last executing test programs:

4m3.488446242s ago: executing program 0 (id=146):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000100)="460f01c42e400f01c3c4631978fc004239360f09660f3881828beb000048b89b000000000000000f23c00f21f835010009000f23f8004908470f798500bf000066baf80cb828b0188aef66bafc0c66b89d1a66ef", 0x54}], 0x1, 0x2, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="262ef30f090f01ca2e0fc7b80f00f30f090f01df6766c7442400f0ffff7f6766c7442402000000006766c744240600000000670f011c24640f01c30f4abb00000f01f02e640f01c2", 0x48}], 0x1, 0x46, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {0x2}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m3.318217288s ago: executing program 0 (id=150):
set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8)
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c00018008000100636d700020000280080001400002001008000240000000010c00038005000100400000000900020073797a3200000000140000001100010000000000000000000500000a1bcffb073d85b79f3a850e8e9815f02ac7036a13fb55cc8746c9393c1b865cf551579baa78"], 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x90)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="3ef30f20dc0f32400fe18a6e000000b9a00b0000b801000000ba000000000f30430fc7996e00000066ba4300b0f8ee420f070f2139c744240004000000c744240200000000c7442406000000000f011c24450f01c5", 0x55}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000400)=0xb8e7)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c0088dd76e2800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@empty, @in6=@remote, 0x0, 0x2, 0x2000, 0x1, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0xfffffffd, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x4810)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3cdf2500005f00"/20, @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028008001a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x4}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0200000001"], 0x48)

4m3.003913113s ago: executing program 0 (id=158):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0)
bind$inet6(r3, 0x0, 0x0) (async)
bind$inet6(r3, 0x0, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
syz_open_procfs$namespace(r1, &(0x7f0000002800)='ns/pid\x00')

4m2.906448068s ago: executing program 0 (id=164):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000000d0601020000000000000000050000040e0003006269746d61703a69700000000500010007f0b60005000500"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

4m2.848804043s ago: executing program 0 (id=166):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x400000)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

4m2.58210884s ago: executing program 0 (id=173):
r0 = socket$inet(0x2, 0x1, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000340)=0x400, 0x4) (async)
mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000040)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x7f)
r4 = openat(r3, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='config\x00', 0x101000, 0x40)
r6 = openat(r5, &(0x7f0000000080)='webusb/use\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)='0x1d6b\x00', 0x6)
r7 = openat(r4, &(0x7f0000000240)='idProduct\x00', 0x2, 0x12d)
write(r7, &(0x7f0000000280)='0x0104\x00', 0x6) (async)
r8 = openat(r4, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0)
write(r8, &(0x7f0000000290)='1\x00', 0x1) (async)
r9 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
r10 = openat(r4, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0)
mkdirat(r10, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) (async, rerun: 64)
symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r10, &(0x7f0000000700)='Loopback.usb0\x00') (async, rerun: 64)
r11 = openat(r4, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) (async, rerun: 32)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='usb_gadget/g1\x00', &(0x7f00000002c0)='ocfs2\x00', 0x1000000, &(0x7f0000000300)='\x00') (async, rerun: 32)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r12, 0x6, 0x1010, r11, 0x0) (async)
write(r1, &(0x7f0000000880)='5\x00', 0x2) (async)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)

4m2.519943316s ago: executing program 32 (id=173):
r0 = socket$inet(0x2, 0x1, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000340)=0x400, 0x4) (async)
mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000040)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x7f)
r4 = openat(r3, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='config\x00', 0x101000, 0x40)
r6 = openat(r5, &(0x7f0000000080)='webusb/use\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)='0x1d6b\x00', 0x6)
r7 = openat(r4, &(0x7f0000000240)='idProduct\x00', 0x2, 0x12d)
write(r7, &(0x7f0000000280)='0x0104\x00', 0x6) (async)
r8 = openat(r4, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0)
write(r8, &(0x7f0000000290)='1\x00', 0x1) (async)
r9 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
r10 = openat(r4, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0)
mkdirat(r10, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) (async, rerun: 64)
symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r10, &(0x7f0000000700)='Loopback.usb0\x00') (async, rerun: 64)
r11 = openat(r4, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) (async, rerun: 32)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='usb_gadget/g1\x00', &(0x7f00000002c0)='ocfs2\x00', 0x1000000, &(0x7f0000000300)='\x00') (async, rerun: 32)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r12, 0x6, 0x1010, r11, 0x0) (async)
write(r1, &(0x7f0000000880)='5\x00', 0x2) (async)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)

3m28.29535811s ago: executing program 3 (id=595):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x0)

3m28.219415296s ago: executing program 3 (id=596):
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x5, 0x40000)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x47a6, '\x00', 0x0, r0, 0x5, 0x4, 0x3}, 0x50)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000000c0)={{r1}, "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"})
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000010c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001140)={0x6, &(0x7f0000001100)=[{0x7, 0x77, 0x1, 0x9}, {0x6, 0x79, 0xe9, 0x81}, {0x8001, 0x80, 0x5, 0x8}, {0x9, 0x4, 0x9a, 0x200}, {0x4, 0x9, 0xfb, 0x5}, {0x2, 0xed, 0xd0, 0x3}]})
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000003b40)=[{0xfff, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001180)=""/61, 0x3d}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/129, 0x81}, {&(0x7f0000002280)=""/17, 0x11}]}, {0x3ff, 0x0, &(0x7f0000002740)=[{&(0x7f0000002300)=""/224, 0xe0}, {&(0x7f0000002400)=""/167, 0xa7}, {&(0x7f00000024c0)=""/134, 0x86}, {&(0x7f0000002580)=""/252, 0xfc}, {&(0x7f0000002680)=""/187, 0xbb}]}, {0xc, 0x0, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/152, 0x98}, {&(0x7f0000002880)=""/207, 0xcf}, {&(0x7f0000002980)=""/118, 0x76}]}, {0x5, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002a40)=""/165, 0xa5}, {&(0x7f0000002b00)=""/4096, 0x1000}]}], 0x4)
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f000000b5c0)=[{0x10, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003b80)=""/189, 0xbd}, {&(0x7f0000003c40)=""/64, 0x40}, {&(0x7f0000003c80)=""/171, 0xab}, {&(0x7f0000003d40)=""/129, 0x81}]}, {0xfffff1a1, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003e40)=""/32, 0x20}, {&(0x7f0000003e80)=""/4096, 0x1000}]}, {0x6, 0x0, &(0x7f0000006140)=[{&(0x7f0000004ec0)=""/62, 0x3e}, {&(0x7f0000004f00)=""/227, 0xe3}, {&(0x7f0000005000)=""/152, 0x98}, {&(0x7f00000050c0)=""/2, 0x2}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/39, 0x27}]}, {0x9, 0x0, &(0x7f0000006400)=[{&(0x7f00000061c0)=""/87, 0x57}, {&(0x7f0000006240)=""/152, 0x98}, {&(0x7f0000006300)=""/39, 0x27}, {&(0x7f0000006340)=""/87, 0x57}, {&(0x7f00000063c0)=""/16, 0x10}]}, {0x2b44, 0x0, &(0x7f0000006980)=[{&(0x7f0000006480)=""/22, 0x16}, {&(0x7f00000064c0)=""/107, 0x6b}, {&(0x7f0000006540)=""/209, 0xd1}, {&(0x7f0000006640)=""/203, 0xcb}, {&(0x7f0000006740)=""/127, 0x7f}, {&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f0000006880)=""/98, 0x62}, {&(0x7f0000006900)=""/115, 0x73}]}, {0x8, 0x0, &(0x7f0000006b40)=[{&(0x7f0000006a00)=""/106, 0x6a}, {&(0x7f0000006a80)=""/60, 0x3c}, {&(0x7f0000006ac0)=""/128, 0x80}]}, {0x0, 0x0, &(0x7f0000008000)=[{&(0x7f0000006b80)}, {&(0x7f0000006bc0)=""/43, 0x2b}, {&(0x7f0000006c00)=""/152, 0x98}, {&(0x7f0000006cc0)=""/114, 0x72}, {&(0x7f0000006d40)=""/84, 0x54}, {&(0x7f0000006dc0)=""/188, 0xbc}, {&(0x7f0000006e80)=""/16, 0x10}, {&(0x7f0000006ec0)=""/195, 0xc3}, {&(0x7f0000006fc0)=""/9, 0x9}, {&(0x7f0000007000)=""/4096, 0x1000}]}, {0x9, 0x0, &(0x7f00000082c0)=[{&(0x7f00000080c0)=""/81, 0x51}, {&(0x7f0000008140)=""/207, 0xcf}, {&(0x7f0000008240)=""/102, 0x66}]}, {0x7fffffff, 0x0, &(0x7f0000008380)=[{&(0x7f0000008300)=""/117, 0x75}]}, {0x3, 0x0, &(0x7f0000008800)=[{&(0x7f00000083c0)=""/236, 0xec}, {&(0x7f00000084c0)=""/197, 0xc5}, {&(0x7f00000085c0)=""/95, 0x5f}, {&(0x7f0000008640)=""/28, 0x1c}, {&(0x7f0000008680)}, {&(0x7f00000086c0)=""/82, 0x52}, {&(0x7f0000008740)=""/180, 0xb4}]}, {0x6, 0x0, &(0x7f0000009980)=[{&(0x7f0000008880)=""/4096, 0x1000}, {&(0x7f0000009880)=""/51, 0x33}, {&(0x7f00000098c0)=""/187, 0xbb}]}, {0x0, 0x0, &(0x7f0000009cc0)=[{&(0x7f00000099c0)=""/242, 0xf2}, {&(0x7f0000009ac0)=""/29, 0x1d}, {&(0x7f0000009b00)=""/38, 0x26}, {&(0x7f0000009b40)=""/223, 0xdf}, {&(0x7f0000009c40)=""/2, 0x2}, {&(0x7f0000009c80)=""/64, 0x40}]}, {0x8, 0x0, &(0x7f000000b180)=[{&(0x7f0000009d40)=""/91, 0x5b}, {&(0x7f0000009dc0)=""/232, 0xe8}, {&(0x7f0000009ec0)=""/225, 0xe1}, {&(0x7f0000009fc0)=""/26, 0x1a}, {&(0x7f000000a000)=""/11, 0xb}, {&(0x7f000000a040)=""/4096, 0x1000}, {&(0x7f000000b040)=""/12, 0xc}, {&(0x7f000000b080)=""/235, 0xeb}]}, {0x4429, 0x0, &(0x7f000000b440)=[{&(0x7f000000b200)=""/225, 0xe1}, {&(0x7f000000b300)=""/193, 0xc1}, {&(0x7f000000b400)=""/57, 0x39}]}, {0x3, 0x0, &(0x7f000000b580)=[{&(0x7f000000b480)=""/44, 0x2c}, {&(0x7f000000b4c0)=""/80, 0x50}, {&(0x7f000000b540)=""/4, 0x4}]}], 0xf)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000b6c0)={'wlan1\x00', <r2=>0x0})
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f000000b700)=0x2, 0x4)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f000000b740)={{0x2, 0x4e24, @loopback}, {0x306, @remote}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 'wg1\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f000000b7c0)={'wg2\x00'})
write$cgroup_pressure(r0, &(0x7f000000b800)={'some', 0x20, 0x400, 0x20, 0x2da}, 0x2f)
ioctl$sock_ifreq(r0, 0xcda7, &(0x7f000000b840)={'\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}})
read(r1, &(0x7f000000b880)=""/252, 0xfc)
ioctl$TCGETA(r0, 0x5405, &(0x7f000000b980))
syz_80211_inject_frame(&(0x7f000000b9c0), &(0x7f000000ba00)=@ctrl_frame=@pspoll={{}, @random, @random="d3f59ffbf601"}, 0x10)
preadv(r0, &(0x7f000000bf40)=[{&(0x7f000000ba40)=""/36, 0x24}, {&(0x7f000000ba80)=""/240, 0xf0}, {&(0x7f000000bb80)}, {&(0x7f000000bbc0)=""/132, 0x84}, {&(0x7f000000bc80)=""/186, 0xba}, {&(0x7f000000bd40)=""/243, 0xf3}, {&(0x7f000000be40)=""/228, 0xe4}], 0x7, 0x0, 0x9)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f000000bfc0)=0x2)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000000c000)={0x1, 0x8000}, 0x4)
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f000000e840)=[{0x5a2, 0x0, &(0x7f000000c500)=[{&(0x7f000000c040)=""/143, 0x8f}, {&(0x7f000000c100)=""/186, 0xba}, {&(0x7f000000c1c0)=""/29, 0x1d}, {&(0x7f000000c200)=""/159, 0x9f}, {&(0x7f000000c2c0)=""/200, 0xc8}, {&(0x7f000000c3c0)=""/15, 0xf}, {&(0x7f000000c400)=""/217, 0xd9}]}, {0x7, 0x0, &(0x7f000000c680)=[{&(0x7f000000c580)=""/181, 0xb5}, {&(0x7f000000c640)=""/55, 0x37}]}, {0x1, 0x0, &(0x7f000000c900)=[{&(0x7f000000c6c0)=""/37, 0x25}, {&(0x7f000000c700)=""/167, 0xa7}, {&(0x7f000000c7c0)=""/152, 0x98}, {&(0x7f000000c880)=""/24, 0x18}, {&(0x7f000000c8c0)=""/36, 0x24}]}, {0x9, 0x0, &(0x7f000000dc80)=[{&(0x7f000000c980)=""/177, 0xb1}, {&(0x7f000000ca40)=""/211, 0xd3}, {&(0x7f000000cb40)=""/56, 0x38}, {&(0x7f000000cb80)=""/191, 0xbf}, {&(0x7f000000cc40)=""/24, 0x18}, {&(0x7f000000cc80)=""/4096, 0x1000}]}, {0xe, 0x0, &(0x7f000000de00)=[{&(0x7f000000dd00)=""/212, 0xd4}]}, {0x65, 0x0, &(0x7f000000e180)=[{&(0x7f000000de40)=""/152, 0x98}, {&(0x7f000000df00)=""/55, 0x37}, {&(0x7f000000df40)=""/95, 0x5f}, {&(0x7f000000dfc0)=""/124, 0x7c}, {&(0x7f000000e040)=""/151, 0x97}, {&(0x7f000000e100)=""/106, 0x6a}]}, {0xb3c2, 0x0, &(0x7f000000e3c0)=[{&(0x7f000000e200)=""/234, 0xea}, {&(0x7f000000e300)=""/172, 0xac}]}, {0xfffffffc, 0x0, &(0x7f000000e7c0)=[{&(0x7f000000e400)=""/251, 0xfb}, {&(0x7f000000e500)=""/55, 0x37}, {&(0x7f000000e540)=""/68, 0x44}, {&(0x7f000000e5c0)=""/86, 0x56}, {&(0x7f000000e640)=""/206, 0xce}, {&(0x7f000000e740)=""/85, 0x55}]}], 0x8)
ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f000000e8c0)={0x31})
write$cgroup_pressure(r0, &(0x7f000000e900)={'some', 0x20, 0x0, 0x20, 0xe3}, 0x2f)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f000000ea40)={0x1, 0x6, &(0x7f000000e940)=[0x7f, 0x5, 0x9, 0x1, 0x101, 0x100], &(0x7f000000e980)=[0x20, 0x4, 0x2, 0x211, 0x0, 0x5, 0x7, 0x2], &(0x7f000000e9c0)=[0x5], &(0x7f000000ea00)=[0x4c2f, 0xa5]})
recvfrom$inet(r0, &(0x7f000000ea80)=""/51, 0x33, 0x101, &(0x7f000000eac0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$RTC_PIE_ON(r0, 0x7005)
ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f000000eb00)={0x6, 0x7, 0x2f, 0x80000000})
r3 = io_uring_setup(0x2c2d, &(0x7f000000eb40)={0x0, 0x30d1, 0x4, 0x3, 0xc2, 0x0, r0})
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f000000f140)={0x6, 0x1, 0x0, &(0x7f000000f080)=[{&(0x7f000000ebc0)=""/221, 0xdd}, {&(0x7f000000ecc0)=""/163, 0xa3}, {&(0x7f000000ed80)=""/191, 0xbf}, {&(0x7f000000ee40)=""/228, 0xe4}, {&(0x7f000000ef40)=""/36, 0x24}, {&(0x7f000000ef80)=""/250, 0xfa}], &(0x7f000000f100)=[0x3, 0x334c, 0x1ff, 0x3, 0x2, 0x0, 0x8000]}, 0x20)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000f1c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f000000f280)={&(0x7f000000f180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000000f240)={&(0x7f000000f200)={0x34, r4, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x10}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)

3m27.677366146s ago: executing program 3 (id=603):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x40000000000008f, 0x12300, 0x0)
close(r0)

3m27.49627832s ago: executing program 3 (id=606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf2501000000050004000200000008000600ac1414bb08000b00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0)
write$tun(r2, &(0x7f0000000040)={@void, @void, @llc={@snap={0xaa, 0x0, "e1ea", "708f7a", 0x8914, "a8953950c3d1a1f83f97025cc123c399b9751a5f2cf8cbc80f88a77065852b61dbab06fdd53ae31c51d3adf527fc49c1c9f330425df22fa9fd26f645e4c12d4c807bda5b035b28773ff1003335397e474193185a327ad47ee05f7b64aa"}}}, 0x66)

3m27.379475119s ago: executing program 3 (id=609):
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async, rerun: 64)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (rerun: 64)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8})
getpid() (async)
socket$key(0xf, 0x3, 0x2)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) (async)
write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (rerun: 32)
r5 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48050)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090)

3m26.937961428s ago: executing program 3 (id=618):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0)

3m11.161926086s ago: executing program 33 (id=618):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0)

40.310919538s ago: executing program 2 (id=2257):
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3)
syz_open_dev$ttys(0xc, 0x2, 0x1)
close(0x3) (async)
close(0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
close(0x3)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f00000008c0)={'syz1\x00', {0x0, 0x9, 0x5, 0x81}, 0x42, [0x3, 0x0, 0x7, 0x1, 0x49f4, 0x80000000, 0x93b3, 0x8, 0x3, 0x1, 0x8, 0x5, 0x5, 0x0, 0x1, 0x3, 0x7, 0x40, 0x8, 0x10, 0x4, 0x9, 0x0, 0x2, 0xd, 0xd4e95d3, 0x1, 0x19de, 0xf7, 0x2, 0x1, 0xffff, 0xa, 0xfffffffc, 0x40000000, 0xb, 0x3, 0x5, 0xf12e, 0x1, 0xf8, 0x4, 0x99, 0x8, 0xb5, 0x7ff, 0x4, 0x1, 0x38, 0x67e, 0x401, 0x9, 0xffff, 0x6, 0x39f, 0x2, 0x5bc0, 0xe000, 0x16a0, 0x101, 0xfffffffa, 0x0, 0x32], [0x1, 0x4, 0x27f, 0x7, 0x8, 0x9, 0x5, 0x40, 0x2, 0x7fff, 0x8001, 0x8000, 0x9, 0xfffffff7, 0x1, 0x44, 0x200, 0x1, 0xffffff49, 0xffffffff, 0x4, 0x6, 0x81, 0x80000000, 0xbdd0, 0x4, 0x8, 0x6, 0x2, 0x3, 0x1, 0x2, 0x0, 0xfffffffd, 0x2, 0x0, 0x6, 0x24, 0x8, 0x2, 0x1, 0xd5d, 0x3, 0x8, 0x9, 0x7fffffff, 0x38, 0x0, 0xb, 0x7f, 0xe6d, 0x100, 0x40, 0xffffffff, 0x1, 0xff, 0xf060, 0x3, 0xf505, 0x8, 0x13, 0x11c, 0x7, 0x3], [0x44, 0x9, 0x504, 0x1000, 0xa2000000, 0x0, 0x8, 0x3db, 0x9, 0x2, 0x0, 0x8, 0x4, 0x7, 0x7, 0x97, 0xb, 0x4, 0x7, 0xff, 0x6, 0x5, 0x7, 0x40, 0x2, 0x3, 0x7fff, 0x8, 0x7, 0x9, 0xffffffff, 0x10001, 0x6, 0x1, 0xf, 0x5a, 0x9, 0xf, 0x5, 0xe5c6, 0x0, 0x6bd4, 0x2, 0x81, 0x7, 0xb, 0xe, 0x6, 0xfff, 0xf, 0x7fffffff, 0x936, 0x81, 0x3, 0xc5a8, 0x5, 0x9, 0x0, 0x2, 0x1ff, 0x0, 0x4, 0xfffffff9, 0x3], [0xf058, 0xb, 0x8, 0xc, 0x77f7e27b, 0x4, 0x5, 0x8, 0x4, 0x2d, 0x5077495c, 0x8, 0x400, 0x1dbe0f18, 0xbad3, 0x5, 0xffffff7f, 0x8, 0x80000000, 0x10000, 0x1000, 0x8, 0xa88, 0x7fffffff, 0x421, 0x9, 0x100, 0xfffffffc, 0xff, 0x2, 0x1, 0x401, 0x8f8, 0x6, 0xfffffff8, 0x2, 0x6, 0x8, 0x4, 0x8001, 0x9c4, 0x8, 0x3, 0x8, 0x2a12, 0x6, 0x10, 0x5, 0x2, 0x9, 0x2, 0x2, 0xfff, 0xe11f27b, 0x200, 0x5, 0x1, 0x401, 0x9, 0x10000, 0x1a, 0xf, 0x1, 0x2]}, 0x45c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
r3 = syz_open_dev$ptys(0xc, 0x3, 0x1)
open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113)
r4 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) (async)
fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe})
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file3\x00')
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000880)=0x3) (async)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000880)=0x3)

40.227391226s ago: executing program 2 (id=2260):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./ffs\x00', 0x6b)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)

40.158214675s ago: executing program 2 (id=2261):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000140, 0x0) (async)
sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377a", 0x18, 0x805, 0x0, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0x9) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$tcp_congestion(r4, &(0x7f0000000180)='scalable\x00', 0x9) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f00000000c0)={r2, 0x1, 0x4, 0x3, 0x7}, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000440)={r8, 0x625, 0x3, 0x1000}, &(0x7f0000000480)=0x10) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r8, 0x3}, 0x8) (async)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) (async)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

40.097569994s ago: executing program 2 (id=2262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in6=@local}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe8)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f0000000080)=ANY=[@ANYBLOB='o,\x00=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r3 = getuid()
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x4000000000, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10000000000000, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x90, 0x0, 0x200, {0x2, 0x0, 0xee02, 0x0, 0x6, 0x0, {0xfffffffffffffffe, 0x0, 0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x1000, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x2002080, &(0x7f0000000600)={[{@gid={'gid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x3}}, {@gid={'gid', 0x3d, r6}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@subj_type={'subj_type', 0x3d, '/\x04!\'.%\''}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r1}}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0)

40.023828035s ago: executing program 2 (id=2265):
r0 = socket(0x840000000002, 0x3, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000040)="929d547c", 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70004000000005000000080009000200000008000c00a80a0000060001000800000008000b00020000000c00166be4fb000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x34}}, 0x44000080)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c0001800800010000ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x4, 0x0, 0xfffffffd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x0)

39.70344466s ago: executing program 2 (id=2271):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000480), 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x2)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40004)
r4 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x650fc2)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88507de050500000000f2170e65e3f50327e422000000000000bf0000000200000000001900", 0x3c}, 0x60)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88507de050500000000f2170e65e3f50327e422000000000000bf0000000200000000001900", 0x3c}, 0x60)
ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, 0x0)
pipe2(&(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x4800)
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000040)={0x53, 0x5, 0xfeb9, {0x1008, 0x4}, {0x9, 0xffff}, @cond=[{0x8000, 0x2, 0x1, 0x4, 0x10, 0xd}, {0x8, 0x1, 0x2, 0xe5f, 0x0, 0x15a}]})

39.662667965s ago: executing program 34 (id=2271):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000480), 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x2)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40004)
r4 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x650fc2)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88507de050500000000f2170e65e3f50327e422000000000000bf0000000200000000001900", 0x3c}, 0x60)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88507de050500000000f2170e65e3f50327e422000000000000bf0000000200000000001900", 0x3c}, 0x60)
ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, 0x0)
pipe2(&(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x4800)
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000040)={0x53, 0x5, 0xfeb9, {0x1008, 0x4}, {0x9, 0xffff}, @cond=[{0x8000, 0x2, 0x1, 0x4, 0x10, 0xd}, {0x8, 0x1, 0x2, 0xe5f, 0x0, 0x15a}]})

10.323624676s ago: executing program 4 (id=2690):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
close(0x4)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340))
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1})

10.286569186s ago: executing program 4 (id=2691):
memfd_create(0x0, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000500)={0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}})
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000001b40)={0x2020}, 0x2020)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff25, 0x0, 0x0, 0x0}, 0x94)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="cce6"], 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00', r9}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_cmd={0x2c, 0x7, 0x0, 0x9, 0x7d, 0x5, 0x81, 0x87, 0xda, 0xf3, 0xa, 0x31, 0x6, 0x4, 0x0, 0x8001f76, [0x7fff, 0x7b0]}})

9.87886851s ago: executing program 4 (id=2694):
socket$kcm(0x11, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x6}}, @TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

9.688953436s ago: executing program 4 (id=2696):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x6)
write(r8, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x7, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]})
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

8.767739741s ago: executing program 4 (id=2709):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0)
syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001400090527bd7000fd4f015bb07f1d2d3d3b1943b03147a7dbdf25021f00cb", @ANYRES32=r2, @ANYBLOB="0800040064010104080008004903000008000200ac1414aa0800090007010000"], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)

8.462678733s ago: executing program 4 (id=2716):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x154)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={<r2=>r0, &(0x7f0000000080)='^}\x00', 0x200000, &(0x7f00000000c0)={@_ha_fsid={[0xffffffff, 0x5]}, {0x2, 0x6a56, 0x2, 0x2}}, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x374f55ec})
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0xa, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xb8105ec6297ab6ab)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000002c0)={0x0, 0x3, [0x4d, 0xffffffffffffb7bd, 0x5, 0x100000001, 0x8, 0xffffffff]})
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x200, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)
syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x18, 0x0, <r3=>r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0x4a5, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x20}}}, &(0x7f0000000480))
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f00000004c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000580)={0x0, <r5=>0x0, <r6=>0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f00000005c0)={0x2, r5, 0x7, 0x8000, 0x3, 0x2, 0x6})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000640)={0x0, r5, r6, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0]})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000007c0)={<r9=>0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x4e, 0x8, 0x80, 0x917, 0x0, 0x3, 0x9}, &(0x7f0000000880)=0x9c)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000008c0)={r9, 0x54, "e2a92142536a16aeff8bb25c0f22238a0a754092a32fd17797ce33a7593bedd605861cbc2e74a54f67ee54f4e5df6c43ff732a4dc99688fbf2cf86490db42ff78c9c943febd7b7a25df5604a0c08007029ba3efb"}, &(0x7f0000000940)=0x5c)
ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000980)={'bridge0\x00', 0xf060})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x16}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24004081)
ioctl$FITHAW(r2, 0xc0045878)
accept4(r1, &(0x7f0000000b40)=@ieee802154={0x24, @short}, &(0x7f0000000bc0)=0x80, 0x0)
syz_clone3(&(0x7f0000000e80)={0x1000, &(0x7f0000000c00), &(0x7f0000000c40)=<r10=>0x0, &(0x7f0000000c80), {0x24}, &(0x7f0000000cc0)=""/222, 0xde, &(0x7f0000000dc0)=""/107, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8, {r1}}, 0x58)
kcmp(r10, 0x0, 0x4, r7, r1)
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000f00)={<r11=>0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(0xffffffffffffffff, 0xc0106446, &(0x7f0000000f40)={r11})
socket$alg(0x26, 0x5, 0x0)
recvfrom(r2, &(0x7f0000000f80)=""/13, 0xd, 0x112, &(0x7f0000000fc0)=@qipcrtr={0x2a, 0x0, 0x4000}, 0x80)

4.526050901s ago: executing program 5 (id=2770):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x13c89801f10bdc55, 0x20)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r1 = socket(0x2, 0x3, 0x6)
bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async)
sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async)
timer_create(0x0, 0x0, 0x0) (async)
timer_delete(0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="8842000094000000280012800b00010067656e65766500001800028014000700fc0100"/48], 0x48}}, 0x26040010) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0x400c8a1, 0xc000, 0x8, 0x3a8})
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)
socket$packet(0x11, 0x3, 0x300)

4.286241905s ago: executing program 1 (id=2771):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_80211_join_ibss(&(0x7f00000023c0)='wlan0\x00', &(0x7f0000002400)=@random="e50ec515f7bd5fa0b94cd85943", 0xd, 0x0)

4.285903495s ago: executing program 5 (id=2772):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) (async)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004041)

4.199074647s ago: executing program 5 (id=2773):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080))
r1 = syz_io_uring_setup(0x365, &(0x7f0000000540)={0x0, 0xfffff7fe, 0x1000, 0x8000003, 0x333, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000))
mlock(&(0x7f000040a000/0x4000)=nil, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x25dfd9fc, {0x5}}, 0x14}}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x201, 0x0)
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x0, 0x3], 0x2)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44094}, 0x20000000)
mkdirat(r4, &(0x7f0000000280)='./file0\x00', 0x3)
pread64(r4, &(0x7f0000000300)=""/246, 0xf6, 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x300c072, &(0x7f0000000480)=ANY=[@ANYBLOB="73746193733d676c6f62616c2c0038e658721478b01643160f37b610f9ef7eb8bcc7cad454a7a88c1bcdee203106b9a400253c661b10b70f286e96b38a2f395b92d0ff06f44081f2ac03f5b5c59fa05cc401c381af5e96390433a7cdd95d587c3d3442e02d61ba4ef6cd3c4832c026d77997f82315bbfc9bbee05f2af36e43809e8234d74d82f9dea2dd2302f4b3eca55498810feeeaccdbdd5ae2ce34a9dd"])
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000001c0)={{r5}, 0x80000000, 0x2, 0xffffffff})

4.187219565s ago: executing program 5 (id=2774):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x2, 0x5, 0x1, 0x10001, 0x3, "7e42f802b364019253a4c05758d36862c8bd30"})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43b820a8e8c9881db660164333526f680eac8c863a63"], 0x88)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x1, r3, 0x4})
r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5)
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5)
r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6)
r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r7)
r9 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r8)
r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r9)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r10)
r11 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r5, r8, r11, 0x0)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r3, 0xc040583f, &(0x7f00000004c0)={{@_ha_fsid={[0x4f12, 0x1]}, {0x3, 0x9, 0x3, 0x8}}, {{[0x7, 0x9, 0x80000001, 0xc2]}, 0x0, 0x1, 0xfffffff9, 0x0, &(0x7f0000000340)=[{{@_ha_fsid={[0x96]}, {0xfd4e, 0x2152, 0x10000, 0x8}}, 0x3, 0x0, 'sysfs\x00'}, {{@_ha_fsid, {0x7, 0x7fff, 0x6, 0x4}}, 0x7fffffff, 0x0, '@\x00'}, {{@align=0x7fffffffffffffff, {0x1d2, 0xe, 0x1e, 0x8000}}, 0x7, 0x0, '               \x00'}, {{@align=0x80, {0xfffd, 0x81, 0x94e6, 0x1000}}, 0x5, 0x0, '[&@*\xd8&:,+\x00'}, {{@_ha_fsid={[0x3, 0x4]}, {0x2, 0x2, 0xfffffff7, 0x100000001}}, 0x5, 0x0, '/dev/net/tun\x00'}, {{@align=0x3, {0x7, 0x8, 0x0, 0x678}}, 0xe567, 0x0, '.*.^}#[})}#%[}#\x00'}, {{@align, {0x9, 0x101, 0x3, 0xd56f}}, 0x3, 0x0, '/dev/net/tun\x00'}, {{@align=0x1, {0x4, 0xfff8, 0xfffff000, 0x3ff}}, 0x7f, 0x0, '++-\x00'}]}})
r12 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
read$FUSE(r12, &(0x7f0000000840)={0x2020}, 0x2020)

4.113970608s ago: executing program 1 (id=2776):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
close(0x4)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0)
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1})

4.082253646s ago: executing program 1 (id=2778):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x54, r1, 0x101, 0x4000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "26f391610933652e7d8e9a8da6"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}]}, 0x54}}, 0x2400c800)
syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12")
r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042)
write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r4, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000080)=0x10001)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)

4.037007229s ago: executing program 1 (id=2780):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r0, 0x4)
listen(r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x0, 0x100000}, &(0x7f0000ffd000), &(0x7f0000ffe000), &(0x7f0000000140))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000001c0))
io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90)
io_uring_register$IORING_REGISTER_FILES(r3, 0x14, &(0x7f00000003c0), 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x5c, 0x0, &(0x7f00000004c0)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/58, 0x3a, 0x2, 0x29}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0})
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000008c0)='trusted\x00', &(0x7f0000000900)=@keyring)

3.863901528s ago: executing program 1 (id=2782):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f00000001c0))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000200)={{r0}, "77dbb9a5729ab3c5fb7bc5c26a33d0267c08c24c0b012d92d84ca89f771d090e6ec8226723f201abf422f9ea885e8769c7bbd6fd8ccdf303a584ad0f1d954dc24b2f93e680fb683a4569eada63b06e080f01488c2755b159b2920e5704e4eac18eb769032baea4b1078909f67bf3e23497ab865527937234a63788ce1b31e99c240c67c3f0735161556355d4633298556dc48a90a2b39a0947bbf46ade64d7b6af5c3e4f498dc87308bc0de3835b5c12c2065029b768d9b9e2266f5a43482cf3f1cd03f60591108c6aa2c4f42fd474002416d600acbbb6cbb6828deffe70d68d5d240cb33d817172f99abae6363a444e3661306434e999e379a97a38074fa8d7a888165fb6611f358b2a1a71f6adf4e302153f1bd110423bcb4ea2ec69e19ebb9da1b293aca9dd80e5d6a718de84c9503e7206bb7d1e9141ca49516cbd06a95d52d3207c2d3726d6931c8d27f3933820c675bd42a5b8a6862fbaffe823bf0255b866f2e5bce08311416505686a8dae3fb19537bddb63de8b3ec186293dbc378a0d74f3c41f5a82fcad57606d4577aede0fa6bd2efeb613a835c0cd922ecc22d615dd065a105623550c1be2fcccc46c3092d513436ad1671c8f33883bf94933366079416941ba5e4ad68b4b8a0809414ac80ce259670cfa95d398a5300e6a73ba420313e165bb1eb088622eeeb852c0398fba89f1c602c09641409714e7ea231fcc4c412666834265beee0fed65139d98660f5155ef90b182710bbec1693d209b47c50a96ac947eecc0b6ff17dbb6c9f032d87660a4d65ac3aea61be261a35e0a08317e68551a433d8aba4d71bf39f60f4ff905847fdeb157a077f9c2692f07b0fb801a30dc587ea101f57d6a1cf4e67e5d7ab3fde7ea735b5eea047d86739b1c07d3fc5aafdc0fd2ad38ab0e87c425fe45e3718092125d28815a667e039339f90da38d3e2a67f15811209a31439dd532d85d692dafc2afd5e81a73e7e1b785fbe7fbd93ef20e836ea69929032fdc7ecae1e7cf68fcb3ee04825e5966bcf1a6665630cfd3cdb86e4ff8296c0863a6c0e07ecd93b694ffc5656b7ccd0c528f097096cd0ad37e8f75c9524e231a6f44fce6251d76f88e3f3d258c2d48533591078e666a0656e7001d1b243600ee95dd3e45b11dc5b652625f346e4da6fe88b14427143f8bb4e11548535d698d511da6f1946c3996b352eefdbce604f254c068109f976559bce69f133c81bbe8ef6f5e1209c63b9bec411e934af0a3e1e64bbbaf8320100e5fa6c46b58320503e3024fc4da8f0d8f7a79411eda1bfea46815302278d166609fb7b9e8f1440e8159123cb4006ecbe632f6d1ee20131108bef145f28d98cb43260e33d4f13bee83dd748ff636911eb9b5a2d09ac1302cc266c066668b3fd5acefc27fb09c5be3cc9fde6ad0b60c145fce8ae061a40fc6bb9bd5867dd5bd8527a40cb855d2814e7999d0bfbf9b46a91174a4e6ab04fcdb8a1c64a27a5d606686b7b2ec8a14b1d8b8515d77dcd09a48c36d63e195f0b4ca670e5909978048c5fe2a717113e7969d3b5e5048ebd3e29e3052b6a1ab8993f57d753b41c5bee1ad5ffc379454bbabf6f158685d0077afe8bb494d982185483f7c522d90f95aced0d24880bf0a5401f0bbbc9c15abe25c9770b235008719ff4de76486615acd0c0d76e494bd7ea894697063a20c3f7272d7eae07d681089683dd1ea8819ecaf8188fbc28a7573ef15907b25b3d7c44f084bc82a10818f32db406b095110acfe098e796991b2a247fadc3a492be564ac6fb1553e0220a731f6c262d0331863dd5a9a528a357b3873c4aaf8ff38aab8563227b3d766bc8d3dedf5355a5055bba7971fe803832855519d25deb9f9e26d5c4530cf836ba1f10c720b3f744303de32006a1c9026d1318e1921d2cab519e9164edc7b932a37d67f6464a98eee5ab882a1ec71afe12b6bfed8b610edb93827eadb57a5ee3c74bae1e9f44927e96fec66e1b53fa3496ab446bc492e122f6bd5ab78948624aadff379a1a7ee436ee13cc021e74b51c77e54e5838c9e040b78f5c606a2c0c8d3917965ad87be30ccb3abd7d7cb94d17f91a59144512d40499b23b3ea1d753ce01ebf6393f777c7e1625be55f16ab6fee7cdac137df236e5916ea3b0b9808f3aab08cbe469f4450794e5e3612cf500df7eb11ec40771c740ce719d1a840cc495b239c4c84cd69e9452a385121754ec20a3badc92c70d2aaea478b4cc550d58bd31dea857e5f8c9e1f5f6dac32f12092021b3d4df03faa1edf13baeb476038a67188754055d5bca75132eea79b7580884b800958cddefd7a4dadf5fe2cb26116958d3067d962d3748f34968851610e58dbc6896cbaa245a79ec53f86afa523a385df5a68102358871bc6ec1e7176bef895bdc78a16dd063f8b5ab41e5e523a02f37208e7db0101da45d036d673669ff75d284d245b9edf268ecc2a5ac09314e16aa117edd1c0a35ad043f5f183bc65f5fceb72c0544fb314dc8d45b77ccfc8e1707696d90f1f44aacfb3e3f649817d9db029592027b702e75cb9c0d00efdb0ce7507747a291162a48ef9969a5aa40257bece13b1dd00f21cc1097a409ceaa05f43996d8909987a24ba974595da3fb9663d7665e461b9a8b884840cdc5d872f22b2a94d3410520fdd3642f114859aea6e22aafb39eb4dd4f451098821cf4f4de744d9bef64d03384ecf08558d1e14b5e43eebdfcd8db71ccc56fd91dcb921e47afacdd3fc77f91789ab7cf840f1cc364a74b66e7489e2ee0da105dc3bfbed0ae92f6c3c2ceec06bf49944dc560bcf011b2e5e71e09eebeebb136dbb112e1955db6c17093719a5c6c9957a330c10ff375e4b1ee7d336ffd3d2c6a6ef6d850ae110d5ef651467429222f5194e669fc821905fc45c1966ad244f22c579ea990949512f298e06a8e5e8ce9a0890989ba2cf305f1b99b9cb5752ac40b1ac81b8cfe0e3757d32a7a954c8d47f1cefd95748598fdb1e5ba5682d06d43aa5d3512ee3326317c935ac83a6092206e2bb1facae94270dc4958dac2cc71cc550139a5451e34592bef680075436191f895aaa971d115722f1a2ea6720ad23965b551addf3a0890229705e2c1a563c2cc4aac3cdd9b3e796371bc43b2218f69c65673fa02a73a7d2eaf7c349458a3f408fad78b07c75566939c40a0aec3ab9a18f4309086ce697a95ec64a42715f7eefaaf60d723d7130a2f584c3d95f4d648ed501e3b133a3bc3da686f8f68e87ee99b2c560e4440377cd9d7a7cf16d811e7daa38acb9d9cb140267ab371a68886a20589ced503801a7797c4ee9a5880c769bc562502bb08339d176086a7a6fb123ef36a3303e1dc5ddcfe83e86f75d68a461c4d36ba92029ca0571f86ac5acd7d6871e9b1cd2ac80e28c70ea5d63868e65dbc7b3c91c5d7c0a2e823ebf9e0fd155155bea6e3e56a9a214a670d381f971f72399caf794377c55f1907aac82e24468badbf1305a965add00680dd217d5d2dbc039a1074afdfb6591e36c2b164b004e388d79ecda8a989551cd24e3111d3adc48c9b17cc8fd63b9302730110e433b0ac2f71c611dbe512482892b53025f3eb67b8086b02e57b76cfe76f1fbbdf0e8f8e18615f2b0e77d1873ac1a10dbe49c28f476edc04def2d32e30ac9693c5d621b635a00437cbbf5f97374484a2209239cd8db69ca06a5146ebf82b4688e6b51a2f1cfd27350630ecf57b9493f6a4d4278c9dea4293a1f2d9bcc34fca6c98a7f5ebdaf2a7334cbb1898e628a5e18e9fcf99b010834261cfdb00c1a7793424b55286d6c5f4e6cec8ddc25c73c0917f0bb1106c2dda23e1e3a1e1f464d192849cef01412732240edc657734d35e3d988b67f0d8d2c1f138cfa71a73514917920f7d9bd7c584eb6df25092a27701857dd68c59e4c27ce3ebdcf2b53474d2b3748375a66a373489ad95586aad3119731bc66d1661712f955bd47534df3e7586e599b6b7a25445489e13f4ea3193a2d1ed5e7855e49c6b51c238f50026a6f64566523dcb8a1ef9e3cc245976ca715d355771704aaa66308b062529e5739be8bbb82871346cfe9dc0878d6b66443468dc7dbd0df77f2b383a7f31f4c75deb140cef13cdb2b8e3f886d3d96fb3847b1ed144ba8fd08f65ce44cffe0b4f13a99a5c6a1541c5238ef586d28c3762d5b041c1b4fc2f1eed0bc8bffef255f522e32b679c913ab48a9f21cc003fc09065ecd447690ed30b4e87e1d436ab7ccc86bb8fa90b05f3e9da9a9ffcb946f86e2929278180786d3a0714575ab32ea538c68e60f2729337d2189ba6624e85fe4d1c41bce25a9405af4319a0780172f4716257f937a762421ac57476c90af9b47bc5bc6fe2d41345ca41c2d8e528547d031104451791e241f12d835a03fb5b8e01d274d818291416ca5691eb79ca07b75be9cb923179081d9fbc60780c60187d528838dc1eafa380394cd7f1734bfe4d42d563f037eafd4b1668ce5636b250b92f890ee8c246a1a3052184e8c789b707a0602b0ed4b76670b570839d99f41f953283984bcaeea3d2df7bc03f5fe819683f8e1c393876cf1b3c1c0430dee0dbf7d189c6e9c04bb41dd89ecd22d3ced9fc83e030497cef6eeabe0df5bb2e9f4f3462e53cad0e48caafb40a5ddd01cc8447ba15925d5c46d30f33fffbfb262390e101bc872fdffe33b3940fe2cf8855e067f2a1fde4317f399546c6854dbf5466fa2954c08581c30f532aed9775bf88a21427cd0ed3f1f251af2d8fd6ae36e778f72f7a2289c2fe1e3c36c3aa6745e0fe10c286b5385c9b9eba81019b1b891f2262548cf34ebdf7e61e8f10dc05c3e0e55d5c90fdcfb1a8566b329d82109f9740e88ed67845dd9653432fa2d410286fb750efd68f544f14847d2d142b78b4ebe32dd221bd60665627a11b2ba11ea3cf1e0508ce6c5403e36fd84fce1990b6ed437fac63f6e8a6f584c68a67544ea010e5a355cc9dc3d8e40966c6cc875406bd3e8d710eff018e377f3f7a13cc3a7b2c9a8e581c8f9917239a8fc332ffe4af8e03f72d6a6764024865f1ec4fc8bbfa18898613f4d7eebc7138e83e3321aecfc81680ddef86454d405244e3ceb859745ad13380e4d4799097b6f93db58d843ef671103d40f490546a5f9bb631e73161658ca1bdbdeb14fc5625f054c27a0ca5cbef3b2d14339782e0914dfd9ab2032d0c13a3d4bc863af62049f0e3f3879500cda5511318f0e0a3c4ee10bd05667738f41443f9832b9fd7bfd85470a30ce81b83fdb92364ae977d533b5ed3cf0f9542bca33f17adb3fed97e63b75d8b93ad8ebc3c708d419a7af3b773992517cf8cdcb53a965510543ed3a4309b2f58cd9b00f0da053c54a5501a8a971e985bb55eddcdc4defdac0dc3c8e4a834affdb1662e9ab1cd01f0584a77baf66a0b83625fdcb8e6337539a39fead153a21de080a79cd6105b1feadea82a608f11870b66057da9b49a611e290334bc3b1042d989e6e8c39f3428bd91d2c25b376af39b929f40c34e3b35dfae40d73769939bb23d0d5502469e6e34ddcb133009c9f0379202529633e1ed2af87516cc85e80482d8615793f64cf8a532080df58364ee7b69372db2d1dd2e21ece2e2f5640b9083a3ad5ea1eb33ce1c1cee8de5fc0f282b1a52d90994c03fd89d0b330c1dcc506eea88b4652ef7cc1afc71f6bf8ce2c82981679e641999118b014c134a12b626a7285f242d9dc96ccd5631c536e7604e0368e5fab851b9ebbba8f4749ef7b432b3c46a4ab0fb96f0ab0c6429e085b350411c55254c9fca8b7e446c2"})
madvise(&(0x7f0000a7e000/0x4000)=nil, 0x4000, 0x937a5165fcf5c409)

3.793416462s ago: executing program 6 (id=2783):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)
syz_open_dev$dvb_demux(&(0x7f0000000000), 0x1, 0x202)

3.734068415s ago: executing program 6 (id=2784):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 0x8000001, 0x1}}, 0x44)
sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="f00000001200020028bd7000fbdbdf2561733132386c2d67656e6572696300000000000000000000000000000000000000002a89558e9683000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240000000400000000000000000000080001000c0000000800010005000000"], 0xf0}, 0x1, 0x0, 0x0, 0x11}, 0x14)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.576507525s ago: executing program 6 (id=2785):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={<r2=>0x0, 0xffff, 0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010600000000000000002300000001000000050002000000000093af83b696be648bf9928842456a76a58ff57484ef9bb2ebdb811dfb4a6c0e4746fdd85d83157b12fd3f1e4947a047220480ebb7bb0ed4e34e0c7744dcbe0fe0e854ed7f2fef3c8450eeda520ff047690d9199d02bef185b034dc7d2123f377ed8b430740221fe5794749eb6b087d3be2b16", @ANYRESDEC=r2], 0x20}], 0x1}, 0x0)
r5 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r5, &(0x7f0000000300), 0x10)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000))
sendto$phonet(r5, &(0x7f0000000400)="01010000000000000000", 0xa, 0x0, &(0x7f0000000500)={0x23, 0x1}, 0x10)
recvfrom$phonet(r5, &(0x7f0000000600)=""/256, 0x100, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(r3, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r8, &(0x7f00000007c0)={0x2020}, 0x2020)

3.176806505s ago: executing program 6 (id=2786):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
close(0x4)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340))
dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1})

3.057135327s ago: executing program 6 (id=2787):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000)
ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000180)={'pimreg0\x00'})
r3 = syz_open_dev$audion(&(0x7f00000001c0), 0x2, 0x4400)
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc})
ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000003c0)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}})
getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r5)
r6 = socket(0x26, 0x6, 0x9)
ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000540)={0x1, 0x0, {0x2, 0xd3a, 0xfb, 0x6}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40000)
ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000680))
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r3, r3, 0x2f, 0x0, @val=@iter={&(0x7f0000000700)=@map_fd=r3, 0x10}}, 0x20)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000d40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f00000007c0)={0x534, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2151}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbbf4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x837e8c0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x64}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}, 0x56}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf2, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x15}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x225d8655}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcda}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_ID={0xec, 0x3, "a6194c5964617216ea8761cc3a49169619edc0c3b7c930a77b257267f98db25c30bc91f148b90d8eaea67372c17100f3b0e5c8839649c9c007d53c4562b71d8b7a7150bc63da065c73876b3359ce7a32445524aa29ce2b234fe0e7149e10bb64be51459074f089c6b24bdd7256a1bc79f46d524a984d0c309aaf486d606e68a91dbeb9074173d439d35b6b9778a99cfd36643fd5e6f57fc4d6e72f2958552dfcef06092c5b4162be9d2aee242b0e9f1236672711ebaf7cf1e470f568b89121f03546b316817ece538c3ee53135f50058260275cfdbccb2413db402034fa78e72760e47166f9a161d"}, @TIPC_NLA_NODE_ID={0x99, 0x3, "19a9a0d2a57f27ca2a09e6d52d5c54c95b9d8c5f720800e386d2c964bc0a090ceab3d34cb09bb42d493ffaac2bec116eecb11a7ca94065669591d1661e5386b122c5cc564e8f687a8424c28ec3a70a7c8ae884c9bab48491f045be9865a26050a24a165df9b083cf037f5c99cf7e71e3a70789075342a1b30af4d0573176b08d3e45d14f31ec618b18bea823656c98e4fa10c878ab"}]}]}, 0x534}, 0x1, 0x0, 0x0, 0x844}, 0x4000)
connect$pppl2tp(r6, &(0x7f0000000d80)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x1, 0x0, 0x3, {0xa, 0x4e22, 0x800, @loopback, 0x7ff}}}, 0x32)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x101200, 0x0)
fcntl$setlease(r7, 0x400, 0x1)
io_uring_enter(0xffffffffffffffff, 0x40d4, 0xed5c, 0x20, &(0x7f0000000e00)={[0x2]}, 0x8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r5)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2280000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4002)

138.069504ms ago: executing program 6 (id=2788):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8)
setresuid(r0, r0, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r3, &(0x7f0000000800)='1000000\n\x00', 0x8)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x3, 0x4, 0x7})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)={<r5=>0x0})
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r6, 0x3, 0x80000})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
dup3(r7, r2, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x35, &(0x7f0000000380), 0x4)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)

88.464129ms ago: executing program 5 (id=2789):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 64)
syz_open_dev$usbmon(&(0x7f0000000180), 0xfd, 0x200100) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [<r2=>0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x8}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0x1c, "0b96e473522490bdb9a19d8696598650e383e91a0d5aad1c9f8e8b69"}, &(0x7f0000000780)=0x24) (async, rerun: 64)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "8ef5"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async, rerun: 64)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async, rerun: 32)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]})

2.058656ms ago: executing program 5 (id=2790):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x304420, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e080e2d0c08"], 0xb)
mount(0x0, 0x0, 0x0, 0x800, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
sendmsg$nl_route_sched(r0, 0x0, 0x8804)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x800, 0xffe4, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x4040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000040)="10c2", 0x2)
write$binfmt_misc(r2, &(0x7f0000000340)="bb0a78446d6ba5e9d22f4ddd1f587865358a001ad3f4ad5c197df72e4ed8c4ce1cf6f687abc54e149b31c51c38dbb696a43fed7767d3d68f786e603e8d64825fd3c10f262410cf2b46b7dbde3547783791e015d7aaceb9882718dd72722c101f1a3f20395e745380936e74ecefaefb881baa3794bb35027f080121d00317053c9b3d3ca95691aa1e4270cfaa570e088a5e0b9e7813b780d99846956f3eea9b8a6ff66368bef8370aeb433cf95ae140bb242fd4c25c3ac6079ec023772e55c30fc53347e5bbd89eba3cec3c", 0xcb)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket(0x15, 0x5, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
recvfrom$inet6(r3, 0x0, 0x0, 0x100, 0x0, 0x0)

0s ago: executing program 1 (id=2791):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00')
setns(0xc9, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0xbf, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async)
write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
pread64(r0, &(0x7f0000004380)=""/246, 0xf6, 0x2) (async)
pread64(r0, &(0x7f0000004380)=""/246, 0xf6, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x90)

kernel console output (not intermixed with test programs):

END STATUS  ==================
[  252.585092][T12846] ftl_cs: FTL header not found.
[  252.604186][   T73] usbhid 9-1:0.0: can't add hid device: -71
[  252.606626][   T73] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  252.617292][   T73] usb 9-1: USB disconnect, device number 35
[  252.691348][T12846] block2mtd: mtd2: [/dev/loop0] erase_size = 128KiB [131072]
[  252.793547][T12867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1852'.
[  252.982432][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  253.053069][T12872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1854'.
[  253.154942][    T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  253.163592][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.166170][    T9] usb 7-1: Product: syz
[  253.167557][    T9] usb 7-1: Manufacturer: syz
[  253.169067][    T9] usb 7-1: SerialNumber: syz
[  253.173876][    T9] usb 7-1: config 0 descriptor??
[  253.178264][T12876] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  253.249509][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1859'.
[  253.312586][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1860'.
[  253.316103][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1860'.
[  253.355000][T12890] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  253.365944][T12890] CIFS mount error: No usable UNC path provided in device string!
[  253.365944][T12890] 
[  253.370157][T12890] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  253.375431][T12892] sock: sock_set_timeout: `syz.4.1862' (pid 12892) tries to set negative timeout
[  253.393998][T12893] input: syz0 as /devices/virtual/input/input23
[  253.396565][T12893] input: failed to attach handler leds to device input23, error: -6
[  253.441596][   T29] usb 7-1: USB disconnect, device number 11
[  253.569237][   T42] audit: type=1400 audit(2000524612.413:2115): avc:  denied  { remount } for  pid=12904 comm="syz.2.1866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  253.705382][T12917] batadv_slave_1: entered promiscuous mode
[  253.722193][T12915] batadv_slave_1: left promiscuous mode
[  253.748283][   T42] audit: type=1326 audit(2000524612.593:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.1873" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9179df99 code=0x7ffc0000
[  253.757305][   T42] audit: type=1326 audit(2000524612.593:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.1873" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9179df99 code=0x7ffc0000
[  253.769814][   T42] audit: type=1326 audit(2000524612.613:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.1873" exe="/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f6f9179df99 code=0x7ffc0000
[  253.781582][   T42] audit: type=1326 audit(2000524612.613:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.1873" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9179df99 code=0x7ffc0000
[  253.794137][   T42] audit: type=1326 audit(2000524612.613:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.1873" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9179df99 code=0x7ffc0000
[  253.802526][T12928] No source specified
[  253.806480][   T42] audit: type=1326 audit(2000524612.613:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.1873" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6f9179df99 code=0x7ffc0000
[  253.814678][   T42] audit: type=1326 audit(2000524612.613:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.1873" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9179df99 code=0x7ffc0000
[  253.870593][T12938] mac80211_hwsim hwsim2 ������: renamed from wlan0
[  254.110122][T12959] No source specified
[  254.349094][T12980] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  254.361754][T12974] tmpfs: Cannot change global quota limit on remount
[  254.411102][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'.
[  254.414247][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'.
[  254.434226][T12986] can0: slcan on ttyS3.
[  254.485167][T12989] exFAT-fs (nullb0): invalid boot record signature
[  254.488352][T12989] exFAT-fs (nullb0): failed to read boot sector
[  254.490413][T12989] exFAT-fs (nullb0): failed to recognize exfat type
[  254.627396][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'.
[  254.661569][T12981] can0 (unregistered): slcan off ttyS3.
[  255.175201][T13034] 9pnet_virtio: no channels available for device syz
[  255.187860][T13031] syzkaller1: tun_chr_ioctl cmd 1074025677
[  255.189821][T13031] syzkaller1: linktype set to 776
[  255.533964][T13045] fuse: fd is not a fuse device
[  255.587681][T13051] fuse: fd is not a fuse device
[  255.687924][T13054] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint
[  255.695767][T13054] pci 0000:00:1d.0: BAR 4 [io  0xc0e0-0xc0ff]
[  255.748955][ T1446] ieee802154 phy0 wpan0: encryption failed: -22
[  255.750449][T13054] pci 0000:00:1d.0: Adding to iommu group 7
[  255.751036][ T1446] ieee802154 phy1 wpan1: encryption failed: -22
[  255.760091][T13054] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint
[  255.772872][T13054] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff]
[  255.785386][T13054] pci 0000:00:1d.7: Adding to iommu group 7
[  255.794919][T13054] pci 0000:00:1d.7: BAR 0 [mem 0x80801000-0x80801fff]: assigned
[  255.799951][T13054] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]: assigned
[  255.925844][T13054] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 118273 usecs
[  255.957908][T13067] xt_bpf: check failed: parse error
[  255.992915][T13054] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[  256.014797][T13070] program syz.2.1914 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  256.046993][T13054] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
[  256.049974][T13054] uhci_hcd 0000:00:1d.0: detected 2 ports
[  256.053543][T13076] tun0: tun_chr_ioctl cmd 1074025675
[  256.055268][T13076] tun0: persist enabled
[  256.069323][T13078] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  256.073317][T13054] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000
[  256.076286][T13078] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present
[  256.102377][T13054] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02
[  256.107804][T13054] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  256.110444][T13054] usb usb1: Product: UHCI Host Controller
[  256.113650][T13054] usb usb1: Manufacturer: Linux syzkaller uhci_hcd
[  256.115899][T13054] usb usb1: SerialNumber: 0000:00:1d.0
[  256.157480][T13054] hub 1-0:1.0: USB hub found
[  256.162964][T13054] hub 1-0:1.0: 2 ports detected
[  256.269990][T13092] libceph: Failed to parse secret: -22
[  256.293514][T13054] pci 0000:00:1d.7: PCI INT D: failed to register GSI
[  256.296062][T13054] pci 0000:00:1d.7: Can't enable PCI device, BIOS handoff failed.
[  256.299154][T13054] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 48977 usecs
[  256.322588][T13097] binder: 13096:13097 ioctl 4018620d 0 returned -22
[  256.325252][T13097] binder: 13096:13097 ioctl c0306201 200000000300 returned -11
[  256.343457][ T6428] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI
[  256.405503][T13107] geneve0: entered promiscuous mode
[  256.451281][   T73] usb 1-1: new full-speed USB device number 2 using uhci_hcd
[  256.549087][T13115] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.564399][T13110] pci_bus 0000:01: busn_res: [bus 01] is released
[  256.603621][T13111] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port
[  256.609977][   T73] usb 1-1: not running at top speed; connect to a high speed hub
[  256.617662][T13128] netlink: 'syz.5.1928': attribute type 40 has an invalid length.
[  256.626305][T13111] pci 0000:00:04.0: PCI bridge to [bus 01]
[  256.628923][T13111] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  256.632101][T13111] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[  256.636087][T13111] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref]
[  256.640153][T13111] pci 0000:00:04.0: enabling Extended Tags
[  256.655056][   T73] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  256.655296][T13111] pci 0000:00:04.0: Adding to iommu group 4
[  256.663091][   T73] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  256.666567][   T73] usb 1-1: Product: QEMU USB Tablet
[  256.666771][T13132] netlink: 'syz.4.1931': attribute type 3 has an invalid length.
[  256.668301][   T73] usb 1-1: Manufacturer: QEMU
[  256.668312][   T73] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  256.700874][T13111] pci 0000:00:04.0: PCI bridge to [bus 01]
[  256.705922][T13132] fuse: fd is not a fuse device
[  256.708940][   T73] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0005/input/input24
[  256.712055][T13111] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[  256.720385][T13111] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000
[  256.726427][T13111] pci 0000:00:04.0: bridge window [mem 0x80900000-0x80afffff]: assigned
[  256.729796][T13111] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned
[  256.733551][T13111] pci 0000:00:04.0: bridge window [io  0x1000-0x1fff]: assigned
[  256.736226][T13111] pci 0000:00:04.0: PCI bridge to [bus 01]
[  256.738128][T13111] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  256.742607][T13111] pci 0000:00:04.0:   bridge window [mem 0x80900000-0x80afffff]
[  256.746971][T13111] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]
[  256.812535][   T73] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  256.830508][T13111] pcieport 0000:00:04.0: PME: Signaling with IRQ 25
[  256.912507][T13111] pcieport 0000:00:04.0: AER: enabled with IRQ 26
[  256.947628][T13154] program syz.2.1933 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  256.997435][T13157] tipc: Started in network mode
[  256.999381][T13157] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  257.012648][T13157] tipc: Enabled bearer <udp:s>, priority 10
[  257.172507][T13173] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  257.176522][T13173] __nla_validate_parse: 4 callbacks suppressed
[  257.176538][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'.
[  257.280303][   T42] kauditd_printk_skb: 28 callbacks suppressed
[  257.280319][   T42] audit: type=1400 audit(2000524616.123:2151): avc:  denied  { write } for  pid=13167 comm="syz.5.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  257.295681][T13168] syzkaller1: entered promiscuous mode
[  257.297974][T13168] syzkaller1: entered allmulticast mode
[  257.309588][T13171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.457839][   T42] audit: type=1400 audit(2000524616.303:2152): avc:  denied  { write } for  pid=13198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  257.549379][   T42] audit: type=1400 audit(2000524616.393:2153): avc:  denied  { write } for  pid=13207 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  257.633019][   T42] audit: type=1400 audit(2000524616.483:2154): avc:  denied  { write } for  pid=13219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  257.653491][T13220] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  257.689640][   T42] audit: type=1400 audit(2000524616.533:2155): avc:  denied  { write } for  pid=13227 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  257.705732][T13230] netlink: 'syz.5.1951': attribute type 1 has an invalid length.
[  257.756889][   T42] audit: type=1400 audit(2000524616.603:2156): avc:  denied  { write } for  pid=13232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  257.767803][T13238] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13238 comm=syz.4.1952
[  257.781493][T13235] bond3: invalid ARP target 0.0.0.0 specified for addition
[  257.784600][T13235] bond3: option arp_ip_target: invalid value (0)
[  257.788533][T13235] bond3 (unregistering): Released all slaves
[  257.820667][   T42] audit: type=1400 audit(2000524616.663:2157): avc:  denied  { write } for  pid=13240 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.003189][   T42] audit: type=1400 audit(2000524616.853:2158): avc:  denied  { read } for  pid=13259 comm="syz.5.1959" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  258.010114][   T42] audit: type=1400 audit(2000524616.853:2159): avc:  denied  { open } for  pid=13259 comm="syz.5.1959" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  258.079568][   T42] audit: type=1400 audit(2000524616.923:2160): avc:  denied  { map } for  pid=13265 comm="syz.5.1960" path="socket:[50858]" dev="sockfs" ino=50858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  258.151332][ T5864] tipc: Node number set to 4269801492
[  258.690250][T13279] tmpfs: Unknown parameter '18446744073709551615'
[  258.765473][T13283] [U] zͻ�i������[27|
[  258.769829][T13283] [U] �Bs��w�A�er��OU�]~�A��`1e��X�!��j5i�5�����y2�ڂ_�S�"q��h$�������6���\P�[2�*/��Wb_$�0A�7� X�ۖ(wc#����� =��g����<�
[  258.774061][T13283] [U] �I��w�u��b:l��E�e�iBH��k��^�VI|ȥ�\x�d��
[  258.776451][T13283] [U] ����|K�IH�����;F~�{I�ӎ�����=Mkq%����hd9�!�@a�*���lz��~`E���=��[>me��L�h��c��`��'�u���~+ۤ�m�ͷL�����X��������X����舂�i'�j��3�e=:3�/�C�_��<i�eT^��.��q9!��c���7Q���uR�`���S��+Z�	�
[  258.782441][T13283] [U] T�qt�v�b����|�@��D D��E/Q�u�ٝ
3������2������y�rr�|l;6�D�����%��jK���Ʒ2A[��ikuC��덁-T1x�T���v���3��l<��3Α��K�Ì5I�.��>��81�(FW
[  258.787348][T13283] [U] 8)��X�)�YvxRĻ���b��m�b�N�
@ox�;JD�����,
[  258.789451][T13283] [U] *C�n�3��v7�K�E�Xgt_3�����
[  258.791898][T13283] [U] D��/Q�a���zҬE�H��gE1$_k����s�=�R@
[  258.793799][T13283] [U] �ϼcEv��@�
[  258.795026][T13283] [U] a�
�%
[  258.796157][T13283] [U] �@���������cÏ_-Ʊ��Z����&�<Z9�ah�_�L@bKÈ�s�3J�J�5����D��;w�W��ˆUu�yL���bҳ53�ż��{�4XRQ���r�H=M"�/�@	o��������p��S�����~{P���ӡ�~i*�T���~W����)�Q�~ȵ�_ߜ�ͬz�~Vq�۪`
[  258.802242][T13283] [U] �f1�p�3
[  258.803373][T13283] [U] N0[L;a�_��l�&�k�M�C��
[  258.804985][T13283] [U] ��r6w^����g��P$�u����4�~GC����ߚp�k��Ft��w��~�@�L1�
[  258.812046][T13282] [U] �:��K!:��Y咑�;R�����dm����a9�tb�����t���=� Ҫ�+�sS�i�-�Y�Jc� �(����ґ��x�|]k|��_V�
�����҉�T�8MN�i���׎�ͪ���Y΃�zAM�"e�v3�KěO0q]^�)��?ס8ⅴ��S��	�ܝX�e�ݢ��%4�<�g�!���y.����w��a�����׹����)�0�P�/��Q����{���n
[  258.892069][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1969'.
[  258.957287][T13294] fuse: fd is not a fuse device
[  258.974599][T13294] netlink: 'syz.5.1971': attribute type 2 has an invalid length.
[  258.977219][T13294] netlink: 'syz.5.1971': attribute type 2 has an invalid length.
[  258.990282][T13295] netlink: 'syz.5.1971': attribute type 2 has an invalid length.
[  258.994557][T13295] netlink: 'syz.5.1971': attribute type 2 has an invalid length.
[  259.142576][T13305] netlink: 'syz.4.1973': attribute type 10 has an invalid length.
[  259.196365][T13309] xt_hashlimit: size too large, truncated to 1048576
[  259.301986][ T5738] ffs_data_put(): freeing
[  259.321514][ T5849] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  259.334317][T13317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13317 comm=syz.1.1977
[  259.451150][ T5849] usb 10-1: device descriptor read/64, error -71
[  259.462517][T13324] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  259.517544][T13328] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1980'.
[  259.603792][T13332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1981'.
[  259.691171][ T5849] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  259.780223][ T5738] ffs_data_put(): freeing
[  259.827161][ T5849] usb 10-1: device descriptor read/64, error -71
[  259.878618][T13351] fuse: fd is not a fuse device
[  259.897757][ T5738] ffs_data_put(): freeing
[  259.932682][ T5849] usb usb10-port1: attempt power cycle
[  260.161241][   T34] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  260.271234][ T5849] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  260.292044][ T5849] usb 10-1: device descriptor read/8, error -71
[  260.313110][   T34] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  260.316542][   T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.320893][   T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.325064][   T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  260.329297][   T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  260.332316][   T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.337586][   T34] usb 6-1: config 0 descriptor??
[  260.531235][ T5849] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  260.551915][ T5849] usb 10-1: device descriptor read/8, error -71
[  260.661477][ T5849] usb usb10-port1: unable to enumerate USB device
[  260.745071][   T34] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd
[  260.769283][   T34] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  260.984785][T13373] macvlan0: entered promiscuous mode
[  261.013354][   T34] usb 6-1: USB disconnect, device number 37
[  261.046604][T13375] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  261.301220][T13384] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  261.368199][ T5849] bridge0: entered promiscuous mode
[  261.584040][ T5738] ffs_data_put(): freeing
[  261.667798][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2006'.
[  261.685273][T13406] bond3 (unregistering): Released all slaves
[  261.735549][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2009'.
[  261.739705][T13418] netlink: 'syz.2.2009': attribute type 12 has an invalid length.
[  261.753557][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  261.753610][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2009'.
[  261.756661][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  261.759416][T13418] netlink: 'syz.2.2009': attribute type 12 has an invalid length.
[  261.762381][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  261.762406][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  261.826441][T13436] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000
[  261.871586][T13438] ffs_data_put(): freeing
[  261.878678][T13406] kvm: kvm [13405]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  261.903344][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'.
[  261.914695][T13442] tipc: New replicast peer: 127.0.0.1
[  261.918462][T13442] tipc: Enabled bearer <udp:syz2>, priority 10
[  261.931599][T13440] erspan1: entered promiscuous mode
[  261.934365][T13446] fuse: fd is not a fuse device
[  262.188948][ T5864] hid_parser_main: 5 callbacks suppressed
[  262.188970][ T5864] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  262.195466][ T5864] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  262.199536][T13465] coredump: 1119(syz.4.2021): Core dump to core aborted: cannot preserve file permissions
[  262.207045][ T5864] hid-generic 0000:0000:0000.0007: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  262.335664][   T42] kauditd_printk_skb: 14 callbacks suppressed
[  262.335689][   T42] audit: type=1400 audit(2000524621.183:2175): avc:  denied  { setattr } for  pid=13471 comm="syz.1.2022" name="nbd1" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.057770][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'.
[  264.799671][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'.
[  264.816077][T13504] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  265.078063][T13526] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2035'.
[  265.118992][T13529] fuse: Unknown parameter 'f�'
[  265.208673][T13536] kernel profiling enabled (shift: 5)
[  265.313494][T13544] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82
[  265.718352][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'.
[  265.728300][T13570] netlink: 78 bytes leftover after parsing attributes in process `syz.2.2048'.
[  265.800450][T13573] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42
[  265.937551][T13581] netlink: 'syz.2.2053': attribute type 1 has an invalid length.
[  265.975039][T13581] 8021q: adding VLAN 0 to HW filter on device bond2
[  265.985716][T13581] bond1: (slave bond2): making interface the new active one
[  265.989355][T13581] bond1: (slave bond2): Enslaving as an active interface with an up link
[  266.121777][T13589] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.2056'.
[  266.246327][T13593] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  266.261628][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'.
[  266.408076][T13603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2062'.
[  266.571116][ T5828] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  266.649983][T13609] loop6: detected capacity change from 0 to 128
[  266.721189][ T5828] usb 6-1: Using ep0 maxpacket: 8
[  266.724989][ T5828] usb 6-1: config 0 has an invalid interface number: 143 but max is 0
[  266.728096][ T5828] usb 6-1: config 0 has no interface number 0
[  266.730368][ T5828] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  266.734037][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.745618][ T5828] usb 6-1: config 0 descriptor??
[  266.851781][ T5828] viperboard 6-1:0.143: version 0.00 found at bus 006 address 038
[  266.892433][ T5828] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  266.896209][ T5828] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[  266.957460][T13625] 9pnet_virtio: no channels available for device syz
[  266.969478][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=13625 comm=syz.4.2070
[  266.973436][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13625 comm=syz.4.2070
[  266.977173][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13625 comm=syz.4.2070
[  266.984153][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13625 comm=syz.4.2070
[  266.988964][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13625 comm=syz.4.2070
[  266.994006][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13625 comm=syz.4.2070
[  266.999646][ T5946] usb 6-1: USB disconnect, device number 38
[  267.001771][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13625 comm=syz.4.2070
[  267.609037][T13649] could not allocate digest TFM handle crc32c
[  267.650677][T13661] libceph: Failed to parse secret: -22
[  267.692183][T13664] ffs_data_put(): freeing
[  267.981177][ T5946] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  268.132317][ T5946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  268.135651][ T5946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  268.138742][ T5946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  268.142287][ T5946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  268.146841][ T5946] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  268.149629][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.152288][ T5946] usb 9-1: Product: syz
[  268.153588][ T5946] usb 9-1: Manufacturer: syz
[  268.155029][ T5946] usb 9-1: SerialNumber: syz
[  268.158268][ T5946] usb 9-1: config 0 descriptor??
[  268.366233][ T5946] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  268.567303][T13667] usb 9-1: Couldn't submit interrupt_out_urb -90
[  268.572823][ T5864] usb 9-1: USB disconnect, device number 36
[  268.626941][T13683] xt_ecn: cannot match TCP bits for non-tcp packets
[  268.697688][T13689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=13689 comm=syz.1.2089
[  269.241528][T13711] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.354847][T13714] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  269.730215][T13735] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  269.732841][T13735] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  269.744585][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'.
[  269.788719][T13731] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2099'.
[  269.835871][T13738] sit0: entered promiscuous mode
[  269.839650][T13738] netlink: 'syz.2.2104': attribute type 1 has an invalid length.
[  269.842624][T13738] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2104'.
[  270.062463][   T42] audit: type=1400 audit(2000524628.913:2176): avc:  denied  { write } for  pid=13745 comm="syz.1.2105" name="c.1" dev="configfs" ino=14483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  270.112553][T13755] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2110'.
[  270.235807][T13770] 8021q: adding VLAN 0 to HW filter on device macsec0
[  270.251943][ T5849] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  270.275829][T13768] team0 (unregistering): left promiscuous mode
[  270.277808][T13768] team_slave_0: left promiscuous mode
[  270.279593][T13768] team_slave_1: left promiscuous mode
[  270.283061][T13774] netlink: 'syz.4.2115': attribute type 1 has an invalid length.
[  270.305939][T13768] team0 (unregistering): Port device team_slave_0 removed
[  270.310064][   T42] audit: type=1400 audit(2000524629.153:2177): avc:  denied  { recv } for  pid=5727 comm="syz-executor" saddr=127.0.0.1 src=45302 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  270.333114][T13768] team0 (unregistering): Port device team_slave_1 removed
[  270.336790][   T42] audit: type=1400 audit(2000524629.153:2178): avc:  denied  { recv } for  pid=5727 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=45302 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  270.375103][   T42] audit: type=1400 audit(2000524629.223:2179): avc:  denied  { create } for  pid=13778 comm="syz.5.2116" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  270.382734][   T42] audit: type=1400 audit(2000524629.233:2180): avc:  denied  { setattr } for  pid=13778 comm="syz.5.2116" name="file0" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  270.383047][T13780] dummy0: entered allmulticast mode
[  270.395351][   T42] audit: type=1400 audit(2000524629.243:2181): avc:  denied  { read write } for  pid=13778 comm="syz.5.2116" name="file0" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  270.402684][   T42] audit: type=1400 audit(2000524629.243:2182): avc:  denied  { open } for  pid=13778 comm="syz.5.2116" path="/330/file0" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  270.454901][T13783] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2118'.
[  270.759898][T13796] tmpfs: Bad value for 'mpol'
[  270.809342][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'.
[  270.812542][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2123'.
[  270.852833][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2125'.
[  270.855758][T13803] block nbd0: not configured, cannot reconfigure
[  270.894230][T13806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.015317][T13813] ffs_data_put(): freeing
[  271.161775][T13818] sctp: [Deprecated]: syz.1.2131 (pid 13818) Use of int in max_burst socket option deprecated.
[  271.161775][T13818] Use struct sctp_assoc_value instead
[  271.217182][T13821] fuse: fd is not a fuse device
[  271.223834][T13778] dummy0: left allmulticast mode
[  271.293087][   T42] audit: type=1400 audit(2000524630.143:2183): avc:  denied  { unlink } for  pid=8457 comm="syz-executor" name="file0" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  271.364643][T13829] [U] V�3��Fپ"S��/��4:�XTZ�W�T��LW��=
[  271.367474][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'.
[  271.383289][T13828] [U] J"�E:��"


[  271.419537][   T42] audit: type=1400 audit(2000524630.263:2184): avc:  denied  { write } for  pid=13822 comm="syz.5.2132" name="c.1" dev="configfs" ino=14483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  271.584679][T13848] ffs_data_put(): freeing
[  271.723524][T13862] bond4: option downdelay: invalid value (18446744073709551615)
[  271.725916][T13862] bond4: option downdelay: allowed values 0 - 2147483647
[  271.729201][T13862] bond4 (unregistering): Released all slaves
[  271.853588][T13876] CIFS mount error: No usable UNC path provided in device string!
[  271.853588][T13876] 
[  271.856803][T13876] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  271.893022][T13881] ffs_data_put(): freeing
[  272.082832][T13886] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110
[  272.085641][T13886] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110
[  272.088576][T13886] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08
[  272.169740][T13903] sit2: entered promiscuous mode
[  272.183287][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'.
[  272.193627][T13907] netlink: 'syz.5.2156': attribute type 5 has an invalid length.
[  272.225751][T13910] netlink: 'syz.1.2157': attribute type 12 has an invalid length.
[  272.256479][T13914] ffs_data_put(): freeing
[  272.298217][T13918] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  272.310282][T13918] syz.2.2161: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  272.323409][T13918] CPU: 2 UID: 0 PID: 13918 Comm: syz.2.2161 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  272.323446][T13918] Tainted: [L]=SOFTLOCKUP
[  272.323453][T13918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  272.323468][T13918] Call Trace:
[  272.323489][T13918]  <TASK>
[  272.323499][T13918]  dump_stack_lvl+0x100/0x190
[  272.323612][T13918]  warn_alloc.cold+0x94/0xa8
[  272.323661][T13918]  ? __pfx_warn_alloc+0x10/0x10
[  272.323729][T13918]  ? do_syscall_64+0x115/0x870
[  272.323801][T13918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.323832][T13918]  ? __lock_acquire+0x49f/0x1a40
[  272.323877][T13918]  ? find_held_lock+0x2b/0x80
[  272.323908][T13918]  ? avc_has_extended_perms+0x33a/0x1080
[  272.323965][T13918]  ? avc_has_extended_perms+0x33a/0x1080
[  272.323992][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324060][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324088][T13918]  __vmalloc_node_range_noprof+0x136c/0x1630
[  272.324128][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324158][T13918]  ? trace_contention_end+0x126/0x160
[  272.324183][T13918]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[  272.324246][T13918]  ? dvb_demux_do_ioctl+0x929/0x1200
[  272.324281][T13918]  ? find_held_lock+0x2b/0x80
[  272.324313][T13918]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  272.324343][T13918]  ? __pfx___mutex_lock+0x10/0x10
[  272.324374][T13918]  ? tomoyo_path_number_perm+0x188/0x580
[  272.324419][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324448][T13918]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[  272.324479][T13918]  __vmalloc_node_noprof+0xad/0xf0
[  272.324507][T13918]  ? dvb_demux_do_ioctl+0x9e0/0x1200
[  272.324537][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324567][T13918]  dvb_demux_do_ioctl+0x9e0/0x1200
[  272.324596][T13918]  ? do_vfs_ioctl+0x226/0x13e0
[  272.324634][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324658][T13918]  dvb_usercopy+0x167/0x340
[  272.324685][T13918]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  272.324714][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324742][T13918]  ? __pfx_dvb_usercopy+0x10/0x10
[  272.324778][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324805][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324830][T13918]  ? selinux_file_ioctl+0x13b/0x290
[  272.324857][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324880][T13918]  ? selinux_file_ioctl+0xb6/0x290
[  272.324906][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324930][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.324955][T13918]  dvb_demux_ioctl+0x29/0x40
[  272.324979][T13918]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  272.325004][T13918]  __x64_sys_ioctl+0x18e/0x210
[  272.325031][T13918]  do_syscall_64+0x115/0x870
[  272.325051][T13918]  ? clear_bhb_loop+0x40/0x90
[  272.325075][T13918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.325093][T13918] RIP: 0033:0x7f9acf99df99
[  272.325110][T13918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.325130][T13918] RSP: 002b:00007f9ad0810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.325162][T13918] RAX: ffffffffffffffda RBX: 00007f9acfc25fa0 RCX: 00007f9acf99df99
[  272.325175][T13918] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 000000000000000a
[  272.325188][T13918] RBP: 00007f9acfa34ec4 R08: 0000000000000000 R09: 0000000000000000
[  272.325200][T13918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.325211][T13918] R13: 00007f9acfc26038 R14: 00007f9acfc25fa0 R15: 00007fff4860f498
[  272.325234][T13918]  ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d
[  272.325268][T13918]  </TASK>
[  272.325317][T13918] Mem-Info:
[  272.377212][T13929] binder: 13917:13929 ioctl c0306201 2000000003c0 returned -14
[  272.378029][T13918] active_anon:21014 inactive_anon:642 isolated_anon:0
[  272.378029][T13918]  active_file:3817 inactive_file:30035 isolated_file:0
[  272.378029][T13918]  unevictable:768 dirty:262 writeback:0
[  272.378029][T13918]  slab_reclaimable:8502 slab_unreclaimable:78259
[  272.378029][T13918]  mapped:25854 shmem:11218 pagetables:4046
[  272.378029][T13918]  sec_pagetables:296 bounce:0
[  272.378029][T13918]  kernel_misc_reclaimable:0
[  272.378029][T13918]  free:436539 free_pcp:18375 free_cma:0
[  272.387378][T13929] binder: 13917:13929 ioctl c0306201 200000000480 returned -14
[  272.406231][T13918] Node 0 active_anon:83824kB inactive_anon:2568kB active_file:15220kB inactive_file:119452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83016kB dirty:1032kB writeback:0kB shmem:43336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16576kB pagetables:15040kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  272.459908][   T42] audit: type=1400 audit(2000524631.303:2185): avc:  denied  { write } for  pid=13925 comm="syz.4.2164" name="c.1" dev="configfs" ino=14483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  272.470237][T13918] Node 1 active_anon:356kB inactive_anon:0kB active_file:48kB inactive_file:688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20524kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:1144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  272.501338][T13918] Node 0 DMA free:14972kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB
[  272.510020][T13918] lowmem_reserve[]: 0 1225 1225 1225 1225
[  272.513518][T13918] Node 0 DMA32 free:130888kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84008kB inactive_anon:2568kB active_file:15220kB inactive_file:119452kB unevictable:1536kB writepending:1032kB zspages:0kB present:2080628kB managed:1255240kB mlocked:0kB bounce:0kB free_pcp:57416kB local_pcp:8332kB free_cma:0kB
[  272.525839][T13918] lowmem_reserve[]: 0 0 0 0 0
[  272.527388][T13918] Node 1 Normal free:1587984kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:356kB inactive_anon:0kB active_file:48kB inactive_file:688kB unevictable:1536kB writepending:16kB zspages:976kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:18136kB local_pcp:4096kB free_cma:0kB
[  272.537293][T13918] lowmem_reserve[]: 0 0 0 0 0
[  272.538807][T13918] Node 0 DMA: 5*4kB (UM) 7*8kB (UM) 5*16kB (UE) 9*32kB (UME) 11*64kB (UME) 8*128kB (UME) 10*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 0*4096kB = 14972kB
[  272.544239][T13918] Node 0 DMA32: 881*4kB (UM) 848*8kB (UME) 80*16kB (UME) 238*32kB (UME) 201*64kB (UME) 96*128kB (UME) 52*256kB (UME) 51*512kB (UM) 12*1024kB (UM) 17*2048kB (UM) 0*4096kB = 130884kB
[  272.549684][T13918] Node 1 Normal: 296*4kB (UME) 274*8kB (UME) 320*16kB (UME) 315*32kB (UME) 268*64kB (UME) 249*128kB (UME) 229*256kB (UME) 197*512kB (UM) 151*1024kB (UM) 19*2048kB (UME) 285*4096kB (UM) = 1587984kB
[  272.555548][T13918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  272.558452][T13918] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.561344][T13918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  272.564224][T13918] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.567096][T13918] 46774 total pagecache pages
[  272.568578][T13918] 313 pages in swap cache
[  272.569950][T13918] Free swap  = 121096kB
[  272.571360][T13918] Total swap = 124996kB
[  272.572683][T13918] 1048443 pages RAM
[  272.573890][T13918] 0 pages HighMem/MovableOnly
[  272.575364][T13918] 285322 pages reserved
[  272.576725][T13918] 0 pages cma reserved
[  272.864616][T13951] ffs_data_put(): freeing
[  272.912601][T13956] 9pnet_virtio: no channels available for device syz
[  272.984934][T13966] netlink: 'syz.2.2175': attribute type 10 has an invalid length.
[  272.998529][T13966] geneve2: entered promiscuous mode
[  273.000741][T13966] geneve2: entered allmulticast mode
[  273.143707][T13973] 8021q: VLANs not supported on sit0
[  273.145849][T13971] 8021q: VLANs not supported on sit0
[  273.211284][T13976] fuse: fd is not a fuse device
[  273.238515][T13979] netlink: 'syz.4.2179': attribute type 10 has an invalid length.
[  273.249260][T13979] bridge0: port 3(syz_tun) entered blocking state
[  273.251955][T13979] bridge0: port 3(syz_tun) entered listening state
[  273.254606][T13979] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.257414][T13979] bridge0: port 2(bridge_slave_1) entered listening state
[  273.260413][T13979] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.263254][T13979] bridge0: port 1(bridge_slave_0) entered listening state
[  273.275840][T13979] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  273.294046][T13983] ffs_data_put(): freeing
[  273.900661][T13996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.996157][T14000] 9pnet_fd: p9_fd_create_unix (14000): problem creating socket
[  274.002691][T14001] 9pnet_fd: p9_fd_create_unix (14001): problem creating socket
[  274.095714][T14009] ffs_data_put(): freeing
[  274.560345][T14022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14022 comm=syz.2.2195
[  274.590693][T14029] dummy_hcd dummy_hcd.0: remove, state 1
[  274.598162][T14029] usb usb5: USB disconnect, device number 1
[  274.601412][T14029] usb 5-1: USB disconnect, device number 2
[  274.724092][T14036] ffs_data_put(): freeing
[  274.794421][T14038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  274.801041][T14038] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  274.804017][T14038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  274.811728][T14029] dummy_hcd dummy_hcd.0: stopped
[  274.813392][T14029] dummy_hcd dummy_hcd.0: USB bus 5 deregistered
[  274.893464][T14042] usb usb9: usbfs: process 14042 (syz.4.2211) did not claim interface 0 before use
[  275.093853][T14060] __nla_validate_parse: 9 callbacks suppressed
[  275.093867][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'.
[  275.122391][T14062] ffs_data_put(): freeing
[  275.153515][T14064] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  275.199174][T14068] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2213'.
[  275.239049][T14071] netlink: 'syz.2.2214': attribute type 1 has an invalid length.
[  275.259047][T14071] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.279388][T14071] bond3: entered allmulticast mode
[  275.325212][T14075] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2215'.
[  275.453752][T14093] ffs_data_put(): freeing
[  275.575309][T14108] openvswitch: netlink: VXLAN extension 19 out of range max 1
[  275.664443][T14116] vhci_hcd vhci_hcd.0: remove, state 4
[  275.666554][T14116] usb usb38: USB disconnect, device number 1
[  275.708407][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.710111][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.716903][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.722998][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.726110][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.730153][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.734878][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.736540][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.744283][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.747079][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.750378][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.752253][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.761042][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.762708][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.764469][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.768107][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.769797][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.772351][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.774912][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.776727][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.777184][T14131] wg0: entered allmulticast mode
[  275.778586][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.786570][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.788285][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.790006][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.793641][T14116] vhci_hcd vhci_hcd.0: USB bus 38 deregistered
[  275.829064][T14116] vhci_hcd vhci_hcd.0: remove, state 4
[  275.831458][T14116] usb usb37: USB disconnect, device number 1
[  275.886475][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.888170][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.893837][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.896383][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.898130][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.900048][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.906970][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.909197][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.911756][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.913973][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.915685][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.917688][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.919932][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.922001][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.923883][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.929268][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.931297][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.934934][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.937383][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.939411][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.943084][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.945148][ T5815] vhci_hcd vhci_hcd.0: stop threads
[  275.946850][ T5815] vhci_hcd vhci_hcd.0: release socket
[  275.948723][ T5815] vhci_hcd vhci_hcd.0: disconnect device
[  275.953752][T14116] vhci_hcd vhci_hcd.0: USB bus 37 deregistered
[  275.981992][   T42] kauditd_printk_skb: 3 callbacks suppressed
[  275.982052][   T42] audit: type=1400 audit(2000524634.833:2189): avc:  denied  { write } for  pid=14147 comm="syz.4.2238" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  275.996071][T14123] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller
[  276.000679][T14145] EXT4-fs (loop1): unable to read superblock
[  276.006424][   T42] audit: type=1400 audit(2000524634.843:2190): avc:  denied  { mounton } for  pid=14144 comm="syz.1.2237" path="/524/dev/kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  276.035049][   T42] audit: type=1400 audit(2000524634.883:2191): avc:  denied  { unmount } for  pid=6511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  276.076774][T14123] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 2
[  276.098072][T14123] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0
[  276.139424][T14123] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  276.142891][T14123] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  276.146037][T14123] usb usb2: Product: USB/IP Virtual Host Controller
[  276.148356][T14123] usb usb2: Manufacturer: Linux syzkaller vhci_hcd
[  276.150381][T14123] usb usb2: SerialNumber: vhci_hcd.0
[  276.201481][T14123] hub 2-0:1.0: USB hub found
[  276.205031][T14123] hub 2-0:1.0: 8 ports detected
[  276.255106][T14123] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller
[  276.263729][   T42] audit: type=1400 audit(2000524635.103:2192): avc:  denied  { write } for  pid=14170 comm="syz.5.2244" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  276.272171][T14123] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 5
[  276.277474][T14123] usb usb5: We don't know the algorithms for LPM for this host, disabling LPM.
[  276.292550][T14123] usb usb5: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 7.02
[  276.295486][T14123] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  276.298055][T14123] usb usb5: Product: USB/IP Virtual Host Controller
[  276.300161][T14123] usb usb5: Manufacturer: Linux syzkaller vhci_hcd
[  276.303027][T14123] usb usb5: SerialNumber: vhci_hcd.0
[  276.328422][T14123] hub 5-0:1.0: USB hub found
[  276.330461][T14123] hub 5-0:1.0: 8 ports detected
[  276.353344][   T42] audit: type=1400 audit(2000524635.203:2193): avc:  denied  { lock } for  pid=14170 comm="syz.5.2244" path="/366/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  276.404518][T14171] smpboot: CPU 1 is now offline
[  276.507381][T14173] netlink: 'syz.4.2245': attribute type 4 has an invalid length.
[  276.516034][T14173] netlink: 'syz.4.2245': attribute type 4 has an invalid length.
[  276.527390][T14173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=14173 comm=syz.4.2245
[  276.584118][   T42] audit: type=1400 audit(2000524635.433:2194): avc:  denied  { write } for  pid=14184 comm="syz.5.2248" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  276.598331][   T42] audit: type=1400 audit(2000524635.443:2195): avc:  denied  { mounton } for  pid=14184 comm="syz.5.2248" path="/367/dev/kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  276.613879][T14190] erspan0: entered promiscuous mode
[  276.615586][T14190] erspan0: entered allmulticast mode
[  276.634982][T14195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14195 comm=syz.1.2251
[  276.639096][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2251'.
[  276.688652][T14195] IPv6: sit2: Disabled Multicast RS
[  276.712197][   T42] audit: type=1400 audit(2000524635.563:2196): avc:  denied  { create } for  pid=14203 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  276.723973][   T42] audit: type=1400 audit(2000524635.573:2197): avc:  denied  { listen } for  pid=14203 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  276.730459][   T42] audit: type=1400 audit(2000524635.573:2198): avc:  denied  { ioctl } for  pid=14203 comm="syz.2.2253" path="socket:[57648]" dev="sockfs" ino=57648 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  276.744622][T14211] loop4: detected capacity change from 0 to 7
[  276.755250][T14211]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  276.757182][T14211] loop4: partition table partially beyond EOD, truncated
[  276.761548][T14211] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  276.822502][T12375] udevd[12375]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  276.835478][T14218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14218 comm=syz.4.2258
[  276.842061][T14218] netlink: 'syz.4.2258': attribute type 1 has an invalid length.
[  276.879600][T14218] bond2: (slave bridge4): making interface the new active one
[  276.882903][T14218] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  276.943057][ T5946] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[  277.013413][T14234] fuse: fd is not a fuse device
[  277.019190][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'.
[  277.097560][ T5946] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  277.105523][ T5946] usb 10-1: config 0 has no interface number 0
[  277.107668][ T5946] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  277.115228][ T5946] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  277.118928][ T5946] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  277.124542][ T5946] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  277.128029][ T5946] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  277.132729][ T5946] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  277.135758][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.142987][ T5946] usb 10-1: config 0 descriptor??
[  277.147022][T14205] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.162819][ T5946] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  277.338596][T14259] netlink: 'syz.4.2272': attribute type 10 has an invalid length.
[  277.353650][T14259] bridge0: port 3(syz_tun) entered disabled state
[  277.355924][T14259] syz_tun: left allmulticast mode
[  277.357671][T14259] bridge0: port 3(syz_tun) entered disabled state
[  277.365935][T14259] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  277.419103][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'.
[  277.423149][T14262] netlink: 'syz.4.2274': attribute type 1 has an invalid length.
[  277.429435][T14262] nbd: error processing sock list
[  277.494296][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  277.502529][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  277.508769][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  277.511880][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  277.514613][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  277.966446][T14263] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.968904][T14263] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.972056][T14263] bridge_slave_0: entered allmulticast mode
[  277.975962][T14263] bridge_slave_0: entered promiscuous mode
[  277.980256][T14263] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.982720][T14263] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.985083][T14263] bridge_slave_1: entered allmulticast mode
[  277.988318][T14263] bridge_slave_1: entered promiscuous mode
[  278.004451][T14263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.009645][T14263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.056672][T14263] team0: Port device team_slave_0 added
[  278.060541][T14263] team0: Port device team_slave_1 added
[  278.090526][T14263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.090550][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.090564][T14263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.091600][T14263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.091609][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.091625][T14263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.136388][T14263] hsr_slave_0: entered promiscuous mode
[  278.152055][T14263] hsr_slave_1: entered promiscuous mode
[  278.152529][T14263] debugfs: 'hsr0' already exists in 'hsr'
[  278.152550][T14263] Cannot create hsr debugfs directory
[  278.282518][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'.
[  278.298412][T14263] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  278.313881][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  278.316903][T14263] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  278.318978][T14301] VFS: file-max limit 0 reached
[  278.324914][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  278.327940][T14263] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  278.333431][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  278.336705][T14263] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  278.340659][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  278.407216][T14263] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.422650][T14263] 8021q: adding VLAN 0 to HW filter on device team0
[  278.428024][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.430345][ T6441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.437850][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.440361][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.671996][T14329] No source specified
[  278.818611][T14263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.010002][T14263] veth0_vlan: entered promiscuous mode
[  279.032109][T14263] veth1_vlan: entered promiscuous mode
[  279.048913][T14360] netlink: 'syz.4.2294': attribute type 1 has an invalid length.
[  279.086742][T14360] bond3: (slave bridge5): making interface the new active one
[  279.090591][T14360] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  279.101075][ T5946] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  279.109358][T14263] veth0_macvtap: entered promiscuous mode
[  279.119279][T14263] veth1_macvtap: entered promiscuous mode
[  279.135418][T14263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.152044][T14263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.164715][ T5818] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.172438][ T5818] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.175359][ T5818] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.178876][ T5818] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.233164][ T5946] usb 6-1: device descriptor read/64, error -71
[  279.274057][T14363] No source specified
[  279.312507][T10898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.323612][T10898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.361630][T14365] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  279.364252][T14365] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  279.371596][T10930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.374765][T10930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.465584][T14263] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  279.480974][ T5946] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  279.519060][T14373] loop3: detected capacity change from 0 to 7
[  279.523235][    C0] blk_print_req_error: 10 callbacks suppressed
[  279.523252][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.528472][    C0] buffer_io_error: 66 callbacks suppressed
[  279.528483][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.536020][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.539176][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.542870][    C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.545921][    C3] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.548495][    C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.548986][T14376] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  279.551420][    C3] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.558904][    C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.561951][    C3] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.564921][    C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.567842][    C3] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.570605][    C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.573595][T14373] ldm_validate_partition_table(): Disk read failed.
[  279.575713][    C3] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.578961][    C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.582019][    C3] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.585132][    C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.588192][    C3] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.596659][ T5748] Bluetooth: hci2: command tx timeout
[  279.598394][    C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.602265][    C3] Buffer I/O error on dev loop3, logical block 0, async page read
[  279.605706][T14373] Dev loop3: unable to read RDB block 0
[  279.609166][T14373]  loop3: unable to read partition table
[  279.611606][ T5946] usb 6-1: device descriptor read/64, error -71
[  279.614506][T14373] loop3: partition table beyond EOD, truncated
[  279.618094][T14373] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  279.701968][   T34] usb 10-1: USB disconnect, device number 22
[  279.702181][    C0] ldusb 10-1:0.55: usb_submit_urb failed (-19)
[  279.721708][ T5946] usb usb6-port1: attempt power cycle
[  279.748321][   T34] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[  279.749606][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2301'.
[  279.757813][T14389] netlink: 'syz.6.2301': attribute type 1 has an invalid length.
[  279.760292][T14389] nbd: error processing sock list
[  279.813047][T14396] No source specified
[  279.878205][T14398] program syz.5.2304 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  279.927713][T14403] syzkaller1: entered promiscuous mode
[  279.929742][T14403] syzkaller1: entered allmulticast mode
[  280.061425][ T5946] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  280.081585][ T5946] usb 6-1: device descriptor read/8, error -71
[  280.143277][T14426] dwc2-pci 0000:00:02.0: MSI/MSI-X disallowed for future drivers
[  280.223918][T14429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2314'.
[  280.298689][T14433] ieee802154 phy0 wpan0: encryption failed: -22
[  280.320834][ T5946] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  280.342123][ T5946] usb 6-1: device descriptor read/8, error -71
[  280.344596][T14435] can0: slcan on ptm0.
[  280.350948][T14366] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  280.431838][T14435] can0 (unregistered): slcan off ptm0.
[  280.451230][ T5946] usb usb6-port1: unable to enumerate USB device
[  280.468296][T14444] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2318'.
[  280.500958][T14366] usb 9-1: Using ep0 maxpacket: 16
[  280.506601][T14366] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.520864][T14366] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  280.524648][T14366] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.532360][T14366] usb 9-1: config 0 descriptor??
[  280.558466][T14366] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  281.103991][T14473] netlink: 'syz.4.2312': attribute type 10 has an invalid length.
[  281.242456][   T42] kauditd_printk_skb: 22 callbacks suppressed
[  281.242472][   T42] audit: type=1400 audit(2000524640.093:2221): avc:  denied  { append } for  pid=14479 comm="syz.5.2327" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  281.503693][T14263] ffs_data_put(): freeing
[  281.663485][ T5748] Bluetooth: hci2: command tx timeout
[  281.680716][   T42] audit: type=1400 audit(2000524640.523:2222): avc:  denied  { read } for  pid=14499 comm="syz.6.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  282.096857][T14526] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  282.476382][T14544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.870803][ T7366] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  283.021105][ T7366] usb 10-1: Using ep0 maxpacket: 8
[  283.033137][ T7366] usb 10-1: config 252 has an invalid interface number: 102 but max is 0
[  283.041487][ T7366] usb 10-1: config 252 has no interface number 0
[  283.046477][ T7366] usb 10-1: too many endpoints for config 252 interface 102 altsetting 236: 98, using maximum allowed: 30
[  283.051471][ T7366] usb 10-1: config 252 interface 102 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 98
[  283.057070][ T7366] usb 10-1: config 252 interface 102 has no altsetting 0
[  283.059928][ T7366] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  283.063929][ T7366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.080906][T14550] fuse: fd is not a fuse device
[  283.136896][T14556] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2353'.
[  283.137047][   T40] usb 9-1: USB disconnect, device number 37
[  283.266719][T14566] fuse: Bad value for 'fd'
[  283.275100][ T7366] usb 10-1: string descriptor 0 read error: -71
[  283.282204][ T7366] pvrusb2: Hardware description: Terratec Grabster AV400
[  283.285188][ T7366] pvrusb2: **********
[  283.286949][ T7366] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  283.291071][ T7366] pvrusb2: Important functionality might not be entirely working.
[  283.293824][ T7366] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  283.298394][ T7366] pvrusb2: **********
[  283.300265][ T7366] usb 10-1: selecting invalid altsetting 0
[  283.307977][ T2523] pvrusb2: Invalid write control endpoint
[  283.324376][ T7366] usb 10-1: USB disconnect, device number 23
[  283.364136][   T42] audit: type=1400 audit(2000524642.203:2223): avc:  denied  { map } for  pid=14572 comm="syz.1.2359" path="socket:[60786]" dev="sockfs" ino=60786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  283.387871][   T42] audit: type=1400 audit(2000524642.233:2224): avc:  denied  { connect } for  pid=14569 comm="syz.6.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  283.403972][ T2523] pvrusb2: Invalid write control endpoint
[  283.421824][ T2523] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  283.428650][ T2523] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  283.432772][ T2523] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  283.436106][ T2523] pvrusb2: Device being rendered inoperable
[  283.444162][ T2523] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  283.447494][ T2523] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  283.454774][ T2523] pvrusb2: Attached sub-driver cx25840
[  283.456636][ T2523] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  283.459912][ T2523] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  283.490196][T14583] netlink: 'syz.1.2362': attribute type 8 has an invalid length.
[  283.492879][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'.
[  283.619612][   T42] audit: type=1400 audit(2000524642.463:2225): avc:  denied  { validate_trans } for  pid=14593 comm="syz.1.2366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  283.620119][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'.
[  283.684178][T14598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14598 comm=syz.1.2367
[  283.773815][T14600] openvswitch: netlink: Actions may not be safe on all matching packets
[  283.810842][   T40] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  283.908054][T14606] 9pnet_virtio: no channels available for device syz
[  283.913096][T14606] ffs_data_put(): freeing
[  283.940871][   T40] usb 9-1: device descriptor read/64, error -71
[  284.020894][T14366] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  284.170812][T14366] usb 6-1: Using ep0 maxpacket: 8
[  284.173973][T14366] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  284.176624][T14366] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  284.179958][T14366] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  284.184044][   T40] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  284.186790][T14366] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  284.193269][T14366] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  284.198288][T14366] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  284.205875][T14366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.321024][   T40] usb 9-1: device descriptor read/64, error -71
[  284.364249][T14618] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[  284.387274][T14618] kvm: requested 173485 ns i8254 timer period limited to 200000 ns
[  284.395032][T14623] xt_NFQUEUE: number of queues (5) out of range (got 65536)
[  284.396045][T14618] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[  284.403693][T14624] afs: Unknown parameter 'dyn
� '
[  284.431454][   T40] usb usb9-port1: attempt power cycle
[  284.528894][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2378'.
[  284.704423][T14633] ffs_data_put(): freeing
[  284.781013][   T40] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  284.801441][   T40] usb 9-1: device descriptor read/8, error -71
[  284.984525][T14637] usbtmc 6-1:16.0: simple usb_control_msg returned 0
[  285.040761][   T40] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  285.061475][   T40] usb 9-1: device descriptor read/8, error -71
[  285.171167][   T40] usb usb9-port1: unable to enumerate USB device
[  285.239429][T14646] 9pnet_virtio: no channels available for device syz
[  285.359511][T14653] fuse: fd is not a fuse device
[  285.396119][   T42] audit: type=1400 audit(2000524644.243:2226): avc:  denied  { write } for  pid=14652 comm="syz.5.2386" name="strings" dev="configfs" ino=14480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  285.404876][   T42] audit: type=1400 audit(2000524644.243:2227): avc:  denied  { write } for  pid=14652 comm="syz.5.2386" name="0x409" dev="configfs" ino=60344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  285.412877][   T42] audit: type=1400 audit(2000524644.243:2228): avc:  denied  { write } for  pid=14652 comm="syz.5.2386" name="0x409" dev="configfs" ino=60344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  285.420153][   T42] audit: type=1400 audit(2000524644.243:2229): avc:  denied  { write } for  pid=14652 comm="syz.5.2386" name="0x409" dev="configfs" ino=60344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  285.671245][   T40] usb 10-1: new full-speed USB device number 24 using dummy_hcd
[  285.679591][T14657] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.794568][T14663] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2389'.
[  285.808729][   T42] audit: type=1400 audit(2000524644.653:2230): avc:  denied  { write } for  pid=14661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  285.819694][T14663] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  285.826732][   T40] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  285.832725][   T40] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  285.837583][T14663] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2389'.
[  285.841397][   T40] usb 10-1: config 0 interface 0 has no altsetting 0
[  285.844179][T14663] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  285.850829][   T40] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  285.855143][   T40] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  285.870719][   T40] usb 10-1: Product: syz
[  285.872494][   T40] usb 10-1: Manufacturer: syz
[  285.874671][   T40] usb 10-1: SerialNumber: syz
[  285.881242][   T40] usb 10-1: config 0 descriptor??
[  285.886051][   T40] hub 10-1:0.0: bad descriptor, ignoring hub
[  285.888567][   T40] hub 10-1:0.0: probe with driver hub failed with error -5
[  285.907267][   T40] usb 10-1: selecting invalid altsetting 0
[  285.910142][T14670] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2390'.
[  285.937808][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  286.170947][T14684] netlink: 'syz.6.2395': attribute type 4 has an invalid length.
[  286.190932][   T40] usb 10-1: USB disconnect, device number 24
[  286.236615][ T1136] ata1.00: failed to IDENTIFY (I/O error, err_mask=0x100)
[  286.240194][ T1136] ata1.00: revalidation failed (errno=-5)
[  286.565265][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  286.575107][ T1136] ata1.00: configured for UDMA/100
[  286.697707][T14695] 9pnet_virtio: no channels available for device syz
[  286.748786][T14699] ffs_data_put(): freeing
[  286.806777][ T5849] usb 6-1: USB disconnect, device number 43
[  286.816635][T14703] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  286.841920][T14706] xt_hashlimit: size too large, truncated to 1048576
[  286.883129][T14703] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  286.901660][T14703] bond2: entered allmulticast mode
[  286.924985][T14708] ip6erspan0: entered promiscuous mode
[  286.933379][T14708] ip6erspan0: entered allmulticast mode
[  286.942084][T14708] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  286.985708][T14702] process '/newroot/48/file0' started with executable stack
[  287.109103][T14731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2405'.
[  287.186710][T14736] ADFS-fs (nbd1): error: unable to read block 3, try 0
[  287.196585][   T42] kauditd_printk_skb: 1 callbacks suppressed
[  287.196609][   T42] audit: type=1400 audit(2000524646.043:2232): avc:  denied  { setopt } for  pid=14730 comm="syz.6.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  287.304307][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2413'.
[  287.374667][T14741] netlink: 'syz.1.2412': attribute type 1 has an invalid length.
[  287.424441][ T5748] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  287.436929][ T5748] Bluetooth: hci2: Injecting HCI hardware error event
[  287.442787][ T5748] Bluetooth: hci2: hardware error 0x00
[  287.499580][   T42] audit: type=1400 audit(2000524646.343:2233): avc:  denied  { mounton } for  pid=14760 comm="syz.1.2419" path="/561/my_config" dev="configfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  287.513795][   T42] audit: type=1800 audit(2000524646.363:2234): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2419" name="c_mute_present" dev="configfs" ino=61104 res=0 errno=0
[  287.847881][T14786] netlink: 'syz.1.2428': attribute type 10 has an invalid length.
[  287.852939][T14786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2428'.
[  287.856869][T14786] bridge0: port 1(team_slave_1) entered blocking state
[  287.859926][T14786] bridge0: port 1(team_slave_1) entered disabled state
[  287.872875][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2429'.
[  287.981693][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'.
[  288.105586][T14805] openvswitch: netlink: IP tunnel dst address not specified
[  288.210211][T14814] syzkaller0: entered promiscuous mode
[  288.212514][T14814] syzkaller0: entered allmulticast mode
[  288.273069][   T42] audit: type=1400 audit(2000524647.123:2235): avc:  denied  { write } for  pid=14817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  288.373539][   T42] audit: type=1400 audit(2000524647.203:2236): avc:  denied  { write } for  pid=14822 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  288.495644][ T5849] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  288.498202][ T5849] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  288.522554][ T5849] hid-generic 0000:0000:0000.0008: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  288.740726][ T5447] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  288.925750][ T5447] usb 6-1: Using ep0 maxpacket: 16
[  288.976845][ T5447] usb 6-1: config 0 has no interfaces?
[  288.979302][ T5447] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  288.983401][ T5447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.989615][ T5447] usb 6-1: config 0 descriptor??
[  289.217868][ T5828] usb 6-1: USB disconnect, device number 44
[  289.238527][   T42] audit: type=1400 audit(2000524648.073:2237): avc:  denied  { map } for  pid=14838 comm="syz.4.2442" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  289.248046][   T42] audit: type=1400 audit(2000524648.093:2238): avc:  denied  { execute } for  pid=14838 comm="syz.4.2442" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  289.600490][ T5748] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  289.689928][T14850] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2443'.
[  289.993890][T14857] ffs_data_put(): freeing
[  291.454953][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2448'.
[  291.457651][   T42] audit: type=1400 audit(2000524650.293:2239): avc:  denied  { write } for  pid=14863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  291.482141][T14866] 8021q: adding VLAN 0 to HW filter on device bond4
[  291.516526][T14866] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  291.570219][   T42] audit: type=1400 audit(2000524650.413:2240): avc:  denied  { write } for  pid=14871 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  291.600465][T14876] netlink: 'syz.6.2451': attribute type 1 has an invalid length.
[  291.626165][T14876] 8021q: adding VLAN 0 to HW filter on device bond3
[  291.647206][T14876] bond3: (slave dummy0): Enslaving as a backup interface with an up link
[  291.741072][ T5815] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  291.860905][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  292.351138][T14843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  292.437897][T14895] ALSA: seq fatal error: cannot create timer (-19)
[  292.442118][   T42] audit: type=1400 audit(2000524651.293:2241): avc:  denied  { accept } for  pid=14897 comm="syz.4.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  292.472802][   T42] audit: type=1400 audit(2000524651.323:2242): avc:  denied  { write } for  pid=14900 comm="syz.6.2457" name="functions" dev="configfs" ino=14478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  292.504863][   T42] audit: type=1400 audit(2000524651.353:2243): avc:  denied  { write } for  pid=14900 comm="syz.6.2457" name="extensions" dev="configfs" ino=61414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  292.525813][   T42] audit: type=1800 audit(2000524651.363:2244): pid=14901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2457" name="baSourceID" dev="configfs" ino=61428 res=0 errno=0
[  292.699183][   T42] audit: type=1400 audit(2000524651.543:2245): avc:  denied  { map } for  pid=14918 comm="syz.6.2461" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  292.814253][T14931] binder: 14930:14931 ioctl c018620c 200000000040 returned -22
[  292.866710][T14938] xt_hashlimit: size too large, truncated to 1048576
[  293.178013][T14955] 9pnet_virtio: no channels available for device syz
[  293.200244][T14957] fuse: fd is not a fuse device
[  293.385177][T14968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  293.388456][T14984] trusted_key: syz.4.2481 sent an empty control message without MSG_MORE.
[  293.393989][T14969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  293.419261][T14990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14990 comm=syz.5.2483
[  293.423718][T14990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14990 comm=syz.5.2483
[  293.442221][T14990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14990 comm=syz.5.2483
[  293.527239][   T42] audit: type=1400 audit(2000524652.373:2246): avc:  denied  { append } for  pid=14998 comm="syz.5.2487" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  294.618589][T15046] netlink: 'syz.5.2504': attribute type 1 has an invalid length.
[  295.242058][T15031] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  295.368961][   T42] audit: type=1400 audit(2000524654.213:2247): avc:  denied  { write } for  pid=15070 comm="syz.6.2511" name="functions" dev="configfs" ino=14478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  295.577596][T15083] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2515'.
[  295.619506][T15085] fuse: fd is not a fuse device
[  295.630209][   T42] audit: type=1400 audit(2000524654.473:2248): avc:  denied  { nlmsg_write } for  pid=15084 comm="syz.6.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  295.712428][T15091] input: syz0 as /devices/virtual/input/input32
[  295.727922][T15093] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2519'.
[  295.762204][T15091] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  295.895857][   T42] audit: type=1400 audit(2000524654.743:2249): avc:  denied  { module_load } for  pid=15108 comm="syz.5.2522" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[  295.903997][T15109] kernel read not supported for file /policy (pid: 15109 comm: syz.5.2522)
[  296.046459][T15111] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  296.072456][T15111] VFS: file-max limit 0 reached
[  296.118975][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2524'.
[  296.151026][ T7366] usb 10-1: new full-speed USB device number 25 using dummy_hcd
[  296.167523][T15115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15115 comm=syz.6.2524
[  296.305192][ T7366] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 4
[  296.310042][ T7366] usb 10-1: config 0 interface 0 has no altsetting 0
[  296.318079][ T7366] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  296.324081][ T7366] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  296.327137][ T7366] usb 10-1: Product: syz
[  296.328595][ T7366] usb 10-1: Manufacturer: syz
[  296.330099][ T7366] usb 10-1: SerialNumber: syz
[  296.389451][T15125] SET target dimension over the limit!
[  296.461732][ T7366] usb 10-1: config 0 descriptor??
[  296.479120][ T7366] usb 10-1: selecting invalid altsetting 0
[  296.580501][T15128] pci_bus 0000:01: busn_res: [bus 01] is released
[  296.746847][ T7366] usb 10-1: USB disconnect, device number 25
[  296.901481][T14366] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  297.055057][T14366] usb 11-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  297.060160][T14366] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.063951][T14366] usb 11-1: Product: syz
[  297.065335][T14366] usb 11-1: Manufacturer: syz
[  297.066859][T14366] usb 11-1: SerialNumber: syz
[  297.073042][T14366] i2c-tiny-usb 11-1:1.0: version 1.00 found at bus 011 address 002
[  297.111213][T15163] loop4: detected capacity change from 0 to 7
[  297.114006][T15163] Dev loop4: unable to read RDB block 7
[  297.115737][T15163]  loop4: unable to read partition table
[  297.118550][T15163] loop4: partition table beyond EOD, truncated
[  297.124741][T15163] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  297.218656][T15154] nfs: Unknown parameter 'l'
[  297.224842][   T42] audit: type=1400 audit(2000524656.073:2250): avc:  denied  { ioctl } for  pid=15153 comm="syz.4.2538" path="socket:[64672]" dev="sockfs" ino=64672 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  297.373421][T14366]  (null): failure reading functionality
[  297.389036][T14366] i2c i2c-2: failure reading functionality
[  297.409355][T14366] i2c i2c-2: connected i2c-tiny-usb device
[  297.730300][T15206] ffs_data_put(): freeing
[  297.798443][T15208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15208 comm=syz.1.2551
[  297.833313][T15208] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  297.842424][T15208] netlink: 'syz.1.2551': attribute type 8 has an invalid length.
[  298.064125][   T42] audit: type=1400 audit(2000524656.913:2251): avc:  denied  { append } for  pid=15215 comm="syz.4.2555" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  298.356946][T15233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=15233 comm=syz.5.2559
[  298.399776][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.414206][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.420211][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.429634][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.433023][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.438050][T15237] 9pnet_fd: Insufficient options for proto=fd
[  298.852683][ T5906] syz_tun (unregistering): left allmulticast mode
[  299.012761][   T42] audit: type=1400 audit(2000524657.863:2252): avc:  denied  { remount } for  pid=15264 comm="syz.5.2566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  299.012765][T15265] devtmpfs: Bad value for 'usrquota_block_hardlimit'
[  299.031961][T15267] loop6: detected capacity change from 0 to 8
[  299.077859][T15267] loop6: detected capacity change from 8 to 7
[  299.090535][    C2] blk_print_req_error: 10 callbacks suppressed
[  299.090553][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.095353][    C2] buffer_io_error: 10 callbacks suppressed
[  299.095364][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.130582][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.134513][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.137709][   T42] audit: type=1400 audit(2000524657.983:2253): avc:  denied  { getopt } for  pid=15271 comm="syz.5.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  299.147610][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.151062][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.155789][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.158791][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.161981][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.165022][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.168062][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.171440][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.173953][T15267] ldm_validate_partition_table(): Disk read failed.
[  299.176196][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.179569][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.184389][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.187883][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.191060][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.194277][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.197062][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  299.200066][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  299.202751][T15267] Dev loop6: unable to read RDB block 0
[  299.207834][T15267]  loop6: unable to read partition table
[  299.209744][T15267] loop6: partition table beyond EOD, truncated
[  299.212074][T15267] loop_reread_partitions: partition scan of loop6 (��[{Bѷ���Mܾ`*��Z��5��]�z(�Ť�4pX��) failed (rc=-5)
[  299.286288][T15234] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.288686][T15234] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.291225][T15234] bridge_slave_0: entered allmulticast mode
[  299.294411][T15234] bridge_slave_0: entered promiscuous mode
[  299.299857][ T5149] ldm_validate_partition_table(): Disk read failed.
[  299.303073][T15234] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.305367][T15234] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.306937][ T5149] Dev loop6: unable to read RDB block 0
[  299.307822][T15234] bridge_slave_1: entered allmulticast mode
[  299.313079][T15234] bridge_slave_1: entered promiscuous mode
[  299.314382][ T5149]  loop6: unable to read partition table
[  299.317305][ T5149] loop6: partition table beyond EOD, truncated
[  299.341646][T15234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.349090][T15234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.418804][T15234] team0: Port device team_slave_0 added
[  299.430806][T15234] team0: Port device team_slave_1 added
[  299.451322][T15234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.453856][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.463801][T15234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.469443][T15234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.478779][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.493411][T15234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.511726][T15134] i2c i2c-2: failure reading status
[  299.529740][T15134] ucsi_ccg 2-0008: i2c_transfer failed -5
[  299.537387][T15134] ucsi_ccg 2-0008: ucsi_ccg_init failed - -5
[  299.537548][T15234] hsr_slave_0: entered promiscuous mode
[  299.540005][T15134] ucsi_ccg 2-0008: probe with driver ucsi_ccg failed with error -5
[  299.542506][T15234] hsr_slave_1: entered promiscuous mode
[  299.544061][T15134] i2c i2c-2: new_device: Instantiated device ccgx-ucsi at 0x08
[  299.545938][T15234] debugfs: 'hsr0' already exists in 'hsr'
[  299.550331][T15234] Cannot create hsr debugfs directory
[  299.568084][    T9] usb 11-1: USB disconnect, device number 2
[  299.591176][   T42] audit: type=1400 audit(2000524658.443:2254): avc:  denied  { write } for  pid=15297 comm="syz.4.2576" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  299.674144][T15303] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  299.744764][T15307] FAULT_INJECTION: forcing a failure.
[  299.744764][T15307] name failslab, interval 1, probability 0, space 0, times 0
[  299.754390][T15307] CPU: 3 UID: 0 PID: 15307 Comm: syz.4.2580 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  299.754424][T15307] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  299.754447][T15307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  299.754466][T15307] Call Trace:
[  299.754481][T15307]  <TASK>
[  299.754488][T15307]  dump_stack_lvl+0x100/0x190
[  299.754579][T15307]  should_fail_ex.cold+0x5/0xa
[  299.754620][T15307]  should_failslab+0xc2/0x120
[  299.754664][T15307]  __kvmalloc_node_noprof+0x116/0x970
[  299.754692][T15307]  ? seq_read_iter+0x819/0x1270
[  299.754721][T15307]  seq_read_iter+0x819/0x1270
[  299.754734][T15307]  ? lock_acquire+0x1b9/0x370
[  299.754774][T15307]  kernfs_fop_read_iter+0x46c/0x610
[  299.754802][T15307]  ? rw_verify_area+0xce/0x6d0
[  299.754831][T15307]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  299.754853][T15307]  vfs_read+0x82e/0xb40
[  299.754878][T15307]  ? __pfx_vfs_read+0x10/0x10
[  299.754912][T15307]  ksys_read+0x12a/0x250
[  299.754929][T15307]  ? __pfx_ksys_read+0x10/0x10
[  299.754947][T15307]  ? trace_syscall_enter+0xd9/0x110
[  299.754974][T15307]  do_syscall_64+0x115/0x870
[  299.755018][T15307]  ? clear_bhb_loop+0x40/0x90
[  299.755034][T15307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.755046][T15307] RIP: 0033:0x7f3c9999df99
[  299.755057][T15307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.755068][T15307] RSP: 002b:00007f3c97bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  299.755086][T15307] RAX: ffffffffffffffda RBX: 00007f3c99c25fa0 RCX: 00007f3c9999df99
[  299.755094][T15307] RDX: 0000000000002020 RSI: 0000200000000840 RDI: 0000000000000003
[  299.755101][T15307] RBP: 00007f3c97bf6090 R08: 0000000000000000 R09: 0000000000000000
[  299.755107][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.755127][T15307] R13: 00007f3c99c26038 R14: 00007f3c99c25fa0 R15: 00007ffce4467d48
[  299.755144][T15307]  </TASK>
[  299.849136][T15234] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.852824][T15234] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.858676][T15313] fuse: fd is not a fuse device
[  299.926366][T15323] netlink: 'syz.4.2586': attribute type 1 has an invalid length.
[  299.955649][T15323] 8021q: adding VLAN 0 to HW filter on device bond4
[  300.031441][T15234] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.034767][T15234] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.115175][T15331] overlayfs: upper fs does not support file handles, falling back to index=off.
[  300.118825][T15331] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  300.124032][T15319] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  300.147368][ T6428] Bluetooth: hci0: Frame reassembly failed (-84)
[  300.149589][ T6428] Bluetooth: hci0: Frame reassembly failed (-84)
[  300.153174][ T6428] Bluetooth: hci0: Frame reassembly failed (-84)
[  300.155916][ T6428] Bluetooth: hci0: Frame reassembly failed (-84)
[  300.172853][T15234] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.176060][T15234] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.224857][T15336] FAULT_INJECTION: forcing a failure.
[  300.224857][T15336] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  300.229598][T15336] CPU: 0 UID: 0 PID: 15336 Comm: syz.4.2591 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  300.229621][T15336] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  300.229625][T15336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  300.229632][T15336] Call Trace:
[  300.229637][T15336]  <TASK>
[  300.229642][T15336]  dump_stack_lvl+0x100/0x190
[  300.229664][T15336]  should_fail_ex.cold+0x5/0xa
[  300.229680][T15336]  _copy_to_iter+0x1f3/0x1720
[  300.229734][T15336]  ? __mutex_unlock_slowpath+0x35d/0x930
[  300.229750][T15336]  ? __pfx__copy_to_iter+0x10/0x10
[  300.229766][T15336]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  300.229782][T15336]  ? kernfs_put_active+0x93/0xe0
[  300.229798][T15336]  seq_read_iter+0xdab/0x1270
[  300.229817][T15336]  kernfs_fop_read_iter+0x46c/0x610
[  300.229833][T15336]  ? rw_verify_area+0xce/0x6d0
[  300.229850][T15336]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  300.229867][T15336]  vfs_read+0x82e/0xb40
[  300.229892][T15336]  ? __pfx_vfs_read+0x10/0x10
[  300.229919][T15336]  ksys_read+0x12a/0x250
[  300.229937][T15336]  ? __pfx_ksys_read+0x10/0x10
[  300.229955][T15336]  ? trace_syscall_enter+0xd9/0x110
[  300.229976][T15336]  do_syscall_64+0x115/0x870
[  300.229989][T15336]  ? clear_bhb_loop+0x40/0x90
[  300.230004][T15336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.230031][T15336] RIP: 0033:0x7f3c9999df99
[  300.230042][T15336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.230053][T15336] RSP: 002b:00007f3c97bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  300.230067][T15336] RAX: ffffffffffffffda RBX: 00007f3c99c25fa0 RCX: 00007f3c9999df99
[  300.230075][T15336] RDX: 0000000000002020 RSI: 0000200000000840 RDI: 0000000000000003
[  300.230082][T15336] RBP: 00007f3c97bf6090 R08: 0000000000000000 R09: 0000000000000000
[  300.230089][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.230096][T15336] R13: 00007f3c99c26038 R14: 00007f3c99c25fa0 R15: 00007ffce4467d48
[  300.230111][T15336]  </TASK>
[  300.332222][T15234] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.335565][T15234] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.542265][ T5749] Bluetooth: hci3: command tx timeout
[  300.689380][T15234] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  300.708472][T15234] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  300.712535][T15234] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  300.730680][T15234] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  300.733965][T15234] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  300.738731][T15234] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  300.743939][T15234] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  300.766349][T15234] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  300.835625][T15234] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.854566][T15372] FAULT_INJECTION: forcing a failure.
[  300.854566][T15372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.855019][T15234] 8021q: adding VLAN 0 to HW filter on device team0
[  300.859114][T15372] CPU: 0 UID: 0 PID: 15372 Comm: syz.5.2600 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  300.859135][T15372] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  300.859140][T15372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  300.859147][T15372] Call Trace:
[  300.859153][T15372]  <TASK>
[  300.859158][T15372]  dump_stack_lvl+0x100/0x190
[  300.859178][T15372]  should_fail_ex.cold+0x5/0xa
[  300.859194][T15372]  _copy_to_user+0x32/0xd0
[  300.859224][T15372]  simple_read_from_buffer+0xcb/0x170
[  300.859239][T15372]  proc_fail_nth_read+0x1af/0x230
[  300.859259][T15372]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.859277][T15372]  ? rw_verify_area+0xce/0x6d0
[  300.859294][T15372]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.859312][T15372]  vfs_read+0x1e4/0xb40
[  300.859333][T15372]  ? __pfx_vfs_read+0x10/0x10
[  300.859350][T15372]  ? __fget_files+0x215/0x3d0
[  300.859368][T15372]  ? __fget_files+0x21f/0x3d0
[  300.859383][T15372]  ksys_read+0x12a/0x250
[  300.859401][T15372]  ? __pfx_ksys_read+0x10/0x10
[  300.859417][T15372]  ? trace_syscall_enter+0xd9/0x110
[  300.859438][T15372]  do_syscall_64+0x115/0x870
[  300.859452][T15372]  ? clear_bhb_loop+0x40/0x90
[  300.859467][T15372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.859479][T15372] RIP: 0033:0x7fddd9d5e7ce
[  300.859489][T15372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  300.859500][T15372] RSP: 002b:00007fdddac6afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  300.859512][T15372] RAX: ffffffffffffffda RBX: 00007fdddac6b6c0 RCX: 00007fddd9d5e7ce
[  300.859519][T15372] RDX: 000000000000000f RSI: 00007fdddac6b0a0 RDI: 0000000000000004
[  300.859526][T15372] RBP: 00007fdddac6b090 R08: 0000000000000000 R09: 0000000000000000
[  300.859536][T15372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.859567][T15372] R13: 00007fddda026038 R14: 00007fddda025fa0 R15: 00007ffc10de76f8
[  300.859590][T15372]  </TASK>
[  300.938712][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.941561][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.969166][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.972119][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.023706][T15234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  301.125778][   T42] audit: type=1400 audit(2000524659.973:2255): avc:  denied  { read write } for  pid=15382 comm="syz.5.2603" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  301.145156][   T42] audit: type=1400 audit(2000524659.973:2256): avc:  denied  { open } for  pid=15382 comm="syz.5.2603" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  301.155082][   T42] audit: type=1400 audit(2000524659.973:2257): avc:  denied  { ioctl } for  pid=15382 comm="syz.5.2603" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  301.396607][T15234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.548188][T15393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.567114][T15393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.598596][T15404] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1119468955 out of range (51000..2150000)
[  301.605017][   T42] audit: type=1400 audit(2000524660.453:2258): avc:  denied  { getopt } for  pid=15403 comm="syz.4.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  301.605571][T15404] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  301.616893][T15404] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  301.624627][   T42] audit: type=1400 audit(2000524660.473:2259): avc:  denied  { bind } for  pid=15403 comm="syz.4.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  301.692789][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'.
[  301.698370][T15393] geneve0: left promiscuous mode
[  301.725755][ T5815] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.731755][ T5815] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.732721][T15409] fuse: Unknown parameter 'f��m��&�UDi�gd0xffffffffffffffff'
[  301.734563][ T5815] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.741684][ T5815] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.776937][T15234] veth0_vlan: entered promiscuous mode
[  301.792323][T15234] veth1_vlan: entered promiscuous mode
[  301.820171][T15234] veth0_macvtap: entered promiscuous mode
[  301.827378][T15234] veth1_macvtap: entered promiscuous mode
[  301.838551][T15234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.849283][T15234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.858134][T14824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.864068][T14824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.868387][T14824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.876458][T14824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.000599][T15419] tmpfs: Group quota inode hardlimit too large.
[  302.028508][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2611'.
[  302.042987][ T6434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.047382][ T6434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.080952][T15419] netlink: 'syz.4.2611': attribute type 19 has an invalid length.
[  302.105674][ T6441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.114329][ T6441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.145560][ T5748] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  302.476422][T15446] binder: 15435:15446 ioctl c0306201 200000000640 returned -22
[  302.479864][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2618'.
[  302.491510][T15446] binder: 15435:15446 ioctl 4058587a 200000001040 returned -22
[  302.502650][T15448] fuse: fd is not a fuse device
[  302.539864][T15450] bridge0: port 3(syz_tun) entered blocking state
[  302.549352][T15450] bridge0: port 3(syz_tun) entered disabled state
[  302.562428][T15450] syz_tun: entered allmulticast mode
[  302.579492][T15450] syz_tun: entered promiscuous mode
[  302.582896][T15450] bridge0: port 3(syz_tun) entered blocking state
[  302.585167][T15450] bridge0: port 3(syz_tun) entered forwarding state
[  302.589176][T15450] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  302.630590][ T5748] Bluetooth: hci3: command tx timeout
[  302.653292][T15462] veth0_to_batadv: entered promiscuous mode
[  302.655261][T15462] veth0_to_batadv: entered allmulticast mode
[  302.809617][   T42] audit: type=1400 audit(2000524661.653:2260): avc:  denied  { mounton } for  pid=15477 comm="syz.4.2631" path="/proc/1568/cgroup" dev="proc" ino=65465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  302.817546][T15480] netlink: 'syz.1.2632': attribute type 13 has an invalid length.
[  302.840229][T15480] gretap0: refused to change device tx_queue_len
[  302.842548][T15480] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  303.160945][    T9] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  303.208520][T15436] binder: 15435:15436 ioctl c0306201 200000000040 returned -14
[  303.310554][    T9] usb 9-1: device descriptor read/64, error -71
[  303.341824][T15435] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  303.411333][T15509] ffs_data_put(): freeing
[  303.561663][    T9] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  303.567588][ T1353] playstation 0003:054C:05C4.0009: unknown main item tag 0x0
[  303.572561][ T1353] playstation 0003:054C:05C4.0009: unknown main item tag 0x0
[  303.576035][T15512] netlink: 'syz.6.2642': attribute type 10 has an invalid length.
[  303.578700][ T1353] playstation 0003:054C:05C4.0009: unknown main item tag 0x0
[  303.582247][ T1353] playstation 0003:054C:05C4.0009: unknown main item tag 0x0
[  303.584678][ T1353] playstation 0003:054C:05C4.0009: item fetching failed at offset 6/7
[  303.587874][ T1353] playstation 0003:054C:05C4.0009: Parse failed
[  303.590010][ T1353] playstation 0003:054C:05C4.0009: probe with driver playstation failed with error -22
[  303.590078][T15512] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  303.597636][T15512] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  303.603820][T15512] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2642'.
[  303.625201][T15512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.633420][T15512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.638864][T15512] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  303.643369][T15512] bond0 (unregistering): Released all slaves
[  303.691884][    T9] usb 9-1: device descriptor read/64, error -71
[  303.746420][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  303.750413][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  303.800775][    T9] usb usb9-port1: attempt power cycle
[  304.106361][T15521] netdevsim netdevsim6: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  304.118304][T15521] program syz.6.2645 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  304.171666][    T9] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  304.191503][    T9] usb 9-1: device descriptor read/8, error -71
[  304.212991][T15526] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  304.218940][T15526] IPv6: addrconf: prefix option has invalid lifetime
[  304.238604][    C3] IPv6: addrconf: prefix option has invalid lifetime
[  304.243736][    C3] IPv6: addrconf: prefix option has invalid lifetime
[  304.450701][    T9] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[  304.487071][T15534] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2650'.
[  304.490976][T15534] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2650'.
[  304.491206][    T9] usb 9-1: device descriptor read/8, error -71
[  304.605593][    T9] usb usb9-port1: unable to enumerate USB device
[  304.685451][T15548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=15548 comm=syz.5.2655
[  304.701391][ T5748] Bluetooth: hci3: command tx timeout
[  304.793122][   T42] kauditd_printk_skb: 4 callbacks suppressed
[  304.793142][   T42] audit: type=1400 audit(2000524663.643:2265): avc:  denied  { lock } for  pid=15544 comm="syz.6.2654" path="socket:[68662]" dev="sockfs" ino=68662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  304.804266][T15552] syzkaller0: entered promiscuous mode
[  304.807659][T15552] syzkaller0: entered allmulticast mode
[  305.087629][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2659'.
[  305.094679][   T42] audit: type=1400 audit(2000524663.943:2266): avc:  denied  { listen } for  pid=15559 comm="syz.6.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  305.160914][T15563] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  305.167660][T15563] netlink: 'syz.6.2660': attribute type 1 has an invalid length.
[  305.171717][T15563] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2660'.
[  305.174885][T15563] netlink: 'syz.6.2660': attribute type 1 has an invalid length.
[  305.277401][T15567] bond0: Removing last ns target with arp_interval on
[  305.331766][T15573] ffs_data_put(): freeing
[  305.333446][   T42] audit: type=1400 audit(2000524664.183:2267): avc:  denied  { read } for  pid=15572 comm="syz.6.2664" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  305.342642][   T42] audit: type=1400 audit(2000524664.183:2268): avc:  denied  { open } for  pid=15572 comm="syz.6.2664" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  305.350699][   T42] audit: type=1400 audit(2000524664.183:2269): avc:  denied  { ioctl } for  pid=15572 comm="syz.6.2664" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x7aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  305.375062][T15570] bond1: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms
[  305.409742][T15576] 9pnet_virtio: no channels available for device syz
[  305.493507][T15585] openvswitch: netlink: Actions may not be safe on all matching packets
[  305.584954][T15594] block2mtd: error: cannot open device #! 
[  305.598050][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2672'.
[  305.602008][T15594] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  305.642446][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2672'.
[  305.972882][T15626] bond3: option downdelay: invalid value (18446744073709551615)
[  305.976239][T15626] bond3: option downdelay: allowed values 0 - 2147483647
[  305.984018][T15626] bond3 (unregistering): Released all slaves
[  306.035752][T15634] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  306.645387][T15663] netlink: 'syz.1.2688': attribute type 10 has an invalid length.
[  306.670615][T15663] team0: Port device dummy0 added
[  306.780647][ T5748] Bluetooth: hci3: command tx timeout
[  306.854203][T15677] netlink: 'syz.5.2693': attribute type 10 has an invalid length.
[  306.877986][T15672] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.880414][T15672] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.921578][T15682] __nla_validate_parse: 2 callbacks suppressed
[  306.921599][T15682] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2692'.
[  306.988789][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.004119][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.114611][T15672] tipc: Resetting bearer <eth:syzkaller0>
[  307.212772][T15673] 8021q: adding VLAN 0 to HW filter on device bond1
[  307.239654][T15682] bond3: (slave dummy0): Removing an active aggregator
[  307.249108][T15682] bond3: (slave dummy0): Releasing backup interface
[  307.264017][ T5815] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.267866][ T5815] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.277617][ T5815] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.281203][ T5815] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.312874][ T5815] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.316453][ T5815] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.320153][ T5815] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.324114][ T5815] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.449961][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2696'.
[  307.511255][T15700] uhci_hcd 0000:00:1d.0: remove, state 1
[  307.531400][T15700] usb usb1: USB disconnect, device number 1
[  307.532609][T15696] usb 1-1: USB disconnect, device number 2
[  307.798458][T15700] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[  307.821048][ T6441] wlan1: Trigger new scan to find an IBSS to join
[  308.392056][T15745] fuse: Unknown parameter 'f'
[  308.922777][   T42] audit: type=1400 audit(2000524667.773:2270): avc:  denied  { append } for  pid=15771 comm="syz.1.2718" name="usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  309.481022][T15795] loop5: detected capacity change from 0 to 7
[  309.486356][T15795] Dev loop5: unable to read RDB block 7
[  309.496765][T15795]  loop5: unable to read partition table
[  309.499419][T15795] loop5: partition table beyond EOD, truncated
[  309.503546][T15795] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  309.565565][T15795] kvm: kvm [15794]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  309.570075][T15795] kvm: kvm [15794]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  309.954144][T15812] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2729'.
[  309.967136][T15812] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2729'.
[  310.111117][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'.
[  310.171136][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'.
[  310.174344][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'.
[  310.177678][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'.
[  310.182148][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'.
[  310.185951][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'.
[  310.594826][T15850] fuse: fd is not a fuse device
[  310.597934][T15850] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  310.860464][ T6434] wlan1: Trigger new scan to find an IBSS to join
[  311.005001][T15869] ip6t_srh: unknown srh invflags 51E8
[  311.128229][T15876] netlink: 'syz.5.2747': attribute type 4 has an invalid length.
[  311.285477][T15886] netlink: 'syz.5.2750': attribute type 1 has an invalid length.
[  311.386653][T15886] 8021q: adding VLAN 0 to HW filter on device bond3
[  311.398783][T15891] bond3: entered allmulticast mode
[  311.444460][T15896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.465744][T15886] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  311.711173][T15900] netlink: 'syz.6.2753': attribute type 2 has an invalid length.
[  312.095313][T15909] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  312.129744][T15919] 9pnet_virtio: no channels available for device syz
[  312.258009][T15930] fuse: fd is not a fuse device
[  312.402823][   T42] audit: type=1400 audit(2000524671.254:2271): avc:  denied  { setopt } for  pid=15933 comm="syz.6.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  312.417678][T15938] netlink: 'syz.1.2766': attribute type 4 has an invalid length.
[  312.696706][T15944] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  313.089215][T15984] binder: 15980:15984 ioctl c018620c 2000000001c0 returned -1
[  313.093624][   T42] audit: type=1400 audit(2000524671.944:2272): avc:  denied  { write } for  pid=15975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.107963][T15984] netlink: 'syz.1.2780': attribute type 20 has an invalid length.
[  313.113764][T15984] __nla_validate_parse: 67 callbacks suppressed
[  313.113782][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2780'.
[  313.127384][ T5815] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  313.127457][T15984] netlink: 'syz.1.2780': attribute type 20 has an invalid length.
[  313.134197][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2780'.
[  313.137652][ T5815] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  313.145547][ T5815] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  313.156891][ T5815] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  313.177749][   T42] audit: type=1400 audit(2000524672.024:2273): avc:  denied  { write } for  pid=15987 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.248587][T15995] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2783'.
[  313.294452][T15993] syzkaller0: entered promiscuous mode
[  313.300265][T15993] syzkaller0: entered allmulticast mode
[  313.323422][ T5849] IPVS: starting estimator thread 0...
[  313.429233][   T42] audit: type=1400 audit(2000524672.274:2274): avc:  denied  { write } for  pid=16001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.440750][T15998] IPVS: using max 43 ests per chain, 103200 per kthread
[  313.519033][   T42] audit: type=1400 audit(2000524672.364:2275): avc:  denied  { write } for  pid=16007 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.656838][   T42] audit: type=1400 audit(2000524672.504:2276): avc:  denied  { bind } for  pid=16005 comm="syz.6.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  313.900462][T10898] wlan1: Trigger new scan to find an IBSS to join
[  314.846813][T10898] wlan1: Creating new IBSS network, BSSID 5e:24:72:db:97:b6
[  315.902508][ T1446] ieee802154 phy0 wpan0: encryption failed: -22
[  315.904549][ T1446] ieee802154 phy1 wpan1: encryption failed: -22
[  316.904518][   T42] audit: type=1400 audit(2000524675.754:2277): avc:  denied  { write } for  pid=16016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  316.963361][   T42] audit: type=1400 audit(2000524675.804:2278): avc:  denied  { write } for  pid=16019 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.096439][   T42] audit: type=1400 audit(2000524675.944:2279): avc:  denied  { write } for  pid=16024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.117942][   T42] audit: type=1400 audit(2000524675.954:2280): avc:  denied  { remount } for  pid=16031 comm="syz.5.2790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  317.283522][ T5110] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI
[  317.287225][ T5110] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[  317.289770][ T5110] CPU: 3 UID: 0 PID: 5110 Comm: kworker/3:1H Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  317.292953][ T5110] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  317.294727][ T5110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  317.297620][ T5110] Workqueue: events_highpri f_midi_in_work
[  317.299372][ T5110] RIP: 0010:dummy_queue+0x1ba/0xb00
[  317.300967][ T5110] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff
[  317.306624][ T5110] RSP: 0018:ffffc900260a7a28 EFLAGS: 00010006
[  317.308412][ T5110] RAX: dffffc0000000000 RBX: ffff888027cb1210 RCX: ffffffff87d1359f
[  317.310706][ T5110] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060
[  317.313040][ T5110] RBP: ffff88802b3403b0 R08: 0000000000000005 R09: 0000000000000005
[  317.315329][ T5110] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b340c00
[  317.317637][ T5110] R13: ffff888027cb1200 R14: ffff88802b3403a8 R15: 0000000000000000
[  317.319973][ T5110] FS:  0000000000000000(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000
[  317.322591][ T5110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  317.324546][ T5110] CR2: 0000000000000000 CR3: 000000005b235000 CR4: 0000000000352ef0
[  317.326874][ T5110] Call Trace:
[  317.327891][ T5110]  <TASK>
[  317.328791][ T5110]  ? do_raw_spin_unlock+0x145/0x1e0
[  317.330377][ T5110]  usb_ep_queue+0xfa/0x3c0
[  317.331746][ T5110]  f_midi_in_work+0x9b0/0x1580
[  317.333205][ T5110]  ? __pfx_f_midi_in_work+0x10/0x10
[  317.334734][ T5110]  ? rcu_is_watching+0x12/0xc0
[  317.336254][ T5110]  process_one_work+0xa23/0x1940
[  317.337742][ T5110]  ? __pfx_process_one_work+0x10/0x10
[  317.339428][ T5110]  ? __pfx_f_midi_in_work+0x10/0x10
[  317.341497][ T5110]  worker_thread+0x5ef/0xe50
[  317.343307][ T5110]  ? __pfx_worker_thread+0x10/0x10
[  317.345287][ T5110]  ? kthread+0x13a/0x450
[  317.346936][ T5110]  ? __pfx_worker_thread+0x10/0x10
[  317.348927][ T5110]  kthread+0x370/0x450
[  317.350528][ T5110]  ? __pfx_kthread+0x10/0x10
[  317.352314][ T5110]  ret_from_fork+0x72b/0xd50
[  317.354115][ T5110]  ? __pfx_ret_from_fork+0x10/0x10
[  317.356089][ T5110]  ? __switch_to+0x800/0x10f0
[  317.357905][ T5110]  ? __pfx_kthread+0x10/0x10
[  317.359730][ T5110]  ret_from_fork_asm+0x1a/0x30
[  317.361633][ T5110]  </TASK>
[  317.362863][ T5110] Modules linked in:
[  317.364366][ T5110] ---[ end trace 0000000000000000 ]---
[  317.366443][ T5110] RIP: 0010:dummy_queue+0x1ba/0xb00
[  317.368461][ T5110] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff
[  317.375692][ T5110] RSP: 0018:ffffc900260a7a28 EFLAGS: 00010006
[  317.378029][ T5110] RAX: dffffc0000000000 RBX: ffff888027cb1210 RCX: ffffffff87d1359f
[  317.381097][ T5110] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060
[  317.384135][ T5110] RBP: ffff88802b3403b0 R08: 0000000000000005 R09: 0000000000000005
[  317.387118][ T5110] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b340c00
[  317.390121][ T5110] R13: ffff888027cb1200 R14: ffff88802b3403a8 R15: 0000000000000000
[  317.393141][ T5110] FS:  0000000000000000(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000
[  317.396568][ T5110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  317.399074][ T5110] CR2: 0000000000000000 CR3: 000000005b235000 CR4: 0000000000352ef0
[  317.402169][ T5110] Kernel panic - not syncing: Fatal exception
[  317.405182][ T5110] Kernel Offset: disabled
[  317.406844][ T5110] Rebooting in 86400 seconds..