last executing test programs:

6m46.555679061s ago: executing program 32 (id=195):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002480)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r2=>0x0}], 0xa, "4da2d7db653b5a"})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000003480)={r2, 0x6})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x40000120, 0x0) (async)
recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x40000120, 0x0)

6m10.984098286s ago: executing program 33 (id=702):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_open_dev$hidraw(0x0, 0x1, 0x14a042)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01b, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4m55.561989116s ago: executing program 34 (id=1664):
getresuid(&(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@nullb, r0, &(0x7f0000000100)) (async)
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, r1}}, {@uid={'uid', 0x3d, r0}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/nullb0\x00'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@euid_gt={'euid>', r0}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfshat}, {@func={'func', 0x3d, 'PATH_CHECK'}}]})
r2 = socket$inet(0x2, 0x80000, 0x9)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x6f0, [0x0, 0x2000000002c0, 0x2000000004f4, 0x200000000524], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x7, 0x201, 'pim6reg0\x00', 'veth1_virt_wifi\x00', 'wlan0\x00', 'team0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0x116, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x0, 0x0, 0x0, 0x0, "3dad67bd902819d67c445b33b3f7f7397f8a5f0286505c60826e2d2ca1bcb03cc61b18a0404d65a16a6414e1470833b944fc8e016211ccd6b80961c175b69725"}}}}, {0x11, 0x2c, 0x15, 'veth1_to_batadv\x00', 'veth0_to_bridge\x00', 'rose0\x00', 'veth1_macvtap\x00', @random="d8b8829cd734", [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0xff], 0x6e, 0xb6, 0xee, [], [@common=@ERROR={'ERROR\x00', 0x20, {"a643ddd21622f4aa9eb876acf94dcdd8f3df588c19dfb89ad5f2b2c34fd1"}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x30, 0x6005, 'batadv_slave_1\x00', 'veth0_virt_wifi\x00', 'vlan1\x00', 'wlan0\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x11e, 0x29e, 0x2ee, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private2, @private0, [0xff, 0xffff00, 0x0, 0xffffff00], [0xb4e4f7b41a31cfa2, 0xff], 0x6, 0x32, 0x1, 0x41, 0x4e22, 0x4e23, 0x4e21, 0x4e21}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0xb, 0x80000001, 0x1}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', {0xff}}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8000, 'system_u:object_r:sulogin_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x3, {0x1}}}}}, {0x9, 0x20, 0x88f7, 'dvmrp0\x00', 'veth0\x00', 'vlan1\x00', 'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @random="80b6836c8019", [0xff, 0xff, 0xff, 0xff], 0xde, 0x13e, 0x16e, [@realm={{'realm\x00', 0x0, 0x10}, {{0xe, 0x7, 0x1}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x9, 0xc74, 0x7, 0x1}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xffff}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x200}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x768)
socket$inet(0x2, 0x1, 0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x190, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8}]}}}]}]}, @NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8a, 0x6, "90a434fb59571ee8604e1c2c3ad62f8a2c002e681839af90376fade5a1db512af5cbe79b47d879ad81c356b3896fcbeb3de35540762eac76a95c696098c9887bd692a9e988d8fcdc3352a6df1cdfb911656d718584cc590f1b49506c2b7f6f61533322d7f6a189b343d141f2c0c1d121782cf199c3f98954eaaabfcea3878393d261c06311bf"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x264}, 0x1, 0x0, 0x0, 0x50}, 0x804) (async)
rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020}, 0x2020) (async, rerun: 64)
r4 = syz_open_dev$vivid(&(0x7f0000002e40), 0x1, 0x2) (rerun: 64)
ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000002e80)={0x0, @reserved})
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x38, r6, 0x204, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a1bf8bab095c"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x200080c1) (async, rerun: 64)
lseek(r4, 0x7fffffff, 0x2) (rerun: 64)
r7 = accept$ax25(r5, 0x0, &(0x7f0000003080))
ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000030c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async)
clock_gettime(0x0, &(0x7f0000003180)={<r8=>0x0, <r9=>0x0})
utimes(&(0x7f0000003140)='./file0\x00', &(0x7f00000031c0)={{r8, r9/1000+60000}, {0x0, 0x2710}}) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x58, 0x3, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x943}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffff80000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x44040}, 0x10008090) (async, rerun: 32)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000033c0)={'wpan3\x00', <r12=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003400)={'wpan0\x00', <r13=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003440)={'wpan3\x00', <r14=>0x0}) (rerun: 64)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000003540)={&(0x7f0000003340), 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x4c, r11, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xda}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000800}, 0x20000040) (async, rerun: 32)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000003580)='./binderfs2/binder1\x00', 0x2, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000035c0)={'wpan0\x00'}) (async)
ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000003680)={0x28, 0x4, 0x0, 0x0, 0x135955, 0x932b, 0xa, 0xbcb5})

4m23.393099796s ago: executing program 3 (id=1968):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3)
r1 = io_uring_setup(0x7d30, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046})
pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) (rerun: 32)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x74, 0x6}]}) (async)
close(0x3)

4m23.252734352s ago: executing program 3 (id=1971):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
bind$bt_hci(r0, &(0x7f0000001340)={0x1f, 0xffff, 0x2}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4095, 0xfff}], 0x0)

4m23.141364615s ago: executing program 3 (id=1974):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x1, 0x16, 0x8e6, 0xd}}]}}, 0x15)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x2}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r4 = signalfd(r2, &(0x7f0000000080)={[0x80000001]}, 0x8)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000280)=0x8)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = dup2(r5, r8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000000c0)={r7}, 0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000140)={r7, 0x5, 0x400, 0x4, 0xff, 0xc}, &(0x7f0000000180)=0x14)

4m22.976231998s ago: executing program 3 (id=1977):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100})
r1 = socket(0x2b, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$setregset(0x4205, 0x0, 0x3, &(0x7f0000000600)={0x0})
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x10d883, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
mmap(&(0x7f0000545000/0x2000)=nil, 0x2000, 0x0, 0x40010, r3, 0xffffe000)
r4 = socket(0x22, 0x2, 0x24)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="20c13d10", 0x4)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x8, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

4m22.850841233s ago: executing program 3 (id=1978):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0xf}}]}, 0x18)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)

4m22.42069896s ago: executing program 3 (id=1982):
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x804, &(0x7f00000000c0)=ANY=[@ANYBLOB="74720000000076697274696f2c6d73697a653d3078300400000000000000303030643037342c00"])
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000028c0)=@bridge_delvlan={0x24, 0x71, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x2}}}]}, 0x24}, 0x1, 0x1000000}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
dup(r3) (async)
r4 = dup(r3)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x100)

4m22.276083012s ago: executing program 35 (id=1982):
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x804, &(0x7f00000000c0)=ANY=[@ANYBLOB="74720000000076697274696f2c6d73697a653d3078300400000000000000303030643037342c00"])
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000028c0)=@bridge_delvlan={0x24, 0x71, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x2}}}]}, 0x24}, 0x1, 0x1000000}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
dup(r3) (async)
r4 = dup(r3)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x100)

3m29.631360277s ago: executing program 7 (id=2539):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0)
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="569f51889e87d322ba0c4eba9201bd49896fbabe88e6f0b16e981e10f338b389230b45ad72556cca2a198ca84e912675f11ff776fea0db80f5fe165053c06929a7751af5ed1f8a7bb1ba4f632ba91569c09bb7b3a2457b3af9a6238ce85a3f4d5e20536c45a772ed740b17690b66a11879cbc46f27164d13ab1262de5999c47caa732461d5d7790ec2cee878cfade4b95ce6cfcfa28e7b9e9e4a83974b201b2f9f738750ca80f366eb600f4e60ff37370957a7205bc895e341c05a3eb87e62bc69cb001a59931dbe4506466334d897b76705565a68860be73d8be0a9d0a0", 0xde}, {&(0x7f0000000480)="7b205dbf5d9e4bb2d2de27ce54deeb8616de87c569798073f440e31330de5be85cd62a9cae1eb64792845e7f31e35bbd116094a8aa040a00fb5d335151e25283c3e40fb64eb9b14f604c2c8a35fe9b0b6ca831b5a76363597e051fadc4106b6900ba148fca84f55139729ccde37fb0d1bc84484a4e78a74c06b32c995c342532618850b571c09bf80b0eaf50c272ba515582878d44ae1660304fc39949ff527152616a998b338fa44a7eb077addc2c8cec31c17e0b9d27726c008e", 0xbb}, {&(0x7f0000000680)="4f4d6746e2518322eb41466af4b4988a64f799e80fa561c4af6a81b6f3eeb585d2fdfac69cba00a884d0caef39eb7e011e3fc4f9fb7ef006e5046f154b16d3515e4d9eba154105322a91645c215b0437f1d4f8a5674081982cf85519437c705be102aa95b4e931b5f83090e2e8e8c19994d11a58253f594287b6e12ab6022772e467c0037fb0080eaeafbcc10172150294c6da6eb754e9ccf61c3f9229f95e6748bf3145a7752758a659fdc43f9103c11eb62b0082eb28a007bdc5bcde3940c1d54f224522d01d7132b39bc0452e56a6bd94ed201136a5222f34161b02e8034c96c69602f5ddfa0ed930ecd89e54bfbef071", 0xf2}, {&(0x7f0000000140)="0a750b298eba9bd271e0d683a2a6e11ee108874ee2c2d02c38a012b3eb051be827ccbe1b9164d2524ff3e5e8844a062db6174f38ba81eac15a90cdff9ec269edb30813549732a848d2affbac916425cfd2f8ffc8b3ece8e5f8fa8cad451c6d", 0x5f}], 0x4, &(0x7f00000002c0)=[@assoc={0x18}], 0x18, 0x8000}], 0x1, 0x4004004)

3m29.092201863s ago: executing program 7 (id=2545):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
ioctl$TCSETSW2(r0, 0x5425, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

3m28.472666634s ago: executing program 7 (id=2550):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x2, 0x0, 0xe, 0x8000000000000006})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xde4, <r3=>0x0}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0xd87, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5f78990a}}, 0x0, 0x3}, &(0x7f0000000340)=0x90)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m28.221739329s ago: executing program 7 (id=2551):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10)
fcntl$dupfd(r1, 0x406, r1)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xe34dee61b857995c)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00')

3m28.050927519s ago: executing program 7 (id=2553):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x1d, 0x2, 0x6) (async)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x2, {0x0, 0x0, 0x4}, 0x2}, 0x18)
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}}) (async)
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}})
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020)
socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24000040)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xe, 0xa}, {}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)

3m28.050272981s ago: executing program 7 (id=2554):
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20bb81f4a7f71c1926aae20fd7e0054a86e25f279d18513f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048051b7d8dbedc8b64bd4d336c1b96cdd49801a27dcd405047c148fe32ba", 0x70}], 0x2}], 0x1, 0x40)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$802154_raw(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51fac3cd4242ec52d3a9d97a2363395b5add192d6bb49", 0x1b}}, 0x94)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x3, 0x8000000, 0x1000000000000, 0x1d3, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x2, 0xfffffffffffffffe], 0x0, 0x2011c0})
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'bond_slave_1\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x17a, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pS    \x00'}, 0x20)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/13], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pS    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40e00, 0xc, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r8, r9, 0x1, 0xffffffffffffffff, r10, r11], &(0x7f0000000940), 0x10, 0x3}, 0x94)
bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r12, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000012c0)={0x14, 0x9, 0xa, 0x401, 0x70bd26, 0x25dfdbfd, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x60)
dup3(r12, r6, 0x80000)
bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m27.933845682s ago: executing program 36 (id=2554):
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d734712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b04f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4c328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091260010000000000000e30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb018986adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778fd87105119cc7e2f828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20bb81f4a7f71c1926aae20fd7e0054a86e25f279d18513f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048051b7d8dbedc8b64bd4d336c1b96cdd49801a27dcd405047c148fe32ba", 0x70}], 0x2}], 0x1, 0x40)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$802154_raw(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51fac3cd4242ec52d3a9d97a2363395b5add192d6bb49", 0x1b}}, 0x94)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x3, 0x8000000, 0x1000000000000, 0x1d3, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x2, 0xfffffffffffffffe], 0x0, 0x2011c0})
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'bond_slave_1\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x17a, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pS    \x00'}, 0x20)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/13], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pS    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40e00, 0xc, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r8, r9, 0x1, 0xffffffffffffffff, r10, r11], &(0x7f0000000940), 0x10, 0x3}, 0x94)
bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r12, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000012c0)={0x14, 0x9, 0xa, 0x401, 0x70bd26, 0x25dfdbfd, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x60)
dup3(r12, r6, 0x80000)
bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m8.990398884s ago: executing program 1 (id=2861):
file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x18, 0x100)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000f9ff00"], 0x24}}, 0x880)
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)
file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x18, 0x100) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000f9ff00"], 0x24}}, 0x880) (async)
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) (async)

3m8.870796816s ago: executing program 1 (id=2864):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000080), 0x4)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000003c0)={{0xffffffffffffffff, 0x1, 0xfffffffe, 0x3, 0x8}, 0x2, 0x9, 0x10})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x178, 0xc, 0x0, 0x178, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'wlan0\x00', 'netpci0\x00', {}, {0xff}, 0x3b, 0x1, 0x0, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xa, 0x0, '\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0xf2, 0x4, 0x7, 0x9, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, [0xff, 0xff000000, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00, 0xff], 0x100, 0x80}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0xe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
readv(r0, &(0x7f0000002dc0)=[{&(0x7f0000001940)=""/22, 0x16}], 0x1)
openat$random(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000080), 0x4) (async)
fcntl$dupfd(r0, 0x0, r1) (async)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000003c0)={{0xffffffffffffffff, 0x1, 0xfffffffe, 0x3, 0x8}, 0x2, 0x9, 0x10}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x178, 0xc, 0x0, 0x178, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'wlan0\x00', 'netpci0\x00', {}, {0xff}, 0x3b, 0x1, 0x0, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xa, 0x0, '\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0xf2, 0x4, 0x7, 0x9, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, [0xff, 0xff000000, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00, 0xff], 0x100, 0x80}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0xe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) (async)
readv(r0, &(0x7f0000002dc0)=[{&(0x7f0000001940)=""/22, 0x16}], 0x1) (async)

3m8.868897957s ago: executing program 1 (id=2867):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x6a, 0x3, 0x4, {0x1, @vbi={0x10000, 0xfffff7f3, 0x9, 0x20385655, [0x0, 0x4], [0x1, 0x6], 0x1}}, 0x88})

3m8.801458719s ago: executing program 1 (id=2868):
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 32)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
setpgid(r1, 0x0) (async)
setpgid(0x0, r1) (async)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) (async)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) (async, rerun: 64)
r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x90) (async, rerun: 32)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (rerun: 32)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async)
r5 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 32)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000dc0)=r5) (async, rerun: 32)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async, rerun: 64)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async, rerun: 64)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) (async)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)={0x2, 0x0, [{0xf7f7ffff, 0x82, &(0x7f0000000700)=""/130}, {0x30000, 0x9, &(0x7f0000000880)=""/9}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) (async, rerun: 64)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80000) (rerun: 64)
vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async)
write$cgroup_type(r6, &(0x7f0000000600), 0x9)

3m8.701863539s ago: executing program 1 (id=2870):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000001f)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x1})
r2 = userfaultfd(0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10)
write(r4, &(0x7f00000002c0)="04", 0x1)
sendto$inet6(r4, &(0x7f0000000440)="10", 0x1, 0x4044850, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)
close(r4)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)

3m8.222257787s ago: executing program 1 (id=2880):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

3m8.11231342s ago: executing program 37 (id=2880):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

1m10.450798717s ago: executing program 6 (id=3942):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000100)})
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async)
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000100)}) (async)
pipe2$9p(&(0x7f0000000000), 0x4000) (async)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async)
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async)
read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) (async)

1m10.386815648s ago: executing program 6 (id=3944):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
r0 = socket(0x10, 0x3, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x97, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000887000/0x2000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0xa, 0xe4, 0x76})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x4000004, 0xffffdffd, 0xd3c0}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x42e2de4dd52607af, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0xffffffff)

1m10.081048691s ago: executing program 6 (id=3949):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1)
ioctl$BLKTRACESTOP(r1, 0x2279, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"629d409f8ad7b689d9d520a41204dfed", 0x0, <r2=>0x0, {0xf5, 0x6}, {0x3, 0xc4}, 0x924d, [0x7fffffff, 0x400000000, 0x1cba, 0x4, 0x1, 0x7, 0x7ff, 0x7, 0x7fffffff, 0xa, 0xfff, 0xfe, 0x1000, 0x9, 0x5, 0x9]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000880)={{r0}, r2, 0x2, @unused=[0x178f00000, 0x3, 0x10, 0x4], @name="9df1800d1dabfbf8a8a1ecb568c031a58d35ac9111ccbc0f532b2ca18add172c2a57836ac09a7d116afd93c978d1567127aa1c5f20187d81be5f93761322ace297a8ab4ec809e5dcac8f8b231188207da079b234f5b47257218685b31729089db0214dea8487d510e332fabc7fefec37c7ec433998368385bcfd64586c0afe9a7698eecd221ca84a0f736458e74fb8f3fdacde82ee350ec65e7111d469dcc488eb0f9cd893d69dab9f35c9b647faed7e18e24f44be7d06275a9e896c92869bdb24916ca1c179e1640bb5a6a4087ce551c5bd662c715f1db4491c8c64201ee0af7983b97d3998cd0e479c6fc26f6744cfdd8d93473212bcc1e4ddd897c3d6565193fd2470c8fba3b4782deec5d62999ffca99d17f082615c5a4bcd34020fd47e28d7074cfa6ad5a9439b59f8b1b54de899dbbf112a789cdc4accab1c8e2fe7cc4e71306c5a7042a8567d2788b57e5402b160e9acdb4fadc029d30727859cf712d32cfb9007f8c1160fa27aa8c9d444d3d762a677da966159761487eddd90a3bbcdff8f3e004228a2be87a7aa36a9dbc20db81c08767e8e26c93d034327ceafb67a561b8f389eb613fa80473b683893e62c98a99748e1db072cb4447ce953593d32e3326bd6f1a9eff7a7605cc60db209efdf464eafa83cbaf295abe4e3568f417706a9b467ef07f77b408a654820398ca922a05724a371ee0756a3e72cb2e79b2171465d18a791974b65a6994ed2c546e5744ba17e32bafdfe0dacb80aefdd092df1f92c1e14a217273318959d9fa70b7b14db807f8b7dcf16669eefa08dd94666097d79c42f312ea2c2c2e969df1245b4d22ff9aaf25a60abdb3475b036a1ade1c961cb778aff384a389e6db398b74ff63de60cbcd3c9b658c26c9346ab4717794fa94271827778095f511f6ae2f7b6267fc5814f881a4488a7cf18dc6167f53c987d089914cc48ffb1ff345bb9c689be15795aea8fc4283c62db78adf8c27ee8316741efc632d93a5c601c6bd826c5bbf726cbff4f3a05bfddece72d65f769637ebc28707a2cedb228db3a69ded5cf1c44eec897b8db7dde8c5dc0f30468c83d92f029948e8e3be153f20866cb9ac92946659244e91a173123fc7fb1b89077800c3e57b91c48fbb95867fd4fc934f9550464c0321ffff6b8f0096a978b9aaea3a6bcaf19fc5c5238dd52c5e624cad72f3f4de0aaffeb4f6c704c3f16cf343b7587192c79653d91e37ac781d849c6ae577ee1624de8d75984177ca07d8816e0270d7ad077927d0d51a2cb2e588483e0e33860c3cb1e5eb244a47bdf4f52af463766dc1ff1922070b1b0307497306419662645484836d4e62bf6e984d142cca9b6a9b57143ab95c3daa70b955ce2dc99d18ea941e8512fb8edc23a3dad1f83e4c53b35270e27e1f89d67881380f93805118f773296fe90e61ab56c02f91995501537c427674ddcc5fe25c7c60996fa8550e73a391b6f85aae025d0db6bb008cdac5bb24c83eed911bea180c28d73b28046d65aedfff5c74b81654d5b53df1abbf00eb8ccbf4a076b373355518ac10843d1440dd1529bea63b8ecc48f78cdbfec48759c56983c9736b513199b11dc0619bfb128876f34633baf8032c261b542f49040ab0f86e0000e8cacad0a4014939204f28dea6be5518373e0926bac31daf9ea60b234e2fc3d0185079dd5ae61986418575087025bf2cc5bf625e0ab38de55e2c7e1ccc3476f1f2eca549d1d9892c2d79cb672450d61fe86474a5240940a45e97ad11ad45fd929184ee1a510a4c5ba648abc74af286c7aa05c706474f8ee64ad9e880047534780a809f9c7bccfa343759e82bea72b760938d99e75cecc05e2c6c8291a0f5e38c00750424cb38285b4c4d317a18bbdf488ff9b88ae3874ed25ff02fecb582ce379645c9fa72a399e2700eed740858ac7e5f794f45865f38945d6c17d926fd0d7cbc7aaf52b4b1396e932be07d14fb253d85aa192db43a2538615fe18e193a8201c84078d729ba6aea7f90510ed1f76d6b8fe96073485dab33748c1a1a7e6c8479a60c6a678806708fa3938515d24de4ba981c146b494d29d1deb2183d9ec4ffdd63713780e3a71e725c4d43a2fb5aa90e3269b6ac2253478b9c0427d2e04c21ab391416592d6d484fd8e5a4e9c2933121ddd841e2107cffb0d21409abe06df992e2ad0d10794e912549ae2d6d0471c496377918edb1a896959fd2b1fd65a4cff40b0446efb589b65d771600a116b2f172682318def5c47775afff9fa25c96da681e077bf1997608a0eb5764585c9f912fe3ed05f98b0cf89b36ec5163e8e6250c60bcf5afdef6088da2d010a98f1e58bc7f1988650eb53e14334e4fa8bc018d40279db74205f0622aa5c60dc18e76af3a181d152d141a662aea6a1c1c03726e21dec53e792058e1e848b46930443d12bf08725562f464053416fc59ef999cc14f0cc9b6c58909afc4cdf13b8e30e5f7b9d6669e5e9b37d6687766fd3c11fb5a92d8fd395aad6b8c68dbc5e2ce90366558ea433bd01c4b1ce6f5e308f3198663497256b59cc929024036471c7ad0a09abf51450c18c40733ef52c7cafaa17b63b682ddc2eac63ad4c30f6a39d54e3bc4b75980aa6bf9f62e15f52527aee6134582f6563e6ae941201dbd5bc7ea94e35e846ee60dc341285d5279d3d868ce90179baf828a81c685412ff51e183bd6a047b899faa3519c9e5434fa2562b09e73ab5831833e539e36108a6165c967649b4a1c3ae0289aca53c2c21bd5b3c3435cae4580e11888d0aefdd638d7de2574aff0ce9a2d0ac5d859ed3f55608d8f2e51b9ce39b7c40a142dd3995ff77a6deabed946fa25f66a00ae421124af8054c9b2e6c0f94e3ec819062155f8c974cf337f66e97b397082b8599f00f4f5df613a14b00b6555aac4d78cdabf7a7af9db40fe40fb6686c1ffeaf2fbe1f34e85bb3ed07dfd3089c5efbfe37a903d956ac6544a8a9520398ae53e0dc671c8363d1a226fe7fdcc6fd9d7d8414506fa990eea411835225a38394ee7e9f2f231c706a8578e7640327bf78711d24da600a740dcda92274f14c86f3b295d1be002a61b7de0a59553bde0e959db52fccc4afac679638fe5147c4a62331716acc08a010726fe3f046924b5d1c110d2f3ae197f2d0f63d48c913385dba394c84a33c3893bc70b9abc508a90dde9bbe1e78f1065091dae860d39e8c21dd2bf524106e7afa0376e77fe00e4b168fb5b62d9e8d731700fcb78edffdd0f7b53e27f300cbf15e57741a2a044afbab290da9a42e8b55d26249e4cd3b87ebab89e29ddc1f1bcd36a9277014e4cc41d4b4a0999b7c9d32eddb5a036895464cfe86127964bf2f63bd17cc1afdd63925a943851ca76a136ab05cd5087c7d1410840f523f5273aea038c2870a562a77910d40277e92928394e42d748f14dc8863f94bc8f44c2a06ecba1e2573d48aa2dd7b33675fe202a4b3c7c6ab9a45deed3674be24f0968f1f172a8ad8da912dc6abab44c753734691b52eb9c0a5cc4724f317812ea6d246c81f1e8fba07a703c14bd06a129d5f83f52dbc512675253554a2de279870f16e1b57316a79059df3fbc2615bb09d0dda26cb11604d2b89439e00d4c324f1e25f4bd8bf5b36c79be6de1f5984b01e05668e49e3a5a2731703b72b9808beac8d9974842ed5475581b0d6f42c4cccbfc7621e83740545151484872bb874bf94baadb785383a66887f682a2a397016748ec43bb6b0a05fc2799599c03dc4d91f0cb6a97160c3fe200932d26ebcc1782fdb5a2b5e4dfcd26b1a0c82d3a0fbef573cb1d76be0a81a7c5ef7e524b2f549f09d4ff35d891f62ce2d369e4b7bcf1433b6fe96188569ed9a0a22a5dac3f24239410638a005ceac5c3cb6c14a4089c356729653121fa432b809df7ed46b98ae538142513c2cec28ec8ca840484f830fe44b6fae56e59a6b7fca510353386bdcc83dc61db7bec7a37766d5b891f592dd2b69067a373d71544d621b8eeb2ce5c0542cc3f74eb9a5887f80af1f3bc992c144b131af21f6545f4e381facb4fa23b6dd158eafd51609cdb839103cf8c15841e0d025ed0886eaecc50512dfadbb7e3aed334820de8624e1f5586d3921ef67a819755ac58a0e34ba79d6b48144f94b7e7d3d980c8bd3aab8cb6b811e7df8af5f543ee71751f7757ce74fe65e679851958ad3c9e4c5374abb7301a544e3aad56eaeafbcb3a075552a60a4566c378ef0dbbbadda6946656a726a171e3329da162194bcffb661628cd8f286a447de9a780855f8f63b473f9423579492436810249cea7d882f1b5a42600d772f75cb8ba6e2e1f6e023661d8124a15ea78788115d5c73474cdd384297a234952d8153e6bce64061fabb98f10e171094971ea67c5b9ca2aae4d315ce73bd3f7341faffa5ec3020d8b66f6b731cd984839cb27adc92a4b83b20d5d13f9f0f6bac24e29e5481f54fbaf6e0fe68d41676189323a470e0601d4c7f20d039bcec8ddc367c92a6af85bd700394a93fb0b7d17d8dd0294db7e7fc16b21c3b512b003a7c42854acab56f16c64d7a9b574c8a817bd70216ec47f650289b4f2d0fadd33adb3bcf8e63b149fd62eb737450d517a3f63e26a9fc680fe872474bda1a539a7bace98cffeb52360ceed85df45e34e7e30f1987f8da79cf3517c0622bff4a00825f79b6f66d5a253a3a70e5b82abd108d34057af19a9fea99e09cf8b8d00b1b2ed404825b8a53869d797ffcd306fef3defb6677d1ddaa0368e6c51cdb4d23b620f0036b8a4f1abf1df50c210ff1e75039e7c39a3a72a5d08b90870d44f5de9c93d586fffad6a95ae27e48e894a8e316764154c6d82121ad5e46353e2e7fcd218891978e509a31349cd133bdea85c23c7d2cfb62463577f446ff2f259b0d8f0effe12a32da5cf494fd7ab68732351ed3394aa93b56a30c963f4ca346018644119fa44b84cd95173529985979d541f1933b98145dbee60bcacf48387571b90b4eee6887731fe56ad54d807ec32f74c31f060ccb5785af4ab674f4062a5579db2c37c95d71105a6ff4a2fefc95a976aacd1227946d51dbcc08c4f6fe215b1d551db4d3903cf9e2665b886459d36e234265224d172e5c71abf8439d3fe16f6fdfe17a7343450249d60ffc5f220c4c6f608b5ab3337b8baedc053c9614177b5261e4c7696d9f15d15597d77bc3fd1ac61a8ffb4b6d1f0148332ca23f5b812b2c4b17bb93c2b8ad8517720f5901de2f3c96edb61fa04dfaac26e3ef81b4498c5e32f1bfcf17eb18226598ccfd5e8aa8a7d703828ca3951f6d01acc02e5097b6d1447a8f6e3d478fe8984c51363da1bed59cba2a22c7eff5ae052471a8c929a3823e7f7f6214b7045e6bb94ac2dcd1a53260dccc6c48a0b0d7dd66fbff9cba244a750d9b489206223b0e617cb26e918191f45ca81edb745d6840b02d3e4e19954749d5985df712c10315b97ba06a727230250913f2fa3a3961f25ecdcfb023fdb1bdce120bda0719beb7a8d71beb344fa447c2e0840b3c1f7c191b17ccc14dfb967fe2dac46a39d8e5c4164fad7bdc423862ef28dcd45f29b5cbff7864747ccd25e14963ffcdc89964ded096222c3e882a201a13120ba49647987058c465ed1b52f2b7ddc98b2a8d155b44d8eba2c44b63be6cd98369526dce02e13943fa937087447ae9197c9e7bc8b7e42b1906e530a9e7cabbe4250578b185f69296646c117bf7254bc1a1288"})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m9.910698912s ago: executing program 6 (id=3952):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x7fff, 0x1, 0x3, 0xd59f80, 0xb488ab32, 0x7, 0x19ef, 0x3, 0x6, 0x8027ff, 0x2800, 0x101, 0xbb6, 0x9, 0x0, {0x8, 0xfffffffb}, 0xd0, 0xc}})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0)
r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000020240)='./file1\x00'})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r6 = openat$cgroup_ro(r0, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYRES64=r0])
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x21042, 0x136)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1, r11}}, 0x40)
r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r12, 0x0)
write$P9_RLERRORu(r7, 0x0, 0x10)
r13 = syz_open_dev$mouse(&(0x7f0000000100), 0x1ff, 0x84400)
utimensat(r13, &(0x7f0000000140)='./file2\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}, 0x0)

1m9.820117547s ago: executing program 6 (id=3954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x66, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x101, 0x4)
sendmsg(r2, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x66, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x101, 0x4) (async)
sendmsg(r2, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) (async)

1m9.358792693s ago: executing program 6 (id=3955):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0xffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xff, 0xfffffff3, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0xb8, 0x6}})
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000040)=""/17) (async)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000040)=""/17)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r5 = getpid()
r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="43ee25")
process_vm_readv(r6, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/93, 0x5d}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x2, 0x5003) (async)
ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x2, 0x5003)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f00000000c0)={0x100000, 0x3000}) (async)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f00000000c0)={0x100000, 0x3000})
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
setpriority(0x2, r5, 0x9)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200020000000000000008004100727865001400330076657468305f766c616e"], 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20040050)

1m9.267088112s ago: executing program 38 (id=3955):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0xffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xff, 0xfffffff3, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0xb8, 0x6}})
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000040)=""/17) (async)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000040)=""/17)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r5 = getpid()
r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="43ee25")
process_vm_readv(r6, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/93, 0x5d}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x2, 0x5003) (async)
ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x2, 0x5003)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f00000000c0)={0x100000, 0x3000}) (async)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f00000000c0)={0x100000, 0x3000})
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
setpriority(0x2, r5, 0x9)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200020000000000000008004100727865001400330076657468305f766c616e"], 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20040050)

38.600889404s ago: executing program 5 (id=4343):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8010, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r1, 0x1, 0x0, 0x3, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
listen(0xffffffffffffffff, 0x1)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, 0x0, 0x240)

38.491046438s ago: executing program 5 (id=4344):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x402)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000200)=[{0x34, '\x00', @data=0x4}]})
splice(0xffffffffffffffff, &(0x7f0000000000)=0x6, r0, &(0x7f0000000040)=0x100ca, 0x5, 0x5)
timer_create(0x1, &(0x7f0000000280)={0x0, 0x3c, 0x2, @thr={&(0x7f0000000100)="b147c0527efe15a0ab66861045188ff12005a70ee6ab05109ca33bd3be629d62ebf72b0630017f9c9cfc10f7d12904647c4204a23d3ad0d44a30af", &(0x7f0000000140)="7c4d7e18c8048420918363100fc680a0604104cb8d6b234a1ebb5240d05a0b3da37439e2cb85139ad9de807eaa0349a2fd33b771796dce229101915e71d900ce7b3801171074e52cba4ed58963453760faf568496de3cbc2cc81b4171d28eb760108cb333dd3233db9642bb210dc50b807a9ad23f1e7d6647f35789840e1acd348e2970921acb0b97c86efaed872885ff4852079b7d2951033eaa4d482a6d7f1f4f5dbae8504c3e9f68b9e500c5e3c351c9b173c2b"}}, &(0x7f00000002c0)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x77359400}}, 0x0)

38.490829945s ago: executing program 5 (id=4345):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_xfrm(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000282ee16a38edb9a10656130001004e72fe9e0437fed2a8995e6100000000c6ae000018000000"], 0x14}}, 0x0)

38.395731203s ago: executing program 5 (id=4347):
chdir(&(0x7f0000000140)='./file1\x00')
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e2400001400050000000000000000000000000000000001080002"], 0x1f0}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000140, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x14b)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040))
chdir(&(0x7f00000001c0)='./bus\x00')
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x11e, 0x2000, 0x0, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./bus\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002c40)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f00000009c0)=0xe8)
r9 = getgid()
r10 = geteuid()
getresgid(&(0x7f0000002e40), &(0x7f0000002e80)=<r11=>0x0, &(0x7f0000002ec0))
syz_fuse_handle_req(r0, &(0x7f0000000a40)="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", 0x2000, &(0x7f0000003040)={&(0x7f0000000300)={0x50, 0xfffffffffffffffe, 0x9, {0x7, 0x2d, 0x8001, 0x0, 0x1, 0x8001, 0x2, 0x9, 0x0, 0x0, 0x20, 0x2}}, &(0x7f0000000480)={0x18, 0x0, 0xffffffff, {0xfffffffffffff209}}, &(0x7f00000004c0)={0x18, 0x0, 0x9, {0xfffffffffffffffa}}, &(0x7f0000000500)={0x18, 0xffffffffffffffda, 0x0, {0x4b}}, &(0x7f0000000540)={0x18, 0x0, 0x6e92, {0xd2}}, &(0x7f0000000580)={0x28, 0x0, 0xd71a, {{0x9, 0xa6, 0x2}}}, &(0x7f00000005c0)={0x60, 0x0, 0x5839ac2b, {{0x3, 0x9, 0x100000000, 0xc4b, 0x9, 0x81, 0x6, 0x7}}}, &(0x7f0000000640)={0x18, 0x0, 0x1, {0x77b00}}, &(0x7f0000000680)={0x12, 0x0, 0x8fa, {']\x00'}}, &(0x7f00000006c0)={0x20, 0xfffffffffffffffe, 0x8, {0x0, 0x10}}, &(0x7f0000000780)={0x78, 0x0, 0x8, {0xffffffff80000001, 0xfffffffa, 0x0, {0x4, 0x1, 0x7fffffff, 0xff, 0x3ff, 0x99, 0x4fa, 0xa0000, 0x6, 0x1000, 0x1, 0x0, 0x0, 0x0, 0xb4}}}, &(0x7f00000008c0)={0x90, 0xfffffffffffffffe, 0x4, {0x3, 0x0, 0x2, 0x400, 0x5, 0x100, {0x6, 0x10001, 0x0, 0x5, 0x0, 0x14, 0x6, 0xda46, 0x8, 0x6000, 0x3, 0x0, r6, 0xca0, 0x1}}}, &(0x7f0000002a40)={0xa8, 0xfffffffffffffffe, 0xff, [{0x1, 0x9, 0x1, 0x5, '#'}, {0x3, 0x6, 0x1, 0x5, ','}, {0x5, 0xb, 0x7, 0x2, 'workdir'}, {0x4, 0xf, 0x0, 0x9}, {0x5, 0x10000, 0x1, 0xb3f, '\x00'}]}, &(0x7f0000002b80)={0xb0, 0xfffffffffffffff5, 0x0, [{{0x3, 0x1, 0x8000, 0x6, 0x6, 0x2, {0x3, 0x401, 0x6, 0x11, 0x100, 0x6, 0x1000, 0x3, 0x10000, 0x4000, 0x9, r7, 0xee00, 0x7cb5, 0x85e1}}, {0x6, 0x3, 0x7, 0x9, 'workdir'}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0x9, {{0x6, 0x0, 0x7, 0x5, 0x4, 0x6, {0x2, 0xfffffffffffffc00, 0x1, 0x80, 0x8000000000000001, 0x7, 0xa70, 0x3, 0x12, 0x4000, 0x100, r8, r9, 0x4f}}, {0x0, 0x10}}}, &(0x7f0000002e00)={0x20, 0x0, 0x8, {0xb02, 0x4, 0xfffffffa, 0x1ea}}, &(0x7f0000002f00)={0x130, 0xfffffffffffffff5, 0x9, {0x1, 0x9, 0x0, '\x00', {0x2000, 0x2, 0x4, 0xad, r10, r11, 0xe91ab2ef9562e86e, '\x00', 0x1, 0xfffffffffffffffd, 0x6, 0x3, {0x5, 0x7}, {0xff, 0xfffffff0}, {0x3ff, 0x80000001}, {0x1, 0x1}, 0x400, 0x5, 0x8, 0x1ff}}}})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

37.530257984s ago: executing program 5 (id=4358):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000040))
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4)
ptrace(0x10, r0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x400, 0x280301)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000380)={{0x8, 0x6, 0x6, 0x7, 'syz1\x00'}, 0x0, 0x10000140, 0x80000001, r0, 0x1, 0x8, 'syz1\x00', &(0x7f0000000340)=['\x00'], 0x1})
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x80000000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
r7 = socket(0x10, 0x3, 0xc)
r8 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0)
ftruncate(r8, 0x51a9497)
write(r7, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2)
r10 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4)
close(r10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="f3420faece66b884000f00d8410fc76980c7442400ee000000c744240200000000ff1c2466baa100ecf2c16e002a48b8ed000000000000000f23d00f21f835200000000f23f80f08b9800000c00f3235000100000f300f13ab09000000", 0x5d}], 0x1, 0xc, 0x0, 0x0)
write$P9_RLERRORu(r9, &(0x7f0000000240)=ANY=[], 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0xffffffffffffffff})

35.348906403s ago: executing program 5 (id=4362):
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2000}, &(0x7f0000000100)=0x8)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab50400000000000000ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r4, &(0x7f0000000040)='\x00\x00', 0x2, 0x4800, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00')
preadv(r7, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0)
ioctl$CDROMVOLCTRL(r7, 0x530a, &(0x7f0000000080)={0x5, 0xe, 0x9, 0x7})
ioctl$CDROMREADAUDIO(r6, 0x5392, &(0x7f0000000000)={@msf={0x7, 0x1, 0x1}, 0x1, 0x0, 0x0})

35.246366748s ago: executing program 39 (id=4362):
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2000}, &(0x7f0000000100)=0x8)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab50400000000000000ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r4, &(0x7f0000000040)='\x00\x00', 0x2, 0x4800, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00')
preadv(r7, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0)
ioctl$CDROMVOLCTRL(r7, 0x530a, &(0x7f0000000080)={0x5, 0xe, 0x9, 0x7})
ioctl$CDROMREADAUDIO(r6, 0x5392, &(0x7f0000000000)={@msf={0x7, 0x1, 0x1}, 0x1, 0x0, 0x0})

29.310710293s ago: executing program 0 (id=4452):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', <r4=>r3, 0x20, 0x0, 0x5, 0xffffff08, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0xb, 0x30, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0x86, [@remote, @rand_addr=0x64010100, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0x10}, {0x7, 0xffff}, {0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000140)='xfs\x00', 0x800, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000000)={'bridge_slave_1\x00', 0x600})
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x3, 0x29, 0x4, 0x2, 0xcc7, 0x8, 0x8d, 0x8, 0xe, 0x2, 0x1, 0x1, 0x1, 0x8026, 0x80, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)

29.037490053s ago: executing program 0 (id=4456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0009ff0f0000000c001473797a3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc010)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r0], 0x24}}, 0x0)

29.037143561s ago: executing program 0 (id=4457):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0) (async, rerun: 32)
io_setup(0x222, &(0x7f0000000180)=<r1=>0x0) (rerun: 32)
io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x5, 0x0, r0, &(0x7f0000000240)="25083c0e596fb4d793855cc3a912cefcd47554fc40959b468e7f930b269f517769f7de9342798159ac2e825db2ae6b862576571cf65ecfe28972af13fc3809288ea255903a400e5c75ab220d03cde1aba5a8f43df46e897310f1f8fc789a8b509ee40c71e78b", 0x66}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}])

28.819154325s ago: executing program 0 (id=4461):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x44}}, 0xc0)
r2 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r2, &(0x7f0000000940)={'#! ', './file0', [{0x20, '/dev/sr0\x00'}]}, 0x15)
syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000087300fec00000000000000000000000000000ff020000000000000000000000000001"], 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf07}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040004}, 0x24040054)

28.770548934s ago: executing program 0 (id=4464):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x7, 0x1, 0x2, 0x1ff, 0xdbfc, 0x4cd0, 0x7ff}, {0x1, 0x18, 0x0, 0x10, 0x8, 0x5eef}]})
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000002c0)="c7442400640000004fc74424020090008d8d1c2426430f780cafb9800000c00f324f0fc71b0f3066baf80cb884468088ef66bafc0cec362ef24b0faef5c4027d58467c0f20e035000400008422e00fc45585ba66b8a0000f00d065670f1b9b00700000", 0x63}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x20008880}}], 0x1, 0x4c054)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')

28.390628589s ago: executing program 0 (id=4472):
r0 = socket$packet(0x11, 0x3, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0xfe, @remote, @local, {[@routing={0x3b, 0x0, 0x1, 0xb5}], {{0x4e24, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) (async)
syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0xfe, @remote, @local, {[@routing={0x3b, 0x0, 0x1, 0xb5}], {{0x4e24, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) (async)

13.009852442s ago: executing program 40 (id=4472):
r0 = socket$packet(0x11, 0x3, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0xfe, @remote, @local, {[@routing={0x3b, 0x0, 0x1, 0xb5}], {{0x4e24, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) (async)
syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0xfe, @remote, @local, {[@routing={0x3b, 0x0, 0x1, 0xb5}], {{0x4e24, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) (async)

2.67980285s ago: executing program 4 (id=4736):
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x11)
socket$xdp(0x2c, 0x3, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
close_range(r1, r2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000003980)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00030000008900000008000320", @ANYRES32=r6, @ANYBLOB="04001d80"], 0x20}}, 0x8040)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

2.53005873s ago: executing program 4 (id=4739):
r0 = gettid()
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x0, 0x300}], 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x4, 0x0, 0x0, @str='!%-\x00'}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r6, &(0x7f0000000040)='\x00', 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x36, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/pid_for_children\x00')

1.742675313s ago: executing program 9 (id=4750):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x80800, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x1)
ioctl$KDGETLED(r1, 0x89f3, 0x0)
write(r0, &(0x7f0000000300)="240000001a005f0214f9f4070d0903ff80000000fe050000000200000800040001000000", 0x24)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x200001e2, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x200001e2, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1.680531228s ago: executing program 4 (id=4751):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40600, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'pimreg0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000004200020025bd7000ffdbdf25000000009f3292928315d141cd02f8575178ed3b27e13359d4b199b02f39f0d211e4be9e36fb8d30b9a0306f3be5e416aa6d87bca6e9fafe7680087504f06e6f653a27ba476d6bbdcb127c7601ef26c97d670d188d68dba6b5b4cad65d2443e52df8e07237652f74f53651bb31deeb92c41aac1940781ee49ed0f7125e81aa95c1622508aaa2d034ca52"], 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x38)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r2, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10)
ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000000)={0x3, 0xc8})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x304)

1.67949799s ago: executing program 2 (id=4752):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="55c182", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socket$packet(0x11, 0x2, 0x300)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x48)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508", 0x22)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0xfffffffc, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x2000, 0x10000, 0x0, 0x0, 0x902, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x20800, 0x0)
ioctl$TIOCGPTPEER(r5, 0x80140912, 0x200000000005)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000600bc1c0a31221f24efcd0f3adb5aab34d41be7d7632c8b3357df7d719575ee4369a5b6feb504dc0252dbec9f56cab7ce06db18757f1628a1f6df35d0cc6b480ad354be43b95196eac3da84055ee4554ca810b432dbf0188a9478e7b1887253f550a6f0b2d3c87ab17721aaa05f6dae5926e56ce0d27be4fcb66ea6cd207cfba300709655182dec6a38be05ff06943dcaec1554df5d3928dd99", @ANYRES64=r6, @ANYBLOB="00022bbd7000020000000200000008006100000000000800400001000000"], 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x24008010)
pipe2(&(0x7f0000000100)={<r8=>0xffffffffffffffff}, 0x0)
sendmsg$802154_dgram(r8, &(0x7f0000000400)={&(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="c1ee01d768b462d7395c5d326b39b5b0452e1ca47860896687d11f08e39c1fa42143f8b1d9d7fc9430e49cbcaa86732176eb055cbf319ee812", 0x39}}, 0x20000040)
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x20, r7, 0x1, 0x70bd2f, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x9, 0x6d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)

1.507398691s ago: executing program 9 (id=4754):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000)=0xff, 0x4)
select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440))
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='[:::/', 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x15}, @remote}}}], 0x20}}, {{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast1}}}], 0x20}}], 0x2, 0x4000800)
r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000240)=0x10)
copy_file_range(r6, 0x0, r6, 0x0, 0xb51, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @local, <r7=>0x0}, &(0x7f00000001c0)=0xc)
sendto$packet(r6, &(0x7f0000000cc0)="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", 0x1000, 0x40800, &(0x7f0000000240)={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @random="cba0a8b57ebe"}, 0x14)

1.506062785s ago: executing program 8 (id=4755):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x81}]}, 0x60}}, 0x8000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001680)={0x1, 0x0, [{0x40000072, 0x0, 0x3}]})
r4 = signalfd(r0, &(0x7f0000000000)={[0x10]}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f0000000080)={0x1d, r5}, 0x10)

1.505863178s ago: executing program 4 (id=4756):
r0 = gettid()
r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@default, @bcast, @netrom, @default, @netrom, @netrom, @netrom, @bcast]}, &(0x7f00000002c0)=0x48, 0x80000)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0xfff, 0x0, 0x8001, 0x17, 0x2, <r2=>r0})
fcntl$setownex(r1, 0xf, &(0x7f0000000300)={0x1, r2})
memfd_secret(0x80000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
r4 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={<r5=>r3, &(0x7f0000000000)='}\x00', 0x40040, &(0x7f0000000040)={@align=0x2, {0x3, 0x9, 0x7fffffff, 0x4}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x7})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x5, 0x5, 0x6, 0x3b}]}, 0x10)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000000)={0x1})
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000200))

1.367730564s ago: executing program 4 (id=4757):
r0 = socket(0x10, 0x3, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x40000080, 0x80000000000d, 0x1, 0x0, 0x0, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f"], 0xb4}}, 0x0)

1.365397956s ago: executing program 9 (id=4758):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x5ba8aec43a755617, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4310}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c040)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8000}}, 0x20000000, 0xfffff041, 0xe0d, 0x7a62, 0xaa}, &(0x7f0000000180)=0x98)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r2, 0xfffffffa}, 0x8)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff0400000076c100000000000001010000000000000d0000000000000006000000000000000000000000000000000000000000001000000000000000000000030003000000830500000000000034040000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/320])
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', <r5=>0x0})
r6 = inotify_init()
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000340)={'team0\x00', <r9=>0x0})
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r9}, 0xc)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r9}, 0xc)
r10 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59)
fcntl$setlease(r10, 0x400, 0x1)
fcntl$setlease(r10, 0x400, 0x2)
setsockopt$MRT_ASSERT(r10, 0x0, 0xcf, &(0x7f0000000300)=0x1, 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r5}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000175626bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000110b00004000128009000100626f6e6400000000300002800c001f"], 0x60}, 0x1, 0x0, 0x0, 0x200008c4}, 0x4c860)

1.240547589s ago: executing program 8 (id=4759):
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x29, 0x4, 0x40, 0x4, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x700, 0x7800, 0x7, 0x101}})

1.160049937s ago: executing program 8 (id=4760):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]})
close_range(r4, 0xffffffffffffffff, 0x0) (async)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
getdents(r5, &(0x7f0000000100)=""/24, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010003000000fbdbdf25f8a5df7afd8f250004000e0001006e6574647d7673696d0000000f0002006e657464657673696d1e0000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60009400", @ANYRES16=r7, @ANYBLOB="000228bd7000fedbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x24004000)

1.080077508s ago: executing program 8 (id=4761):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3", 0x7)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

948.635742ms ago: executing program 9 (id=4762):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000000))
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_QUERYBUF(r1, 0xc0186f3d, &(0x7f0000000440)={0x7, 0xfffffffe, 0x100, 0x626, 0x8, 0x7263e561})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000500)=@attr_other={0x0, 0x2, 0x9c, &(0x7f00000004c0)=0x3}) (async)
write$6lowpan_control(r1, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000a00)={0x0, &(0x7f0000000580)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x10000, 0x3, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5f}}, @code={0xa, 0x77, {"b9170b0000b8c57128b9baefae59180f30c744240000380000c7442402021185f0c7442406000000000f011c24450f019fca331b05c46195e0e4b939060000b823000000ba000000000f300fc72ac40105d4747fea0f01df66440fe20ec42279598b0f000000"}}, @uexit={0x0, 0x18, 0x40000000400}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x9178, 0x4}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x92, 0x2, 0xffffffffffffffff, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x9067}}, @in_dx={0x69, 0x20, {0x6b2, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x4, 0x8, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x8d, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0xdedd}}, @nested_load_syzos={0x136, 0x40, {0x1, 0x5, [@set_irq_handler={0xc8, 0x20, {0x55}}]}}, @out_dx={0x6a, 0x28, {0xbead, 0x3, 0x7e76}}, @nested_load_syzos={0x136, 0xf8, {0x3, 0xff, [@nested_amd_invlpga={0x17d, 0x20, {0x10000, 0x713f}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x1b, 0x6, 0x9ff, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x4, 0xfffffffffffffff9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xb6, 0x5, 0x3, 0x783b}}]}}, @in_dx={0x69, 0x20, {0x5ce5, 0x2}}, @out_dx={0x6a, 0x28, {0xca90, 0x4, 0x3}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa, 0xd, 0xfffffffffffffff9, 0x8}}, @nested_vmresume={0x130, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x632e, 0x5}}], 0x457}) (async)
connect$tipc(r1, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x2}}, 0x10) (async)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000a80)={{0xa, 0x4e21, 0x1, @empty, 0xdb}, {0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80000000}, 0xffffffffffffffff, {[0xa, 0xfff, 0x9, 0x9, 0x2, 0x80000001, 0x8, 0x614]}}, 0x5c)
ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000c00)={<r4=>r1, &(0x7f0000000b00)='connect aa:aa:aa:aa:aa:10 2', 0x22000, &(0x7f0000000b40)={@_ha_fsid={[0x65, 0x3]}, {0x4, 0x40, 0x200, 0x1}}, 0x8, &(0x7f0000000b80), &(0x7f0000000bc0)=0x1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000c40)={0x0, <r5=>0x0})
prlimit64(r5, 0x9, &(0x7f0000000cc0)={0x4, 0xb}, &(0x7f0000000d00)) (async)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000d40)=0xffffffff, 0x4) (async)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000d80), 0x4) (async)
shutdown(r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000dc0)=0x1, 0x0, 0x4)
r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r6, &(0x7f0000000e00)="446db15f03cb517c484d5b797316e6acd9b9eb619b095abb638aac4d39d7e2bfdf6e0d6dcd95ca5a10eabf82d3299bfe2906af807d028c18541ec1c9879ac91991727f3813428a6e8fdb4f12aad27b7c5f0280b1c3cf2aa266f7d462e0da2aff88db9319d74d48fa163aeb18ccb213e339d262f2bff2164bccd22140cee00749240c127640baa0d56afc15af62aa52cf0171937041e239869757124cdd15d3344dfbd9b1a380fa4e1567", 0xaa)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200240, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
syz_open_dev$sndpcmp(&(0x7f0000000f00), 0x6, 0x400000) (async)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000f40), 0x10000, 0x400000)
mmap(&(0x7f0000f6f000/0x2000)=nil, 0x2000, 0x8, 0x50, r8, 0x936e5000) (async)
r9 = creat(&(0x7f0000000f80)='./file0\x00', 0x100)
close(r9)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r7, 0x6430) (async)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000fc0)={0x13, 0x2, 0x3e}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x640240, 0x0)

948.197876ms ago: executing program 2 (id=4763):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) (async, rerun: 32)
r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12)

868.397861ms ago: executing program 9 (id=4764):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r2, 0x118, 0x4, 0x0, &(0x7f00000003c0)=0xffffffffffffffb2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x1a, 0x0, 0x0)
setitimer(0x2, 0x0, &(0x7f0000000180))
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="e8d76de947a63f1ed9f7639cb9f58e6ef1713ccbf7bfdbdeb99df9cc01ff6d032ca60e5970c9bd80996e6b7e005982d83d12cd0f19c3e83ac3e39bb1975dff16b89ad0d58a7e05eba69e77573598b64a8e01d5ff16213cb7f7de658a72e2503f681cd14b20e03d65c4e196ebb47f1307", 0x70, 0x4040095, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000580)=@vmx={0x108, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

868.073963ms ago: executing program 2 (id=4765):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r5, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, 0x0, 0x0, &(0x7f0000002400)=[{0x30, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588"}, {0x10, 0x114, 0x3}], 0x40}, 0x40000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x67}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff9, 0xf}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x48040)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100037040000000000000000000000005fdcda2fc8afb54143ea7d19ba83ed500fcd3fc2ae241d333595688baa9e2fc3ffcb62f18a4a96e6e4e4e115d57ff7b01452180ae2719a2bb1eb42c33b8fc8cd8322d10a960a872a54b6003ff6f03bf31cf44de7f51211b2a42e386855f76ee4cec42ebd", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000500ffffffff"], 0x3c}}, 0x0)

780.459826ms ago: executing program 2 (id=4766):
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x100)
statx(r0, &(0x7f0000000000)='./bus\x00', 0x6000, 0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$tmpfs(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000ec0), 0x2010008, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}], [{@fowner_lt={'fowner<', r1}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@dont_hash}]})

779.939672ms ago: executing program 2 (id=4767):
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/86)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x10000000, 0x7fffffff, 0x3, 0x89c, 0x8000000000}, {0x1, 0xfffffff2, 0x9, 0x0, 0x7ff, 0xc}], ['\x00', '\x00', '\x00']})
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x280400, 0x0, 0x1c}, 0x18)
r1 = open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x80000)
r2 = syz_clone(0x10c300, &(0x7f00000002c0)="102d5a3ddeda3ba8cc29ec3dc9e65bf77044f7437cf33034276f9f1fc0e578e510660a75f16a0889ad573bab1e3a5e9c4295b70948883ce9314680b1f1573f4bbc63472596d43377e29929590e5fc9b679c99ef888653988b876eb99ee4c098d4069aa047758c2dd99aba616e1be8ac99e76f1a002c0da9ed83affab043463ff77444f39e482d172a264cbe3", 0x8c, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="03e7bf8ef53b48931b26f4c532b62a9ceb877f6039837ca795e2b43bfc5ccb2b524a014a3ede848bf1bad3ead4a65fefdbf96d080a6688284e735f3df40e1039b7119f1871e46a2c123d40d82b8946541f718001c2925d58503e929f52f28abdb2aba5a5ab79b8efd9852f72ee3097c8c259837384005691c56067c314")
pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0xa35adb4dfabb8ccc)
write$P9_RSTATFS(r3, &(0x7f00000004c0)={0x43, 0x9, 0x2, {0x8000, 0x1000, 0x339, 0x800, 0x0, 0x3, 0xc, 0xcb, 0x2000}}, 0x43)
r4 = open$dir(&(0x7f0000000540)='./file0\x00', 0x4080, 0x20)
unlinkat(r4, &(0x7f0000000580)='./file0\x00', 0x0)
ptrace(0x8, r2)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f00000005c0)={0x25000, 0x10c000})
setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x0)
recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f00000006c0)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/13, 0xd}, {&(0x7f0000000780)=""/5, 0x5}, {&(0x7f00000007c0)=""/29, 0x1d}], 0x3}, 0x40)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sigaltstack(&(0x7f0000000940)={&(0x7f0000000880)=""/169, 0x80000001, 0xa9}, &(0x7f0000000a00)={&(0x7f0000000980)=""/91, 0x0, 0x5b})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000a40)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)='#}\x00', 0x0)
fcntl$setown(r5, 0x8, r2)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000b00), 0x2)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000b80)={0x0, &(0x7f0000000b40)})
ioctl$IMGETVERSION(r7, 0x80044942, &(0x7f0000000bc0))
creat(&(0x7f0000000c00)='./file0\x00', 0x30)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000c40)={0x0, 0xea60}, 0x10)
r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x6c47beb7159855b8, &(0x7f0000000cc0)=""/230, &(0x7f0000000dc0)=0xe6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000e80)={0x9, &(0x7f0000000e00)=[{0x8, 0x7, 0x6, 0x1}, {0x2, 0xc, 0x1, 0x408}, {0xf, 0xae, 0x2, 0x6}, {0x7, 0x3, 0x1, 0x7ff}, {0x2, 0x3, 0x8, 0x1}, {0x7ff, 0x8, 0x8, 0x4}, {0xfffe, 0x5, 0x8, 0xe054}, {0x2, 0x1, 0x7f, 0xffffffff}, {0x1ff, 0xf7, 0x0, 0x6}]})
io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f0000000ec0)="f3462470ecc44eab8c03c5be2872c41fdbb956a4b847753adea41957a0441d0e9acd20537e48594b1f0a45e5c62feb7c59b178482310042692", 0x39)

710.081035ms ago: executing program 9 (id=4768):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r0 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x0, 0x400) (rerun: 32)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x1})
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000280)=[{0x20, '\x00', @data=0xfff, 0x2}]})
r3 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) (async)
r4 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000180), 0x43)
preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, 0x205, 0x0)

430.610067ms ago: executing program 4 (id=4769):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f00000008c0)=""/185, 0xb9}, {&(0x7f00000024c0)=""/4092, 0xffc}, {&(0x7f0000000b80)=""/66, 0x42}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x4040008)

119.318142ms ago: executing program 8 (id=4770):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x16d, 0x0, &(0x7f0000000140)="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", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

293.318µs ago: executing program 8 (id=4771):
r0 = semget$private(0x0, 0x20000000102, 0x2c0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x81])
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xfffe}, {0x3, 0x0, 0x1000}], 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x991)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
semctl$IPC_RMID(r0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1)
semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f00000002c0)=""/131)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000190100950000000000c0ff000000000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=0x1, @ANYRES32=r7, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="c2ba0a00a663154a736540121c28b57e20db7f7490437d5336b45cdd587a6b431268c1f18aaad23f780f087c1ed9b15d2b6c4476b31b7bcd7680777f628c78d59b14773beb9d19e0bb902630000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[])

0s ago: executing program 2 (id=4772):
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x2, 0x7, 0x302, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44014)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')

kernel console output (not intermixed with test programs):

:  denied  { create } for  pid=20305 comm="syz.8.3915" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  420.142823][T20310] fuse: Unknown parameter '�0x0000000000000003'
[  420.146608][   T40] audit: type=1400 audit(2000000164.329:19421): avc:  denied  { mounton } for  pid=20305 comm="syz.8.3915" path="/277/file0" dev="tmpfs" ino=1491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  420.192110][T20315] program syz.5.3916 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  420.196515][T20315] ata1.00: invalid transfer count 0
[  420.201413][ T5940] Bluetooth: hci3: unexpected event for opcode 0x2006
[  420.226812][   T40] audit: type=1400 audit(2000000164.409:19422): avc:  denied  { unlink } for  pid=15201 comm="syz-executor" name="file0" dev="tmpfs" ino=1491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  420.331269][T20327] loop6: detected capacity change from 0 to 524288000
[  420.345617][   T40] audit: type=1400 audit(2000000164.529:19423): avc:  denied  { name_bind } for  pid=20326 comm="syz.6.3920" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  420.490358][T20340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20340 comm=syz.8.3924
[  420.540837][T20342] fuse: blksize only supported for fuseblk
[  420.632167][T20346] syzkaller0: entered promiscuous mode
[  420.632872][   T40] audit: type=1400 audit(2000000164.819:19424): avc:  denied  { read } for  pid=20348 comm="syz.6.3928" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  420.634637][T20346] syzkaller0: entered allmulticast mode
[  420.651761][   T40] audit: type=1400 audit(2000000164.819:19425): avc:  denied  { open } for  pid=20348 comm="syz.6.3928" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  420.687705][   T40] audit: type=1400 audit(2000000164.869:19426): avc:  denied  { relabelfrom } for  pid=20343 comm="syz.5.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  420.693092][T20346] openvswitch: netlink: IP tunnel dst address not specified
[  420.696412][   T40] audit: type=1400 audit(2000000164.869:19427): avc:  denied  { relabelto } for  pid=20343 comm="syz.5.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  420.696460][   T40] audit: type=1400 audit(2000000164.879:19428): avc:  denied  { block_suspend } for  pid=20348 comm="syz.6.3928" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  421.026472][   T40] audit: type=1804 audit(2000000165.209:19429): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.3929" name="/newroot/267/file0" dev="tmpfs" ino=1430 res=1 errno=0
[  421.489473][T20348] delete_channel: no stack
[  421.601781][ T5981] libceph: connect (1)[c::]:6789 error -101
[  421.604252][ T5981] libceph: mon0 (1)[c::]:6789 connect error
[  421.697870][T20370] ceph: No mds server is up or the cluster is laggy
[  422.971388][T20376] geneve4: entered promiscuous mode
[  422.973682][T20376] geneve4: entered allmulticast mode
[  422.976453][ T8125] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  422.983280][T20379] vlan0: entered allmulticast mode
[  422.985603][T20379] veth0_vlan: entered allmulticast mode
[  422.989003][T20384] bridge0: Device is already in use.
[  422.992490][ T8125] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  422.997927][ T8125] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  423.001685][ T8125] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  423.095376][T20401] netlink: 'syz.8.3938': attribute type 16 has an invalid length.
[  423.099889][T20401] netlink: 'syz.8.3938': attribute type 17 has an invalid length.
[  423.153242][T20404] netlink: 193452 bytes leftover after parsing attributes in process `syz.8.3938'.
[  423.158165][T20401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  423.177728][T20406] fuse: Bad value for 'user_id'
[  423.180153][T20406] fuse: Bad value for 'user_id'
[  423.185184][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3941'.
[  423.198560][T20406] hsr_slave_0: left promiscuous mode
[  423.201706][T20406] hsr_slave_1: left promiscuous mode
[  423.237291][T20408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.269403][T20400] delete_channel: no stack
[  423.278581][T20411] 9pnet_virtio: no channels available for device syz
[  423.340414][T20415] ip6gretap1: entered promiscuous mode
[  423.343111][T20415] ip6gretap1: entered allmulticast mode
[  423.762010][T20443] binder: 20441:20443 ioctl c0306201 200000000080 returned -14
[  423.842793][T20446] team_slave_0: entered promiscuous mode
[  423.845527][T20446] team_slave_1: entered promiscuous mode
[  423.851364][T20446] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  423.875180][T20446] netfs: Couldn't get user pages (rc=-14)
[  424.433939][T20452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.494275][T20455] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3957'.
[  424.567657][ T8133] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.572433][ T8133] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.579644][ T8133] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  424.591547][   T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  424.599856][   T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  424.604021][   T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  424.610268][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  424.613719][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  424.618210][T20443] orangefs_mount: mount request failed with -4
[  424.656633][T20464] blktrace: Concurrent blktraces are not allowed on nullb0
[  424.677236][ T8133] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.681856][ T8133] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.686468][ T8133] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  424.699037][T20466] : entered promiscuous mode
[  424.791515][ T8133] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.796148][ T8133] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.802297][ T8133] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  424.890004][T20459] chnl_net:caif_netlink_parms(): no params data found
[  424.894403][   T63] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1
[  424.894765][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3962'.
[  424.925012][ T8133] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.931115][ T8133] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.935698][ T8133] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  424.968976][T20480] binder: 20479:20480 ioctl c0306201 200000000680 returned -14
[  425.036617][T20459] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.040763][T20459] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.043972][T20459] bridge_slave_0: entered allmulticast mode
[  425.048735][T20459] bridge_slave_0: entered promiscuous mode
[  425.055078][T20459] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.058621][T20459] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.061863][T20459] bridge_slave_1: entered allmulticast mode
[  425.065864][T20459] bridge_slave_1: entered promiscuous mode
[  425.090699][T20459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.098245][T20459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.117078][T20459] team0: Port device team_slave_0 added
[  425.120872][T20459] team0: Port device team_slave_1 added
[  425.179157][T20459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.182261][T20459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.192102][T20459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.213771][T20459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.216485][T20459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.228003][T20459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.324807][T20459] hsr_slave_0: entered promiscuous mode
[  425.330281][T20459] hsr_slave_1: entered promiscuous mode
[  425.332770][T20459] debugfs: 'hsr0' already exists in 'hsr'
[  425.335167][T20459] Cannot create hsr debugfs directory
[  425.343166][ T8133] bridge_slave_1: left allmulticast mode
[  425.345630][ T8133] bridge_slave_1: left promiscuous mode
[  425.348873][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.354169][ T8133] bridge_slave_0: left allmulticast mode
[  425.356629][ T8133] bridge_slave_0: left promiscuous mode
[  425.359958][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.383662][ T8133] veth0_to_bond: left allmulticast mode
[  425.385521][ T8133] veth0_to_bond: left promiscuous mode
[  425.387991][ T8133] bridge3: port 2(veth0_to_bond) entered disabled state
[  425.392750][ T8133] veth9: left allmulticast mode
[  425.394963][ T8133] veth9: left promiscuous mode
[  425.397725][ T8133] bridge3: port 1(veth9) entered disabled state
[  425.492223][T20492] trusted_key: syz.9.3967 sent an empty control message without MSG_MORE.
[  425.545326][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  425.545343][   T40] audit: type=1400 audit(2000000169.729:19439): avc:  denied  { connect } for  pid=20491 comm="syz.9.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  425.741398][ T8133] bond6 (unregistering): (slave xfrm2): Releasing backup interface
[  425.744989][ T8133] xfrm2 (unregistering): left promiscuous mode
[  425.821719][ T8133] gretap0 (unregistering): left promiscuous mode
[  426.172830][ T8133] bond0 (unregistering): left promiscuous mode
[  426.176357][ T8133] bond_slave_0: left promiscuous mode
[  426.179241][ T8133] bond_slave_1: left promiscuous mode
[  426.181678][ T8133] batadv0: left promiscuous mode
[  426.190447][ T8133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.225213][ T8133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.279892][ T8133] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  426.328925][ T8133] bond0 (unregistering): Released all slaves
[  426.339477][ T8133] bond1 (unregistering): Released all slaves
[  426.353246][ T8133] bond2 (unregistering): Released all slaves
[  426.364533][ T8133] bond3 (unregistering): Released all slaves
[  426.375529][ T8133] bond4 (unregistering): Released all slaves
[  426.387944][T20502] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3970'.
[  426.393190][ T8133] bond5 (unregistering): (slave dummy0): Releasing backup interface
[  426.430140][ T8133] bond5 (unregistering): Released all slaves
[  426.442420][ T8133] bond6 (unregistering): Released all slaves
[  426.452493][T20502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=20502 comm=syz.8.3970
[  426.550443][ T8133] tipc: Disabling bearer <eth:veth0_macvtap>
[  426.559779][ T8133] tipc: Left network mode
[  426.567291][T20508] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3971'.
[  426.707470][   T63] Bluetooth: hci2: command tx timeout
[  426.905394][   T40] audit: type=1400 audit(2000000171.089:19440): avc:  denied  { connect } for  pid=20518 comm="syz.8.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  426.915174][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3974'.
[  426.976594][T20525] fuse: Unknown parameter 'nd'
[  427.280578][ T8133] hsr_slave_0: left promiscuous mode
[  427.283718][ T8133] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.292487][ T8133] team_slave_0: left promiscuous mode
[  427.295504][ T8133] team_slave_1: left promiscuous mode
[  427.298142][ T8133] veth1_macvtap: left promiscuous mode
[  427.300765][ T8133] veth1_vlan: left promiscuous mode
[  427.303251][ T8133] veth0_vlan: left promiscuous mode
[  427.334587][T20541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=20541 comm=syz.9.3979
[  427.442131][ T8133] team0 (unregistering): Port device team_slave_1 removed
[  427.449886][ T8133] team0 (unregistering): Port device team_slave_0 removed
[  427.738328][T20565] syz_tun: entered allmulticast mode
[  427.740670][T20565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3985'.
[  427.740774][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3985'.
[  427.756652][T20565] syz_tun (unregistering): left allmulticast mode
[  427.761464][T20565] bond0: (slave syz_tun): Releasing backup interface
[  427.868666][T20580] syzkaller0: entered promiscuous mode
[  427.870376][T20572] XFS (nullb0): Invalid superblock magic number
[  427.871103][T20580] syzkaller0: entered allmulticast mode
[  427.903668][T20581] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  427.956588][T20580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.016064][T20578] tipc: Resetting bearer <eth:syzkaller0>
[  428.032130][T20578] tipc: Disabling bearer <eth:syzkaller0>
[  428.111924][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3988'.
[  428.124460][ T8133] IPVS: stop unused estimator thread 0...
[  428.310245][T20459] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  428.319118][T20459] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  428.324092][T20459] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  428.335922][T20459] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  428.424636][T20459] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.437670][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3991'.
[  428.441128][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3991'.
[  428.448809][T20614] gretap0: entered promiscuous mode
[  428.451238][T20614] gretap0: left promiscuous mode
[  428.462368][T20459] 8021q: adding VLAN 0 to HW filter on device team0
[  428.473875][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.476643][ T8125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.480792][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.483166][ T8125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.641324][T20459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.662592][T20629] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  428.666116][T20629] SELinux: failed to load policy
[  428.671915][T20459] veth0_vlan: entered promiscuous mode
[  428.680480][T20459] veth1_vlan: entered promiscuous mode
[  428.695197][T20459] veth0_macvtap: entered promiscuous mode
[  428.703440][T20459] veth1_macvtap: entered promiscuous mode
[  428.718203][T20459] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.730932][T20459] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.743404][   T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.748668][   T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.752833][   T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.757766][   T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.777597][   T63] Bluetooth: hci2: command tx timeout
[  428.815711][   T40] audit: type=1400 audit(2000000172.999:19441): avc:  denied  { audit_write } for  pid=20634 comm="syz.8.3994" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  428.866172][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.877446][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.909520][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.912990][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.932778][   T40] audit: type=1400 audit(2000000173.119:19442): avc:  denied  { mounton } for  pid=20459 comm="syz-executor" path="/syzkaller.CbfK9h/syz-tmp" dev="sda1" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  428.955441][   T40] audit: type=1400 audit(2000000173.119:19443): avc:  denied  { mounton } for  pid=20459 comm="syz-executor" path="/syzkaller.CbfK9h/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  428.967945][   T40] audit: type=1400 audit(2000000173.119:19444): avc:  denied  { mounton } for  pid=20459 comm="syz-executor" path="/syzkaller.CbfK9h/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=97317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  428.980491][   T40] audit: type=1400 audit(2000000173.139:19445): avc:  denied  { mounton } for  pid=20459 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  428.991748][   T40] audit: type=1400 audit(2000000173.139:19446): avc:  denied  { mount } for  pid=20459 comm="syz-executor" name="/" dev="gadgetfs" ino=6889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  429.059914][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3956'.
[  429.226909][ T5981] usb 13-1: new high-speed USB device number 15 using dummy_hcd
[  429.270924][   T40] audit: type=1400 audit(2000000173.459:19447): avc:  denied  { map } for  pid=20673 comm="syz.5.4000" path="socket:[95147]" dev="sockfs" ino=95147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  429.281954][   T40] audit: type=1400 audit(2000000173.459:19448): avc:  denied  { accept } for  pid=20673 comm="syz.5.4000" path="socket:[95147]" dev="sockfs" ino=95147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  429.409329][ T5981] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.412971][ T5981] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.416571][ T5981] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  429.421824][ T5981] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  429.425595][ T5981] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.438762][ T5981] usb 13-1: config 0 descriptor??
[  429.745953][T20721] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4010'.
[  429.752058][T20721] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4010'.
[  429.764412][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4010'.
[  429.846950][ T5981] hid_parser_main: 1 callbacks suppressed
[  429.846969][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.858422][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.861721][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.868484][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.873961][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.886848][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.890263][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.896059][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.901006][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.904382][ T5981] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  429.918252][ T5981] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  430.109737][   T24] usb 13-1: USB disconnect, device number 15
[  430.667371][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  430.667383][   T40] audit: type=1400 audit(2000000174.859:19450): avc:  denied  { nlmsg_read } for  pid=20763 comm="syz.8.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  430.681856][T20764] fuse: Bad value for 'fd'
[  430.818231][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4018'.
[  430.822063][T20772] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4018'.
[  430.841892][T20772] erspan0: entered promiscuous mode
[  430.861281][   T63] Bluetooth: hci2: command tx timeout
[  430.863526][   T40] audit: type=1400 audit(2000000175.049:19451): avc:  denied  { remove_name } for  pid=20771 comm="syz.8.4018" name="file1" dev="9p" ino=78905407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  430.871987][   T40] audit: type=1400 audit(2000000175.049:19452): avc:  denied  { unlink } for  pid=20771 comm="syz.8.4018" name="file1" dev="9p" ino=78905407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  431.383558][T20787] ata1.00: invalid cdb length 6
[  431.846168][T20798] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) !
[  432.107463][T20817] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  432.151581][T20826] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4032'.
[  432.318853][   T63] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  432.524683][   T40] audit: type=1326 audit(2000000176.709:19453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20836 comm="syz.0.4034" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc11bf9c799 code=0x0
[  432.762390][T20848] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  432.831839][T20856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4042'.
[  432.947075][   T63] Bluetooth: hci2: command tx timeout
[  433.027693][T20869] comedi comedi1: board detection failed
[  433.038581][T20870] Option 'Í'M•O§±' to dns_resolver key: bad/missing value
[  433.158691][T20884] netlink: 'syz.9.4051': attribute type 10 has an invalid length.
[  433.441177][   T40] audit: type=1400 audit(2000000177.629:19454): avc:  denied  { create } for  pid=20904 comm="syz.5.4057" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  433.449411][T20905] 9pnet_virtio: no channels available for device syz
[  433.454513][T20905] __nla_validate_parse: 3 callbacks suppressed
[  433.454526][T20905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4057'.
[  433.466130][T20905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4057'.
[  433.537865][T20905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4057'.
[  433.543683][T20905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4057'.
[  433.669776][T20905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4057'.
[  433.673944][T20905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4057'.
[  433.821541][   T40] audit: type=1400 audit(2000000178.009:19455): avc:  denied  { connect } for  pid=20916 comm="syz.9.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  433.874647][   T40] audit: type=1400 audit(2000000178.059:19456): avc:  denied  { listen } for  pid=20916 comm="syz.9.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  433.895164][   T40] audit: type=1400 audit(2000000178.079:19457): avc:  denied  { accept } for  pid=20916 comm="syz.9.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  433.936249][   T63] Bluetooth: hci0: unexpected event for opcode 0x080b
[  433.936308][T20918] netlink: 'syz.9.4061': attribute type 23 has an invalid length.
[  433.942682][T20918] IPv6: NLM_F_CREATE should be specified when creating new route
[  433.945747][T20918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  433.948839][T20918] IPv6: NLM_F_CREATE should be set when creating new route
[  433.999038][   T40] audit: type=1400 audit(2000000178.189:19458): avc:  denied  { read } for  pid=20928 comm="syz.5.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  434.056339][   T40] audit: type=1400 audit(2000000178.239:19459): avc:  denied  { bind } for  pid=20928 comm="syz.5.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  434.065787][T20933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4062'.
[  434.083683][T20936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4067'.
[  434.241555][T20952] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.4070'.
[  434.248395][T20952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4070'.
[  435.501463][T21002] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  435.608625][T21013] overlayfs: unescaped trailing colons in lowerdir mount option.
[  435.623066][T21015] ubi31: attaching mtd0
[  435.631301][T21015] ubi31: scanning is finished
[  435.633616][T21015] ubi31: empty MTD device detected
[  435.704158][T21020] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  435.709459][T21020] tipc: Started in network mode
[  435.711797][T21020] tipc: Node identity ca6567e61e8d, cluster identity 4711
[  435.714737][T21020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.720117][T21020] syzkaller0: entered promiscuous mode
[  435.722567][T21020] syzkaller0: entered allmulticast mode
[  435.730865][T21020] tipc: Resetting bearer <eth:syzkaller0>
[  435.738198][T21018] tipc: Resetting bearer <eth:syzkaller0>
[  435.758067][T21018] tipc: Disabling bearer <eth:syzkaller0>
[  435.776930][T21015] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  435.780274][T21015] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  435.783361][T21015] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  435.789863][T21015] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  435.793525][T21015] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  435.796499][T21015] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  435.799710][T21015] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2446507590
[  435.803297][T21015] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  435.809237][T21022] ubi31: background thread "ubi_bgt31d" started, PID 21022
[  435.961203][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  435.961218][   T40] audit: type=1400 audit(2000000180.149:19467): avc:  denied  { name_bind } for  pid=21036 comm="syz.5.4099" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  436.201706][T21059] "syz.8.4104" (21059) uses obsolete ecb(arc4) skcipher
[  436.257458][T21067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=21067 comm=syz.8.4104
[  436.266195][T21067] kvm: pic: non byte read
[  436.513781][   T40] audit: type=1326 audit(2000000180.699:19468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8a99c799 code=0x7ffc0000
[  436.523722][   T40] audit: type=1326 audit(2000000180.699:19469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8a99c799 code=0x7ffc0000
[  436.534040][   T40] audit: type=1326 audit(2000000180.709:19470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c8a99c42b code=0x7ffc0000
[  436.544589][   T40] audit: type=1326 audit(2000000180.709:19471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c8a99c42b code=0x7ffc0000
[  436.555637][   T40] audit: type=1326 audit(2000000180.709:19472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c8a99c42b code=0x7ffc0000
[  436.565421][   T40] audit: type=1326 audit(2000000180.709:19473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c8a99c42b code=0x7ffc0000
[  436.575246][   T40] audit: type=1326 audit(2000000180.709:19474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c8a99c42b code=0x7ffc0000
[  436.585100][   T40] audit: type=1326 audit(2000000180.709:19475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c8a99c42b code=0x7ffc0000
[  436.595051][   T40] audit: type=1326 audit(2000000180.709:19476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.4106" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c8a99c42b code=0x7ffc0000
[  436.963863][T21107] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  437.392464][T20042] Bluetooth: hci0: unexpected event for opcode 0x0c25
[  437.407033][ T5940] Bluetooth: hci0: Opcode 0x0c1a failed: -112
[  437.410545][T21149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=21149 comm=syz.0.4125
[  437.469503][T21153] evm: overlay not supported
[  437.503981][T21157] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  437.507840][T21153] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  437.534089][T21153] /dev/sr0: Can't open blockdev
[  437.538137][T21157] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  437.926847][T13162] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  438.078068][T13162] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  438.081745][T13162] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  438.085396][T13162] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  438.110289][T13162] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  438.114257][T13162] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.117974][T13162] usb 10-1: Product: syz
[  438.119865][T13162] usb 10-1: Manufacturer: syz
[  438.121952][T13162] usb 10-1: SerialNumber: syz
[  438.140239][T13162] hub 10-1:1.0: bad descriptor, ignoring hub
[  438.142909][T13162] hub 10-1:1.0: probe with driver hub failed with error -5
[  438.217953][T20042] Bluetooth: hci2: command 0x0405 tx timeout
[  438.227929][T21198] delete_channel: no stack
[  438.344493][T13162] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  438.519131][T21219] netlink: 'syz.9.4149': attribute type 39 has an invalid length.
[  438.702744][T21230] __nla_validate_parse: 16 callbacks suppressed
[  438.702756][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'.
[  438.702784][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'.
[  438.704919][T21230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4152'.
[  438.709176][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4152'.
[  438.718694][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'.
[  438.719856][   T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  438.721536][   T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  438.724054][T21230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4152'.
[  438.728073][   T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  438.741443][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'.
[  438.741984][   T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.745151][T21231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4152'.
[  438.867194][T21242] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4157'.
[  439.062873][T21258] netlink: 'syz.0.4156': attribute type 11 has an invalid length.
[  439.099954][T21260] IPVS: length: 28 != 24
[  439.103194][T21260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4162'.
[  439.125224][T21262] openvswitch: netlink: EtherType 50a is less than min 600
[  439.237046][T21181] usb 10-1: reset high-speed USB device number 29 using dummy_hcd
[  439.417255][T20042] Bluetooth: hci0: command 0x0c1a tx timeout
[  439.419781][ T5940] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  439.474587][T21274] netlink: 'syz.8.4165': attribute type 12 has an invalid length.
[  439.650249][ T1335] usb 10-1: USB disconnect, device number 29
[  439.662509][ T1335] usblp0: removed
[  439.897114][T15515] usb 13-1: new high-speed USB device number 16 using dummy_hcd
[  440.066936][T15515] usb 13-1: Using ep0 maxpacket: 8
[  440.073287][T15515] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  440.078339][T15515] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  440.082986][T15515] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  440.088211][T15515] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  440.093942][T15515] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  440.097841][T15515] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.102560][T21296] Bluetooth: MGMT ver 1.23
[  440.120908][T21294] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  440.123884][T21294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  440.139099][T21294] vhci_hcd vhci_hcd.0: Device attached
[  440.151967][T21297] vhci_hcd: connection closed
[  440.152392][   T46] vhci_hcd vhci_hcd.9: stop threads
[  440.157537][   T46] vhci_hcd vhci_hcd.9: release socket
[  440.159989][   T46] vhci_hcd vhci_hcd.9: disconnect device
[  440.311288][T15515] usb 13-1: GET_CAPABILITIES returned 0
[  440.313760][T15515] usbtmc 13-1:16.0: can't read capabilities
[  440.520363][T21316] FAULT_INJECTION: forcing a failure.
[  440.520363][T21316] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  440.526353][ T6003] usb 13-1: USB disconnect, device number 16
[  440.527280][T21316] CPU: 0 UID: 0 PID: 21316 Comm: syz.5.4176 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.527308][T21316] Tainted: [L]=SOFTLOCKUP
[  440.527315][T21316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  440.527325][T21316] Call Trace:
[  440.527333][T21316]  <TASK>
[  440.527340][T21316]  dump_stack_lvl+0x100/0x190
[  440.527384][T21316]  should_fail_ex.cold+0x5/0xa
[  440.527407][T21316]  _copy_to_user+0x32/0xd0
[  440.527441][T21316]  simple_read_from_buffer+0xcb/0x170
[  440.527471][T21316]  proc_fail_nth_read+0x1af/0x230
[  440.527493][T21316]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  440.527516][T21316]  ? rw_verify_area+0xce/0x6d0
[  440.527537][T21316]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  440.527558][T21316]  vfs_read+0x1e4/0xb30
[  440.527585][T21316]  ? __pfx_vfs_read+0x10/0x10
[  440.527608][T21316]  ? __fget_files+0x215/0x3d0
[  440.527630][T21316]  ? __fget_files+0x21f/0x3d0
[  440.527653][T21316]  ksys_read+0x12a/0x250
[  440.527676][T21316]  ? __pfx_ksys_read+0x10/0x10
[  440.527706][T21316]  do_syscall_64+0x106/0xf80
[  440.527731][T21316]  ? clear_bhb_loop+0x40/0x90
[  440.527750][T21316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.527767][T21316] RIP: 0033:0x7f6c8a95cfce
[  440.527782][T21316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  440.527798][T21316] RSP: 002b:00007f6c8b843fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  440.527815][T21316] RAX: ffffffffffffffda RBX: 00007f6c8b8446c0 RCX: 00007f6c8a95cfce
[  440.527826][T21316] RDX: 000000000000000f RSI: 00007f6c8b8440a0 RDI: 0000000000000007
[  440.527837][T21316] RBP: 00007f6c8b844090 R08: 0000000000000000 R09: 0000000000000000
[  440.527847][T21316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.527857][T21316] R13: 00007f6c8ac16038 R14: 00007f6c8ac15fa0 R15: 00007ffd7587e808
[  440.527882][T21316]  </TASK>
[  440.722629][T21323] 8021q: adding VLAN 0 to HW filter on device bond6
[  440.737512][T21323] vlan3: entered promiscuous mode
[  440.739884][T21323] bond6: entered promiscuous mode
[  440.790674][T21328] tipc: Enabled bearer <udp:s>, priority 10
[  440.894427][T21338] tmpfs: Bad value for 'mpol'
[  441.268024][T21363] netlink: 'syz.8.4190': attribute type 10 has an invalid length.
[  441.284752][   T40] kauditd_printk_skb: 41 callbacks suppressed
[  441.284769][   T40] audit: type=1400 audit(2000000003.960:19518): avc:  denied  { append } for  pid=21362 comm="syz.8.4190" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  441.328079][T21368] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in;
[  441.328079][T21368]    program syz.0.4192 not setting count and/or reply_len properly
[  441.417561][T21376] netlink: 'syz.0.4195': attribute type 1 has an invalid length.
[  441.445450][T21376] bond1: entered promiscuous mode
[  441.449078][T21376] 8021q: adding VLAN 0 to HW filter on device bond1
[  441.474860][T21376] 8021q: adding VLAN 0 to HW filter on device bond1
[  441.480329][T21376] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address
[  441.486411][T21376] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  441.498995][T21376] bond1: (slave xfrm1): making interface the new active one
[  441.502042][T21376] xfrm1: entered promiscuous mode
[  441.513239][T21376] bond1: (slave xfrm1): Enslaving as an active interface with an up link
[  441.580394][T21381] syzkaller0: entered promiscuous mode
[  441.582266][T21381] syzkaller0: entered allmulticast mode
[  441.595786][T21381] [U] 
[  441.596748][T21381] [U] 
[  441.597775][T21381] [U] 
[  441.598777][T21381] [U] 
[  441.603254][T21381] [U] 
[  441.604357][T21381] [U] 
[  441.605322][T21381] [U] 
[  441.606551][T21381] [U] 
[  441.609209][T21381] [U] 
[  441.610412][T21381] [U] 
[  441.611582][T21381] [U] 
[  441.612726][T21381] [U] 
[  441.614085][T21381] [U] 
[  441.615260][T21381] [U] 
[  441.616449][T21381] [U] 
[  441.617660][T21381] [U] 
[  441.623695][T21380] [U] 
[  442.058112][T21411] loop2: detected capacity change from 0 to 7
[  442.097862][T20337] Dev loop2: unable to read RDB block 7
[  442.103548][T20337]  loop2: AHDI p1 p2 p3
[  442.105610][T20337] loop2: partition table partially beyond EOD, truncated
[  442.109054][T20337] loop2: p1 start 1601398130 is beyond EOD, truncated
[  442.111719][T20337] loop2: p2 start 1702059890 is beyond EOD, truncated
[  442.123896][ T5940] Bluetooth: hci0: unexpected event for opcode 0x0c25
[  442.124430][T21411] Dev loop2: unable to read RDB block 7
[  442.126475][   T40] audit: type=1400 audit(2000000004.800:19519): avc:  denied  { read } for  pid=21410 comm="syz.9.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  442.133903][T21411]  loop2: AHDI p1 p2 p3
[  442.139664][T21411] loop2: partition table partially beyond EOD, truncated
[  442.142974][T21411] loop2: p1 start 1601398130 is beyond EOD, truncated
[  442.145763][T21411] loop2: p2 start 1702059890 is beyond EOD, truncated
[  442.199645][ T5340] Dev loop2: unable to read RDB block 7
[  442.202219][ T5340]  loop2: AHDI p1 p2 p3
[  442.204251][ T5340] loop2: partition table partially beyond EOD, truncated
[  442.210582][ T5340] loop2: p1 start 1601398130 is beyond EOD, truncated
[  442.213686][ T5340] loop2: p2 start 1702059890 is beyond EOD, truncated
[  442.556846][ T1335] usb 14-1: new high-speed USB device number 12 using dummy_hcd
[  442.693606][   T40] audit: type=1400 audit(2000000005.370:19520): avc:  denied  { setopt } for  pid=21417 comm="syz.8.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  442.753301][ T1335] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  442.756855][ T1335] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.760777][ T1335] usb 14-1: Product: syz
[  442.762651][ T1335] usb 14-1: Manufacturer: syz
[  442.764768][ T1335] usb 14-1: SerialNumber: syz
[  442.769640][ T1335] usb 14-1: config 0 descriptor??
[  442.783794][   T40] audit: type=1400 audit(2000000005.460:19521): avc:  denied  { write } for  pid=21422 comm="syz.8.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  443.141379][T21432] loop8: detected capacity change from 0 to 128
[  444.086577][   T29] tipc: Node number set to 3828109776
[  444.148739][ T6787] usb 14-1: USB disconnect, device number 12
[  444.187136][T21438] xt_hashlimit: size too large, truncated to 1048576
[  444.409413][T21470] openvswitch: netlink: Key type 31 is not supported
[  444.485093][    C2] IPv4: Oversized IP packet from 172.20.20.24
[  444.653758][T21475] __nla_validate_parse: 9 callbacks suppressed
[  444.653776][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4217'.
[  444.661226][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4217'.
[  444.752197][T21493] kvm: kvm [21492]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  444.758425][T21493] kvm: kvm [21492]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  444.781396][   T40] audit: type=1400 audit(2000000007.460:19522): avc:  denied  { watch } for  pid=21498 comm="syz.5.4224" path="/347/file0" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  444.859121][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  444.925272][T21508] ipt_REJECT: TCP_RESET invalid for non-tcp
[  444.945593][T21508] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4228'.
[  444.948797][T21510] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4228'.
[  444.964637][T21510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.969943][T21510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.097012][ T6003] usb 10-1: new low-speed USB device number 30 using dummy_hcd
[  445.247140][ T6003] usb 10-1: Invalid ep0 maxpacket: 64
[  445.320347][   T40] audit: type=1400 audit(2000000008.000:19523): avc:  denied  { read } for  pid=21525 comm="syz.0.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  445.320808][T21526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4233'.
[  445.376941][ T6003] usb 10-1: new low-speed USB device number 31 using dummy_hcd
[  445.526956][ T6003] usb 10-1: Invalid ep0 maxpacket: 64
[  445.529781][ T6003] usb usb10-port1: attempt power cycle
[  445.588602][ T6608] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  445.746927][ T6608] usb 5-1: Using ep0 maxpacket: 8
[  445.751294][ T6608] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  445.755048][ T6608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.767364][ T6608] pvrusb2: Hardware description: Terratec Grabster AV400
[  445.776976][ T6608] pvrusb2: **********
[  445.778829][ T6608] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  445.786392][ T6608] pvrusb2: Important functionality might not be entirely working.
[  445.790173][ T6608] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  445.795030][ T6608] pvrusb2: **********
[  445.866918][ T6003] usb 10-1: new low-speed USB device number 32 using dummy_hcd
[  445.887470][ T6003] usb 10-1: Invalid ep0 maxpacket: 64
[  445.977566][ T2493] pvrusb2: Invalid write control endpoint
[  446.003169][T21537] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4236'.
[  446.017028][ T6003] usb 10-1: new low-speed USB device number 33 using dummy_hcd
[  446.026706][ T2493] pvrusb2: Invalid write control endpoint
[  446.029770][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  446.033979][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  446.037676][ T6003] usb 10-1: Invalid ep0 maxpacket: 64
[  446.038894][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  446.040327][ T6003] usb usb10-port1: unable to enumerate USB device
[  446.044039][ T2493] pvrusb2: Device being rendered inoperable
[  446.047773][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  446.052991][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  446.062708][ T2493] pvrusb2: Attached sub-driver cx25840
[  446.065366][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  446.070740][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  446.168119][T15516] usb 5-1: USB disconnect, device number 2
[  446.803214][   T40] audit: type=1400 audit(2000000009.480:19524): avc:  denied  { getopt } for  pid=21558 comm="syz.9.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  446.823936][   T40] audit: type=1400 audit(2000000009.490:19525): avc:  denied  { ioctl } for  pid=21558 comm="syz.9.4244" path="socket:[101130]" dev="sockfs" ino=101130 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  447.129749][T21579] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  447.239374][T21587] openvswitch: netlink: Key type 60 is out of range max 32
[  447.240030][T21583] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.245474][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4253'.
[  447.249679][T21583] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.253150][T21588] netlink: 'syz.9.4253': attribute type 30 has an invalid length.
[  447.296903][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4253'.
[  447.300946][T21589] netlink: 'syz.9.4253': attribute type 30 has an invalid length.
[  447.378844][T21583] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.382405][T21583] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.472624][T21583] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.477553][T21583] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.516893][T15879] usb 13-1: new full-speed USB device number 17 using dummy_hcd
[  447.546430][T21594] use of bytesused == 0 is deprecated and will be removed in the future,
[  447.550845][T21594] use the actual size instead.
[  447.564520][T21583] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.569644][T21583] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.668672][T15879] usb 13-1: config 0 has no interfaces?
[  447.674044][T15879] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  447.678737][T15879] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  447.682495][T15879] usb 13-1: Product: syz
[  447.684371][T15879] usb 13-1: Manufacturer: syz
[  447.686434][T15879] usb 13-1: SerialNumber: syz
[  447.699676][T15879] usb 13-1: config 0 descriptor??
[  447.729866][T14883] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  447.733552][T14883] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.754881][T13426] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  447.760032][T13426] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.769259][T13426] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  447.772293][T13426] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.785606][T13426] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  447.790045][T13426] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.836858][   T40] audit: type=1400 audit(2000000010.510:19526): avc:  denied  { accept } for  pid=21608 comm="syz.9.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  447.867857][T21612] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  447.921773][T21612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  448.060717][T21585] orangefs_mount: mount request failed with -4
[  448.061922][T15879] usb 13-1: USB disconnect, device number 17
[  448.212071][   T40] audit: type=1107 audit(2000000010.890:19527): pid=21628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  448.367527][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4266'.
[  448.415975][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4266'.
[  448.536918][T15879] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  448.697093][T15879] usb 10-1: Using ep0 maxpacket: 8
[  448.708390][T15879] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  448.712464][T15879] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  448.716338][T15879] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  448.720364][T15879] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  448.726199][T15879] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  448.730480][T15879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.739822][T15879] usbtmc 10-1:16.0: bulk endpoints not found
[  448.832543][   T40] audit: type=1400 audit(2000000011.510:19528): avc:  denied  { mounton } for  pid=21640 comm="syz.8.4269" path="/356/file0" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  448.941388][T21633] program syz.5.4267 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  448.947009][T21633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.951152][T21633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.300700][   T40] audit: type=1400 audit(2000000011.980:19529): avc:  denied  { connect } for  pid=21666 comm="syz.8.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  449.356919][T15516] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  449.507018][T15516] usb 5-1: Using ep0 maxpacket: 8
[  449.511142][T15516] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.515589][T15516] usb 5-1: config 0 has no interfaces?
[  449.524402][T15516] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  449.536818][T15516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.557569][T15516] usb 5-1: config 0 descriptor??
[  449.576969][   T40] audit: type=1326 audit(2000000012.250:19530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21680 comm="syz.8.4278" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f973c39c799 code=0x0
[  449.625585][T21682] netlink: 'syz.8.4278': attribute type 4 has an invalid length.
[  449.747993][T21685] nfs4: Bad value for 'source'
[  449.860589][ T6787] usb 5-1: USB disconnect, device number 3
[  450.541332][T21687] syzkaller0: entered promiscuous mode
[  450.543387][T21687] syzkaller0: entered allmulticast mode
[  451.245558][T21696] ªªªªªª: renamed from lo (while UP)
[  451.290668][ T6110] usb 10-1: USB disconnect, device number 34
[  451.340176][ T5940] Bluetooth: hci4: unknown advertising packet type: 0x82
[  451.340223][ T5940] Bluetooth: hci4: Malformed LE Event: 0x02
[  451.344689][T21701] __nla_validate_parse: 3 callbacks suppressed
[  451.344712][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4283'.
[  451.817868][T21724] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4289'.
[  451.821897][T21724] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4289'.
[  452.119120][   T40] audit: type=1400 audit(2000000014.799:19531): avc:  denied  { map } for  pid=21728 comm="syz.9.4292" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  452.132189][   T40] audit: type=1400 audit(2000000014.809:19532): avc:  denied  { listen } for  pid=21728 comm="syz.9.4292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  452.174391][T21734] netlink: 'syz.0.4294': attribute type 9 has an invalid length.
[  452.178136][T21734] netlink: 'syz.0.4294': attribute type 11 has an invalid length.
[  452.180862][T21734] netlink: 'syz.0.4294': attribute type 12 has an invalid length.
[  452.183909][T21734] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4294'.
[  452.328656][T21743] overlayfs: conflicting options: userxattr,redirect_dir=on
[  452.333256][T21743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.382230][T21745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=150 sclass=netlink_route_socket pid=21745 comm=syz.9.4298
[  452.485415][T21751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=21751 comm=syz.8.4300
[  452.489912][T21754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=21754 comm=syz.8.4300
[  452.749367][T21778] netlink: 'syz.8.4308': attribute type 1 has an invalid length.
[  452.779045][T21778] 8021q: adding VLAN 0 to HW filter on device bond2
[  452.782993][T21781] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4309'.
[  452.835810][T21778] bond2: (slave veth5): Enslaving as an active interface with a down link
[  452.857304][T21789] binder: 21787:21789 ioctl c0306201 200000000680 returned -14
[  452.929217][T21793] vlan2: entered allmulticast mode
[  452.931704][T21793] bond2: entered allmulticast mode
[  452.998603][T21795] vivid-000: disconnect
[  453.002562][   T40] audit: type=1400 audit(2000000015.679:19533): avc:  denied  { watch } for  pid=21794 comm="syz.0.4313" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  453.027324][T21793] kvm: emulating exchange as write
[  453.302617][T20042] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  453.567205][   T29] usb 14-1: new high-speed USB device number 13 using dummy_hcd
[  453.587163][T20042] Bluetooth: hci4: command 0x0c1a tx timeout
[  453.687292][   T29] usb 14-1: device descriptor read/64, error -71
[  453.947419][   T29] usb 14-1: new high-speed USB device number 14 using dummy_hcd
[  454.066404][T21839] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.072446][T21839] bridge0: entered allmulticast mode
[  454.087881][   T29] usb 14-1: device descriptor read/64, error -71
[  454.197156][   T29] usb usb14-port1: attempt power cycle
[  454.277261][T21852] netlink: 'syz.0.4330': attribute type 1 has an invalid length.
[  454.306865][T21852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4330'.
[  454.314959][T21852] 8021q: adding VLAN 0 to HW filter on device bond3
[  454.539437][T21866] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4333'.
[  454.544019][T21865] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4333'.
[  454.558421][   T29] usb 14-1: new high-speed USB device number 15 using dummy_hcd
[  454.567594][T21865] netlink: 'syz.0.4333': attribute type 10 has an invalid length.
[  454.571866][T21866] netlink: 'syz.0.4333': attribute type 10 has an invalid length.
[  454.576172][T21865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4333'.
[  454.581229][T21866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4333'.
[  454.586321][T21865] batadv0: entered promiscuous mode
[  454.587528][   T29] usb 14-1: device descriptor read/8, error -71
[  454.589693][T21865] batadv0: entered allmulticast mode
[  454.595295][T21865] bridge0: port 3(batadv0) entered blocking state
[  454.599423][T21865] bridge0: port 3(batadv0) entered disabled state
[  454.607513][T21865] bridge0: port 3(batadv0) entered blocking state
[  454.611896][T21865] bridge0: port 3(batadv0) entered listening state
[  454.730010][   T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  454.734075][   T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  454.837012][   T29] usb 14-1: new high-speed USB device number 16 using dummy_hcd
[  454.867963][   T29] usb 14-1: device descriptor read/8, error -71
[  454.981953][   T29] usb usb14-port1: unable to enumerate USB device
[  455.013146][T21897] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  455.077060][T21897] bond1: (slave bond0): Releasing active interface
[  455.121688][T21903] overlayfs: failed to get inode (-116)
[  455.125464][T21897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  455.126474][T21903] overlayfs: failed to get inode (-116)
[  455.136588][T21903] overlayfs: failed to get inode (-116)
[  455.140569][T21903] overlayfs: failed to get inode (-116)
[  455.151115][T21903] overlayfs: failed to get inode (-116)
[  455.154499][T21903] overlayfs: failed to get inode (-116)
[  455.157612][T21903] overlayfs: failed to get inode (-116)
[  455.161446][T21903] overlayfs: failed to get inode (-116)
[  455.164290][T21903] overlayfs: failed to get inode (-116)
[  455.169021][T21897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.206047][T21897] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  455.218724][T21905] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  455.263624][T21908] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=11816 sclass=netlink_xfrm_socket pid=21908 comm=syz.5.4345
[  455.304165][T21897] bond0 (unregistering): Released all slaves
[  455.307408][T21913] netlink: 'syz.5.4347': attribute type 3 has an invalid length.
[  455.312828][T15516] infiniband syz1: ib_query_port failed (-19)
[  455.320507][   T40] audit: type=1400 audit(2000000017.999:19534): avc:  denied  { shutdown } for  pid=21911 comm="syz.5.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  455.331768][   T40] audit: type=1400 audit(2000000018.009:19535): avc:  denied  { read } for  pid=21911 comm="syz.5.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  455.367957][   T40] audit: type=1400 audit(2000000018.049:19536): avc:  denied  { getopt } for  pid=21915 comm="syz.0.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  455.397303][T21918] overlayfs: failed lookup in lower (newroot/370, name='bus', err=-40): overlapping layers
[  455.444948][T21920] openvswitch: netlink: IP tunnel dst address not specified
[  455.576460][T21930] netlink: 'syz.0.4353': attribute type 10 has an invalid length.
[  455.957088][T15879] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  456.008827][T21943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.048271][T21943] syzkaller0: entered promiscuous mode
[  456.050161][T21943] syzkaller0: entered allmulticast mode
[  456.053131][T21943] tipc: Resetting bearer <eth:syzkaller0>
[  456.057891][T21942] tipc: Resetting bearer <eth:syzkaller0>
[  456.097041][T15879] usb 5-1: device descriptor read/64, error -71
[  456.368823][T15879] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  456.527120][T15879] usb 5-1: device descriptor read/64, error -71
[  456.638413][T15879] usb usb5-port1: attempt power cycle
[  456.696699][T21952] binder: 21951:21952 unknown command 0
[  456.699571][T21952] binder: 21951:21952 ioctl c0306201 200000000640 returned -22
[  456.996925][T15879] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  457.018010][T15879] usb 5-1: device descriptor read/8, error -71
[  457.277158][T15879] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  457.307648][T15879] usb 5-1: device descriptor read/8, error -71
[  457.429301][T15879] usb usb5-port1: unable to enumerate USB device
[  458.315426][T21942] tipc: Disabling bearer <eth:syzkaller0>
[  458.322431][T15516] tipc: Node number set to 1354110559
[  458.368919][   T40] audit: type=1400 audit(2000000021.049:19537): avc:  denied  { create } for  pid=21957 comm="syz.9.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  458.379946][   T40] audit: type=1400 audit(2000000021.059:19538): avc:  denied  { write } for  pid=21957 comm="syz.9.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  458.524966][   T40] audit: type=1400 audit(2000000021.199:19539): avc:  denied  { write } for  pid=21965 comm="syz.8.4365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  458.553814][T21964] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  458.563100][T21964] kvm: pic: single mode not supported
[  458.563799][T21964] kvm: pic: non byte read
[  458.573084][T21964] kvm: pic: non byte read
[  458.576682][T21964] kvm: pic: single mode not supported
[  458.578078][T21964] kvm: pic: non byte read
[  458.589154][T21970] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  458.590442][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  458.596887][T21964] __nla_validate_parse: 4 callbacks suppressed
[  458.596903][T21964] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4364'.
[  458.603324][T21964] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4364'.
[  458.605557][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  458.611613][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  458.616135][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  458.621868][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  458.793465][T20042] Bluetooth: hci0: SCO packet for unknown connection handle 201
[  458.818710][T21973] chnl_net:caif_netlink_parms(): no params data found
[  458.827455][ T6110] hid-generic 0005:0006:5508.0010: item fetching failed at offset 0/1
[  458.832195][ T6110] hid-generic 0005:0006:5508.0010: probe with driver hid-generic failed with error -22
[  458.929917][T22001] IPv6: NLM_F_CREATE should be specified when creating new route
[  458.942301][T21973] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.944966][T21973] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.948589][T21973] bridge_slave_0: entered allmulticast mode
[  458.951759][T21973] bridge_slave_0: entered promiscuous mode
[  458.956225][T21973] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.959526][T21973] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.962956][T21973] bridge_slave_1: entered allmulticast mode
[  458.968308][ T1124] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  458.977581][T21973] bridge_slave_1: entered promiscuous mode
[  458.977678][ T1124] sr 2:0:0:0: [sr0] tag#24 Sense Key : Illegal Request [current] 
[  458.983262][ T1124] sr 2:0:0:0: [sr0] tag#24 Add. Sense: Invalid command operation code
[  458.987100][T22002] netlink: 830 bytes leftover after parsing attributes in process `syz.9.4369'.
[  458.993478][ T1124] sr 2:0:0:0: [sr0] tag#24 CDB: Write(10) 2a 00 00 00 00 1f 00 00 01 00
[  458.998107][ T1124] critical target error, dev sr0, sector 124 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  459.003061][ T1124] Buffer I/O error on dev sr0, logical block 31, lost async page write
[  459.019953][T21973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.028441][T21973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.055440][T21973] team0: Port device team_slave_0 added
[  459.061486][T21973] team0: Port device team_slave_1 added
[  459.086251][T21973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.087686][ T1124] sr 2:0:0:0: [sr0] tag#25 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  459.089820][T21973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.093871][ T1124] sr 2:0:0:0: [sr0] tag#25 Sense Key : Illegal Request [current] 
[  459.107610][T21973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.109914][T21973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.110800][ T1124] sr 2:0:0:0: [sr0] tag#25 Add. Sense: Invalid command operation code
[  459.115757][T21973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.115785][T21973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.136724][ T1124] sr 2:0:0:0: [sr0] tag#25 CDB: Write(10) 2a 00 00 00 00 00 00 00 01 00
[  459.140347][ T1124] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  459.144436][ T1124] Buffer I/O error on dev sr0, logical block 0, lost async page write
[  459.152960][T21973] hsr_slave_0: entered promiscuous mode
[  459.156351][T21973] hsr_slave_1: entered promiscuous mode
[  459.160016][T21973] debugfs: 'hsr0' already exists in 'hsr'
[  459.162577][T21973] Cannot create hsr debugfs directory
[  459.697855][T22017] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4373'.
[  459.876577][T21973] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  459.881388][   T40] audit: type=1400 audit(2000000022.559:19540): avc:  denied  { getopt } for  pid=22030 comm="syz.8.4375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  459.883559][T21973] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  459.898066][T21973] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  459.905802][T21973] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  459.971244][T21973] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.986282][T21973] 8021q: adding VLAN 0 to HW filter on device team0
[  459.998889][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.002511][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.012272][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.015555][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.036892][T22047] veth0_to_bond: entered allmulticast mode
[  460.111144][   T40] audit: type=1400 audit(2000000022.789:19541): avc:  denied  { ioctl } for  pid=22055 comm="syz.8.4381" path="socket:[107525]" dev="sockfs" ino=107525 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  460.222824][   T40] audit: type=1400 audit(2000000022.899:19542): avc:  denied  { remount } for  pid=22067 comm="syz.8.4382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  460.222851][T22074] max out of range
[  460.234176][T22070] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  460.237971][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4382'.
[  460.246834][   T40] audit: type=1400 audit(2000000022.919:19543): avc:  denied  { mounton } for  pid=22067 comm="syz.8.4382" path="/388/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  460.251689][T21973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.256032][   T40] audit: type=1400 audit(2000000022.919:19544): avc:  denied  { rename } for  pid=22061 comm="syz.9.4380" name="file0" dev="tmpfs" ino=1989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  460.298901][T22078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4384'.
[  460.398085][T22091] overlayfs: missing 'lowerdir'
[  460.520283][   T40] audit: type=1400 audit(2000000023.199:19545): avc:  denied  { read append } for  pid=22103 comm="syz.8.4390" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  460.597184][T22116] macvlan3: entered promiscuous mode
[  460.611483][T21973] veth0_vlan: entered promiscuous mode
[  460.621965][T21973] veth1_vlan: entered promiscuous mode
[  460.639908][T22123] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4393'.
[  460.656787][T21973] veth0_macvtap: entered promiscuous mode
[  460.664638][T21973] veth1_macvtap: entered promiscuous mode
[  460.684168][T21973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.684979][T22104] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  460.690977][T21973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.696940][T20042] Bluetooth: hci3: command tx timeout
[  460.697108][T22104] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  460.702796][T22104] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  460.705600][T22104] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  460.706203][ T8125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.715240][T22104] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  460.717565][ T8125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.720619][ T8125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.735705][ T8125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.740647][T22104] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  460.755187][T22104] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  460.796578][T22104] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  460.820994][T22104] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  460.855269][T14883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.860952][T14883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.884247][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.890849][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.945955][T22139] batman_adv: batadv0: Adding interface: dummy0
[  460.952680][T22139] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.967166][T22139] batman_adv: batadv0: Interface activated: dummy0
[  460.976922][   T40] audit: type=1400 audit(2000000023.649:19546): avc:  denied  { ioctl } for  pid=22138 comm="syz.0.4395" path="socket:[106623]" dev="sockfs" ino=106623 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  460.983152][T22139] batadv0: mtu less than device minimum
[  460.991297][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  460.997110][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  461.002632][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  461.008073][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  461.013328][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  461.018761][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  461.023265][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  461.027896][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  461.032110][T22139] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  461.047569][T22142] tipc: Started in network mode
[  461.049660][T22142] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  461.056642][T22142] tipc: Enabled bearer <udp:syz1>, priority 10
[  461.064322][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4363'.
[  461.255115][T22168] netlink: 'syz.8.4402': attribute type 21 has an invalid length.
[  461.258077][T22168] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4402'.
[  461.326713][T22173] can0: slcan on ttyS3.
[  461.428148][T22173] can0 (unregistered): slcan off ttyS3.
[  461.490491][T15516] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  461.669252][T15516] usb 5-1: Using ep0 maxpacket: 8
[  461.673391][T15516] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.678781][T15516] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.683395][T15516] usb 5-1: config 0 interface 0 has no altsetting 0
[  461.686349][T15516] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  461.691939][T15516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.698854][T15516] usb 5-1: config 0 descriptor??
[  462.112005][T22221] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  462.115229][T22221] overlayfs: failed to set xattr on upper
[  462.119440][T22221] overlayfs: ...falling back to redirect_dir=nofollow.
[  462.122495][T22221] overlayfs: ...falling back to index=off.
[  462.125088][T22221] overlayfs: ...falling back to uuid=null.
[  462.145770][T22221] overlayfs: missing 'lowerdir'
[  462.177000][T15515] tipc: Node number set to 4269801492
[  462.321602][T22166] IPv6: NLM_F_CREATE should be specified when creating new route
[  462.330168][T15516] usbhid 5-1:0.0: can't add hid device: -71
[  462.332901][T15516] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  462.345449][T15516] usb 5-1: USB disconnect, device number 8
[  462.518466][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4422'.
[  462.617159][T20042] Bluetooth: hci1: command 0x0c1a tx timeout
[  462.706853][T20042] block nbd2: Receive control failed (result -32)
[  462.777362][T20042] Bluetooth: hci3: command 0x040f tx timeout
[  462.777404][   T63] Bluetooth: hci2: command 0x0405 tx timeout
[  462.782672][   T63] Bluetooth: hci0: command 0x0c1a tx timeout
[  462.894543][T22279] ALSA: mixer_oss: invalid OSS volume ''
[  462.927042][T20830] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  463.076902][T20830] usb 9-1: Using ep0 maxpacket: 16
[  463.080017][T20830] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  463.082739][T20830] usb 9-1: config 0 has no interface number 0
[  463.084890][T20830] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49237, setting to 1024
[  463.090687][T20830] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  463.094514][T20830] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  463.096881][ T5981] usb 13-1: new high-speed USB device number 18 using dummy_hcd
[  463.098184][T20830] usb 9-1: Product: syz
[  463.099965][T22297] vlan3: entered promiscuous mode
[  463.104976][T20830] usb 9-1: SerialNumber: syz
[  463.111591][T20830] usb 9-1: config 0 descriptor??
[  463.119873][T20830] cm109 9-1:0.8: invalid payload size 1024, expected 4
[  463.124663][T20830] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input43
[  463.257024][ T5981] usb 13-1: Using ep0 maxpacket: 8
[  463.264532][ T5981] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  463.269800][ T5981] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.289989][ T5981] pvrusb2: Hardware description: Terratec Grabster AV400
[  463.293096][ T5981] pvrusb2: **********
[  463.294922][ T5981] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  463.299567][ T5981] pvrusb2: Important functionality might not be entirely working.
[  463.303179][ T5981] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  463.308294][ T5981] pvrusb2: **********
[  463.375717][T22314] team0 (unregistering): Port device team_slave_0 removed
[  463.382584][T22314] team0 (unregistering): Port device team_slave_1 removed
[  463.481233][ T2493] pvrusb2: Invalid write control endpoint
[  463.517625][ T2493] pvrusb2: Invalid write control endpoint
[  463.520382][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  463.524549][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  463.538792][T22322] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17
[  463.540616][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  463.541623][T22322] PKCS7: Only support pkcs7_signedData type
[  463.544405][T22322] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17
[  463.546033][ T2493] pvrusb2: Device being rendered inoperable
[  463.546267][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  463.549096][T22322] PKCS7: Only support pkcs7_signedData type
[  463.552017][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  463.586391][ T2493] pvrusb2: Attached sub-driver cx25840
[  463.588952][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  463.593267][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  463.681015][T22276] pvrusb2: Attempted to execute control transfer when device not ok
[  463.698856][T20830] usb 13-1: USB disconnect, device number 18
[  464.232383][T22338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=22338 comm=syz.0.4450
[  464.239114][T22338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=22338 comm=syz.0.4450
[  464.244658][T22338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=22338 comm=syz.0.4450
[  464.274410][T22340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26217 sclass=netlink_route_socket pid=22340 comm=syz.8.4451
[  464.475452][T22349] XFS (nullb0): Invalid superblock magic number
[  464.736524][T22370] __nla_validate_parse: 2 callbacks suppressed
[  464.736540][T22370] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4458'.
[  464.748353][T22370] bond0: entered promiscuous mode
[  464.752439][T22370] gretap0: entered promiscuous mode
[  464.756230][T22370] hsr1: entered promiscuous mode
[  464.811394][T22373] pim6reg: entered allmulticast mode
[  464.815779][T22373] pim6reg: left allmulticast mode
[  464.856891][ T5940] Bluetooth: hci3: command 0x040f tx timeout
[  464.856908][   T63] Bluetooth: hci2: command 0x0405 tx timeout
[  464.859490][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout
[  464.879487][T22373] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4459'.
[  464.904049][T22378] team0 (unregistering): Port device team_slave_0 removed
[  464.916452][T22378] team0 (unregistering): Port device team_slave_1 removed
[  464.931687][T22381] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4463'.
[  464.952271][T22385] netlink: 7 bytes leftover after parsing attributes in process `syz.9.4462'.
[  464.961725][T22385] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4462'.
[  465.082885][T22396] CIFS mount error: No usable UNC path provided in device string!
[  465.082885][T22396] 
[  465.088609][T22396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  465.111467][T22392] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  465.119867][T22392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22392 comm=syz.8.4466
[  465.702402][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  465.702776][   T29] usb 9-1: USB disconnect, device number 5
[  465.705485][    C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  465.716878][T22429] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14)
[  465.719803][T22429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  465.723285][T22429] vhci_hcd vhci_hcd.0: Device attached
[  465.727422][T22435] vhci_hcd: cannot find the pending unlink 1023
[  465.746822][T22435] vhci_hcd: connection closed
[  465.751376][   T29] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  465.752308][T14883] vhci_hcd vhci_hcd.8: stop threads
[  465.759713][T14883] vhci_hcd vhci_hcd.8: release socket
[  465.762094][T14883] vhci_hcd vhci_hcd.8: disconnect device
[  465.876364][T22445] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4481'.
[  465.889828][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'.
[  465.952896][T22449] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4483'.
[  465.976375][T22447] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode
[  466.025791][T22449] batman_adv: batadv0: Adding interface: ipvlan3
[  466.029453][T22449] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.039595][T22449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.043983][T22449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.049053][T22449] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  466.105430][T22454] syzkaller0: entered promiscuous mode
[  466.108104][T22454] syzkaller0: entered allmulticast mode
[  466.375083][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  466.375099][   T40] audit: type=1400 audit(2000000029.050:19550): avc:  denied  { map } for  pid=22456 comm="syz.9.4486" path="socket:[107226]" dev="sockfs" ino=107226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  466.953402][   T63] Bluetooth: hci2: command 0x0405 tx timeout
[  466.953472][ T5937] Bluetooth: hci3: command 0x040f tx timeout
[  467.447488][    C2] ata1: illegal qc_active transition (00000000->00400000)
[  467.449864][T22475] hugetlbfs: Bad value '$ower/freeze_filesystems' for mount option 'size'
[  467.449864][T22475] 
[  467.767535][ T1114] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  467.783851][ T1114] ata1.00: configured for UDMA/100
[  468.452928][T22480] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4491'.
[  468.617379][T22491] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.620007][T22491] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.830687][T22491] batadv_slave_0: left promiscuous mode
[  468.833166][T22491] batadv_slave_0: left allmulticast mode
[  468.838699][T22491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.840915][ T5937] Bluetooth: hci3: unexpected cc 0x1004 length: 24 > 11
[  468.845146][ T5937] Bluetooth: hci3: unexpected event for opcode 0x1004
[  468.957009][T20830] usb 13-1: new full-speed USB device number 19 using dummy_hcd
[  469.066857][T22491] mac80211_hwsim hwsim34 wlan0: left promiscuous mode
[  469.114099][T20830] usb 13-1: config 0 has no interfaces?
[  469.118782][T20830] usb 13-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  469.123118][T20830] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  469.126963][T20830] usb 13-1: Product: syz
[  469.128948][T20830] usb 13-1: Manufacturer: syz
[  469.131121][T20830] usb 13-1: SerialNumber: syz
[  469.135871][T20830] usb 13-1: config 0 descriptor??
[  469.156995][T22491] geneve2: left promiscuous mode
[  469.160264][T22491] geneve2: left allmulticast mode
[  469.256986][T22491] macvlan2: left promiscuous mode
[  469.320219][T22491] ip6gretap1: left promiscuous mode
[  469.322538][T22491] ip6gretap1: left allmulticast mode
[  469.377015][T22491] macvlan3: left promiscuous mode
[  469.381195][T22491] vlan3: left promiscuous mode
[  469.383641][T22491] hsr1: left promiscuous mode
[  469.395646][T22495] can0: slcan on ttyprintk.
[  469.399748][T22503] wg1: entered promiscuous mode
[  469.401964][T22503] wg1: entered allmulticast mode
[  469.405313][  T154] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.411355][T20830] usb 13-1: USB disconnect, device number 19
[  469.417814][  T154] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.422843][  T154] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.427929][  T154] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.477358][  T154] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.483610][  T154] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.487651][  T154] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.491413][  T154] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.527756][T22492] can0 (unregistered): slcan off ttyprintk.
[  469.626827][T22517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  469.790942][   T40] audit: type=1400 audit(2000000032.470:19551): avc:  denied  { write } for  pid=22522 comm="syz.9.4505" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  469.898577][   T40] audit: type=1400 audit(2000000032.580:19552): avc:  denied  { lock } for  pid=22522 comm="syz.9.4505" path="socket:[108189]" dev="sockfs" ino=108189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  470.110690][T22529] input: syz0 as /devices/virtual/input/input44
[  470.140790][ T5937] Bluetooth: hci1: unexpected event 0x14 length: 10 > 6
[  470.269040][T22535] lo speed is unknown, defaulting to 1000
[  470.274524][T22535] lo speed is unknown, defaulting to 1000
[  470.277908][T22535] lo speed is unknown, defaulting to 1000
[  470.289306][T22535] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  470.317708][T22535] lo speed is unknown, defaulting to 1000
[  470.322662][T22535] lo speed is unknown, defaulting to 1000
[  470.327087][T22535] lo speed is unknown, defaulting to 1000
[  470.332378][T22535] lo speed is unknown, defaulting to 1000
[  470.336287][T22535] lo speed is unknown, defaulting to 1000
[  470.341372][T22535] lo speed is unknown, defaulting to 1000
[  470.399160][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4510'.
[  470.406556][T22539] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  470.442231][T22540] exFAT-fs (nbd4): unable to read boot sector
[  470.444351][T22540] exFAT-fs (nbd4): failed to read boot sector
[  470.449205][T22540] exFAT-fs (nbd4): failed to recognize exfat type
[  470.611369][   T40] audit: type=1400 audit(2000000033.290:19553): avc:  denied  { getopt } for  pid=22543 comm="syz.8.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  470.671600][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4513'.
[  470.750658][T22554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22554 comm=syz.8.4514
[  470.765057][T22551] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20002
[  470.845415][T22560] bond8: (slave bond_slave_1): Device is not bonding slave
[  470.849665][T22560] bond8: option active_slave: invalid value (bond_slave_1)
[  470.855097][T22560] bond8 (unregistering): Released all slaves
[  470.960121][T22565] IPVS: persistence engine module ip_vs_pe_s not found
[  471.281482][T22596] netlink: 'syz.9.4526': attribute type 1 has an invalid length.
[  471.285765][T22596] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4526'.
[  471.291838][T22595] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  471.292109][T22596] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4526'.
[  471.294639][T22595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  471.303303][T22595] vhci_hcd vhci_hcd.0: Device attached
[  471.309575][T22595] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12)
[  471.312552][T22595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  471.316023][T22595] vhci_hcd vhci_hcd.0: Device attached
[  471.323610][T22599] vhci_hcd: connection closed
[  471.324131][ T8133] vhci_hcd vhci_hcd.4: stop threads
[  471.324237][T22597] vhci_hcd: connection closed
[  471.326331][ T8133] vhci_hcd vhci_hcd.4: release socket
[  471.333229][ T8133] vhci_hcd vhci_hcd.4: disconnect device
[  471.335926][ T8133] vhci_hcd vhci_hcd.4: stop threads
[  471.338751][ T8133] vhci_hcd vhci_hcd.4: release socket
[  471.341146][ T8133] vhci_hcd vhci_hcd.4: disconnect device
[  471.462549][   T40] audit: type=1400 audit(2000000034.140:19554): avc:  denied  { setopt } for  pid=22603 comm="syz.9.4529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  471.518703][   T40] audit: type=1400 audit(2000000034.200:19555): avc:  denied  { setopt } for  pid=22603 comm="syz.9.4529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  471.857070][   T40] audit: type=1400 audit(2000000034.540:19556): avc:  denied  { bind } for  pid=22619 comm="syz.9.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  471.896296][T22621] SELinux:  Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped).
[  471.907897][   T40] audit: type=1400 audit(2000000034.590:19557): avc:  denied  { relabelto } for  pid=22619 comm="syz.9.4534" name="428" dev="tmpfs" ino=2268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0"
[  471.920946][   T40] audit: type=1400 audit(2000000034.590:19558): avc:  denied  { associate } for  pid=22619 comm="syz.9.4534" name="428" dev="tmpfs" ino=2268 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0"
[  472.025282][T22627] 9p: Bad value for 'rfdno'
[  472.457003][   T63] Bluetooth: hci3: command 0x040f tx timeout
[  472.996539][   T40] audit: type=1400 audit(2000000035.670:19559): avc:  denied  { mount } for  pid=22655 comm="syz.9.4546" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  473.021214][   T40] audit: type=1400 audit(2000000035.700:19560): avc:  denied  { unmount } for  pid=16586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  473.155908][T22674] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4549'.
[  473.159173][T22669] lo speed is unknown, defaulting to 1000
[  473.197247][   T40] audit: type=1804 audit(2000000035.870:19561): pid=22665 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4548" name="/newroot/431/file0" dev="fuse" ino=1 res=1 errno=0
[  473.197698][T22665] /dev/nullb0: Can't open blockdev
[  473.347481][T22677] overlayfs: workdir and upperdir must reside under the same mount
[  473.354742][T22677] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.4551'.
[  473.722144][T22688] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4554'.
[  473.763245][T22694] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4555'.
[  473.863081][T22698] netlink: 190972 bytes leftover after parsing attributes in process `syz.9.4557'.
[  473.868216][T22698] netlink: 'syz.9.4557': attribute type 10 has an invalid length.
[  473.871637][T22698] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4557'.
[  474.017579][T22696] kvm: pic: non byte write
[  474.043161][T22712] program syz.8.4559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  474.047636][T22713] program syz.8.4559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  474.091068][ T5937] Bluetooth: hci1: unexpected event for opcode 0x0803
[  474.207607][T22729] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  474.211135][T22729] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  474.215144][T22729] overlayfs: missing 'lowerdir'
[  474.293788][T22737] netlink: 'syz.8.4567': attribute type 2 has an invalid length.
[  474.298471][T22737] netlink: 'syz.8.4567': attribute type 1 has an invalid length.
[  474.302399][T22737] netlink: 'syz.8.4567': attribute type 1 has an invalid length.
[  474.302776][T22742] Attempt to restore checkpoint with obsolete wellknown handles
[  474.308782][T22744] netlink: 'syz.8.4567': attribute type 2 has an invalid length.
[  474.311694][T22744] netlink: 'syz.8.4567': attribute type 1 has an invalid length.
[  474.315202][T22744] netlink: 'syz.8.4567': attribute type 1 has an invalid length.
[  474.527112][   T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  474.538182][ T5937] Bluetooth: hci3: command 0x040f tx timeout
[  474.633421][T22758] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  474.636963][T22758] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  474.682231][   T29] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  474.686251][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.690300][   T29] usb 9-1: Product: syz
[  474.692195][   T29] usb 9-1: Manufacturer: syz
[  474.694304][   T29] usb 9-1: SerialNumber: syz
[  474.713556][   T29] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  474.729563][T16836] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  475.564234][T22770] __nla_validate_parse: 1 callbacks suppressed
[  475.564251][T22770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4578'.
[  475.686030][T22776] efs: device does not support 512 byte blocks
[  475.688443][T22776] device does not support 512 byte blocks
[  475.688443][T22776] 
[  475.814757][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4582'.
[  475.860205][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4584'.
[  476.197039][   T29] usb 13-1: new high-speed USB device number 20 using dummy_hcd
[  476.202731][ T6608] usb 9-1: USB disconnect, device number 6
[  476.206020][T22796] xt_CONNSECMARK: invalid mode: 0
[  476.212468][T16836] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  476.215651][T16836] ath9k_htc: Failed to initialize the device
[  476.223033][T22795] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  476.223937][ T6608] usb 9-1: ath9k_htc: USB layer deinitialized
[  476.226463][T22795] UDF-fs: Scanning with blocksize 2048 failed
[  476.319412][   T40] audit: type=1400 audit(2000000039.000:19562): avc:  denied  { map } for  pid=22792 comm="syz.9.4587" path="socket:[112775]" dev="sockfs" ino=112775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  476.329814][   T40] audit: type=1400 audit(2000000039.000:19563): avc:  denied  { accept } for  pid=22792 comm="syz.9.4587" path="socket:[112775]" dev="sockfs" ino=112775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  476.330077][T22795] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  476.345242][T22795] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  476.348999][T22795] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  476.351506][T22795] UDF-fs: Scanning with blocksize 4096 failed
[  476.353473][T22795] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1)
[  476.368358][   T29] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  476.372264][   T29] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  476.375745][   T29] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66
[  476.379361][   T29] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  476.383030][   T29] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  476.401334][   T29] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  476.404666][   T29] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  476.408488][   T29] usb 13-1: Product: syz
[  476.410427][   T29] usb 13-1: Manufacturer: syz
[  476.418682][   T29] cdc_wdm 13-1:1.0: skipping garbage
[  476.421388][   T29] cdc_wdm 13-1:1.0: skipping garbage
[  476.425441][   T29] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device
[  476.428287][   T29] cdc_wdm 13-1:1.0: Unknown control protocol
[  476.616880][ T5937] Bluetooth: hci3: command 0x040f tx timeout
[  476.624160][   T40] audit: type=1400 audit(2000000039.300:19564): avc:  denied  { read write } for  pid=22765 comm="syz.8.4576" name="cdc-wdm0" dev="devtmpfs" ino=3504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  476.636831][   T40] audit: type=1400 audit(2000000039.300:19565): avc:  denied  { open } for  pid=22765 comm="syz.8.4576" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  476.790084][T22822] net_ratelimit: 12 callbacks suppressed
[  476.790102][T22822] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  476.996158][T22838] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  477.024845][   T40] audit: type=1400 audit(2000000039.700:19566): avc:  denied  { unmount } for  pid=16586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  477.103340][T22851] netlink: 'syz.9.4600': attribute type 10 has an invalid length.
[  477.107873][T22851] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4600'.
[  477.111858][T22851] batadv0: entered promiscuous mode
[  477.114166][T22851] batadv0: entered allmulticast mode
[  477.116909][T22851] bridge0: port 3(batadv0) entered blocking state
[  477.119253][T22851] bridge0: port 3(batadv0) entered disabled state
[  477.123044][T22851] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  477.604633][T22865] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  477.608025][T22865] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  477.611308][T22865] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  477.614385][T22865] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  477.624012][T22865] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  477.744728][T15515] usb 13-1: USB disconnect, device number 20
[  477.802281][T22882] lo speed is unknown, defaulting to 1000
[  477.889824][T22878] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  477.892010][T22878] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  477.894195][T22878] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  477.896279][T22878] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  477.899370][T22878] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  478.136875][   T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  478.268192][T22897] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4612'.
[  478.287375][T22899] netlink: 'syz.8.4613': attribute type 25 has an invalid length.
[  478.290711][T22899] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4613'.
[  478.306338][   T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  478.311451][   T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  478.311496][   T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  478.319258][T22901] sctp: [Deprecated]: syz.9.4614 (pid 22901) Use of int in maxseg socket option.
[  478.319258][T22901] Use struct sctp_assoc_value instead
[  478.320988][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.334265][   T29] usb 9-1: config 0 descriptor??
[  478.749967][   T29] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  479.230088][T22930] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4625'.
[  479.816865][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout
[  479.897865][   T63] Bluetooth: hci0: command 0x0c1a tx timeout
[  479.897909][ T5940] Bluetooth: hci3: command 0x040f tx timeout
[  479.898357][T20042] Bluetooth: hci2: command 0x0405 tx timeout
[  480.178936][   T40] audit: type=1400 audit(2000000042.860:19567): avc:  denied  { write } for  pid=22941 comm="syz.8.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  480.300418][   T40] audit: type=1400 audit(2000000042.980:19568): avc:  denied  { setopt } for  pid=22941 comm="syz.8.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  480.446799][ T5974] usb 9-1: reset high-speed USB device number 7 using dummy_hcd
[  480.725247][T21639] vivid-000: reconnect
[  480.800567][   T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  480.811226][   T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  480.816361][   T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  480.822091][   T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  480.825967][   T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  480.881907][T22953] lo speed is unknown, defaulting to 1000
[  480.887320][   T40] audit: type=1400 audit(2000000043.560:19569): avc:  denied  { getopt } for  pid=22961 comm="syz.4.4635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  480.941252][T22970] nfs4: Unknown parameter '‡4'
[  480.947149][   T39] libceph: connect (1)[c::]:6789 error -101
[  480.950063][   T39] libceph: mon0 (1)[c::]:6789 connect error
[  481.002276][ T6018] libceph: connect (1)[c::]:6789 error -101
[  481.004997][ T6018] libceph: mon0 (1)[c::]:6789 connect error
[  481.032351][T22953] chnl_net:caif_netlink_parms(): no params data found
[  481.109835][T22989] fuse: Unknown parameter 'nd'
[  481.135895][T22953] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.139250][T22953] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.143199][T22953] bridge_slave_0: entered allmulticast mode
[  481.147180][T22953] bridge_slave_0: entered promiscuous mode
[  481.155659][T22953] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.166828][T22953] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.170662][T22953] bridge_slave_1: entered allmulticast mode
[  481.182484][T22953] bridge_slave_1: entered promiscuous mode
[  481.218345][   T39] libceph: connect (1)[c::]:6789 error -101
[  481.221069][   T39] libceph: mon0 (1)[c::]:6789 connect error
[  481.226125][T22953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.236647][T22953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.272053][T22953] team0: Port device team_slave_0 added
[  481.277296][T22953] team0: Port device team_slave_1 added
[  481.296404][ T6018] libceph: connect (1)[c::]:6789 error -101
[  481.299188][ T6018] libceph: mon0 (1)[c::]:6789 connect error
[  481.307838][T22953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.310554][T22953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.320671][T22953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.325752][T22953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.328855][T22953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.339886][T22953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.363665][T23004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23004 comm=syz.9.4643
[  481.369946][T22953] hsr_slave_0: entered promiscuous mode
[  481.370774][T22953] hsr_slave_1: entered promiscuous mode
[  481.375625][T22953] debugfs: 'hsr0' already exists in 'hsr'
[  481.378165][T22953] Cannot create hsr debugfs directory
[  481.447858][ T5981] usb 9-1: USB disconnect, device number 7
[  481.727098][ T5981] libceph: connect (1)[c::]:6789 error -101
[  481.729766][ T5981] libceph: mon0 (1)[c::]:6789 connect error
[  481.770694][T22975] ceph: No mds server is up or the cluster is laggy
[  481.770795][T22970] ceph: No mds server is up or the cluster is laggy
[  481.811082][ T6018] libceph: connect (1)[c::]:6789 error -101
[  481.813943][ T6018] libceph: mon0 (1)[c::]:6789 connect error
[  481.976962][   T63] Bluetooth: hci3: command 0x040f tx timeout
[  481.976980][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout
[  482.165469][T22953] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  482.173206][T22953] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  482.180053][T22953] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  482.188365][T22953] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  482.249326][T23046] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4648'.
[  482.254331][T23046] bad cache= option: looseþ¡Þî>RÃŒj
[  482.254331][T23046] 
[  482.258218][T23046] CIFS: VFS: bad cache= option: looseþ¡Þî>RÃŒj
[  482.258682][T22953] 8021q: adding VLAN 0 to HW filter on device bond0
[  482.271718][T22953] 8021q: adding VLAN 0 to HW filter on device team0
[  482.277216][T13396] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.279638][T13396] bridge0: port 1(bridge_slave_0) entered forwarding state
[  482.290024][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.292355][ T8129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  482.443953][T22953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  482.490257][T22953] veth0_vlan: entered promiscuous mode
[  482.499433][T22953] veth1_vlan: entered promiscuous mode
[  482.539061][T22953] veth0_macvtap: entered promiscuous mode
[  482.540029][T23082] fuse: Unknown parameter 'nd'
[  482.549601][T22953] veth1_macvtap: entered promiscuous mode
[  482.577311][T22953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.589576][T22953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.600775][T13426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.608166][ T8129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.619021][ T8129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.623223][ T8129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.750807][T13426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.754426][T13426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.779745][T13426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.784479][T13426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.856820][ T5937] Bluetooth: hci4: command tx timeout
[  482.971935][T23103] input: syz0 as /devices/virtual/input/input47
[  482.978258][T23107] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4654'.
[  482.982060][T23107] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4654'.
[  483.062260][T23112] QAT: Invalid ioctl -2144835806
[  483.065684][T23112] QAT: Invalid ioctl -2144835806
[  483.069787][T23112] QAT: Invalid ioctl -2144835806
[  483.071434][T23112] QAT: Invalid ioctl -2144835806
[  483.073349][T23112] QAT: Invalid ioctl -2144835806
[  483.075488][T23112] QAT: Invalid ioctl -2144835806
[  483.077897][T23112] QAT: Invalid ioctl -2144835806
[  483.084096][T23112] QAT: Invalid ioctl -2144835806
[  483.085867][T23112] QAT: Invalid ioctl -2144835806
[  483.089340][T23112] QAT: Invalid ioctl -2144835806
[  483.373002][T23144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.403574][T23147] syzkaller0: entered promiscuous mode
[  483.405945][T23147] syzkaller0: entered allmulticast mode
[  483.498428][T23144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.568342][T23154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  483.594812][   T40] audit: type=1400 audit(2000000046.270:19570): avc:  denied  { connect } for  pid=23153 comm="syz.9.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  483.623070][T23144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.768615][T23144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.002242][ T8129] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.026165][ T8129] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.044344][T13396] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.058010][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout
[  484.060179][T13396] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.220665][   T40] audit: type=1400 audit(2000000046.900:19571): avc:  denied  { getopt } for  pid=23192 comm="syz.4.4667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  484.230783][T23195] fuse: Bad value for 'fd'
[  484.231017][T23193] sctp: [Deprecated]: syz.4.4667 (pid 23193) Use of int in maxseg socket option.
[  484.231017][T23193] Use struct sctp_assoc_value instead
[  484.349867][T23203] input: syz1 as /devices/virtual/input/input48
[  484.936944][ T5937] Bluetooth: hci4: command tx timeout
[  485.093419][   T40] audit: type=1400 audit(2000000047.770:19572): avc:  denied  { accept } for  pid=23229 comm="syz.8.4679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  485.094676][T23230] binder: 23229:23230 unknown command 1
[  485.104748][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout
[  485.106847][ T6018] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  485.109956][T15515] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  485.110575][T23230] binder: 23229:23230 ioctl c0306201 2000000001c0 returned -22
[  485.113307][T15515] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  485.180330][    C3] bridge0: port 3(batadv0) entered learning state
[  485.266837][ T6018] usb 9-1: Using ep0 maxpacket: 16
[  485.274267][ T6018] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  485.289036][ T6018] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  485.293046][ T6018] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.296601][ T6018] usb 9-1: Product: syz
[  485.300759][ T6018] usb 9-1: Manufacturer: syz
[  485.302854][ T6018] usb 9-1: SerialNumber: syz
[  485.330542][   T40] audit: type=1400 audit(2000000048.010:19573): avc:  denied  { associate } for  pid=23237 comm="syz.9.4682" name="1452" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  485.490748][T23247] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4)
[  485.493311][T23247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  485.497884][T23247] vhci_hcd vhci_hcd.0: Device attached
[  485.736829][ T6110] usb 55-1: new low-speed USB device number 2 using vhci_hcd
[  485.739230][ T6018] usb 14-1: new full-speed USB device number 17 using dummy_hcd
[  485.888713][ T6018] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.893855][ T6018] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  485.900015][ T6018] usb 14-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  485.903948][ T6018] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.907635][ T6018] usb 14-1: Product: syz
[  485.909725][ T6018] usb 14-1: Manufacturer: syz
[  485.911704][ T6018] usb 14-1: SerialNumber: syz
[  485.916536][ T6018] usb 14-1: config 0 descriptor??
[  486.124227][T23247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.130933][T23247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.148147][ T6018] usb 14-1: USB disconnect, device number 17
[  486.151175][T23248] usb 55-1: recv xbuf, 0
[  486.153445][ T8129] vhci_hcd vhci_hcd.9: stop threads
[  486.157366][ T8129] vhci_hcd vhci_hcd.9: release socket
[  486.159825][ T8129] vhci_hcd vhci_hcd.9: disconnect device
[  486.216813][ T6110] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  486.738594][T23275] syzkaller1: entered promiscuous mode
[  486.740468][T23275] syzkaller1: entered allmulticast mode
[  486.902738][T23294] can: request_module (can-proto-0) failed.
[  487.016890][ T5937] Bluetooth: hci4: command tx timeout
[  487.057150][   T29] usb 14-1: new low-speed USB device number 18 using dummy_hcd
[  487.176933][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout
[  487.180818][T15515] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  487.183566][T15515] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  487.208962][   T29] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  487.212001][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  487.215827][   T29] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  487.221029][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  487.225786][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  487.231938][   T29] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  487.235128][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  487.240925][   T29] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  487.245421][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  487.254111][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  487.260314][   T29] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  487.263592][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  487.268979][   T29] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  487.274001][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  487.279660][   T29] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  487.287138][   T29] usb 14-1: string descriptor 0 read error: -22
[  487.289288][   T29] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  487.293126][   T29] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.304886][   T29] adutux 14-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  487.588431][   T40] audit: type=1400 audit(2000000050.270:19574): avc:  denied  { map } for  pid=23289 comm="syz.9.4696" path="socket:[113866]" dev="sockfs" ino=113866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  487.601286][   T40] audit: type=1400 audit(2000000050.270:19575): avc:  denied  { read accept } for  pid=23289 comm="syz.9.4696" path="socket:[113866]" dev="sockfs" ino=113866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  487.611910][   T40] audit: type=1400 audit(2000000050.280:19576): avc:  denied  { write } for  pid=23289 comm="syz.9.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  487.867678][   T29] usb 9-1: USB disconnect, device number 8
[  487.877065][   T40] audit: type=1400 audit(2000000050.560:19577): avc:  denied  { setattr } for  pid=23321 comm="syz.8.4701" name="XDP" dev="sockfs" ino=111382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  487.898425][T23322] netlink: 'syz.8.4701': attribute type 13 has an invalid length.
[  487.986649][T23328] netlink: 'syz.8.4701': attribute type 4 has an invalid length.
[  489.097070][ T5937] Bluetooth: hci4: command tx timeout
[  489.256831][T15515] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  489.257580][ T5937] Bluetooth: hci2: command 0x0405 tx timeout
[  489.259705][T15515] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  489.453387][T23369] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  489.512041][T15516] hid_parser_main: 27 callbacks suppressed
[  489.512055][T15516] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  489.522703][T15516] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  489.636830][   T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  489.651906][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4718'.
[  489.828596][   T29] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  489.832409][   T29] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  489.837194][   T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  489.841248][   T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  489.845990][   T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  489.858680][   T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  489.862451][   T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  489.865861][   T29] usb 9-1: Product: syz
[  489.868143][   T29] usb 9-1: Manufacturer: syz
[  489.888838][   T29] cdc_wdm 9-1:1.0: skipping garbage
[  489.891178][   T29] cdc_wdm 9-1:1.0: skipping garbage
[  489.895758][   T29] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device
[  489.899086][   T29] cdc_wdm 9-1:1.0: Unknown control protocol
[  490.005285][   T40] audit: type=1400 audit(2000000052.680:19578): avc:  denied  { read } for  pid=23379 comm="syz.2.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  490.276003][ T5981] usb 9-1: USB disconnect, device number 9
[  490.288717][   T40] audit: type=1400 audit(2000000052.970:19579): avc:  denied  { setopt } for  pid=23389 comm="syz.8.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  490.341354][T23392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4725'.
[  490.420785][T23397] delete_channel: no stack
[  490.480591][T23366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4716'.
[  490.481725][T23397] overlayfs: statfs failed on './file0'
[  490.653148][T23403] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.4728'.
[  490.694690][T23406] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 50999997 out of range (51000000..2150000000)
[  491.175168][T23433] netlink: 'syz.4.4739': attribute type 7 has an invalid length.
[  491.187879][   T40] audit: type=1326 audit(2000000053.870:19580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.4.4739" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd73f9c799 code=0x0
[  491.266016][   T40] audit: type=1400 audit(2000000053.940:19581): avc:  denied  { read } for  pid=23442 comm="syz.8.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  491.496902][T15515] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  491.497078][ T5937] Bluetooth: hci3: command 0x040f tx timeout
[  491.500079][T15515] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  491.519527][T23446] 9p: Bad value for 'rfdno'
[  491.758786][   T29] usb 14-1: USB disconnect, device number 18
[  491.780900][T23452] loop2: detected capacity change from 0 to 7
[  491.784788][T23452] Dev loop2: unable to read RDB block 7
[  491.789948][T23452]  loop2: AHDI p1
[  491.792063][T23452] loop2: partition table partially beyond EOD, truncated
[  491.863633][   T40] audit: type=1400 audit(2000000054.540:19582): avc:  denied  { accept } for  pid=23458 comm="syz.8.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  491.865843][T23459] sctp: [Deprecated]: syz.8.4745 (pid 23459) Use of struct sctp_assoc_value in delayed_ack socket option.
[  491.865843][T23459] Use struct sctp_sack_info instead
[  491.944951][T23468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23468 comm=syz.8.4748
[  492.088450][T23487] fuse: Unknown parameter 'UÁ‚0x0000000000000003'
[  492.251188][T23494] netlink: 'syz.9.4754': attribute type 1 has an invalid length.
[  492.267857][T23494] 8021q: adding VLAN 0 to HW filter on device bond8
[  492.426146][T23513] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4757'.
[  492.558798][T23515] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4758'.
[  492.601768][T23515] bond9 (unregistering): Released all slaves
[  492.860819][T23546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4765'.
[  492.926872][T23549] tmpfs: Bad value for 'mpol'
[  493.345595][T23554] cgroup: fork rejected by pids controller in /syz9
[  493.657017][T15515] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  493.659855][T15515] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  493.675634][   T63] Bluetooth: hci4: command 0x0c1a tx timeout
[  493.760920][T15515] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI
[  493.766059][T15515] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  493.769890][T15515] CPU: 2 UID: 0 PID: 15515 Comm: kworker/2:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.774612][T15515] Tainted: [L]=SOFTLOCKUP
[  493.776512][T15515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  493.778481][T23602] CIFS mount error: No usable UNC path provided in device string!
[  493.778481][T23602] 
[  493.780947][T15515] Workqueue: events rfkill_op_handler
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  493.785435][T23602] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  493.786956][   T40] audit: type=1400 audit(2000000056.460:19583): avc:  denied  { write } for  pid=5846 comm="syz-executor" path="pipe:[3984]" dev="pipefs" ino=3984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  493.788014][T15515] RIP: 0010:klist_put+0x4d/0x1d0
[  493.788041][T15515] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 0a 0d
[  493.788058][T15515] RSP: 0018:ffffc90003a17860 EFLAGS: 00010202
[  493.788073][T15515] RAX: dffffc0000000000 RBX: ffff888043b8ac60 RCX: 0000000000000000
[  493.788083][T15515] RDX: 000000000000000b RSI: ffffffff8b85b295 RDI: 0000000000000058
[  493.788094][T15515] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2179184
[  493.804993][T23603] binfmt_misc: register: failed to install interpreter file ./file0
[  493.813299][T15515] R10: ffffffff90bc8c23 R11: 000000000000760b R12: 0000000000000000
[  493.813320][T15515] R13: 0000000000000001 R14: ffffffff90bc8be0 R15: dffffc0000000000
[  493.813331][T15515] FS:  0000000000000000(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000
[  493.813364][T15515] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  493.813377][T15515] CR2: 000055558b9c89e8 CR3: 000000010a1ee000 CR4: 0000000000352ef0
[  493.813389][T15515] Call Trace:
[  493.813396][T15515]  <TASK>
[  493.849490][T15515]  klist_remove+0x14c/0x2e0
[  493.851853][T15515]  ? __pfx_klist_remove+0x10/0x10
[  493.854099][T15515]  ? __pfx_kobject_move+0x10/0x10
[  493.856324][T15515]  ? kobject_put+0xb9/0x640
[  493.858370][T15515]  device_move+0x12d/0x1140
[  493.860410][T15515]  hci_conn_del_sysfs+0x86/0x1a0
[  493.862663][T15515]  hci_conn_del+0x506/0x1180
[  493.864735][T15515]  hci_conn_hash_flush+0x186/0x280
[  493.866897][T15515]  hci_dev_close_sync+0x5a7/0x1240
[  493.869182][T15515]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  493.871703][T15515]  ? do_raw_spin_lock+0x128/0x260
[  493.873972][T15515]  hci_dev_do_close+0x2e/0xb0
[  493.875981][T15515]  hci_rfkill_set_block+0x225/0x3a0
[  493.878246][T15515]  ? lockdep_hardirqs_on+0x78/0x100
[  493.880585][T15515]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  493.882951][T15515]  rfkill_set_block+0x205/0x510
[  493.884897][T15515]  rfkill_epo+0x93/0x1e0
[  493.886681][T15515]  rfkill_op_handler+0x230/0x260
[  493.888821][T15515]  process_one_work+0x9d7/0x1920
[  493.891055][T15515]  ? __pfx_process_one_work+0x10/0x10
[  493.893459][T15515]  ? __pfx_rfkill_op_handler+0x10/0x10
[  493.895880][T15515]  worker_thread+0x5da/0xe40
[  493.898004][T15515]  ? kthread+0x13a/0x450
[  493.899592][T15515]  ? __pfx_worker_thread+0x10/0x10
[  493.901308][T15515]  kthread+0x370/0x450
[  493.902690][T15515]  ? __pfx_kthread+0x10/0x10
[  493.904272][T15515]  ret_from_fork+0x754/0xd80
[  493.906005][T15515]  ? __pfx_ret_from_fork+0x10/0x10
[  493.907692][T15515]  ? __switch_to+0x7b4/0x1120
[  493.909827][T15515]  ? __pfx_kthread+0x10/0x10
[  493.911873][T15515]  ret_from_fork_asm+0x1a/0x30
[  493.914012][T15515]  </TASK>
[  493.915394][T15515] Modules linked in:
[  493.917807][T15515] ---[ end trace 0000000000000000 ]---
[  493.946022][T15515] RIP: 0010:klist_put+0x4d/0x1d0
[  493.947775][T15515] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 0a 0d
[  493.954835][T15515] RSP: 0018:ffffc90003a17860 EFLAGS: 00010202
[  493.989260][T15515] RAX: dffffc0000000000 RBX: ffff888043b8ac60 RCX: 0000000000000000
[  493.996913][T15515] RDX: 000000000000000b RSI: ffffffff8b85b295 RDI: 0000000000000058
[  493.999705][T15515] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2179184
[  494.002539][T15515] R10: ffffffff90bc8c23 R11: 000000000000760b R12: 0000000000000000
[  494.005349][T15515] R13: 0000000000000001 R14: ffffffff90bc8be0 R15: dffffc0000000000
[  494.016737][T15515] FS:  0000000000000000(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000
[  494.020784][T15515] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  494.023689][T15515] CR2: 00007fe401b5c000 CR3: 0000000035fa2000 CR4: 0000000000352ef0
[  494.050235][T15515] Kernel panic - not syncing: Fatal exception
[  494.053843][T15515] Kernel Offset: disabled
[  494.055713][T15515] Rebooting in 86400 seconds..