last executing test programs:

18m24.598964597s ago: executing program 32 (id=2680):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

17m17.011751415s ago: executing program 33 (id=3573):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x82000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

16m44.346850652s ago: executing program 34 (id=4048):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0xb, 0x4)
recvfrom(r0, 0x0, 0x0, 0x40010062, 0x0, 0x0)

14m57.540180417s ago: executing program 3 (id=5632):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
read(r0, &(0x7f00000001c0)=""/29, 0x1d)

14m54.797369965s ago: executing program 3 (id=5639):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

14m54.643271848s ago: executing program 3 (id=5644):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))

14m54.42243629s ago: executing program 3 (id=5648):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000380)='./file0/../file0\x00')
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00')

14m54.356477583s ago: executing program 3 (id=5650):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}, 0x4004004)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

14m54.102189375s ago: executing program 3 (id=5653):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0xa)

14m53.95007494s ago: executing program 35 (id=5653):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0xa)

14m50.621766915s ago: executing program 6 (id=5702):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

14m50.55336914s ago: executing program 6 (id=5703):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="ca42d77910c4be", 0x7}], 0x1)

14m47.411336039s ago: executing program 6 (id=5737):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
readv(r1, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0x59}], 0x1)

14m47.290212431s ago: executing program 6 (id=5739):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)

14m47.16104892s ago: executing program 6 (id=5740):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)

14m46.71795147s ago: executing program 6 (id=5744):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x880)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0})
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec)

14m46.34491849s ago: executing program 36 (id=5744):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x880)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0})
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec)

13m14.878759679s ago: executing program 7 (id=6871):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x90)

13m14.66951189s ago: executing program 7 (id=6874):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8)
mlockall(0x7)

13m14.436852504s ago: executing program 7 (id=6877):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

13m14.308374021s ago: executing program 7 (id=6880):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, 0x0, r0, &(0x7f0000000340)='./file0/../file0\x00', 0x114)

13m14.126714317s ago: executing program 7 (id=6883):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000068d000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000686000/0x11000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

13m13.007453602s ago: executing program 7 (id=6894):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x1, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000400)="a30941b7b6c608ae50492fb92739f98d", 0x10}])
sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="30b44d83f3c865514db0b0234e3d772c", 0x10}], 0x1, 0x0, 0x0, 0x40001}], 0x1, 0x200080d0)

13m12.707249505s ago: executing program 37 (id=6894):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x1, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000400)="a30941b7b6c608ae50492fb92739f98d", 0x10}])
sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="30b44d83f3c865514db0b0234e3d772c", 0x10}], 0x1, 0x0, 0x0, 0x40001}], 0x1, 0x200080d0)

12m12.092278148s ago: executing program 2 (id=7485):
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b45, 0x8000000000001)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x8, 0x4}, {0x18, 0x4558}}}}, 0x11)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

12m11.847878178s ago: executing program 2 (id=7489):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000010000000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94)

12m10.893355491s ago: executing program 2 (id=7495):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e28, @loopback}, 0x10)

12m10.763081234s ago: executing program 2 (id=7497):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)

12m10.473923914s ago: executing program 2 (id=7498):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0x9, 0xfd, 0x81, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0xeeee8000, 0x3, 0xff, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x7, 0x3}, {0x54000, 0xdddd0000, 0x4, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0x4f}, {0x60000, 0xe000, 0x8, 0x3, 0x3, 0x6, 0xab, 0x7b, 0x7, 0x2, 0xdb}, {0xe000, 0xa000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x3000, 0xe000, 0x8, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x3}, {0x100000, 0xd000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x9000, [0xf90000000000, 0x4, 0x80, 0xfff]})
socket$igmp6(0xa, 0x3, 0x2)

12m10.11449877s ago: executing program 2 (id=7503):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f0000000100001000000000000000000fe880000000000000000000000000101ac14143e00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0xf0}}, 0x800)
r0 = socket(0x10, 0x803, 0x2)
getsockname$packet(r0, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12m9.889185346s ago: executing program 38 (id=7503):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f0000000100001000000000000000000fe880000000000000000000000000101ac14143e00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0xf0}}, 0x800)
r0 = socket(0x10, 0x803, 0x2)
getsockname$packet(r0, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m58.968748799s ago: executing program 1 (id=9737):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

3m57.592218245s ago: executing program 1 (id=9743):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = eventfd(0x80000001)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)

3m53.269822537s ago: executing program 1 (id=9754):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006", @ANYBLOB], 0x48)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r4}, 0x20)

3m52.00117813s ago: executing program 1 (id=9757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x80, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r3, 0x0, 0x1)

3m49.599676187s ago: executing program 1 (id=9760):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic='+']}]}, 0x2c}], 0x1}, 0xcc000)

3m48.271259879s ago: executing program 1 (id=9768):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$unix(0x1, 0x1, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x2}, 0x6d}, 0x10)

3m33.100281498s ago: executing program 39 (id=9768):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$unix(0x1, 0x1, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x2}, 0x6d}, 0x10)

19.999672901s ago: executing program 0 (id=10161):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004880}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe7c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x16, 0x8, 0x70bd2a, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4004893}, 0x0)

18.238450508s ago: executing program 0 (id=10163):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1080, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCL_PASTESEL(r2, 0x541c, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3, 0x40000005, 0x0, 0x200}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x3, 0x0, 0x0, 0xd9ca60141892c73c})
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x27, 0x4)
r3 = io_uring_setup(0xb23, &(0x7f0000000500)={0x0, 0x0, 0x2})
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r5, &(0x7f0000000480)=""/74, 0x4a)
close_range(r3, r5, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x40000fb, 0x4)
fsopen(&(0x7f0000000000)='omfs\x00', 0x1)

14.650539112s ago: executing program 9 (id=10174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004880}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe7c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x16, 0x8, 0x70bd2a, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4004893}, 0x0)

14.649335656s ago: executing program 0 (id=10175):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f00007f7000/0x2000)=nil, 0x2000, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20)

12.552937596s ago: executing program 8 (id=10176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe00, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2002, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x5, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x40}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880)

11.146015436s ago: executing program 0 (id=10177):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

10.179392725s ago: executing program 9 (id=10180):
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=ANY=[@ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48, 0xff, 0x20, 0x2000}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.846040054s ago: executing program 4 (id=10181):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
clock_gettime(0x3, &(0x7f0000000040))
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
ptrace(0x10, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x24040000)

8.802057486s ago: executing program 8 (id=10182):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe800000004000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.796124363s ago: executing program 0 (id=10183):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x7c}, 0x1, 0x0, 0x0, 0x20002010}, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000002b00)='nfsd\x00', 0x0)

8.685317257s ago: executing program 5 (id=10184):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0)
mkdirat$cgroup(r1, 0x0, 0x1ff)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xb}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7)

6.722165977s ago: executing program 5 (id=10185):
socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44)

6.720469017s ago: executing program 0 (id=10186):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
fsopen(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
shutdown(r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28)

6.486730123s ago: executing program 4 (id=10187):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
shutdown(r0, 0x1)
poll(&(0x7f0000000000), 0x0, 0x3ff)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = gettid()
socket$inet_tcp(0x2, 0x1, 0x0)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
timer_settime(r3, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'})
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)

6.462885022s ago: executing program 8 (id=10188):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)

5.435476195s ago: executing program 5 (id=10189):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x80)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x25a)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0x7, 0x8, 0x3d54, 0x494e4f4b, [0x0, 0x4], [0x3, 0x5], 0x2023c860d0553049}})

5.187993832s ago: executing program 9 (id=10190):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x88)
openat$cgroup_int(r2, &(0x7f0000002200)='cpu.max\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0x68}}}]}]}, 0x6c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x100, 0x1f, 0x1, 0x202, 0x9, 0xfd, 0x3, 0x20000000, 0xa, 0x2000000e, 0x2, 0xb51, 0x1, 0x401, 0x10001, 0x100, 0x200, 0xa, 0x7, 0x401, 0x20000007, 0x3, 0x7, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x2, 0x7, 0xa]})

4.339295444s ago: executing program 8 (id=10191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r4, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000)

4.25403377s ago: executing program 5 (id=10192):
openat$kvm(0xffffffffffffff9c, 0x0, 0x109902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
keyctl$clear(0x11, 0xfffffffffffffffd)
pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)

4.226393376s ago: executing program 4 (id=10193):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4850)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

4.09552368s ago: executing program 9 (id=10194):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd})
unlink(&(0x7f0000000100)='./file0\x00')

3.001178539s ago: executing program 8 (id=10195):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100405, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000380)=0x102)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)

2.954401816s ago: executing program 5 (id=10196):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x6, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

2.859177399s ago: executing program 4 (id=10197):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000027e000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000409000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x7915, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fc})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.783961619s ago: executing program 9 (id=10198):
ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x4, 0x6, 0x0, 0xfffffffffffffffd, 0x80000000, 0x8000000, 0x7fffffdfffffffff}, {0x0, 0x0, 0x3ff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

1.774969156s ago: executing program 4 (id=10199):
ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10040, 0x3)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fffffdf, 0x400000001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))
r2 = socket$kcm(0x29, 0x5, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)

1.714469272s ago: executing program 5 (id=10200):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
chroot(&(0x7f0000000140)='./file0/../file0\x00')
pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

277.26661ms ago: executing program 9 (id=10201):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x2, 0x0)
syz_usb_connect(0x5, 0x36, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

21.962424ms ago: executing program 4 (id=10202):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31c40606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfb7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0)

0s ago: executing program 8 (id=10203):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0)
ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6})

kernel console output (not intermixed with test programs):

usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  964.246202][ T1888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  964.289152][ T1888] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  964.345521][ T1888] usb 10-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  964.370332][ T1888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.402572][ T1888] usb 10-1: config 0 descriptor??
[  964.416553][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9277'.
[  964.430369][T10038] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  964.665276][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880506e2400: rx timeout, send abort
[  964.861195][   T30] audit: type=1400 audit(1472.859:2029): avc:  denied  { read } for  pid=4964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  964.884725][   T30] audit: type=1400 audit(1472.859:2030): avc:  denied  { search } for  pid=4964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  964.911461][   T30] audit: type=1400 audit(1472.859:2031): avc:  denied  { write search } for  pid=4964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  964.993748][   T30] audit: type=1400 audit(1472.859:2032): avc:  denied  { add_name } for  pid=4964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  965.043591][   T30] audit: type=1400 audit(1472.859:2033): avc:  denied  { create } for  pid=4964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  965.069214][   T30] audit: type=1400 audit(1472.859:2034): avc:  denied  { append open } for  pid=4964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  965.103660][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9278'.
[  965.109088][   T30] audit: type=1400 audit(1472.859:2035): avc:  denied  { getattr } for  pid=4964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  965.151925][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9279'.
[  965.179047][T10070] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3453568900/3453568902
[  965.189714][T10070] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3453568900/3453568901
[  965.225379][T10070] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3453568900/3453568902
[  965.248510][T10070] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3453568900/3453568901
[  965.281708][T10068] vlan4: entered allmulticast mode
[  965.287486][T10068] bridge3: entered allmulticast mode
[  965.293958][T10038] hsr0: entered promiscuous mode
[  965.295667][T10066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10066 comm=syz.5.9278
[  965.318899][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9273'.
[  965.349272][T10038] hsr_slave_0: left promiscuous mode
[  965.358580][T10038] hsr_slave_1: left promiscuous mode
[  965.368825][T10038] hsr0 (unregistering): left promiscuous mode
[  965.404134][T10068] bridge3: port 1(erspan0) entered blocking state
[  965.417805][ T1888] uclogic 0003:5543:0004.0054: ignoring exceeding usage max
[  965.430941][T10068] bridge3: port 1(erspan0) entered disabled state
[  965.439496][T10068] erspan0: entered allmulticast mode
[  965.455425][T10068] erspan0: left allmulticast mode
[  965.456626][ T1888] uclogic 0003:5543:0004.0054: unknown main item tag 0x0
[  965.483144][ T1888] uclogic 0003:5543:0004.0054: unknown main item tag 0x0
[  965.507895][ T1888] uclogic 0003:5543:0004.0054: unknown main item tag 0x0
[  965.524111][ T1888] uclogic 0003:5543:0004.0054: unknown main item tag 0x0
[  965.538961][ T1888] uclogic 0003:5543:0004.0054: unknown main item tag 0x0
[  965.570569][ T1888] uclogic 0003:5543:0004.0054: unknown main item tag 0x0
[  965.577719][ T1888] uclogic 0003:5543:0004.0054: unknown main item tag 0x0
[  965.588624][ T1888] uclogic 0003:5543:0004.0054: unknown main item tag 0x0
[  965.654347][ T1888] uclogic 0003:5543:0004.0054: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.9-1/input0
[  965.689105][ T1888] usb 10-1: USB disconnect, device number 34
[  965.834530][T10121] fido_id[10121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  966.031560][T10127] syzkaller0: entered promiscuous mode
[  966.037700][T10127] syzkaller0: entered allmulticast mode
[  966.518745][T10136] netlink: 'syz.4.9288': attribute type 1 has an invalid length.
[  966.594923][T10136] 8021q: adding VLAN 0 to HW filter on device bond15
[  966.772329][T10136] bond15: (slave ip6gretap2): making interface the new active one
[  966.813218][T10136] bond15: (slave ip6gretap2): Enslaving as an active interface with an up link
[  967.061130][T10173] bond15: entered allmulticast mode
[  967.928062][T10173] ip6gretap2: entered allmulticast mode
[  968.571357][T10174] lo speed is unknown, defaulting to 1000
[  969.950414][    T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!!
[  972.141567][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9303'.
[  972.150691][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9303'.
[  972.159876][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9303'.
[  974.774887][T10271] lo speed is unknown, defaulting to 1000
[  975.999508][T10331] xt_CT: You must specify a L4 protocol and not use inversions on it
[  976.720265][   T30] audit: type=1400 audit(1484.729:2036): avc:  denied  { write } for  pid=10321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  977.164052][T10353] netlink: 'syz.4.9317': attribute type 39 has an invalid length.
[  978.030589][   T30] audit: type=1400 audit(1486.039:2037): avc:  denied  { write } for  pid=10349 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  979.391452][   T30] audit: type=1400 audit(1487.409:2038): avc:  denied  { write } for  pid=10383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  979.667136][   T30] audit: type=1400 audit(1487.669:2039): avc:  denied  { write } for  pid=10410 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  979.797000][   T30] audit: type=1400 audit(1487.809:2040): avc:  denied  { remount } for  pid=10411 comm="syz.8.9322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  980.431883][T10438] fuse: fd is not a fuse device
[  980.537029][   T30] audit: type=1400 audit(1488.549:2041): avc:  denied  { mount } for  pid=10443 comm="syz.4.9331" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  980.546434][T10444] overlayfs: failed to clone upperpath
[  980.784178][   T30] audit: type=1400 audit(1488.779:2042): avc:  denied  { write } for  pid=10417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  981.135134][   T30] audit: type=1400 audit(1489.119:2043): avc:  denied  { write } for  pid=10460 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  981.950540][ T1888] usb 9-1: new full-speed USB device number 33 using dummy_hcd
[  982.062107][T10478] syzkaller0: entered promiscuous mode
[  982.098387][T10478] syzkaller0: entered allmulticast mode
[  982.329340][ T1888] usb 9-1: config 7 has an invalid interface number: 123 but max is 0
[  982.346606][ T1888] usb 9-1: config 7 has no interface number 0
[  982.372475][ T1888] usb 9-1: config 7 interface 123 has no altsetting 0
[  982.383339][ T1888] usb 9-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=50.af
[  982.430811][ T1888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.450012][ T1888] usb 9-1: Product: syz
[  982.458685][ T1888] usb 9-1: Manufacturer: syz
[  982.466817][ T1888] usb 9-1: SerialNumber: syz
[  982.638271][   T30] audit: type=1400 audit(1490.649:2044): avc:  denied  { write } for  pid=10465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  982.854507][   T30] audit: type=1400 audit(1490.869:2045): avc:  denied  { write } for  pid=10513 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  983.879069][ T1888] uvcvideo 9-1:7.123: Found UVC 0.00 device syz (174f:5212)
[  983.947512][ T1888] uvcvideo 9-1:7.123: No valid video chain found.
[  983.993727][ T1888] usb 9-1: USB disconnect, device number 33
[  984.188357][T10546] netlink: 'syz.4.9348': attribute type 1 has an invalid length.
[  984.283281][T10553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9348'.
[  984.406824][T10546] 8021q: adding VLAN 0 to HW filter on device bond16
[  984.774521][   T30] audit: type=1400 audit(1492.789:2046): avc:  denied  { write } for  pid=10535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  984.964517][T10575] bond16: (slave dummy0): making interface the new active one
[  984.993106][T10575] bond16: (slave dummy0): Enslaving as an active interface with an up link
[  985.014639][   T30] audit: type=1400 audit(1492.959:2047): avc:  denied  { write } for  pid=10600 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  985.102105][T10553] bond16: entered promiscuous mode
[  985.114353][T10553] bond16: entered allmulticast mode
[  985.137218][T10553] dummy0: entered allmulticast mode
[  987.793099][   T30] audit: type=1400 audit(1495.789:2048): avc:  denied  { write } for  pid=10602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.167785][   T30] audit: type=1400 audit(1496.179:2049): avc:  denied  { write } for  pid=10649 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  989.036315][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9363'.
[  990.285890][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'.
[  990.296425][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9367'.
[  990.359913][T10676] netlink: 'syz.1.9367': attribute type 4 has an invalid length.
[  990.368750][T10676] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9367'.
[  994.019667][T10647] vlan4: left allmulticast mode
[  994.024734][T10647] bridge3: left allmulticast mode
[  994.029991][T10656] batadv_slave_0: entered promiscuous mode
[  994.047577][T10657] team0: left promiscuous mode
[  994.065760][T10657] team0: left allmulticast mode
[  994.081718][T10657] team0: Cannot enslave team device to itself
[  994.098029][T10658] batadv_slave_0: left promiscuous mode
[  994.110796][T10664] sch_tbf: burst 1023 is lower than device lo mtu (11337746) !
[  994.462757][ T8178] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  995.131934][T10676] .`: renamed from 
 (while UP)
[  995.164527][T10676] bond_slave_0: left promiscuous mode
[  995.310589][T10676] bond_slave_1: left promiscuous mode
[  995.710407][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  995.768211][T10737] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9375'.
[  995.792343][T10737] netlink: 59 bytes leftover after parsing attributes in process `syz.1.9375'.
[  995.817461][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9371'.
[  995.828892][T10737] netlink: 59 bytes leftover after parsing attributes in process `syz.1.9375'.
[  996.080532][T10742] Cannot find set identified by id 0 to match
[  996.409226][T10740] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9376'.
[  996.419221][T10740] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9376'.
[  998.000405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  999.225051][T10746] 8021q: adding VLAN 0 to HW filter on device .`
[  999.261359][T10746] bond_slave_0: entered promiscuous mode
[  999.270004][T10746] bond_slave_1: entered promiscuous mode
[  999.360135][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9385'.
[  999.773407][T10746] 8021q: adding VLAN 0 to HW filter on device bond0
[  999.833682][T10746] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  999.924630][T10788] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1000.078234][T10791] netlink: 'syz.5.9387': attribute type 1 has an invalid length.
[ 1000.215283][T10818] fuse: fd is not a fuse device
[ 1000.314848][T10791] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1000.516520][T10816] bond6: (slave ip6gretap1): making interface the new active one
[ 1000.588955][T10816] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1001.113252][   T30] audit: type=1326 audit(1509.129:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1001.210204][   T30] audit: type=1326 audit(1509.129:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1001.351011][   T30] audit: type=1326 audit(1509.159:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1001.495946][   T30] audit: type=1326 audit(1509.159:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1001.611717][   T30] audit: type=1326 audit(1509.159:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1001.715049][   T30] audit: type=1326 audit(1509.159:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1001.802797][   T30] audit: type=1326 audit(1509.209:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1001.908560][   T30] audit: type=1326 audit(1509.209:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1001.957512][   T30] audit: type=1326 audit(1509.209:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1002.020594][   T30] audit: type=1326 audit(1509.209:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.9392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b9875d68e code=0x7ffc0000
[ 1002.110488][ T1884] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1002.270653][ T1884] usb 9-1: Using ep0 maxpacket: 32
[ 1002.289137][ T1884] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1002.299592][ T1884] usb 9-1: config 0 has no interface number 0
[ 1002.331191][ T1884] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1002.366867][ T1884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.411062][ T1884] usb 9-1: Product: syz
[ 1002.438537][ T1884] usb 9-1: Manufacturer: syz
[ 1002.468933][ T1884] usb 9-1: SerialNumber: syz
[ 1002.499641][ T1884] usb 9-1: config 0 descriptor??
[ 1002.537958][ T1884] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1002.570454][ T1884] usb 9-1: selecting invalid altsetting 1
[ 1002.611247][ T1884] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1002.812742][ T1884] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1003.583443][ T1884] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1003.594676][ T1884] usb 9-1: media controller created
[ 1003.613518][ T1884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1003.663413][ T1884] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1003.692327][ T1884] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1003.832634][ T1884] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1003.895758][ T1884] usb 9-1: USB disconnect, device number 34
[ 1006.452186][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9402'.
[ 1007.301144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!!
[ 1008.470528][T23464] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1009.489120][T23464] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1009.500675][T23464] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1009.522273][T23464] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1009.641559][T23464] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1009.742979][T23464] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1009.775973][T23464] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1009.785848][T23464] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1009.795383][T23464] usb 9-1: Product: syz
[ 1009.800978][T23464] usb 9-1: Manufacturer: syz
[ 1009.822077][T23464] cdc_wdm 9-1:1.0: skipping garbage
[ 1009.833182][T23464] cdc_wdm 9-1:1.0: skipping garbage
[ 1009.844370][T23464] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1009.851022][T23464] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1012.191317][T23464] usb 9-1: USB disconnect, device number 35
[ 1013.106052][T10977] netlink: 'syz.1.9417': attribute type 11 has an invalid length.
[ 1013.320399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!!
[ 1015.397327][T10986] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[ 1016.619393][T11056] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9427'.
[ 1017.333411][T11008] batman_adv: batadv0: Interface deactivated: ip6gretap1
[ 1017.380019][T11008] batman_adv: batadv0: Removing interface: ip6gretap1
[ 1018.046662][   T30] kauditd_printk_skb: 63 callbacks suppressed
[ 1018.046680][   T30] audit: type=1400 audit(1526.059:2123): avc:  denied  { read write } for  pid=11075 comm="syz.8.9431" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1018.114543][T11010] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1018.131241][   T30] audit: type=1400 audit(1526.089:2124): avc:  denied  { open } for  pid=11075 comm="syz.8.9431" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1018.183286][T11010] bond17: (slave lo): Enslaving as an active interface with an up link
[ 1018.210218][T11010] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1018.245329][   T30] audit: type=1804 audit(1526.249:2125): pid=11076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.9431" name="/newroot/666/file0" dev="fuse" ino=1 res=1 errno=0
[ 1018.295776][   T30] audit: type=1804 audit(1526.259:2126): pid=11076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.9431" name="/newroot/666/file0" dev="fuse" ino=1 res=1 errno=0
[ 1018.354574][ T1887] lo speed is unknown, defaulting to 1000
[ 1018.418503][ T1884] lo speed is unknown, defaulting to 1000
[ 1018.582130][ T1887] lo speed is unknown, defaulting to 1000
[ 1019.560399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1019.620397][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1019.680403][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1022.680964][   T30] audit: type=1326 audit(1530.679:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.9.9439" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c139ce59 code=0x7fc00000
[ 1023.587483][T11134] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9444'.
[ 1023.629025][T11134] CIFS mount error: No usable UNC path provided in device string!
[ 1023.629025][T11134] 
[ 1023.766256][T11134] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1026.476208][ T5605] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1026.625929][   T30] audit: type=1400 audit(1534.639:2128): avc:  denied  { unmount } for  pid=22180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1026.830397][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[ 1028.170558][ T1884] usb 10-1: new full-speed USB device number 35 using dummy_hcd
[ 1029.205013][ T1884] usb 10-1: config 2 has an invalid interface number: 153 but max is 0
[ 1029.244331][ T1884] usb 10-1: config 2 has no interface number 0
[ 1029.261316][ T1884] usb 10-1: config 2 interface 153 has no altsetting 0
[ 1029.272137][ T1884] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=2d.fd
[ 1029.445840][ T1884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.459783][ T1884] usb 10-1: Product: syz
[ 1029.464573][ T1884] usb 10-1: Manufacturer: syz
[ 1029.469613][ T1884] usb 10-1: SerialNumber: syz
[ 1030.356667][T11203] lo speed is unknown, defaulting to 1000
[ 1030.563518][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.614618][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1031.074978][ T1884] usb 10-1: unknown interface protocol 0x8, assuming v1
[ 1031.090475][ T1884] usb 10-1: cannot find UAC_HEADER
[ 1031.191304][ T1884] snd-usb-audio 10-1:2.153: probe with driver snd-usb-audio failed with error -22
[ 1031.220352][ T1884] usb 10-1: USB disconnect, device number 35
[ 1031.271264][T10766] udevd[10766]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:2.153/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1031.300963][ T1887] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1031.460711][ T1887] usb 6-1: Using ep0 maxpacket: 32
[ 1031.470483][T11252] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[ 1031.483255][ T1887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1031.497175][ T1887] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1031.508654][ T1887] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1031.528291][ T1887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.536692][ T1887] usb 6-1: Product: syz
[ 1031.546838][ T1887] usb 6-1: Manufacturer: syz
[ 1031.552135][ T1887] usb 6-1: SerialNumber: syz
[ 1031.566584][ T1887] usb 6-1: config 0 descriptor??
[ 1034.929558][T11269] usb 6-1: USB disconnect, device number 30
[ 1035.026159][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9468'.
[ 1035.880668][T11316] batman_adv: batadv0: Adding interface: macvtap2
[ 1035.887872][T11316] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active
[ 1036.136056][T11330] batman_adv: batadv0: Removing interface: macvtap2
[ 1038.032597][ T8178] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex
[ 1038.042510][ T8178] bond5: (slave veth7): making interface the new active one
[ 1038.055766][ T8178] bond5: active interface up!
[ 1038.524012][T11369] syzkaller0: entered promiscuous mode
[ 1038.543278][T11369] syzkaller0: entered allmulticast mode
[ 1039.943885][T11406] netlink: 'syz.5.9485': attribute type 1 has an invalid length.
[ 1040.103912][T11408] bond7: entered promiscuous mode
[ 1040.167994][T11408] bond7: entered allmulticast mode
[ 1040.195762][T11408] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1040.674525][T11421] bridge3: entered promiscuous mode
[ 1040.723156][T11421] bridge3: entered allmulticast mode
[ 1040.757020][ T5638] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1040.806832][T11421] bond7: (slave bridge3): Enslaving as an active interface with an up link
[ 1041.088853][ T5638] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1041.132033][T11406] bridge4: entered promiscuous mode
[ 1041.137714][T11406] bridge4: entered allmulticast mode
[ 1041.146257][T11406] bond7: (slave bridge4): Enslaving as a backup interface with a down link
[ 1041.201196][T11406] bridge5: entered promiscuous mode
[ 1041.215059][T11406] bridge5: entered allmulticast mode
[ 1041.232951][T11406] bond7: (slave bridge5): Enslaving as a backup interface with a down link
[ 1041.447039][T11470] lo speed is unknown, defaulting to 1000
[ 1043.378221][   T30] audit: type=1400 audit(1551.389:2129): avc:  denied  { accept } for  pid=11505 comm="syz.8.9500" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[ 1044.906578][T11560] syzkaller0: entered promiscuous mode
[ 1044.944344][T11560] syzkaller0: entered allmulticast mode
[ 1047.199252][T11591] fuse: fd is not a fuse device
[ 1047.645886][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9512'.
[ 1047.796988][T11643] bond8: entered promiscuous mode
[ 1047.825553][T11643] bond8: entered allmulticast mode
[ 1048.420783][ T1887] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1048.610974][   T30] audit: type=1800 audit(1556.569:2130): pid=11646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.9515" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[ 1048.674140][ T1887] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1048.729311][ T1887] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1048.783129][ T1887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1048.814344][ T1887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1048.862479][ T1887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1048.947905][ T1887] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1048.976771][ T1887] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1049.023243][ T1887] usb 6-1: Product: syz
[ 1049.071476][ T1887] usb 6-1: Manufacturer: syz
[ 1049.121576][ T1887] cdc_wdm 6-1:1.0: skipping garbage
[ 1049.145553][ T1887] cdc_wdm 6-1:1.0: skipping garbage
[ 1049.191575][ T1887] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1049.225982][ T1887] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1050.377072][T11678] F2FS-fs: Conflicting test_dummy_encryption options
[ 1050.798269][T11691] vxlan0: entered promiscuous mode
[ 1050.810720][T11698] xt_hashlimit: max too large, truncated to 1048576
[ 1050.834027][T11691] vxlan0: entered allmulticast mode
[ 1050.872059][T11698] xt_hashlimit: overflow, rate too high: 0
[ 1050.883407][ T5602] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1050.921886][ T5602] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1050.962030][ T5602] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1051.002276][ T5602] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1051.098229][T11701] lo speed is unknown, defaulting to 1000
[ 1051.212753][ T1887] usb 6-1: USB disconnect, device number 31
[ 1051.465805][T11731] syzkaller0: entered promiscuous mode
[ 1051.486030][T11731] syzkaller0: entered allmulticast mode
[ 1051.544140][   T30] audit: type=1400 audit(1559.559:2131): avc:  denied  { write } for  pid=11682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.795359][   T30] audit: type=1400 audit(1559.809:2132): avc:  denied  { write } for  pid=11741 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.981807][T23464] IPVS: starting estimator thread 0...
[ 1052.093768][T11751] IPVS: using max 44 ests per chain, 105600 per kthread
[ 1052.665144][T11775] netlink: zone id is out of range
[ 1052.685391][T11775] netlink: del zone limit has 4 unknown bytes
[ 1054.223301][   T30] audit: type=1800 audit(1562.219:2133): pid=11770 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.9531" name="bus" dev="ramfs" ino=124228 res=0 errno=0
[ 1054.600958][T11807] block nbd8: shutting down sockets
[ 1055.049142][T11855] overlayfs: failed to clone upperpath
[ 1058.556702][ T5619] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1061.661928][T11912] IPVS: wrr: FWM 3 0x00000003 - no destination available
[ 1061.688237][   T30] audit: type=1326 audit(1569.699:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1061.798262][   T30] audit: type=1326 audit(1569.699:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1061.919872][   T30] audit: type=1326 audit(1569.739:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1062.028499][   T30] audit: type=1326 audit(1569.739:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1062.263223][   T30] audit: type=1326 audit(1569.739:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1063.127489][   T30] audit: type=1326 audit(1569.739:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1063.322607][   T30] audit: type=1326 audit(1569.739:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1063.800586][   T30] audit: type=1326 audit(1569.749:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1064.211307][   T30] audit: type=1326 audit(1569.759:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1064.283674][   T30] audit: type=1326 audit(1569.759:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.1.9556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9879ce59 code=0x7ffc0000
[ 1065.646674][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9565'.
[ 1065.656212][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9565'.
[ 1065.666241][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9565'.
[ 1065.675323][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9565'.
[ 1066.087793][T11961] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9568'.
[ 1067.022046][ T1887] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1067.180520][ T1887] usb 6-1: device descriptor read/64, error -71
[ 1067.850945][T11973] netlink: 'syz.8.9570': attribute type 2 has an invalid length.
[ 1067.859413][T11973] netlink: 'syz.8.9570': attribute type 1 has an invalid length.
[ 1067.867883][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9570'.
[ 1068.228505][ T1887] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1068.480446][ T1887] usb 6-1: device descriptor read/64, error -71
[ 1069.376238][T11961] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9568'.
[ 1069.835149][ T1887] usb usb6-port1: attempt power cycle
[ 1070.510517][ T1887] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1070.858261][ T1887] usb 6-1: device descriptor read/8, error -71
[ 1072.070442][T11269] usb 10-1: new full-speed USB device number 36 using dummy_hcd
[ 1072.260920][T11269] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.322864][T11269] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1072.380616][T11269] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1072.416683][T11269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.466907][T11269] usb 10-1: config 0 descriptor??
[ 1072.515799][T11269] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1073.093565][T12032] netlink: 'syz.1.9585': attribute type 12 has an invalid length.
[ 1075.330804][  T805] usb 10-1: USB disconnect, device number 36
[ 1077.056472][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9601'.
[ 1078.645842][T12142] fuse: fd is not a fuse device
[ 1079.190717][ T1887] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1079.526525][T12173] netlink: set zone limit has 4 unknown bytes
[ 1079.560750][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.651288][ T1887] usb 6-1: Using ep0 maxpacket: 32
[ 1079.667170][ T1887] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1079.688056][ T1887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.708289][ T1887] usb 6-1: Product: syz
[ 1079.716850][ T1887] usb 6-1: Manufacturer: syz
[ 1079.736441][ T1887] usb 6-1: SerialNumber: syz
[ 1079.764656][ T1887] usb 6-1: config 0 descriptor??
[ 1079.782334][ T1887] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1080.104520][T12183] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22755] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
[ 1082.161658][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9610'.
[ 1082.709472][ T1887] gspca_ov534_9: reg_r err -110
[ 1083.053073][ T1887] gspca_ov534_9: Unknown sensor 0000
[ 1083.053149][ T1887] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[ 1083.155248][T12227] 9p: Bad value for 'rfdno'
[ 1084.912383][ T1887] usb 6-1: USB disconnect, device number 36
[ 1086.938737][T12271] lo: Caught tx_queue_len zero misconfig
[ 1087.055144][T12278] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1088.124154][T12291] syzkaller0: entered promiscuous mode
[ 1088.155311][T12291] syzkaller0: entered allmulticast mode
[ 1090.441063][ T5629] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1091.760620][ T1870] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1092.750633][ T1870] usb 9-1: Using ep0 maxpacket: 32
[ 1092.764122][ T1870] usb 9-1: config 2 has an invalid interface number: 88 but max is 0
[ 1092.793225][ T1870] usb 9-1: config 2 has no interface number 0
[ 1092.809512][ T1870] usb 9-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[ 1092.825665][ T1870] usb 9-1: config 2 interface 88 has no altsetting 0
[ 1092.859852][ T1870] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[ 1092.873903][ T1870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.888189][ T1870] usb 9-1: Product: syz
[ 1092.894708][ T1870] usb 9-1: Manufacturer: syz
[ 1092.908041][ T1870] usb 9-1: SerialNumber: syz
[ 1092.958194][T12327] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1093.635252][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9650'.
[ 1096.072408][T12359] netlink: 'syz.4.9654': attribute type 11 has an invalid length.
[ 1098.041634][ T1870] asix 9-1:2.88: probe with driver asix failed with error -110
[ 1100.810915][ T1870] usb 9-1: USB disconnect, device number 36
[ 1100.938331][T12361] veth0_vlan: left promiscuous mode
[ 1100.956328][T12361] veth0_vlan: entered promiscuous mode
[ 1101.012152][T11269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1101.122501][T12361] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[ 1101.361339][T11269] usb 10-1: new full-speed USB device number 37 using dummy_hcd
[ 1101.473526][ T1890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1101.586405][T11269] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1101.676007][T11269] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1101.776028][T11269] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1101.798131][T11269] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1101.824355][T11269] usb 10-1: Product: syz
[ 1101.839229][T11269] usb 10-1: Manufacturer: syz
[ 1101.873828][T11269] hub 10-1:4.0: USB hub found
[ 1101.986983][T11083] syz0: Port: 1 Link ACTIVE
[ 1102.003399][T12416] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1102.084100][T11269] hub 10-1:4.0: 2 ports detected
[ 1102.363803][T12394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1102.487014][T12394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1102.716245][T11269] hub 10-1:4.0: hub_hub_status failed (err = -71)
[ 1102.823937][T11269] hub 10-1:4.0: config failed, can't get hub status (err -71)
[ 1103.044906][T11269] usb 10-1: USB disconnect, device number 37
[ 1105.175447][T12441] ptrace attach of ""[12450] was attempted by ""[12441]
[ 1106.077455][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 1106.077517][   T30] audit: type=1400 audit(1614.029:2152): avc:  denied  { append } for  pid=12453 comm="syz.9.9669" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1107.978362][T12475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9674'.
[ 1112.198954][T12518] veth0_to_team: entered promiscuous mode
[ 1112.199111][T12520] netlink: 'syz.8.9687': attribute type 1 has an invalid length.
[ 1112.322844][T12547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12547 comm=syz.8.9687
[ 1112.428752][T12520] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1112.489434][T12524] bond7: (slave gretap1): making interface the new active one
[ 1112.506371][T12524] bond7: (slave gretap1): Enslaving as an active interface with an up link
[ 1112.807723][T12583] netlink: 'syz.8.9694': attribute type 1 has an invalid length.
[ 1112.865943][   T30] audit: type=1326 audit(1620.879:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1112.894661][   T30] audit: type=1326 audit(1620.879:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1112.965398][   T30] audit: type=1326 audit(1620.879:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1112.995149][   T30] audit: type=1326 audit(1620.879:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1113.032771][   T30] audit: type=1326 audit(1620.879:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1113.064972][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9694'.
[ 1113.097086][   T30] audit: type=1326 audit(1620.909:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1113.160986][   T30] audit: type=1326 audit(1620.909:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1113.244253][   T30] audit: type=1326 audit(1620.979:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1113.268005][ T1887] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 1113.305887][T12589] bond8: (slave geneve4): making interface the new active one
[ 1113.365207][   T30] audit: type=1326 audit(1620.979:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1113.422837][   T30] audit: type=1326 audit(1620.979:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.4.9692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x7ffc0000
[ 1113.464460][ T1887] usb 10-1: Using ep0 maxpacket: 16
[ 1113.529468][ T1887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1113.603652][ T1887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1113.643299][T12589] bond8: (slave geneve4): Enslaving as an active interface with an up link
[ 1113.652198][ T1887] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1113.688634][ T1887] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1113.698995][   T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1113.716987][   T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1113.726211][ T1887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.738075][T12583] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1113.747408][ T1887] usb 10-1: config 0 descriptor??
[ 1113.806602][   T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1113.816570][   T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1114.239339][ T1887] shield 0003:0955:7214.0055: unknown main item tag 0x0
[ 1114.307239][ T1887] shield 0003:0955:7214.0055: unknown main item tag 0x0
[ 1114.404019][ T1887] shield 0003:0955:7214.0055: unknown main item tag 0x0
[ 1114.478199][ T1887] shield 0003:0955:7214.0055: unknown main item tag 0x0
[ 1114.537348][ T1887] shield 0003:0955:7214.0055: unknown main item tag 0x0
[ 1114.849567][ T1887] input: HID 0955:7214 Haptics as /devices/virtual/input/input99
[ 1115.157612][ T1887] shield 0003:0955:7214.0055: Registered Thunderstrike controller
[ 1115.219778][ T1887] shield 0003:0955:7214.0055: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0
[ 1116.035497][T11269] usb 10-1: USB disconnect, device number 38
[ 1116.042454][ T1888] shield 0003:0955:7214.0055: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1116.235730][ T1887] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1116.251065][ T1888] shield 0003:0955:7214.0055: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1116.262362][ T1888] shield 0003:0955:7214.0055: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1116.582001][ T1888] shield 0003:0955:7214.0055: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1116.642624][ T1887] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1116.934970][ T1887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1116.965540][ T1887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1116.984317][ T1887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1118.177589][ T1887] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1118.228780][ T1887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.264812][ T1887] usb 6-1: config 0 descriptor??
[ 1118.381293][T12713] futex_wake_op: syz.4.9708 tries to shift op by 144; fix this program
[ 1118.718499][ T1887] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1121.130716][ T1887] usb 6-1: reset high-speed USB device number 37 using dummy_hcd
[ 1123.316291][ T5629] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1123.800078][ T1888] usb 6-1: USB disconnect, device number 37
[ 1124.918304][T12785] random: crng reseeded on system resumption
[ 1125.692800][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1125.692823][   T30] audit: type=1400 audit(1632.929:2169): avc:  denied  { write } for  pid=12774 comm="syz.8.9720" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1126.053480][   T30] audit: type=1400 audit(1632.929:2170): avc:  denied  { open } for  pid=12774 comm="syz.8.9720" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1126.573798][T12802] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9725'.
[ 1126.785127][T12806] syzkaller0: entered promiscuous mode
[ 1126.812133][T12806] syzkaller0: entered allmulticast mode
[ 1126.935213][T12806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1126.959654][T12805] tipc: Resetting bearer <eth:syzkaller0>
[ 1127.164956][T12823] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1127.298123][T12805] tipc: Disabling bearer <eth:syzkaller0>
[ 1128.560882][   T30] audit: type=1804 audit(1636.579:2171): pid=12845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.9732" name="file0" dev="tmpfs" ino=10664 res=1 errno=0
[ 1128.594144][T12845] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[ 1128.630729][T12845] ref_ctr increment failed for inode: 0x29a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888076b40c40
[ 1128.693957][T12846] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9731'.
[ 1128.706077][T12842] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[ 1128.799263][T12852] netlink: 'syz.4.9733': attribute type 1 has an invalid length.
[ 1128.880279][T12842] ref_ctr decrement failed for inode: 0x29a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888076b40c40
[ 1128.900852][T12842] uprobe: syz.1.9732:12842 failed to unregister, leaking uprobe
[ 1129.407418][T12863] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1129.422107][T12863] bond18: (slave vxcan3): Error -95 calling set_mac_address
[ 1129.608171][T12892] bond18: (slave bridge5): Enslaving as an active interface with a down link
[ 1129.698289][T12852] macvlan2: entered promiscuous mode
[ 1129.743907][T12852] macvlan2: entered allmulticast mode
[ 1129.775260][T12852] bond18: entered promiscuous mode
[ 1129.806733][T12852] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1129.855606][T12852] bond18: left promiscuous mode
[ 1129.971233][T12904] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1134.987324][  T805] libceph: connect (1)[c::]:6789 error -101
[ 1134.997328][  T805] libceph: mon0 (1)[c::]:6789 connect error
[ 1135.006361][  T805] libceph: connect (1)[c::]:6789 error -101
[ 1135.013838][  T805] libceph: mon0 (1)[c::]:6789 connect error
[ 1135.271506][  T805] libceph: connect (1)[c::]:6789 error -101
[ 1135.281463][  T805] libceph: mon0 (1)[c::]:6789 connect error
[ 1136.160106][T12971] ceph: No mds server is up or the cluster is laggy
[ 1136.315168][  T805] libceph: connect (1)[c::]:6789 error -101
[ 1136.322069][  T805] libceph: mon0 (1)[c::]:6789 connect error
[ 1137.112588][T12992] fuse: fd is not a fuse device
[ 1137.165686][   T30] audit: type=1326 audit(1645.179:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.4.9755" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0da3f9ce59 code=0x0
[ 1139.975483][   T30] audit: type=1400 audit(1647.849:2173): avc:  denied  { accept } for  pid=13034 comm="syz.8.9765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1141.575215][T13047] lo speed is unknown, defaulting to 1000
[ 1141.626174][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9770'.
[ 1141.936121][T13062] random: crng reseeded on system resumption
[ 1141.950279][   T30] audit: type=1400 audit(1649.939:2174): avc:  denied  { append } for  pid=13059 comm="syz.5.9771" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1147.599700][T13124] syzkaller0: entered promiscuous mode
[ 1147.620993][T13124] syzkaller0: entered allmulticast mode
[ 1152.370978][T13162] orangefs_mount: mount request failed with -4
[ 1153.670529][T13169] lo speed is unknown, defaulting to 1000
[ 1154.837068][T13213] netlink: 'syz.8.9795': attribute type 1 has an invalid length.
[ 1155.602659][ T5652] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1155.646873][T13228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1155.659101][T13228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1155.668585][T13228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1155.677934][T13228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1155.693591][T13228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1158.527467][T13228] Bluetooth: hci5: command tx timeout
[ 1160.135717][T13213] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[ 1160.441659][T11269] usb 10-1: new full-speed USB device number 39 using dummy_hcd
[ 1160.602221][T13228] Bluetooth: hci5: command tx timeout
[ 1160.642374][T11269] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1160.671622][ T1887] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1160.689817][T11269] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1160.729233][T11269] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1160.761372][T11269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.797797][T11269] usb 10-1: config 0 descriptor??
[ 1160.860214][T11269] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1160.876805][T11269] dvb-usb: bulk message failed: -22 (3/0)
[ 1160.893415][ T1887] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1160.918751][ T1887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.952991][ T1887] usb 6-1: Product: syz
[ 1160.980030][ T1887] usb 6-1: Manufacturer: syz
[ 1161.015055][ T1887] usb 6-1: SerialNumber: syz
[ 1161.022694][T11269] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1161.071958][T11269] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1161.091392][ T1887] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1161.114484][T13307] dvb-usb: bulk message failed: -22 (2/0)
[ 1161.147032][ T1888] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1161.159620][T11269] usb 10-1: media controller created
[ 1161.219075][T11269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1162.229330][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9803'.
[ 1162.251921][T11269] dvb-usb: bulk message failed: -22 (6/0)
[ 1162.265583][T11269] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1162.328765][T12688] usb 6-1: USB disconnect, device number 38
[ 1162.361659][T11269] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input101
[ 1162.374733][ T1888] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1162.394954][ T1888] ath9k_htc: Failed to initialize the device
[ 1162.405366][T12688] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1162.505647][T11269] dvb-usb: schedule remote query interval to 150 msecs.
[ 1162.544168][T11269] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1162.680762][T13228] Bluetooth: hci5: command tx timeout
[ 1162.832631][T12688] dvb-usb: bulk message failed: -22 (1/0)
[ 1162.862839][T12688] dvb-usb: error while querying for an remote control event.
[ 1162.878339][T11269] usb 10-1: USB disconnect, device number 39
[ 1162.982734][T13355] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5613] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 1163.210387][T12688] dvb-usb: bulk message failed: -22 (1/0)
[ 1163.506779][T13225] lo speed is unknown, defaulting to 1000
[ 1163.535578][T12688] dvb-usb: error while querying for an remote control event.
[ 1165.118615][T13379] tipc: New replicast peer: 255.255.255.255
[ 1165.125585][T13379] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1165.186580][T13228] Bluetooth: hci5: command tx timeout
[ 1165.594057][T11269] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1165.998555][   T30] audit: type=1400 audit(1674.009:2175): avc:  denied  { lock } for  pid=13387 comm="syz.9.9811" path="socket:[129077]" dev="sockfs" ino=129077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1166.400452][T11269] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[ 1166.568874][T11269] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1166.577983][T11269] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.588740][T11269] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1166.599240][T11269] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1166.616028][T11269] usb 10-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40
[ 1166.625586][T11269] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.634942][T11269] usb 10-1: Product: syz
[ 1166.639360][T11269] usb 10-1: Manufacturer: syz
[ 1166.644386][T11269] usb 10-1: SerialNumber: syz
[ 1166.899967][   T30] audit: type=1400 audit(1674.909:2176): avc:  denied  { open } for  pid=13387 comm="syz.9.9811" path="/dev/ptyr7" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1167.068818][T13394] lo speed is unknown, defaulting to 1000
[ 1167.177428][T13408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1167.218060][T13408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1167.402818][T11269] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1167.438494][T11269] usb 10-1: MIDIStreaming interface descriptor not found
[ 1167.733913][T11269] usb 10-1: USB disconnect, device number 40
[ 1167.869097][T11864] udevd[11864]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1168.362203][T13225] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1168.370087][T13225] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1168.379876][T13225] bridge_slave_0: entered allmulticast mode
[ 1168.387712][T13225] bridge_slave_0: entered promiscuous mode
[ 1168.403962][T13225] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1168.411627][T13225] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1168.439978][T13225] bridge_slave_1: entered allmulticast mode
[ 1168.462160][T13225] bridge_slave_1: entered promiscuous mode
[ 1168.827804][T13225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1168.878627][T13225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1169.073770][T13225] team0: Port device team_slave_0 added
[ 1169.116697][T13225] team0: Port device team_slave_1 added
[ 1169.779273][T13225] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1169.813880][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1169.889247][T13225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1169.936125][T13225] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1169.948982][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1170.034648][T13225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1170.264092][T13631] binder: 13630:13631 unknown command 0
[ 1170.283933][T13631] binder: 13630:13631 ioctl c0306201 2000000001c0 returned -22
[ 1170.625414][T13225] hsr_slave_0: entered promiscuous mode
[ 1170.663484][T13225] hsr_slave_1: entered promiscuous mode
[ 1170.694217][T13225] debugfs: 'hsr0' already exists in 'hsr'
[ 1170.730588][T13225] Cannot create hsr debugfs directory
[ 1171.922564][T13733] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1173.529639][T13225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.647471][   T30] audit: type=1400 audit(1681.649:2177): avc:  denied  { unmount } for  pid=31604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1173.966170][T13767] syzkaller0: entered promiscuous mode
[ 1173.982309][T13767] syzkaller0: entered allmulticast mode
[ 1174.649962][T13225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1175.135434][T13225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.148699][T13790] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.252711][T13790] 8021q: adding VLAN 0 to HW filter on device team0
[ 1177.534361][T13790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1177.582228][T13790] veth1_vlan: left promiscuous mode
[ 1177.606016][T13790] veth0_vlan: left promiscuous mode
[ 1177.627605][T13790] veth0_vlan: entered promiscuous mode
[ 1177.672725][T13790] veth1_vlan: entered promiscuous mode
[ 1177.718845][T13790] veth1_macvtap: left promiscuous mode
[ 1177.749576][T13790] veth0_macvtap: left promiscuous mode
[ 1177.773330][T13790] veth0_macvtap: entered promiscuous mode
[ 1177.792342][T13790] veth1_macvtap: entered promiscuous mode
[ 1177.818870][T13790] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1177.857392][T13790] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1177.878606][T13790] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1177.902722][T13790] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1177.926787][T13790] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1177.943453][T13790] erspan0: entered promiscuous mode
[ 1178.005257][T13790] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1178.027987][T13790] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1178.054674][T13790] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1178.081748][T13790] geneve3: entered promiscuous mode
[ 1178.113365][T13790] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1178.179591][T13790] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1178.240668][ T4408] bond6: (slave bridge2): link status up again after 0 ms
[ 1178.458015][T13790] vxlan0: left promiscuous mode
[ 1178.467943][ T4408] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1178.995853][T13225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1179.194146][ T5605] bond6: (slave bridge2): link status up again after 0 ms
[ 1179.260472][ T5652] bond6: (slave bridge2): link status up again after 0 ms
[ 1179.280421][ T5652] bond6: (slave bridge2): link status up again after 0 ms
[ 1179.303558][ T5605] bond6: (slave bridge2): link status up again after 0 ms
[ 1179.339847][ T5619] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex
[ 1179.364955][ T5605] bond6: (slave bridge2): link status up again after 0 ms
[ 1179.391282][ T5605] bond6: (slave bridge2): link status up again after 0 ms
[ 1179.419718][ T5619] bond2: (slave veth5): making interface the new active one
[ 1179.432006][ T5605] bond6: (slave bridge2): link status up again after 0 ms
[ 1179.453053][ T5619] bond2: active interface up!
[ 1179.461626][ T5657] bond6: (slave bridge2): link status up again after 0 ms
[ 1179.542417][ T5616] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1179.563555][ T5616] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1179.577193][ T5616] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1179.594290][ T5616] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1179.630447][T11269] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[ 1179.720939][T13838] vivid-002: disconnect
[ 1181.208432][T11269] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1181.217918][T11269] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.226189][T11269] usb 10-1: Product: syz
[ 1181.230623][T11269] usb 10-1: Manufacturer: syz
[ 1181.238946][T11269] usb 10-1: SerialNumber: syz
[ 1181.348515][T13840] netlink: 'syz.4.9840': attribute type 12 has an invalid length.
[ 1181.405384][T13835] vivid-002: reconnect
[ 1181.734474][T11269] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1183.411261][ T5638] net_ratelimit: 46 callbacks suppressed
[ 1183.411282][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1183.786311][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1184.121091][T11269] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1184.184189][T11269] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1184.819445][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1184.860699][T11269] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1184.906647][T11269] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1184.997891][T11269] usb 10-1: USB disconnect, device number 41
[ 1186.421143][T13902] syzkaller0: entered promiscuous mode
[ 1186.440300][T13902] syzkaller0: entered allmulticast mode
[ 1186.551667][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1186.838410][T13225] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1187.561590][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1187.602440][T13225] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1187.659730][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1187.803320][T13225] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1187.816499][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1187.826675][T13225] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1187.836267][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1187.917240][T13945] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9854'.
[ 1188.091588][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1188.232438][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1188.520048][T13225] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1188.582528][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1188.624862][T13225] 8021q: adding VLAN 0 to HW filter on device team0
[ 1188.667968][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1188.675136][ T5638] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1189.133080][ T8182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1189.196831][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1189.203990][ T5644] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1190.822182][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1190.980833][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1191.200598][ T5745] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1191.344001][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1191.411171][ T5745] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1191.437362][ T5745] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1191.460026][ T5745] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1191.482283][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1191.491941][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1191.526785][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1191.566890][ T5745] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1191.579805][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1191.590219][ T5745] usb 6-1: Product: syz
[ 1191.615552][ T5745] usb 6-1: Manufacturer: syz
[ 1191.654807][ T5745] cdc_wdm 6-1:1.0: skipping garbage
[ 1191.667156][ T5745] cdc_wdm 6-1:1.0: skipping garbage
[ 1191.676503][ T5745] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1191.686962][ T5745] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1191.950573][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1192.339667][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1192.464894][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1192.595714][T13225] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1192.658103][T13225] veth0_vlan: entered promiscuous mode
[ 1192.680252][T13225] veth1_vlan: entered promiscuous mode
[ 1192.718557][T13225] veth0_macvtap: entered promiscuous mode
[ 1192.737325][T13225] veth1_macvtap: entered promiscuous mode
[ 1192.802433][T13225] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1192.868594][T13225] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1193.072583][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1193.303709][ T5644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1193.907293][T14008] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22180] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
[ 1194.345803][ T5644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1194.532445][T11269] usb 6-1: USB disconnect, device number 39
[ 1195.502052][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1195.534890][ T5644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.563820][ T5644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.654484][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1195.893481][ T8178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1195.942765][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1196.088539][ T8178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1196.960626][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1197.213353][ T5652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1197.252309][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1198.010741][ T5652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1198.270896][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1198.380543][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1199.276386][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1199.810819][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1200.079009][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1200.550633][ T5605] net_ratelimit: 3 callbacks suppressed
[ 1200.550667][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1201.063174][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1201.570815][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1202.560365][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1203.919132][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1204.063290][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1204.109855][T14116] virt_wifi0: entered promiscuous mode
[ 1204.296750][T14116] macsec1: entered promiscuous mode
[ 1204.366122][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1204.514897][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1206.194955][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1206.373335][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1206.604278][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1207.440226][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1207.710118][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1207.860664][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1208.000471][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1208.071672][   T30] audit: type=1326 audit(1716.089:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61759ce59 code=0x7ffc0000
[ 1208.124315][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1208.136754][   T30] audit: type=1326 audit(1716.089:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61759ce59 code=0x7ffc0000
[ 1208.206029][   T30] audit: type=1326 audit(1716.089:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61759ce59 code=0x7ffc0000
[ 1208.242087][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1208.286323][   T30] audit: type=1326 audit(1716.089:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb61759ce59 code=0x7ffc0000
[ 1208.348174][   T30] audit: type=1326 audit(1716.149:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61755d68e code=0x7ffc0000
[ 1208.379716][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1208.423037][   T30] audit: type=1326 audit(1716.149:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61755d68e code=0x7ffc0000
[ 1208.465242][   T30] audit: type=1326 audit(1716.149:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61755d68e code=0x7ffc0000
[ 1208.518510][   T30] audit: type=1326 audit(1716.149:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61755d68e code=0x7ffc0000
[ 1208.558925][   T30] audit: type=1326 audit(1716.149:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61755d68e code=0x7ffc0000
[ 1208.588358][   T30] audit: type=1326 audit(1716.149:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.8.9888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61755d68e code=0x7ffc0000
[ 1208.744139][ T1870] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1209.053694][ T1870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1209.070541][ T1870] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1209.082997][ T1870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.158931][ T1870] usb 6-1: config 0 descriptor??
[ 1209.217345][ T1870] pwc: Askey VC010 type 2 USB webcam detected.
[ 1209.950725][ T1870] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1210.863165][ T1870] pwc: recv_control_msg error -32 req 02 val 2700
[ 1210.872312][ T1870] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1210.882104][ T1870] pwc: recv_control_msg error -32 req 04 val 1000
[ 1210.899341][ T1870] pwc: recv_control_msg error -32 req 04 val 1300
[ 1211.420008][ T8178] net_ratelimit: 18 callbacks suppressed
[ 1211.420030][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1211.813732][ T1870] pwc: recv_control_msg error -32 req 04 val 1400
[ 1211.827261][ T1870] pwc: recv_control_msg error -32 req 02 val 2000
[ 1211.841201][ T1870] pwc: recv_control_msg error -32 req 02 val 2100
[ 1211.857722][ T1870] pwc: recv_control_msg error -32 req 04 val 1500
[ 1211.910584][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1212.102633][ T1870] pwc: recv_control_msg error -32 req 02 val 2500
[ 1212.105471][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1212.128245][ T1870] pwc: recv_control_msg error -32 req 02 val 2400
[ 1212.667046][ T1870] pwc: recv_control_msg error -32 req 02 val 2600
[ 1213.259765][T14211] syzkaller0: entered promiscuous mode
[ 1213.278743][T14211] syzkaller0: entered allmulticast mode
[ 1213.556090][ T1870] pwc: recv_control_msg error -71 req 02 val 2800
[ 1213.571990][ T1870] pwc: recv_control_msg error -71 req 04 val 1100
[ 1213.589064][ T1870] pwc: recv_control_msg error -71 req 04 val 1200
[ 1213.601906][ T1870] pwc: Registered as video103.
[ 1213.625796][ T1870] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input102
[ 1213.640743][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1213.706246][ T1870] usb 6-1: USB disconnect, device number 40
[ 1215.464566][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1215.592184][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1215.649084][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9905'.
[ 1215.721143][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1215.850493][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1215.991435][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1216.131708][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1216.502071][ T5616] net_ratelimit: 2 callbacks suppressed
[ 1216.502091][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1216.661286][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1216.980786][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1217.113322][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1217.253719][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1217.426217][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1217.633856][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1218.395397][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1219.008419][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1219.124265][T14311] random: crng reseeded on system resumption
[ 1219.806192][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1222.283309][   T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1222.288716][ T5616] net_ratelimit: 9 callbacks suppressed
[ 1222.288743][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1222.503827][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9924'.
[ 1222.575264][T14345] netlink: 'syz.9.9924': attribute type 10 has an invalid length.
[ 1222.583325][T14345] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9924'.
[ 1222.592625][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1222.627458][T14344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1222.710479][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1223.794454][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1224.191248][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1224.298262][T14363] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5613] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14363]
[ 1224.340665][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1224.481563][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1224.501525][T14371] syzkaller0: entered promiscuous mode
[ 1224.508340][T14371] syzkaller0: entered allmulticast mode
[ 1224.637275][T14384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9932'.
[ 1224.697866][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1226.654633][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1226.925539][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1227.352422][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1227.786720][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1228.683973][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1228.964828][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1229.171707][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1230.684351][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1230.879473][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1231.429929][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1231.604200][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1231.772903][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1233.128278][ T5605] net_ratelimit: 2 callbacks suppressed
[ 1233.128296][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1233.399880][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1233.730769][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1234.500813][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1235.050469][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1235.254269][T14473] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode
[ 1235.268593][T14473] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode
[ 1235.280549][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1236.219591][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1236.432937][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1236.470477][T14480] ceph: No mds server is up or the cluster is laggy
[ 1237.326088][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1237.520658][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1238.171232][ T5644] net_ratelimit: 3 callbacks suppressed
[ 1238.171251][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1238.208811][T14500] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9960'.
[ 1238.224111][T14500] openvswitch: netlink: Flow key attr not present in new flow.
[ 1238.442943][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1238.600450][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1239.494249][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1239.604517][T14516] vlan2: entered promiscuous mode
[ 1239.627448][T14516] hsr0: entered promiscuous mode
[ 1239.654181][T14516] vlan2: entered allmulticast mode
[ 1239.669775][T14516] hsr0: entered allmulticast mode
[ 1239.807021][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9946'.
[ 1239.870085][T14516] hsr_slave_0: entered allmulticast mode
[ 1239.892007][T14516] hsr_slave_1: entered allmulticast mode
[ 1242.451223][T14524] hsr_slave_1 (unregistering): left promiscuous mode
[ 1242.540447][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1242.686440][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1242.906685][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1243.152619][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1243.373467][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1243.500529][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1243.634386][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1243.782498][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1243.930625][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1244.836592][ T5602] bond6: (slave bridge2): failed to get link speed/duplex
[ 1245.011098][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1245.180128][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1245.350853][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1245.550584][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1249.495326][ T5616] net_ratelimit: 5 callbacks suppressed
[ 1249.495358][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1249.630733][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1249.761203][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1249.927199][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1251.934295][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1252.403359][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1252.653983][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1252.817199][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1254.731485][ T5616] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1254.754585][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1255.057107][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1255.186567][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1255.356940][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1255.481159][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1255.778416][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1256.122997][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1256.247295][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1257.625126][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1257.930524][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1258.486561][T14664] syzkaller0: entered promiscuous mode
[ 1258.516232][T14664] syzkaller0: entered allmulticast mode
[ 1258.524620][   T30] kauditd_printk_skb: 64 callbacks suppressed
[ 1258.524650][   T30] audit: type=1400 audit(1766.539:2252): avc:  denied  { read } for  pid=14661 comm="syz.0.9989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1258.811018][T14685] bond8: entered allmulticast mode
[ 1258.828847][T14685] vti2: entered allmulticast mode
[ 1258.905565][T14685] dvmrp6: entered allmulticast mode
[ 1259.872345][ T5648] net_ratelimit: 9 callbacks suppressed
[ 1259.872377][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1259.984251][   T30] audit: type=1400 audit(1767.999:2253): avc:  denied  { write } for  pid=14678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1260.060582][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1260.513434][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1260.781879][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1260.856848][   T30] audit: type=1400 audit(1768.869:2254): avc:  denied  { write } for  pid=14731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1260.986429][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1261.103326][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1261.557869][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1262.573543][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1264.005024][ T5277] veth0_macvtap: left promiscuous mode
[ 1264.113968][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1264.148993][T14757] fuse: fd is not a fuse device
[ 1264.260500][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1265.339622][ T8178] net_ratelimit: 1 callbacks suppressed
[ 1265.339657][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1265.486215][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1266.076529][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1266.602365][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1267.086734][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1267.290781][T14771] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10006'.
[ 1267.299858][T14771] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10006'.
[ 1267.316505][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1267.481854][  T805] kernel read not supported for file /vcs (pid: 805 comm: kworker/0:2)
[ 1267.611533][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1267.779146][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1267.974017][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1268.739091][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1268.747722][   T30] audit: type=1400 audit(1776.109:2255): avc:  denied  { watch } for  pid=14801 comm="syz.4.10011" path="/2348/file0" dev="tmpfs" ino=12142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1268.904088][   T30] audit: type=1400 audit(1776.919:2256): avc:  denied  { write } for  pid=14778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1270.415070][ T5616] net_ratelimit: 4 callbacks suppressed
[ 1270.415105][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1271.335215][   T30] audit: type=1400 audit(1779.349:2257): avc:  denied  { write } for  pid=14826 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1271.579155][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1272.929298][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1273.290839][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1273.444262][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1273.777802][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1274.009597][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1274.384915][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1274.593230][T14842] PKCS8: Unsupported PKCS#8 version
[ 1274.601954][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1274.802338][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1275.697672][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1275.974428][T14870] pim6reg: entered allmulticast mode
[ 1276.002643][T14870] pim6reg: left allmulticast mode
[ 1276.151444][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1276.420724][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1276.612371][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1277.412729][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1277.542060][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1277.717386][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1278.093146][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1278.223787][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1278.485380][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1278.784835][T23464] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1279.402994][T23464] usb 6-1: Using ep0 maxpacket: 16
[ 1279.412258][T23464] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1280.067546][T23464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1280.121910][T23464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1280.135673][T23464] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1280.147404][T23464] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1280.282414][T23464] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1280.293940][T23464] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1280.303419][T23464] usb 6-1: Manufacturer: syz
[ 1280.321342][T23464] usb 6-1: config 0 descriptor??
[ 1280.807446][ T5648] net_ratelimit: 7 callbacks suppressed
[ 1280.807465][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1280.992201][ T1888] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[ 1281.010253][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1281.123708][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1281.641273][ T1888] usb 10-1: Using ep0 maxpacket: 32
[ 1281.690398][ T5623] Bluetooth: hci5: command 0x0406 tx timeout
[ 1281.770421][T23464] rc_core: IR keymap rc-hauppauge not found
[ 1281.773013][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1281.791299][ T1888] usb 10-1: config 4 has an invalid interface number: 56 but max is 0
[ 1281.801920][ T1888] usb 10-1: config 4 has no interface number 0
[ 1281.804197][T23464] Registered IR keymap rc-empty
[ 1281.808184][ T1888] usb 10-1: config 4 interface 56 has no altsetting 0
[ 1281.810010][ T1888] usb 10-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=20.83
[ 1281.830954][ T1888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1281.848334][ T1888] usb 10-1: Product: syz
[ 1281.852847][ T1888] usb 10-1: Manufacturer: syz
[ 1281.857675][ T1888] usb 10-1: SerialNumber: syz
[ 1281.866499][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1282.048287][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1282.120589][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1282.209586][T14959] netlink: 'syz.4.10038': attribute type 2 has an invalid length.
[ 1282.220501][T14959] netlink: 'syz.4.10038': attribute type 1 has an invalid length.
[ 1282.288857][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1282.459447][T23464] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1282.492413][T23464] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input103
[ 1282.629787][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1283.019838][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1283.294101][ T1888] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:4.56/input/input104
[ 1283.471386][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1283.875036][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1284.839955][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1284.874561][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1285.858941][ T5619] net_ratelimit: 5 callbacks suppressed
[ 1285.858964][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1286.211473][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1286.223996][ T4967] bcm5974 10-1:4.56: could not read from device
[ 1286.297851][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1286.320554][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1286.326632][ T1888] usb 10-1: USB disconnect, device number 42
[ 1286.348052][ T4967] bcm5974 10-1:4.56: could not read from device
[ 1286.351492][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1286.496300][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1286.520644][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1286.544567][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1286.573468][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1286.663884][T14995] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1286.723499][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1286.781674][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1287.633138][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1287.650771][ T5648] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1287.681342][T23464] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1287.713306][T23464] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1287.764054][T23464] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1287.811751][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1287.871743][T23464] usb 6-1: USB disconnect, device number 41
[ 1288.071607][ T5648] bond6: (slave bridge2): failed to get link speed/duplex
[ 1288.295190][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1288.302926][T13228] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10
[ 1288.302993][T13228] Bluetooth: hci3: connection err: -111
[ 1289.555743][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1291.153607][ T5644] net_ratelimit: 1 callbacks suppressed
[ 1291.153627][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1291.405394][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1291.534135][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1291.670463][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1291.703386][   T30] audit: type=1400 audit(1799.719:2258): avc:  denied  { write } for  pid=14981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1291.810494][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1291.952494][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1292.057837][   T30] audit: type=1400 audit(1800.069:2259): avc:  denied  { write } for  pid=15053 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1292.106903][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1292.250507][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1292.370723][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1292.502049][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1293.172417][ T5623] Bluetooth: hci5: command 0x0406 tx timeout
[ 1294.263069][   T30] audit: type=1400 audit(1802.279:2260): avc:  denied  { write } for  pid=15063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1294.464040][T15090] netlink: 'syz.5.10056': attribute type 12 has an invalid length.
[ 1296.250421][ T5644] net_ratelimit: 17 callbacks suppressed
[ 1296.250465][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1296.426028][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1296.727782][   T30] audit: type=1400 audit(1804.719:2261): avc:  denied  { write } for  pid=15099 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1296.884060][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1297.030734][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1297.453450][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1298.071043][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1298.242196][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1298.290427][   T30] audit: type=1400 audit(1806.299:2262): avc:  denied  { getopt } for  pid=15115 comm="syz.9.10061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1298.376332][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1298.532964][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1298.556086][T13228] Bluetooth: hci3: unexpected event for opcode 0x1003
[ 1298.709426][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1301.267543][   T57] net_ratelimit: 10 callbacks suppressed
[ 1301.268518][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1301.802029][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1302.256408][ T8178] bond6: (slave bridge2): failed to get link speed/duplex
[ 1302.642583][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1303.089125][T13228] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1303.104545][T13228] Bluetooth: hci3: Injecting HCI hardware error event
[ 1303.117409][ T5623] Bluetooth: hci3: hardware error 0x00
[ 1303.186487][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1303.310579][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1303.430548][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1303.567852][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1303.716587][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10068'.
[ 1303.731115][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1303.900593][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1304.614703][T15163] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1305.250670][ T5623] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1306.355026][ T5629] net_ratelimit: 12 callbacks suppressed
[ 1306.355047][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1306.509294][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1306.899923][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1307.261986][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1307.722316][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1307.964899][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1308.111389][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1308.591421][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1308.722348][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1308.990634][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1310.315494][   T30] audit: type=1400 audit(1818.329:2263): avc:  denied  { write } for  pid=15214 comm="syz.0.10083" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1311.671959][ T5619] net_ratelimit: 4 callbacks suppressed
[ 1311.671978][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1311.714521][T15222] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 15222 comm: syz.5.10082)
[ 1311.878362][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10083'.
[ 1311.905552][   T30] audit: type=1800 audit(1819.759:2264): pid=15222 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.10082" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=134652 res=0 errno=0
[ 1311.906768][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1312.460471][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1312.670744][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1313.711952][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1313.968644][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1314.100501][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1314.220899][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1314.401316][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1314.610805][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1315.270790][   T30] audit: type=1326 audit(1823.279:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.0.10094" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc0579ce59 code=0x0
[ 1316.771108][ T5605] net_ratelimit: 8 callbacks suppressed
[ 1316.771128][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1316.950563][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1317.082824][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1317.200575][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1317.340498][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1317.469249][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1317.771440][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1318.230994][ T5657] bond6: (slave bridge2): failed to get link speed/duplex
[ 1318.578638][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1318.804551][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1321.637458][ T5657] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1321.672163][T15326] netlink: 822 bytes leftover after parsing attributes in process `syz.0.10107'.
[ 1321.721565][T15326] bridge: RTM_NEWNEIGH with unconfigured vlan 1033 on bridge0
[ 1321.825111][ T5652] net_ratelimit: 14 callbacks suppressed
[ 1321.825129][ T5652] bond6: (slave bridge2): failed to get link speed/duplex
[ 1321.990802][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1322.198250][T15329] could not allocate digest TFM handle md5
[ 1322.255979][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1322.299644][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10108'.
[ 1322.362415][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10108'.
[ 1322.377142][T15337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1322.537549][T15340] syzkaller0: entered promiscuous mode
[ 1322.580549][T15340] syzkaller0: entered allmulticast mode
[ 1323.463481][T15353] bond6: (slave bridge2): failed to get link speed/duplex
[ 1323.740564][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1323.776411][T15355] tipc: Resetting bearer <eth:syzkaller0>
[ 1323.835810][T15336] tipc: Resetting bearer <eth:syzkaller0>
[ 1323.963790][T15336] tipc: Disabling bearer <eth:syzkaller0>
[ 1324.048829][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1324.470017][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1324.832778][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1324.990591][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1325.640839][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1326.852091][ T5609] net_ratelimit: 6 callbacks suppressed
[ 1326.852115][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1326.970514][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1327.120924][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1327.244756][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1327.394897][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1327.530409][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1327.702676][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1328.672452][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1328.842459][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1329.084478][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1331.932734][ T5616] net_ratelimit: 10 callbacks suppressed
[ 1331.932753][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1332.103395][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1333.003366][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1333.251025][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1334.206424][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1334.413062][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1334.660462][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1334.781351][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1335.088698][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1335.881208][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1336.156845][ T1887] libceph: connect (1)[c::]:6789 error -101
[ 1336.185452][ T1887] libceph: mon0 (1)[c::]:6789 connect error
[ 1336.240631][T11269] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1336.248491][T15471] ceph: No mds server is up or the cluster is laggy
[ 1336.385756][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10136'.
[ 1336.398716][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10136'.
[ 1336.420662][T11269] usb 6-1: Using ep0 maxpacket: 16
[ 1336.429411][T15471] netlink: 'syz.9.10136': attribute type 14 has an invalid length.
[ 1336.433495][T11269] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1336.478225][   T30] audit: type=1400 audit(1844.469:2266): avc:  denied  { ioctl } for  pid=15470 comm="syz.9.10136" path="/dev/ptyr6" dev="devtmpfs" ino=141 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1336.507818][T11269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1336.535322][T11269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1336.596516][T11269] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1336.622232][T11269] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1336.737644][T11269] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1336.755308][T11269] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1336.898386][T11269] usb 6-1: Manufacturer: syz
[ 1336.908385][T11269] usb 6-1: config 0 descriptor??
[ 1337.033969][ T5644] net_ratelimit: 7 callbacks suppressed
[ 1337.034005][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1337.160647][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1337.202745][T15498] bridge0: entered allmulticast mode
[ 1338.270408][T11269] rc_core: IR keymap rc-hauppauge not found
[ 1338.290503][T11269] Registered IR keymap rc-empty
[ 1338.295505][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.356121][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.405037][T11269] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1338.433800][T11269] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input105
[ 1338.481933][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.520685][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.555712][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.581725][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.658432][T15512] kernel profiling enabled (shift: 63)
[ 1338.676178][T15512] profiling shift: 63 too large
[ 1338.684066][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.721191][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.756317][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.800931][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.820981][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.861308][T11269] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1338.902877][T11269] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1338.918450][T11269] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1338.968691][T11269] usb 6-1: USB disconnect, device number 42
[ 1340.740507][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1340.890652][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1341.508185][ T5644] bond6: (slave bridge2): failed to get link speed/duplex
[ 1341.787026][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1342.109083][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1342.220453][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1342.700556][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1342.831173][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1342.991175][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1343.150312][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1344.008615][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1344.376173][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1344.531259][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1345.516382][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1346.235135][T15578] kvm: kvm [15577]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc922
[ 1346.361589][T15578] kvm: kvm [15577]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80
[ 1346.376144][T15595] vlan6: entered promiscuous mode
[ 1346.395539][T15578] kvm: kvm [15577]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[ 1346.406520][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10157'.
[ 1346.419202][T15595] hsr0: entered promiscuous mode
[ 1346.436531][T15578] kvm: kvm [15577]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80
[ 1346.461286][T15595] vlan6: entered allmulticast mode
[ 1346.483413][T15595] hsr0: entered allmulticast mode
[ 1346.518357][T15595] hsr_slave_0: entered allmulticast mode
[ 1346.558215][T15595] hsr_slave_1: entered allmulticast mode
[ 1348.290350][ T8182] net_ratelimit: 5 callbacks suppressed
[ 1348.290366][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1348.409714][   T30] audit: type=1400 audit(1856.419:2267): avc:  denied  { read } for  pid=15610 comm="syz.5.10160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1348.481000][T15600] hsr_slave_1 (unregistering): left promiscuous mode
[ 1348.560495][ T5605] bond6: (slave bridge2): failed to get link speed/duplex
[ 1349.745512][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1349.922147][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1350.230934][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1350.660878][T15640] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.668912][T15640] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.727214][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1350.869700][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10164'.
[ 1350.925879][T15639] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[ 1350.990192][T15649] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[ 1350.999100][T15649] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[ 1351.012851][T15649] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[ 1351.030896][   T30] audit: type=1400 audit(1859.029:2268): avc:  denied  { firmware_load } for  pid=15647 comm="syz.8.10159" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1351.058975][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1351.190405][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1351.289110][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10167'.
[ 1351.310711][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1352.897800][T15686] netlink: 284 bytes leftover after parsing attributes in process `syz.8.10170'.
[ 1353.369027][ T5609] net_ratelimit: 8 callbacks suppressed
[ 1353.369045][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1353.510498][ T5605] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1353.558027][T15680] netlink: 'syz.4.10172': attribute type 27 has an invalid length.
[ 1353.660926][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1357.396555][T15680] bond3: left promiscuous mode
[ 1357.430531][T15680] vti1: left promiscuous mode
[ 1357.681993][T15680] bond5: left promiscuous mode
[ 1357.688738][T15680] vcan1: left promiscuous mode
[ 1357.700982][T15680] bond6: left promiscuous mode
[ 1357.707649][T15680] bond7: left promiscuous mode
[ 1357.729239][T15680] bond8: left promiscuous mode
[ 1357.741451][T15680] vti2: left promiscuous mode
[ 1357.823932][T15680] vlan3: left allmulticast mode
[ 1357.828833][T15680] bond10: left allmulticast mode
[ 1357.842953][T15680] bond12: left promiscuous mode
[ 1357.850597][T15680] bridge3: left promiscuous mode
[ 1357.857061][T15680] vlan5: left allmulticast mode
[ 1357.872532][T15680] bond12: left allmulticast mode
[ 1357.877494][T15680] bridge3: left allmulticast mode
[ 1357.901379][T15680] ip6gre2: left promiscuous mode
[ 1357.906379][T15680] ip6gre2: left allmulticast mode
[ 1357.920112][T15680] bond14: left promiscuous mode
[ 1357.925553][T15680] bond14: left allmulticast mode
[ 1357.932935][T15680] bond15: left allmulticast mode
[ 1357.942088][T15680] ip6gretap2: left allmulticast mode
[ 1357.953329][T15680] bond16: left promiscuous mode
[ 1357.960629][T15680] bond16: left allmulticast mode
[ 1357.966731][T15680] dummy0: left allmulticast mode
[ 1357.980728][T15680] vlan6: left promiscuous mode
[ 1357.986911][T15680] hsr0: left promiscuous mode
[ 1357.992897][T15680] vlan6: left allmulticast mode
[ 1357.999587][T15680] hsr0: left allmulticast mode
[ 1358.005280][T15680] hsr_slave_0: left allmulticast mode
[ 1358.019713][ T1887] syz0: Port: 1 Link DOWN
[ 1358.030393][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1358.174628][ T5638] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1358.189342][ T5638] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.199752][ T5638] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1358.211832][ T5638] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.244028][ T5638] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1359.028237][T15737] netlink: 'syz.5.10179': attribute type 4 has an invalid length.
[ 1359.370643][ T5638] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1359.492078][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1359.583852][   T57] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1359.649091][   T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1359.710406][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1359.871320][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1361.726250][   T30] audit: type=1400 audit(1869.739:2269): avc:  denied  { write } for  pid=15726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1361.765160][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1361.940445][T15353] bond6: (slave bridge2): failed to get link speed/duplex
[ 1362.049721][   T30] audit: type=1400 audit(1870.059:2270): avc:  denied  { write } for  pid=15772 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1362.086062][   T57] bond6: (slave bridge2): failed to get link speed/duplex
[ 1362.261416][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1363.113481][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1363.236807][T15789] netlink: 'syz.8.10188': attribute type 4 has an invalid length.
[ 1363.655172][ T5609] bond6: (slave bridge2): failed to get link speed/duplex
[ 1363.946875][ T5638] bond6: (slave bridge2): failed to get link speed/duplex
[ 1364.100931][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10190'.
[ 1364.110462][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10190'.
[ 1364.144523][T15797] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0)
[ 1364.598765][ T8182] net_ratelimit: 3 callbacks suppressed
[ 1364.598800][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1365.292044][T15353] bond6: (slave bridge2): failed to get link speed/duplex
[ 1365.421548][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1365.545215][T15831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1365.590404][ T5619] bond6: (slave bridge2): failed to get link speed/duplex
[ 1365.984630][ T5629] bond6: (slave bridge2): failed to get link speed/duplex
[ 1366.562075][   T30] audit: type=1400 audit(1874.469:2271): avc:  denied  { write } for  pid=15794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1366.654450][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1366.771214][T15831] vlan0: entered promiscuous mode
[ 1367.246185][ T5616] bond6: (slave bridge2): failed to get link speed/duplex
[ 1367.557967][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1368.144869][   T30] audit: type=1400 audit(1876.159:2272): avc:  denied  { write } for  pid=15849 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1368.192100][ T8182] bond6: (slave bridge2): failed to get link speed/duplex
[ 1473.458035][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1473.465002][    C1] rcu: 	0-...!: (1 GPs behind) idle=3fe4/1/0x4000000000000000 softirq=235463/235467 fqs=1
[ 1473.476571][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P15865/1:b..l
[ 1473.484575][    C1] rcu: 	(detected by 1, t=10505 jiffies, g=227625, q=542 ncpus=2)
[ 1473.492371][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1473.492396][    C0] NMI backtrace for cpu 0
[ 1473.492411][    C0] CPU: 0 UID: 0 PID: 15866 Comm: syz.8.10203 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1473.492431][    C0] Tainted: [L]=SOFTLOCKUP
[ 1473.492437][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1473.492445][    C0] RIP: 0010:__kasan_check_byte+0xa/0x50
[ 1473.492466][    C0] Code: 00 00 00 41 5c 41 5d e9 04 2b 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 54 49 89 f4 55 <48> 89 fd 53 e8 9d 1e 00 00 89 c3 84 c0 74 0b 89 d8 5b 5d 41 5c c3
[ 1473.492479][    C0] RSP: 0018:ffffc90000007de8 EFLAGS: 00000002
[ 1473.492491][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000
[ 1473.492500][    C0] RDX: 0000000000000000 RSI: ffffffff8b8dedb6 RDI: ffff8880b84284d8
[ 1473.492509][    C0] RBP: ffff8880b84284d8 R08: 0000000000000001 R09: 0000000000000000
[ 1473.492518][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8b8dedb6
[ 1473.492527][    C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[ 1473.492536][    C0] FS:  00007fb6184606c0(0000) GS:ffff88812436d000(0000) knlGS:0000000000000000
[ 1473.492551][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1473.492561][    C0] CR2: 0000001b2f119ff8 CR3: 0000000032dde000 CR4: 00000000003526f0
[ 1473.492570][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1473.492579][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1473.492588][    C0] Call Trace:
[ 1473.492595][    C0]  <IRQ>
[ 1473.492603][    C0]  lock_acquire+0x12a/0x370
[ 1473.492624][    C0]  _raw_spin_lock_irq+0x36/0x50
[ 1473.492643][    C0]  ? __hrtimer_run_queues+0x1bd/0xa00
[ 1473.492665][    C0]  __hrtimer_run_queues+0x1bd/0xa00
[ 1473.492689][    C0]  hrtimer_interrupt+0x3e5/0x940
[ 1473.492708][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x460
[ 1473.492729][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[ 1473.492749][    C0]  </IRQ>
[ 1473.492753][    C0]  <TASK>
[ 1473.492759][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1473.492775][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[ 1473.492794][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 a2 56 f6 48 89 df e8 1e f2 56 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 a5 bb 46 f6 65 8b 05 1e 3f 7d 08 85 c0 74 16 5b
[ 1473.492808][    C0] RSP: 0018:ffffc9000d26fb28 EFLAGS: 00000246
[ 1473.492820][    C0] RAX: 0000000000000006 RBX: ffffffff9b1ae118 RCX: 0000000000000000
[ 1473.492829][    C0] RDX: 0000000000000000 RSI: ffffffff8df22fb5 RDI: ffffffff8c1c4180
[ 1473.492839][    C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000
[ 1473.492849][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff9b1ade80
[ 1473.492859][    C0] R13: 0000000000000000 R14: ffffc9000d26fc80 R15: 7fffffffffffffff
[ 1473.492876][    C0]  __do_adjtimex+0x892/0xe70
[ 1473.492895][    C0]  ? __pfx___do_adjtimex+0x10/0x10
[ 1473.492915][    C0]  ? futex_wake+0x456/0x530
[ 1473.492931][    C0]  do_adjtimex+0xa0/0x370
[ 1473.492949][    C0]  ? __pfx_do_adjtimex+0x10/0x10
[ 1473.492974][    C0]  ? __pfx_posix_clock_realtime_adj+0x10/0x10
[ 1473.492993][    C0]  __do_sys_clock_adjtime+0x177/0x290
[ 1473.493014][    C0]  ? __pfx___do_sys_clock_adjtime+0x10/0x10
[ 1473.493034][    C0]  ? __pfx_do_futex+0x10/0x10
[ 1473.493062][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1473.493084][    C0]  do_syscall_64+0x10b/0xf80
[ 1473.493102][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1473.493119][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1473.493133][    C0] RIP: 0033:0x7fb61759ce59
[ 1473.493147][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1473.493160][    C0] RSP: 002b:00007fb618460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[ 1473.493173][    C0] RAX: ffffffffffffffda RBX: 00007fb617816180 RCX: 00007fb61759ce59
[ 1473.493182][    C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000
[ 1473.493191][    C0] RBP: 00007fb617632d6f R08: 0000000000000000 R09: 0000000000000000
[ 1473.493200][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1473.493209][    C0] R13: 00007fb617816218 R14: 00007fb617816180 R15: 00007ffe528ffa78
[ 1473.493224][    C0]  </TASK>
[ 1473.493391][    C1] task:syz-executor    state:R  running task     stack:28456 pid:15865 tgid:15865 ppid:5613   task_flags:0x400040 flags:0x00080000
[ 1473.917772][    C1] Call Trace:
[ 1473.921038][    C1]  <TASK>
[ 1473.923962][    C1]  __schedule+0x1295/0x67a0
[ 1473.928495][    C1]  ? __update_page_owner_handle+0x3c7/0x550
[ 1473.934408][    C1]  ? __pfx___schedule+0x10/0x10
[ 1473.939257][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1473.944025][    C1]  preempt_schedule_irq+0x50/0x90
[ 1473.949051][    C1]  irqentry_exit+0x205/0x7e0
[ 1473.953655][    C1]  ? trace_reschedule_exit.constprop.0+0x6b/0x220
[ 1473.960082][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1473.965559][    C1] RIP: 0010:path_init+0x4e7/0x1ab0
[ 1473.970669][    C1] Code: 48 8b 75 08 4c 89 ff e8 87 0b 57 ff 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 c3 23 7b ff 5a 4d 85 e4 0f 85 19 11 00 00 <e8> d4 28 7b ff 48 8b 45 a8 0f b6 00 38 45 a0 7c 08 84 c0 0f 85 92
[ 1473.990280][    C1] RSP: 0018:ffffc900038d7a90 EFLAGS: 00000293
[ 1473.996339][    C1] RAX: 0000000000000000 RBX: ffffc900038d7bb0 RCX: ffffffff828d963f
[ 1474.004302][    C1] RDX: ffff88807d592500 RSI: ffffffff828d964e RDI: ffffffff828dc8c8
[ 1474.012349][    C1] RBP: ffffc900038d7b30 R08: 0000000000000007 R09: 0000000000000000
[ 1474.020311][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1474.028270][    C1] R13: ffff88807d592500 R14: ffff888026fc0c00 R15: ffff888026fc0c10
[ 1474.036236][    C1]  ? path_init+0x135f/0x1ab0
[ 1474.040818][    C1]  ? path_init+0x136e/0x1ab0
[ 1474.045399][    C1]  ? __filename_parentat+0x208/0x740
[ 1474.050680][    C1]  ? unwind_get_return_address+0x59/0xa0
[ 1474.056324][    C1]  __filename_parentat+0x208/0x740
[ 1474.061444][    C1]  ? __pfx___filename_parentat+0x10/0x10
[ 1474.067089][    C1]  ? __lock_acquire+0x4a5/0x2630
[ 1474.072025][    C1]  filename_create+0xbe/0x400
[ 1474.076696][    C1]  ? __pfx_filename_create+0x10/0x10
[ 1474.081979][    C1]  ? find_held_lock+0x2b/0x80
[ 1474.086649][    C1]  filename_symlinkat+0xe1/0x560
[ 1474.091597][    C1]  ? __pfx_filename_symlinkat+0x10/0x10
[ 1474.097140][    C1]  ? strncpy_from_user+0x19d/0x2d0
[ 1474.102262][    C1]  ? do_getname+0x191/0x390
[ 1474.106767][    C1]  __x64_sys_symlinkat+0x9c/0xe0
[ 1474.111704][    C1]  do_syscall_64+0x10b/0xf80
[ 1474.116290][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1474.120961][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1474.126844][    C1] RIP: 0033:0x7f0da3f9bf17
[ 1474.131253][    C1] RSP: 002b:00007ffcc7ae7338 EFLAGS: 00000202 ORIG_RAX: 000000000000010a
[ 1474.139657][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0da3f9bf17
[ 1474.147616][    C1] RDX: 00007f0da4033d3e RSI: 00000000ffffff9c RDI: 00007ffcc7ae73d0
[ 1474.155577][    C1] RBP: 00007ffcc7ae737c R08: 0000000000000001 R09: 00000000ffffffff
[ 1474.163537][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000955
[ 1474.171499][    C1] R13: 00000000000927c0 R14: 000000000014e01e R15: 00007ffcc7ae73d0
[ 1474.179480][    C1]  </TASK>
[ 1474.182487][    C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g227625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1474.193753][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1474.203727][    C1] rcu: RCU grace-period kthread stack dump:
[ 1474.209602][    C1] task:rcu_preempt     state:R  running task     stack:26488 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1474.223105][    C1] Call Trace:
[ 1474.226386][    C1]  <TASK>
[ 1474.229314][    C1]  __schedule+0x1295/0x67a0
[ 1474.233839][    C1]  ? __pfx___schedule+0x10/0x10
[ 1474.238684][    C1]  ? find_held_lock+0x2b/0x80
[ 1474.243354][    C1]  ? schedule+0x2bf/0x390
[ 1474.247684][    C1]  schedule+0xdd/0x390
[ 1474.251749][    C1]  schedule_timeout+0x127/0x280
[ 1474.256594][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1474.261959][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1474.267238][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1474.273041][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[ 1474.278498][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[ 1474.283257][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1474.288538][    C1]  ? prepare_to_swait_event+0xae/0x4a0
[ 1474.293993][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1474.298927][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[ 1474.304118][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1474.309922][    C1]  rcu_gp_kthread+0x179/0x230
[ 1474.314604][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1474.319795][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1474.325599][    C1]  ? __kthread_parkme+0x18c/0x230
[ 1474.330616][    C1]  ? kthread+0x13a/0x450
[ 1474.334849][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1474.340040][    C1]  kthread+0x370/0x450
[ 1474.344102][    C1]  ? __pfx_kthread+0x10/0x10
[ 1474.348688][    C1]  ret_from_fork+0x72b/0xd50
[ 1474.353272][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1474.358381][    C1]  ? __switch_to+0x800/0x1100
[ 1474.363057][    C1]  ? __pfx_kthread+0x10/0x10
[ 1474.367642][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1474.372419][    C1]  </TASK>
[ 1474.375439][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1474.381751][    C1] CPU: 1 UID: 0 PID: 15862 Comm: modprobe Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1474.392502][    C1] Tainted: [L]=SOFTLOCKUP
[ 1474.396810][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1474.406850][    C1] RIP: 0010:smp_call_function_many_cond+0x5a3/0x1700
[ 1474.413521][    C1] Code: e4 07 49 01 c5 41 83 c4 03 e8 39 83 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 <41> 89 c6 89 c6 e8 c3 7d 0c 00 45 85 f6 75 d0 e8 09 83 0c 00 e8 04
[ 1474.433138][    C1] RSP: 0018:ffffc900035878a8 EFLAGS: 00000202
[ 1474.439197][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81fc2d8d
[ 1474.447158][    C1] RDX: ffff888029952500 RSI: ffffffff81fc2d67 RDI: 0000000000000000
[ 1474.455119][    C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000
[ 1474.463079][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[ 1474.471038][    C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0
[ 1474.478996][    C1] FS:  0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000
[ 1474.487913][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1474.494488][    C1] CR2: 00007f27bdf78a90 CR3: 0000000052011000 CR4: 00000000003526f0
[ 1474.502456][    C1] Call Trace:
[ 1474.505723][    C1]  <TASK>
[ 1474.508651][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1474.513852][    C1]  ? free_pgd_range+0x2a0/0x10d0
[ 1474.518781][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1474.525109][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1474.529885][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1474.535097][    C1]  on_each_cpu_cond_mask+0x40/0x90
[ 1474.540224][    C1]  flush_tlb_mm_range+0x45f/0x16f0
[ 1474.545338][    C1]  ? __pfx_free_pgtables+0x10/0x10
[ 1474.550452][    C1]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[ 1474.555996][    C1]  tlb_finish_mmu+0x3fe/0x810
[ 1474.560673][    C1]  exit_mmap+0x454/0xa10
[ 1474.564914][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1474.569671][    C1]  ? trace_contention_end+0x122/0x170
[ 1474.575041][    C1]  ? uprobe_clear_state+0x5f/0x260
[ 1474.580153][    C1]  ? uprobe_clear_state+0x5f/0x260
[ 1474.585271][    C1]  ? __lock_acquire+0x4a5/0x2630
[ 1474.590215][    C1]  ? arch_uprobe_clear_state+0x107/0x150
[ 1474.595861][    C1]  __mmput+0x12a/0x410
[ 1474.599930][    C1]  mmput+0x67/0x80
[ 1474.603651][    C1]  do_exit+0x8b2/0x2af0
[ 1474.607824][    C1]  ? do_raw_spin_lock+0x128/0x260
[ 1474.612849][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1474.617438][    C1]  ? do_group_exit+0x1bd/0x2a0
[ 1474.622194][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1474.626978][    C1]  do_group_exit+0xd5/0x2a0
[ 1474.631483][    C1]  __x64_sys_exit_group+0x3e/0x50
[ 1474.636499][    C1]  x64_sys_call+0x102c/0x1530
[ 1474.641173][    C1]  do_syscall_64+0x10b/0xf80
[ 1474.645761][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1474.650432][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1474.656316][    C1] RIP: 0033:0x7f88a01fe6c5
[ 1474.660720][    C1] Code: Unable to access opcode bytes at 0x7f88a01fe69b.
[ 1474.667720][    C1] RSP: 002b:00007ffd6ecb7fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[ 1474.676128][    C1] RAX: ffffffffffffffda RBX: 00007f88a02fffe8 RCX: 00007f88a01fe6c5
[ 1474.684089][    C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001
[ 1474.692048][    C1] RBP: 0000000000000001 R08: 00007ffd6ecb7f58 R09: 0000000000000000
[ 1474.700010][    C1] R10: 00007ffd6ecb7df0 R11: 0000000000000202 R12: 0000000000000000
[ 1474.707968][    C1] R13: 0000000000000001 R14: 00007f88a02fe680 R15: 00007f88a0300000
[ 1474.715941][    C1]  </TASK>