last executing test programs:

1m56.1688189s ago: executing program 2 (id=2405):
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041817aaaaaaaaaa10e8fad507b2c422b6ffa902c586"], 0x1a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffee000000000000000000000000000bbff02f4ff0000000000000000000000018c00907800800ccb"], 0x0)

1m55.462973852s ago: executing program 2 (id=2411):
socket(0x2, 0x3, 0x6)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m55.25026252s ago: executing program 2 (id=2414):
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x1010, 0xffffffffffffffff, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="330520000a00160006007ef52f555f2ab34eb67eabe2f3febf30f8784f997b00000080b122516dce92cc8bde1d664d697d8213", 0x33, 0x4001, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"})
r1 = syz_open_pts(r0, 0x20000)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x4)

1m54.186842778s ago: executing program 2 (id=2421):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4002014)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

1m54.066708037s ago: executing program 2 (id=2425):
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58)
userfaultfd(0x80001)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x68}}, 0x40)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x48042, 0x14b)
write(r1, &(0x7f0000000000)='3', 0x4e)
mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[])
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./dev\x00', 0x1ff)
syz_usb_disconnect(r0)

1m52.563275284s ago: executing program 2 (id=2438):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0)
mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_mtu=0x500})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback, 0x0, 0x1}]}]}, 0xfc}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000800)='A', 0x9c4, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0xc00, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid}]}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f89", @ANYRESHEX, @ANYBLOB="c2"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)

1m36.131689685s ago: executing program 32 (id=2438):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0)
mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_mtu=0x500})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback, 0x0, 0x1}]}]}, 0xfc}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000800)='A', 0x9c4, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0xc00, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid}]}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f89", @ANYRESHEX, @ANYBLOB="c2"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)

1m23.842283624s ago: executing program 4 (id=2836):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810)
setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000200)=r1, 0x4)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x20015, 0x13, 0x10f, &(0x7f0000000b80)="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"})

1m23.714502696s ago: executing program 4 (id=2837):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
sendmsg$OSF_MSG_ADD(r1, &(0x7f00000018c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000000100)={0x175c, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x10000}, 0x7, 0x5, 0x6373, 0x3, 0x3, 'syz1\x00', "8b42d241fbe499738356c3720fd8456cf6e561148075f5546ff00ba0387e85e2", "b5c318d1cff648c994cbdf20d957d35615f4a6bddec3b61a61282b955f64ba5b", [{0x6, 0x7, {0x1, 0x5}}, {0xffe6, 0x4e, {0x3, 0x7}}, {0x7ff, 0x1, {0x3}}, {0xac9, 0xfffc, {0x0, 0x1}}, {0x6, 0x83c0, {0x0, 0xe5}}, {0x8, 0x200, {0x2, 0x401}}, {0x81, 0x5803, {0x2, 0xfffffffd}}, {0x8, 0x4ab2, {0x1, 0x589}}, {0x7ff, 0x609, {0x0, 0x5}}, {0x7, 0x9ee4, {0x1, 0x8}}, {0x9ac2, 0x7, {0x1, 0x5}}, {0x1, 0x1, {0x0, 0x4}}, {0xfff8, 0x8, {0x1, 0xf}}, {0xb, 0x5, {0x0, 0x12}}, {0xce, 0x8, {0x3}}, {0x0, 0x4, {0x3, 0x6}}, {0xe, 0x0, {0x1, 0x80}}, {0x213b, 0x6, {0x1, 0xffff06a1}}, {0x7, 0x1, {0x0, 0x3}}, {0x8, 0xf000, {0x1, 0x8}}, {0x2, 0x4, {0x3, 0x507}}, {0xa129, 0xe, {0x3, 0x1ff}}, {0x4, 0xc, {0x2, 0x4}}, {0xb, 0x0, {0x3, 0x9c2}}, {0xcca, 0x9957, {0x32511e301574662d, 0x40}}, {0x6, 0xf5, {0x2, 0xfffffffc}}, {0x1, 0xd12, {0x3, 0x4c1d}}, {0x8000, 0x6, {0x3, 0xfffffff7}}, {0x9, 0xffff, {0x2, 0xee}}, {0xfffd, 0x6, {0x3, 0x5}}, {0x1, 0x0, {0x2, 0xd}}, {0xf, 0x9, {0x3, 0x2462}}, {0x94f, 0x400, {0x2, 0x7}}, {0x4c, 0x67ce, {0x0, 0x8000}}, {0x4, 0x1, {0x0, 0x3}}, {0x5, 0x0, {0x2, 0xfffff800}}, {0x9, 0x0, {0x3, 0x9}}, {0x101, 0xd, {0x0, 0x36}}, {0x4df3, 0x6, {0x1}}, {0x3, 0x18c, {0x2, 0xfffffffb}}]}}}, {{0x254, 0x1, {{0x0, 0x1c00}, 0x10, 0xd6, 0xfff8, 0x2, 0x8, 'syz0\x00', "9e869a7e0d76c19180fcb3842a92013d5c2096ea32137f1802dd5b712459165b", "3fcafa55fd0ef0005bd2f45388bbe53316356d0bdee72a5aa57f105eba93c685", [{0x3, 0x80, {0x0, 0x5b8a}}, {0x8, 0x7, {0x3, 0x7}}, {0x1, 0x100, {0x2, 0x19a}}, {0x0, 0x9, {0x3, 0x7}}, {0x81, 0x90d3, {0x3, 0x401}}, {0x8001, 0x7fff, {0x2, 0x400}}, {0xc, 0x8, {0x3}}, {0x400, 0x800, {0x1, 0x1ff}}, {0x4, 0x2, {0x3, 0xb5f0}}, {0x5, 0x7, {0x3, 0x7}}, {0xfff, 0x3, {0x2, 0x8}}, {0x0, 0x41, {0x3, 0x7}}, {0x200, 0x8, {0x2, 0x5}}, {0x1, 0x3, {0x2, 0x1}}, {0x8, 0x8, {0x0, 0x400}}, {0x1, 0xe4, {0x1, 0x8}}, {0x81, 0x2, {0x3, 0xfffffff4}}, {0xffff, 0x8b9, {0x2, 0x2}}, {0x5, 0x3, {0x0, 0x9}}, {0x80, 0x1, {0x3}}, {0xf2, 0x3, {0x2, 0x7}}, {0x9, 0x6, {0x0, 0x8000}}, {0x10, 0x81, {0x1, 0x9}}, {0x8, 0x0, {0x1, 0xd}}, {0xf, 0x7, {0x0, 0x101}}, {0x7, 0x224, {0x0, 0xe}}, {0x0, 0x2, {0x0, 0x4b2e}}, {0x6, 0x9, {0x1, 0xe759}}, {0x4, 0x5, {0x2, 0x7}}, {0x1, 0x8, {0x3, 0x5}}, {0xd52, 0x6, {0x1, 0x5}}, {0x5, 0x3ff, {0x3, 0x7}}, {0x4, 0x7, {0x1, 0x4e}}, {0x0, 0x0, {0x2, 0xe51}}, {0x7, 0x2800, {0x3, 0x4}}, {0x100, 0x4, {0x3}}, {0x2, 0x3, {0x1, 0x1b97}}, {0x6, 0x9a, {0x2, 0x80}}, {0x3, 0x4, {0x2}}, {0x1000, 0x4, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{}, 0x9e, 0xfb, 0x3, 0x0, 0x21, 'syz1\x00', "afe06345b34cc8a412f192e802621e1ef2ca07ba8f533125fdf02bec71a89f89", "147bc55d9e7c408f2d1ad61fff204baa12f77647302a063453938ac9d5884962", [{0x7, 0x4a, {0x2, 0x4}}, {0x2, 0x3ff, {0x1, 0x3}}, {0x2ed9, 0x9, {0x1, 0x1000}}, {0xa, 0x3, {0x0, 0x4}}, {0xfff8, 0x9, {0x1}}, {0xec8, 0x7fff, {0x3}}, {0x63, 0x6, {0x3, 0x8}}, {0x145, 0x1, {0x3, 0x5}}, {0x9, 0x4, {0x3, 0x7}}, {0x3ff}, {0x7, 0x5, {0x3, 0x8}}, {0x0, 0x6, {0x0, 0x6a3}}, {0x837, 0xc, {0x3, 0x7}}, {0x9, 0xc000, {0x3, 0x5}}, {0x1, 0xc9a7, {0x0, 0xffffffff}}, {0x1, 0x39eb, {0x2, 0x3}}, {0x1, 0x7, {0x2, 0x7}}, {0x7, 0x4, {0xa8ad39ac29edada0, 0x10000}}, {0xbd8d, 0x101, {0x2, 0xb190}}, {0xfff8, 0x5, {0x1, 0x7}}, {0x9, 0x7ff, {0x0, 0x8000}}, {0x2, 0x8, {0x3, 0xffff}}, {0x8, 0x44e, {0x2, 0x8}}, {0x8, 0x401, {0x1, 0x5}}, {0x40, 0x0, {0x1, 0xfffffffa}}, {0x1, 0x7, {0x3, 0x8}}, {0x25, 0x4, {0x3, 0xf}}, {0x50b, 0x75, {0x3, 0x5}}, {0x0, 0x0, {0x1, 0x8}}, {0x8, 0xfffe, {0x0, 0x76e}}, {0x0, 0x4, {0x0, 0x1}}, {0x6, 0x1000, {0x3}}, {0x5, 0x5, {0x2, 0x68a4}}, {0x40f, 0x8, {0x2, 0x4}}, {0x0, 0x5, {0x3, 0x460}}, {0x2, 0x1, {0x2, 0x40}}, {0x101, 0x101, {0x1}}, {0x101, 0x3, {0x1, 0x6}}, {0x1, 0xb9, {0x5, 0x1}}, {0x76, 0x1, {0x0, 0x854}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x3, 0xfa, 0x7, 0x5, 0xf, 'syz0\x00', "c05974528bbaeea55894d00932f764372c3a0d5a2c550f6ab5c586f7353a2e79", "9658a96ca9ac833bb9324935f8040c373ef4ab92e3355c3f4a5045accc63002e", [{0x7, 0x6, {0x1, 0x7}}, {0x8, 0x0, {0x2, 0x7}}, {0x1ee2, 0x6, {0x1}}, {0x7, 0x1, {0x2, 0x2}}, {0x9, 0xd, {0x2, 0x1}}, {0x8f7, 0x0, {0x2, 0xb}}, {0x7fff, 0x6d, {0x3, 0x5}}, {0x7d6, 0x0, {0x3, 0x23}}, {0xfff8, 0x1, {0x1, 0x3}}, {0x1, 0xaa, {0x0, 0x2}}, {0x4, 0x9, {0x1, 0x94}}, {0x4, 0x1000, {0x0, 0x5}}, {0x7, 0x1, {0x1, 0x1}}, {0x800, 0x97d, {0x3, 0x6}}, {0x9, 0x200, {0x3, 0x9}}, {0x3, 0x0, {0x1, 0x3}}, {0x2, 0x5, {0x2, 0x2}}, {0x401, 0xb0ca, {0x2, 0xe}}, {0x3, 0x800, {0x0, 0x5}}, {0x6, 0x7fff, {0x2, 0x1}}, {0x4, 0x1, {0x2}}, {0x2, 0xfffd, {0x3, 0xac25}}, {0x9, 0x5, {0x0, 0x8}}, {0x4a8, 0x7, {0x1, 0x9}}, {0x4, 0x1000, {0x0, 0x8}}, {0x7, 0x81, {0x0, 0x6}}, {0x8, 0xf, {0x2, 0x4}}, {0x400, 0x9, {0x0, 0xd}}, {0x0, 0x401, {0x3, 0x3ff}}, {0x43, 0x5, {0x3, 0x7}}, {0x3, 0x5, {0x2, 0x8}}, {0x2, 0x6, {0x0, 0xfffff001}}, {0xf89d, 0x48c, {0x2, 0x6}}, {0x401, 0x9, {0x3, 0x26}}, {0x5, 0x0, {0x3, 0x6318}}, {0x7, 0x3, {0x1, 0x5}}, {0x30, 0x0, {0x1, 0x2e6d9d61}}, {0x8, 0xb913, {0x2, 0x800}}, {0x8000, 0x4, {0x3, 0x800}}, {0xb4a, 0xd60, {0x3, 0x400}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x2, 0x8, 0x9, 0x9, 0xa, 'syz1\x00', "95fedfd47de6a9815f67b1d429100206b3172df88eb5db62d7efc83114b456c2", "4ab13e52b0bc47b9109ec29f0d0d871cbdf68b1aa1d39d5349b70e400413e79a", [{0xc4d, 0x5, {0x3, 0x8}}, {0x7ff, 0x81, {0x0, 0x7}}, {0x9, 0xb, {0x2, 0x3}}, {0xfffb, 0x4, {0x3, 0x5}}, {0x8, 0x0, {0x1, 0x24c7}}, {0x0, 0xb, {0x3, 0x1}}, {0xa, 0x5, {0x2, 0x9}}, {0x4, 0xf, {0x2, 0x3}}, {0x0, 0x9, {0x2, 0x10000}}, {0x1, 0xfffc, {0x0, 0xf}}, {0x200, 0x2, {0x3, 0x8000}}, {0x58, 0x5, {0x3, 0x40}}, {0x1, 0x0, {0x0, 0x3}}, {0x6, 0x0, {0x2, 0x10000}}, {0x6, 0xb6, {0x2, 0x3}}, {0x9, 0x7ff, {0x1, 0x10}}, {0x40, 0x6, {0x0, 0x4}}, {0xe, 0x5, {0x2, 0x3}}, {0xf76c, 0x6, {0x1, 0x4000}}, {0x3ff, 0x0, {0x1, 0x33ab}}, {0x40, 0xf, {0x1, 0x6}}, {0x80, 0xdc, {0x0, 0x2}}, {0x4f2b, 0x5, {0x0, 0x3}}, {0x1, 0x1000, {0x3, 0x9}}, {0xff, 0x81, {0x2, 0xa}}, {0x1, 0xf10c, {0x2, 0x6}}, {0xe2d, 0xa13, {0x1, 0x3}}, {0x3, 0x3, {0x0, 0xd1}}, {0xd4, 0x1, {0x3, 0x7ee1}}, {0x9, 0xb, {0x1, 0x5}}, {0x0, 0x8, {0x3, 0x8}}, {0x3cd, 0x59c, {0x3, 0x7}}, {0x6, 0x907, {0x3, 0x9}}, {0x1, 0x35a, {0x3, 0x1ec}}, {0xfffb, 0x7, {0x2}}, {0x7, 0x4b, {0x1, 0x10001}}, {0x100, 0xff, {0x2, 0x6}}, {0x80, 0x452, {0x3, 0x70}}, {0xa, 0xffff, {0x3}}, {0x8, 0xf, {0x0, 0x80000000}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x78, 0x5a, 0x7ff, 0x5, 0x27, 'syz0\x00', "ac8d0c2db85b458c7253c77107d7ee1950f685107a44345e0224575c95a717ce", "06970940772db8cd2e1c315afcf82d390fd6611c7734c9e8c8df17c91102efad", [{0x4, 0xff, {0x3, 0x6}}, {0x4, 0x0, {0x0, 0x9}}, {0x5, 0xfffb, {0x1, 0x9}}, {0x7, 0x8, {0x3, 0xb}}, {0x0, 0x2, {0x3, 0x7}}, {0x7, 0x4, {0x2, 0x6}}, {0x0, 0xe66, {0x3, 0x8001}}, {0x3, 0x40, {0x2}}, {0xf000, 0x5, {0x3, 0x3}}, {0x3, 0xf, {0x3}}, {0x64, 0x1, {0x1, 0x9}}, {0xa, 0x3, {0x2, 0x9}}, {0xc1, 0x4, {0x1, 0x8}}, {0x4aa9, 0x7, {0x3, 0x2506}}, {0xffff, 0x9750, {0x1, 0x6}}, {0x0, 0x9, {0x2}}, {0xac, 0x6, {0x1, 0x6e}}, {0x3, 0x0, {0x2, 0x36}}, {0x6, 0x9, {0x2, 0x9}}, {0x8, 0x8e, {0x0, 0xfffff212}}, {0x8, 0x2, {0x1, 0x3}}, {0x7, 0xf, {0x0, 0x4}}, {0x0, 0xa2a1, {0x1, 0x4}}, {0x1, 0x4, {0x2, 0x800}}, {0xe, 0xca86, {0x1}}, {0xf0, 0x1, {0x3, 0x5f6f}}, {0x0, 0x10, {0x3}}, {0x3, 0x1, {0x3, 0x8}}, {0x2, 0xd, {0x3, 0x7}}, {0x80, 0x6, {0x2, 0x3}}, {0xffff, 0x7, {0x1, 0x4}}, {0xfffd, 0x1, {0x2, 0x5}}, {0x9, 0x9, {0x2, 0x6}}, {0x4, 0x2, {0x3, 0x8}}, {0x1, 0x1ff, {0x1, 0xd3}}, {0xff, 0x0, {0x0, 0x200}}, {0x3, 0x9, {0x3, 0x1}}, {0x7, 0x3, {0x1, 0x1}}, {0x200, 0x6, {0x2, 0x8}}, {0xff, 0x0, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x5, 0x4, 0x10, 0x1, 0x28, 'syz0\x00', "4cd60fbe40fddd50b51b8564f0632888aeef24971d6451c0f39739cd1b38618a", "fad180510d5f316e792b0608b37a13041b7288b59a314a2617c29af9c2365a5b", [{0xfc00, 0x8, {0x3, 0x6}}, {0x0, 0x3, {0x1, 0x4810}}, {0x6, 0x6e6f, {0x0, 0x3ff}}, {0x8, 0xfe00, {0x3, 0x2}}, {0x8, 0x6, {0x1, 0xffff6b58}}, {0x7, 0xc5, {0x3, 0x5}}, {0x9, 0x88, {0x1, 0x3}}, {0x1000, 0x7, {0x0, 0x1}}, {0x6, 0xff39, {0x0, 0x83cc}}, {0x464, 0x400, {0x1, 0x4}}, {0xfffe, 0x5, {0x1, 0xa5c}}, {0x8001, 0x8, {0x1, 0x7fffffff}}, {0x2, 0xb, {0x2, 0x100}}, {0x8, 0x401, {0x3}}, {0x8, 0x3, {0x2, 0x3ff}}, {0x2, 0x7, {0x3, 0x9}}, {0x1, 0xfff7, {0x2, 0x945}}, {0x28f, 0x1, {0x1, 0x8001}}, {0x1, 0xd20, {0x0, 0x77}}, {0x6, 0x7f, {0x1, 0x2}}, {0xc, 0x9a4, {0x2, 0x7}}, {0x1, 0x3, {0x1, 0xc0}}, {0x2, 0x6f, {0x0, 0x5}}, {0x0, 0xf2d1, {0x1, 0x1}}, {0x9, 0x8000, {0x3, 0x8}}, {0x101, 0x40, {0x0, 0x3c}}, {0x9, 0xfffa, {0x2, 0x7}}, {0x8, 0x4, {0x0, 0x8}}, {0x0, 0x101, {0x1, 0x8}}, {0x1, 0x5, {0x3, 0x5}}, {0x4, 0x401, {0x1, 0x2}}, {0x6, 0x4, {0x2, 0x1}}, {0x4, 0x2, {0x3, 0x7}}, {0x9, 0x9, {0x2, 0x6}}, {0x44d, 0x0, {0x3, 0xfffffff8}}, {0x907, 0xff81, {0x0, 0x7a90f7a4}}, {0x23, 0x8, {0x2, 0x1}}, {0xe161, 0x24ad, {0x0, 0x9}}, {0xfc00, 0x91bd, {0x1, 0xfffffffb}}, {0x0, 0xbf, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x3}, 0x90, 0x6, 0x7f, 0x7, 0x6, 'syz0\x00', "4780ca0429b5bc683bb5226adab5f9e0cd5bb12439a372c0c4d2ad712fa86f27", "6abccc021d9423931776071bcb3ba759e552fe4a000f724732f699fa527fcdd3", [{0x0, 0x5, {0x0, 0x8}}, {0x62, 0xda, {0x3, 0x7}}, {0x5, 0x5, {0x3, 0x9}}, {0x5, 0x7, {0x2, 0x2ed5}}, {0x1, 0x8, {0x3, 0x1}}, {0x1, 0xfffc, {0x3, 0x3}}, {0xf889, 0x9, {0x2, 0xfffffff9}}, {0x786, 0x3, {0x2, 0x10001}}, {0x2, 0x5, {0x0, 0x7ff}}, {0x6174, 0xefa, {0x1, 0xffffff01}}, {0x4, 0x7, {0x3, 0x10}}, {0x4, 0x0, {0x2, 0x6}}, {0x0, 0xfe3, {0x0, 0x8}}, {0x7, 0x30d, {0x1, 0x5}}, {0xb5df, 0x8, {0x0, 0xffffffff}}, {0x2f, 0x5, {0x3, 0x5}}, {0x0, 0x23, {0x3, 0xff}}, {0x1, 0x8e, {0x3, 0x1}}, {0x1, 0x4, {0x2, 0x44fc}}, {0x3, 0x5, {0x0, 0x8bb}}, {0x8e48, 0x2849, {0x1, 0x6}}, {0x6, 0x800, {0x1}}, {0x1, 0xaadd, {0x1, 0x8001}}, {0x1c, 0x1, {0x1, 0x7a}}, {0xfffc, 0x7, {0x0, 0x8}}, {0x6, 0x7, {0x2, 0x4}}, {0x16, 0x2, {0x3, 0x1}}, {0x2, 0xff, {0x2, 0x3ff}}, {0x6, 0x1, {0x0, 0x6}}, {0x4, 0x8001, {0x3, 0x2}}, {0x5, 0x4, {0x2, 0xb3}}, {0x7, 0x9, {0x1}}, {0x800, 0x7, {0x1, 0x18}}, {0x6, 0x7, {0x1, 0x3}}, {0xde76, 0x0, {0x3, 0x1}}, {0x0, 0x7f, {0x3, 0x4}}, {0x1, 0x30, {0x0, 0x4a124d95}}, {0x7, 0x3, {0x3, 0x87}}, {0x9, 0x9, {0x3, 0x7}}, {0x8, 0xdd69, {0xfea21a82a075c7e, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x5, 0xff, 0x57, 0x1, 0x13, 'syz0\x00', "d741f1d40aaaec6675dc947f0b1ed5d55c25da9c8042e9588d46f2bf9a1f10fa", "4f87a11a8197dc1927db73fd33b267164d4b94b1e00b587b538ecd8635f49e57", [{0x0, 0x4, {0x3, 0x2}}, {0x6, 0x2, {0x1, 0x5}}, {0x4, 0x208, {0x2, 0x10000}}, {0x4992, 0x1ff, {0x1, 0x9}}, {0x8, 0x8, {0x1, 0x6}}, {0xf, 0x2, {0x1, 0xffff}}, {0x7, 0x5, {0x2}}, {0x7, 0xd2c, {0x0, 0x5}}, {0x1, 0x5f0, {0x0, 0x6}}, {0x0, 0x100, {0x0, 0x200}}, {0x2, 0x1, {0x2, 0x8}}, {0x3, 0x7, {0x1, 0x6}}, {0x6, 0x3ff, {0x2, 0x8000}}, {0x2, 0x4, {0x3}}, {0xf, 0x5, {0x1, 0xfffffffc}}, {0x2, 0x9, {0x1, 0x9}}, {0x7, 0x1ff, {0x3, 0x8000000}}, {0x10, 0x0, {0x0, 0xffffffff}}, {0x1ff, 0x3, {0x0, 0x3}}, {0x0, 0x8, {0x1, 0x5}}, {0x5, 0x5, {0x0, 0x8}}, {0x8, 0x40, {0x0, 0x1000}}, {0x3, 0x2b05, {0x2}}, {0x6, 0x7ff, {0x0, 0x3}}, {0x6, 0x3, {0x2, 0xe8}}, {0x0, 0x0, {0x1}}, {0x8, 0x6800, {0x0, 0xfffffff7}}, {0x3, 0x5, {0x3, 0xfffffffb}}, {0xfffe, 0x101, {0x0, 0x3}}, {0x0, 0xfff, {0x1, 0x400}}, {0x2, 0x8, {0x2, 0xd}}, {0xa47f, 0x40, {0x2, 0x8}}, {0x4f, 0x4, {0x1}}, {0x5, 0x0, {0x3, 0x7}}, {0x7f, 0x3, {0x0, 0x4}}, {0x0, 0xa27, {0x3, 0x7}}, {0xdf02, 0x8f, {0x2}}, {0x0, 0x5, {0x1, 0xfffffff2}}, {0x6, 0x7, {0x2, 0x2}}, {0x4, 0x5, {0x3, 0x40}}]}}}, {{0x254, 0x1, {{0x0, 0xcd4}, 0x9, 0x80, 0xa8f6, 0x2, 0x8, 'syz0\x00', "e3cf563d3e65d1744c44a36b600b1f4e4582f2f6c7a77dcfa77e60554d1a07b4", "45ef7453e620362100c859009427a3b331139b3d37352346a9a2dd6344e06a0b", [{0x9, 0x586}, {0x4e, 0x2, {0x3, 0xe6}}, {0x6, 0x5, {0x2, 0xacf}}, {0x3, 0x3, {0x3, 0xda0d}}, {0xfff8, 0xd00, {0x1, 0xe47}}, {0x5, 0x3, {0x1, 0x8000}}, {0x5, 0x0, {0x2}}, {0x1, 0x100, {0x0, 0x10001}}, {0x4, 0x8}, {0x80, 0x8, {0x0, 0x10001}}, {0x1, 0x287, {0x3, 0x9da}}, {0x1, 0x4, {0x3, 0xc}}, {0x1, 0x8, {0x1, 0x1ff}}, {0x3, 0x3, {0x2, 0x7}}, {0x0, 0x80, {0x3, 0x10001}}, {0x0, 0x40, {0x1, 0x81}}, {0x1ff, 0x1000, {0x3, 0x90}}, {0x8, 0x7, {0x1, 0x4}}, {0x2, 0x3, {0x3, 0x4}}, {0x80, 0xc8, {0x3, 0x7fdc}}, {0xfffb, 0xa6, {0x1, 0x2}}, {0x4, 0x0, {0x3, 0x4457}}, {0x7, 0x8, {0x0, 0x2}}, {0x2, 0xc5, {0x0, 0x7fffffff}}, {0xff, 0x1, {0x2, 0xffff}}, {0x7ff, 0x7, {0x0, 0xf6ca}}, {0x5, 0xff, {0x1, 0x2}}, {0xffff, 0x3, {0x0, 0xfffffff0}}, {0x8, 0x1ff}, {0xbe, 0xa, {0x0, 0x800}}, {0x9, 0x6ae, {0x2, 0x7fffffff}}, {0x1, 0x8, {0x0, 0x8}}, {0xd, 0x9, {0x1, 0xd9}}, {0x6, 0x0, {0x2, 0x7f}}, {0xfff9, 0x10, {0x1, 0x2}}, {0x7, 0x8, {0x0, 0x4}}, {0x2, 0x8001, {0x2, 0xa}}, {0x1, 0x3, {0x1, 0xa}}, {0x0, 0x8935, {0x1, 0xd}}, {0x101, 0x7413, {0x0, 0x4}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x4041}], 0x1, 0x9)

1m23.713495443s ago: executing program 4 (id=2838):
syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
preadv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x5c, 0x57e0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
fallocate(r1, 0x100000000000011, 0x2000, 0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xe1000d00)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, r1}, 0x94)

1m23.648663779s ago: executing program 4 (id=2841):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed282811"], 0xfdef)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)

1m21.42718561s ago: executing program 4 (id=2857):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)="2200b6", 0x3)
r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000240))

1m21.353332093s ago: executing program 4 (id=2859):
ioperm(0x0, 0x8001, 0x9)
ioperm(0xff, 0x400, 0x8000000000000000)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r1 = socket(0x2a, 0x2, 0x9)
connect(r1, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80)
connect(r1, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80)
ioperm(0x4, 0x62a, 0x4)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x2, 0x291, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000)
ioperm(0x0, 0x80, 0x0)

1m5.271266853s ago: executing program 33 (id=2859):
ioperm(0x0, 0x8001, 0x9)
ioperm(0xff, 0x400, 0x8000000000000000)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r1 = socket(0x2a, 0x2, 0x9)
connect(r1, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80)
connect(r1, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80)
ioperm(0x4, 0x62a, 0x4)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x2, 0x291, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000)
ioperm(0x0, 0x80, 0x0)

48.235262298s ago: executing program 1 (id=3468):
socket$netlink(0x10, 0x3, 0x0)
mount$tmpfs(0x0, &(0x7f0000001bc0)='.\x00', &(0x7f0000001c00), 0x400, &(0x7f0000000000)={[{@noswap}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
r2 = socket$unix(0x1, 0x5, 0x0)
creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffe0, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

48.234502489s ago: executing program 1 (id=3469):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3db6cc11c32074bde057f2a70e2401c52d1312e21f0bffe35fcfef27b9f5a5f0449dc6ed562f164d8c908a06ca1f2ff4f731c1b3f66350600a9143cf642cf1c0425c80a91b1c1fb8b937a395d4f21831cc75df589cc853344239e374b1edec9d524b539b196a7edd894d39f8c4d54bc530ec20095546a716a259fd2773908b43f4953ee2e124f884f3fb6a41a30b7c89e7b148076b82a806b605fdfb3d93a12692e15a0db2be19ec405f79c39a9eaccf5cb60da31617ae10eec06f5134cbc763202a825f964b2aedb072f9d2a032affcef57003346d8ba4ae47f4637379890a6776fb53854944307abd33a15d602db47775ce4", @ANYBLOB="42a36ad4804a5d2d32288f8efa3076714a67fe5d18ae6c5daec3424258b9f5e2a825e207d7d7ef23fbe514e216a1b13212e00d5b4663a3ec37a6658b0badfe6c1b5b", @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES16=0x0, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7c, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32)
mremap(&(0x7f00000c5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000a45000/0x2000)=nil) (async)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xdf) (async)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async, rerun: 64)
syz_io_uring_complete(0x0, r4) (async, rerun: 64)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x200010, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 32)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 32)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 64)
write(r6, &(0x7f0000000000)='3', 0x4e) (rerun: 64)
execve(&(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000740)=ANY=[@ANYRES64], &(0x7f0000000040)=""/3, 0x44, 0x3, 0x1, 0x5}, 0x28) (async)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x8004587d, 0x0)

48.001344171s ago: executing program 1 (id=3475):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
r2 = socket(0x23, 0x80805, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000400)="0d000000010001", 0x7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

47.925745517s ago: executing program 1 (id=3479):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0)
setregid(0xffffffffffffffff, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2802, 0x10)
r2 = openat(r1, 0x0, 0x20041, 0x0)
write(r2, &(0x7f0000000040)='en', 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000070a01030100000000000000020000000900010073797a30000000000900020073797a3000000000"], 0x2c}}, 0x0)
recvfrom(r3, &(0x7f0000000500), 0x1000, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
recvfrom(r6, &(0x7f00000001c0)=""/49, 0x31, 0x10142, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5})
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r4, r4, 0x1, 0x9, 0x5})

47.874138388s ago: executing program 1 (id=3482):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfff0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x7ffffffe}}, @RTA_OIF={0x8, 0x4, r2}]}, 0x38}, 0x1, 0x11}, 0x0)

47.787465513s ago: executing program 1 (id=3485):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x4c00, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

47.705361326s ago: executing program 34 (id=3485):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x4c00, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

45.248730658s ago: executing program 5 (id=3532):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
shutdown(r2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty, <r4=>0x0}, &(0x7f0000000080)=0x14)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r5=>0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newroute={0x50, 0x18, 0x100, 0x70bd22, 0x25dfdbfc, {0x2, 0x80, 0x20, 0x7, 0xfe, 0x4, 0x0, 0x3, 0x900}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_UID={0x8, 0x19, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x2, 0x1, r3}}]}, 0x50}, 0x1, 0x11}, 0x0)

45.248481613s ago: executing program 5 (id=3533):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "270be059cb1d66638f1c668bcdd2d6cf2ea7333a5c57719cf90361898a02dc657426229994706cf7d0d176c86b78e02ae401767415475d90bb5758e2db3cae52", 0x22}, 0x48, 0xfffffffffffffffc)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x6, 0x8, 0x2], 0x0, 0x200306})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x15, 0x3, 'wlc\x00', 0x22, 0x0, 0x6c}, 0x2c)
keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000080)='}')
keyctl$link(0x8, r0, r1)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, 0x0)
r7 = fsopen(&(0x7f0000000700)='affs\x00', 0x1)
r8 = fcntl$dupfd(r7, 0x0, r7)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
r9 = eventfd2(0x1, 0x800)
r10 = eventfd2(0xfd16, 0x80002)
r11 = eventfd(0x6)
r12 = eventfd2(0xe6e, 0x1)
io_submit(0x0, 0x8, &(0x7f0000000b00)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x8000, r5, &(0x7f0000000400)="5680327ae0810266eb79c5d9edd6374cb28f4ae97353aa5e096bf028f9143f54eeaa65818a3ce04b3852efb384a0110fc645ba4afec5d6e2a614acc259d9a49b0573c18457f21165afd53035267223975f127064682f20bd367dfacb9892d8bb5989ae704e04ae34cea6cf96fd37a188341e9aa4951bd78cea1d2f55073d47ce226209faab02efd1a82b65c2c717f8f004de1e62480737f6427da1740d99a46d8cf0119293c843b6969e9346cd3095f09bd5fc1b37bbb7361160d2ede78ad6e9699412d0dc0672181be0243cdb4768e75437560bd55226e6dc6183818f2da0a29cb3c9c172e2381b8dd577f66de7850ff6f27015f691", 0xf6, 0xfffffffffffffffc, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x589, r5, &(0x7f0000000540)="95c79839a3c04cb3b50411d08a2b1eeb678c7f84f78dead8cca1ef06a073cac29c24c902c50fc97dee3b397d77757ed62503407f1f809bb45c5c270e2a240a7f3c26c37531d2aa1cd7805ccd65bb65bbe2b6101f972afe629a3f3e6b45ec2498761dfb988742f15c3c44f519d8aee18540b720100628f85cab965cc0df3cac424446efa6ddce558eb31d517d422035c6904080", 0x93, 0x9, 0x0, 0x2, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x9, r2, &(0x7f0000000640)="7e8f8a1061fa450700493615daeb96184503a8a4714ae243f1a4a70c81d8c21cffbe1e35d1871c9f4f484ed6160b7efc656a530cdbfc8b", 0x37, 0x1d7, 0x0, 0x4, r9}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000700)="674bb17f440c92", 0x7, 0xd, 0x0, 0x1, r10}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x7, r6, &(0x7f0000000780)="f58b304e31958ca399e36d04b6aaa7c498be2fae8ac930cee2a47a62d3001a642538f682ef647dddbd7174e6fbc30010bd398289911f7015a9bae8524f2c8491c96088f4449846ac271fd39562e02df39af9323468a75f054f8952594e8203bf5199a3ffe4ade118ebf4", 0x6a, 0x6, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x80, r5, &(0x7f0000000840)="63845e4178ec88c154ba6d12286ebb0e558252c3f2e9c6b6631b7e9bd075bba1e692861d23102f6d0437ed54273fd78b2e59660866f41b9f5717f573b0a359ea74fa3ba49c487ec3bd6c8fcb1a3fea66ad7abc26057f77b774852ead54f2c47a0fc9ce92f631c8ce49c3495777893037e5a29eb352f7d83acff160eb0a05631eff50677a26fed6d3aba1757be8f0ab852735b53264e7c0269adb9c5b59316c62610167e3885943dde60e5449aa2dbeb22ced14702909c7bfd4057c908219ea72ac467be674cab1fa92b5a7bad8f94954255cd40a3de2b4c0dcd41d23b5254eb6da2cf72c3f417e3b58baba04", 0xec, 0xa1d, 0x0, 0x7}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x5, 0x3, r6, &(0x7f0000000980)="ca6541c1239d9c3f5086572c165f7f9f6596b49691d3383cde9b9b8f93f1736eaf266c6c5f068310b6eaba9192e3662ae525c50eaa49f976e0305bb27cb2d0e0fca1a25eea18def3ee43de9aaaef6bd389cd8a65aa61ecb28ef5ef8b3543", 0x5e, 0x0, 0x0, 0x1, r11}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x6, r6, &(0x7f0000000a40)="e21684d7b376eb7ab5ead300122d1456c339040d76134422cccdc2adbd2d880e07f3c0145ce3d157255c60a9813576606d84dffedc94ac7b006d4bdd00b95e657fbe", 0x42, 0x131f, 0x0, 0x1, r12}])
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c010000100013070000000000008000ac1414aa000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000027bd7000000000000200000000000000000000004c001400636d6163286165732900"/244], 0x13c}}, 0x0)

45.052827364s ago: executing program 5 (id=3535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x7fe2, 0x2, 0x1, 0x35f}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f34, 0x80000, 0x0, 0x328}, 0xffffffffffffffff, 0x0, <r1=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x46df, 0x1000, 0x1, 0x70}, 0xffffffffffffffff, 0x0, <r2=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2d0, 0x8, 0x2, 0x2b4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd252, 0x8, 0x2, 0x2c9}}], 0x4, &(0x7f0000001880)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, 0x0, '\x00', {0x1, 0xd2b, 0x0, &(0x7f0000000880)=@buf_1k="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"}}, &(0x7f0000001900))
socket$inet6_udp(0xa, 0x2, 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x2214088, &(0x7f0000001940)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRES32, @ANYRES8=r2, @ANYRES8=r1, @ANYRESOCT=0x0])
chdir(&(0x7f0000000100)='./file0\x00')
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, 0x0, 0x30, 0x0, @val=@iter={&(0x7f0000000300), 0x10}}, 0x20)
r9 = syz_create_resource$binfmt(&(0x7f0000000480)='./file0\x00')
r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff)
mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r10, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20200, 0x80)
close_range(r8, r8, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r11)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x9, 0x6}, {0xf000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x6, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0x2, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x25000, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x8, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x2000, 0x4000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0xb000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0x0, 0xdddd1000, [0x80000001, 0x9, 0xffffffffffffffff, 0xfffffffffffffffe]})
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r12, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x2}, 0xe)
syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x9492, 0x400, 0x6, 0x388}, &(0x7f0000000b40), &(0x7f0000000ac0), &(0x7f0000000b00))

44.625913892s ago: executing program 5 (id=3541):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000200)='tmpfs\x00', 0x2000000000000000, &(0x7f0000000300)='casefold,strict_encoding\x00')

44.409475766s ago: executing program 5 (id=3543):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000005c0)="00372a6a909d873e6f1b654d708022fb453fe58a26d59b8f9b1b75961826780e224fdca084dd270a07dc06d837a8d6448007ee52fe0af5b735716f29ecf87bce39", 0x41)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002c80)={'batadv0\x00', <r3=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002d40)={0x10, <r4=>0x0}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e00)={{r0, <r5=>0xffffffffffffffff}, &(0x7f0000002d80), &(0x7f0000002dc0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x4, 0xc, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff6}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @generic={0x7, 0x0, 0x9, 0x8, 0x2}]}, &(0x7f0000001c40)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x41000, 0xc, '\x00', r3, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000002cc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002d00)={0x4, 0x3, 0x40, 0x401}, 0x10, r4, r0, 0x1, &(0x7f0000002e40)=[r0, r0, r0, r0, r0, r0, r5, r0, r0], &(0x7f0000002e80)=[{0x4, 0x2, 0x10, 0x4}], 0x10, 0x4}, 0x94)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002f80)=ANY=[@ANYBLOB="500000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="4604090000400000280012800900010a000000001800028006000100010000004e374f87b80600050088a00000041f5f8d68000500", @ANYRES32=r8, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x1dcd6500}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x78e7, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', r9}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18)
io_uring_enter(r10, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000420000000e0001006e65740f0002006e657464657673696d8300000d0087006c325f64726f70730000000008008e0000000000"], 0x4c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xd0, r11, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x811}, 0x3aa44b94a857b935)
sendmsg$nl_route_sched(r1, &(0x7f0000001a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000019c0)={&(0x7f0000003000)=@deltfilter={0x1720, 0x2d, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xa, 0x3}, {0x7, 0xe}, {0x4, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xd8, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x100}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_ACT={0x9c, 0x9, 0x0, 0x1, [@m_sample={0x98, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x101}]}, {0x62, 0x6, "9767c8e5c492dfdadbc6d99577247ca9cdc6a9b908f1e1fdab6417d12fd0c1f95a64ac1a32c27b942bc06cd813a4c30ba7aae7441724c28c704383ecceb1bdaf34d9cabd1e04ebcff8fc87a1e8763abe79ac1a4bbe34705fc48aecf3d1b8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0xfd}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x5}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5eef}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x9375}, @TCA_FLOW_MODE={0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e22}]}}, @filter_kind_options=@f_basic={{0xa}, {0x15ac, 0x2, [@TCA_BASIC_EMATCHES={0x15a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1264, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xe000, 0x7, 0x2}, {{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x401, 0x4, 0xb}, [@TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_VAR="9438811ba69df026dd", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0c1cfc39", @TCF_META_TYPE_VAR='_B', @TCF_META_TYPE_VAR="defd1a59c7", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="49cf3352", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="44fed3cd9e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x1}, {0xf543, 0xb, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7f, 0x1, 0x2}, {0xff, 0x7, 0xfffd, 0x0, 0x5, 0x1, 0x1}}}, @TCF_EM_IPT={0x60, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x20, 0x5, "bb9a396c70f56f192c39d56b1554163336d88b676e0a44218a28fc46"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x53b96d5ffb46d697}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xc13}, "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"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x16c, 0x2, 0x0, 0x0, {{0x5, 0x9, 0xf69}, [@TCA_EM_IPT_MATCH_DATA={0x76, 0x5, "e971edaaaef419d5654526c2ca7fabaed8fb2090f717b004005d3ae7c118eb853ad13f8d8e4c15744603a767c969188d5092db193676c52a1c80360ea183b0d8588cd20a2a54e8a713863718fe3d108cc1a0c2062f60465f4aed759123e80c38873b56867c7bcaa9348a31a0915119020e31"}, @TCA_EM_IPT_MATCH_DATA={0xb2, 0x5, "f78477e5fa2304182ed66d2962bd6c52f3a4a5829ebf9e7dcc6b7250a397d6006b1b60b407748e0858358d6b9c6144440ed564c48ecabba77af06eb7e1fced86c81cb980d68ab4b1d5ce14d4b8f55bc3603e1d5c931816723b2e71807fef9f45a951b5231f426cf9101e9d4dd8210b9c7582c35e63aee8145e426da3eec912ecfc0fd3af4bd6eb38016ba162e6126309d6a1f97cd3af1078332de0ac581bfadd18db8e0c1b367f14cccf04e7d238"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x299, 0x7, 0x3}, {{0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x10}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb255}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xd0bf, 0x2, 0x2}, {0x673, 0x4, 0x0, "33eec898"}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xc, 0x9, 0xec8e}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2b0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0xfff}, {0x0, 0x8, 0x1, 0x4, 0x8, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0xe}, {0xffffffffffffffff, 0x0, 0x4}}}, @TCF_EM_IPT={0xe4, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x8, 0x5, "29ad5938"}, @TCA_EM_IPT_MATCH_DATA={0x90, 0x5, "f78b59fce3aae73c799bbab7f6d06795e896e7a452b0bc756d47e56d1b9536f8e1864ddb1eb62a28dd1809ae4020e5cef374036ed09a601d49996bd185ff3a2426515271db967119b9d2e6e6a5d95732b4d7e9eb3ec98fa5feb335380d2738b16f6b0d401f4d55d490e6db12a46a066704dd138b55f14c9534518adc80982c72ce06e29e5f2d12233c6eb404"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0xb4, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="d3aa03a785fd", @TCF_META_TYPE_VAR="f7d62939703e77450d", @TCF_META_TYPE_VAR="cfb9c1139358c7f1", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='\n']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xf9, 0x1}, {0x95, 0x3, 0x1}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="cf3920", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e6200302e1be31c05ee5", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1}, {0x26, 0x3, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xdad, 0xee}, {0x80fb, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="58d4", @TCF_META_TYPE_VAR="4229f0ddabc454f65b74", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c36baf", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ae71c3"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x1f9c}, {0x0, 0x6, 0x5, 0x0, 0x9, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x100}, {0x1, 0x4, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0xa}, {{0x3, 0x1, 0x1}, {0x4}}}}, @TCF_EM_META={0xa0, 0x1, 0x0, 0x0, {{0x96bb, 0x4, 0x79}, [@TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="1e779b2a217b341094", @TCF_META_TYPE_VAR="39f669b333"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='L', @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="b91fc6", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f0a15ad9f9ce2b", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a13a838ea6", @TCF_META_TYPE_VAR="0c15a7", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b15b", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c2ec4f405e2aa8bc"]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="db49213cd03a09d5", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b727", @TCF_META_TYPE_VAR]}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xd2}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x1720}, 0x1, 0x0, 0x0, 0x8014}, 0x4008010)

44.272842061s ago: executing program 5 (id=3546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
write$tun(r0, 0x0, 0xfdef)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r6], 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000000c0)={0x0, 0x1, 0x4})
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000140)="cdf4e1d3e222c5c722350375ade141fa84b809a19617940fbf36a66e9685441c5141f58e2718d3aaf61ecf970dfc635fc49176a456254ebadbb9106e31c40d859430b03e279b271f59034012b1ccb410488f98264b1c3ed8ee41455e6e1f02ce220f4d66c5c388a5281b33f4ba634f91dec81f83cf85584c32d110fca59c1dbcaab27d09ff60ad41ab9a23f307b2fa3d2886d1973bffb5466ce2f9637f750094203eaa9d")
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

27.803361906s ago: executing program 35 (id=3546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
write$tun(r0, 0x0, 0xfdef)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r6], 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000000c0)={0x0, 0x1, 0x4})
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000140)="cdf4e1d3e222c5c722350375ade141fa84b809a19617940fbf36a66e9685441c5141f58e2718d3aaf61ecf970dfc635fc49176a456254ebadbb9106e31c40d859430b03e279b271f59034012b1ccb410488f98264b1c3ed8ee41455e6e1f02ce220f4d66c5c388a5281b33f4ba634f91dec81f83cf85584c32d110fca59c1dbcaab27d09ff60ad41ab9a23f307b2fa3d2886d1973bffb5466ce2f9637f750094203eaa9d")
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

2.708368258s ago: executing program 0 (id=3822):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r1, &(0x7f0000000d00)='1:0\n', 0x4)

2.589434168s ago: executing program 0 (id=3824):
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fefffaff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.508767648s ago: executing program 0 (id=3826):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x4, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0xb38, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

2.298037597s ago: executing program 0 (id=3833):
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r4=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x82}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0)

1.688014684s ago: executing program 6 (id=3838):
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(r3, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55)
fcntl$setlease(r6, 0x400, 0x0)

1.413022655s ago: executing program 3 (id=3844):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2})
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

1.216889618s ago: executing program 0 (id=3845):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d", 0x7, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.103321098s ago: executing program 3 (id=3848):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x8040480)
connect(r2, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x31}, 0x80)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0)

1.101951779s ago: executing program 3 (id=3849):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0)

1.050383713s ago: executing program 0 (id=3850):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_ublk_setup_io_uring(0x2169, 0x0, 0x0, 0x0, 0x0)
ioperm(0x6, 0x8, 0x10001)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

1.048803658s ago: executing program 3 (id=3851):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

969.34251ms ago: executing program 3 (id=3854):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00')
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
eventfd(0xfffffdfe)
socket$can_bcm(0x1d, 0x2, 0x2)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x8, 0x2, 0x7, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

887.119093ms ago: executing program 7 (id=3856):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)

748.526718ms ago: executing program 7 (id=3857):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
write(r0, &(0x7f0000000080)='4', 0x1)

703.192041ms ago: executing program 6 (id=3858):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x8040480)
connect(r2, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x31}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0)

655.587397ms ago: executing program 6 (id=3859):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

617.309969ms ago: executing program 7 (id=3860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

616.694192ms ago: executing program 6 (id=3861):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

522.541226ms ago: executing program 7 (id=3862):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

465.729503ms ago: executing program 6 (id=3863):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000940)=[{&(0x7f0000000700)=""/105, 0x69}], 0x1)

395.381132ms ago: executing program 6 (id=3864):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x48)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000)
sched_setattr(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)

314.323521ms ago: executing program 7 (id=3865):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x80000001, 0x28100)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
bind$x25(r1, &(0x7f0000000080), 0x12)
connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)

46.472295ms ago: executing program 3 (id=3866):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, 0x0}, 0x94)
r2 = io_uring_setup(0x2fd7, &(0x7f0000000040)={0x0, 0x2e20, 0x1c080, 0x1, 0x20002f7})
syz_open_dev$video4linux(&(0x7f0000000000), 0x89, 0x101100)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

0s ago: executing program 7 (id=3867):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x8040480)
connect(r2, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x31}, 0x80)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0)

0s ago: executing program 3 (id=3869):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00')

kernel console output (not intermixed with test programs):

 dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.862812][   T43] audit: type=1400 audit(2000000035.953:1025): avc:  denied  { write } for  pid=13796 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.883519][T13792] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  249.940723][   T43] audit: type=1400 audit(2000000036.028:1026): avc:  denied  { write } for  pid=13801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  250.002536][   T43] audit: type=1400 audit(2000000036.084:1027): avc:  denied  { write } for  pid=13807 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  250.071500][ T5837] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  250.076054][   T43] audit: type=1400 audit(2000000036.159:1028): avc:  denied  { write } for  pid=13810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  250.178461][T13832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2936'.
[  250.230938][ T5837] usb 6-1: Using ep0 maxpacket: 8
[  250.231401][ T5837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  250.232222][ T5837] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  250.232245][ T5837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  250.232259][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  250.232271][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  250.232282][ T5837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.232302][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.357420][T13846] bridge_slave_0: left allmulticast mode
[  250.357443][T13846] bridge_slave_0: left promiscuous mode
[  250.357751][T13846] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.362179][T13846] bridge_slave_1: left allmulticast mode
[  250.362370][T13846] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.369367][T13846] bond0: (slave bond_slave_0): Releasing backup interface
[  250.376572][T13846] bond0: (slave bond_slave_1): Releasing backup interface
[  250.379000][T13846] team0: Port device team_slave_0 removed
[  250.381810][T13846] team0: Port device team_slave_1 removed
[  250.382107][T13846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.383499][T13846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.391992][T13846] bond1: (slave veth3): Releasing active interface
[  250.454686][ T5837] usb 6-1: usb_control_msg returned -32
[  250.454711][ T5837] usbtmc 6-1:16.0: can't read capabilities
[  250.475948][T13851] netlink: 'syz.3.2944': attribute type 1 has an invalid length.
[  250.490350][T13851] 8021q: adding VLAN 0 to HW filter on device bond6
[  250.640452][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'.
[  250.915048][T13889] Cannot find del_set index 0 as target
[  251.015043][T13893] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2955'.
[  251.207612][T13897] usbtmc 6-1:16.0: usb_clear_halt returned -32
[  251.426885][ T5848] usb 6-1: USB disconnect, device number 25
[  251.649612][T13903] overlayfs: failed to clone upperpath
[  252.005383][T13921] tipc: Enabling of bearer <et:b> rejected, media not registered
[  253.069380][T13960] openvswitch: netlink: nsh attr 350 is out of range max 3
[  253.095051][T13965] fuse: fd is not a fuse device
[  253.125188][T13968] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.2979'.
[  253.874316][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  253.874348][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  253.874363][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  253.874381][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  253.874397][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  253.874414][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  253.874429][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  253.874449][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  253.874462][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  253.874471][T14031] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  253.874480][T14031] jffs2: Further such events for this erase block will not be printed
[  253.874528][T14031] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  253.874533][T14031] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  254.384710][T14041] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  254.513739][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2998'.
[  254.742221][T14063] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  254.852450][T14072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3006'.
[  254.864243][T14072] 8021q: VLANs not supported on ip6tnl0
[  254.905353][T14076] pimreg9: entered allmulticast mode
[  254.982134][T14078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14078 comm=syz.3.3008
[  254.982242][T14078] netlink: 'syz.3.3008': attribute type 12 has an invalid length.
[  254.982255][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3008'.
[  254.982687][T14078] netlink: 'syz.3.3008': attribute type 12 has an invalid length.
[  254.982695][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3008'.
[  255.512416][T14090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3009'.
[  255.681720][T14099] tmpfs: Using encoding : utf8-12.1.0
[  255.857836][   T43] kauditd_printk_skb: 22 callbacks suppressed
[  255.857849][   T43] audit: type=1800 audit(2000000041.568:1051): pid=14104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3015" name="file1" dev="tmpfs" ino=4359 res=0 errno=0
[  256.178833][T14120] openvswitch: netlink: Missing valid actions attribute.
[  256.178855][T14120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.206827][T14122] CIFS: VFS: bad security option: krb5iý
[  256.207807][ T5746] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  256.503197][T14129] IPv6: NLM_F_CREATE should be specified when creating new route
[  256.772563][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3027'.
[  256.772593][T14134] ip6gretap0: entered promiscuous mode
[  256.906845][T14148] ip_tables: iptables: counters copy to user failed while replacing table
[  257.114203][T14158] IPv6: NLM_F_CREATE should be specified when creating new route
[  257.114276][T14158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  257.114285][T14158] IPv6: NLM_F_CREATE should be set when creating new route
[  257.114316][T14158] IPv6: NLM_F_CREATE should be set when creating new route
[  257.114335][T14158] IPv6: NLM_F_CREATE should be set when creating new route
[  257.115024][T14158] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3036'.
[  257.306476][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  257.306504][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  257.306520][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  257.306537][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  257.306553][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  257.306568][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  257.306583][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  257.306598][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  257.306614][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  257.306629][T14165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  257.306643][T14165] jffs2: Further such events for this erase block will not be printed
[  257.306716][T14165] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  257.306725][T14165] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  257.527533][   T43] audit: type=1804 audit(2000000043.130:1052): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3044" name="cgroup.controllers" dev="tmpfs" ino=4802 res=1 errno=0
[  257.527586][   T43] audit: type=1800 audit(2000000043.130:1053): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3044" name="cgroup.controllers" dev="tmpfs" ino=4802 res=0 errno=0
[  257.563060][T14182] ip_tables: iptables: counters copy to user failed while replacing table
[  257.811015][T14188] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  257.811713][   T43] audit: type=1800 audit(2000000043.393:1054): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186119 res=0 errno=0
[  257.825336][T14189] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock
[  258.149361][ T9567] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  258.238090][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'.
[  258.312391][ T9567] usb 6-1: not running at top speed; connect to a high speed hub
[  258.312423][ T9567] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.313267][ T9567] usb 6-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  258.313283][ T9567] usb 6-1: config 1 interface 0 has no altsetting 0
[  258.314916][ T9567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.314930][ T9567] usb 6-1: Product: syz
[  258.314937][ T9567] usb 6-1: Manufacturer: syz
[  258.314945][ T9567] usb 6-1: SerialNumber: syz
[  258.320073][   T43] audit: type=1800 audit(2000000043.870:1055): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186161 res=0 errno=0
[  258.325648][   T43] audit: type=1800 audit(2000000043.879:1056): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=186193 res=0 errno=0
[  258.326575][   T43] audit: type=1800 audit(2000000043.879:1057): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=186168 res=0 errno=0
[  258.327420][   T43] audit: type=1800 audit(2000000043.879:1058): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=186169 res=0 errno=0
[  258.540768][ T9567] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  258.542235][T14206] Cannot find del_set index 0 as target
[  258.542883][   T43] audit: type=1800 audit(2000000044.076:1059): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=186190 res=0 errno=0
[  258.543201][   T43] audit: type=1800 audit(2000000044.076:1060): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=186191 res=0 errno=0
[  258.543363][ T9567] usb 6-1: USB disconnect, device number 26
[  259.429522][T14233] netlink: 'syz.1.3065': attribute type 29 has an invalid length.
[  259.508233][T14241] Cannot find del_set index 0 as target
[  259.578512][T14249] xt_l2tp: v2 sid > 0xffff: 4294967294
[  259.605342][T14253] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  259.616273][T14253] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  259.624797][T14253] iommufd_mock iommufd_mock2: Adding to iommu group 11
[  259.627879][T14253] iommufd_mock iommufd_mock3: Adding to iommu group 12
[  259.636621][T14253] iommufd_mock iommufd_mock4: Adding to iommu group 13
[  259.649097][T14253] iommufd_mock iommufd_mock5: Adding to iommu group 14
[  259.669103][T14253] iommufd_mock iommufd_mock6: Adding to iommu group 15
[  259.670487][T14253] iommufd_mock iommufd_mock7: Adding to iommu group 16
[  259.677964][T14253] iommufd_mock iommufd_mock8: Adding to iommu group 17
[  259.679256][T14253] iommufd_mock iommufd_mock9: Adding to iommu group 18
[  259.687189][T14253] iommufd_mock iommufd_mock10: Adding to iommu group 19
[  259.688230][T14253] iommufd_mock iommufd_mock11: Adding to iommu group 20
[  259.692954][T14253] iommufd_mock iommufd_mock12: Adding to iommu group 21
[  259.698969][T14253] iommufd_mock iommufd_mock13: Adding to iommu group 22
[  259.699727][T14253] iommufd_mock iommufd_mock14: Adding to iommu group 23
[  259.700434][T14253] iommufd_mock iommufd_mock15: Adding to iommu group 24
[  259.704915][T14253] iommufd_mock iommufd_mock16: Adding to iommu group 25
[  259.705941][T14253] iommufd_mock iommufd_mock17: Adding to iommu group 26
[  259.706626][T14253] iommufd_mock iommufd_mock18: Adding to iommu group 27
[  259.707404][T14253] iommufd_mock iommufd_mock19: Adding to iommu group 28
[  259.726862][T14253] iommufd_mock iommufd_mock20: Adding to iommu group 29
[  259.727730][T14253] iommufd_mock iommufd_mock21: Adding to iommu group 30
[  259.728506][T14253] iommufd_mock iommufd_mock22: Adding to iommu group 31
[  259.738288][T14253] iommufd_mock iommufd_mock23: Adding to iommu group 32
[  259.739210][T14253] iommufd_mock iommufd_mock24: Adding to iommu group 33
[  259.740821][T14253] iommufd_mock iommufd_mock25: Adding to iommu group 34
[  259.760730][T14253] iommufd_mock iommufd_mock26: Adding to iommu group 35
[  259.761580][T14253] iommufd_mock iommufd_mock27: Adding to iommu group 36
[  259.762700][T14253] iommufd_mock iommufd_mock28: Adding to iommu group 37
[  259.763602][T14253] iommufd_mock iommufd_mock29: Adding to iommu group 38
[  259.764324][T14253] iommufd_mock iommufd_mock30: Adding to iommu group 39
[  259.765050][T14253] iommufd_mock iommufd_mock31: Adding to iommu group 40
[  259.775657][T14253] iommufd_mock iommufd_mock32: Adding to iommu group 41
[  259.780473][T14253] iommufd_mock iommufd_mock33: Adding to iommu group 42
[  259.781198][T14253] iommufd_mock iommufd_mock34: Adding to iommu group 43
[  259.781908][T14253] iommufd_mock iommufd_mock35: Adding to iommu group 44
[  259.792438][T14253] iommufd_mock iommufd_mock36: Adding to iommu group 45
[  259.793188][T14253] iommufd_mock iommufd_mock37: Adding to iommu group 46
[  259.793944][T14253] iommufd_mock iommufd_mock38: Adding to iommu group 47
[  259.797222][T14253] iommufd_mock iommufd_mock39: Adding to iommu group 48
[  259.801102][T14253] iommufd_mock iommufd_mock40: Adding to iommu group 49
[  259.814848][T14253] iommufd_mock iommufd_mock41: Adding to iommu group 50
[  259.820284][T14253] iommufd_mock iommufd_mock42: Adding to iommu group 51
[  259.821137][T14253] iommufd_mock iommufd_mock43: Adding to iommu group 52
[  259.821956][T14253] iommufd_mock iommufd_mock44: Adding to iommu group 53
[  259.829968][T14253] iommufd_mock iommufd_mock45: Adding to iommu group 54
[  259.830787][T14253] iommufd_mock iommufd_mock46: Adding to iommu group 55
[  259.831545][T14253] iommufd_mock iommufd_mock47: Adding to iommu group 56
[  259.832955][T14253] iommufd_mock iommufd_mock48: Adding to iommu group 57
[  259.833700][T14253] iommufd_mock iommufd_mock49: Adding to iommu group 58
[  259.834437][T14253] iommufd_mock iommufd_mock50: Adding to iommu group 59
[  259.840870][T14253] iommufd_mock iommufd_mock51: Adding to iommu group 60
[  259.842598][T14253] iommufd_mock iommufd_mock52: Adding to iommu group 61
[  259.843321][T14253] iommufd_mock iommufd_mock53: Adding to iommu group 62
[  259.844149][T14253] iommufd_mock iommufd_mock54: Adding to iommu group 63
[  259.849005][T14253] iommufd_mock iommufd_mock55: Adding to iommu group 64
[  259.849766][T14253] iommufd_mock iommufd_mock56: Adding to iommu group 65
[  259.850477][T14253] iommufd_mock iommufd_mock57: Adding to iommu group 66
[  259.854553][T14253] iommufd_mock iommufd_mock58: Adding to iommu group 67
[  259.855304][T14253] iommufd_mock iommufd_mock59: Adding to iommu group 68
[  259.856026][T14253] iommufd_mock iommufd_mock60: Adding to iommu group 69
[  259.877817][T14253] iommufd_mock iommufd_mock61: Adding to iommu group 70
[  259.886269][T14253] iommufd_mock iommufd_mock62: Adding to iommu group 71
[  259.893321][T14253] iommufd_mock iommufd_mock63: Adding to iommu group 72
[  259.900903][T14253] iommufd_mock iommufd_mock64: Adding to iommu group 73
[  259.929554][T14271] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3079'.
[  260.085059][T14279] syz_tun: entered allmulticast mode
[  260.167441][T14278] syz_tun: left allmulticast mode
[  260.197010][T14292] netlink: 'syz.3.3085': attribute type 4 has an invalid length.
[  260.278732][T14298] PKCS7: Unsupported SignedData version
[  260.451346][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'.
[  260.752830][T14313] veth0: Caught tx_queue_len zero misconfig
[  260.863790][T14322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3097'.
[  261.062956][T14341] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3104'.
[  261.106793][T14345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  261.110890][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3106'.
[  261.110904][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3106'.
[  261.133944][T14347] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3107'.
[  261.428654][   T43] kauditd_printk_skb: 69 callbacks suppressed
[  261.428671][   T43] audit: type=1800 audit(2000000046.780:1130): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203536 res=0 errno=0
[  261.444629][   T43] audit: type=1800 audit(2000000046.799:1131): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203547 res=0 errno=0
[  261.453592][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  261.458611][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  261.465348][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  261.484739][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  261.487160][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  261.517630][   T43] audit: type=1800 audit(2000000046.864:1132): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203566 res=0 errno=0
[  261.525324][   T43] audit: type=1800 audit(2000000046.864:1133): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203577 res=0 errno=0
[  261.903960][T14388] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3119'.
[  261.904408][T14388] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2
[  261.936641][   T43] audit: type=1400 audit(2000000047.257:1134): avc:  denied  { bind } for  pid=14389 comm="syz.1.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  261.937608][T14391] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  261.938959][T14391] loop5: detected capacity change from 0 to 7
[  261.946991][T14391] Dev loop5: unable to read RDB block 7
[  261.947038][T14391]  loop5: unable to read partition table
[  261.947138][T14391] loop5: partition table beyond EOD, truncated
[  261.947154][T14391] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  262.125536][T14361] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.125628][T14361] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.125684][T14361] bridge_slave_0: entered allmulticast mode
[  262.126432][T14361] bridge_slave_0: entered promiscuous mode
[  262.128157][T14361] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.128252][T14361] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.128331][T14361] bridge_slave_1: entered allmulticast mode
[  262.129202][T14361] bridge_slave_1: entered promiscuous mode
[  262.144229][T14361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.147497][T14361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.159470][T14361] team0: Port device team_slave_0 added
[  262.160707][T14361] team0: Port device team_slave_1 added
[  262.186628][T14361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.186641][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  262.186655][T14361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.187560][T14361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.187569][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  262.187582][T14361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.224280][T14361] hsr_slave_0: entered promiscuous mode
[  262.224708][T14361] hsr_slave_1: entered promiscuous mode
[  262.224981][T14361] debugfs: 'hsr0' already exists in 'hsr'
[  262.224991][T14361] Cannot create hsr debugfs directory
[  262.331215][   T43] audit: type=1800 audit(2000000047.622:1135): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211667 res=0 errno=0
[  262.334383][   T43] audit: type=1800 audit(2000000047.622:1136): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=211672 res=0 errno=0
[  262.334415][   T43] audit: type=1800 audit(2000000047.622:1137): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=211676 res=0 errno=0
[  262.334436][   T43] audit: type=1800 audit(2000000047.622:1138): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=211675 res=0 errno=0
[  262.343145][   T43] audit: type=1800 audit(2000000047.641:1139): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=211678 res=0 errno=0
[  262.444855][ T5823] bridge_slave_1: left allmulticast mode
[  262.446764][ T5823] bridge_slave_1: left promiscuous mode
[  262.448638][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.458223][ T5823] bridge_slave_0: left allmulticast mode
[  262.458247][ T5823] bridge_slave_0: left promiscuous mode
[  262.458467][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.597299][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.599399][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.600100][ T5823] bond0 (unregistering): Released all slaves
[  262.626925][ T5789] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0
[  262.661055][ T5789] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  262.661094][ T5789] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.661117][ T5789] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.739161][T14406] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3123'.
[  262.839240][T14414] Cannot find map_set index 135 as target
[  262.847344][T14361] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  262.853421][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  262.854014][T14361] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  262.863395][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  262.864019][T14361] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  262.865899][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  262.866437][T14361] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  262.868118][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  262.902415][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2
[  262.944427][ T5746] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  262.982354][T14361] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.988651][T14361] 8021q: adding VLAN 0 to HW filter on device team0
[  262.991632][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.991701][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.998942][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.999018][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.042741][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3129'.
[  263.138465][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3
[  263.317556][ T5823] hsr_slave_0: left promiscuous mode
[  263.318978][ T5823] hsr_slave_1: left promiscuous mode
[  263.319431][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.320036][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.390343][T14470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  263.390355][T14470] IPv6: NLM_F_CREATE should be set when creating new route
[  263.390377][T14470] IPv6: NLM_F_CREATE should be set when creating new route
[  263.450985][ T5823] team0 (unregistering): Port device team_slave_1 removed
[  263.456179][ T5823] team0 (unregistering): Port device team_slave_0 removed
[  263.523573][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4
[  263.639465][T14361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.674295][ T5746] Bluetooth: hci2: command tx timeout
[  263.680836][T14508] tmpfs: Using encoding : utf8-12.1.0
[  263.736217][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5
[  263.817212][T14361] veth0_vlan: entered promiscuous mode
[  263.872387][T14361] veth1_vlan: entered promiscuous mode
[  263.886557][T14526] tmpfs: Using encoding : utf8-12.1.0
[  263.890584][T14361] veth0_macvtap: entered promiscuous mode
[  263.893746][T14361] veth1_macvtap: entered promiscuous mode
[  263.900400][T14361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.902398][T14361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.930882][ T5822] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.967976][ T5789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.968019][ T5789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.968051][ T5789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.977680][ T5823] IPVS: stop unused estimator thread 0...
[  264.064363][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.064377][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.092150][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.092172][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.429433][T14542] tmpfs: Using encoding : utf8-12.1.0
[  264.604869][T14546] Cannot find del_set index 0 as target
[  264.665769][T14551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  264.665782][T14551] IPv6: NLM_F_CREATE should be set when creating new route
[  264.665795][T14551] IPv6: NLM_F_CREATE should be set when creating new route
[  265.457310][T14628] __nla_validate_parse: 6 callbacks suppressed
[  265.457329][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3187'.
[  265.495539][T14630] tunl0: Caught tx_queue_len zero misconfig
[  265.528942][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'.
[  265.529010][T14632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.633380][T14638] Cannot find del_set index 0 as target
[  265.886995][T14654] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3199'.
[  265.892779][T14654] tmpfs: Using encoding : utf8-12.1.0
[  265.896822][ T5746] Bluetooth: hci2: command tx timeout
[  265.946859][T14660] Cannot find del_set index 0 as target
[  266.022425][T14669] tmpfs: Unknown parameter 'usrquota
'
[  266.165076][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[  266.197090][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'.
[  266.220903][T14685] FAULT_INJECTION: forcing a failure.
[  266.220903][T14685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.220934][T14685] CPU: 0 UID: 0 PID: 14685 Comm: syz.1.3207 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.220959][T14685] Tainted: [L]=SOFTLOCKUP
[  266.220965][T14685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  266.220975][T14685] Call Trace:
[  266.220982][T14685]  <TASK>
[  266.220989][T14685]  dump_stack_lvl+0x100/0x190
[  266.221031][T14685]  should_fail_ex.cold+0x5/0xa
[  266.221062][T14685]  _copy_from_user+0x2e/0xd0
[  266.221088][T14685]  copy_msghdr_from_user+0x9f/0x4c0
[  266.221114][T14685]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  266.221140][T14685]  ? lock_acquire+0x1d1/0x380
[  266.221176][T14685]  ? get_pid_task+0x2a/0x250
[  266.221205][T14685]  ___sys_sendmsg+0x106/0x1e0
[  266.221226][T14685]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.221245][T14685]  ? get_pid_task+0x106/0x250
[  266.221276][T14685]  ? find_held_lock+0x2b/0x80
[  266.221315][T14685]  __sys_sendmsg+0x160/0x210
[  266.221341][T14685]  ? __pfx___sys_sendmsg+0x10/0x10
[  266.221378][T14685]  do_syscall_64+0x123/0x790
[  266.221404][T14685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.221421][T14685] RIP: 0033:0x7ff114b9e159
[  266.221435][T14685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.221451][T14685] RSP: 002b:00007ff115a5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.221468][T14685] RAX: ffffffffffffffda RBX: 00007ff114e25fa0 RCX: 00007ff114b9e159
[  266.221479][T14685] RDX: 0000000000001000 RSI: 0000200000000200 RDI: 0000000000000003
[  266.221489][T14685] RBP: 00007ff115a5a090 R08: 0000000000000000 R09: 0000000000000000
[  266.221500][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.221510][T14685] R13: 00007ff114e26038 R14: 00007ff114e25fa0 R15: 00007ffccd31bdd8
[  266.221533][T14685]  </TASK>
[  266.269070][T14688] netlink: 774 bytes leftover after parsing attributes in process `syz.1.3208'.
[  266.271176][T14688] ip6tnl0: Caught tx_queue_len zero misconfig
[  266.273390][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3208'.
[  266.458835][T14705] Cannot find del_set index 0 as target
[  266.828057][   T43] kauditd_printk_skb: 56 callbacks suppressed
[  266.828075][   T43] audit: type=1804 audit(2000000051.833:1196): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3226" name="cgroup.controllers" dev="tmpfs" ino=4692 res=1 errno=0
[  266.828162][   T43] audit: type=1800 audit(2000000051.833:1197): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3226" name="cgroup.controllers" dev="tmpfs" ino=4692 res=0 errno=0
[  267.025728][T14754] IPv6: NLM_F_CREATE should be specified when creating new route
[  267.209998][T14763] netlink: 'syz.3.3233': attribute type 1 has an invalid length.
[  267.234820][T14763] 8021q: adding VLAN 0 to HW filter on device bond7
[  267.276230][   T43] audit: type=1804 audit(2000000052.255:1198): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3235" name="cgroup.controllers" dev="tmpfs" ino=4723 res=1 errno=0
[  267.276369][   T43] audit: type=1800 audit(2000000052.255:1199): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3235" name="cgroup.controllers" dev="tmpfs" ino=4723 res=0 errno=0
[  267.416953][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'.
[  267.417011][T14779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  267.563786][T14787] 9p: Bad value for 'rfdno'
[  267.569319][T14787] netlink: 'syz.3.3242': attribute type 1 has an invalid length.
[  267.640203][T14799] fuse: fd is not a fuse device
[  267.671823][T14802] xt_bpf: check failed: parse error
[  267.678192][T14786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.690434][T14807] tmpfs: Using encoding : utf8-12.1.0
[  267.755173][   T43] audit: type=1326 audit(2000000052.694:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.5.3247" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff88919e159 code=0x0
[  268.119419][ T5746] Bluetooth: hci2: command tx timeout
[  268.271817][   T43] audit: type=1804 audit(2000000053.190:1201): pid=14849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3253" name="/newroot/723/cgroup.controllers" dev="tmpfs" ino=3881 res=1 errno=0
[  268.272060][   T43] audit: type=1800 audit(2000000053.190:1202): pid=14849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3253" name="cgroup.controllers" dev="tmpfs" ino=3881 res=0 errno=0
[  268.284291][   T43] audit: type=1804 audit(2000000053.200:1203): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3254" name="cgroup.controllers" dev="tmpfs" ino=4748 res=1 errno=0
[  268.284484][   T43] audit: type=1800 audit(2000000053.200:1204): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3254" name="cgroup.controllers" dev="tmpfs" ino=4748 res=0 errno=0
[  268.426943][T14863] syzkaller0: entered promiscuous mode
[  268.426965][T14863] syzkaller0: entered allmulticast mode
[  268.791330][   T38] IPVS: starting estimator thread 0...
[  268.791377][   T43] audit: type=1400 audit(2000000053.668:1205): avc:  denied  { connect } for  pid=14887 comm="syz.5.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  268.802535][T14889] IPVS: set_ctl: invalid protocol: 0 172.20.20.15:20009
[  268.802731][T14889] IPVS: lc: FWM 3 0x00000003 - no destination available
[  268.881435][T14894] IPVS: using max 24 ests per chain, 57600 per kthread
[  268.978137][T14911] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[  269.298100][T14929] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3279'.
[  269.419226][T14934] overlayfs: failed to clone upperpath
[  269.428926][T14934] team0: entered allmulticast mode
[  269.430781][T14934] team0 (unregistering): left allmulticast mode
[  269.620940][T14939] tipc: Cannot configure node identity twice
[  269.888798][T14945] netlink: 'syz.0.3285': attribute type 10 has an invalid length.
[  269.888818][T14945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3285'.
[  270.036408][T14963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3290'.
[  270.036429][T14963] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  270.037606][T14961] IPv6: NLM_F_CREATE should be specified when creating new route
[  270.037720][T14961] IPv6: Can't replace route, no match found
[  270.303262][T14987] Cannot find del_set index 0 as target
[  270.342103][ T5746] Bluetooth: hci2: command tx timeout
[  270.663085][T15006] tipc: Enabled bearer <udp:syz2>, priority 10
[  270.663723][T15006] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  271.296790][T15023] Cannot find del_set index 0 as target
[  271.320458][ T5837] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  271.464059][ T5837] usb 6-1: device descriptor read/64, error -71
[  271.616656][T15030] SELinux:  Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped).
[  271.657551][T15032] __nla_validate_parse: 3 callbacks suppressed
[  271.657569][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'.
[  271.700074][T15034] overlayfs: failed to clone upperpath
[  271.720589][ T5837] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  271.735659][ T5746] Bluetooth: hci1: Malformed LE Event: 0x0b
[  271.735797][T15036] netlink: del zone limit has 4 unknown bytes
[  271.848839][ T5844] tipc: Node number set to 2878372812
[  271.870488][ T5837] usb 6-1: device descriptor read/64, error -71
[  271.988323][ T5837] usb usb6-port1: attempt power cycle
[  272.351200][ T5837] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  272.357198][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'.
[  272.369787][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'.
[  272.369837][T15062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  272.373081][ T5837] usb 6-1: device descriptor read/8, error -71
[  272.466198][T15069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3329'.
[  272.502314][T15077] tmpfs: Using encoding : utf8-12.1.0
[  272.640336][ T5837] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  272.661358][ T5837] usb 6-1: device descriptor read/8, error -71
[  272.778812][ T5837] usb usb6-port1: unable to enumerate USB device
[  273.180341][T15109] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  273.183732][T15109] bond3 (unregistering): Released all slaves
[  273.224723][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3347'.
[  273.224737][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3347'.
[  273.230241][T15113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=15113 comm=syz.0.3347
[  273.299400][T15120] Cannot find del_set index 0 as target
[  273.396124][   T43] kauditd_printk_skb: 13 callbacks suppressed
[  273.396136][   T43] audit: type=1400 audit(2000000057.972:1219): avc:  denied  { remount } for  pid=15125 comm="syz.0.3353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  273.510920][T15130] kAFS: unable to lookup cell '.'
[  273.869738][   T43] audit: type=1400 audit(2000000058.421:1220): avc:  denied  { connect } for  pid=15134 comm="syz.3.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  273.909513][T15138] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3357'.
[  274.197847][   T43] audit: type=1400 audit(2000000058.730:1221): avc:  denied  { mount } for  pid=15148 comm="syz.3.3362" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  274.234470][T15155] xt_REDIRECT: bad rangesize 26624.
[  274.359643][T15161] tmpfs: Using encoding : utf8-12.1.0
[  274.420411][   T43] audit: type=1400 audit(2000000058.936:1222): avc:  denied  { connect } for  pid=15164 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  274.481073][   T43] audit: type=1400 audit(2000000058.992:1223): avc:  denied  { write } for  pid=15168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.522824][   T43] audit: type=1800 audit(2000000059.039:1224): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3368" name="state" dev="sysfs" ino=862 res=0 errno=0
[  274.561351][   T43] audit: type=1400 audit(2000000059.067:1225): avc:  denied  { write } for  pid=15174 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.698319][T15187] overlayfs: failed to resolve 'work': -2
[  274.742507][   T43] audit: type=1400 audit(2000000059.236:1226): avc:  denied  { write } for  pid=15190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.786476][T15197] tmpfs: Using encoding : utf8-12.1.0
[  274.820171][   T43] audit: type=1400 audit(2000000059.320:1227): avc:  denied  { write } for  pid=15198 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  275.169491][T15217] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3384'.
[  275.247341][T15222] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  275.255700][T15222] netlink: 'syz.3.3387': attribute type 11 has an invalid length.
[  275.389695][   T43] audit: type=1400 audit(2000000059.844:1228): avc:  denied  { read } for  pid=15227 comm="syz.5.3388" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  275.390207][T15228] syz.5.3388 (15228): attempted to duplicate a private mapping with mremap.  This is not supported.
[  275.436439][T15231] Cannot find del_set index 0 as target
[  275.679665][T15244] tipc: Enabled bearer <eth:batadv0>, priority 10
[  275.766889][T15256] tmpfs: Using encoding : utf8-12.1.0
[  275.797742][T15258] kernel read not supported for file /policy (pid: 15258 comm: syz.5.3399)
[  275.830193][T15258] can0: slcan on pts0.
[  275.932514][T15258] can0 (unregistered): slcan off pts0.
[  275.979316][T15267] Cannot find del_set index 0 as target
[  276.126732][T15280] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  276.745139][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3412'.
[  276.800418][T15321] overlayfs: failed to clone upperpath
[  276.866613][T15329] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  276.867561][T15329] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20005
[  276.968820][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3423'.
[  276.968866][T15337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  276.976306][T15339] IPv6: NLM_F_CREATE should be specified when creating new route
[  277.074507][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3425'.
[  277.074530][T15348] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3425'.
[  277.074576][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3425'.
[  277.102548][T15350] syzkaller0: entered promiscuous mode
[  277.102563][T15350] syzkaller0: entered allmulticast mode
[  277.386574][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'.
[  277.386622][T15365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  277.392416][T15367] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3435'.
[  277.504357][T15383] IPv6: Can't replace route, no match found
[  277.613109][T15389] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3445'.
[  277.627321][T15398] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3447'.
[  277.639925][T15400] Cannot find del_set index 0 as target
[  277.733999][T15412] veth0_macvtap: Caught tx_queue_len zero misconfig
[  277.967007][T15429] binder: 15427:15429 ioctl 8933 2000000001c0 returned -22
[  278.293049][T15449] fuse: fd is not a fuse device
[  278.360335][T15451] veth0_macvtap: Caught tx_queue_len zero misconfig
[  278.456486][T15463] netlink: 'syz.3.3471': attribute type 1 has an invalid length.
[  278.476067][T15463] bond9: entered promiscuous mode
[  278.476114][T15463] bond9: entered allmulticast mode
[  278.476452][T15463] 8021q: adding VLAN 0 to HW filter on device bond9
[  278.493918][T15463] erspan1: entered allmulticast mode
[  278.498503][T15463] bond9: (slave erspan1): making interface the new active one
[  278.498524][T15463] erspan1: entered promiscuous mode
[  278.500459][T15463] bond9: (slave erspan1): Enslaving as an active interface with an up link
[  278.536847][T15466] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3472'.
[  278.581477][T15468] syzkaller0: entered promiscuous mode
[  278.581498][T15468] syzkaller0: entered allmulticast mode
[  278.771777][T15486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15486 comm=syz.3.3483
[  278.772152][T15486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3483'.
[  278.852321][   T43] kauditd_printk_skb: 25 callbacks suppressed
[  278.852337][   T43] audit: type=1400 audit(2000000063.082:1254): avc:  denied  { connect } for  pid=15489 comm="syz.5.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  278.996545][   T43] audit: type=1800 audit(2000000063.213:1255): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216495 res=0 errno=0
[  279.012655][   T43] audit: type=1400 audit(2000000063.241:1256): avc:  denied  { nlmsg_read } for  pid=15499 comm="syz.0.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  279.012699][   T43] audit: type=1800 audit(2000000063.241:1257): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216506 res=0 errno=0
[  279.013306][   T43] audit: type=1400 audit(2000000063.241:1258): avc:  denied  { ioctl } for  pid=15498 comm="syz-executor" path="socket:[118255]" dev="sockfs" ino=118255 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  279.022127][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  279.032075][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  279.038462][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  279.044987][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  279.045528][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  279.053175][   T43] audit: type=1800 audit(2000000063.278:1259): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216525 res=0 errno=0
[  279.063335][   T43] audit: type=1800 audit(2000000063.288:1260): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216536 res=0 errno=0
[  279.106714][   T43] audit: type=1400 audit(2000000063.325:1261): avc:  denied  { ioctl } for  pid=15505 comm="syz.0.3491" path="socket:[117497]" dev="sockfs" ino=117497 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  279.127877][   T43] audit: type=1800 audit(2000000063.344:1262): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216547 res=0 errno=0
[  279.130903][   T43] audit: type=1800 audit(2000000063.344:1263): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216559 res=0 errno=0
[  279.217016][T15521] netlink: 'syz.5.3495': attribute type 1 has an invalid length.
[  279.231266][T15521] 8021q: adding VLAN 0 to HW filter on device bond1
[  279.263842][T15521] bond1: (slave gretap1): making interface the new active one
[  279.268117][T15521] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  279.279421][T15521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15521 comm=syz.5.3495
[  279.342937][ T5822] dummy0: left allmulticast mode
[  279.342989][ T5822] dummy0: left promiscuous mode
[  279.343263][ T5822] bridge0: port 3(dummy0) entered disabled state
[  279.353316][ T5822] bridge_slave_1: left allmulticast mode
[  279.353338][ T5822] bridge_slave_1: left promiscuous mode
[  279.353525][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.366796][ T5822] bridge_slave_0: left allmulticast mode
[  279.366813][ T5822] bridge_slave_0: left promiscuous mode
[  279.366910][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.385984][T15533] overlayfs: failed to clone upperpath
[  279.421418][T15538] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3499'.
[  279.518880][T15545] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  279.540631][T15545] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  279.597648][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.604416][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.606418][ T5822] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  279.610997][ T5822] tipc: Resetting bearer <eth:batadv0>
[  279.612432][ T5822] bond0 (unregistering): Released all slaves
[  279.619310][ T5822] bond1 (unregistering): Released all slaves
[  279.629883][ T5822] bond2 (unregistering): Released all slaves
[  279.639607][ T5822] bond3 (unregistering): Released all slaves
[  279.647215][ T5822] bond4 (unregistering): Released all slaves
[  279.664190][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6
[  279.664499][ T5823] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0
[  279.665157][ T5823] netdevsim netdevsim1 eth9: set [0, 0] type 1 family 0 port 8472 - 0
[  279.665193][ T5823] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0
[  279.665226][ T5823] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0
[  279.679517][T15550] syzkaller0: entered promiscuous mode
[  279.679531][T15550] syzkaller0: entered allmulticast mode
[  279.755116][ T5822] tipc: Disabling bearer <eth:batadv0>
[  279.757210][ T5822] tipc: Left network mode
[  279.842788][T15566] IPv6: Can't replace route, no match found
[  279.973912][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7
[  280.151810][ T5822] hsr_slave_0: left promiscuous mode
[  280.152629][ T5822] hsr_slave_1: left promiscuous mode
[  280.153442][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.154492][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.300298][ T5822] team0 (unregistering): Port device team_slave_1 removed
[  280.305265][ T5822] team0 (unregistering): Port device team_slave_0 removed
[  280.384070][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8
[  280.480269][T15498] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.480315][T15498] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.480407][T15498] bridge_slave_0: entered allmulticast mode
[  280.481229][T15498] bridge_slave_0: entered promiscuous mode
[  280.501864][T15498] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.501954][T15498] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.502055][T15498] bridge_slave_1: entered allmulticast mode
[  280.503492][T15498] bridge_slave_1: entered promiscuous mode
[  280.551529][T15498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.553199][T15498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.574670][T15498] team0: Port device team_slave_0 added
[  280.577017][T15498] team0: Port device team_slave_1 added
[  280.596842][T15498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.596855][T15498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.596868][T15498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.597671][T15498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.597679][T15498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.597692][T15498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.658612][T15498] hsr_slave_0: entered promiscuous mode
[  280.659067][T15498] hsr_slave_1: entered promiscuous mode
[  280.660845][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9
[  280.784632][ T5822] IPVS: stop unused estimator thread 0...
[  280.917685][T15498] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  280.929645][T15498] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  280.930504][T15498] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  280.941441][T15498] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  280.942212][T15498] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  280.954447][T15498] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  280.955262][T15498] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  280.958995][T15498] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  280.989553][T15498] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.989632][T15498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.989819][T15498] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.989903][T15498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.017156][T15648] Cannot find del_set index 0 as target
[  281.041559][T15498] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.044197][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.045544][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.055461][T15498] 8021q: adding VLAN 0 to HW filter on device team0
[  281.061401][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.061487][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.071522][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.071569][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.133557][T15657] netlink: 'syz.3.3528': attribute type 1 has an invalid length.
[  281.160876][T15657] 8021q: adding VLAN 0 to HW filter on device bond10
[  281.178015][T15657] bond10: (slave gretap1): making interface the new active one
[  281.179479][T15657] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  281.201055][ T5746] Bluetooth: hci3: command tx timeout
[  281.415906][T15676] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  281.426716][T15498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.427815][T15676] kvm: pic: single mode not supported
[  281.428282][T15676] picdev_read: 502 callbacks suppressed
[  281.428300][T15676] kvm: pic: non byte read
[  281.431869][T15676] kvm: pic: level sensitive irq not supported
[  281.432495][T15676] kvm: pic: non byte read
[  281.435938][T15676] kvm: pic: level sensitive irq not supported
[  281.436397][T15676] kvm: pic: non byte read
[  281.438351][T15676] kvm: pic: level sensitive irq not supported
[  281.438874][T15676] kvm: pic: non byte read
[  281.440839][T15676] kvm: pic: level sensitive irq not supported
[  281.441290][T15676] kvm: pic: non byte read
[  281.445811][T15676] kvm: pic: level sensitive irq not supported
[  281.446563][T15676] kvm: pic: non byte read
[  281.448699][T15676] kvm: pic: level sensitive irq not supported
[  281.449157][T15676] kvm: pic: non byte read
[  281.452588][T15676] kvm: pic: level sensitive irq not supported
[  281.453072][T15676] kvm: pic: non byte read
[  281.632990][T15697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=15697 comm=syz.0.3536
[  281.732367][T15498] veth0_vlan: entered promiscuous mode
[  281.741617][T15498] veth1_vlan: entered promiscuous mode
[  281.790229][T15498] veth0_macvtap: entered promiscuous mode
[  281.798585][T15498] veth1_macvtap: entered promiscuous mode
[  281.841971][T15498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.850355][T15498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.874354][ T5822] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.874574][ T5822] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.874608][ T5822] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.874637][ T5822] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.022473][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.022495][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.038156][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.038170][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.957990][T15741] fuse: fd is not a fuse device
[  282.972589][T15740] __nla_validate_parse: 7 callbacks suppressed
[  282.972602][T15740] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3550'.
[  282.981663][T15745] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3551'.
[  283.023559][T15749] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3553'.
[  283.023890][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3553'.
[  283.024243][T15748] Cannot find del_set index 0 as target
[  283.432469][ T5746] Bluetooth: hci3: command tx timeout
[  283.567238][T15776] Cannot find del_set index 0 as target
[  283.605996][T15780] IPv6: NLM_F_CREATE should be specified when creating new route
[  283.606130][T15780] IPv6: Can't replace route, no match found
[  283.617860][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3560'.
[  283.804601][T15785] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3565'.
[  283.804624][T15785] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3565'.
[  283.804638][T15785] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3565'.
[  283.808438][T15786] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3565'.
[  283.808453][T15786] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3565'.
[  283.923491][T15790] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  284.187132][T15809] Cannot find del_set index 0 as target
[  284.204553][T15811] kAFS: Can only specify source 'none' with -o dyn
[  284.432707][T15830] IPv6: Can't replace route, no match found
[  284.612006][T15850] fuse: fd is not a fuse device
[  284.867548][T15867] IPv6: Can't replace route, no match found
[  284.881043][   T43] kauditd_printk_skb: 45 callbacks suppressed
[  284.881055][   T43] audit: type=1800 audit(2000000068.725:1309): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227428 res=0 errno=0
[  284.884722][   T43] audit: type=1800 audit(2000000068.725:1310): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=227432 res=0 errno=0
[  284.884751][   T43] audit: type=1800 audit(2000000068.725:1311): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=227436 res=0 errno=0
[  284.884773][   T43] audit: type=1800 audit(2000000068.725:1312): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=227435 res=0 errno=0
[  284.896238][   T43] audit: type=1800 audit(2000000068.734:1313): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=227438 res=0 errno=0
[  285.072303][T15880] tmpfs: Using encoding : utf8-12.1.0
[  285.072318][T15880] tmpfs: Unknown parameter '/trict_encoding'
[  285.092435][T15882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=15882 comm=syz.0.3597
[  285.194563][   T43] audit: type=1400 audit(2000000069.015:1314): avc:  denied  { shutdown } for  pid=15892 comm="syz.3.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  285.329788][T15906] comedi comedi2: unsupported base address 0x20
[  285.386501][   T43] audit: type=1800 audit(2000000069.193:1315): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227502 res=0 errno=0
[  285.391327][   T43] audit: type=1800 audit(2000000069.202:1316): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227512 res=0 errno=0
[  285.421099][   T43] audit: type=1800 audit(2000000069.239:1317): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227531 res=0 errno=0
[  285.424262][   T43] audit: type=1800 audit(2000000069.239:1318): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227541 res=0 errno=0
[  285.589189][T15924] ip_tables: iptables: counters copy to user failed while replacing table
[  285.644706][ T5746] Bluetooth: hci3: command tx timeout
[  285.823033][T15933] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[  285.849521][T15932] bond1: Unable to set up delay as MII monitoring is disabled
[  285.850895][T15932] bond1 (unregistering): Released all slaves
[  285.883050][T15933] bond1: Unable to set up delay as MII monitoring is disabled
[  285.884695][T15933] bond1 (unregistering): Released all slaves
[  286.127609][T15944] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  286.211161][ T5886] usb 11-1: new low-speed USB device number 2 using dummy_hcd
[  286.375735][ T5886] usb 11-1: No LPM exit latency info found, disabling LPM.
[  286.375770][ T5886] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  286.376853][ T5886] usb 11-1: config 1 interface 0 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt
[  286.376874][ T5886] usb 11-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  286.376894][ T5886] usb 11-1: config 1 interface 0 has no altsetting 0
[  286.935280][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  286.942821][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  286.944694][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  286.946697][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  286.947383][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  287.694901][T15996] gre0: Caught tx_queue_len zero misconfig
[  287.851576][T15969] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.851678][T15969] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.851749][T15969] bridge_slave_0: entered allmulticast mode
[  287.852477][T15969] bridge_slave_0: entered promiscuous mode
[  287.858681][T15969] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.858759][T15969] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.858924][T15969] bridge_slave_1: entered allmulticast mode
[  287.860969][T15969] bridge_slave_1: entered promiscuous mode
[  287.867568][ T5746] Bluetooth: hci3: command tx timeout
[  287.889762][T15969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.892006][T15969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.914719][T15969] team0: Port device team_slave_0 added
[  287.916827][T15969] team0: Port device team_slave_1 added
[  287.937386][T15969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.937402][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.937422][T15969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.938892][T15969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.938905][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.938927][T15969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.984026][T15969] hsr_slave_0: entered promiscuous mode
[  287.984471][T15969] hsr_slave_1: entered promiscuous mode
[  287.985090][T15969] debugfs: 'hsr0' already exists in 'hsr'
[  287.985103][T15969] Cannot create hsr debugfs directory
[  288.319873][T16010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  288.783641][ T1042] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[  288.851685][T15969] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  288.857278][T15969] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  288.858332][T15969] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  288.863314][T15969] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  288.864243][T15969] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  288.879923][T15969] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  288.880683][T15969] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  288.894585][T15969] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  288.944920][T15969] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.961332][T15969] 8021q: adding VLAN 0 to HW filter on device team0
[  288.972357][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.972456][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.984817][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.984945][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.044420][ T5886] usb 11-1: string descriptor 0 read error: -71
[  289.044523][ T5886] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.060471][ T5886] usb 11-1: can't set config #1, error -71
[  289.065683][ T5886] usb 11-1: USB disconnect, device number 2
[  289.160249][ T5746] Bluetooth: hci4: command tx timeout
[  289.343362][T15969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.383963][T15969] veth0_vlan: entered promiscuous mode
[  289.396622][T15969] veth1_vlan: entered promiscuous mode
[  289.438200][T15969] veth0_macvtap: entered promiscuous mode
[  289.444663][T15969] veth1_macvtap: entered promiscuous mode
[  289.463270][T15969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.466835][T15969] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.554689][  T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.554710][  T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.624066][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.624081][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.632230][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.632502][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.632762][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.632794][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.685688][T16075] tmpfs: Using encoding : utf8-12.1.0
[  289.685712][T16075] tmpfs: Unknown parameter 'strict_encoding '
[  290.347674][   T42] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  291.372390][ T5746] Bluetooth: hci4: command tx timeout
[  292.001428][   T43] kauditd_printk_skb: 35 callbacks suppressed
[  292.001447][   T43] audit: type=1400 audit(2000000075.388:1354): avc:  denied  { write } for  pid=16088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  292.057404][   T43] audit: type=1400 audit(2000000075.444:1355): avc:  denied  { write } for  pid=16091 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  292.176828][   T43] audit: type=1400 audit(2000000075.556:1356): avc:  denied  { write } for  pid=16094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  292.243708][   T43] audit: type=1400 audit(2000000075.612:1357): avc:  denied  { write } for  pid=16097 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  293.605530][ T5746] Bluetooth: hci4: command tx timeout
[  293.607968][   T43] audit: type=1400 audit(2000000076.894:1358): avc:  denied  { write } for  pid=16103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  293.658550][   T43] audit: type=1400 audit(2000000076.932:1359): avc:  denied  { write } for  pid=16106 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  293.947252][   T43] audit: type=1400 audit(2000000077.212:1360): avc:  denied  { write } for  pid=16109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  293.999483][   T43] audit: type=1400 audit(2000000077.259:1361): avc:  denied  { write } for  pid=16112 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  294.742889][   T43] audit: type=1400 audit(2000000077.952:1362): avc:  denied  { write } for  pid=16115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  294.799887][   T43] audit: type=1400 audit(2000000078.008:1363): avc:  denied  { write } for  pid=16118 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  295.817946][ T5746] Bluetooth: hci4: command tx timeout
[  298.356131][   T43] audit: type=1400 audit(2000000081.339:1364): avc:  denied  { write } for  pid=16122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  298.411356][   T43] audit: type=1400 audit(2000000081.386:1365): avc:  denied  { write } for  pid=16125 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  298.806189][   T43] audit: type=1400 audit(2000000081.760:1366): avc:  denied  { map } for  pid=16128 comm="syz.0.3634" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  298.806244][   T43] audit: type=1400 audit(2000000081.760:1367): avc:  denied  { execute } for  pid=16128 comm="syz.0.3634" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  298.850599][T16132] [U] 
[  298.863932][T16132] __nla_validate_parse: 21 callbacks suppressed
[  298.863951][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3635'.
[  298.863965][T16132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3635'.
[  298.863987][T16132] netlink: 'syz.6.3635': attribute type 12 has an invalid length.
[  298.869292][T16135] comedi comedi2: dt2817: I/O base address or length out of range
[  298.943781][   T43] audit: type=1800 audit(2000000081.882:1368): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237646 res=0 errno=0
[  298.944661][   T43] audit: type=1800 audit(2000000081.882:1369): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237657 res=0 errno=0
[  298.953315][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.961724][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.963945][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3638'.
[  298.963964][T16145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3638'.
[  298.966487][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.972410][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.975312][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.003771][   T43] audit: type=1800 audit(2000000081.947:1370): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237753 res=0 errno=0
[  299.011384][   T43] audit: type=1800 audit(2000000081.947:1371): pid=16147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237764 res=0 errno=0
[  299.212676][T16160] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3643'.
[  299.215451][T16158] netlink: 608 bytes leftover after parsing attributes in process `syz.0.3641'.
[  299.283112][   T43] audit: type=1400 audit(2000000082.209:1372): avc:  denied  { map } for  pid=16159 comm="syz.6.3643" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  299.302018][T16168] block nbd0: NBD_DISCONNECT
[  299.303331][T16168] block nbd0: Disconnected due to user request.
[  299.303351][T16168] block nbd0: shutting down sockets
[  299.396233][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.412678][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3647'.
[  299.412693][T16172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3647'.
[  299.533558][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.535149][   T43] audit: type=1400 audit(2000000082.434:1373): avc:  denied  { node_bind } for  pid=16176 comm="syz.3.3649" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  299.581547][T16179] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3650'.
[  299.647200][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.746089][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.803164][T16137] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.803291][T16137] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.803522][T16137] bridge_slave_0: entered allmulticast mode
[  299.804478][T16137] bridge_slave_0: entered promiscuous mode
[  299.806449][T16137] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.806533][T16137] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.806596][T16137] bridge_slave_1: entered allmulticast mode
[  299.807395][T16137] bridge_slave_1: entered promiscuous mode
[  299.831619][T16137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.833108][T16137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.852786][T16137] team0: Port device team_slave_0 added
[  299.854114][T16137] team0: Port device team_slave_1 added
[  299.906426][T16137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.906438][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.906453][T16137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.907443][T16137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.907451][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.907465][T16137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.963438][T16137] hsr_slave_0: entered promiscuous mode
[  299.964228][T16137] hsr_slave_1: entered promiscuous mode
[  299.964626][T16137] debugfs: 'hsr0' already exists in 'hsr'
[  299.964639][T16137] Cannot create hsr debugfs directory
[  299.972198][   T13] bridge_slave_1: left allmulticast mode
[  299.972221][   T13] bridge_slave_1: left promiscuous mode
[  299.972398][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.978135][   T13] bridge_slave_0: left allmulticast mode
[  299.978157][   T13] bridge_slave_0: left promiscuous mode
[  299.979266][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.148825][   T13] bond1 (unregistering): (slave gretap1): Releasing active interface
[  300.169638][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.173078][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.176016][   T13] bond0 (unregistering): Released all slaves
[  300.179351][   T13] bond1 (unregistering): Released all slaves
[  300.209913][ T5789] netdevsim netdevsim5 eth13: set [0, 0] type 1 family 0 port 8472 - 0
[  300.231049][ T5789] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0
[  300.305999][ T5789] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0
[  300.306041][ T5789] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0
[  300.340184][   T13] IPVS: stopping backup sync thread 15280 ...
[  300.464529][T16137] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  300.467038][T16137] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  300.467868][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10
[  300.468866][T16137] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  300.472268][T16137] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  300.474146][T16137] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  300.477137][T16137] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  300.477621][T16137] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  300.481263][T16137] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  300.560942][T16137] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.571527][T16137] 8021q: adding VLAN 0 to HW filter on device team0
[  300.576520][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.576566][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.592179][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.592224][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.604753][   T13] hsr_slave_0: left promiscuous mode
[  300.615691][   T13] hsr_slave_1: left promiscuous mode
[  300.623542][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.624545][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.631829][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.632757][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.645998][   T13] veth1_macvtap: left promiscuous mode
[  300.646027][   T13] veth0_macvtap: left promiscuous mode
[  300.646074][   T13] veth1_vlan: left promiscuous mode
[  300.646160][   T13] veth0_vlan: left promiscuous mode
[  300.770371][   T13] team0 (unregistering): Port device team_slave_1 removed
[  300.786844][   T13] team0 (unregistering): Port device team_slave_0 removed
[  300.840214][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11
[  301.065121][   T13] IPVS: stop unused estimator thread 0...
[  301.131891][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12
[  301.187711][T16137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.204759][ T5746] Bluetooth: hci1: command tx timeout
[  301.370591][T16137] veth0_vlan: entered promiscuous mode
[  301.375044][T16137] veth1_vlan: entered promiscuous mode
[  301.390404][T16137] veth0_macvtap: entered promiscuous mode
[  301.392671][T16137] veth1_macvtap: entered promiscuous mode
[  301.401241][T16137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.406060][T16137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.443139][   T42] usb 11-1: new full-speed USB device number 3 using dummy_hcd
[  301.449984][ T5789] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.450026][ T5789] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.454606][ T5789] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.454640][ T5789] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.522253][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.522273][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.550869][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.550889][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.577427][   T42] usb 11-1: device descriptor read/64, error -71
[  301.603997][T16268] IPv6: NLM_F_CREATE should be specified when creating new route
[  301.604124][T16268] IPv6: Can't replace route, no match found
[  301.643193][T16272] IPv6: Can't replace route, no match found
[  301.715916][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13
[  301.735620][T16279] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3662'.
[  301.768715][T16282] tmpfs: Using encoding : utf8-12.1.0
[  301.768730][T16282] tmpfs: Unknown parameter 'strict_encoding'
[  301.844719][   T42] usb 11-1: new full-speed USB device number 4 using dummy_hcd
[  301.940196][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.948943][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.949772][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.953938][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.955085][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.983376][   T42] usb 11-1: device descriptor read/64, error -71
[  302.114052][   T42] usb usb11-port1: attempt power cycle
[  302.142602][T16308] Set syz1 is full, maxelem 2 reached
[  302.485845][   T42] usb 11-1: new full-speed USB device number 5 using dummy_hcd
[  302.508066][   T42] usb 11-1: device descriptor read/8, error -71
[  302.570021][T16318] IPv6: NLM_F_CREATE should be specified when creating new route
[  302.570080][T16318] IPv6: Can't replace route, no match found
[  302.617828][T16324] IPv6: Can't replace route, no match found
[  302.748105][ T5789] netdevsim netdevsim3 eth16: set [0, 0] type 1 family 0 port 8472 - 0
[  302.774448][   T42] usb 11-1: new full-speed USB device number 6 using dummy_hcd
[  302.796255][   T42] usb 11-1: device descriptor read/8, error -71
[  302.874076][   T13] bond9 (unregistering): (slave erspan1): Releasing active interface
[  302.874099][   T13] erspan1 (unregistering): left promiscuous mode
[  302.901270][   T13] bond10 (unregistering): (slave gretap1): Releasing active interface
[  302.913785][   T42] usb usb11-port1: unable to enumerate USB device
[  302.931365][   T13] bond4 (unregistering): (slave geneve2): Releasing active interface
[  302.948822][   T13] bond3 (unregistering): (slave bridge1): Releasing active interface
[  302.957015][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.957743][   T13] bond0 (unregistering): Released all slaves
[  302.961652][   T13] bond1 (unregistering): (slave veth3): Releasing active interface
[  302.961666][   T13] batadv1: entered promiscuous mode
[  302.962961][   T13] bond1 (unregistering): (slave batadv1): Releasing active interface
[  302.962975][   T13] batadv1: left promiscuous mode
[  302.963653][   T13] bond1 (unregistering): Released all slaves
[  302.982866][   T13] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface
[  302.991610][   T13] bond2 (unregistering): Released all slaves
[  303.004828][   T13] bond3 (unregistering): Released all slaves
[  303.019529][   T13] bond4 (unregistering): Released all slaves
[  303.026964][   T13] bond5 (unregistering): (slave veth5): Releasing active interface
[  303.026983][   T13] batadv2: entered promiscuous mode
[  303.028269][   T13] bond5 (unregistering): (slave batadv2): Releasing active interface
[  303.028283][   T13] batadv2: left promiscuous mode
[  303.028910][   T13] bond5 (unregistering): Released all slaves
[  303.035874][   T13] bond6 (unregistering): Released all slaves
[  303.041067][   T13] bond7 (unregistering): Released all slaves
[  303.046870][   T13] bond8 (unregistering): Released all slaves
[  303.052154][   T13] bond9 (unregistering): Released all slaves
[  303.057567][   T13] bond10 (unregistering): Released all slaves
[  303.066208][T16332] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  303.095190][ T5823] netdevsim netdevsim3 eth14: set [0, 0] type 1 family 0 port 8472 - 0
[  303.134639][T16291] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.137112][T16291] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.137206][T16291] bridge_slave_0: entered allmulticast mode
[  303.138146][T16291] bridge_slave_0: entered promiscuous mode
[  303.152064][   T12] netdevsim netdevsim3 eth17: set [0, 0] type 1 family 0 port 8472 - 0
[  303.152106][   T12] netdevsim netdevsim3 eth15: set [0, 0] type 1 family 0 port 8472 - 0
[  303.160499][T16291] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.160549][T16291] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.160630][T16291] bridge_slave_1: entered allmulticast mode
[  303.161354][T16291] bridge_slave_1: entered promiscuous mode
[  303.186569][T16291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.187880][T16291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.222043][T16291] team0: Port device team_slave_0 added
[  303.225106][T16291] team0: Port device team_slave_1 added
[  303.239999][T16291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.240011][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.240031][T16291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.240832][T16291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.240840][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.240853][T16291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.241120][   T13] tipc: Disabling bearer <eth:batadv0>
[  303.255900][   T13] tipc: Left network mode
[  303.320581][T16291] hsr_slave_0: entered promiscuous mode
[  303.321003][T16291] hsr_slave_1: entered promiscuous mode
[  303.321306][T16291] debugfs: 'hsr0' already exists in 'hsr'
[  303.321318][T16291] Cannot create hsr debugfs directory
[  303.402804][T16348] bond0: (slave dummy0): Error: Device can not be enslaved while up
[  303.419151][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14
[  303.436905][ T5746] Bluetooth: hci1: command tx timeout
[  303.549446][T16360] tmpfs: Using encoding : utf8-12.1.0
[  303.630051][T16291] netdevsim netdevsim3 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.712248][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.747785][   T43] kauditd_printk_skb: 137 callbacks suppressed
[  303.747799][   T43] audit: type=1400 audit(2000000086.383:1511): avc:  denied  { write } for  pid=16374 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  303.872622][   T13] team0 (unregistering): Port device team_slave_1 removed
[  303.898468][   T13] team0 (unregistering): Port device team_slave_0 removed
[  303.943128][T16376] bond1: option xmit_hash_policy: invalid value (6)
[  303.944626][T16376] bond1 (unregistering): Released all slaves
[  303.960396][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15
[  303.975503][T16291] netdevsim netdevsim3 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.001302][   T43] audit: type=1800 audit(2000000086.617:1512): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22621 res=0 errno=0
[  304.016874][   T43] audit: type=1800 audit(2000000086.636:1513): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22621 res=0 errno=0
[  304.121307][ T5746] Bluetooth: hci2: command tx timeout
[  304.158946][T16398] 9pnet_fd: Insufficient options for proto=fd
[  304.169466][T16291] netdevsim netdevsim3 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.194653][   T43] audit: type=1400 audit(2000000086.795:1514): avc:  denied  { write } for  pid=16393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.258178][T16291] netdevsim netdevsim3 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.276135][   T43] audit: type=1400 audit(2000000086.879:1515): avc:  denied  { write } for  pid=16407 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.308694][   T43] audit: type=1800 audit(2000000086.907:1516): pid=16410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3692" name="rebind" dev="sysfs" ino=44423 res=0 errno=0
[  304.362268][   T43] audit: type=1800 audit(2000000086.954:1517): pid=16291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27250 res=0 errno=0
[  304.364712][   T43] audit: type=1800 audit(2000000086.954:1518): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257854 res=0 errno=0
[  304.436738][   T43] audit: type=1400 audit(2000000087.029:1519): avc:  denied  { write } for  pid=16414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.461263][T16291] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  304.536138][   T43] audit: type=1400 audit(2000000087.113:1520): avc:  denied  { write } for  pid=16418 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.547053][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  304.547541][T16291] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  304.556907][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  304.558916][T16291] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  304.571138][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  304.576374][T16291] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  304.589243][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  304.614131][   T13] IPVS: stop unused estimator thread 0...
[  304.637883][T16291] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.646170][T16291] 8021q: adding VLAN 0 to HW filter on device team0
[  304.649225][  T177] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.649275][  T177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.653347][  T177] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.653392][  T177] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.789240][   T13] pimreg: left allmulticast mode
[  304.789302][   T13] dvmrp6: left allmulticast mode
[  304.789563][   T13] pimreg9: left allmulticast mode
[  304.914563][   T13] bond0 (unregistering): Released all slaves
[  304.917212][   T13] bond1 (unregistering): Released all slaves
[  304.927864][   T13] bond2 (unregistering): Released all slaves
[  305.027311][   T13] tipc: Disabling bearer <udp:syz2>
[  305.027384][   T13] tipc: Left network mode
[  305.122569][T16291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.179452][T16291] veth0_vlan: entered promiscuous mode
[  305.203232][T16291] veth1_vlan: entered promiscuous mode
[  305.243730][T16291] veth0_macvtap: entered promiscuous mode
[  305.251525][T16291] veth1_macvtap: entered promiscuous mode
[  305.261096][T16291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.280020][T16291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.395763][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.396111][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.396302][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.457944][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.649673][ T5746] Bluetooth: hci1: command tx timeout
[  305.827753][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.827774][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.115755][T15979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.115781][T15979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.332875][ T5746] Bluetooth: hci2: command tx timeout
[  306.727996][ T9568] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  306.887329][   T13] IPVS: stop unused estimator thread 0...
[  306.888534][ T9568] usb 11-1: Using ep0 maxpacket: 16
[  306.889361][ T9568] usb 11-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  306.890382][ T9568] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.892468][ T9568] usb 11-1: config 0 descriptor??
[  307.337777][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337795][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337808][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337819][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337831][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337843][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337855][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337867][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337879][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337890][ T9568] elo 0003:04E7:0009.0011: unknown main item tag 0x0
[  307.337924][ T9568] elo 0003:04E7:0009.0011: unbalanced collection at end of report description
[  307.338204][ T9568] elo 0003:04E7:0009.0011: parse failed
[  307.338253][ T9568] elo 0003:04E7:0009.0011: probe with driver elo failed with error -22
[  307.486737][ T5886] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  307.555258][ T5889] usb 11-1: USB disconnect, device number 7
[  307.871576][ T5746] Bluetooth: hci1: command tx timeout
[  307.925439][ T5886] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  307.926868][ T5886] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  307.926882][ T5886] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  307.926892][ T5886] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66
[  307.926918][ T5886] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  307.926932][ T5886] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  307.928505][ T5886] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  307.928524][ T5886] usb 12-1: Product: syz
[  307.928535][ T5886] usb 12-1: Manufacturer: syz
[  307.932779][ T5886] cdc_wdm 12-1:1.0: skipping garbage
[  307.932794][ T5886] cdc_wdm 12-1:1.0: skipping garbage
[  307.939109][ T5886] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device
[  307.939122][ T5886] cdc_wdm 12-1:1.0: Unknown control protocol
[  308.368908][ T5886] usb 12-1: USB disconnect, device number 2
[  308.459283][   T35] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  308.465321][T16545] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 4 (only 8 groups)
[  308.566091][ T5746] Bluetooth: hci2: command tx timeout
[  308.630573][   T35] usb 11-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  308.633423][   T35] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.635149][   T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.635162][   T35] usb 11-1: Product: syz
[  308.635169][   T35] usb 11-1: Manufacturer: syz
[  308.635177][   T35] usb 11-1: SerialNumber: syz
[  308.641160][   T35] ftdi_sio 11-1:1.0: FTDI USB Serial Device converter detected
[  308.641677][   T35] usb 11-1: Detected FT2232C/D
[  308.833260][ T2421] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[  308.853985][   T35] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  308.854259][   T35] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  308.860389][   T35] usb 11-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  308.864783][   T35] usb 11-1: USB disconnect, device number 8
[  308.866625][   T35] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  308.866864][   T35] ftdi_sio 11-1:1.0: device disconnected
[  308.994627][ T2421] usb 8-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  308.995581][ T2421] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.995610][ T2421] usb 8-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  308.995642][ T2421] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  308.995665][ T2421] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.995684][ T2421] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  308.995706][ T2421] usb 8-1: config 0 interface 0 has no altsetting 0
[  308.995732][ T2421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.998007][ T2421] usb 8-1: config 0 descriptor??
[  309.005244][ T2421] usbhid 8-1:0.0: fixing wrong optional hid class descriptors count
[  309.433936][   T43] kauditd_printk_skb: 59 callbacks suppressed
[  309.433953][   T43] audit: type=1800 audit(2000000091.708:1580): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262835 res=0 errno=0
[  309.437651][ T2421] input: HID 046d:c298 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:046D:C298.0012/input/input42
[  309.440795][   T43] audit: type=1800 audit(2000000091.708:1581): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262857 res=0 errno=0
[  309.445743][   T43] audit: type=1800 audit(2000000091.717:1582): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=262873 res=0 errno=0
[  309.446322][   T43] audit: type=1800 audit(2000000091.717:1583): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=262876 res=0 errno=0
[  309.447805][   T43] audit: type=1800 audit(2000000091.717:1584): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=262875 res=0 errno=0
[  309.448369][   T43] audit: type=1800 audit(2000000091.717:1585): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=262874 res=0 errno=0
[  309.448822][   T43] audit: type=1800 audit(2000000091.717:1586): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=262865 res=0 errno=0
[  309.449548][   T43] audit: type=1800 audit(2000000091.717:1587): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=262868 res=0 errno=0
[  309.450179][   T43] audit: type=1800 audit(2000000091.717:1588): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=262839 res=0 errno=0
[  309.451455][   T43] audit: type=1800 audit(2000000091.717:1589): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=262810 res=0 errno=0
[  309.509314][ T2421] logitech 0003:046D:C298.0012: offset (39) exceeds report_count (19)
[  309.509369][ T2421] logitech 0003:046D:C298.0012: offset (25) exceeds report_count (19)
[  309.592405][ T2421] logitech 0003:046D:C298.0012: input,hidraw1: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.3-1/input0
[  309.592840][ T2421] logitech 0003:046D:C298.0012: implement() called with too large value 245 (n: 0)! (kworker/2:3)
[  309.603434][ T2421] logitech 0003:046D:C298.0012: implement() called with too large value 248 (n: 0)! (kworker/2:3)
[  309.603483][ T2421] logitech 0003:046D:C298.0012: implement() called with too large value 3 (n: 0)! (kworker/2:3)
[  309.603529][ T2421] logitech 0003:046D:C298.0012: implement() called with too large value 129 (n: 0)! (kworker/2:3)
[  309.603549][ T2421] logitech 0003:046D:C298.0012: implement() called with too large value 11 (n: 0)! (kworker/2:3)
[  309.603616][ T2421] logitech 0003:046D:C298.0012: Force feedback support for Logitech Gaming Wheels
[  309.649307][ T2421] usb 8-1: USB disconnect, device number 17
[  309.698711][   T35] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  309.870591][   T35] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  309.871752][   T35] usb 11-1: config 1 has an invalid interface number: 7 but max is 0
[  309.871774][   T35] usb 11-1: config 1 has no interface number 0
[  309.871807][   T35] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  309.871830][   T35] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  309.871852][   T35] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.880433][   T35] usb 11-1: string descriptor 0 read error: -71
[  309.880538][   T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.917968][   T35] usb 11-1: can't set config #1, error -71
[  309.919194][   T35] usb 11-1: USB disconnect, device number 9
[  310.778974][ T5750] Bluetooth: hci2: command tx timeout
[  311.265475][T16577] xt_REDIRECT: bad rangesize 26624.
[  311.600396][T16587] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.611672][T16587] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.889585][ T2421] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  312.050411][ T2421] usb 11-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  312.051334][ T2421] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.051353][ T2421] usb 11-1: config 0 has no interfaces?
[  312.051375][ T2421] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.053248][T16595] tipc: Started in network mode
[  312.053264][T16595] tipc: Node identity 22fa7b7e94c7, cluster identity 4711
[  312.053333][T16595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.054092][T16595] syzkaller0: entered promiscuous mode
[  312.054102][T16595] syzkaller0: entered allmulticast mode
[  312.055420][ T2421] usb 11-1: config 0 descriptor??
[  312.063019][T16595] tipc: Resetting bearer <eth:syzkaller0>
[  312.073777][T16594] tipc: Resetting bearer <eth:syzkaller0>
[  312.092721][T16594] tipc: Disabling bearer <eth:syzkaller0>
[  312.189312][T16597] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  313.492234][T16610] comedi comedi1: reset error (fatal)
[  313.539705][T16631] binder: 16630:16631 unknown command 0
[  313.539719][T16631] binder: 16630:16631 ioctl c0306201 2000000001c0 returned -22
[  313.823614][ T5848] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[  313.984617][ T5848] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  313.985627][ T5848] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.985676][ T5848] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  313.985703][ T5848] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  313.985738][ T5848] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  313.985764][ T5848] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  313.987747][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.987770][ T5848] usb 8-1: Product: syz
[  313.987785][ T5848] usb 8-1: Manufacturer: syz
[  313.987800][ T5848] usb 8-1: SerialNumber: syz
[  313.991738][T16634] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  313.994177][ T5848] cdc_mbim 8-1:1.0: skipping garbage
[  314.211003][T16634] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  314.838308][ T5837] usb 11-1: USB disconnect, device number 10
[  314.854729][T16634] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  314.942231][   T43] kauditd_printk_skb: 31 callbacks suppressed
[  314.942245][   T43] audit: type=1400 audit(2000000096.855:1621): avc:  denied  { write } for  pid=16645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  315.041064][   T43] audit: type=1800 audit(2000000096.948:1622): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263545 res=0 errno=0
[  315.077584][   T43] audit: type=1800 audit(2000000096.976:1623): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263555 res=0 errno=0
[  315.077626][   T43] audit: type=1800 audit(2000000096.976:1624): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263574 res=0 errno=0
[  315.099478][ T5848] cdc_mbim 8-1:1.0: bind() failure
[  315.134982][ T5848] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71
[  315.163936][   T43] audit: type=1400 audit(2000000097.070:1625): avc:  denied  { write } for  pid=16651 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  315.169000][ T5848] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71
[  315.201063][ T5848] usbtest 8-1:1.1: probe with driver usbtest failed with error -71
[  315.236399][   T43] audit: type=1800 audit(2000000097.135:1626): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=263506 res=0 errno=0
[  315.237321][   T43] audit: type=1800 audit(2000000097.135:1627): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=263507 res=0 errno=0
[  315.239883][ T5848] usb 8-1: USB disconnect, device number 18
[  315.268521][   T43] audit: type=1800 audit(2000000097.164:1628): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=263486 res=0 errno=0
[  315.272449][   T43] audit: type=1400 audit(2000000097.164:1629): avc:  denied  { write } for  pid=16662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  315.340674][   T43] audit: type=1400 audit(2000000097.229:1630): avc:  denied  { write } for  pid=16667 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  315.518825][T16671] file system registered
[  315.522749][ T1042] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  315.540534][T16137] ffs_data_put(): freeing
[  315.704841][ T1042] usb 11-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  315.705808][ T1042] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  315.705824][ T1042] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  315.707639][ T1042] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.707654][ T1042] usb 11-1: Product: syz
[  315.707662][ T1042] usb 11-1: Manufacturer: syz
[  315.707669][ T1042] usb 11-1: SerialNumber: syz
[  315.712050][ T1042] usb 11-1: NFC: intf ffff88805a13c000 id ffffffff8fe92f80
[  315.770468][ T1042] nfcmrvl 11-1:1.0: NFC: registered with nci successfully
[  315.936194][   T13] nfcmrvl 11-1:1.0: NFC: send entry, len 4
[  315.936552][   T13] usb 11-1: NFC: urb ffff888026a21e00 submission failed (90)
[  315.986709][T16665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  316.007368][ T1673] usb 11-1: USB disconnect, device number 11
[  316.008582][ T1673] usb 11-1: NFC: intf ffff88805a13c000
[  317.072108][ T1673] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  317.243848][ T1673] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  317.244844][ T1673] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.470245][ T1673] cdc_acm 11-1:1.0: ttyACM0: USB ACM device
[  317.736168][ T1042] usb 11-1: USB disconnect, device number 12
[  318.616716][T16733] __nla_validate_parse: 6 callbacks suppressed
[  318.616737][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3776'.
[  318.935337][T16739] tipc: Started in network mode
[  318.935367][T16739] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  318.935662][T16739] tipc: Enabled bearer <eth:syz_tun>, priority 1
[  319.754430][T16749] md: couldn't update array info. -22
[  319.850755][T16752] md: recover of RAID array md0
[  319.856203][T16752] md: md0: recover done.
[  320.139423][ T9566] tipc: Node number set to 43690
[  320.331412][   T30] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  320.465431][T16765] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  320.470101][   T43] kauditd_printk_skb: 28 callbacks suppressed
[  320.470118][   T43] audit: type=1800 audit(2000000102.030:1659): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264206 res=0 errno=0
[  320.513143][   T30] usb 12-1: Using ep0 maxpacket: 8
[  320.514138][   T30] usb 12-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  320.521800][   T30] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.521826][   T30] usb 12-1: Product: syz
[  320.521839][   T30] usb 12-1: Manufacturer: syz
[  320.521852][   T30] usb 12-1: SerialNumber: syz
[  320.543594][   T30] usb 12-1: config 0 descriptor??
[  320.544463][   T43] audit: type=1800 audit(2000000102.095:1660): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264225 res=0 errno=0
[  320.547612][   T43] audit: type=1800 audit(2000000102.105:1661): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=264257 res=0 errno=0
[  320.548933][   T43] audit: type=1800 audit(1700006398.950:1662): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=264232 res=0 errno=0
[  320.549981][   T43] audit: type=1800 audit(1700006398.950:1663): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=264233 res=0 errno=0
[  320.595133][   T30] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  320.596037][   T30] pctv452e: pctv452e_power_ctrl: 1
[  320.596037][   T30] 
[  320.596139][   T30] usb 12-1: selecting invalid altsetting 3
[  320.596748][   T30] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  320.596748][   T30] 
[  320.596764][   T30] dvb-usb: bulk message failed: -22 (5/0)
[  320.658757][   T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  320.660145][   T30] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  320.660171][   T30] usb 12-1: media controller created
[  320.665325][   T30] dvb-usb: bulk message failed: -22 (8/0)
[  320.665337][   T30] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  320.665886][   T30] dvb-usb: MAC address reading failed.
[  320.675231][   T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  320.728164][   T30] DVB: Unable to find symbol stb0899_attach()
[  320.728223][   T30] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  320.790875][   T30] rc_core: IR keymap rc-tt-1500 not found
[  320.790888][   T30] Registered IR keymap rc-empty
[  320.793984][   T30] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0
[  320.796916][   T30] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input43
[  320.824865][   T30] dvb-usb: schedule remote query interval to 100 msecs.
[  320.824881][   T30] pctv452e: pctv452e_power_ctrl: 0
[  320.824881][   T30] 
[  320.824887][   T30] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  320.826334][   T43] audit: type=1800 audit(1700006399.202:1664): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=264254 res=0 errno=0
[  320.830124][   T43] audit: type=1800 audit(1700006399.202:1665): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=264255 res=0 errno=0
[  320.831536][   T30] usb 12-1: USB disconnect, device number 3
[  320.831661][   T43] audit: type=1800 audit(1700006399.202:1666): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=264234 res=0 errno=0
[  320.894874][   T30] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  320.896417][   T43] audit: type=1800 audit(1700006399.258:1667): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=264256 res=0 errno=0
[  320.915239][   T43] audit: type=1800 audit(1700006399.286:1668): pid=16247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30977 res=0 errno=0
[  321.506902][ T5837] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  321.642875][T16794] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  322.201952][ T5837] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  322.203145][ T5837] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  322.203175][ T5837] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  322.203193][ T5837] usb 8-1: config 0 interface 0 has no altsetting 0
[  322.207872][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  322.207891][ T5837] usb 8-1: Product: syz
[  322.207900][ T5837] usb 8-1: Manufacturer: syz
[  322.207910][ T5837] usb 8-1: SerialNumber: syz
[  322.210071][ T5837] usb 8-1: config 0 descriptor??
[  322.215685][ T5837] usb 8-1: selecting invalid altsetting 0
[  322.303949][T16826] tipc: Started in network mode
[  322.303967][T16826] tipc: Node identity 46a7d40fe25d, cluster identity 4711
[  322.304049][T16826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.304401][T16826] syzkaller0: entered promiscuous mode
[  322.304412][T16826] syzkaller0: entered allmulticast mode
[  322.307959][T16825] tipc: Resetting bearer <eth:syzkaller0>
[  322.344807][T16825] tipc: Disabling bearer <eth:syzkaller0>
[  322.440426][ T5837] usb 8-1: USB disconnect, device number 19
[  322.808160][T16842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.809475][T16842] tipc: Resetting bearer <eth:syzkaller0>
[  322.819402][T16840] tipc: Disabling bearer <eth:syzkaller0>
[  322.968901][T16850] syzkaller0: entered promiscuous mode
[  322.968919][T16850] syzkaller0: entered allmulticast mode
[  323.334474][ T5837] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[  323.517387][ T5837] usb 8-1: not running at top speed; connect to a high speed hub
[  323.517419][ T5837] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  323.518384][ T5837] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.518433][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.540765][ T5837] uvcvideo 8-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  323.889253][T16868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.892532][T16868] tipc: Resetting bearer <eth:syzkaller0>
[  323.894981][T16867] tipc: Disabling bearer <eth:syzkaller0>
[  323.982966][T16874] syzkaller0: entered promiscuous mode
[  323.982980][T16874] syzkaller0: entered allmulticast mode
[  324.008300][T16872] md: could not open device unknown-block(1,0).
[  324.171853][T16888] kvm: pic: non byte read
[  324.172838][T16888] kvm: pic: level sensitive irq not supported
[  324.173158][T16888] kvm: pic: non byte read
[  324.174299][T16888] kvm: pic: level sensitive irq not supported
[  324.174589][T16888] kvm: pic: non byte read
[  324.175545][T16888] kvm: pic: level sensitive irq not supported
[  324.175849][T16888] kvm: pic: non byte read
[  324.176912][T16888] kvm: pic: level sensitive irq not supported
[  324.177214][T16888] kvm: pic: non byte read
[  324.178114][T16888] kvm: pic: level sensitive irq not supported
[  324.178497][T16888] kvm: pic: non byte read
[  324.191994][T16888] kvm: pic: level sensitive irq not supported
[  324.192251][T16888] kvm: pic: non byte read
[  324.193002][T16888] kvm: pic: level sensitive irq not supported
[  324.193244][T16888] kvm: pic: non byte read
[  324.193961][T16888] kvm: pic: level sensitive irq not supported
[  324.194253][T16888] kvm: pic: non byte read
[  324.195135][T16888] kvm: pic: level sensitive irq not supported
[  324.195424][T16888] kvm: pic: non byte read
[  324.196125][T16888] kvm: pic: level sensitive irq not supported
[  324.244880][T16904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.246250][T16904] tipc: Resetting bearer <eth:syzkaller0>
[  324.248539][T16903] tipc: Disabling bearer <eth:syzkaller0>
[  324.300736][T16906] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  324.402979][ T5837] uvcvideo 8-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  324.403010][ T5837] uvcvideo 8-1:1.1: Failed to initialize the device (-71).
[  324.415692][ T5837] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -71
[  324.419945][ T5837] usb 8-1: USB disconnect, device number 20
[  324.801839][T16922] syzkaller0: entered promiscuous mode
[  324.801862][T16922] syzkaller0: entered allmulticast mode
[  325.080745][T16935] syzkaller0: entered promiscuous mode
[  325.080765][T16935] syzkaller0: entered allmulticast mode
[  325.514137][T16951] syzkaller0: entered promiscuous mode
[  325.514153][T16951] syzkaller0: entered allmulticast mode
[  325.578626][T16956] syzkaller0: entered promiscuous mode
[  325.578640][T16956] syzkaller0: entered allmulticast mode
[  326.037947][T16978] syzkaller0: entered promiscuous mode
[  326.037963][T16978] syzkaller0: entered allmulticast mode
[  326.073790][T16980] kvm: pic: non byte write
[  326.122177][T16983] syzkaller0: entered promiscuous mode
[  326.122191][T16983] syzkaller0: entered allmulticast mode
[  326.203965][   T43] kauditd_printk_skb: 38 callbacks suppressed
[  326.203983][   T43] audit: type=1400 audit(1700006404.237:1707): avc:  denied  { write } for  pid=16986 comm="syz.6.3864" path="socket:[126624]" dev="sockfs" ino=126624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  326.308778][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  326.308820][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  326.308856][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  326.308867][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  326.308907][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  326.308966][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  326.308977][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  326.309013][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  326.309047][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  326.309108][T16988] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  326.309133][T16988] jffs2: Further such events for this erase block will not be printed
[  326.309209][T16988] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  326.309261][T16988] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  326.825810][   T43] audit: type=1400 audit(1700006404.808:1708): avc:  denied  { write } for  pid=16998 comm="syz.3.3869" name="c.1" dev="configfs" ino=83096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  326.825907][T16999] 
[  326.826343][   T43] audit: type=1400 audit(1700006404.808:1709): avc:  denied  { write } for  pid=16998 comm="syz.3.3869" name="c.1" dev="configfs" ino=83096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  326.843830][T16999] ======================================================
[  326.846019][T16999] WARNING: possible circular locking dependency detected
[  326.848233][T16999] syzkaller #0 Tainted: G             L     
[  326.850241][T16999] ------------------------------------------------------
[  326.852429][T16999] syz.3.3869/16999 is trying to acquire lock:
[  326.854349][T16999] ffffffff90480e00 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440
[  326.857241][T16999] 
[  326.857241][T16999] but task is already holding lock:
[  326.859546][T16999] ffff888025626390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0
[  326.862371][T16999] 
[  326.862371][T16999] which lock already depends on the new lock.
[  326.862371][T16999] 
[  326.865584][T16999] 
[  326.865584][T16999] the existing dependency chain (in reverse order) is:
[  326.868385][T16999] 
[  326.868385][T16999] -> #2 (&gi->lock){+.+.}-{4:4}:
[  326.870613][T16999]        lock_acquire+0x1d1/0x380
[  326.872243][T16999]        __mutex_lock+0x1a4/0x1bd0
[  326.873871][T16999]        config_usb_cfg_link+0x57/0x3a0
[  326.875612][T16999]        configfs_symlink+0x695/0x1340
[  326.877323][T16999]        vfs_symlink+0x178/0x4d0
[  326.878891][T16999]        filename_symlinkat+0x2a6/0x560
[  326.880659][T16999]        __x64_sys_symlinkat+0x9c/0xe0
[  326.882552][T16999]        do_syscall_64+0x123/0x790
[  326.884189][T16999]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.886192][T16999] 
[  326.886192][T16999] -> #1 (&sb->s_type->i_mutex_key#29){++++}-{4:4}:
[  326.888918][T16999]        lock_acquire+0x1d1/0x380
[  326.890516][T16999]        down_write+0x8b/0x1f0
[  326.892025][T16999]        configfs_depend_item_unlocked+0xf3/0x6a0
[  326.894073][T16999]        usbg_make_tpg+0x251/0x610
[  326.895680][T16999]        target_fabric_make_tpg+0xab/0x8c0
[  326.897510][T16999]        configfs_mkdir+0x525/0xd40
[  326.899134][T16999]        vfs_mkdir+0x364/0x850
[  326.900679][T16999]        filename_mkdirat+0x48b/0x5e0
[  326.902424][T16999]        __x64_sys_mkdirat+0x89/0xc0
[  326.904119][T16999]        do_syscall_64+0x123/0x790
[  326.905722][T16999]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.907745][T16999] 
[  326.907745][T16999] -> #0 (tpg_instances_lock){+.+.}-{4:4}:
[  326.910178][T16999]        check_prev_add+0xeb/0xe60
[  326.911798][T16999]        __lock_acquire+0x1528/0x1f40
[  326.913483][T16999]        lock_acquire+0x1d1/0x380
[  326.915106][T16999]        __mutex_lock+0x1a4/0x1bd0
[  326.916724][T16999]        tcm_alloc+0x20/0x440
[  326.918204][T16999]        usb_get_function+0x5e/0xd0
[  326.919841][T16999]        config_usb_cfg_link+0x1ed/0x3a0
[  326.921589][T16999]        configfs_symlink+0x695/0x1340
[  326.923284][T16999]        vfs_symlink+0x178/0x4d0
[  326.924918][T16999]        filename_symlinkat+0x2a6/0x560
[  326.926644][T16999]        __x64_sys_symlinkat+0x9c/0xe0
[  326.928374][T16999]        do_syscall_64+0x123/0x790
[  326.929974][T16999]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.931987][T16999] 
[  326.931987][T16999] other info that might help us debug this:
[  326.931987][T16999] 
[  326.935119][T16999] Chain exists of:
[  326.935119][T16999]   tpg_instances_lock --> &sb->s_type->i_mutex_key#29 --> &gi->lock
[  326.935119][T16999] 
[  326.939527][T16999]  Possible unsafe locking scenario:
[  326.939527][T16999] 
[  326.941822][T16999]        CPU0                    CPU1
[  326.943494][T16999]        ----                    ----
[  326.945197][T16999]   lock(&gi->lock);
[  326.946467][T16999]                                lock(&sb->s_type->i_mutex_key#29);
[  326.948841][T16999]                                lock(&gi->lock);
[  326.950843][T16999]   lock(tpg_instances_lock);
[  326.952340][T16999] 
[  326.952340][T16999]  *** DEADLOCK ***
[  326.952340][T16999] 
[  326.954850][T16999] locks held by syz.3.3869/16999: 3, last CPU#3:
[  326.956864][T16999]  #0: ffff888023b6a460 (sb_writers#18){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[  326.959807][T16999]  #1: ffff888039b38600 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: configfs_symlink+0x452/0x1340
[  326.963139][T16999]  #2: ffff888025626390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0
[  326.966032][T16999] 
[  326.966032][T16999] stack backtrace:
[  326.967933][T16999] CPU: 3 UID: 0 PID: 16999 Comm: syz.3.3869 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  326.971343][T16999] Tainted: [L]=SOFTLOCKUP
[  326.972712][T16999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  326.975873][T16999] Call Trace:
[  326.976923][T16999]  <TASK>
[  326.977864][T16999]  dump_stack_lvl+0x100/0x190
[  326.979396][T16999]  print_circular_bug.cold+0x178/0x1be
[  326.981095][T16999]  check_noncircular+0x146/0x160
[  326.982642][T16999]  check_prev_add+0xeb/0xe60
[  326.984124][T16999]  __lock_acquire+0x1528/0x1f40
[  326.985654][T16999]  lock_acquire+0x1d1/0x380
[  326.987088][T16999]  ? tcm_alloc+0x20/0x440
[  326.988459][T16999]  ? __pfx___might_resched+0x10/0x10
[  326.990135][T16999]  ? config_usb_cfg_link+0x57/0x3a0
[  326.991768][T16999]  __mutex_lock+0x1a4/0x1bd0
[  326.993223][T16999]  ? tcm_alloc+0x20/0x440
[  326.994596][T16999]  ? tcm_alloc+0x20/0x440
[  326.995975][T16999]  ? __mutex_lock+0x26c/0x1bd0
[  326.997398][T16999]  ? config_usb_cfg_link+0x57/0x3a0
[  326.998956][T16999]  ? __pfx___mutex_lock+0x10/0x10
[  327.000508][T16999]  ? __pfx_selinux_inode_permission+0x10/0x10
[  327.002340][T16999]  ? tcm_alloc+0x20/0x440
[  327.003691][T16999]  tcm_alloc+0x20/0x440
[  327.004929][T16999]  usb_get_function+0x5e/0xd0
[  327.006347][T16999]  config_usb_cfg_link+0x1ed/0x3a0
[  327.007882][T16999]  ? mntput_no_expire+0xe7/0x220
[  327.009376][T16999]  configfs_symlink+0x695/0x1340
[  327.010918][T16999]  ? __pfx_configfs_symlink+0x10/0x10
[  327.012612][T16999]  vfs_symlink+0x178/0x4d0
[  327.014054][T16999]  filename_symlinkat+0x2a6/0x560
[  327.015657][T16999]  ? __pfx_filename_symlinkat+0x10/0x10
[  327.017398][T16999]  ? strncpy_from_user+0x19d/0x2d0
[  327.019049][T16999]  ? do_getname+0x191/0x390
[  327.020522][T16999]  __x64_sys_symlinkat+0x9c/0xe0
[  327.022143][T16999]  do_syscall_64+0x123/0x790
[  327.023730][T16999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.025584][T16999] RIP: 0033:0x7fa43379e159
[  327.026991][T16999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.032915][T16999] RSP: 002b:00007fa4346cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  327.035517][T16999] RAX: ffffffffffffffda RBX: 00007fa433a25fa0 RCX: 00007fa43379e159
[  327.037967][T16999] RDX: 00002000000003c0 RSI: ffffffffffffff9c RDI: 0000200000000380
[  327.040452][T16999] RBP: 00007fa43383506b R08: 0000000000000000 R09: 0000000000000000
[  327.043103][T16999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.045731][T16999] R13: 00007fa433a26038 R14: 00007fa433a25fa0 R15: 00007ffe7f267c58
[  327.048382][T16999]  </TASK>
[  331.810190][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[  331.810273][ T1440] ieee802154 phy1 wpan1: encryption failed: -22