length.
[  235.203837][ T5943] Bluetooth: hci1: command tx timeout
[  235.432077][T14966] netlink: 'syz.3.2590': attribute type 2 has an invalid length.
[  235.436136][T14966] netlink: 'syz.3.2590': attribute type 2 has an invalid length.
[  235.533746][T14977] SELinux: syz.5.2594 (14977) set checkreqprot to 1. This is no longer supported.
[  235.557974][T14977] trusted_key: encrypted_key: insufficient parameters specified
[  235.561919][T14977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=14977 comm=syz.5.2594
[  235.567350][T14978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=14978 comm=syz.5.2594
[  235.639163][T14991] syzkaller0: entered promiscuous mode
[  235.641098][T14991] syzkaller0: entered allmulticast mode
[  235.694007][T14996] program syz.3.2598 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.756376][T15000] loop6: detected capacity change from 0 to 7
[  235.767755][T15000] Dev loop6: unable to read RDB block 7
[  235.772728][T15000]  loop6: AHDI p3 p4
[  235.774492][T15000] loop6: partition table partially beyond EOD, truncated
[  235.779747][T15000] loop6: p3 start 2427370299 is beyond EOD, truncated
[  237.038352][T15016] netlink: 'syz.7.2605': attribute type 11 has an invalid length.
[  237.042421][T15016] __nla_validate_parse: 10 callbacks suppressed
[  237.042437][T15016] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2605'.
[  237.126181][   T40] kauditd_printk_skb: 385 callbacks suppressed
[  237.126197][   T40] audit: type=1400 audit(3547220458.472:3507): avc:  denied  { sys_module } for  pid=15015 comm="syz.7.2605" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  237.404431][T15005] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  237.423802][T15020] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2605'.
[  237.433459][   T40] audit: type=1400 audit(3547220458.763:3508): avc:  denied  { read write } for  pid=14497 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  237.444056][   T40] audit: type=1400 audit(3547220458.763:3509): avc:  denied  { open } for  pid=14497 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  237.460772][   T40] audit: type=1400 audit(3547220458.763:3510): avc:  denied  { ioctl } for  pid=14497 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  237.481763][   T40] audit: type=1400 audit(3547220458.772:3511): avc:  denied  { read } for  pid=15022 comm="syz.3.2606" dev="nsfs" ino=4026533325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  237.492901][   T40] audit: type=1400 audit(3547220458.772:3512): avc:  denied  { open } for  pid=15022 comm="syz.3.2606" path="net:[4026533325]" dev="nsfs" ino=4026533325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  237.504313][   T40] audit: type=1400 audit(3547220458.782:3513): avc:  denied  { create } for  pid=15022 comm="syz.3.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  237.513427][   T40] audit: type=1400 audit(3547220458.782:3514): avc:  denied  { bind } for  pid=15022 comm="syz.3.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  237.520741][   T40] audit: type=1400 audit(3547220458.782:3515): avc:  denied  { write } for  pid=15022 comm="syz.3.2606" path="socket:[69511]" dev="sockfs" ino=69511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  237.529470][   T40] audit: type=1400 audit(3547220458.801:3516): avc:  denied  { ioctl } for  pid=15025 comm="syz.7.2607" path="socket:[69518]" dev="sockfs" ino=69518 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  237.666761][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2612'.
[  237.728116][T15047] SELinux:  Context system_u:object_r:dpkg_exec_t:s0 is not valid (left unmapped).
[  237.783214][T15057] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  238.276756][T15075] No source specified
[  238.349428][ T7747] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  238.516256][ T7747] usb 10-1: Using ep0 maxpacket: 32
[  238.528897][ T7747] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  238.532188][ T7747] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  238.537795][ T7747] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  238.541163][ T7747] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  238.545498][ T7747] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  238.548931][ T7747] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  238.553079][ T7747] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  238.556013][ T7747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.561688][ T7747] usb 10-1: config 0 descriptor??
[  238.783404][ T7747] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  238.793570][ T7747] usb 10-1: USB disconnect, device number 20
[  238.797757][ T7747] usblp0: removed
[  238.814364][ T5967] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  238.995577][ T5967] usb 8-1: Using ep0 maxpacket: 32
[  239.007715][ T5967] usb 8-1: unable to get BOS descriptor or descriptor too short
[  239.011570][ T5967] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  239.016625][ T5967] usb 8-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40
[  239.020276][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.023205][ T5967] usb 8-1: Product: syz
[  239.024765][ T5967] usb 8-1: Manufacturer: syz
[  239.026318][ T5967] usb 8-1: SerialNumber: syz
[  239.261024][ T5967] usb 8-1: USB disconnect, device number 29
[  239.368749][ T7747] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  239.529334][ T7747] usb 10-1: Using ep0 maxpacket: 32
[  239.534309][ T7747] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  239.538178][ T7747] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  239.542724][ T7747] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  239.547064][ T7747] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  239.551815][ T7747] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  239.556014][ T7747] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  239.562247][ T7747] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  239.566363][ T7747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.572097][ T7747] usb 10-1: config 0 descriptor??
[  239.798310][ T7747] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  239.846378][T15086] 9p filesystem being mounted at /47/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  239.854816][T15088] overlayfs: failed to clone lowerpath
[  240.017493][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2620'.
[  240.040314][T15072] macvlan2: entered promiscuous mode
[  240.050044][   T34] usb 10-1: USB disconnect, device number 21
[  240.058527][   T34] usblp0: removed
[  240.166421][T15099] syzkaller0: entered promiscuous mode
[  240.168571][T15099] syzkaller0: entered allmulticast mode
[  240.659159][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2634'.
[  241.183823][T15112] openvswitch: netlink: Missing key (keys=40, expected=80)
[  241.393260][T15118] binder: 15116:15118 ioctl c0306201 2000000001c0 returned -14
[  241.406145][T15118] netlink: 'syz.4.2638': attribute type 1 has an invalid length.
[  241.409622][T15118] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2638'.
[  241.837301][T15112] netlink: 'syz.7.2637': attribute type 12 has an invalid length.
[  241.840656][T15112] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2637'.
[  241.947827][T15124] kAFS: No cell specified
[  242.004884][T15133] tipc: Can't bind to reserved service type 0
[  242.011527][T15133] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  242.030714][T15139] netlink: 'syz.7.2646': attribute type 39 has an invalid length.
[  242.132117][ T5967] Process accounting resumed
[  242.151365][T15147] Process accounting resumed
[  242.176895][T15152] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2650'.
[  242.317786][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'.
[  242.325301][T15167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2656'.
[  242.357109][   T80] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  242.360788][   T80] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  242.364987][   T80] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  242.368157][   T80] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  242.398631][T15176] ISOFS: Unable to identify CD-ROM format.
[  242.403784][T15175] ISOFS: Unable to identify CD-ROM format.
[  242.420673][T15179] __nla_validate_parse: 4 callbacks suppressed
[  242.420689][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2659'.
[  242.490519][   T40] kauditd_printk_skb: 157 callbacks suppressed
[  242.490536][   T40] audit: type=1400 audit(3547220463.501:3674): avc:  denied  { create } for  pid=15184 comm="syz.7.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  242.493877][T15187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=15187 comm=syz.7.2661
[  242.591661][   T40] audit: type=1400 audit(3547220463.595:3675): avc:  denied  { module_request } for  pid=15190 comm="syz.7.2663" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  242.612158][   T40] audit: type=1400 audit(3547220463.623:3676): avc:  denied  { sys_module } for  pid=15190 comm="syz.7.2663" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  242.660695][   T40] audit: type=1400 audit(3547220463.660:3677): avc:  denied  { read write } for  pid=15197 comm="syz.5.2665" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  242.672506][   T40] audit: type=1400 audit(3547220463.660:3678): avc:  denied  { open } for  pid=15197 comm="syz.5.2665" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  242.681067][   T40] audit: type=1400 audit(3547220463.670:3679): avc:  denied  { mounton } for  pid=15197 comm="syz.5.2665" path="/172/bus" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  242.688187][   T40] audit: type=1400 audit(3547220463.670:3680): avc:  denied  { mount } for  pid=15197 comm="syz.5.2665" name="/" dev="overlay" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  242.695392][   T40] audit: type=1400 audit(3547220463.689:3681): avc:  denied  { watch watch_reads } for  pid=15197 comm="syz.5.2665" path="/172/bus" dev="overlay" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  242.702975][   T40] audit: type=1400 audit(3547220463.689:3682): avc:  denied  { create } for  pid=15200 comm="syz.4.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  242.710358][   T40] audit: type=1400 audit(3547220463.689:3683): avc:  denied  { read write } for  pid=15200 comm="syz.4.2666" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  242.795616][T15214] overlayfs: failed to clone upperpath
[  243.072516][T15248] hpfs: Bad magic ... probably not HPFS
[  243.144626][T15247] fuse: Unknown parameter 'fç0x0000000000000003'
[  243.249648][T15258] ptrace attach of "/syz-executor exec"[15259] was attempted by "/syz-executor exec"[15258]
[  243.283306][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2685'.
[  243.286898][T15262] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2685'.
[  243.338576][T15267] syzkaller0: entered promiscuous mode
[  243.341016][T15267] syzkaller0: entered allmulticast mode
[  243.412382][T15264] syzkaller1: entered allmulticast mode
[  243.703314][T15284] 9p: Bad value for 'wfdno'
[  243.743962][T15286] input: syz0 as /devices/virtual/input/input32
[  243.873553][T15291] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2694'.
[  243.950545][T15295] delete_channel: no stack
[  244.156956][T15316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15316 comm=syz.4.2702
[  244.164887][T15307] kvm: kvm [15306]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  244.170312][T15307] kvm: kvm [15306]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  244.191399][T15316] vim2m vim2m.0: vidioc_s_fmt queue busy
[  244.810344][T15408] syzkaller0: entered promiscuous mode
[  244.812739][T15408] syzkaller0: entered allmulticast mode
[  244.815535][ T7747] delete_channel: no stack
[  245.102438][T15423] nfs4: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  245.480563][T15464] loop9: detected capacity change from 0 to 7
[  245.512096][T15464] Dev loop9: unable to read RDB block 7
[  245.518737][T15464]  loop9: unable to read partition table
[  245.521754][T15464] loop9: partition table beyond EOD, truncated
[  245.524818][T15464] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ	œëÜ%õ«`Éæ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  245.887843][T15507] veth0_to_hsr: mtu less than device minimum
[  246.014985][T15519] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  246.447508][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2763'.
[  246.549805][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2765'.
[  246.553941][T15549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2765'.
[  246.673004][T15557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7462 sclass=netlink_route_socket pid=15557 comm=syz.5.2767
[  246.806617][T15566] FAULT_INJECTION: forcing a failure.
[  246.806617][T15566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  246.811082][T15566] CPU: 2 UID: 0 PID: 15566 Comm: syz.4.2771 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  246.811100][T15566] Tainted: [L]=SOFTLOCKUP
[  246.811103][T15566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  246.811110][T15566] Call Trace:
[  246.811114][T15566]  <TASK>
[  246.811118][T15566]  dump_stack_lvl+0x100/0x190
[  246.811148][T15566]  should_fail_ex.cold+0x5/0xa
[  246.811163][T15566]  _copy_from_user+0x2e/0xd0
[  246.811187][T15566]  copy_msghdr_from_user+0x9f/0x4f0
[  246.811210][T15566]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  246.811234][T15566]  ___sys_sendmsg+0x106/0x1e0
[  246.811253][T15566]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.811286][T15566]  __sys_sendmsg+0x170/0x220
[  246.811300][T15566]  ? __pfx___sys_sendmsg+0x10/0x10
[  246.811322][T15566]  do_syscall_64+0x106/0xf80
[  246.811336][T15566]  ? clear_bhb_loop+0x40/0x90
[  246.811350][T15566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.811361][T15566] RIP: 0033:0x7fde0439c799
[  246.811370][T15566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.811381][T15566] RSP: 002b:00007fde0528e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.811392][T15566] RAX: ffffffffffffffda RBX: 00007fde04615fa0 RCX: 00007fde0439c799
[  246.811398][T15566] RDX: 0000000004000000 RSI: 0000200000000540 RDI: 0000000000000004
[  246.811405][T15566] RBP: 00007fde0528e090 R08: 0000000000000000 R09: 0000000000000000
[  246.811411][T15566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.811417][T15566] R13: 00007fde04616038 R14: 00007fde04615fa0 R15: 00007fff7c16c8b8
[  246.811431][T15566]  </TASK>
[  246.952085][ T5943] Bluetooth: hci3: unexpected event for opcode 0x080f
[  247.391062][T15608] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  247.394033][T15608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  247.399362][T15609] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  247.402520][T15609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  247.409635][T15609] vhci_hcd vhci_hcd.0: Device attached
[  247.409962][T15608] vhci_hcd vhci_hcd.0: Device attached
[  247.413637][T15615] macsec1: entered promiscuous mode
[  247.415976][T15615] macsec1: entered allmulticast mode
[  247.452247][T15609] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  247.460571][T15608] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  247.471201][T15620] netlink: 'syz.7.2785': attribute type 14 has an invalid length.
[  247.575689][T15626] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  247.577408][   T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.585330][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.589305][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.661198][ T7747] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  247.671605][T15629] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2788'.
[  247.680293][T15629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.686656][T15629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.691280][T15629] bond0 (unregistering): Released all slaves
[  247.713409][T15628] infiniband syz0: set down
[  247.717096][ T1344] syz0: Port: 1 Link DOWN
[  247.718687][T15628] infiniband syz0: added bond_slave_0
[  247.739614][T15568] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  247.741893][T15568] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  247.744581][T15628] RDS/IB: syz0: added
[  247.746034][T15568] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  247.746666][T15628] smc: adding ib device syz0 with port count 1
[  247.751599][T15628] smc:    ib device syz0 port 1 has no pnetid
[  247.758147][T15568] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  247.766175][T15568] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  247.778945][T15568] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  247.783066][T15568] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  247.821105][   T40] kauditd_printk_skb: 314 callbacks suppressed
[  247.821123][   T40] audit: type=1400 audit(3547220468.502:3998): avc:  denied  { unmount } for  pid=11825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  247.842432][   T40] audit: type=1400 audit(3547220468.520:3999): avc:  denied  { unmount } for  pid=11825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  247.865900][   T40] audit: type=1400 audit(3547220468.548:4000): avc:  denied  { read write } for  pid=15634 comm="syz.5.2789" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  247.873499][   T58] hid_parser_main: 373 callbacks suppressed
[  247.873517][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889065][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889083][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889096][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889109][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889162][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889177][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889189][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889202][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.889214][   T58] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  247.892615][   T40] audit: type=1400 audit(3547220468.548:4001): avc:  denied  { open } for  pid=15634 comm="syz.5.2789" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  247.892658][   T40] audit: type=1400 audit(3547220468.548:4002): avc:  denied  { read write } for  pid=15634 comm="syz.5.2789" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  247.892698][   T40] audit: type=1400 audit(3547220468.548:4003): avc:  denied  { open } for  pid=15634 comm="syz.5.2789" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  247.892736][   T40] audit: type=1400 audit(3547220468.548:4004): avc:  denied  { ioctl } for  pid=15634 comm="syz.5.2789" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  247.892774][   T40] audit: type=1400 audit(3547220468.567:4005): avc:  denied  { name_bind } for  pid=15634 comm="syz.5.2789" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  247.896213][   T58] hid-generic 0000:0000:0000.000B: hidraw1: <UNKNOWN> HID v0.00 Device [Á“ƽZÄæwÇý[baÿ–é|\rnÀ)A¼#6”oÒ¯ô?•ða Iü¸äãs„Ö5hVõ3ñ®(;éò
[  247.896213][   T58] ãÑ�ƒPÔ$zÉ·‡X$©·à˜w[SÖì–ÀRìÑeÑzx—ÞuñS r»œÏláì[µ5l'˜ZCz2ñ] on ü’týDKÍí˜Y縣Ϫòž¿¹,ÇËúÒU›¾O�á‰èpŽ“‚{"iÌxúAý[Ëew·ßäÃ’}ÂZXª„A
[  247.993453][   T40] audit: type=1400 audit(3547220468.670:4006): avc:  denied  { read write } for  pid=9902 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  248.006173][   T40] audit: type=1400 audit(3547220468.670:4007): avc:  denied  { open } for  pid=9902 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  248.046347][T15643] x_tables: ip6_tables: mh match: only valid for protocol 135
[  248.056021][    T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  248.391062][T15668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2798'.
[  248.399755][T15668] netlink: 'syz.5.2798': attribute type 7 has an invalid length.
[  248.404958][T15668] netlink: 'syz.5.2798': attribute type 8 has an invalid length.
[  248.411057][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2798'.
[  248.674118][T10321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.678290][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.683108][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.687592][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.823219][   T13] Bluetooth: (null): Invalid header checksum
[  248.952792][T15613] vhci_hcd: connection closed
[  248.954072][   T12] vhci_hcd vhci_hcd.3: stop threads
[  248.961776][   T12] vhci_hcd vhci_hcd.3: release socket
[  248.968359][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  248.979438][T15610] vhci_hcd: connection reset by peer
[  248.986346][   T13] vhci_hcd vhci_hcd.3: stop threads
[  248.988624][   T13] vhci_hcd vhci_hcd.3: release socket
[  248.992963][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  249.100079][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout
[  249.328208][T15708] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  249.399303][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2810'.
[  249.403254][T15714] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2812'.
[  249.503862][T15708] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  249.768873][T15731] syzkaller1: entered promiscuous mode
[  249.770738][T15731] syzkaller1: entered allmulticast mode
[  249.782492][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.921952][T15745] vcan0: tx drop: invalid da for name 0x0000000000000002
[  249.952789][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout
[  249.953215][   T63] Bluetooth: hci0: command 0x0c1a tx timeout
[  250.045755][T15753] syzkaller0: entered promiscuous mode
[  250.048162][T15753] syzkaller0: entered allmulticast mode
[  250.475707][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.528764][T15789] netlink: 'syz.7.2839': attribute type 10 has an invalid length.
[  250.619865][T15797] netlink: 'syz.5.2840': attribute type 16 has an invalid length.
[  250.622463][T15797] netlink: 'syz.5.2840': attribute type 17 has an invalid length.
[  250.638193][T15797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.712509][T15802] syzkaller0: entered promiscuous mode
[  250.714614][T15802] syzkaller0: entered allmulticast mode
[  251.208565][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2844'.
[  251.360847][T15814] ref_ctr increment failed for inode: 0x4b1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802699d5c0
[  251.552480][T15825] syzkaller0: entered promiscuous mode
[  251.555166][T15825] syzkaller0: entered allmulticast mode
[  251.983773][T15836] afs: Unknown parameter 'f'
[  252.041826][ T5967] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  252.170275][   T63] Bluetooth: hci1: command 0x0c1a tx timeout
[  252.171020][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout
[  252.226232][ T5967] usb 10-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config
[  252.230893][ T5967] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  252.237261][ T5967] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  252.241274][ T5967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.245561][ T5967] usb 10-1: config 0 descriptor??
[  252.251255][ T5967] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  252.475431][T15831] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001
[  253.089110][T15882] bond1: option xmit_hash_policy: invalid value (6)
[  253.093296][T15882] bond1 (unregistering): Released all slaves
[  253.108972][ T5998] net_ratelimit: 3 callbacks suppressed
[  253.108990][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.118417][ T7747] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  253.132203][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'.
[  253.137345][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2866'.
[  253.233044][   T40] kauditd_printk_skb: 191 callbacks suppressed
[  253.233061][   T40] audit: type=1400 audit(3547220473.577:4199): avc:  denied  { create } for  pid=15830 comm="syz.5.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  253.244537][   T40] audit: type=1400 audit(3547220473.587:4200): avc:  denied  { write } for  pid=15830 comm="syz.5.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  253.253118][   T40] audit: type=1400 audit(3547220473.587:4201): avc:  denied  { read } for  pid=15830 comm="syz.5.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  253.281419][T10321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.292062][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.298122][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.377886][T15894] FAULT_INJECTION: forcing a failure.
[  253.377886][T15894] name failslab, interval 1, probability 0, space 0, times 0
[  253.382984][T15894] CPU: 1 UID: 0 PID: 15894 Comm: syz.3.2869 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  253.383002][T15894] Tainted: [L]=SOFTLOCKUP
[  253.383005][T15894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  253.383012][T15894] Call Trace:
[  253.383016][T15894]  <TASK>
[  253.383021][T15894]  dump_stack_lvl+0x100/0x190
[  253.383056][T15894]  should_fail_ex.cold+0x5/0xa
[  253.383070][T15894]  ? tomoyo_realpath_from_path+0xb6/0x690
[  253.383091][T15894]  should_failslab+0xc2/0x120
[  253.383102][T15894]  __kmalloc_noprof+0xe0/0x850
[  253.383121][T15894]  tomoyo_realpath_from_path+0xb6/0x690
[  253.383140][T15894]  tomoyo_path_number_perm+0x23c/0x580
[  253.383152][T15894]  ? tomoyo_path_number_perm+0x22e/0x580
[  253.383166][T15894]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  253.383194][T15894]  ? find_held_lock+0x2b/0x80
[  253.383207][T15894]  ? __fget_files+0x215/0x3d0
[  253.383218][T15894]  ? hook_file_ioctl_common+0x146/0x410
[  253.383239][T15894]  ? __fget_files+0x21f/0x3d0
[  253.383252][T15894]  security_file_ioctl+0xd3/0x230
[  253.383267][T15894]  __x64_sys_ioctl+0xb7/0x210
[  253.383285][T15894]  do_syscall_64+0x106/0xf80
[  253.383303][T15894]  ? clear_bhb_loop+0x40/0x90
[  253.383316][T15894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.383327][T15894] RIP: 0033:0x7fe7f299c799
[  253.383337][T15894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.383348][T15894] RSP: 002b:00007fe7f37a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  253.383359][T15894] RAX: ffffffffffffffda RBX: 00007fe7f2c15fa0 RCX: 00007fe7f299c799
[  253.383365][T15894] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003
[  253.383371][T15894] RBP: 00007fe7f37a1090 R08: 0000000000000000 R09: 0000000000000000
[  253.383378][T15894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.383384][T15894] R13: 00007fe7f2c16038 R14: 00007fe7f2c15fa0 R15: 00007ffe797a0c88
[  253.383398][T15894]  </TASK>
[  253.383720][T15894] ERROR: Out of memory at tomoyo_realpath_from_path.
[  253.493980][   T40] audit: type=1400 audit(3547220473.830:4202): avc:  denied  { create } for  pid=15896 comm="syz.3.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  253.502584][   T40] audit: type=1400 audit(3547220473.830:4203): avc:  denied  { shutdown } for  pid=15896 comm="syz.3.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  253.511537][   T40] audit: type=1400 audit(3547220473.830:4204): avc:  denied  { getopt } for  pid=15896 comm="syz.3.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  253.520796][   T40] audit: type=1400 audit(3547220473.830:4205): avc:  denied  { connect } for  pid=15896 comm="syz.3.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  253.529747][   T40] audit: type=1400 audit(3547220473.830:4206): avc:  denied  { name_connect } for  pid=15896 comm="syz.3.2870" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  253.539701][   T40] audit: type=1400 audit(3547220473.830:4207): avc:  denied  { setopt } for  pid=15896 comm="syz.3.2870" lport=52901 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  253.579165][   T40] audit: type=1400 audit(3547220473.906:4208): avc:  denied  { create } for  pid=15898 comm="syz.3.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  254.216609][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.386963][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout
[  254.386987][   T63] Bluetooth: hci0: command 0x0c1a tx timeout
[  254.653499][  T167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.657036][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.660259][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.958138][ T5982] usb 10-1: USB disconnect, device number 22
[  255.059177][T15929] FAULT_INJECTION: forcing a failure.
[  255.059177][T15929] name failslab, interval 1, probability 0, space 0, times 0
[  255.063054][T15929] CPU: 1 UID: 0 PID: 15929 Comm: syz.3.2879 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  255.063072][T15929] Tainted: [L]=SOFTLOCKUP
[  255.063076][T15929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.063083][T15929] Call Trace:
[  255.063087][T15929]  <TASK>
[  255.063091][T15929]  dump_stack_lvl+0x100/0x190
[  255.063113][T15929]  should_fail_ex.cold+0x5/0xa
[  255.063127][T15929]  ? tomoyo_encode2+0xfb/0x3c0
[  255.063142][T15929]  should_failslab+0xc2/0x120
[  255.063154][T15929]  __kmalloc_noprof+0xe0/0x850
[  255.063169][T15929]  ? d_absolute_path+0x136/0x1b0
[  255.063187][T15929]  tomoyo_encode2+0xfb/0x3c0
[  255.063204][T15929]  tomoyo_encode+0x29/0x50
[  255.063219][T15929]  tomoyo_realpath_from_path+0x18c/0x690
[  255.063238][T15929]  tomoyo_path_number_perm+0x23c/0x580
[  255.063251][T15929]  ? tomoyo_path_number_perm+0x22e/0x580
[  255.063265][T15929]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  255.063293][T15929]  ? find_held_lock+0x2b/0x80
[  255.063321][T15929]  ? __fget_files+0x215/0x3d0
[  255.063331][T15929]  ? hook_file_ioctl_common+0x146/0x410
[  255.063352][T15929]  ? __fget_files+0x21f/0x3d0
[  255.063366][T15929]  security_file_ioctl+0xd3/0x230
[  255.063382][T15929]  __x64_sys_ioctl+0xb7/0x210
[  255.063399][T15929]  do_syscall_64+0x106/0xf80
[  255.063413][T15929]  ? clear_bhb_loop+0x40/0x90
[  255.063426][T15929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.063437][T15929] RIP: 0033:0x7fe7f299c799
[  255.063447][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.063458][T15929] RSP: 002b:00007fe7f37a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.063469][T15929] RAX: ffffffffffffffda RBX: 00007fe7f2c15fa0 RCX: 00007fe7f299c799
[  255.063476][T15929] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003
[  255.063482][T15929] RBP: 00007fe7f37a1090 R08: 0000000000000000 R09: 0000000000000000
[  255.063488][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.063494][T15929] R13: 00007fe7f2c16038 R14: 00007fe7f2c15fa0 R15: 00007ffe797a0c88
[  255.063509][T15929]  </TASK>
[  255.063854][T15929] ERROR: Out of memory at tomoyo_realpath_from_path.
[  255.326602][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.494612][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'.
[  255.494631][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'.
[  255.627496][T15959] ip6t_REJECT: ECHOREPLY is not supported
[  256.135020][   T58] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  256.232163][T15967] FAULT_INJECTION: forcing a failure.
[  256.232163][T15967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.236994][T15967] CPU: 1 UID: 0 PID: 15967 Comm: syz.5.2889 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  256.237022][T15967] Tainted: [L]=SOFTLOCKUP
[  256.237033][T15967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  256.237043][T15967] Call Trace:
[  256.237051][T15967]  <TASK>
[  256.237058][T15967]  dump_stack_lvl+0x100/0x190
[  256.237090][T15967]  should_fail_ex.cold+0x5/0xa
[  256.237113][T15967]  _copy_to_user+0x32/0xd0
[  256.237144][T15967]  simple_read_from_buffer+0xcb/0x170
[  256.237176][T15967]  proc_fail_nth_read+0x1af/0x230
[  256.237201][T15967]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  256.237227][T15967]  ? rw_verify_area+0xce/0x6d0
[  256.237250][T15967]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  256.237273][T15967]  vfs_read+0x1e4/0xb30
[  256.237301][T15967]  ? __pfx_vfs_read+0x10/0x10
[  256.237326][T15967]  ? __fget_files+0x215/0x3d0
[  256.237349][T15967]  ? __fget_files+0x21f/0x3d0
[  256.237374][T15967]  ksys_read+0x12a/0x250
[  256.237399][T15967]  ? __pfx_ksys_read+0x10/0x10
[  256.237432][T15967]  do_syscall_64+0x106/0xf80
[  256.237453][T15967]  ? clear_bhb_loop+0x40/0x90
[  256.237474][T15967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.237492][T15967] RIP: 0033:0x7fa38a55cfce
[  256.237508][T15967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  256.237523][T15967] RSP: 002b:00007fa38b48dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  256.237540][T15967] RAX: ffffffffffffffda RBX: 00007fa38b48e6c0 RCX: 00007fa38a55cfce
[  256.237551][T15967] RDX: 000000000000000f RSI: 00007fa38b48e0a0 RDI: 0000000000000009
[  256.237561][T15967] RBP: 00007fa38b48e090 R08: 0000000000000000 R09: 0000000000000000
[  256.237571][T15967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.237581][T15967] R13: 00007fa38a816038 R14: 00007fa38a815fa0 R15: 00007ffd1bdfd258
[  256.237606][T15967]  </TASK>
[  256.305626][   T58] usb 8-1: Using ep0 maxpacket: 16
[  256.315205][   T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.320061][   T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.323799][   T58] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  256.329719][   T58] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  256.333012][   T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.338583][   T58] usb 8-1: config 0 descriptor??
[  256.444300][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.762988][T15999] /dev/nullb0: Can't lookup blockdev
[  256.782357][   T58] hid_parser_main: 6 callbacks suppressed
[  256.782376][   T58] shield 0003:0955:7214.000C: unknown main item tag 0x0
[  256.787338][   T58] shield 0003:0955:7214.000C: unknown main item tag 0x0
[  256.790442][   T58] shield 0003:0955:7214.000C: unknown main item tag 0x0
[  256.793110][   T58] shield 0003:0955:7214.000C: unknown main item tag 0x0
[  256.795869][   T58] shield 0003:0955:7214.000C: unknown main item tag 0x0
[  256.801604][   T58] input: HID 0955:7214 Haptics as /devices/virtual/input/input33
[  256.829606][   T58] shield 0003:0955:7214.000C: Registered Thunderstrike controller
[  256.835677][   T58] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  256.998841][T15963] random: crng reseeded on system resumption
[  257.007125][   T58] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  257.011043][ T5967] usb 8-1: USB disconnect, device number 31
[  257.019312][   T58] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  257.024434][   T58] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  257.028943][   T58] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  257.365002][T16031] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2904'.
[  257.901479][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2912'.
[  257.906729][T16077] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2
[  258.002256][T16083] 9pnet_fd: p9_fd_create_tcp (16083): problem connecting socket to 127.0.0.1
[  258.045329][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'.
[  258.049167][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'.
[  258.098244][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2916'.
[  258.255577][T16111] syzkaller0: entered promiscuous mode
[  258.258239][T16111] syzkaller0: entered allmulticast mode
[  258.489665][T16122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2926'.
[  258.549947][T16123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2926'.
[  258.661469][   T53] net_ratelimit: 2 callbacks suppressed
[  258.661496][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.640416][T16122] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  259.641199][T16123] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  259.671417][   T40] kauditd_printk_skb: 167 callbacks suppressed
[  259.671429][   T40] audit: type=1400 audit(3547220479.619:4376): avc:  denied  { prog_load } for  pid=16126 comm="syz.7.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  259.683181][   T40] audit: type=1400 audit(3547220479.629:4377): avc:  denied  { create } for  pid=16126 comm="syz.7.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  259.689934][   T40] audit: type=1400 audit(3547220479.638:4378): avc:  denied  { setopt } for  pid=16126 comm="syz.7.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  259.724016][   T40] audit: type=1400 audit(3547220479.666:4379): avc:  denied  { getopt } for  pid=16133 comm="syz.3.2929" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  259.735009][   T40] audit: type=1400 audit(3547220479.675:4380): avc:  denied  { create } for  pid=16133 comm="syz.3.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  259.735036][   T40] audit: type=1400 audit(3547220479.675:4381): avc:  denied  { prog_run } for  pid=16133 comm="syz.3.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  259.735057][   T40] audit: type=1400 audit(3547220479.675:4382): avc:  denied  { ioctl } for  pid=16133 comm="syz.3.2929" path="socket:[75680]" dev="sockfs" ino=75680 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  259.735080][   T40] audit: type=1400 audit(3547220479.675:4383): avc:  denied  { setopt } for  pid=16133 comm="syz.3.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  259.764613][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.781189][   T40] audit: type=1400 audit(3547220479.722:4384): avc:  denied  { recv } for  pid=5842 comm="syz-executor" saddr=127.0.0.1 src=45954 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  259.815530][   T40] audit: type=1400 audit(3547220479.760:4385): avc:  denied  { bind } for  pid=16135 comm="syz.5.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  259.827348][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.853324][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.884437][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.891896][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.895515][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.905586][T16135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.934021][T16151] overlay: Bad value for 'workdir'
[  259.994447][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2937'.
[  260.044820][T16163] syzkaller0: entered promiscuous mode
[  260.046933][T16163] syzkaller0: entered allmulticast mode
[  260.167077][T16178] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  260.880323][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.451919][T16184] random: crng reseeded on system resumption
[  261.507664][T16188] tmpfs: Group quota block hardlimit too large.
[  261.586286][T16191] syzkaller1: entered promiscuous mode
[  261.588696][T16191] syzkaller1: entered allmulticast mode
[  261.731875][T16205] __nla_validate_parse: 1 callbacks suppressed
[  261.731891][T16205] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2948'.
[  261.741489][T16205] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.744739][T16205] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.753826][T16205] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2948'.
[  261.757002][T16205] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.759279][T16205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.761731][T16205] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.764067][T16205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.768230][T16205] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2948'.
[  261.773476][T16205] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.775814][T16205] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.833998][T16208] SELinux:  Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped).
[  262.153194][T16220] syzkaller0: entered promiscuous mode
[  262.154999][T16220] syzkaller0: entered allmulticast mode
[  262.393647][T16226] program syz.3.2956 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  262.393699][T16225] program syz.3.2956 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  262.402180][T16225] ata1.00: invalid transfer count 0
[  262.404463][T16226] ata1.00: invalid transfer count 0
[  262.581234][T16234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=16234 comm=syz.3.2958
[  262.586036][T16235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=16235 comm=syz.3.2958
[  263.746498][T16267] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2969'.
[  263.893337][T16282] syzkaller0: entered promiscuous mode
[  263.898634][T16282] syzkaller0: entered allmulticast mode
[  263.925973][ T7945] udevd[7945]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  263.932568][ T7991] udevd[7991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  264.197352][ T5998] net_ratelimit: 4 callbacks suppressed
[  264.197365][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.384850][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.508782][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  264.531804][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  264.536461][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  264.540436][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  264.549553][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  265.303246][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.425988][   T40] kauditd_printk_skb: 128 callbacks suppressed
[  265.426005][   T40] audit: type=1400 audit(3547220485.014:4514): avc:  denied  { create } for  pid=16299 comm="syz.7.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  265.438699][   T40] audit: type=1400 audit(3547220485.014:4515): avc:  denied  { ioctl } for  pid=16299 comm="syz.7.2976" path="socket:[77916]" dev="sockfs" ino=77916 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  265.449665][   T40] audit: type=1400 audit(3547220485.014:4516): avc:  denied  { getopt } for  pid=16299 comm="syz.7.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  265.478503][T16302] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2977'.
[  265.542765][   T40] audit: type=1400 audit(3547220485.126:4517): avc:  denied  { prog_load } for  pid=16305 comm="syz.7.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  265.550023][   T40] audit: type=1400 audit(3547220485.145:4518): avc:  denied  { create } for  pid=16305 comm="syz.7.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  265.558811][   T40] audit: type=1400 audit(3547220485.145:4519): avc:  denied  { read write } for  pid=14497 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  265.567205][   T40] audit: type=1400 audit(3547220485.145:4520): avc:  denied  { open } for  pid=14497 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  265.575475][   T40] audit: type=1400 audit(3547220485.145:4521): avc:  denied  { ioctl } for  pid=14497 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  265.591274][   T40] audit: type=1400 audit(3547220485.145:4522): avc:  denied  { allowed } for  pid=16305 comm="syz.7.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  265.592988][T16311] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  265.599937][   T40] audit: type=1400 audit(3547220485.145:4523): avc:  denied  { create } for  pid=16305 comm="syz.7.2979" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  265.604374][T16311] SELinux: syz.3.2980 (16311) set checkreqprot to 1. This is no longer supported.
[  265.630904][T16289] chnl_net:caif_netlink_parms(): no params data found
[  265.682032][T16289] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.685122][T16289] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.687644][T16289] bridge_slave_0: entered allmulticast mode
[  265.691252][T16289] bridge_slave_0: entered promiscuous mode
[  265.695307][T16289] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.697994][T16289] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.700535][T16289] bridge_slave_1: entered allmulticast mode
[  265.703560][T16289] bridge_slave_1: entered promiscuous mode
[  265.727806][T16289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.733060][T16289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.750475][T16289] team0: Port device team_slave_0 added
[  265.754065][T16289] team0: Port device team_slave_1 added
[  265.771004][T16289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.773862][T16289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.783457][T16289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.788018][T16289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.790353][T16289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.802199][T16289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.881767][T16289] hsr_slave_0: entered promiscuous mode
[  265.885286][T16289] hsr_slave_1: entered promiscuous mode
[  265.890339][T16289] debugfs: 'hsr0' already exists in 'hsr'
[  265.891602][T16328] Invalid source name
[  265.892640][T16289] Cannot create hsr debugfs directory
[  265.894089][T16328] UBIFS error (pid: 16328): cannot open "/dev/sg0", error -22
[  265.910232][T16328] netlink: 'syz.7.2984': attribute type 32 has an invalid length.
[  265.932854][T16331] Invalid logical block size (536872960)
[  265.935667][T16331] Invalid logical block size (536872960)
[  265.938438][T16331] Invalid logical block size (536872960)
[  265.941436][T16331] Invalid logical block size (536872960)
[  266.025695][T16337] syzkaller0: entered promiscuous mode
[  266.027740][T16337] syzkaller0: entered allmulticast mode
[  266.421008][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.767211][   T63] Bluetooth: hci4: command tx timeout
[  267.458665][T16289] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  267.467937][T16289] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  267.477923][T16289] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  267.486062][T16289] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  267.519329][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.574974][T16289] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.589447][T16289] 8021q: adding VLAN 0 to HW filter on device team0
[  267.597358][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.600487][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.613276][  T132] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.616511][  T132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.620091][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.717158][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2998'.
[  267.782191][T16289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.806126][ T6089] usb 8-1: new low-speed USB device number 32 using dummy_hcd
[  267.910737][T16385] syzkaller0: entered promiscuous mode
[  267.916144][T16385] syzkaller0: entered allmulticast mode
[  267.998453][ T6089] usb 8-1: Invalid ep0 maxpacket: 16
[  268.157926][ T6089] usb 8-1: new low-speed USB device number 33 using dummy_hcd
[  268.317662][ T6089] usb 8-1: Invalid ep0 maxpacket: 16
[  268.320174][ T6089] usb usb8-port1: attempt power cycle
[  268.627358][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.684029][ T6089] usb 8-1: new low-speed USB device number 34 using dummy_hcd
[  268.718705][ T6089] usb 8-1: Invalid ep0 maxpacket: 16
[  268.871932][ T6089] usb 8-1: new low-speed USB device number 35 using dummy_hcd
[  268.893693][ T6089] usb 8-1: Invalid ep0 maxpacket: 16
[  268.895945][ T6089] usb usb8-port1: unable to enumerate USB device
[  268.978823][   T63] Bluetooth: hci4: command tx timeout
[  269.547335][T16289] veth0_vlan: entered promiscuous mode
[  269.555955][T16289] veth1_vlan: entered promiscuous mode
[  269.582799][T16289] veth0_macvtap: entered promiscuous mode
[  269.589419][T16289] veth1_macvtap: entered promiscuous mode
[  269.607151][T16289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.620633][T16289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.631850][ T1154] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.635252][ T1154] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.647908][ T1154] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.653481][ T1154] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.730555][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.735769][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.746707][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.772258][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.775771][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.789819][T16425] ubi: mtd0 is already attached to ubi0
[  269.855221][T16428] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2973'.
[  270.057862][T16448] tipc: Invalid UDP bearer configuration
[  270.057908][T16448] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  270.090916][T16452] dlm: no local IP address has been set
[  270.093789][T16452] dlm: cannot start dlm midcomms -107
[  270.098697][T16452] random: crng reseeded on system resumption
[  270.152466][T16455] tc_dump_action: action bad kind
[  270.154965][T16455] tc_dump_action: action bad kind
[  270.157432][T16455] tc_dump_action: action bad kind
[  270.159834][T16455] tc_dump_action: action bad kind
[  270.172467][T16455] tc_dump_action: action bad kind
[  270.175899][T16455] tc_dump_action: action bad kind
[  270.178198][T16455] tc_dump_action: action bad kind
[  270.180621][T16455] tc_dump_action: action bad kind
[  270.183454][T16455] tc_dump_action: action bad kind
[  270.185873][T16455] tc_dump_action: action bad kind
[  270.188260][T16455] tc_dump_action: action bad kind
[  270.190309][T16455] tc_dump_action: action bad kind
[  270.192364][T16455] tc_dump_action: action bad kind
[  270.195405][T16455] tc_dump_action: action bad kind
[  270.197483][T16455] tc_dump_action: action bad kind
[  270.199912][T16455] tc_dump_action: action bad kind
[  270.202300][T16455] tc_dump_action: action bad kind
[  270.205764][T16455] tc_dump_action: action bad kind
[  270.208115][T16455] tc_dump_action: action bad kind
[  270.210573][T16455] tc_dump_action: action bad kind
[  270.212999][T16455] tc_dump_action: action bad kind
[  270.216381][T16455] tc_dump_action: action bad kind
[  270.219275][T16455] tc_dump_action: action bad kind
[  270.221798][T16455] tc_dump_action: action bad kind
[  270.224316][T16455] tc_dump_action: action bad kind
[  270.227496][T16455] tc_dump_action: action bad kind
[  270.229888][T16455] tc_dump_action: action bad kind
[  270.232450][T16455] tc_dump_action: action bad kind
[  270.234875][T16455] tc_dump_action: action bad kind
[  270.238668][T16455] tc_dump_action: action bad kind
[  270.241133][T16455] tc_dump_action: action bad kind
[  270.243528][T16455] tc_dump_action: action bad kind
[  270.245915][T16455] tc_dump_action: action bad kind
[  270.670275][T16474] syzkaller0: entered promiscuous mode
[  270.672451][T16474] syzkaller0: entered allmulticast mode
[  270.801261][   T40] kauditd_printk_skb: 203 callbacks suppressed
[  270.801279][   T40] audit: type=1400 audit(267.388:4727): avc:  denied  { write } for  pid=16482 comm="syz.8.3032" name="ip_tables_names" dev="proc" ino=4026533545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  270.823414][   T40] audit: type=1400 audit(267.398:4728): avc:  denied  { create } for  pid=16485 comm="syz.3.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  270.830820][   T40] audit: type=1400 audit(267.398:4729): avc:  denied  { write } for  pid=16485 comm="syz.3.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  270.844372][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.848842][   T40] audit: type=1400 audit(267.435:4730): avc:  denied  { read write } for  pid=16485 comm="syz.3.3033" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  270.854920][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.861818][   T40] audit: type=1400 audit(267.435:4731): avc:  denied  { open } for  pid=16485 comm="syz.3.3033" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  270.870410][   T40] audit: type=1400 audit(267.435:4732): avc:  denied  { ioctl } for  pid=16485 comm="syz.3.3033" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  270.904596][   T40] audit: type=1400 audit(267.482:4733): avc:  denied  { ioctl } for  pid=16485 comm="syz.3.3033" path="socket:[77745]" dev="sockfs" ino=77745 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  270.917537][   T40] audit: type=1400 audit(267.501:4734): avc:  denied  { create } for  pid=16493 comm="syz.8.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  270.921535][T16494] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3036'.
[  270.930888][   T40] audit: type=1400 audit(267.510:4735): avc:  denied  { write } for  pid=16493 comm="syz.8.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  270.938747][   T40] audit: type=1400 audit(267.510:4736): avc:  denied  { nlmsg_write } for  pid=16493 comm="syz.8.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  271.088231][T16502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3033'.
[  271.189188][   T63] Bluetooth: hci4: command tx timeout
[  271.963322][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.524330][T16502] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  272.530670][T16502] gretap1: entered promiscuous mode
[  272.533111][T16502] gretap1: entered allmulticast mode
[  272.776408][T16532] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3043'.
[  272.963459][T16542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  273.034717][T16549] syzkaller0: entered promiscuous mode
[  273.037140][T16549] syzkaller0: entered allmulticast mode
[  273.062667][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.402071][   T63] Bluetooth: hci4: command tx timeout
[  273.745882][T13457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.095447][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.171985][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.988036][T16599] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  274.994437][T16599] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  274.999534][T16599] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null.
[  275.112296][T16617] zonefs (loop3) ERROR: Not a zoned block device
[  275.116661][T16617] SELinux:  truncated policydb string identifier
[  275.120010][T16617] SELinux: failed to load policy
[  275.205039][T16628] unsupported nla_type 4111
[  275.272357][T16628] 0x0000000000ff-0x000000020102 : ""
[  275.277807][T16628] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ff01
[  275.278243][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.292506][T16628] ftl_cs: FTL header corrupt!
[  275.401070][T16642] netlink: 'syz.3.3076': attribute type 4 has an invalid length.
[  275.404455][T16642] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3076'.
[  275.414755][T16642] .`: renamed from bond0 (while UP)
[  275.476188][T16647] netlink: 'syz.5.3077': attribute type 5 has an invalid length.
[  275.754568][T16663] syzkaller0: entered promiscuous mode
[  275.757230][T16663] syzkaller0: entered allmulticast mode
[  276.392076][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.509181][   T40] kauditd_printk_skb: 183 callbacks suppressed
[  276.509197][   T40] audit: type=1400 audit(272.745:4920): avc:  denied  { create } for  pid=16678 comm="syz.3.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  277.338092][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.432657][   T40] audit: type=1400 audit(273.609:4921): avc:  denied  { create } for  pid=16683 comm="syz.7.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  277.440959][   T40] audit: type=1400 audit(273.618:4922): avc:  denied  { prog_load } for  pid=16683 comm="syz.7.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  277.448352][   T40] audit: type=1400 audit(273.618:4923): avc:  denied  { bpf } for  pid=16683 comm="syz.7.3088" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  277.456416][   T40] audit: type=1400 audit(273.618:4924): avc:  denied  { perfmon } for  pid=16683 comm="syz.7.3088" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  277.463637][   T40] audit: type=1400 audit(273.618:4925): avc:  denied  { prog_run } for  pid=16683 comm="syz.7.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  277.472239][   T40] audit: type=1400 audit(273.618:4926): avc:  denied  { ioctl } for  pid=16683 comm="syz.7.3088" path="socket:[79600]" dev="sockfs" ino=79600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  277.481796][   T40] audit: type=1400 audit(273.618:4927): avc:  denied  { setopt } for  pid=16683 comm="syz.7.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  277.495090][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.503329][   T40] audit: type=1400 audit(273.674:4928): avc:  denied  { module_request } for  pid=16685 comm="syz.7.3089" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  277.531879][   T40] audit: type=1400 audit(273.702:4929): avc:  denied  { create } for  pid=16691 comm="syz.7.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  277.542951][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3091'.
[  277.672767][T16701] ptrace attach of "/syz-executor exec"[11825] was attempted by ""[16701]
[  277.684665][T16701] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  277.717747][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'.
[  277.773906][T16715] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  277.782327][T16717] syz.7.3096(16717): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  277.887572][T16729] wireguard0: entered allmulticast mode
[  277.952965][T16735] syzkaller0: entered promiscuous mode
[  277.956337][T16735] syzkaller0: entered allmulticast mode
[  278.068699][T16745] overlayfs: failed to clone upperpath
[  278.605820][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.730463][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.898298][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3113'.
[  279.946924][T16786] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3116'.
[  279.970390][T16786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.133096][T16796] syzkaller0: entered promiscuous mode
[  280.134991][T16796] syzkaller0: entered allmulticast mode
[  280.565168][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.831489][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.854204][   T40] kauditd_printk_skb: 134 callbacks suppressed
[  281.854217][   T40] audit: type=1400 audit(277.755:5064): avc:  denied  { execmem } for  pid=16820 comm="syz.5.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  281.864594][   T40] audit: type=1400 audit(277.765:5065): avc:  denied  { write } for  pid=16822 comm="syz.3.3129" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  281.874093][T16823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3129'.
[  281.904433][   T40] audit: type=1400 audit(277.802:5066): avc:  denied  { remount } for  pid=16825 comm="syz.3.3130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  281.913061][T16826] binder: Unknown parameter 'fsuuid'
[  281.930369][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.933767][   T40] audit: type=1400 audit(277.812:5067): avc:  denied  { read } for  pid=16825 comm="syz.3.3130" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  281.943827][   T40] audit: type=1400 audit(277.812:5068): avc:  denied  { open } for  pid=16825 comm="syz.3.3130" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  281.954538][   T40] audit: type=1400 audit(277.812:5069): avc:  denied  { read write } for  pid=16825 comm="syz.3.3130" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  281.965103][   T40] audit: type=1400 audit(277.812:5070): avc:  denied  { open } for  pid=16825 comm="syz.3.3130" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  281.977993][   T40] audit: type=1400 audit(277.831:5071): avc:  denied  { ioctl } for  pid=16825 comm="syz.3.3130" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  281.982705][T16829] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  281.988167][   T40] audit: type=1400 audit(277.840:5072): avc:  denied  { egress } for  pid=16820 comm="syz.5.3128" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  281.990575][T16829] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  282.000611][   T40] audit: type=1400 audit(277.840:5073): avc:  denied  { sendto } for  pid=16820 comm="syz.5.3128" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  282.051374][T16831] netlink: 'syz.3.3132': attribute type 8 has an invalid length.
[  282.053970][T16831] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  282.226679][T16843] syzkaller0: entered promiscuous mode
[  282.229340][T16843] syzkaller0: entered allmulticast mode
[  282.516168][    C3] vcan0: j1939_tp_rxtimer: 0xffff888037415800: rx timeout, send abort
[  283.038185][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.055142][    C3] vcan0: j1939_tp_rxtimer: 0xffff888037414c00: rx timeout, send abort
[  283.058878][    C3] vcan0: j1939_tp_rxtimer: 0xffff888037415800: abort rx timeout. Force session deactivation
[  283.593271][    C3] vcan0: j1939_tp_rxtimer: 0xffff888037414c00: abort rx timeout. Force session deactivation
[  283.805083][   T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.903213][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3144'.
[  283.938322][T16873] nbd: socks must be embedded in a SOCK_ITEM attr
[  283.976681][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.042173][ T7991] udevd[7991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  284.063772][T16886] bond3: Removing last arp target with arp_interval on
[  284.128683][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3148'.
[  284.134674][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3148'.
[  284.139053][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3148'.
[  284.144169][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3148'.
[  284.157074][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.210331][T16902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65528 sclass=netlink_route_socket pid=16902 comm=syz.8.3152
[  284.217008][T16902] netlink: 'syz.8.3152': attribute type 12 has an invalid length.
[  284.220898][T16902] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3152'.
[  285.109643][T16961] syzkaller0: entered promiscuous mode
[  285.112596][T16961] syzkaller0: entered allmulticast mode
[  285.248817][T16971] policy can only be matched on NF_INET_PRE_ROUTING
[  285.248835][T16971] unable to load match
[  285.266406][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.330422][T16975] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  285.333630][T16975] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  285.338051][T16975] vhci_hcd vhci_hcd.0: Device attached
[  285.390106][T16986] netlink: 'syz.3.3178': attribute type 33 has an invalid length.
[  285.394211][T16986] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3178'.
[  285.417415][T16988] netlink: 'syz.5.3180': attribute type 6 has an invalid length.
[  285.422317][T16989] netlink: 'syz.5.3180': attribute type 6 has an invalid length.
[  285.470801][T16992] SELinux: failed to load policy
[  285.500315][T16998] netlink: 'syz.5.3182': attribute type 5 has an invalid length.
[  285.505236][T16998] sctp: [Deprecated]: syz.5.3182 (pid 16998) Use of int in maxseg socket option.
[  285.505236][T16998] Use struct sctp_assoc_value instead
[  285.521270][    T9] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  285.552633][T17002] syzkaller0: entered promiscuous mode
[  285.554871][T17002] syzkaller0: entered allmulticast mode
[  285.585306][    T9] usb 53-1: new full-speed USB device number 2 using vhci_hcd
[  285.652619][T17010] overlayfs: failed to clone upperpath
[  285.779505][T17023] Cannot find add_set index 128 as target
[  285.786973][T17023] ipvlan2: entered allmulticast mode
[  285.790029][T17023] batadv_slave_1: entered allmulticast mode
[  285.918259][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'.
[  285.933828][T16986] syz.3.3178 (16986): drop_caches: 1
[  286.080846][T16986] syz.3.3178 (16986): drop_caches: 1
[  286.101130][T16978] vhci_hcd: connection reset by peer
[  286.105001][   T61] vhci_hcd vhci_hcd.8: stop threads
[  286.107339][   T61] vhci_hcd vhci_hcd.8: release socket
[  286.109233][   T61] vhci_hcd vhci_hcd.8: disconnect device
[  286.131725][T17039] overlayfs: missing 'lowerdir'
[  286.141825][T17038] syzkaller0: entered promiscuous mode
[  286.141976][T17039] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  286.144084][T17038] syzkaller0: entered allmulticast mode
[  286.148318][T17039] overlayfs: failed to set uuid (319/file0, err=-1); falling back to uuid=null.
[  286.256646][T17044] xt_l2tp: v2 doesn't support IP mode
[  286.274324][T17046] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3202'.
[  286.376959][ T1344] net_ratelimit: 1 callbacks suppressed
[  286.376971][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.631944][T17072] syzkaller0: entered promiscuous mode
[  286.633748][T17072] syzkaller0: entered allmulticast mode
[  286.715703][T17085] netlink: 'syz.8.3213': attribute type 20 has an invalid length.
[  286.715743][T17084] netlink: 'syz.8.3213': attribute type 20 has an invalid length.
[  286.747786][T17085] netlink: 'syz.8.3213': attribute type 20 has an invalid length.
[  286.750571][  T167] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.750654][T17084] netlink: 'syz.8.3213': attribute type 20 has an invalid length.
[  286.757305][  T167] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.761967][  T167] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.765173][  T167] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  286.880368][T17109] syzkaller0: entered promiscuous mode
[  286.883834][T17109] syzkaller0: entered allmulticast mode
[  286.910813][T17109] overlayfs: conflicting lowerdir path
[  286.946535][T17116] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  286.949963][T17104] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  286.954889][T17116] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  286.962219][T17116] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  287.047296][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.076145][T17125] bond0: (slave rose0): Enslaving as an active interface with an up link
[  287.167266][ T5982] IPVS: starting estimator thread 0...
[  287.167548][T17139] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003
[  287.225580][   T40] kauditd_printk_skb: 289 callbacks suppressed
[  287.225592][   T40] audit: type=1400 audit(282.797:5363): avc:  denied  { mount } for  pid=17131 comm="syz.5.3228" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  287.236412][   T40] audit: type=1400 audit(282.806:5364): avc:  denied  { read write } for  pid=17131 comm="syz.5.3228" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  287.245433][   T40] audit: type=1400 audit(282.806:5365): avc:  denied  { open } for  pid=17131 comm="syz.5.3228" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  287.254348][   T40] audit: type=1400 audit(282.806:5366): avc:  denied  { execmem } for  pid=17131 comm="syz.5.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  287.261119][   T40] audit: type=1400 audit(282.825:5367): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=45954 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  287.290368][T17140] IPVS: using max 46 ests per chain, 110400 per kthread
[  287.316766][   T40] audit: type=1400 audit(282.891:5368): avc:  denied  { create } for  pid=17153 comm="syz.7.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  287.319978][T17154] __nla_validate_parse: 5 callbacks suppressed
[  287.319991][T17154] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3233'.
[  287.324514][   T40] audit: type=1400 audit(282.891:5369): avc:  denied  { create } for  pid=17153 comm="syz.7.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  287.328247][T17155] nftables ruleset with unbound chain
[  287.330184][T17154] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3233'.
[  287.356554][   T40] audit: type=1400 audit(282.928:5370): avc:  denied  { bind } for  pid=17153 comm="syz.7.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  287.366118][   T40] audit: type=1400 audit(282.928:5371): avc:  denied  { setopt } for  pid=17153 comm="syz.7.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  287.375118][   T40] audit: type=1400 audit(282.928:5372): avc:  denied  { write } for  pid=17153 comm="syz.7.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  287.426086][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3228'.
[  287.471878][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.685972][T17164] sit1: entered allmulticast mode
[  287.709973][T17164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.021956][   T63] Bluetooth: hci3: connection err: -111
[  288.187714][T17181] syzkaller0: entered promiscuous mode
[  288.190174][T17181] syzkaller0: entered allmulticast mode
[  288.259347][T17186] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3243'.
[  288.265884][T17186] validate_nla: 1 callbacks suppressed
[  288.265902][T17186] netlink: 'syz.8.3243': attribute type 2 has an invalid length.
[  288.276191][T17186] x_tables: ip6_tables: CT target: only valid in raw table, not syz1
[  288.591603][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.670964][T17207] o2cb: This node has not been configured.
[  288.673047][T17207] o2cb: Cluster check failed. Fix errors before retrying.
[  288.675222][T17209] fuse: Bad value for 'fd'
[  288.675563][T17207] (syz.8.3249,17207,2):user_dlm_register:674 ERROR: status = -22
[  288.682089][T17207] (syz.8.3249,17207,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0"
[  288.718580][ T6089] usb 8-1: new full-speed USB device number 36 using dummy_hcd
[  288.786750][T17211] fuse: Bad value for 'user_id'
[  288.788845][T17211] fuse: Bad value for 'user_id'
[  288.789057][T17215] syzkaller0: entered promiscuous mode
[  288.793084][T17215] syzkaller0: entered allmulticast mode
[  288.912827][ T6089] usb 8-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  288.920936][ T6089] usb 8-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  288.943684][ T6089] usb 8-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36
[  288.947774][ T6089] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.950930][ T6089] usb 8-1: Product: syz
[  288.952385][ T6089] usb 8-1: Manufacturer: syz
[  288.955074][ T6089] usb 8-1: SerialNumber: syz
[  288.958000][T17222] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3254'.
[  289.164326][T17243] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  289.168085][T17243] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  289.174349][T17243] 9p: Bad value for 'rfdno'
[  289.289080][ T1344] usb 8-1: USB disconnect, device number 36
[  289.472613][T17273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3270'.
[  289.507748][T17272] fuse: Bad value for 'fd'
[  289.514233][T17273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.518794][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.555698][T17280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17280 comm=syz.8.3271
[  289.565349][T17280] netlink: 'syz.8.3271': attribute type 19 has an invalid length.
[  289.568952][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3271'.
[  289.573904][T17280] netlink: 'syz.8.3271': attribute type 19 has an invalid length.
[  289.577605][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3271'.
[  289.592947][T17279] ALSA: mixer_oss: invalid OSS volume ';Ê'
[  289.629384][T17288] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3274'.
[  289.640445][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3274'.
[  289.644866][T17288] 8021q: VLANs not supported on ip_vti0
[  289.651283][T17288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17288 comm=syz.5.3274
[  289.700065][ T1344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.703945][T17293] syzkaller0: entered promiscuous mode
[  289.706419][T17293] syzkaller0: entered allmulticast mode
[  289.857179][T17306] netlink: 'syz.7.3279': attribute type 1 has an invalid length.
[  289.877727][T17306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59924 sclass=netlink_route_socket pid=17306 comm=syz.7.3279
[  289.978584][T17317] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  289.978584][T17317] The task syz.3.3282 (17317) triggered the difference, watch for misbehavior.
[  290.032446][T17317] nbd: socks must be embedded in a SOCK_ITEM attr
[  290.041461][ T7945] block nbd64: NBD_DISCONNECT
[  290.104205][T11143] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  290.172046][ T7991] udevd[7991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  290.263977][T11143] usb 13-1: Using ep0 maxpacket: 16
[  290.268543][T11143] usb 13-1: config 0 has no interfaces?
[  290.271763][T11143] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  290.275996][T11143] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  290.279155][T11143] usb 13-1: SerialNumber: syz
[  290.282696][T11143] usb 13-1: config 0 descriptor??
[  290.511763][ T6089] usb 13-1: USB disconnect, device number 2
[  290.574273][T17332] tipc: Started in network mode
[  290.576137][T17332] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  290.580575][T17332] tipc: Enabled bearer <udp:syz1>, priority 10
[  290.583325][T17332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=17332 comm=syz.7.3286
[  290.833412][T17344] overlayfs: failed to clone upperpath
[  290.942766][T17354] program syz.3.3293 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  291.042190][    T9] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  291.056516][T17361] syzkaller0: entered promiscuous mode
[  291.058364][T17361] syzkaller0: entered allmulticast mode
[  291.125447][T17370] netlink: 'syz.8.3299': attribute type 29 has an invalid length.
[  291.129352][T17370] netlink: 'syz.8.3299': attribute type 29 has an invalid length.
[  291.179934][T17375] binder: 17374:17375 ioctl c018620b 200000000000 returned -14
[  291.256647][T17377] macsec1: entered promiscuous mode
[  291.258567][T17377] macsec1: entered allmulticast mode
[  291.280313][T17389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=17389 comm=syz.5.3304
[  291.289074][T17389] tmpfs: Bad value for 'mpol'
[  291.316455][T17389] ------------[ cut here ]------------
[  291.320477][T17389] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva)
[  291.320520][T17389] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1b24/0x24a0, CPU#0: syz.5.3304/17389
[  291.328838][T17389] Modules linked in:
[  291.332140][T17389] CPU: 0 UID: 0 PID: 17389 Comm: syz.5.3304 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  291.336268][T17389] Tainted: [L]=SOFTLOCKUP
[  291.338231][T17389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  291.342204][T17389] RIP: 0010:__kvm_gpc_refresh+0x1b24/0x24a0
[  291.344618][T17389] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 6e 09 00 00 48 8b 04 24 31 db 48 8b a8 10 01 00 00 e9 f2 ef ff ff e8 5d 34 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 4f 34 85 00 48 85 db 0f 84 5a ec ff ff
[  291.352078][T17389] RSP: 0018:ffffc90004c47250 EFLAGS: 00010287
[  291.354413][T17389] RAX: 0000000000000769 RBX: ffffffffffffffff RCX: ffffc90027f6d000
[  291.357626][T17389] RDX: 0000000000080000 RSI: ffffffff81838823 RDI: ffff88802ef8a4c0
[  291.360964][T17389] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001
[  291.364709][T17389] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000
[  291.368315][T17389] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90004c47468
[  291.372083][T17389] FS:  00007fa38b48e6c0(0000) GS:ffff8880d6342000(0000) knlGS:0000000000000000
[  291.372346][T17399] cgroup: Invalid name
[  291.376143][T17389] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.380685][T17389] CR2: 000000110c3803af CR3: 0000000021e75000 CR4: 0000000000352ef0
[  291.384182][T17389] Call Trace:
[  291.385929][T17389]  <TASK>
[  291.387203][T17389]  ? find_held_lock+0x2b/0x80
[  291.389318][T17389]  ? __pfx___mutex_lock+0x10/0x10
[  291.391470][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.393805][T17389]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  291.396509][T17389]  kvm_gpc_refresh+0xc9/0x190
[  291.398663][T17389]  kvm_xen_set_evtchn.part.0+0x168/0x230
[  291.401131][T17389]  ? kvm_xen_set_evtchn.part.0+0x153/0x230
[  291.403674][T17389]  kvm_xen_hvm_evtchn_send+0x22f/0x290
[  291.406119][T17389]  ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10
[  291.408722][T17389]  kvm_arch_vm_ioctl+0x13ac/0x18d0
[  291.410905][T17389]  ? arch_stack_walk+0xa6/0xf0
[  291.412952][T17389]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  291.415479][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.417798][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.420057][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.422262][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.424470][T17389]  ? is_bpf_text_address+0x8a/0x1a0
[  291.426878][T17389]  ? bpf_ksym_find+0x128/0x1c0
[  291.429036][T17389]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  291.432074][T17389]  ? is_bpf_text_address+0x94/0x1a0
[  291.434606][T17389]  ? kernel_text_address+0x8d/0x100
[  291.436859][T17389]  ? __kernel_text_address+0xd/0x30
[  291.438743][T17389]  ? unwind_get_return_address+0x59/0xa0
[  291.440619][T17389]  ? arch_stack_walk+0xa6/0xf0
[  291.442227][T17389]  ? tomoyo_path_number_perm+0x46d/0x580
[  291.444127][T17389]  ? stack_trace_save+0x8e/0xc0
[  291.445804][T17389]  ? __pfx_stack_trace_save+0x10/0x10
[  291.447905][T17389]  ? stack_depot_save_flags+0x27/0x9d0
[  291.449949][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.451867][T17389]  ? tomoyo_path_number_perm+0x46d/0x580
[  291.453925][T17389]  ? kasan_save_stack+0x3f/0x50
[  291.455747][T17389]  ? kasan_save_stack+0x30/0x50
[  291.458025][T17389]  ? kasan_save_track+0x14/0x30
[  291.460121][T17389]  ? kasan_save_free_info+0x3b/0x70
[  291.462336][T17389]  ? __kasan_slab_free+0x5f/0x80
[  291.464574][T17389]  kvm_vm_ioctl+0x1564/0x4080
[  291.466714][T17389]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  291.469007][T17389]  ? tomoyo_path_number_perm+0x46d/0x580
[  291.471380][T17389]  ? kasan_quarantine_put+0x104/0x240
[  291.473668][T17389]  ? lockdep_hardirqs_on+0x78/0x100
[  291.475884][T17389]  ? find_held_lock+0x2b/0x80
[  291.477988][T17389]  ? tomoyo_path_number_perm+0x28f/0x580
[  291.480956][T17389]  ? tomoyo_path_number_perm+0x28f/0x580
[  291.483478][T17389]  ? tomoyo_path_number_perm+0x188/0x580
[  291.486109][T17389]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  291.488930][T17389]  ? futex_wait+0x125/0x380
[  291.491075][T17389]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  291.493626][T17389]  ? do_vfs_ioctl+0x226/0x13e0
[  291.495723][T17389]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  291.498069][T17389]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  291.501164][T17389]  ? __fget_files+0x215/0x3d0
[  291.503359][T17389]  ? hook_file_ioctl_common+0x146/0x410
[  291.506172][T17389]  ? selinux_file_ioctl+0x139/0x290
[  291.508695][T17389]  ? selinux_file_ioctl+0xb4/0x290
[  291.511096][T17389]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  291.513342][T17389]  __x64_sys_ioctl+0x18e/0x210
[  291.515483][T17389]  do_syscall_64+0x106/0xf80
[  291.517492][T17389]  ? clear_bhb_loop+0x40/0x90
[  291.519546][T17389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.522184][T17389] RIP: 0033:0x7fa38a59c799
[  291.524170][T17389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.532617][T17389] RSP: 002b:00007fa38b48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  291.536494][T17389] RAX: ffffffffffffffda RBX: 00007fa38a815fa0 RCX: 00007fa38a59c799
[  291.539941][T17389] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 000000000000000a
[  291.543843][T17389] RBP: 00007fa38a632c99 R08: 0000000000000000 R09: 0000000000000000
[  291.546597][T17389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.549308][T17389] R13: 00007fa38a816038 R14: 00007fa38a815fa0 R15: 00007ffd1bdfd258
[  291.552096][T17389]  </TASK>
[  291.553228][T17389] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  291.555776][T17389] CPU: 0 UID: 0 PID: 17389 Comm: syz.5.3304 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  291.559312][T17389] Tainted: [L]=SOFTLOCKUP
[  291.561172][T17389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  291.564534][T17389] Call Trace:
[  291.565694][T17389]  <TASK>
[  291.566729][T17389]  dump_stack_lvl+0x100/0x190
[  291.568419][T17389]  vpanic+0x552/0x970
[  291.569868][T17389]  ? __pfx_vpanic+0x10/0x10
[  291.571457][T17389]  panic+0xd1/0xe0
[  291.572777][T17389]  ? __pfx_panic+0x10/0x10
[  291.574304][T17389]  check_panic_on_warn.cold+0x19/0x34
[  291.576084][T17389]  ? __kvm_gpc_refresh+0x1b24/0x24a0
[  291.577969][T17389]  __warn.cold+0x191/0x348
[  291.579490][T17389]  __report_bug+0x296/0x3d0
[  291.581038][T17389]  ? __kvm_gpc_refresh+0x1b24/0x24a0
[  291.582859][T17389]  ? __pfx___report_bug+0x10/0x10
[  291.584746][T17389]  ? lockdep_unlock+0x5a/0xc0
[  291.586503][T17389]  ? __lock_acquire+0xd73/0x2630
[  291.588240][T17389]  ? __kvm_gpc_refresh+0x1b24/0x24a0
[  291.590016][T17389]  report_bug+0xb2/0x220
[  291.591448][T17389]  ? __kvm_gpc_refresh+0x1b24/0x24a0
[  291.593206][T17389]  handle_bug+0x16a/0x2a0
[  291.594675][T17389]  exc_invalid_op+0x17/0x50
[  291.596196][T17389]  asm_exc_invalid_op+0x1a/0x20
[  291.597812][T17389] RIP: 0010:__kvm_gpc_refresh+0x1b24/0x24a0
[  291.599786][T17389] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 6e 09 00 00 48 8b 04 24 31 db 48 8b a8 10 01 00 00 e9 f2 ef ff ff e8 5d 34 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 4f 34 85 00 48 85 db 0f 84 5a ec ff ff
[  291.606436][T17389] RSP: 0018:ffffc90004c47250 EFLAGS: 00010287
[  291.608841][T17389] RAX: 0000000000000769 RBX: ffffffffffffffff RCX: ffffc90027f6d000
[  291.611535][T17389] RDX: 0000000000080000 RSI: ffffffff81838823 RDI: ffff88802ef8a4c0
[  291.614200][T17389] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001
[  291.616834][T17389] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000
[  291.619494][T17389] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90004c47468
[  291.622270][T17389]  ? __kvm_gpc_refresh+0x1b23/0x24a0
[  291.624204][T17389]  ? find_held_lock+0x2b/0x80
[  291.625902][T17389]  ? __pfx___mutex_lock+0x10/0x10
[  291.627590][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.629241][T17389]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  291.631062][T17389]  kvm_gpc_refresh+0xc9/0x190
[  291.632652][T17389]  kvm_xen_set_evtchn.part.0+0x168/0x230
[  291.634520][T17389]  ? kvm_xen_set_evtchn.part.0+0x153/0x230
[  291.636476][T17389]  kvm_xen_hvm_evtchn_send+0x22f/0x290
[  291.638291][T17389]  ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10
[  291.640371][T17389]  kvm_arch_vm_ioctl+0x13ac/0x18d0
[  291.642193][T17389]  ? arch_stack_walk+0xa6/0xf0
[  291.644039][T17389]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  291.645983][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.647686][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.649359][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.651032][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.652707][T17389]  ? is_bpf_text_address+0x8a/0x1a0
[  291.654431][T17389]  ? bpf_ksym_find+0x128/0x1c0
[  291.656033][T17389]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  291.658097][T17389]  ? is_bpf_text_address+0x94/0x1a0
[  291.659837][T17389]  ? kernel_text_address+0x8d/0x100
[  291.661563][T17389]  ? __kernel_text_address+0xd/0x30
[  291.663285][T17389]  ? unwind_get_return_address+0x59/0xa0
[  291.665143][T17389]  ? arch_stack_walk+0xa6/0xf0
[  291.666745][T17389]  ? tomoyo_path_number_perm+0x46d/0x580
[  291.668601][T17389]  ? stack_trace_save+0x8e/0xc0
[  291.670231][T17389]  ? __pfx_stack_trace_save+0x10/0x10
[  291.672024][T17389]  ? stack_depot_save_flags+0x27/0x9d0
[  291.673857][T17389]  ? __lock_acquire+0x4a5/0x2630
[  291.675530][T17389]  ? tomoyo_path_number_perm+0x46d/0x580
[  291.677396][T17389]  ? kasan_save_stack+0x3f/0x50
[  291.679096][T17389]  ? kasan_save_stack+0x30/0x50
[  291.680717][T17389]  ? kasan_save_track+0x14/0x30
[  291.682365][T17389]  ? kasan_save_free_info+0x3b/0x70
[  291.684089][T17389]  ? __kasan_slab_free+0x5f/0x80
[  291.685742][T17389]  kvm_vm_ioctl+0x1564/0x4080
[  291.687335][T17389]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  291.689086][T17389]  ? tomoyo_path_number_perm+0x46d/0x580
[  291.691045][T17389]  ? kasan_quarantine_put+0x104/0x240
[  291.692962][T17389]  ? lockdep_hardirqs_on+0x78/0x100
[  291.694745][T17389]  ? find_held_lock+0x2b/0x80
[  291.696347][T17389]  ? tomoyo_path_number_perm+0x28f/0x580
[  291.698188][T17389]  ? tomoyo_path_number_perm+0x28f/0x580
[  291.700125][T17389]  ? tomoyo_path_number_perm+0x188/0x580
[  291.702099][T17389]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  291.704272][T17389]  ? futex_wait+0x125/0x380
[  291.705933][T17389]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  291.708091][T17389]  ? do_vfs_ioctl+0x226/0x13e0
[  291.709941][T17389]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  291.711735][T17389]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  291.714112][T17389]  ? __fget_files+0x215/0x3d0
[  291.715734][T17389]  ? hook_file_ioctl_common+0x146/0x410
[  291.717659][T17389]  ? selinux_file_ioctl+0x139/0x290
[  291.719455][T17389]  ? selinux_file_ioctl+0xb4/0x290
[  291.721320][T17389]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  291.723142][T17389]  __x64_sys_ioctl+0x18e/0x210
[  291.725095][T17389]  do_syscall_64+0x106/0xf80
[  291.726878][T17389]  ? clear_bhb_loop+0x40/0x90
[  291.728600][T17389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.730645][T17389] RIP: 0033:0x7fa38a59c799
[  291.732232][T17389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.738768][T17389] RSP: 002b:00007fa38b48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  291.741594][T17389] RAX: ffffffffffffffda RBX: 00007fa38a815fa0 RCX: 00007fa38a59c799
[  291.744407][T17389] RDX: 0000200000000980 RSI: 00000000400caed0 RDI: 000000000000000a
[  291.747101][T17389] RBP: 00007fa38a632c99 R08: 0000000000000000 R09: 0000000000000000
[  291.749954][T17389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.752781][T17389] R13: 00007fa38a816038 R14: 00007fa38a815fa0 R15: 00007ffd1bdfd258
[  291.755580][T17389]  </TASK>
[  291.757407][T17389] Kernel Offset: disabled
[  291.758850][T17389] Rebooting in 86400 seconds..