last executing test programs:

1m34.012704901s ago: executing program 3 (id=257):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x16)
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x509)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200000, 0x60)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r6=>0x0)
sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000280)=@nfc={0x27, r6, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="024f3a80aff3bb853456bc89842a203aa038de68c32e58b795982902cef48a81d2f53100e378550c7c2d96c55a33ea52b74bd578e03cd0a70c20603ef90b25e00e985b8f77d0a76341d4b604c7957c1c8e3fc9c97ac1355b57d3ac5a833590ee79153774443b9c87b032216e40e0977cdec616e43f60aba35853316d2dfca3e56ec605c05cfe34a59cad033b90b128533afb78cab893e17137e21bfd33ea03802aced5b9be6ef8225e962ed9edac68749c5f2312d0635568937e87f9c4e41f872d0cc65183b9824e0771bfbbb1e645cc1a1a0b40b49c4b506490581d3cdf1253", 0xe0}, {&(0x7f0000000440)="1dbc2bdc52232cb751cd8d8cdd6d9eb64262c0acde7135b3ef0d8d2a231e674101b08e72b7e5f0fab4da333569dea5c76c9772f1ea52fb8ce634fb46e6bc52011ec1840ac578d8ce435d09eccea6f22110da6e5102702d", 0x57}, {&(0x7f00000004c0)="fbaaeb2dc828ffa68e1ca3e6d96deab3449b82f8a00964e53a89735fb04e332565a55bfd30d86e425752d60bd482", 0x2e}, {&(0x7f0000000500)="b969addaf8b3f53c2f", 0x9}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="480002000000000016010000020000004872585afc0dfe2993ff09c2cb3d88819325672385452c98714321d74c79e3f10a6c37155a0dd208458b9c59200758d43a00000000000000"], 0x48}, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x16) (async)
syz_create_resource$binfmt(&(0x7f0000001400)='./file1\x00') (async)
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) (async)
write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x509) (async)
close(r3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) (async)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200000, 0x60) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async)
sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000280)=@nfc={0x27, r6, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="024f3a80aff3bb853456bc89842a203aa038de68c32e58b795982902cef48a81d2f53100e378550c7c2d96c55a33ea52b74bd578e03cd0a70c20603ef90b25e00e985b8f77d0a76341d4b604c7957c1c8e3fc9c97ac1355b57d3ac5a833590ee79153774443b9c87b032216e40e0977cdec616e43f60aba35853316d2dfca3e56ec605c05cfe34a59cad033b90b128533afb78cab893e17137e21bfd33ea03802aced5b9be6ef8225e962ed9edac68749c5f2312d0635568937e87f9c4e41f872d0cc65183b9824e0771bfbbb1e645cc1a1a0b40b49c4b506490581d3cdf1253", 0xe0}, {&(0x7f0000000440)="1dbc2bdc52232cb751cd8d8cdd6d9eb64262c0acde7135b3ef0d8d2a231e674101b08e72b7e5f0fab4da333569dea5c76c9772f1ea52fb8ce634fb46e6bc52011ec1840ac578d8ce435d09eccea6f22110da6e5102702d", 0x57}, {&(0x7f00000004c0)="fbaaeb2dc828ffa68e1ca3e6d96deab3449b82f8a00964e53a89735fb04e332565a55bfd30d86e425752d60bd482", 0x2e}, {&(0x7f0000000500)="b969addaf8b3f53c2f", 0x9}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="480002000000000016010000020000004872585afc0dfe2993ff09c2cb3d88819325672385452c98714321d74c79e3f10a6c37155a0dd208458b9c59200758d43a00000000000000"], 0x48}, 0x0) (async)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)

1m33.925145626s ago: executing program 3 (id=259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028837040010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500370001000000"], 0x24}}, 0x4040000)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000fb1000)=[{&(0x7f0000000080)="480000001400197f09004b0101048c590288ffff800100001f0000010028213ee20600d4ff5bffff00f83bf8617c63b7c7e5ed5e00000000000000000000ea040018125d4b18857a", 0x48}], 0x1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$FIOCLEX(r5, 0x5451)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0x239f9000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a010800000000000000000100000009b25f0073797a32000000000900010073797a3000000000500c0000060a0104000000000000000001008c00000000000000ceef9c00010073797a01000100000000008024000180090001006d6574610000000014000280080001400000000c080002400000001b150000001100010022a5cc6938169900000000000000000000000a4e4c42308bb26f013417a1e58594d9039ed8156032468e91148b8575298b55dfc8150d4a91b2bcd2ffd1f907283136455bb8aa878386a254c84d8a97e37816add2784dc779bade4510551b"], 0xa4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004)
r9 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r9, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x7}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)='r/', 0x2}], 0x1, 0x0, 0x0, 0x30000}, 0x48810)

1m33.636151105s ago: executing program 3 (id=266):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x44800) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r2, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) (async)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000080)={0xc}) (async)
r5 = getgid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2312012, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',blksize=0x0000000000000200,blksize=0x0000000000001400,max_read=0x0000000000000d16,max_read=0x00000000000008ce,default_permissions,max_read=0x0000000000000001,measure,fowner>', @ANYRESDEC=r6, @ANYBLOB=',func=MODULE_CHECK,fscontext=staff_u,\x00'])

1m33.635177425s ago: executing program 3 (id=268):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, <r0=>0xffffffffffffffff}, 0x4)
mmap(&(0x7f00005b5000/0x2000)=nil, 0x2000, 0x9, 0x100010, r0, 0x1b94d000)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000280)={{@local, 0xd9}, {@local, 0x7}, 0x400, "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"}, 0x418, 0x823})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000040)={0x0, 0x0, 0xffffffff})
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000002400)=0x35, 0x4)

1m33.556422035s ago: executing program 3 (id=269):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000000c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}})
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040))

1m25.29388628s ago: executing program 3 (id=349):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000d0}, 0x40000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0])

1m14.696024068s ago: executing program 2 (id=484):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="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"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)
preadv(r3, &(0x7f0000002d40)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1, 0x40, 0x9)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/202, 0xca}], 0x1)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}}, 0x20}}, 0x0)

1m14.695669997s ago: executing program 2 (id=485):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r2)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r8=>0x0)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000015c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000000440)={0x1108, r5, 0x302, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0xc8, 0x19, "587f2eef22a8bb40c12c38bf25fc2a1388e8d581ec6808f3e1d78a030cc50ebe29e19e4a0585e0a605886f1a0103ac637704989a71ce2e691c4767744351f656958008ca4e6d4c8780dab55d21c5f14c47b44fc893e706c800a53e8e7bc58f3a90adfd8f900e5b86e671059bb96c8a695f79e8cae80d5f55ad24ef3501d81435d12893745f5333640d6e87d73db62f16797891a3ed0017577cadd4284134dfebbda3c35ae54a350c2493a5886deb7e48e602cae75344e6893be87efd8b2fa49a76049b07"}]}, 0x1108}, 0x1, 0x0, 0x0, 0x14}, 0x91)

1m14.544185627s ago: executing program 2 (id=486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1002010, &(0x7f0000000580)={[{@uuid_on}, {@default_permissions}, {@nfs_export_on}, {@redirect_dir_on}], [{@context={'context', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k'}}, {@subj_user={'subj_user', 0x3d, 'bridge\x00'}}, {@fowner_gt={'fowner>', r2}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_lt={'euid<', r3}}]})
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
dup2(r1, r0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5)
fcntl$notify(r4, 0x402, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000000400390400100000000001006794352ea1be5593000000006d92561b901a677d902328fce61111fd393d676949ebefe173902157b3febc6e33788c11429560b65e05e0e449bbeea7a2b91543eea45157aaa30abd7c4cc78b2a4968ebe9752f36896b485d139fc0b3f08381b46b208297218e95618e20a35e06da7d494b5e6731a17834ad8b4ba6918084978d3aad5745432b0004f5358168e69ceab408fc07c66094559daf8c81d0e43fd66e7afbbd7670cdf16c89458aca081435695a4cc7a0ed134726f59a48bc4a9579cc80e26db1629cc2b1b78557ccce1fd18e4e79b6b1e0d0a5ec4d1ebe588fd5a4b9d2f85bb68981be4cbedca2a7035cec94bf52ed7b323edf43d7e490f971fe4979ad5a09ea367adb9ee1384ce11f38cb0ef6f9afded8a1557f2a1a2bda945f53a40e", @ANYRES32=0x0, @ANYBLOB="0002010000650000200012800b0001006272696467650000100002800c002200e2ffffffffffffff"], 0x40}}, 0x0)

1m14.486011975s ago: executing program 2 (id=487):
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+60000}, {0x0, 0xea60}}) (async)
fsmount(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r2, 0x5, {0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x5, 0x1a, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2fe5a9bd6a6de4d1c128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="068cba240a87", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x81, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x7, 0x65, 0x0, 0x0, 0x4, 0x0, @local, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async)
keyctl$session_to_parent(0x12)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0)
keyctl$session_to_parent(0x12)

1m14.482228137s ago: executing program 2 (id=488):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_setup(0x1b94, &(0x7f0000000000))
r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0xffffffffffffffff, 0x141300)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000100)={0x0, 0x2, 0x0, 'queue0\x00'})
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040301, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8934, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_settings={0x4, 0xf64, @fr=&(0x7f00000001c0)={0x7, 0x7fff, 0x9, 0x8001, 0x8, 0xfff7, 0xc}}})
write$sndseq(r2, &(0x7f0000000040)=[{0x4e, 0x0, 0x2, 0xfd, @time={0x0, 0x3}, {0x0, 0x2}, {0xe}, @result={0xa884, 0xfffff001}}], 0x1c)

1m13.604882403s ago: executing program 2 (id=498):
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000007f4751a80000000a00000000000000ff01000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000f9000000000000000000000000000000000000000000000000390000000000000000000700000000000000000000000000000000000000000000000000000000000000680ba2ef424df24a7d35db6d78483a37af740000137c6e8c692c12f7553af217d01aac86ad295e764ea35e30d61fe9d5defb040d14a563cee4da21ffd0c5e920fc3d52edfe3cabe9b642b6f3fca65048ea6c4fc642ed1f9a"], 0x90)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r0=>0x0, 0xc0119679306ad078, 0x700, 0x7, 0x2, {{0x22, 0x4, 0x3, 0x1, 0x88, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote, {[@generic={0x44, 0x9, "ee9d6788311e58"}, @timestamp={0x44, 0x10, 0x90, 0x0, 0x3, [0x10000, 0xffffffff, 0x5]}, @timestamp={0x44, 0xc, 0x14, 0x0, 0x3, [0x9, 0x5e]}, @timestamp={0x44, 0x10, 0xea, 0x0, 0x2, [0x9, 0x0, 0x9]}, @timestamp_addr={0x44, 0xc, 0x72, 0x1, 0x8, [{@rand_addr=0x64010100, 0x3}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x40, 0x3, 0x0, [{@remote, 0x8}, {@loopback, 0x4ec}, {@remote, 0x2}]}, @noop, @timestamp={0x44, 0x10, 0xd6, 0x0, 0xc, [0x5, 0x1, 0x2]}, @end]}}}}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f0000000180)=0x58, 0x3fffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x7d, &(0x7f0000000380)=""/125, 0x0, 0x0, '\x00', r0}, 0x94)

1m10.275543563s ago: executing program 32 (id=349):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000d0}, 0x40000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0])

57.805671277s ago: executing program 33 (id=498):
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000007f4751a80000000a00000000000000ff01000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000f9000000000000000000000000000000000000000000000000390000000000000000000700000000000000000000000000000000000000000000000000000000000000680ba2ef424df24a7d35db6d78483a37af740000137c6e8c692c12f7553af217d01aac86ad295e764ea35e30d61fe9d5defb040d14a563cee4da21ffd0c5e920fc3d52edfe3cabe9b642b6f3fca65048ea6c4fc642ed1f9a"], 0x90)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r0=>0x0, 0xc0119679306ad078, 0x700, 0x7, 0x2, {{0x22, 0x4, 0x3, 0x1, 0x88, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote, {[@generic={0x44, 0x9, "ee9d6788311e58"}, @timestamp={0x44, 0x10, 0x90, 0x0, 0x3, [0x10000, 0xffffffff, 0x5]}, @timestamp={0x44, 0xc, 0x14, 0x0, 0x3, [0x9, 0x5e]}, @timestamp={0x44, 0x10, 0xea, 0x0, 0x2, [0x9, 0x0, 0x9]}, @timestamp_addr={0x44, 0xc, 0x72, 0x1, 0x8, [{@rand_addr=0x64010100, 0x3}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x40, 0x3, 0x0, [{@remote, 0x8}, {@loopback, 0x4ec}, {@remote, 0x2}]}, @noop, @timestamp={0x44, 0x10, 0xd6, 0x0, 0xc, [0x5, 0x1, 0x2]}, @end]}}}}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f0000000180)=0x58, 0x3fffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x7d, &(0x7f0000000380)=""/125, 0x0, 0x0, '\x00', r0}, 0x94)

24.042841166s ago: executing program 4 (id=691):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)

23.83487957s ago: executing program 4 (id=696):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12214}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
r1 = socket$inet(0x2, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000140)=""/120, &(0x7f0000000000)=0x78)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r2, &(0x7f0000000000), &(0x7f0000000040)=0x14)

23.604759355s ago: executing program 4 (id=701):
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={<r0=>0x0, 0x1fd, 0x3, [0xf, 0x9, 0x8]}, &(0x7f0000000040)=0xe)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r0, 0x4}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r0, 0x0, 0x3, 0x3}, 0x10)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000100)={0x0, r1, r1, 0x10, 0x34, '\x00', {0x140, 0x4, 0x0, 0x0, 0x80000000, 0x8, 0xa, 0x2ca, {0x8, 0x192}, {0x7, 0x74}, {0x7, 0x8}, 0x8, 0x8, 0x1, 0x6, 0x3, 0x0, 0x8, 0x1, 0x7, 0xfff9, '\x00', 0x9ce0, 0x90, 0x7, 0x7}})
r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80800)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000240)=0x4, 0x4)
ioctl$sock_proto_private(r1, 0x89e5, &(0x7f0000000280)="74fa70269a01f35c221276feb2b5c9a4cbc61f03c3890bd3d9ad09ee4913a45b4732567b96d46b30127eac41e230bfb476439bfba4c49fc745e03444117ea56b1d6b27f3d78453d1c7060046cfd13ca9efce092b74e452f1ac2a65929c193482f6b9311e6e0f6b976068cb9506998597eca8bbf8cd280f")
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={<r4=>r0, 0x9, 0x20}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r4, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x3, @private1, 0x6}, @in6={0xa, 0x4e23, 0x7f, @local}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f0000000440)=0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000480)=0x28, 0x4)
fallocate(r1, 0x3d, 0xffffffffffffffff, 0x374)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x6)
r8 = userfaultfd(0x80800)
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000500)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x2})
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x8200, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000580)={0x103fc, 0x1, 0x26000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0xf, r9})
r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendmsg$AUDIT_TRIM(r10, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x300, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8014}, 0x20040010)
ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000780)={0x8, 0x1, 0x3})
getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000007c0)={<r11=>r0, 0x800, 0x74267187, 0x2}, &(0x7f0000000800)=0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00'})
sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x1409, 0x4, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004044)
sendmsg$AUDIT_USER_AVC(r10, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x453, 0x300, 0x70bd2d, 0x25dfdbff, "4bd2523f53b096c8b59b5094c96f7aeb480d2a8a", ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000a80)={<r12=>r11, 0x1}, &(0x7f0000000ac0)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000b00)={r12, 0x2}, 0x8)

23.603908222s ago: executing program 4 (id=703):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xfffffffc)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000000200)={&(0x7f0000000000)=[{0x4, 0x7, 0x4, 0x4}, {0x76b8000, 0x7fff, 0x3af, 0x2}, {0x8001, 0xcaa, 0x9, 0x7}], 0x3, 0x20, 0x7, 0x8000000000000001})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x1, 0xa0, "8bbe04f8457787b0615503dee80ab906a8dcd3bc72fdf919d57b4f6069b2e48037152ab08d4f52a8a0056d0de971c779edd72119644311ee1de84f8799869349a0099f168299a0e550cb936039c2f482f97791df7b048e0c29cf8cc55ddf714b77f903a9b68bfb3677f0aa0baa30fcfe100e250550f9ff8bf28f0afe3725d8e474a6b493634964cf9d636ecad19f46d6529bf14815de8d4f1eb5df0dea66fa26"}})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x90}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) (async)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xfffffffc) (async)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000000200)={&(0x7f0000000000)=[{0x4, 0x7, 0x4, 0x4}, {0x76b8000, 0x7fff, 0x3af, 0x2}, {0x8001, 0xcaa, 0x9, 0x7}], 0x3, 0x20, 0x7, 0x8000000000000001}) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x1, 0xa0, "8bbe04f8457787b0615503dee80ab906a8dcd3bc72fdf919d57b4f6069b2e48037152ab08d4f52a8a0056d0de971c779edd72119644311ee1de84f8799869349a0099f168299a0e550cb936039c2f482f97791df7b048e0c29cf8cc55ddf714b77f903a9b68bfb3677f0aa0baa30fcfe100e250550f9ff8bf28f0afe3725d8e474a6b493634964cf9d636ecad19f46d6529bf14815de8d4f1eb5df0dea66fa26"}}) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x90}}, 0x0) (async)

23.532967644s ago: executing program 4 (id=707):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r3=>0x0})
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x28800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r4}, './file0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c0001002dbd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="800100010a000200aaaaaaaaaa1c"], 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x400c0d4)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00001c2000010000000000000000000a801000ff0000070000000014000200fc00000000000000000000000000000014000100fe8000001b00000000000000000000aa08000d0002000000feb8d298edb9a74f7c1d25466ee7f223596998f53d143e7c21fbb808f66270fdf301e39146599ce43354b9831b3b206cd0380a103c9616e3be64b3adbbb193a91053a920894f7987"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x2, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

23.382954053s ago: executing program 4 (id=709):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000020010000000000000000000000000000fc0000000000000b0000000000000000"], 0x0)

8.380447624s ago: executing program 34 (id=709):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000020010000000000000000000000000000fc0000000000000b0000000000000000"], 0x0)

2.533595365s ago: executing program 6 (id=1012):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x16, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
futex(&(0x7f0000004000), 0x4, 0x0, 0x0, 0x0, 0x82020000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r1, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = socket(0x10, 0x3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) (async)
sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x8}]}}}]}, 0x3c}}, 0x0)

2.471452141s ago: executing program 6 (id=1016):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="329dc454428809b629e045f21921bc6253dead6c2aa8a69eceb75dbce5c9b5e1bd42e00f3dc1389a9428b056338855bbcc9512db0eb05f59a1d656a78c51d1e0f5e6e1f1c3ab8972603d1b075c97e50ceb27e40c28aa35", 0x57}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd8", 0x79}, {&(0x7f0000000580)}, {0x0}], 0x4}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x1}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000007"], 0x68}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10050}, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.238499437s ago: executing program 6 (id=1023):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x1a, 0x15}, 0x18)
fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0xa3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r2}, 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x6, r2}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x1a, 0x15}, 0x18) (async)
fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0xa3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r2}, 0xc) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x6, r2}, 0x38) (async)

2.148432634s ago: executing program 6 (id=1025):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="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"})
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000))

2.057476109s ago: executing program 6 (id=1027):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$CDROMPLAYBLK(r3, 0x5317, &(0x7f0000000200)={0x7, 0x1})

1.859152059s ago: executing program 6 (id=1032):
set_mempolicy(0x4000, &(0x7f0000000000)=0x7fff, 0x100007)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb01"], 0x0)
syz_usb_disconnect(r0) (async)
r1 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb7a4801a4c230f4a, 0x2, 0x3ff, 0x3, 0x3, 0x3}, {0x9, 0x5, 0x80, 0x2, 0x200, 0x80, 0x1, 0x9}, {0x9, 0x5, 0xd, 0x3, 0x40, 0x7, 0xe}}}}}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
unshare(0x48020200)
syz_usb_disconnect(r1)

1.229511207s ago: executing program 0 (id=1044):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000480)={[&(0x7f0000000000)='\\-/Y&\x00'/19, &(0x7f00000003c0)='\xe6\x00', &(0x7f0000000400)='({[\x00', &(0x7f0000000440)='-)\x00', 0xfffffffffffffffd]}, &(0x7f00000000c0), 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, 0x0}, 0xd158e5cd33650059)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r3, &(0x7f0000000180)="01010101", 0x4)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0)

1.162421973s ago: executing program 0 (id=1045):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30110000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a30000000000900010073797a30"], 0xc0}}, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
r2 = accept4(r0, 0x0, 0x0, 0x800)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
landlock_restrict_self(r4, 0x1)
bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000200))
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x2}], 0x1, 0x40800)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000340)=0x68)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.161525585s ago: executing program 0 (id=1047):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0xffffffffffffffff, r1, r1)

1.026272713s ago: executing program 0 (id=1049):
mount$9p_fd(0x0, 0x0, 0x0, 0x14000, &(0x7f0000000b00)=ANY=[@ANYBLOB="6cd3b14c7c966ebb6b38cb551fcedb6d285a02515ebf793f7d3df9"])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={&(0x7f0000000340)="d8aa188d863b33f9", 0x0, 0x0, 0x0}, 0x38)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000001580))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000080)={0x3, 0x0, [{0x203, 0x0, 0x3}, {0x119, 0x0, 0x10000}, {0xc0011882, 0x0, 0x4}]})
chdir(&(0x7f0000000040)='./file0\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

897.884957ms ago: executing program 0 (id=1052):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeefb1000, 0x2000, &(0x7f0000053000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c744513902000000001c24", 0x4c}], 0xaaaae27, 0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000580)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7d094feb169efa0cdd18be7c7652d3f9c9db1132c16b42570a919bcf85be10e931e3da31705c97f3b7990831ad096823df54a4be8c4f32789cc8496455f4d37526d03c68e7c2d84ef026c8e6c807c344055034a9110c039971831ee667f10056ca5c4dd24f64fea496388595687a1e944eab8d7afe2e5bfa73a12acc48601e7bc513b83b04171493e3cc5bdf19f58c2b7a0c2c5d0f185bfb63afec394721a81d5093bdc1aafcd53ea6baf5cf306c04ea1785a55c9c3330d180632714615d6164e884a02c300b46a99b07946cac3b6a0000000", 0x0, 0xfffffffffffffca1, 0x22})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x7, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x4, 0x202})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x2, 0xfc, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9, 0xfd}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfa}, {0xb000, 0x8080000, 0x0, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0x8, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x4, 0x1, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0xb, 0x17, 0x0, 0x5, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x7000, 0x200000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26}, {0x80a0000, 0x8cc}, {0x50000}, 0xddf8ffd3, 0x0, 0x8183002, 0x110, 0x3, 0xf801, 0x3000, [0x80000008, 0x0, 0x10000, 0xfffffffffffdffff]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x2, {0x2, 0xff, 0x6}, 0xff}, 0x18)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x32df02cda841e5ba}, 0x1}, 0x18)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r3, 0x0)
readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x40049366, 0x0)

641.805749ms ago: executing program 1 (id=1058):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x5, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xb3, 0x39da], 0x30000, 0x2010d3})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fcntl$setstatus(r0, 0x4, 0x7c00)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x10000000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x7, {0x77359400}, {0x4, 0x2, 0x8, 0x6, 0x29, 0x0, "0adb3fb8"}, 0x5})
dup3(r1, r0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)

641.176563ms ago: executing program 5 (id=1059):
r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8)
getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) (async)
fcntl$setpipe(r0, 0x407, 0x82d) (async, rerun: 32)
write$UHID_INPUT(r1, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={r1, r1, 0x0, r1}, 0x10) (async)
write$cgroup_pid(r1, &(0x7f00000011c0), 0x12) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001200)={0x0, 'veth1\x00'}, 0x18) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000001240), 0x4) (async, rerun: 32)
syz_emit_ethernet(0x66, &(0x7f0000001280)={@multicast, @local, @void, {@llc={0x4, {@snap={0xaa, 0x0, "6cfa", "8bbe99", 0xfbfb, "b6b8119422a9eea201e4dadc8efa9417eaf3674a06febbda004728c5286d2a27fff5df6ab761b95a4b347dcdf52ba9b832f3d23ab2508e30ce561b6e9676e987f1ed465574b72661dae1e81021729a"}}}}}, &(0x7f0000001300)={0x0, 0x1, [0xfe4, 0xac4, 0x32a, 0x51a]}) (rerun: 32)
pipe2(&(0x7f0000001340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000013c0), r4)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x880) (async, rerun: 32)
ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000014c0)) (async, rerun: 32)
getpeername$packet(r1, &(0x7f0000001500)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001640)={'ip_vti0\x00', &(0x7f0000001580)={'gretap0\x00', r6, 0x1, 0x80, 0xfffffeb2, 0x6, {{0x1e, 0x4, 0x0, 0x2, 0x78, 0x66, 0x0, 0x9, 0x2d, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @generic={0x89, 0x12, "8d7cc4b7544cf1f7949ab7047361a10a"}, @timestamp_addr={0x44, 0x1c, 0xd6, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@remote, 0x1942}, {@loopback, 0x7}]}, @timestamp={0x44, 0x20, 0x77, 0x0, 0x8, [0xb, 0x6, 0xfffffffa, 0x9, 0xffffffff, 0x2, 0x5]}, @generic={0x88, 0xb, "5f80a72aa361b384c2"}, @lsrr={0x83, 0x7, 0x39, [@rand_addr=0x64010101]}]}}}}}) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000016c0), r1)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040805}, 0x4080)
r8 = syz_open_dev$usbfs(&(0x7f00000017c0), 0x9, 0x200000)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001800)={'IDLETIMER\x00'}, &(0x7f0000001840)=0x1e) (async)
ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000001880)={0x5386, 0x13, [{0xc}, {0xc, 0x1}, {0xa, 0x1}, {0x1}, {0xd, 0x1}, {0xb, 0x1}, {0x7, 0x1}, {0xd}, {0x5, 0x1}, {0x4}, {0x3}, {0xd, 0x1}, {}, {0x1}, {0x6}, {0xb, 0x1}, {0xd, 0x1}, {0xc}, {0xc, 0x1}]}) (async)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000001980)={0xf, &(0x7f00000018c0)=[{0x37, '\x00', @data=0x2, 0x4}, {0x0, '\x00', @data=0x7ff, 0x7}]})
syz_open_dev$usbfs(&(0x7f00000019c0), 0x7, 0x400000)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000001a00)=0x7, 0x4) (async)
r10 = syz_open_dev$loop(&(0x7f0000001a40), 0x5, 0x404482)
syz_genetlink_get_family_id$wireguard(&(0x7f0000001a80), r10)

588.164588ms ago: executing program 5 (id=1060):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x7db1, &(0x7f0000000040)={0x0, 0xcbc5, 0x1cc90, 0x0, 0xe4})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1})
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000240)={{0x8000000, 0xf000, 0x0, 0x2, 0x8, 0x0, 0x40, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0xfb, 0x9, 0x0, 0x2, 0x7, 0x7, 0x0, 0xff}, {0x6000, 0x3000, 0xc, 0x0, 0x7, 0x9, 0x80, 0x0, 0x3, 0x9, 0x0, 0xfc}, {0xeeef0000, 0xd000, 0xd, 0xff, 0x0, 0xfe, 0xa, 0x0, 0xfe, 0x3, 0x4}, {0xdddd0000, 0xf000, 0x4, 0x0, 0xff, 0x4, 0x6, 0xb, 0x0, 0x3c}, {0x50000, 0x4000, 0x0, 0x3, 0x0, 0x2, 0x2, 0x14, 0x0, 0x0, 0x80}, {0xdddd1000, 0xdddd1000, 0x0, 0x2, 0xff, 0x0, 0xff, 0x6, 0x0, 0x0, 0x2}, {0x0, 0x3000, 0xf, 0x5, 0x1, 0x1, 0x83, 0xb, 0x26, 0x96}, {0x1, 0x4}, {0x80a0000, 0xff}, 0x9dfeffdb, 0x0, 0xeeee8000, 0x600, 0x1, 0x0, 0x0, [0x13, 0x0, 0x1]}) (async)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000240)={{0x8000000, 0xf000, 0x0, 0x2, 0x8, 0x0, 0x40, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0xfb, 0x9, 0x0, 0x2, 0x7, 0x7, 0x0, 0xff}, {0x6000, 0x3000, 0xc, 0x0, 0x7, 0x9, 0x80, 0x0, 0x3, 0x9, 0x0, 0xfc}, {0xeeef0000, 0xd000, 0xd, 0xff, 0x0, 0xfe, 0xa, 0x0, 0xfe, 0x3, 0x4}, {0xdddd0000, 0xf000, 0x4, 0x0, 0xff, 0x4, 0x6, 0xb, 0x0, 0x3c}, {0x50000, 0x4000, 0x0, 0x3, 0x0, 0x2, 0x2, 0x14, 0x0, 0x0, 0x80}, {0xdddd1000, 0xdddd1000, 0x0, 0x2, 0xff, 0x0, 0xff, 0x6, 0x0, 0x0, 0x2}, {0x0, 0x3000, 0xf, 0x5, 0x1, 0x1, 0x83, 0xb, 0x26, 0x96}, {0x1, 0x4}, {0x80a0000, 0xff}, 0x9dfeffdb, 0x0, 0xeeee8000, 0x600, 0x1, 0x0, 0x0, [0x13, 0x0, 0x1]})
sysfs$2(0x2, 0x800, 0x0) (async)
sysfs$2(0x2, 0x800, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f00009a8000/0x4000)=nil, 0x930, 0x2800003, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000240)="fb4149dd053be3ac2cc4a22332a77b23b8898600087bb16c94a6ab80313804d92f00000000010000045a96383369d226270080ff000000000000000000a000", 0x0, 0xffa4)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@arm64={0xa, 0x3, 0x0, '\x00', 0x3})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r9, 0x0, 0x11, 0x0, 0x2) (async)
setsockopt$inet_buf(r9, 0x0, 0x11, 0x0, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010026bd700001dbdf251cf9ffff060003"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

587.811496ms ago: executing program 0 (id=1061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xe8}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
r6 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x9, 0x8, 0x2, 0x0, 0x3, 0xfe, 0xfa, 0x8, 0xf, 0x6, 0x2, 0x9, 0x0, 0x6, 0x0, 0x1, 0x1, 0x52, 0xe0, '\x00', 0x4, 0x7})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x20, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfb, 0x0, '\x00', 0x1, 0x4})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r8, 0x80685600, &(0x7f0000000240))
r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0xc8)
r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x42382)
syz_usb_disconnect(r10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x4, 0x50, 0x38, "", [{{0x9, 0x4, 0x0, 0xfa, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x2e10, 0x6}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xfa, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x6, 0x67}}}}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r11=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[{0x96, 0xcc, 0x2, 0xa0}, {0x2, 0x8, 0xfb, 0x9}, {0x9, 0x4, 0x7, 0x8}, {0x5, 0x8, 0x9, 0x4}, {0x7, 0x9, 0x7f, 0x6}, {0x90ce, 0x6, 0x6, 0x741e}]})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000ffffffff1100000008000300", @ANYRES32=r11, @ANYBLOB="0a000600080211"], 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x80)

414.928265ms ago: executing program 1 (id=1062):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
listen(r1, 0x8)
r2 = syz_open_dev$media(&(0x7f0000000140), 0x3, 0x100)
ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000a00)={{0x80000000, 0x0, 0x6, [0x6, 0x6]}, {0x80000000, 0x0, 0x69edb310c7b022fe, [0x9, 0x2]}, 0x10000000, [0x22, 0x1]})
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf2504000000080004000100000008034b53f058ae11de42347f444a4d44e5"], 0x24}, 0x1, 0x300, 0x0, 0x40000}, 0x4080)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60e4c6ff", @ANYRES16=r3, @ANYBLOB="02002abd7000fbdbdf250600000008000700ac1e0101070001002521000008000400fdffffff0800040003000000050001000000000008000c000300000014000600fc01000000000000000000000000000106000b0008000000"], 0x60}}, 0x20040040)
r5 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x38900, 0x185)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x525280, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r8)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x13c1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

363.399425ms ago: executing program 1 (id=1063):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
write$bt_hci(r2, &(0x7f0000000040)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x0, 0x200, 0x54, 0x8001, 0x800, 0xe}}}, 0x12)
r3 = socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000180)={0x1})
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73697a653d35252c5d1d19d7cac5931232"])
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x84)

362.480012ms ago: executing program 1 (id=1064):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x8)
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000000c0)={0x0, 0x18, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0]})
mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xa00804, &(0x7f00000001c0)=ANY=[@ANYBLOB="668192faec95991ed1568d939d036c"])
socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) (async)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000000c0)={0x0, 0x18, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async)
mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xa00804, &(0x7f00000001c0)=ANY=[@ANYBLOB="668192faec95991ed1568d939d036c"]) (async)

203.339053ms ago: executing program 1 (id=1065):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101800, 0x13c)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x3fffffffffffff7c, &(0x7f00000001c0), &(0x7f00000001c0)=[0x9, 0x1], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x7})
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x1, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x1ff, 0x0}, {0x1, 0x0, 0x100d5b6, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x0, 0x0, 0xf3f, 0x0}, {0x7, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1548, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x40007, 0x0}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
flock(r1, 0x2)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x10800, 0x10, 0x2}, 0x18)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r6, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
mknodat$loop(r5, &(0x7f0000000100)='./file0/file0\x00', 0x6004, 0x0)

202.883767ms ago: executing program 1 (id=1066):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TCSETSF2(r0, 0x8926, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}]}, &(0x7f0000000080)=0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10)
sendmsg$inet_sctp(r6, &(0x7f0000000180)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='q', 0x1}], 0x1, 0x0, 0x0, 0x18c0}, 0x4005)
r8 = fsmount(r5, 0x1, 0x0)
fchdir(r8)
r9 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x9c1002)
ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000080)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x2c}}, 0x4004000)
r10 = dup(r1)
ioctl$TIOCSCTTY(r10, 0x540e, 0xd)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44010000", @ANYRES32=0x0, @ANYBLOB="40450000000000001c0012800b00010067726574617000000c00028008000400b227000008000a00", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004)

149.762722ms ago: executing program 5 (id=1067):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x250}], 0x100000000000006c}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x100)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x311000, 0x0)
r3 = accept4$inet6(r2, 0x0, &(0x7f0000000000), 0x8247f08096fbb5b1)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x80fb, 0x3})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read$proc_mixer(r4, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x15, 0x3, 'wrr\x00', 0x1, 0x6, 0x48}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
preadv(r8, &(0x7f0000003ec0)=[{&(0x7f0000003c80)=""/112, 0x70}], 0x1, 0x4, 0x7)
r9 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x7226}}], 0x18}, 0x0)
r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r10, 0xc00864c0, &(0x7f0000000080))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027bd700000000000040000002400118031f9e05e2f"], 0x38}, 0x1, 0x0, 0x0, 0x42890}, 0x4004004)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4)

75.271354ms ago: executing program 5 (id=1068):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1404, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}}, 0x4800)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200), 0x0)

74.156949ms ago: executing program 5 (id=1069):
setresgid(0xee00, 0xee01, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
r1 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x1000, 0x0, 0x42}, &(0x7f0000000200), &(0x7f0000011000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/49, 0x31}], &(0x7f0000000180)=[0xfffffffffffffff9], 0x1}, 0x20)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000c00)=0xe8)
setuid(r2)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x9, 0x3, 0x4e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, &(0x7f0000000c40), {[{{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'veth1_to_batadv\x00', 'veth1_to_team\x00', {}, {0xff}, 0x11, 0x1}, 0x0, 0x2c8, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x33, [{0x4, 0xe8, 0x80, 0x1}, {0x7, 0x6, 0x9, 0x3}, {0x7, 0x1, 0x0, 0x3}, {0xfcd, 0x1, 0x9, 0x3}, {0x5, 0xe4, 0x5, 0x6}, {0x7f, 0x6, 0x7f, 0x1}, {0x35be, 0x40, 0x5, 0x7}, {0x7, 0xb, 0x2, 0xec}, {0x2, 0x8, 0x3}, {0x4, 0x6, 0x9f, 0x608}, {0x2, 0x7, 0x45, 0x8}, {0x200, 0xb, 0x5}, {0x6, 0x3, 0x7, 0x7f}, {0x1ff, 0x0, 0x4, 0xc}, {0x4, 0x21, 0x8, 0x7}, {0x100, 0x12, 0xf, 0xc6e}, {0x8, 0xce, 0xb5, 0x800}, {0xf1a4, 0x6, 0x7}, {0x0, 0xf, 0x1, 0x4}, {0x8, 0x0, 0x5, 0x7}, {0x4, 0x0, 0x4, 0xef}, {0x653a, 0x2, 0xad, 0xfffffffe}, {0x3, 0x3, 0x1, 0x73}, {0x1, 0xff, 0xb2, 0x1620}, {0x7, 0xff, 0x6, 0x8}, {0x4, 0x7f, 0xee, 0x9}, {0x5, 0xfd, 0xc, 0x2}, {0x3ff, 0xf0, 0x72, 0x7}, {0x4, 0x4, 0x9, 0x3d03}, {0x3, 0x5, 0x4, 0x37e}, {0x2803, 0x20, 0x4, 0x44dd}, {0x6, 0x4, 0xd, 0xd}, {0xe, 0x8, 0x7f, 0x5}, {0x9, 0x80, 0x0, 0x2caa}, {0x7, 0xa0, 0x4, 0x9}, {0x81, 0x81, 0x2, 0x3}, {0x7, 0xe, 0x6, 0x7ff}, {0x2, 0x5, 0x6, 0x3}, {0x2019, 0x6, 0xfa, 0x1}, {0xa29, 0x9, 0x5, 0x2}, {0xdacc, 0x9, 0x9, 0x10}, {0xfff9, 0x9, 0x7, 0xf}, {0x1, 0x4, 0x5, 0x7fff}, {0x7, 0x81, 0xb0, 0x8}, {0x7fff, 0xd, 0xa1}, {0x1, 0x7, 0x6, 0xfc}, {0x77c, 0xfc, 0x8, 0x2}, {0x2, 0x44, 0x5, 0x4}, {0xefac, 0x8, 0x9, 0x10000}, {0xef1, 0x4, 0x5, 0x100}, {0x7fff, 0x2, 0x7, 0x7}, {0x9, 0x6, 0x4, 0x6}, {0x1, 0x3, 0xf2, 0x7}, {0x3, 0x4, 0x5, 0x3}, {0x4, 0x80, 0x3, 0x6}, {0x5, 0x1, 0xfc, 0xc}, {0x8, 0x2, 0x1, 0xf0}, {0x80, 0x4, 0x7, 0x3}, {0x5, 0x4, 0x1, 0x3}, {0xfff, 0xfe, 0x7, 0x101}, {0xb495, 0x8, 0x8, 0x8000}, {0x1, 0xf9, 0x0, 0x2}, {0x9, 0x8, 0x0, 0xffffffff}, {0xb, 0x7, 0x2, 0x7fff}]}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x4, 0x0, 0x0, 0x1, 0x2], 0x6, 0x5}, {0x3, [0x0, 0x4, 0x1, 0x2, 0x1, 0x1], 0x0, 0x2}}}}, {{@ip={@private=0xa010102, @remote, 0xff000000, 0xffffffff, 'syz_tun\x00', 'syzkaller1\x00', {}, {0xff}, 0x1d, 0x2, 0x8}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x40, 0x9, 0x4, 'syz1\x00', 'syz1\x00', {0x10}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)
sendmmsg(r3, &(0x7f00000018c0)=[{{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x3, 0x0, 0x2, {0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x9}}}, 0x80, 0x0}}], 0x2, 0x4000)
recvmmsg$unix(r3, &(0x7f0000004880)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000003c0)=""/167, 0xa7}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)=""/158, 0x9e}], 0x1, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000840)=""/205, 0xcd}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000000a40)=""/134, 0x86}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/213, 0xd5}, {&(0x7f0000002a40)=""/79, 0x4f}], 0x4, &(0x7f0000002b00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000003c00)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1, &(0x7f0000003c40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003c80), 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/239, 0xef}], 0x2, &(0x7f0000003e80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003f00)=@abs, 0xfebc, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/232, 0xe8}, {&(0x7f0000004080)=""/228, 0xe4}, {&(0x7f0000004180)=""/45, 0x2d}], 0x3, &(0x7f0000004200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004240)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f00000042c0)=""/236, 0xec}, {&(0x7f00000043c0)=""/210, 0xd2}, {&(0x7f00000044c0)=""/171, 0xab}, {&(0x7f0000004580)=""/205, 0xcd}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004700), 0x6e, &(0x7f00000047c0), 0x1, &(0x7f0000004800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x9, 0x40000000, &(0x7f0000004ac0)={0x0, 0x3938700})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)

0s ago: executing program 5 (id=1070):
syz_emit_ethernet(0x3a, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r1 = socket(0xa, 0x3, 0x3a)
r2 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6)
fcntl$addseals(r2, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x200, 0xf24})
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x802000, @loopback}, {0xa, 0x4, 0xfffffffd, @mcast2}, 0x3, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400, 0xdfffffff]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1e, &(0x7f00000000c0)=ANY=[@ANYBLOB="000073060000aaaaaaaaaa31ffed000023e0f3ff0d54f9fa5d8735b8b8df9b1f6e7f0401000012cd6a0d0100ab37"], 0x0)

kernel console output (not intermixed with test programs):

631
[  113.811277][ T8271] 9pnet_fd: p9_fd_create_unix (8271): problem connecting socket: ./file0: -111
[  113.814367][   T40] audit: type=1400 audit(1775066933.761:4268): avc:  denied  { mounton } for  pid=8270 comm="syz.0.632" path="/268/file0" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  113.981691][ T8275] overlayfs: upper fs does not support file handles, falling back to index=off.
[  113.986477][   T40] audit: type=1400 audit(1775066933.931:4269): avc:  denied  { bind } for  pid=8274 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  114.309297][   T53] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  114.480505][   T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.484122][   T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.487355][   T53] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  114.490484][   T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.494409][   T53] usb 5-1: config 0 descriptor??
[  114.800280][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.902154][   T53] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  114.904730][   T53] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  114.909691][   T53] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0002/input/input10
[  114.915787][   T40] audit: type=1400 audit(1775066934.861:4270): avc:  denied  { read } for  pid=5321 comm="acpid" name="event4" dev="devtmpfs" ino=2940 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.928773][   T53] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  114.933373][   T40] audit: type=1400 audit(1775066934.871:4271): avc:  denied  { open } for  pid=5321 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2940 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.989699][   T40] audit: type=1400 audit(1775066934.941:4272): avc:  denied  { ioctl } for  pid=5321 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2940 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.110089][   T40] audit: type=1400 audit(1775066935.061:4273): avc:  denied  { ioctl } for  pid=8276 comm="syz.0.635" path="socket:[23204]" dev="sockfs" ino=23204 ioctlcmd=0x6f04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  115.122502][   T59] usb 5-1: USB disconnect, device number 7
[  118.573370][ T8292] vlan3: entered promiscuous mode
[  118.575574][ T8292] vlan3: entered allmulticast mode
[  118.577308][ T8292] hsr_slave_1: entered allmulticast mode
[  119.123347][ T8295] netlink: 'syz.0.639': attribute type 27 has an invalid length.
[  119.176597][ T8296] __nla_validate_parse: 1 callbacks suppressed
[  119.176615][ T8296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.639'.
[  119.310006][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.326598][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.485574][ T8295] macsec1: left promiscuous mode
[  119.487701][ T8295] macsec1: left allmulticast mode
[  119.490235][ T8295] bridge1: left promiscuous mode
[  119.492896][ T8295] bond1: left promiscuous mode
[  119.496378][ T8295] bond2: left allmulticast mode
[  119.504690][ T8295] vlan3: left promiscuous mode
[  119.506755][ T8295] vlan3: left allmulticast mode
[  119.508529][ T8295] hsr_slave_1: left allmulticast mode
[  119.512472][  T778] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.516027][  T778] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.521262][  T778] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.524768][  T778] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.632740][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.641'.
[  119.696490][ T8308] tmpfs: Bad value for 'mpol'
[  119.703788][ T8308] Cannot find add_set index 128 as target
[  119.740609][ T5938] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  121.571371][ T8317] overlayfs: upper fs does not support file handles, falling back to index=off.
[  121.673334][ T8320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'.
[  121.676403][ T8320] netlink: 'syz.0.646': attribute type 7 has an invalid length.
[  121.678866][ T8320] netlink: 'syz.0.646': attribute type 8 has an invalid length.
[  121.682149][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'.
[  122.201399][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  122.201417][   T40] audit: type=1400 audit(1775066942.151:4275): avc:  denied  { watch } for  pid=8321 comm="syz.0.647" path="/283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  122.222710][   T40] audit: type=1400 audit(1775066942.151:4276): avc:  denied  { watch_sb } for  pid=8321 comm="syz.0.647" path="/283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  122.903393][   T40] audit: type=1400 audit(1775066942.851:4277): avc:  denied  { listen } for  pid=8325 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  123.918814][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'.
[  124.048807][   T40] audit: type=1400 audit(1775066943.991:4278): avc:  denied  { setopt } for  pid=8346 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  124.116680][ T8351] FAULT_INJECTION: forcing a failure.
[  124.116680][ T8351] name failslab, interval 1, probability 0, space 0, times 0
[  124.120694][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.0.657 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  124.120721][ T8351] Tainted: [L]=SOFTLOCKUP
[  124.120727][ T8351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  124.120743][ T8351] Call Trace:
[  124.120751][ T8351]  <TASK>
[  124.120758][ T8351]  dump_stack_lvl+0x100/0x190
[  124.120796][ T8351]  should_fail_ex.cold+0x5/0xa
[  124.120821][ T8351]  should_failslab+0xc2/0x120
[  124.120844][ T8351]  __kmalloc_cache_noprof+0x7a/0x6f0
[  124.120869][ T8351]  ? alloc_super+0x52/0xd20
[  124.120902][ T8351]  alloc_super+0x52/0xd20
[  124.120933][ T8351]  ? __pfx_ovl_fill_super+0x10/0x10
[  124.120992][ T8351]  sget_fc+0x117/0xc70
[  124.121020][ T8351]  ? __pfx_set_anon_super_fc+0x10/0x10
[  124.121048][ T8351]  ? __pfx_ovl_fill_super+0x10/0x10
[  124.121074][ T8351]  get_tree_nodev+0x28/0x190
[  124.121094][ T8351]  vfs_get_tree+0x92/0x320
[  124.121121][ T8351]  path_mount+0x7d0/0x23d0
[  124.121151][ T8351]  ? __pfx_path_mount+0x10/0x10
[  124.121172][ T8351]  ? lockdep_hardirqs_on+0x78/0x100
[  124.121204][ T8351]  ? putname+0xb1/0x110
[  124.121224][ T8351]  ? kmem_cache_free+0x124/0x6a0
[  124.121258][ T8351]  ? __x64_sys_mount+0x293/0x310
[  124.121280][ T8351]  __x64_sys_mount+0x293/0x310
[  124.121305][ T8351]  ? __pfx___x64_sys_mount+0x10/0x10
[  124.121338][ T8351]  do_syscall_64+0x106/0xf80
[  124.121364][ T8351]  ? clear_bhb_loop+0x40/0x90
[  124.121384][ T8351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.121403][ T8351] RIP: 0033:0x7f20f119c819
[  124.121420][ T8351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.121435][ T8351] RSP: 002b:00007f20f210f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  124.121448][ T8351] RAX: ffffffffffffffda RBX: 00007f20f1415fa0 RCX: 00007f20f119c819
[  124.121455][ T8351] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  124.121461][ T8351] RBP: 00007f20f210f090 R08: 0000200000000380 R09: 0000000000000000
[  124.121468][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  124.121474][ T8351] R13: 00007f20f1416038 R14: 00007f20f1415fa0 R15: 00007ffee7e37a38
[  124.121490][ T8351]  </TASK>
[  124.289421][ T8355] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  124.463947][ T8360] netlink: 'syz.0.661': attribute type 3 has an invalid length.
[  124.469013][   T40] audit: type=1400 audit(1775066944.411:4279): avc:  denied  { execute } for  pid=8358 comm="syz.0.661" dev="hugetlbfs" ino=25693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  124.474395][ T8360] sch_tbf: peakrate 6992072094121544327 is lower than or equals to rate 7381987976541574540 !
[  124.477871][   T40] audit: type=1400 audit(1775066944.421:4280): avc:  denied  { execute_no_trans } for  pid=8358 comm="syz.0.661" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=25693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  137.239457][ T1117] ata1.00: exception Emask 0x0 SAct 0x4000 SErr 0x0 action 0x6 frozen
[  137.242264][ T1117] ata1.00: failed command: WRITE FPDMA QUEUED
[  137.244581][ T1117] ata1.00: cmd 61/d8:70:be:21:08/05:00:00:00:00/40 tag 14 ncq dma 765952 out
[  137.244581][ T1117]          res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout)
[  137.250679][ T1117] ata1.00: status: { DRDY }
[  137.252204][ T1117] ata1: hard resetting link
[  137.573463][ T1117] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  137.576695][ T1117] ata1.00: configured for UDMA/100
[  137.579569][ T1117] ata1: EH complete
[  137.726416][ T8363] bond0: (slave batadv0): Releasing backup interface
[  137.771549][ T8363] bond0: (slave bond_slave_0): Releasing backup interface
[  137.816111][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'.
[  137.827187][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  137.834344][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  137.836696][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  137.855439][ T5288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  137.859728][   T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  137.860539][ T5288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  137.863391][   T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  137.867285][   T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  137.868958][ T5288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  137.872917][ T8363] bond0: (slave ������): Releasing backup interface
[  137.874615][   T40] audit: type=1400 audit(1775066957.831:4281): avc:  denied  { mounton } for  pid=8368 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  137.884220][   T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  137.885540][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  137.887977][   T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  137.893049][   T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  137.900008][   T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  137.909327][   T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  137.913911][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  137.916612][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  137.920823][ T8363] team0: Port device team_slave_0 removed
[  137.929608][ T8363] team0: Port device team_slave_1 removed
[  137.932616][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.937423][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.940692][ T8363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  137.959562][ T8364] team0: No ports can be present during mode change
[  137.972592][ T8369] team0 (unregistering): Port device geneve0 removed
[  137.985096][ T8376] fido_id[8376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory
[  138.110785][   T40] audit: type=1400 audit(1775066958.061:4282): avc:  denied  { connect } for  pid=8377 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  138.161840][   T40] audit: type=1400 audit(1775066958.111:4283): avc:  denied  { read } for  pid=8377 comm="syz.0.663" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  138.173432][   T40] audit: type=1400 audit(1775066958.121:4284): avc:  denied  { open } for  pid=8377 comm="syz.0.663" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  138.183771][   T40] audit: type=1400 audit(1775066958.121:4285): avc:  denied  { ioctl } for  pid=8377 comm="syz.0.663" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  138.256495][ T8370] chnl_net:caif_netlink_parms(): no params data found
[  138.277060][ T8368] chnl_net:caif_netlink_parms(): no params data found
[  138.310536][ T8392] FAULT_INJECTION: forcing a failure.
[  138.310536][ T8392] name failslab, interval 1, probability 0, space 0, times 0
[  138.314861][ T8392] CPU: 2 UID: 0 PID: 8392 Comm: syz.0.664 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  138.314882][ T8392] Tainted: [L]=SOFTLOCKUP
[  138.314886][ T8392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  138.314894][ T8392] Call Trace:
[  138.314899][ T8392]  <TASK>
[  138.314904][ T8392]  dump_stack_lvl+0x100/0x190
[  138.314931][ T8392]  should_fail_ex.cold+0x5/0xa
[  138.314949][ T8392]  should_failslab+0xc2/0x120
[  138.314963][ T8392]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  138.314984][ T8392]  ? ovl_do_parse_layer+0x30/0x12b0
[  138.315003][ T8392]  ? kasan_quarantine_put+0x104/0x240
[  138.315049][ T8392]  ? lockdep_hardirqs_on+0x78/0x100
[  138.315076][ T8392]  kstrdup+0x51/0xe0
[  138.315126][ T8392]  ovl_do_parse_layer+0x30/0x12b0
[  138.315148][ T8392]  ovl_parse_param+0x11d6/0x1600
[  138.315168][ T8392]  ? selinux_fs_context_parse_param+0xd8/0x130
[  138.315189][ T8392]  ? __pfx_ovl_parse_param+0x10/0x10
[  138.315210][ T8392]  ? static_key_count+0x5a/0x70
[  138.315225][ T8392]  ? __pfx_ovl_parse_param+0x10/0x10
[  138.315243][ T8392]  vfs_parse_fs_param+0x200/0x3b0
[  138.315261][ T8392]  vfs_parse_fs_qstr+0x138/0x1c0
[  138.315277][ T8392]  ? __pfx_vfs_parse_fs_qstr+0x10/0x10
[  138.315299][ T8392]  ? ovl_next_opt+0x143/0x1c0
[  138.315316][ T8392]  ? __pfx_ovl_next_opt+0x10/0x10
[  138.315333][ T8392]  vfs_parse_monolithic_sep+0x195/0x210
[  138.315352][ T8392]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  138.315370][ T8392]  ? alloc_fs_context+0x65a/0xf40
[  138.315389][ T8392]  path_mount+0x77f/0x23d0
[  138.315413][ T8392]  ? __pfx_path_mount+0x10/0x10
[  138.315428][ T8392]  ? lockdep_hardirqs_on+0x78/0x100
[  138.315448][ T8392]  ? putname+0xb1/0x110
[  138.315462][ T8392]  ? kmem_cache_free+0x124/0x6a0
[  138.315484][ T8392]  ? __x64_sys_mount+0x293/0x310
[  138.315500][ T8392]  __x64_sys_mount+0x293/0x310
[  138.315516][ T8392]  ? __pfx___x64_sys_mount+0x10/0x10
[  138.315538][ T8392]  do_syscall_64+0x106/0xf80
[  138.315556][ T8392]  ? clear_bhb_loop+0x40/0x90
[  138.315572][ T8392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.315585][ T8392] RIP: 0033:0x7f20f119c819
[  138.315597][ T8392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.315608][ T8392] RSP: 002b:00007f20f210f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  138.315621][ T8392] RAX: ffffffffffffffda RBX: 00007f20f1415fa0 RCX: 00007f20f119c819
[  138.315629][ T8392] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  138.315635][ T8392] RBP: 00007f20f210f090 R08: 0000200000000380 R09: 0000000000000000
[  138.315643][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.315652][ T8392] R13: 00007f20f1416038 R14: 00007f20f1415fa0 R15: 00007ffee7e37a38
[  138.315668][ T8392]  </TASK>
[  138.375090][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.409251][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.411558][ T8370] bridge_slave_0: entered allmulticast mode
[  138.414878][ T8370] bridge_slave_0: entered promiscuous mode
[  138.417588][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.420152][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.422711][ T8368] bridge_slave_0: entered allmulticast mode
[  138.425439][ T8368] bridge_slave_0: entered promiscuous mode
[  138.437473][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.440403][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.442738][ T8370] bridge_slave_1: entered allmulticast mode
[  138.445738][ T8370] bridge_slave_1: entered promiscuous mode
[  138.457308][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.459771][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.462509][ T8368] bridge_slave_1: entered allmulticast mode
[  138.465554][ T8368] bridge_slave_1: entered promiscuous mode
[  138.468233][ T8372] chnl_net:caif_netlink_parms(): no params data found
[  138.507788][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.524753][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.540883][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.550275][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.567645][ T8370] team0: Port device team_slave_0 added
[  138.576933][ T8370] team0: Port device team_slave_1 added
[  138.598485][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.601182][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.603636][ T8372] bridge_slave_0: entered allmulticast mode
[  138.606496][ T8372] bridge_slave_0: entered promiscuous mode
[  138.615622][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.618021][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.620634][ T8372] bridge_slave_1: entered allmulticast mode
[  138.623571][ T8372] bridge_slave_1: entered promiscuous mode
[  138.627111][ T8368] team0: Port device team_slave_0 added
[  138.635475][ T8368] team0: Port device team_slave_1 added
[  138.650346][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.656388][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.664464][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.674310][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.677245][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.688544][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.701774][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.706957][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.725480][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.728471][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.738547][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.771816][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.774745][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.785383][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.808339][ T8372] team0: Port device team_slave_0 added
[  138.812235][ T8372] team0: Port device team_slave_1 added
[  138.819050][ T8370] hsr_slave_0: entered promiscuous mode
[  138.822495][ T8370] hsr_slave_1: entered promiscuous mode
[  138.902139][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.904342][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.913036][ T8372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.929024][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.931498][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.939602][ T8372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.946209][ T8368] hsr_slave_0: entered promiscuous mode
[  138.948487][ T8368] hsr_slave_1: entered promiscuous mode
[  138.950855][ T8368] debugfs: 'hsr0' already exists in 'hsr'
[  138.952703][ T8368] Cannot create hsr debugfs directory
[  139.045004][ T8372] hsr_slave_0: entered promiscuous mode
[  139.048388][ T8372] hsr_slave_1: entered promiscuous mode
[  139.052176][ T8372] debugfs: 'hsr0' already exists in 'hsr'
[  139.054648][ T8372] Cannot create hsr debugfs directory
[  139.159193][ T8426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8426 comm=syz.0.672
[  139.173167][   T40] audit: type=1400 audit(1775066959.121:4286): avc:  denied  { write } for  pid=8425 comm="syz.0.672" path="socket:[25275]" dev="sockfs" ino=25275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  139.238243][ T8428] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  139.291701][ T8370] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  139.336452][ T8370] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  139.354066][ T8370] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  139.361269][ T8370] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  139.466643][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.484978][ T8370] 8021q: adding VLAN 0 to HW filter on device team0
[  139.494470][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.495262][   T40] audit: type=1400 audit(1775066959.441:4287): avc:  denied  { getopt } for  pid=8442 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  139.497017][ T7133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.553292][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.556207][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.703258][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.822031][ T8368] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  139.828720][ T8368] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  139.841478][ T8368] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  139.868774][ T8368] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  139.909262][ T5288] Bluetooth: hci0: command tx timeout
[  139.940457][ T8372] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  139.952548][ T8372] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  139.970816][   T40] audit: type=1400 audit(1775066959.921:4288): avc:  denied  { write } for  pid=8477 comm="syz.0.676" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  139.971769][ T8370] veth0_vlan: entered promiscuous mode
[  139.980790][   T40] audit: type=1400 audit(1775066959.921:4289): avc:  denied  { ioctl } for  pid=8477 comm="syz.0.676" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  139.989263][ T5288] Bluetooth: hci2: command tx timeout
[  139.989314][   T63] Bluetooth: hci4: command tx timeout
[  139.992604][ T8372] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  140.000106][ T8372] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  140.026350][ T8370] veth1_vlan: entered promiscuous mode
[  140.045500][ T8370] veth0_macvtap: entered promiscuous mode
[  140.063147][ T8370] veth1_macvtap: entered promiscuous mode
[  140.104592][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[  140.117966][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.124217][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.139976][ T7133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.143055][ T7133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.162798][ T7133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.166398][ T7133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.173274][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.224053][ T8368] 8021q: adding VLAN 0 to HW filter on device team0
[  140.248162][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.251300][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.258292][ T8372] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.269080][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.272438][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.291284][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.294580][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.316856][ T8508] Bluetooth: MGMT ver 1.23
[  140.332119][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.335215][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.348416][ T8372] 8021q: adding VLAN 0 to HW filter on device team0
[  140.351475][   T40] audit: type=1400 audit(1775066960.301:4290): avc:  denied  { mounton } for  pid=8370 comm="syz-executor" path="/syzkaller.ZcWfrI/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  140.370527][  T778] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.372838][  T778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.384621][  T778] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.386971][  T778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.439706][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.529'.
[  140.446731][ T8372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  140.452342][ T8372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.511860][ T8531] netlink: 'syz.0.679': attribute type 4 has an invalid length.
[  140.537762][ T8368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.572261][ T8368] veth0_vlan: entered promiscuous mode
[  140.578101][ T8368] veth1_vlan: entered promiscuous mode
[  140.595976][ T8368] veth0_macvtap: entered promiscuous mode
[  140.604240][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.608548][ T8368] veth1_macvtap: entered promiscuous mode
[  140.622653][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.632322][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.639520][  T778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.642259][  T778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.649257][  T778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.651940][  T778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.689353][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.692508][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.717622][ T7133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.725814][ T7133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.787907][ T8372] veth0_vlan: entered promiscuous mode
[  140.800525][ T8372] veth1_vlan: entered promiscuous mode
[  140.826904][ T8372] veth0_macvtap: entered promiscuous mode
[  140.831522][ T8372] veth1_macvtap: entered promiscuous mode
[  140.840934][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.846744][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.853384][ T1156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.857919][ T1156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.873975][ T1156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.877492][ T1156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.965261][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.967776][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.993281][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.996557][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.088215][ T8580] FAULT_INJECTION: forcing a failure.
[  141.088215][ T8580] name failslab, interval 1, probability 0, space 0, times 0
[  141.093806][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.4.684 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  141.093836][ T8580] Tainted: [L]=SOFTLOCKUP
[  141.093842][ T8580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  141.093853][ T8580] Call Trace:
[  141.093859][ T8580]  <TASK>
[  141.093867][ T8580]  dump_stack_lvl+0x100/0x190
[  141.093902][ T8580]  should_fail_ex.cold+0x5/0xa
[  141.093929][ T8580]  should_failslab+0xc2/0x120
[  141.093950][ T8580]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  141.093977][ T8580]  ? prepare_creds+0x2c/0x950
[  141.094030][ T8580]  prepare_creds+0x2c/0x950
[  141.094056][ T8580]  ovl_fill_super+0x7fa/0x5dd0
[  141.094091][ T8580]  ? __mutex_unlock_slowpath+0x15c/0x790
[  141.094123][ T8580]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  141.094157][ T8580]  ? lockdep_init_map_type+0x5c/0x250
[  141.094178][ T8580]  ? __pfx_ovl_fill_super+0x10/0x10
[  141.094204][ T8580]  ? __init_swait_queue_head+0xca/0x150
[  141.094230][ T8580]  ? shrinker_register+0x1db/0x240
[  141.094250][ T8580]  ? sget_fc+0x801/0xc70
[  141.094298][ T8580]  ? __pfx_set_anon_super_fc+0x10/0x10
[  141.094327][ T8580]  ? __pfx_ovl_fill_super+0x10/0x10
[  141.094352][ T8580]  get_tree_nodev+0xdd/0x190
[  141.094370][ T8580]  vfs_get_tree+0x92/0x320
[  141.094399][ T8580]  path_mount+0x7d0/0x23d0
[  141.094424][ T8580]  ? __pfx_path_mount+0x10/0x10
[  141.094444][ T8580]  ? lockdep_hardirqs_on+0x78/0x100
[  141.094470][ T8580]  ? putname+0xb1/0x110
[  141.094487][ T8580]  ? kmem_cache_free+0x124/0x6a0
[  141.094518][ T8580]  ? __x64_sys_mount+0x293/0x310
[  141.094538][ T8580]  __x64_sys_mount+0x293/0x310
[  141.094559][ T8580]  ? __pfx___x64_sys_mount+0x10/0x10
[  141.094587][ T8580]  do_syscall_64+0x106/0xf80
[  141.094610][ T8580]  ? clear_bhb_loop+0x40/0x90
[  141.094631][ T8580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.094648][ T8580] RIP: 0033:0x7feb2419c819
[  141.094664][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.094678][ T8580] RSP: 002b:00007feb25047028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  141.094695][ T8580] RAX: ffffffffffffffda RBX: 00007feb24415fa0 RCX: 00007feb2419c819
[  141.094706][ T8580] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  141.094715][ T8580] RBP: 00007feb25047090 R08: 0000200000000380 R09: 0000000000000000
[  141.094725][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.094736][ T8580] R13: 00007feb24416038 R14: 00007feb24415fa0 R15: 00007fff9813b588
[  141.094759][ T8580]  </TASK>
[  141.244986][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.603'.
[  141.506372][ T8626] FAULT_INJECTION: forcing a failure.
[  141.506372][ T8626] name failslab, interval 1, probability 0, space 0, times 0
[  141.514145][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.1.694 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  141.514179][ T8626] Tainted: [L]=SOFTLOCKUP
[  141.514185][ T8626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  141.514194][ T8626] Call Trace:
[  141.514202][ T8626]  <TASK>
[  141.514209][ T8626]  dump_stack_lvl+0x100/0x190
[  141.514245][ T8626]  should_fail_ex.cold+0x5/0xa
[  141.514272][ T8626]  ? ovl_fill_super+0x36b/0x5dd0
[  141.514293][ T8626]  should_failslab+0xc2/0x120
[  141.514321][ T8626]  __kmalloc_noprof+0xe0/0x850
[  141.514347][ T8626]  ? ovl_fs_params_verify+0x557/0xc30
[  141.514374][ T8626]  ovl_fill_super+0x36b/0x5dd0
[  141.514409][ T8626]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  141.514441][ T8626]  ? lockdep_init_map_type+0x5c/0x250
[  141.514460][ T8626]  ? __pfx_ovl_fill_super+0x10/0x10
[  141.514483][ T8626]  ? __init_swait_queue_head+0xca/0x150
[  141.514506][ T8626]  ? shrinker_register+0x1db/0x240
[  141.514527][ T8626]  ? sget_fc+0x801/0xc70
[  141.514553][ T8626]  ? __pfx_set_anon_super_fc+0x10/0x10
[  141.514578][ T8626]  ? __pfx_ovl_fill_super+0x10/0x10
[  141.514602][ T8626]  get_tree_nodev+0xdd/0x190
[  141.514618][ T8626]  vfs_get_tree+0x92/0x320
[  141.514643][ T8626]  path_mount+0x7d0/0x23d0
[  141.514663][ T8626]  ? __pfx_path_mount+0x10/0x10
[  141.514677][ T8626]  ? lockdep_hardirqs_on+0x78/0x100
[  141.514695][ T8626]  ? putname+0xb1/0x110
[  141.514706][ T8626]  ? kmem_cache_free+0x124/0x6a0
[  141.514726][ T8626]  ? __x64_sys_mount+0x293/0x310
[  141.514739][ T8626]  __x64_sys_mount+0x293/0x310
[  141.514753][ T8626]  ? __pfx___x64_sys_mount+0x10/0x10
[  141.514772][ T8626]  do_syscall_64+0x106/0xf80
[  141.514788][ T8626]  ? clear_bhb_loop+0x40/0x90
[  141.514801][ T8626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.514812][ T8626] RIP: 0033:0x7f838a79c819
[  141.514823][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.514833][ T8626] RSP: 002b:00007f83889f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  141.514843][ T8626] RAX: ffffffffffffffda RBX: 00007f838aa15fa0 RCX: 00007f838a79c819
[  141.514850][ T8626] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  141.514856][ T8626] RBP: 00007f83889f6090 R08: 0000200000000380 R09: 0000000000000000
[  141.514862][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.514869][ T8626] R13: 00007f838aa16038 R14: 00007f838aa15fa0 R15: 00007ffdd8ad3b18
[  141.514882][ T8626]  </TASK>
[  141.684072][ T8632] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  141.690434][ T8632] bond1 (unregistering): Released all slaves
[  141.692326][ T8640] IPVS: length: 120 != 24
[  141.701082][ T8643] 9pnet_fd: p9_fd_create_unix (8643): problem connecting socket: ./file0: -111
[  141.758278][ T8645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  141.849704][ T8652] program syz.5.702 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  141.890775][ T8662] FAULT_INJECTION: forcing a failure.
[  141.890775][ T8662] name failslab, interval 1, probability 0, space 0, times 0
[  141.895265][ T8662] CPU: 1 UID: 0 PID: 8662 Comm: syz.5.706 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  141.895282][ T8662] Tainted: [L]=SOFTLOCKUP
[  141.895286][ T8662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  141.895292][ T8662] Call Trace:
[  141.895297][ T8662]  <TASK>
[  141.895301][ T8662]  dump_stack_lvl+0x100/0x190
[  141.895325][ T8662]  should_fail_ex.cold+0x5/0xa
[  141.895340][ T8662]  ? ovl_fill_super+0x3ef/0x5dd0
[  141.895361][ T8662]  should_failslab+0xc2/0x120
[  141.895374][ T8662]  __kmalloc_noprof+0xe0/0x850
[  141.895390][ T8662]  ? ovl_fs_params_verify+0x557/0xc30
[  141.895409][ T8662]  ovl_fill_super+0x3ef/0x5dd0
[  141.895429][ T8662]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  141.895449][ T8662]  ? lockdep_init_map_type+0x5c/0x250
[  141.895462][ T8662]  ? __pfx_ovl_fill_super+0x10/0x10
[  141.895477][ T8662]  ? __init_swait_queue_head+0xca/0x150
[  141.895492][ T8662]  ? shrinker_register+0x1db/0x240
[  141.895504][ T8662]  ? sget_fc+0x801/0xc70
[  141.895520][ T8662]  ? __pfx_set_anon_super_fc+0x10/0x10
[  141.895537][ T8662]  ? __pfx_ovl_fill_super+0x10/0x10
[  141.895551][ T8662]  get_tree_nodev+0xdd/0x190
[  141.895562][ T8662]  vfs_get_tree+0x92/0x320
[  141.895578][ T8662]  path_mount+0x7d0/0x23d0
[  141.895595][ T8662]  ? __pfx_path_mount+0x10/0x10
[  141.895609][ T8662]  ? lockdep_hardirqs_on+0x78/0x100
[  141.895627][ T8662]  ? putname+0xb1/0x110
[  141.895640][ T8662]  ? kmem_cache_free+0x124/0x6a0
[  141.895659][ T8662]  ? __x64_sys_mount+0x293/0x310
[  141.895672][ T8662]  __x64_sys_mount+0x293/0x310
[  141.895687][ T8662]  ? __pfx___x64_sys_mount+0x10/0x10
[  141.895705][ T8662]  do_syscall_64+0x106/0xf80
[  141.895720][ T8662]  ? clear_bhb_loop+0x40/0x90
[  141.895734][ T8662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.895745][ T8662] RIP: 0033:0x7fd83b99c819
[  141.895755][ T8662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.895765][ T8662] RSP: 002b:00007fd83c883028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  141.895776][ T8662] RAX: ffffffffffffffda RBX: 00007fd83bc15fa0 RCX: 00007fd83b99c819
[  141.895782][ T8662] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  141.895788][ T8662] RBP: 00007fd83c883090 R08: 0000200000000380 R09: 0000000000000000
[  141.895794][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.895800][ T8662] R13: 00007fd83bc16038 R14: 00007fd83bc15fa0 R15: 00007fff86324ee8
[  141.895814][ T8662]  </TASK>
[  141.900883][ T8664] netlink: 'syz.4.707': attribute type 10 has an invalid length.
[  141.989633][ T5288] Bluetooth: hci0: command tx timeout
[  142.053597][ T8672] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  142.069751][ T5288] Bluetooth: hci2: command tx timeout
[  142.069948][   T63] Bluetooth: hci4: command tx timeout
[  142.086241][ T8674] /dev/nullb0: Can't open blockdev
[  142.131291][   T34] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  142.254108][ T8691] FAULT_INJECTION: forcing a failure.
[  142.254108][ T8691] name failslab, interval 1, probability 0, space 0, times 0
[  142.257978][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.1.716 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  142.257998][ T8691] Tainted: [L]=SOFTLOCKUP
[  142.258002][ T8691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  142.258009][ T8691] Call Trace:
[  142.258015][ T8691]  <TASK>
[  142.258020][ T8691]  dump_stack_lvl+0x100/0x190
[  142.258044][ T8691]  should_fail_ex.cold+0x5/0xa
[  142.258061][ T8691]  ? ovl_fill_super+0x36b/0x5dd0
[  142.258077][ T8691]  should_failslab+0xc2/0x120
[  142.258090][ T8691]  __kmalloc_noprof+0xe0/0x850
[  142.258107][ T8691]  ? ovl_fs_params_verify+0x557/0xc30
[  142.258127][ T8691]  ovl_fill_super+0x36b/0x5dd0
[  142.258148][ T8691]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  142.258170][ T8691]  ? lockdep_init_map_type+0x5c/0x250
[  142.258184][ T8691]  ? __pfx_ovl_fill_super+0x10/0x10
[  142.258201][ T8691]  ? __init_swait_queue_head+0xca/0x150
[  142.258218][ T8691]  ? shrinker_register+0x1db/0x240
[  142.258230][ T8691]  ? sget_fc+0x801/0xc70
[  142.258248][ T8691]  ? __pfx_set_anon_super_fc+0x10/0x10
[  142.258266][ T8691]  ? __pfx_ovl_fill_super+0x10/0x10
[  142.258281][ T8691]  get_tree_nodev+0xdd/0x190
[  142.258293][ T8691]  vfs_get_tree+0x92/0x320
[  142.258309][ T8691]  path_mount+0x7d0/0x23d0
[  142.258327][ T8691]  ? __pfx_path_mount+0x10/0x10
[  142.258341][ T8691]  ? lockdep_hardirqs_on+0x78/0x100
[  142.258363][ T8691]  ? putname+0xb1/0x110
[  142.258376][ T8691]  ? kmem_cache_free+0x124/0x6a0
[  142.258396][ T8691]  ? __x64_sys_mount+0x293/0x310
[  142.258410][ T8691]  __x64_sys_mount+0x293/0x310
[  142.258425][ T8691]  ? __pfx___x64_sys_mount+0x10/0x10
[  142.258444][ T8691]  do_syscall_64+0x106/0xf80
[  142.258461][ T8691]  ? clear_bhb_loop+0x40/0x90
[  142.258476][ T8691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.258488][ T8691] RIP: 0033:0x7f838a79c819
[  142.258498][ T8691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.258509][ T8691] RSP: 002b:00007f83889f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  142.258520][ T8691] RAX: ffffffffffffffda RBX: 00007f838aa15fa0 RCX: 00007f838a79c819
[  142.258527][ T8691] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  142.258534][ T8691] RBP: 00007f83889f6090 R08: 0000200000000380 R09: 0000000000000000
[  142.258540][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.258547][ T8691] R13: 00007f838aa16038 R14: 00007f838aa15fa0 R15: 00007ffdd8ad3b18
[  142.258561][ T8691]  </TASK>
[  142.279379][   T34] usb 5-1: Using ep0 maxpacket: 8
[  142.350561][   T34] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.354301][   T34] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.357476][   T34] usb 5-1: config 0 interface 0 has no altsetting 0
[  142.360566][   T34] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  142.364024][   T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.372320][   T34] usb 5-1: config 0 descriptor??
[  142.417754][ T8698] openvswitch: netlink: Missing valid actions attribute.
[  142.425769][ T8698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.433115][ T8698] ip6gretap1: entered promiscuous mode
[  142.477753][ T6969] hid (null): global environment stack underflow
[  142.494498][ T8700] tun0: tun_chr_ioctl cmd 1074025672
[  142.496665][ T8700] tun0: ignored: set checksum enabled
[  142.497377][ T6969] hid-generic 00A0:0006:0003.0003: global environment stack underflow
[  142.505567][ T6969] hid-generic 00A0:0006:0003.0003: item 0 2 1 11 parsing failed
[  142.510552][ T6969] hid-generic 00A0:0006:0003.0003: probe with driver hid-generic failed with error -22
[  142.592026][   T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  142.594897][   T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  142.598278][   T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  142.602644][   T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  142.605624][   T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  142.609275][   T34] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  142.917922][   T29] IPVS: starting estimator thread 0...
[  142.979781][   T40] kauditd_printk_skb: 38 callbacks suppressed
[  142.979798][   T40] audit: type=1400 audit(1775066962.931:4329): avc:  denied  { getopt } for  pid=8720 comm="syz.5.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  143.019495][ T8724] IPVS: using max 44 ests per chain, 105600 per kthread
[  143.091321][   T40] audit: type=1400 audit(1775066963.041:4330): avc:  denied  { bind } for  pid=8726 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  143.157185][ T8730] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000
[  143.235938][   T40] audit: type=1400 audit(1775066963.181:4331): avc:  denied  { getopt } for  pid=8731 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  143.525762][ T8752] hub 8-0:1.0: USB hub found
[  143.529589][ T8752] hub 8-0:1.0: 1 port detected
[  143.543182][ T8753] hub 8-0:1.0: USB hub found
[  143.545365][ T8753] hub 8-0:1.0: 1 port detected
[  143.579286][   T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  143.644060][   T40] audit: type=1400 audit(1775066963.591:4332): avc:  denied  { getopt } for  pid=8759 comm="syz.5.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  143.650435][   T40] audit: type=1400 audit(1775066963.601:4333): avc:  denied  { ioctl } for  pid=8759 comm="syz.5.738" path="socket:[29330]" dev="sockfs" ino=29330 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  143.685965][ T8762] syz.5.739: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  143.692756][ T8762] CPU: 3 UID: 0 PID: 8762 Comm: syz.5.739 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  143.692775][ T8762] Tainted: [L]=SOFTLOCKUP
[  143.692779][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.692786][ T8762] Call Trace:
[  143.692792][ T8762]  <TASK>
[  143.692797][ T8762]  dump_stack_lvl+0x100/0x190
[  143.692822][ T8762]  warn_alloc.cold+0x95/0x1c1
[  143.692843][ T8762]  ? __pfx_warn_alloc+0x10/0x10
[  143.692866][ T8762]  ? kasan_save_stack+0x3f/0x50
[  143.692883][ T8762]  ? kasan_save_stack+0x30/0x50
[  143.692899][ T8762]  ? kasan_save_track+0x14/0x30
[  143.692918][ T8762]  ? xskq_create+0xfb/0x1d0
[  143.692932][ T8762]  __vmalloc_node_range_noprof+0x1252/0x1530
[  143.692952][ T8762]  ? xskq_create+0xfb/0x1d0
[  143.692970][ T8762]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  143.692990][ T8762]  ? xskq_create+0xfb/0x1d0
[  143.693004][ T8762]  vmalloc_user_noprof+0x9e/0xe0
[  143.693017][ T8762]  ? xskq_create+0xfb/0x1d0
[  143.693032][ T8762]  xskq_create+0xfb/0x1d0
[  143.693047][ T8762]  xsk_setsockopt+0x743/0xab0
[  143.693061][ T8762]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.693075][ T8762]  ? find_held_lock+0x2b/0x80
[  143.693090][ T8762]  ? __fget_files+0x215/0x3d0
[  143.693105][ T8762]  ? selinux_socket_setsockopt+0x6a/0x80
[  143.693122][ T8762]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.693136][ T8762]  do_sock_setsockopt+0xf3/0x1d0
[  143.693156][ T8762]  __sys_setsockopt+0x195/0x220
[  143.693175][ T8762]  __x64_sys_setsockopt+0xbd/0x160
[  143.693189][ T8762]  ? do_syscall_64+0x95/0xf80
[  143.693205][ T8762]  ? lockdep_hardirqs_on+0x78/0x100
[  143.693221][ T8762]  do_syscall_64+0x106/0xf80
[  143.693236][ T8762]  ? clear_bhb_loop+0x40/0x90
[  143.693250][ T8762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.693261][ T8762] RIP: 0033:0x7fd83b99c819
[  143.693270][ T8762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.693280][ T8762] RSP: 002b:00007fd83c883028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.693290][ T8762] RAX: ffffffffffffffda RBX: 00007fd83bc15fa0 RCX: 00007fd83b99c819
[  143.693297][ T8762] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  143.693303][ T8762] RBP: 00007fd83ba32c91 R08: 0000000000000004 R09: 0000000000000000
[  143.693309][ T8762] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.693314][ T8762] R13: 00007fd83bc16038 R14: 00007fd83bc15fa0 R15: 00007fff86324ee8
[  143.693328][ T8762]  </TASK>
[  143.693332][ T8762] Mem-Info:
[  143.778497][ T8762] active_anon:10971 inactive_anon:67 isolated_anon:0
[  143.778497][ T8762]  active_file:7876 inactive_file:30017 isolated_file:0
[  143.778497][ T8762]  unevictable:1768 dirty:99 writeback:0
[  143.778497][ T8762]  slab_reclaimable:7972 slab_unreclaimable:74200
[  143.778497][ T8762]  mapped:25159 shmem:2396 pagetables:3509
[  143.778497][ T8762]  sec_pagetables:296 bounce:0
[  143.778497][ T8762]  kernel_misc_reclaimable:0
[  143.778497][ T8762]  free:467777 free_pcp:15474 free_cma:0
[  143.799990][   T34] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  143.802112][ T8762] Node 0 active_anon:43884kB inactive_anon:268kB active_file:31504kB inactive_file:119868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:76060kB dirty:384kB writeback:0kB shmem:6048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13920kB pagetables:13196kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB
[  143.805531][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.814153][ T8762] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24576kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  143.817780][   T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  143.827693][ T8762] Node 0 DMA free:15132kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:104kB free_cma:0kB
[  143.827729][ T8762] lowmem_reserve[]:
[  143.832346][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.840847][ T8762]  0 1231 1231 1231 1231
[  143.840875][ T8762] Node 0 DMA32 free:294308kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43884kB inactive_anon:268kB active_file:31504kB inactive_file:119868kB unevictable:3536kB writepending:384kB zspages:0kB present:2080628kB managed:1260812kB mlocked:0kB bounce:0kB free_pcp:38876kB local_pcp:9456kB free_cma:0kB
[  143.840910][ T8762] lowmem_reserve[]: 0 0 0 0 0
[  143.840934][ T8762] Node 1 Normal free:1561668kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:22364kB local_pcp:10000kB free_cma:0kB
[  143.840967][ T8762] lowmem_reserve[]: 0 0 0 0 0
[  143.842747][   T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  143.846008][ T8762] Node 0 DMA: 7*4kB 
[  143.859009][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.860358][ T8762] (U) 
[  143.873410][   T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  143.874478][ T8762] 8*8kB (U) 
[  143.879523][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.882671][ T8762] 8*16kB 
[  143.883872][   T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  143.886559][ T8762] (U) 6*32kB 
[  143.888905][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.891065][ T8762] (U) 6*64kB (U) 8*128kB (U) 6*256kB (U) 7*512kB (U) 4*1024kB (U) 2*2048kB 
[  143.892308][   T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  143.895071][ T8762] (UM) 0*4096kB = 15132kB
[  143.895087][ T8762] Node 0 DMA32: 1563*4kB (UME) 863*8kB (UE) 825*16kB (UME) 111*32kB (UE) 
[  143.897521][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.899560][ T8762] 331*64kB (UME) 215*128kB (UME) 139*256kB (UME) 108*512kB (UME) 72*1024kB (UME) 17*2048kB (UM) 4*4096kB (U) = 294420kB
[  143.899626][ T8762] Node 1 Normal: 138*4kB (UM) 180*8kB (U) 188*16kB 
[  143.902684][   T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  143.905807][ T8762] (UM) 
[  143.907710][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.910037][ T8762] 208*32kB 
[  143.913061][   T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  143.916757][ T8762] (UM) 187*64kB (UM) 176*128kB 
[  143.920570][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.921540][ T8762] (UM) 
[  143.922294][   T34] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  143.925203][ T8762] 174*256kB 
[  143.928055][   T34] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  143.929215][ T8762] (U) 
[  143.930762][   T34] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  143.933754][ T8762] 167*512kB 
[  143.934684][   T34] usb 6-1: Product: syz
[  143.937419][ T8762] (UM) 141*1024kB 
[  143.938468][   T34] usb 6-1: Manufacturer: syz
[  143.941295][ T8762] (U) 4*2048kB 
[  143.942137][   T34] usb 6-1: SerialNumber: syz
[  143.944599][ T8762] (UM) 
[  143.947324][   T34] usb 6-1: config 0 descriptor??
[  143.948153][ T8762] 301*4096kB (M) = 1561672kB
[  143.956314][ T8762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  143.959216][ T8762] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.962088][ T8762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  143.964920][ T8762] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.967802][ T8762] 40595 total pagecache pages
[  143.970029][ T8762] 0 pages in swap cache
[  143.971391][ T8762] Free swap  = 124996kB
[  143.972800][ T8762] Total swap = 124996kB
[  143.974382][ T8762] 1048443 pages RAM
[  143.975698][ T8762] 0 pages HighMem/MovableOnly
[  143.977223][ T8762] 283929 pages reserved
[  143.978609][ T8762] 0 pages cma reserved
[  144.069438][   T63] Bluetooth: hci0: command tx timeout
[  144.149421][   T63] Bluetooth: hci2: command tx timeout
[  144.149446][ T5288] Bluetooth: hci4: command tx timeout
[  144.158018][  T841] usb 6-1: USB disconnect, device number 8
[  144.199342][   T40] audit: type=1400 audit(1775066964.141:4334): avc:  denied  { connect } for  pid=8777 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  144.262008][ T8780] netlink: 52 bytes leftover after parsing attributes in process `syz.5.744'.
[  144.270087][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.274507][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.280601][ T8779] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  144.302721][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.5.744'.
[  144.483960][   T40] audit: type=1400 audit(1775066964.431:4335): avc:  denied  { ioctl } for  pid=8790 comm="syz.5.748" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  144.514058][ T8795] netlink: 'syz.0.746': attribute type 1 has an invalid length.
[  144.517357][ T8795] netlink: 96 bytes leftover after parsing attributes in process `syz.0.746'.
[  144.522052][ T8795] netlink: 658 bytes leftover after parsing attributes in process `syz.0.746'.
[  144.525861][ T8795] netlink: 1 bytes leftover after parsing attributes in process `syz.0.746'.
[  144.564680][   T29] usb 5-1: USB disconnect, device number 8
[  144.778353][   T40] audit: type=1400 audit(1775066964.721:4336): avc:  denied  { ioctl } for  pid=8801 comm="syz.1.751" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  144.901861][ T8811] FAULT_INJECTION: forcing a failure.
[  144.901861][ T8811] name failslab, interval 1, probability 0, space 0, times 0
[  144.907151][ T8811] CPU: 2 UID: 0 PID: 8811 Comm: syz.1.753 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.907169][ T8811] Tainted: [L]=SOFTLOCKUP
[  144.907173][ T8811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  144.907180][ T8811] Call Trace:
[  144.907185][ T8811]  <TASK>
[  144.907189][ T8811]  dump_stack_lvl+0x100/0x190
[  144.907212][ T8811]  should_fail_ex.cold+0x5/0xa
[  144.907241][ T8811]  should_failslab+0xc2/0x120
[  144.907257][ T8811]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  144.907276][ T8811]  ? kstrdup_const+0x63/0x80
[  144.907289][ T8811]  kstrdup+0x51/0xe0
[  144.907308][ T8811]  kstrdup_const+0x63/0x80
[  144.907318][ T8811]  alloc_vfsmnt+0xe5/0x6a0
[  144.907336][ T8811]  clone_mnt+0x4b/0x930
[  144.907346][ T8811]  ? is_subdir+0x1a8/0x3e0
[  144.907364][ T8811]  clone_private_mount+0x3aa/0x4f0
[  144.907378][ T8811]  ovl_fill_super+0x92f/0x5dd0
[  144.907407][ T8811]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  144.907428][ T8811]  ? lockdep_init_map_type+0x5c/0x250
[  144.907442][ T8811]  ? __pfx_ovl_fill_super+0x10/0x10
[  144.907458][ T8811]  ? __init_swait_queue_head+0xca/0x150
[  144.907474][ T8811]  ? shrinker_register+0x1db/0x240
[  144.907486][ T8811]  ? sget_fc+0x801/0xc70
[  144.907504][ T8811]  ? __pfx_set_anon_super_fc+0x10/0x10
[  144.907522][ T8811]  ? __pfx_ovl_fill_super+0x10/0x10
[  144.907537][ T8811]  get_tree_nodev+0xdd/0x190
[  144.907549][ T8811]  vfs_get_tree+0x92/0x320
[  144.907566][ T8811]  path_mount+0x7d0/0x23d0
[  144.907583][ T8811]  ? __pfx_path_mount+0x10/0x10
[  144.907597][ T8811]  ? lockdep_hardirqs_on+0x78/0x100
[  144.907616][ T8811]  ? putname+0xb1/0x110
[  144.907628][ T8811]  ? kmem_cache_free+0x124/0x6a0
[  144.907649][ T8811]  ? __x64_sys_mount+0x293/0x310
[  144.907663][ T8811]  __x64_sys_mount+0x293/0x310
[  144.907678][ T8811]  ? __pfx___x64_sys_mount+0x10/0x10
[  144.907698][ T8811]  do_syscall_64+0x106/0xf80
[  144.907715][ T8811]  ? clear_bhb_loop+0x40/0x90
[  144.907729][ T8811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.907741][ T8811] RIP: 0033:0x7f838a79c819
[  144.907752][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.907762][ T8811] RSP: 002b:00007f83889f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  144.907774][ T8811] RAX: ffffffffffffffda RBX: 00007f838aa15fa0 RCX: 00007f838a79c819
[  144.907781][ T8811] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  144.907788][ T8811] RBP: 00007f83889f6090 R08: 0000200000000380 R09: 0000000000000000
[  144.907794][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.907800][ T8811] R13: 00007f838aa16038 R14: 00007f838aa15fa0 R15: 00007ffdd8ad3b18
[  144.907816][ T8811]  </TASK>
[  144.907884][ T8811] overlayfs: failed to clone upperpath
[  145.109518][    C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  145.152449][   T40] audit: type=1400 audit(1775066965.101:4337): avc:  denied  { ioctl } for  pid=8817 comm="syz.0.756" path="socket:[27429]" dev="sockfs" ino=27429 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  145.370773][   T40] audit: type=1400 audit(1775066965.321:4338): avc:  denied  { read } for  pid=8829 comm="syz.5.758" path="socket:[27501]" dev="sockfs" ino=27501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  145.423655][ T5288] Bluetooth: hci2: ACL packet for unknown connection handle 3842
[  145.955849][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'.
[  145.959082][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'.
[  145.967203][ T8834] geneve2: entered promiscuous mode
[  145.969407][ T8834] geneve2: entered allmulticast mode
[  146.160805][ T5288] Bluetooth: hci0: command tx timeout
[  146.211884][ T8846] netlink: 'syz.0.763': attribute type 64 has an invalid length.
[  146.212205][ T8847] netlink: 'syz.0.763': attribute type 64 has an invalid length.
[  146.214960][ T8846] netlink: 'syz.0.763': attribute type 4 has an invalid length.
[  146.217188][ T8847] netlink: 'syz.0.763': attribute type 4 has an invalid length.
[  146.220517][ T8846] netlink: 152 bytes leftover after parsing attributes in process `syz.0.763'.
[  146.228258][ T8847] netlink: 152 bytes leftover after parsing attributes in process `syz.0.763'.
[  146.229387][ T5288] Bluetooth: hci4: command tx timeout
[  146.232883][ T5288] Bluetooth: hci2: command tx timeout
[  146.298862][ T8854] netlink: 'syz.0.765': attribute type 10 has an invalid length.
[  146.302246][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  146.419399][  T841] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  146.571096][  T841] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  146.574187][  T841] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  146.578199][  T841] usb 6-1: config 0 interface 0 has no altsetting 0
[  146.582212][  T841] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  146.585441][  T841] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  146.588663][  T841] usb 6-1: Product: syz
[  146.590463][  T841] usb 6-1: Manufacturer: syz
[  146.592002][  T841] usb 6-1: SerialNumber: syz
[  146.597452][  T841] usb 6-1: config 0 descriptor??
[  146.602032][  T841] hub 6-1:0.0: bad descriptor, ignoring hub
[  146.604663][  T841] hub 6-1:0.0: probe with driver hub failed with error -5
[  146.610538][  T841] usb 6-1: selecting invalid altsetting 0
[  146.807147][ T8875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=8875 comm=syz.5.771
[  147.005835][ T8894] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd d000943d, magic 94 != 6b]
[  147.048117][ T8902] /dev/nullb0: Can't open blockdev
[  147.202012][ T8843] usb 6-1: reset high-speed USB device number 9 using dummy_hcd
[  147.246021][ T8914] openvswitch: netlink: Tunnel attr 140 out of range max 16
[  147.288885][ T8918] random: crng reseeded on system resumption
[  147.351760][ T8843] usb 6-1: device firmware changed
[  147.354844][ T6012] usb 6-1: USB disconnect, device number 9
[  147.411661][ T8927] fuse: Bad value for 'group_id'
[  147.413962][ T8927] fuse: Bad value for 'group_id'
[  147.530266][ T6012] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  147.569453][   T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  147.585336][ T8932] option changes via remount are deprecated (pid=8931 comm=syz.0.788)
[  147.589872][ T8932] cgroup: option or name mismatch, new: 0x0 "syzkaller0", old: 0x0 ""
[  147.691064][ T6012] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  147.695156][ T6012] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  147.699331][ T6012] usb 6-1: config 0 interface 0 has no altsetting 0
[  147.704684][ T6012] usb 6-1: string descriptor 0 read error: -22
[  147.707373][ T6012] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  147.711597][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  147.718403][ T6012] usb 6-1: config 0 descriptor??
[  147.723185][ T6012] hub 6-1:0.0: bad descriptor, ignoring hub
[  147.725123][ T6012] hub 6-1:0.0: probe with driver hub failed with error -5
[  147.729032][ T6012] usb 6-1: selecting invalid altsetting 0
[  147.754787][   T29] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[  147.757828][   T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.761429][   T29] usb 10-1: Product: 芏√锊帗Ꙧ선ꪷϖ㓙睗
[  147.764480][   T29] usb 10-1: Manufacturer: 쨴꘡躨蹇驙☦ﰠⴋ椹⓺Ḁ쵮渨곊뙋俽㈾ꋿ튽ﲲ艃ౖ꧟텖礯ヿ㺛鲐㬟ᅦ䃢磪憅짢톾귲虏밄們吊줨庿逛㐓ﳞ섲幘濎⽺ﰖ䳮驊웳ᙃ븊퍖槈앭坂ഌ䍎뭂ϑၯ깕霯
[  147.775750][   T29] usb 10-1: SerialNumber: 鞕柫譫ኁ︢촕奩⛚腺嚦ꔈ觢消ẃជㄢ酅ﭡ靔弸࣊뽼潮⽱ｧ㧖럇䄁ㄽ玙蹙詁㺰쟉ﶚ㲑⏋假옜꤁嘴囊䒸檀Ȩъ퟿崙Ņ軡⍞砫⪖㋰ⷶꬻ줭㏃ᒯ薋깰⏋铓㷲맰討憣닝ᵢ맼蒔筼瀠썞࿹
[  147.927481][ T8843] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=8843 comm=syz.1.760
[  148.023708][ T8938] 9p: Bad value for 'wfdno'
[  148.210781][ T8950] pim6reg: entered allmulticast mode
[  148.335504][   T29] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  148.360825][   T29] usb 10-1: USB disconnect, device number 2
[  148.377543][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  148.499222][ T6012] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  148.649371][ T6012] usb 5-1: Using ep0 maxpacket: 16
[  148.654285][ T6012] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  148.657438][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  148.660539][ T6012] usb 5-1: Product: syz
[  148.661936][ T6012] usb 5-1: Manufacturer: syz
[  148.663464][ T6012] usb 5-1: SerialNumber: syz
[  148.667789][ T6012] usb 5-1: config 0 descriptor??
[  148.922881][ T8955] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  149.001294][ T6012] usb 5-1: USB disconnect, device number 9
[  149.250566][ T6012] usb 6-1: USB disconnect, device number 10
[  149.571214][ T8991] FAULT_INJECTION: forcing a failure.
[  149.571214][ T8991] name failslab, interval 1, probability 0, space 0, times 0
[  149.576393][ T8991] CPU: 1 UID: 0 PID: 8991 Comm: syz.5.807 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  149.576412][ T8991] Tainted: [L]=SOFTLOCKUP
[  149.576416][ T8991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  149.576423][ T8991] Call Trace:
[  149.576427][ T8991]  <TASK>
[  149.576431][ T8991]  dump_stack_lvl+0x100/0x190
[  149.576455][ T8991]  should_fail_ex.cold+0x5/0xa
[  149.576470][ T8991]  ? security_inode_init_security+0x113/0x370
[  149.576483][ T8991]  should_failslab+0xc2/0x120
[  149.576496][ T8991]  __kmalloc_noprof+0xe0/0x850
[  149.576515][ T8991]  security_inode_init_security+0x113/0x370
[  149.576528][ T8991]  ? __pfx_shmem_initxattrs+0x10/0x10
[  149.576542][ T8991]  ? __pfx_security_inode_init_security+0x10/0x10
[  149.576554][ T8991]  ? selinux_determine_inode_label+0x1ab/0x400
[  149.576577][ T8991]  shmem_mknod+0x2bf/0x470
[  149.576592][ T8991]  ? __pfx_shmem_mknod+0x10/0x10
[  149.576606][ T8991]  ? inode_permission+0x374/0x620
[  149.576625][ T8991]  shmem_mkdir+0x31/0x80
[  149.576638][ T8991]  vfs_mkdir+0x361/0x850
[  149.576656][ T8991]  ovl_workdir_create+0x435/0xa50
[  149.576677][ T8991]  ? __pfx_ovl_workdir_create+0x10/0x10
[  149.576692][ T8991]  ? mnt_get_write_access+0x52/0x2f0
[  149.576720][ T8991]  ? mnt_get_write_access+0x1e9/0x2f0
[  149.576747][ T8991]  ovl_fill_super+0xf0f/0x5dd0
[  149.576780][ T8991]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  149.576813][ T8991]  ? lockdep_init_map_type+0x5c/0x250
[  149.576835][ T8991]  ? __pfx_ovl_fill_super+0x10/0x10
[  149.576852][ T8991]  ? __init_swait_queue_head+0xca/0x150
[  149.576868][ T8991]  ? shrinker_register+0x1db/0x240
[  149.576879][ T8991]  ? sget_fc+0x801/0xc70
[  149.576896][ T8991]  ? __pfx_set_anon_super_fc+0x10/0x10
[  149.576912][ T8991]  ? __pfx_ovl_fill_super+0x10/0x10
[  149.576927][ T8991]  get_tree_nodev+0xdd/0x190
[  149.576938][ T8991]  vfs_get_tree+0x92/0x320
[  149.576954][ T8991]  path_mount+0x7d0/0x23d0
[  149.576970][ T8991]  ? __pfx_path_mount+0x10/0x10
[  149.576983][ T8991]  ? lockdep_hardirqs_on+0x78/0x100
[  149.577001][ T8991]  ? putname+0xb1/0x110
[  149.577013][ T8991]  ? kmem_cache_free+0x124/0x6a0
[  149.577032][ T8991]  ? __x64_sys_mount+0x293/0x310
[  149.577045][ T8991]  __x64_sys_mount+0x293/0x310
[  149.577060][ T8991]  ? __pfx___x64_sys_mount+0x10/0x10
[  149.577078][ T8991]  do_syscall_64+0x106/0xf80
[  149.577093][ T8991]  ? clear_bhb_loop+0x40/0x90
[  149.577107][ T8991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.577118][ T8991] RIP: 0033:0x7fd83b99c819
[  149.577128][ T8991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.577138][ T8991] RSP: 002b:00007fd83c883028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  149.577149][ T8991] RAX: ffffffffffffffda RBX: 00007fd83bc15fa0 RCX: 00007fd83b99c819
[  149.577155][ T8991] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  149.577161][ T8991] RBP: 00007fd83c883090 R08: 0000200000000380 R09: 0000000000000000
[  149.577167][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  149.577173][ T8991] R13: 00007fd83bc16038 R14: 00007fd83bc15fa0 R15: 00007fff86324ee8
[  149.577187][ T8991]  </TASK>
[  149.577620][ T8991] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only
[  149.686404][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  149.686418][   T40] audit: type=1400 audit(1775066969.631:4350): avc:  denied  { bind } for  pid=8988 comm="syz.0.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  149.686794][ T8993] netlink: 'syz.0.808': attribute type 1 has an invalid length.
[  149.686807][ T8993] __nla_validate_parse: 5 callbacks suppressed
[  149.686812][ T8993] netlink: 192 bytes leftover after parsing attributes in process `syz.0.808'.
[  149.690081][ T8991] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  149.752429][ T8996] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  149.956424][   T40] audit: type=1400 audit(1775066969.901:4351): avc:  denied  { read write } for  pid=8998 comm="syz.5.810" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  149.964495][   T40] audit: type=1400 audit(1775066969.901:4352): avc:  denied  { open } for  pid=8998 comm="syz.5.810" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  150.018519][   T40] audit: type=1400 audit(1775066969.961:4353): avc:  denied  { ioctl } for  pid=8998 comm="syz.5.810" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  150.057217][ T9002] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  150.059687][ T9002] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  150.063357][ T9002] vhci_hcd vhci_hcd.0: Device attached
[  150.065501][ T9003] vhci_hcd: connection closed
[  150.065687][ T1156] vhci_hcd vhci_hcd.5: stop threads
[  150.069067][ T1156] vhci_hcd vhci_hcd.5: release socket
[  150.071494][ T1156] vhci_hcd vhci_hcd.5: disconnect device
[  150.649980][   T40] audit: type=1400 audit(1775066970.601:4354): avc:  denied  { write } for  pid=9010 comm="syz.5.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  150.690290][   T40] audit: type=1401 audit(1775066970.641:4355): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0"
[  150.712785][ T9018] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  150.716754][ T9019] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  150.745341][   T40] audit: type=1400 audit(1775066970.691:4356): avc:  denied  { write } for  pid=9020 comm="syz.5.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  150.858775][   T40] audit: type=1400 audit(1775066970.801:4357): avc:  denied  { getopt } for  pid=9025 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  150.903152][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.819'.
[  150.983079][ T9032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.821'.
[  150.988643][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.821'.
[  150.992720][ T9032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.821'.
[  150.996825][ T9032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.821'.
[  151.002660][   T40] audit: type=1400 audit(1775066970.951:4358): avc:  denied  { bind } for  pid=9031 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  151.049344][ T9034] netlink: 'syz.5.822': attribute type 10 has an invalid length.
[  151.056267][ T9034] team0: Cannot enslave team device to itself
[  151.189395][ T5938] Bluetooth: hci3: command 0x1003 tx timeout
[  151.189599][   T63] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  151.265283][ T9035] netlink: 20 bytes leftover after parsing attributes in process `syz.5.822'.
[  151.589405][   T63] Bluetooth: hci5: command 0x1003 tx timeout
[  151.589439][ T5288] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  151.768346][   T40] audit: type=1400 audit(1775066971.711:4359): avc:  denied  { mount } for  pid=9037 comm="syz.1.823" name="/" dev="hugetlbfs" ino=30126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  151.782717][ T9038] sg_write: data in/out 489/8 bytes for SCSI command 0xa1-- guessing data in;
[  151.782717][ T9038]    program syz.1.823 not setting count and/or reply_len properly
[  151.853808][ T9044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.856808][ T9044] IPv6: NLM_F_CREATE should be set when creating new route
[  151.859675][ T9044] IPv6: NLM_F_CREATE should be set when creating new route
[  151.893377][ T9044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  151.897036][ T9044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.031951][ T9058] sctp: [Deprecated]: syz.1.829 (pid 9058) Use of int in maxseg socket option.
[  152.031951][ T9058] Use struct sctp_assoc_value instead
[  152.070641][ T9060] ieee802154 phy1 wpan1: encryption failed: -22
[  152.075110][ T9060] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.831'.
[  152.313747][ T9068] fuse: Unknown parameter 'ff'
[  152.659567][ T9072] overlayfs: upper fs does not support file handles, falling back to index=off.
[  152.708987][ T9074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.835'.
[  152.869735][ T9081] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  153.511788][ T9103] FAULT_INJECTION: forcing a failure.
[  153.511788][ T9103] name failslab, interval 1, probability 0, space 0, times 0
[  153.516818][ T9103] CPU: 0 UID: 0 PID: 9103 Comm: syz.0.843 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  153.516844][ T9103] Tainted: [L]=SOFTLOCKUP
[  153.516848][ T9103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  153.516857][ T9103] Call Trace:
[  153.516864][ T9103]  <TASK>
[  153.516871][ T9103]  dump_stack_lvl+0x100/0x190
[  153.516903][ T9103]  should_fail_ex.cold+0x5/0xa
[  153.516924][ T9103]  ? __pfx_ovl_inode_test+0x10/0x10
[  153.516943][ T9103]  should_failslab+0xc2/0x120
[  153.516961][ T9103]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  153.516986][ T9103]  ? ovl_alloc_inode+0x25/0x190
[  153.517007][ T9103]  ? __pfx_ilookup5+0x10/0x10
[  153.517027][ T9103]  ? __pfx_ovl_alloc_inode+0x10/0x10
[  153.517048][ T9103]  ? __pfx_ovl_inode_test+0x10/0x10
[  153.517068][ T9103]  ? __pfx_ovl_inode_set+0x10/0x10
[  153.517088][ T9103]  ovl_alloc_inode+0x25/0x190
[  153.517103][ T9103]  alloc_inode+0x68/0x250
[  153.517126][ T9103]  iget5_locked+0x5f/0xa0
[  153.517152][ T9103]  ovl_get_trap_inode+0xb2/0x210
[  153.517177][ T9103]  ovl_fill_super+0xf75/0x5dd0
[  153.517205][ T9103]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  153.517234][ T9103]  ? lockdep_init_map_type+0x5c/0x250
[  153.517253][ T9103]  ? __pfx_ovl_fill_super+0x10/0x10
[  153.517274][ T9103]  ? __init_swait_queue_head+0xca/0x150
[  153.517295][ T9103]  ? shrinker_register+0x1db/0x240
[  153.517311][ T9103]  ? sget_fc+0x801/0xc70
[  153.517335][ T9103]  ? __pfx_set_anon_super_fc+0x10/0x10
[  153.517364][ T9103]  ? __pfx_ovl_fill_super+0x10/0x10
[  153.517382][ T9103]  get_tree_nodev+0xdd/0x190
[  153.517397][ T9103]  vfs_get_tree+0x92/0x320
[  153.517420][ T9103]  path_mount+0x7d0/0x23d0
[  153.517446][ T9103]  ? __pfx_path_mount+0x10/0x10
[  153.517464][ T9103]  ? lockdep_hardirqs_on+0x78/0x100
[  153.517487][ T9103]  ? putname+0xb1/0x110
[  153.517504][ T9103]  ? kmem_cache_free+0x124/0x6a0
[  153.517533][ T9103]  ? __x64_sys_mount+0x293/0x310
[  153.517553][ T9103]  __x64_sys_mount+0x293/0x310
[  153.517574][ T9103]  ? __pfx___x64_sys_mount+0x10/0x10
[  153.517596][ T9103]  do_syscall_64+0x106/0xf80
[  153.517652][ T9103]  ? clear_bhb_loop+0x40/0x90
[  153.517672][ T9103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.517689][ T9103] RIP: 0033:0x7f20f119c819
[  153.517702][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.517717][ T9103] RSP: 002b:00007f20f210f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  153.517733][ T9103] RAX: ffffffffffffffda RBX: 00007f20f1415fa0 RCX: 00007f20f119c819
[  153.517744][ T9103] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  153.517754][ T9103] RBP: 00007f20f210f090 R08: 0000200000000380 R09: 0000000000000000
[  153.517764][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  153.517773][ T9103] R13: 00007f20f1416038 R14: 00007f20f1415fa0 R15: 00007ffee7e37a38
[  153.517797][ T9103]  </TASK>
[  153.723641][ T9109] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  153.786343][ T9112] netlink: 'syz.0.846': attribute type 13 has an invalid length.
[  153.830791][    C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  153.953026][ T9129] netlink: 'syz.5.850': attribute type 23 has an invalid length.
[  154.031924][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'.
[  154.069082][ T9136] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  154.218589][ T9143] fuse: Bad value for 'group_id'
[  154.252105][ T9143] fuse: Bad value for 'group_id'
[  154.454222][ T9151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=9151 comm=syz.5.857
[  154.642607][ T9162] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  154.644786][ T9162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  154.651615][ T9162] vhci_hcd vhci_hcd.0: Device attached
[  154.654481][ T9164] vhci_hcd: cannot find the pending unlink 4
[  154.673635][ T9162] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  154.687098][ T9164] vhci_hcd: connection closed
[  154.687411][   T13] vhci_hcd vhci_hcd.1: stop threads
[  154.690774][   T13] vhci_hcd vhci_hcd.1: release socket
[  154.692702][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  155.179395][   T40] kauditd_printk_skb: 15 callbacks suppressed
[  155.179407][   T40] audit: type=1400 audit(1775066975.131:4375): avc:  denied  { mounton } for  pid=9180 comm="syz.0.867" path="/373/file0" dev="gadgetfs" ino=9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  155.198376][   T40] audit: type=1400 audit(1775066975.141:4376): avc:  denied  { unmount } for  pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  155.214483][ T9183] FAULT_INJECTION: forcing a failure.
[  155.214483][ T9183] name failslab, interval 1, probability 0, space 0, times 0
[  155.218803][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.0.869 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.218823][ T9183] Tainted: [L]=SOFTLOCKUP
[  155.218826][ T9183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  155.218833][ T9183] Call Trace:
[  155.218838][ T9183]  <TASK>
[  155.218843][ T9183]  dump_stack_lvl+0x100/0x190
[  155.218867][ T9183]  should_fail_ex.cold+0x5/0xa
[  155.218884][ T9183]  should_failslab+0xc2/0x120
[  155.218897][ T9183]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  155.218914][ T9183]  ? security_file_alloc+0x34/0x2c0
[  155.218932][ T9183]  ? trace_kmem_cache_alloc+0xf3/0x120
[  155.218980][ T9183]  security_file_alloc+0x34/0x2c0
[  155.219002][ T9183]  init_file+0x95/0x480
[  155.219017][ T9183]  alloc_empty_file+0x73/0x1c0
[  155.219033][ T9183]  dentry_open+0x46/0xd0
[  155.219047][ T9183]  ovl_path_open+0x182/0x1d0
[  155.219062][ T9183]  ovl_check_d_type_supported+0xa4/0x240
[  155.219078][ T9183]  ? __pfx_ovl_check_d_type_supported+0x10/0x10
[  155.219093][ T9183]  ? __pfx_wake_up_var+0x10/0x10
[  155.219142][ T9183]  ? __pfx_ovl_check_d_type+0x10/0x10
[  155.219162][ T9183]  ? do_raw_spin_unlock+0x145/0x1e0
[  155.219176][ T9183]  ? _raw_spin_unlock+0x28/0x50
[  155.219193][ T9183]  ovl_fill_super+0xfcc/0x5dd0
[  155.219215][ T9183]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  155.219236][ T9183]  ? lockdep_init_map_type+0x5c/0x250
[  155.219249][ T9183]  ? __pfx_ovl_fill_super+0x10/0x10
[  155.219265][ T9183]  ? __init_swait_queue_head+0xca/0x150
[  155.219280][ T9183]  ? shrinker_register+0x1db/0x240
[  155.219292][ T9183]  ? sget_fc+0x801/0xc70
[  155.219310][ T9183]  ? __pfx_set_anon_super_fc+0x10/0x10
[  155.219341][ T9183]  ? __pfx_ovl_fill_super+0x10/0x10
[  155.219358][ T9183]  get_tree_nodev+0xdd/0x190
[  155.219383][ T9183]  vfs_get_tree+0x92/0x320
[  155.219400][ T9183]  path_mount+0x7d0/0x23d0
[  155.219424][ T9183]  ? __pfx_path_mount+0x10/0x10
[  155.219438][ T9183]  ? lockdep_hardirqs_on+0x78/0x100
[  155.219460][ T9183]  ? putname+0xb1/0x110
[  155.219476][ T9183]  ? kmem_cache_free+0x124/0x6a0
[  155.219499][ T9183]  ? __x64_sys_mount+0x293/0x310
[  155.219514][ T9183]  __x64_sys_mount+0x293/0x310
[  155.219529][ T9183]  ? __pfx___x64_sys_mount+0x10/0x10
[  155.219548][ T9183]  do_syscall_64+0x106/0xf80
[  155.219566][ T9183]  ? clear_bhb_loop+0x40/0x90
[  155.219580][ T9183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.219592][ T9183] RIP: 0033:0x7f20f119c819
[  155.219607][ T9183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.219618][ T9183] RSP: 002b:00007f20f210f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  155.219629][ T9183] RAX: ffffffffffffffda RBX: 00007f20f1415fa0 RCX: 00007f20f119c819
[  155.219635][ T9183] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  155.219642][ T9183] RBP: 00007f20f210f090 R08: 0000200000000380 R09: 0000000000000000
[  155.219648][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  155.219655][ T9183] R13: 00007f20f1416038 R14: 00007f20f1415fa0 R15: 00007ffee7e37a38
[  155.219670][ T9183]  </TASK>
[  155.649916][ T9210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=9210 comm=syz.1.879
[  155.801393][ T9217] openvswitch: netlink: Flow key attr not present in new flow.
[  155.879359][  T841] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  155.881937][ T9220] FAULT_INJECTION: forcing a failure.
[  155.881937][ T9220] name failslab, interval 1, probability 0, space 0, times 0
[  155.888320][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.1.882 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.888342][ T9220] Tainted: [L]=SOFTLOCKUP
[  155.888345][ T9220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  155.888365][ T9220] Call Trace:
[  155.888380][ T9220]  <TASK>
[  155.888384][ T9220]  dump_stack_lvl+0x100/0x190
[  155.888430][ T9220]  should_fail_ex.cold+0x5/0xa
[  155.888480][ T9220]  ? tomoyo_realpath_from_path+0xb6/0x690
[  155.888505][ T9220]  should_failslab+0xc2/0x120
[  155.888541][ T9220]  __kmalloc_noprof+0xe0/0x850
[  155.888578][ T9220]  tomoyo_realpath_from_path+0xb6/0x690
[  155.888601][ T9220]  tomoyo_check_open_permission+0x2af/0x3c0
[  155.888618][ T9220]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  155.888634][ T9220]  ? ovl_path_open+0x182/0x1d0
[  155.888666][ T9220]  ? get_tree_nodev+0xdd/0x190
[  155.888693][ T9220]  ? vfs_get_tree+0x92/0x320
[  155.888724][ T9220]  ? do_raw_spin_lock+0x128/0x260
[  155.888758][ T9220]  ? path_get+0x61/0x80
[  155.888774][ T9220]  tomoyo_file_open+0x6b/0x90
[  155.888788][ T9220]  security_file_open+0xb5/0x1e0
[  155.888800][ T9220]  do_dentry_open+0x5aa/0x1660
[  155.888813][ T9220]  ? lockdep_init_map_type+0x5c/0x250
[  155.888827][ T9220]  vfs_open+0x82/0x3f0
[  155.888844][ T9220]  dentry_open+0x71/0xd0
[  155.888858][ T9220]  ovl_path_open+0x182/0x1d0
[  155.888874][ T9220]  ovl_check_d_type_supported+0xa4/0x240
[  155.888890][ T9220]  ? __pfx_ovl_check_d_type_supported+0x10/0x10
[  155.888905][ T9220]  ? __pfx_wake_up_var+0x10/0x10
[  155.888939][ T9220]  ? __pfx_ovl_check_d_type+0x10/0x10
[  155.888958][ T9220]  ? do_raw_spin_unlock+0x145/0x1e0
[  155.888972][ T9220]  ? _raw_spin_unlock+0x28/0x50
[  155.888996][ T9220]  ovl_fill_super+0xfcc/0x5dd0
[  155.889019][ T9220]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  155.889040][ T9220]  ? lockdep_init_map_type+0x5c/0x250
[  155.889053][ T9220]  ? __pfx_ovl_fill_super+0x10/0x10
[  155.889070][ T9220]  ? __init_swait_queue_head+0xca/0x150
[  155.889086][ T9220]  ? shrinker_register+0x1db/0x240
[  155.889139][ T9220]  ? sget_fc+0x801/0xc70
[  155.889164][ T9220]  ? __pfx_set_anon_super_fc+0x10/0x10
[  155.889188][ T9220]  ? __pfx_ovl_fill_super+0x10/0x10
[  155.889213][ T9220]  get_tree_nodev+0xdd/0x190
[  155.889232][ T9220]  vfs_get_tree+0x92/0x320
[  155.889259][ T9220]  path_mount+0x7d0/0x23d0
[  155.889289][ T9220]  ? __pfx_path_mount+0x10/0x10
[  155.889311][ T9220]  ? lockdep_hardirqs_on+0x78/0x100
[  155.889339][ T9220]  ? putname+0xb1/0x110
[  155.889364][ T9220]  ? kmem_cache_free+0x124/0x6a0
[  155.889397][ T9220]  ? __x64_sys_mount+0x293/0x310
[  155.889421][ T9220]  __x64_sys_mount+0x293/0x310
[  155.889445][ T9220]  ? __pfx___x64_sys_mount+0x10/0x10
[  155.889474][ T9220]  do_syscall_64+0x106/0xf80
[  155.889501][ T9220]  ? clear_bhb_loop+0x40/0x90
[  155.889523][ T9220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.889539][ T9220] RIP: 0033:0x7f838a79c819
[  155.889554][ T9220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.889571][ T9220] RSP: 002b:00007f83889f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  155.889586][ T9220] RAX: ffffffffffffffda RBX: 00007f838aa15fa0 RCX: 00007f838a79c819
[  155.889596][ T9220] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  155.889605][ T9220] RBP: 00007f83889f6090 R08: 0000200000000380 R09: 0000000000000000
[  155.889614][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  155.889623][ T9220] R13: 00007f838aa16038 R14: 00007f838aa15fa0 R15: 00007ffdd8ad3b18
[  155.889646][ T9220]  </TASK>
[  155.890052][ T9220] ERROR: Out of memory at tomoyo_realpath_from_path.
[  156.017748][ T9220] overlayfs: upper fs does not support file handles, falling back to index=off.
[  156.039256][  T841] usb 10-1: Using ep0 maxpacket: 8
[  156.043026][  T841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.046864][  T841] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  156.052220][  T841] usb 10-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  156.056041][  T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.064383][  T841] usb 10-1: config 0 descriptor??
[  156.074511][ T9222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54993 sclass=netlink_route_socket pid=9222 comm=syz.1.883
[  156.281414][ T9201] loop9: detected capacity change from 0 to 7
[  156.284776][ T9231] __nla_validate_parse: 1 callbacks suppressed
[  156.284790][ T9231] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.886'.
[  156.289656][ T9232] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.886'.
[  156.300450][ T9201] Dev loop9: unable to read RDB block 7
[  156.302703][ T9201]  loop9: unable to read partition table
[  156.304804][ T9201] loop9: partition table beyond EOD, truncated
[  156.306849][ T9201] loop_reread_partitions: partition scan of loop9 (�������g�C�j̖�P=��!MX���	���%��`�搘ȵ4FLQk݊5) failed (rc=-5)
[  156.312239][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.876'.
[  156.315127][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.876'.
[  156.319956][  T841] usbhid 10-1:0.0: can't add hid device: -71
[  156.322480][  T841] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  156.333184][  T841] usb 10-1: USB disconnect, device number 3
[  156.352690][ T9227] /dev/sr0: Can't open blockdev
[  156.411443][   T40] audit: type=1400 audit(1775066976.361:4377): avc:  denied  { write } for  pid=9239 comm="syz.1.887" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  156.420637][   T40] audit: type=1400 audit(1775066976.361:4378): avc:  denied  { open } for  pid=9239 comm="syz.1.887" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  156.430327][   T40] audit: type=1400 audit(1775066976.361:4379): avc:  denied  { ioctl } for  pid=9239 comm="syz.1.887" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  156.446298][ T9231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  156.502599][   T40] audit: type=1400 audit(1775066976.451:4380): avc:  denied  { setopt } for  pid=9243 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  156.505491][ T9244] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  156.512021][ T9244] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  156.522853][ T9246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.889'.
[  156.525697][ T9246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.889'.
[  156.550302][   T40] audit: type=1400 audit(1775066976.501:4381): avc:  denied  { connect } for  pid=9247 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  156.562637][ T9250] FAULT_INJECTION: forcing a failure.
[  156.562637][ T9250] name failslab, interval 1, probability 0, space 0, times 0
[  156.566738][ T9250] CPU: 3 UID: 0 PID: 9250 Comm: syz.0.891 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  156.566757][ T9250] Tainted: [L]=SOFTLOCKUP
[  156.566760][ T9250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  156.566767][ T9250] Call Trace:
[  156.566772][ T9250]  <TASK>
[  156.566776][ T9250]  dump_stack_lvl+0x100/0x190
[  156.566800][ T9250]  should_fail_ex.cold+0x5/0xa
[  156.566815][ T9250]  ? tomoyo_encode2+0xfb/0x3c0
[  156.566832][ T9250]  should_failslab+0xc2/0x120
[  156.566844][ T9250]  __kmalloc_noprof+0xe0/0x850
[  156.566860][ T9250]  ? d_absolute_path+0x136/0x1b0
[  156.566908][ T9250]  tomoyo_encode2+0xfb/0x3c0
[  156.566927][ T9250]  tomoyo_encode+0x29/0x50
[  156.566969][ T9250]  tomoyo_realpath_from_path+0x18c/0x690
[  156.566990][ T9250]  tomoyo_check_open_permission+0x2af/0x3c0
[  156.567006][ T9250]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  156.567021][ T9250]  ? ovl_path_open+0x182/0x1d0
[  156.567035][ T9250]  ? get_tree_nodev+0xdd/0x190
[  156.567046][ T9250]  ? vfs_get_tree+0x92/0x320
[  156.567073][ T9250]  ? do_raw_spin_lock+0x128/0x260
[  156.567087][ T9250]  ? path_get+0x61/0x80
[  156.567102][ T9250]  tomoyo_file_open+0x6b/0x90
[  156.567115][ T9250]  security_file_open+0xb5/0x1e0
[  156.567126][ T9250]  do_dentry_open+0x5aa/0x1660
[  156.567138][ T9250]  ? lockdep_init_map_type+0x5c/0x250
[  156.567152][ T9250]  vfs_open+0x82/0x3f0
[  156.567167][ T9250]  dentry_open+0x71/0xd0
[  156.567181][ T9250]  ovl_path_open+0x182/0x1d0
[  156.567195][ T9250]  ovl_check_d_type_supported+0xa4/0x240
[  156.567211][ T9250]  ? __pfx_ovl_check_d_type_supported+0x10/0x10
[  156.567226][ T9250]  ? __pfx_wake_up_var+0x10/0x10
[  156.567243][ T9250]  ? __pfx_ovl_check_d_type+0x10/0x10
[  156.567260][ T9250]  ? do_raw_spin_unlock+0x145/0x1e0
[  156.567278][ T9250]  ? _raw_spin_unlock+0x28/0x50
[  156.567295][ T9250]  ovl_fill_super+0xfcc/0x5dd0
[  156.567316][ T9250]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  156.567338][ T9250]  ? lockdep_init_map_type+0x5c/0x250
[  156.567351][ T9250]  ? __pfx_ovl_fill_super+0x10/0x10
[  156.567366][ T9250]  ? __init_swait_queue_head+0xca/0x150
[  156.567381][ T9250]  ? shrinker_register+0x1db/0x240
[  156.567393][ T9250]  ? sget_fc+0x801/0xc70
[  156.567410][ T9250]  ? __pfx_set_anon_super_fc+0x10/0x10
[  156.567427][ T9250]  ? __pfx_ovl_fill_super+0x10/0x10
[  156.567442][ T9250]  get_tree_nodev+0xdd/0x190
[  156.567453][ T9250]  vfs_get_tree+0x92/0x320
[  156.567469][ T9250]  path_mount+0x7d0/0x23d0
[  156.567487][ T9250]  ? __pfx_path_mount+0x10/0x10
[  156.567500][ T9250]  ? lockdep_hardirqs_on+0x78/0x100
[  156.567518][ T9250]  ? putname+0xb1/0x110
[  156.567530][ T9250]  ? kmem_cache_free+0x124/0x6a0
[  156.567549][ T9250]  ? __x64_sys_mount+0x293/0x310
[  156.567563][ T9250]  __x64_sys_mount+0x293/0x310
[  156.567578][ T9250]  ? __pfx___x64_sys_mount+0x10/0x10
[  156.567597][ T9250]  do_syscall_64+0x106/0xf80
[  156.567614][ T9250]  ? clear_bhb_loop+0x40/0x90
[  156.567627][ T9250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.567639][ T9250] RIP: 0033:0x7f20f119c819
[  156.567650][ T9250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.567660][ T9250] RSP: 002b:00007f20f210f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  156.567670][ T9250] RAX: ffffffffffffffda RBX: 00007f20f1415fa0 RCX: 00007f20f119c819
[  156.567677][ T9250] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  156.567683][ T9250] RBP: 00007f20f210f090 R08: 0000200000000380 R09: 0000000000000000
[  156.567690][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  156.567706][ T9250] R13: 00007f20f1416038 R14: 00007f20f1415fa0 R15: 00007ffee7e37a38
[  156.567724][ T9250]  </TASK>
[  156.581102][ T9250] ERROR: Out of memory at tomoyo_realpath_from_path.
[  156.587927][   T40] audit: type=1400 audit(1775066976.531:4382): avc:  denied  { bind } for  pid=9251 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  156.589324][ T9250] overlayfs: upper fs does not support file handles, falling back to index=off.
[  156.590989][ T9252] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  156.650303][   T40] audit: type=1400 audit(1775066976.611:4383): avc:  denied  { read } for  pid=9251 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  156.738992][   T40] audit: type=1400 audit(1775066976.681:4384): avc:  denied  { getopt } for  pid=9254 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  156.739669][ T9257] x_tables: ip6_tables: mh match: only valid for protocol 135
[  156.795938][ T9266] Invalid ELF header type: 0 != 1
[  156.797838][ T9266] Invalid ELF header type: 0 != 1
[  156.799827][ T9266] Invalid ELF header type: 0 != 1
[  156.801858][ T9266] Invalid ELF header type: 0 != 1
[  156.804376][ T9266] Invalid ELF header type: 0 != 1
[  156.806494][ T9266] Invalid ELF header type: 0 != 1
[  156.808275][ T9266] Invalid ELF header type: 0 != 1
[  156.810780][ T9266] Invalid ELF header type: 0 != 1
[  156.813181][ T9266] Invalid ELF header type: 0 != 1
[  156.815841][ T9266] Invalid ELF header type: 0 != 1
[  156.818039][ T9266] Invalid ELF header type: 0 != 1
[  156.820057][ T9266] Invalid ELF header type: 0 != 1
[  156.826501][ T9266] Invalid ELF header type: 0 != 1
[  156.828279][ T9266] Invalid ELF header type: 0 != 1
[  156.831357][ T9266] Invalid ELF header type: 0 != 1
[  156.833125][ T9266] Invalid ELF header type: 0 != 1
[  156.834995][ T9266] Invalid ELF header type: 0 != 1
[  156.837783][ T9266] Invalid ELF header type: 0 != 1
[  156.840081][ T9266] Invalid ELF header type: 0 != 1
[  156.841785][ T9266] Invalid ELF header type: 0 != 1
[  156.843663][ T9266] Invalid ELF header type: 0 != 1
[  156.845344][ T9266] Invalid ELF header type: 0 != 1
[  156.847216][ T9266] Invalid ELF header type: 0 != 1
[  156.848886][ T9266] Invalid ELF header type: 0 != 1
[  156.850924][ T9266] Invalid ELF header type: 0 != 1
[  156.852660][ T9266] Invalid ELF header type: 0 != 1
[  156.854833][ T9266] Invalid ELF header type: 0 != 1
[  156.855553][ T9269] netlink: 'syz.5.896': attribute type 2 has an invalid length.
[  156.856753][ T9266] Invalid ELF header type: 0 != 1
[  156.862242][ T9266] Invalid ELF header type: 0 != 1
[  156.864000][ T9266] Invalid ELF header type: 0 != 1
[  156.865679][ T9266] Invalid ELF header type: 0 != 1
[  156.867444][ T9266] Invalid ELF header type: 0 != 1
[  156.869343][ T9266] Invalid ELF header type: 0 != 1
[  157.000052][ T1127] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  157.003368][ T1127] sr 2:0:0:0: [sr0] tag#14 Sense Key : Not Ready [current] 
[  157.009284][ T1127] sr 2:0:0:0: [sr0] tag#14 Add. Sense: Medium not present
[  157.012417][ T1127] sr 2:0:0:0: [sr0] tag#14 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[  157.015681][ T1127] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  157.163825][   T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  157.170615][   T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  157.174351][   T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.177630][   T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.183410][   T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  157.241898][ T9285] overlay: Unknown parameter 'mask'
[  157.329301][   T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  157.346614][ T9282] chnl_net:caif_netlink_parms(): no params data found
[  157.394427][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.398175][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.401281][ T9282] bridge_slave_0: entered allmulticast mode
[  157.404124][ T9282] bridge_slave_0: entered promiscuous mode
[  157.407395][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.409955][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.412326][ T9282] bridge_slave_1: entered allmulticast mode
[  157.415812][ T9282] bridge_slave_1: entered promiscuous mode
[  157.447897][   T86] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.474538][ T9282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.479686][   T24] usb 10-1: Using ep0 maxpacket: 16
[  157.481863][ T9282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.483787][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.491269][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.495435][   T24] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  157.497438][ T9282] team0: Port device team_slave_0 added
[  157.499401][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.502306][   T24] usb 10-1: config 0 descriptor??
[  157.505889][ T9282] team0: Port device team_slave_1 added
[  157.522594][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.524814][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.533428][ T9282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.550509][   T86] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.561126][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.563459][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.572448][ T9282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.598014][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'.
[  157.601575][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'.
[  157.604505][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'.
[  157.611883][ T9282] hsr_slave_0: entered promiscuous mode
[  157.614497][ T9282] hsr_slave_1: entered promiscuous mode
[  157.616856][ T9282] debugfs: 'hsr0' already exists in 'hsr'
[  157.618698][ T9282] Cannot create hsr debugfs directory
[  157.629709][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'.
[  157.630863][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.635410][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.649490][   T86] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.657143][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.660133][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.721720][   T24] kye 0003:0458:5016.0005: control desc unexpectedly large
[  157.728811][   T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5016.0005/input/input11
[  157.737428][ T9306] program syz.1.907 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.758637][   T86] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.798169][   T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5016.0005/input/input12
[  157.875719][ T9282] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  157.880429][ T9282] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  157.898812][ T9282] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  157.903965][ T9282] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  157.925289][ T9316] netlink: 'syz.1.911': attribute type 13 has an invalid length.
[  157.932362][   T24] kye 0003:0458:5016.0005: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0
[  157.979703][   T24] usb 10-1: USB disconnect, device number 4
[  157.994613][ T9325] fido_id[9325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5016.0005/report_descriptor': No such file or directory
[  158.042525][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.044914][ T9282] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.047646][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.050220][ T9282] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.060231][   T86] bridge_slave_1: left allmulticast mode
[  158.062511][   T86] bridge_slave_1: left promiscuous mode
[  158.064910][   T86] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.075342][   T86] bridge_slave_0: left allmulticast mode
[  158.077532][   T86] bridge_slave_0: left promiscuous mode
[  158.084253][   T86] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.087790][ T9333] Invalid ELF header type: 2 != 1
[  158.102716][ T9335] XFS (nbd1): no-recovery mounts must be read-only.
[  158.286794][ T9343] 9pnet_fd: p9_fd_create_unix (9343): problem connecting socket: ./file0: -30
[  158.318782][   T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.325494][   T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.331228][   T86] bond0 (unregistering): Released all slaves
[  158.347673][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.352301][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.388726][ T9282] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.400118][ T9282] 8021q: adding VLAN 0 to HW filter on device team0
[  158.422000][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.424502][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.434595][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.437808][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.708095][   T86] hsr_slave_0: left promiscuous mode
[  158.721611][   T86] hsr_slave_1: left promiscuous mode
[  158.727308][   T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.732417][   T86] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.737495][   T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.744133][   T86] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.767121][   T86] veth1_macvtap: left promiscuous mode
[  158.769410][   T86] veth0_macvtap: left promiscuous mode
[  158.775427][   T86] veth1_vlan: left promiscuous mode
[  158.777190][   T86] veth0_vlan: left promiscuous mode
[  158.911300][ T9402] tmpfs: Unknown parameter 'nr_inod�W�es'
[  158.913787][ T9402] nfs: Bad value for 'source'
[  158.946211][   T86] team0 (unregistering): Port device team_slave_1 removed
[  158.954205][   T86] team0 (unregistering): Port device team_slave_0 removed
[  159.008532][ T9405] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  159.075277][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.127798][ T9405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9405 comm=syz.0.932
[  159.276589][ T8367] udevd[8367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  159.279215][ T5288] Bluetooth: hci3: command tx timeout
[  159.317259][ T9282] veth0_vlan: entered promiscuous mode
[  159.354053][ T9282] veth1_vlan: entered promiscuous mode
[  159.381350][ T9282] veth0_macvtap: entered promiscuous mode
[  159.386295][ T9282] veth1_macvtap: entered promiscuous mode
[  159.406342][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.427696][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.437815][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.446319][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.455358][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.461328][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.516574][ T7133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.519010][ T7133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.542246][ T7133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.544833][ T7133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.583893][ T9453] comedi comedi0: pcl812: I/O port conflict (0x10001,16)
[  159.764239][ T9471] bond0: entered promiscuous mode
[  159.766401][ T9471] bond_slave_0: entered promiscuous mode
[  159.768889][ T9471] bond_slave_1: entered promiscuous mode
[  159.772484][ T9471] gretap0: entered promiscuous mode
[  159.775577][ T9471] hsr1: entered promiscuous mode
[  159.853780][ T9474] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  159.858392][ T9474] overlayfs: overlapping lowerdir path
[  160.309759][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  160.309776][   T40] audit: type=1400 audit(1775066980.261:4395): avc:  denied  { remount } for  pid=9518 comm="syz.1.957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  160.377011][ T9528] trusted_key: encrypted_key: keylen parameter is missing
[  160.448919][ T9536] 9pnet_virtio: no channels available for device syz
[  160.520840][   T40] audit: type=1400 audit(1775066980.471:4396): avc:  denied  { getopt } for  pid=9544 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  160.608635][ T9552] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  160.711357][ T9555] netlink: 'syz.1.967': attribute type 10 has an invalid length.
[  160.717995][ T9555] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  160.722074][ T9555] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  160.726150][ T9555] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  160.825607][ T9563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9563 comm=syz.1.969
[  160.911229][ T9577] openvswitch: netlink: nsh attr 8 is out of range max 3
[  160.956444][ T9583] fuse: Bad value for 'fd'
[  160.965086][ T9583] bridge_slave_0: left allmulticast mode
[  160.965103][ T9583] bridge_slave_0: left promiscuous mode
[  160.966056][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.968643][ T9583] bridge_slave_1: left allmulticast mode
[  160.977101][ T9583] bridge_slave_1: left promiscuous mode
[  160.977211][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.989202][ T9583] bond0: (slave bond_slave_0): Releasing backup interface
[  161.002795][ T9583] bond0: (slave bond_slave_1): Releasing backup interface
[  161.018416][ T9583] team0: Port device team_slave_0 removed
[  161.024876][ T9583] team0: Port device team_slave_1 removed
[  161.027290][ T9583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.032850][ T9583] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.036395][ T9583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.038850][ T9583] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.043236][ T9583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  161.183061][ T9610] 9p: Invalid uid '0x00000000ffffffff'
[  161.406640][ T5288] Bluetooth: hci3: command tx timeout
[  161.564267][ T6012] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  161.747844][ T6012] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x72, changing to 0x2
[  161.752574][ T6012] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 440
[  161.759115][ T6012] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  161.762877][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.766189][ T6012] usb 5-1: Product: syz
[  161.768163][ T6012] usb 5-1: Manufacturer: syz
[  161.770171][ T6012] usb 5-1: SerialNumber: syz
[  161.778784][ T6012] usb 5-1: config 0 descriptor??
[  161.783624][ T9616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  162.003554][ T9616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  162.232050][ T6012] usb 5-1: USB disconnect, device number 10
[  162.284573][ T9647] netlink: 'syz.6.990': attribute type 4 has an invalid length.
[  162.359185][ T9649] kvm: emulating exchange as write
[  162.393251][ T9652] smc: net device ip_vti0 applied user defined pnetid SYZ0
[  162.478159][ T9660] __nla_validate_parse: 15 callbacks suppressed
[  162.478179][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  162.531168][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'.
[  162.590805][ T9678] openvswitch: netlink: IP tunnel dst address not specified
[  162.591005][ T9679] openvswitch: netlink: IP tunnel dst address not specified
[  162.614749][   T40] audit: type=1400 audit(1775066982.439:4397): avc:  denied  { module_load } for  pid=9680 comm="syz.1.1001" path="/sys/kernel/notes" dev="sysfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  162.646730][   T40] audit: type=1400 audit(1775066982.467:4398): avc:  denied  { getopt } for  pid=9689 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  162.711961][ T9702] fuse: Bad value for 'fd'
[  162.792014][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1010'.
[  162.795923][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1010'.
[  162.811027][ T9713] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  162.817198][ T9712] sctp: [Deprecated]: syz.6.1010 (pid 9712) Use of int in max_burst socket option.
[  162.817198][ T9712] Use struct sctp_assoc_value instead
[  162.973452][   T34] hid-generic 0005:16C0:05DF.0006: item fetching failed at offset 0/1
[  162.981391][   T34] hid-generic 0005:16C0:05DF.0006: probe with driver hid-generic failed with error -22
[  162.991054][ T9732] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.1016'.
[  163.219207][ T9752] syzkaller0: entered promiscuous mode
[  163.226956][ T9752] syzkaller0: entered allmulticast mode
[  163.231819][   T40] audit: type=1400 audit(1775066983.010:4399): avc:  denied  { write } for  pid=9755 comm="syz.0.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  163.465100][ T9775] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[  163.471543][   T40] audit: type=1400 audit(1775066983.234:4400): avc:  denied  { relabelto } for  pid=9774 comm="syz.5.1028" name="cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0"
[  163.488194][   T40] audit: type=1400 audit(1775066983.234:4401): avc:  denied  { associate } for  pid=9774 comm="syz.5.1028" name="cgroup.procs" dev="cgroup" ino=584 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0"
[  163.638346][ T5288] Bluetooth: hci3: command tx timeout
[  163.734829][ T9796] 9pnet_virtio: no channels available for device syz
[  163.744034][ T9806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1035'.
[  163.841378][   T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  163.887638][ T9817] /dev/nullb0: Can't open blockdev
[  163.900137][ T9807] kvm: MONITOR instruction emulated as NOP!
[  163.975798][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'.
[  164.037697][   T34] usb 11-1: config index 0 descriptor too short (expected 39, got 27)
[  164.040399][   T34] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.044046][   T34] usb 11-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  164.048635][   T34] usb 11-1: config 0 interface 0 has no altsetting 0
[  164.049825][ T9827] 9pnet_virtio: no channels available for device syz
[  164.052634][   T34] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  164.063703][   T34] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  164.067085][   T34] usb 11-1: Product: syz
[  164.068633][   T34] usb 11-1: Manufacturer: syz
[  164.070283][   T34] usb 11-1: SerialNumber: syz
[  164.079407][   T34] usb 11-1: config 0 descriptor??
[  164.089575][   T34] hub 11-1:0.0: bad descriptor, ignoring hub
[  164.091848][   T34] hub 11-1:0.0: probe with driver hub failed with error -5
[  164.102555][ T9821] /dev/sr0: Can't open blockdev
[  164.120003][   T34] snd-usb-audio 11-1:0.0: probe with driver snd-usb-audio failed with error -22
[  164.134419][ T8367] udevd[8367]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.148330][   T40] audit: type=1400 audit(1775066983.870:4402): avc:  denied  { map } for  pid=9831 comm="syz.0.1042" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  164.157587][   T40] audit: type=1400 audit(1775066983.870:4403): avc:  denied  { execute } for  pid=9831 comm="syz.0.1042" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  164.188054][ T9835] netlink: 'syz.1.1043': attribute type 13 has an invalid length.
[  164.388530][ T9857] /dev/loop1: Can't lookup blockdev
[  164.395237][ T9858] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  164.433299][ T9861] netlink: 'syz.1.1051': attribute type 10 has an invalid length.
[  164.448215][ T9861] team0: Port device dummy0 added
[  164.465215][ T9861] netlink: 'syz.1.1051': attribute type 10 has an invalid length.
[  164.475372][ T9861] team0: Port device dummy0 removed
[  164.482472][ T9861] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  164.522045][ T9865] xt_hashlimit: size too large, truncated to 1048576
[  164.540864][ T9863] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  164.602407][ T1027] usb 11-1: reset high-speed USB device number 2 using dummy_hcd
[  164.620805][ T9871] netlink: 'syz.1.1054': attribute type 12 has an invalid length.
[  164.746342][ T9881] /dev/nbd1: Can't lookup blockdev
[  164.954673][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1058'.
[  165.005848][   T40] audit: type=1400 audit(1775066984.665:4404): avc:  denied  { listen } for  pid=9903 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  165.008923][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  165.054381][ T9907] hugetlbfs: Unknown parameter ']��œ2'
[  165.145450][ T9911] afs: Unknown parameter 'f���앙�V���l'
[  165.157349][ T6012] usb 11-1: USB disconnect, device number 2
[  165.274079][ T9919] debugfs: '1��^!' already exists in 'ieee80211'
[  165.289922][ T9919] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!'
[  165.292519][ T9919] CPU: 2 UID: 0 PID: 9919 Comm: syz.5.1067 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.292536][ T9919] Tainted: [L]=SOFTLOCKUP
[  165.292540][ T9919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.292550][ T9919] Call Trace:
[  165.292557][ T9919]  <TASK>
[  165.292563][ T9919]  dump_stack_lvl+0x100/0x190
[  165.292594][ T9919]  sysfs_warn_dup.cold+0x1c/0x28
[  165.292659][ T9919]  sysfs_do_create_link_sd+0x113/0x140
[  165.292703][ T9919]  sysfs_create_link+0x61/0xc0
[  165.292715][ T9919]  device_add+0x675/0x1950
[  165.292732][ T9919]  ? __pfx_device_add+0x10/0x10
[  165.292746][ T9919]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  165.292765][ T9919]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  165.292784][ T9919]  wiphy_register+0x1e5b/0x2d30
[  165.292796][ T9919]  ? __rtnl_unlock+0xb9/0xf0
[  165.292815][ T9919]  ? netdev_run_todo+0x750/0x12c0
[  165.292834][ T9919]  ? __pfx_wiphy_register+0x10/0x10
[  165.292845][ T9919]  ? __asan_memset+0x23/0x50
[  165.292862][ T9919]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  165.292880][ T9919]  ieee80211_register_hw+0x2cfd/0x4140
[  165.292899][ T9919]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  165.292910][ T9919]  ? __pfx___debug_object_init+0x10/0x10
[  165.292931][ T9919]  ? find_held_lock+0x2b/0x80
[  165.292948][ T9919]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  165.292965][ T9919]  ? __hrtimer_setup+0x178/0x280
[  165.292979][ T9919]  mac80211_hwsim_new_radio+0x2847/0x57d0
[  165.293008][ T9919]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  165.293028][ T9919]  ? __asan_memcpy+0x3c/0x60
[  165.293046][ T9919]  hwsim_new_radio_nl+0xc1f/0x1340
[  165.293066][ T9919]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  165.293088][ T9919]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[  165.293101][ T9919]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[  165.293117][ T9919]  genl_family_rcv_msg_doit+0x214/0x300
[  165.293131][ T9919]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  165.293148][ T9919]  ? bpf_lsm_capable+0x9/0x10
[  165.293183][ T9919]  ? security_capable+0x80/0x260
[  165.293199][ T9919]  ? ns_capable+0xd2/0xf0
[  165.293216][ T9919]  genl_rcv_msg+0x560/0x800
[  165.293231][ T9919]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.293245][ T9919]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  165.293270][ T9919]  netlink_rcv_skb+0x159/0x420
[  165.293294][ T9919]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.293307][ T9919]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.293333][ T9919]  ? netlink_deliver_tap+0x1ae/0xcc0
[  165.293354][ T9919]  genl_rcv+0x28/0x40
[  165.293365][ T9919]  netlink_unicast+0x5aa/0x870
[  165.293387][ T9919]  ? __pfx_netlink_unicast+0x10/0x10
[  165.293412][ T9919]  netlink_sendmsg+0x8b0/0xda0
[  165.293433][ T9919]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.293451][ T9919]  ? __might_fault+0x50/0x140
[  165.293473][ T9919]  ____sys_sendmsg+0x9e1/0xb70
[  165.293485][ T9919]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.293503][ T9919]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.293518][ T9919]  ? __pfx_futex_wake_mark+0x10/0x10
[  165.293559][ T9919]  ___sys_sendmsg+0x190/0x1e0
[  165.293574][ T9919]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.293607][ T9919]  __sys_sendmsg+0x170/0x220
[  165.293625][ T9919]  ? __pfx___sys_sendmsg+0x10/0x10
[  165.293641][ T9919]  ? __pfx___seccomp_filter+0x10/0x10
[  165.293665][ T9919]  do_syscall_64+0x106/0xf80
[  165.293683][ T9919]  ? clear_bhb_loop+0x40/0x90
[  165.293698][ T9919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.293709][ T9919] RIP: 0033:0x7fd83b99c819
[  165.293720][ T9919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.293730][ T9919] RSP: 002b:00007fd83c883028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.293742][ T9919] RAX: ffffffffffffffda RBX: 00007fd83bc15fa0 RCX: 00007fd83b99c819
[  165.293750][ T9919] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000d
[  165.293757][ T9919] RBP: 00007fd83ba32c91 R08: 0000000000000000 R09: 0000000000000000
[  165.293764][ T9919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.293770][ T9919] R13: 00007fd83bc16038 R14: 00007fd83bc15fa0 R15: 00007fff86324ee8
[  165.293785][ T9919]  </TASK>
[  165.295354][ T1027] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  165.368781][ T9925] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  165.375274][    C0] ------------[ cut here ]------------
[  165.375287][    C0] sk->sk_forward_alloc
[  165.375292][    C0] WARNING: net/ipv4/af_inet.c:163 at inet_sock_destruct+0x653/0x800, CPU#0: ksoftirqd/0/15
[  165.377910][ T9925] overlayfs: failed to set xattr on upper
[  165.378426][    C0] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  165.378444][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.378461][    C0] Tainted: [L]=SOFTLOCKUP
[  165.378466][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.378474][    C0] RIP: 0010:inet_sock_destruct+0x653/0x800
[  165.380064][ T9925] overlayfs: ...falling back to redirect_dir=nofollow.
[  165.381834][    C0] Code: e3 4e ff e9 06 fd ff ff e8 7a 49 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 6c 49 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 5e 49 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 50 49 ff f7 90 0f 0b 90 e9 65 fe ff ff
[  165.381850][    C0] RSP: 0018:ffffc90000127bb0 EFLAGS: 00010246
[  165.381860][    C0] RAX: 0000000000000000 RBX: ffff888031e52200 RCX: ffffffff8a09b2c7
[  165.381868][    C0] RDX: ffff88801e6ca4c0 RSI: ffffffff8a09b3c2 RDI: ffff88801e6ca4c0
[  165.381876][    C0] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000
[  165.381882][    C0] R10: 0000000000000f70 R11: 000000000000761b R12: ffff888031e52200
[  165.381889][    C0] R13: ffff888031e52290 R14: ffffffff81eebc9d R15: 0000000000000007
[  165.383681][ T9925] overlayfs: ...falling back to index=off.
[  165.385226][    C0] FS:  0000000000000000(0000) GS:ffff8880d633c000(0000) knlGS:0000000000000000
[  165.385251][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.386862][ T9925] overlayfs: ...falling back to uuid=null.
[  165.388567][    C0] CR2: 00007ffdd8ad2f80 CR3: 000000000e598000 CR4: 0000000000352ef0
[  165.388577][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  165.390311][ T9925] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  165.391615][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  165.391626][    C0] Call Trace:
[  165.391631][    C0]  <TASK>
[  165.518804][    C0]  ? __pfx_udp_destruct_sock+0x10/0x10
[  165.521568][    C0]  ? rcu_core+0x59d/0x10d0
[  165.523701][    C0]  __sk_destruct+0x85/0xbb0
[  165.525603][    C0]  ? rcu_core+0x59d/0x10d0
[  165.527480][    C0]  rcu_core+0x5a2/0x10d0
[  165.529261][    C0]  ? __pfx_rcu_core+0x10/0x10
[  165.531204][    C0]  ? rcu_is_watching+0x12/0xc0
[  165.533073][    C0]  handle_softirqs+0x1eb/0x9e0
[  165.534678][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  165.536438][    C0]  ? run_ksoftirqd+0x5b/0x60
[  165.537923][    C0]  ? rcu_is_watching+0x12/0xc0
[  165.539487][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  165.541291][    C0]  run_ksoftirqd+0x38/0x60
[  165.542716][    C0]  smpboot_thread_fn+0x3d3/0xaa0
[  165.544404][    C0]  ? kthread+0x13a/0x450
[  165.545808][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  165.547553][    C0]  kthread+0x370/0x450
[  165.548872][    C0]  ? __pfx_kthread+0x10/0x10
[  165.550362][    C0]  ret_from_fork+0x754/0xd80
[  165.551917][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  165.553555][    C0]  ? __switch_to+0x7b4/0x1120
[  165.555107][    C0]  ? __pfx_kthread+0x10/0x10
[  165.556795][    C0]  ret_from_fork_asm+0x1a/0x30
[  165.558407][    C0]  </TASK>
[  165.559456][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  165.561777][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.565183][    C0] Tainted: [L]=SOFTLOCKUP
[  165.566575][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.569771][    C0] Call Trace:
[  165.570868][    C0]  <TASK>
[  165.571827][    C0]  dump_stack_lvl+0x100/0x190
[  165.573340][    C0]  vpanic+0x552/0x970
[  165.574626][    C0]  ? __pfx_vpanic+0x10/0x10
[  165.576162][    C0]  panic+0xd1/0xe0
[  165.577376][    C0]  ? __pfx_panic+0x10/0x10
[  165.578820][    C0]  ? check_panic_on_warn+0x1f/0x90
[  165.580477][    C0]  check_panic_on_warn.cold+0x19/0x34
[  165.582200][    C0]  ? inet_sock_destruct+0x653/0x800
[  165.583870][    C0]  __warn.cold+0x191/0x348
[  165.585322][    C0]  __report_bug+0x296/0x3d0
[  165.586802][    C0]  ? inet_sock_destruct+0x653/0x800
[  165.588470][    C0]  ? __pfx___report_bug+0x10/0x10
[  165.590167][    C0]  ? inet_sock_destruct+0x653/0x800
[  165.592107][    C0]  report_bug+0xb2/0x220
[  165.593472][    C0]  ? inet_sock_destruct+0x653/0x800
[  165.595201][    C0]  handle_bug+0x16a/0x2a0
[  165.596729][    C0]  exc_invalid_op+0x17/0x50
[  165.598257][    C0]  asm_exc_invalid_op+0x1a/0x20
[  165.599848][    C0] RIP: 0010:inet_sock_destruct+0x653/0x800
[  165.601702][    C0] Code: e3 4e ff e9 06 fd ff ff e8 7a 49 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 6c 49 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 5e 49 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 50 49 ff f7 90 0f 0b 90 e9 65 fe ff ff
[  165.607912][    C0] RSP: 0018:ffffc90000127bb0 EFLAGS: 00010246
[  165.609838][    C0] RAX: 0000000000000000 RBX: ffff888031e52200 RCX: ffffffff8a09b2c7
[  165.612335][    C0] RDX: ffff88801e6ca4c0 RSI: ffffffff8a09b3c2 RDI: ffff88801e6ca4c0
[  165.614852][    C0] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000
[  165.617363][    C0] R10: 0000000000000f70 R11: 000000000000761b R12: ffff888031e52200
[  165.619878][    C0] R13: ffff888031e52290 R14: ffffffff81eebc9d R15: 0000000000000007
[  165.622367][    C0]  ? rcu_core+0x59d/0x10d0
[  165.623842][    C0]  ? inet_sock_destruct+0x557/0x800
[  165.625539][    C0]  ? inet_sock_destruct+0x652/0x800
[  165.627249][    C0]  ? __pfx_udp_destruct_sock+0x10/0x10
[  165.628985][    C0]  ? rcu_core+0x59d/0x10d0
[  165.630419][    C0]  __sk_destruct+0x85/0xbb0
[  165.631927][    C0]  ? rcu_core+0x59d/0x10d0
[  165.633357][    C0]  rcu_core+0x5a2/0x10d0
[  165.634757][    C0]  ? __pfx_rcu_core+0x10/0x10
[  165.636438][    C0]  ? rcu_is_watching+0x12/0xc0
[  165.637902][    C0]  handle_softirqs+0x1eb/0x9e0
[  165.639363][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  165.640999][    C0]  ? run_ksoftirqd+0x5b/0x60
[  165.642433][    C0]  ? rcu_is_watching+0x12/0xc0
[  165.643929][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  165.645572][    C0]  run_ksoftirqd+0x38/0x60
[  165.646976][    C0]  smpboot_thread_fn+0x3d3/0xaa0
[  165.648528][    C0]  ? kthread+0x13a/0x450
[  165.649814][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  165.651498][    C0]  kthread+0x370/0x450
[  165.652784][    C0]  ? __pfx_kthread+0x10/0x10
[  165.654234][    C0]  ret_from_fork+0x754/0xd80
[  165.655844][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  165.657439][    C0]  ? __switch_to+0x7b4/0x1120
[  165.658923][    C0]  ? __pfx_kthread+0x10/0x10
[  165.660367][    C0]  ret_from_fork_asm+0x1a/0x30
[  165.661886][    C0]  </TASK>
[  165.663499][    C0] Kernel Offset: disabled
[  165.664869][    C0] Rebooting in 86400 seconds..