last executing test programs:

3m28.310037041s ago: executing program 2 (id=376):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x200})
r2 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0)
mq_notify(r2, &(0x7f0000000300)={0x0, 0x1b, 0x1})
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000980)={0x0, 0x0, r4, r5, 0x5, 0x6, 0x9, 0x5, {0x80, 0x9, 0x5, 0x8, 0x0, 0x5, 0x1, 0x6, 0x1, 0xffff, 0xcb8, 0x8000, 0xfffffffb, 0x0, "f89fd0c5012f2cd96528923877617326f3b3c868e4e51b852d5ec0bf94135736"}})
mq_notify(r2, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x200, 0x4)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0xffffffffffffffff, 0x0)
r8 = syz_open_procfs(r7, &(0x7f00000006c0)='attr/sockcreate\x00')
preadv(r8, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text16={0x10, &(0x7f00000005c0)="66b8ef0000000f23d80f21f86635000000400f23f8360f01c9f2f3f4b831010f00d82e660f5cd566b9b00800000f320f20d86635200000000f22d8f20f350f20e06635800000000f22e066b9800000c00f326635002000000f30", 0x5a}], 0x1, 0x1, &(0x7f0000000680), 0x0)
syz_usb_connect(0x0, 0x267, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x12, 0x83, 0xb4, 0xff, 0x1110, 0x900f, 0xb6ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x255, 0x4, 0x0, 0x4, 0x80, 0x4, "", [{{0x9, 0x4, 0x92, 0x1, 0x0, 0x31, 0x36, 0x20, 0xfe, [@hid_hid={0x9, 0x21, 0x3ff, 0x3, 0x1, {0x22, 0x574}}]}}, {{0x9, 0x4, 0x81, 0x2, 0x8, 0x1c, 0xfc, 0x53, 0x7a, [], [{{0x9, 0x5, 0x0, 0x8, 0x40, 0x1, 0x2, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xb}]}}, {{0x9, 0x5, 0x2, 0x7, 0x20, 0x4, 0x35}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x3, 0x3, 0x2}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x5, 0xd, 0xc6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0x8}, @generic={0x72, 0x10, "3cc056e840a5e965110c932ee9632e4a53231b3b5052dc8ecd367d2d3b77f50b93e4817833c9706ca4820e7e3717346a5909775bb5c55a09d4bd4b21639e9079826f7bd19028d6a76a42c276c68b7c0228af3f77c2c82ea9299b99cc9cacb2e3a5f620021c80c8c7a39512b2a1d6935c"}]}}, {{0x9, 0x5, 0x8d, 0x8, 0x400, 0x10, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0xf, 0x13, 0x8, 0x2, 0x27, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xff, 0x6, 0xa7, [@generic={0x91, 0x2, "39962fa75e3c6e1c1d3a40058143c49a384a172de704a42318fdd12bc80d97414dc5f48d8d3cb4316cc54219141741e1e933fe9a4a15bdfbf1c2f7efc2295d25b8ea770848052d3252590498b2968307ea4ed054ecf64d01d9c80e1c0136a54691774689277f03e0955a181191c92ad8d96779fdcbc74cf1bdfb3926059815d2ae6472f747316a85c78cad0e320e6a"}]}}]}}, {{0x9, 0x4, 0x1d, 0x0, 0x0, 0x1, 0x5d, 0xad, 0x9, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x5, 0x6, "8fe1af99"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xfff7, 0x8, 0x21}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x8, 0x2, "bbed"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x1000, 0xfe, 0xad}]}]}}, {{0x9, 0x4, 0xa3, 0xe3, 0x3, 0xff, 0xff, 0xff, 0x4, [@generic={0x52, 0x30, "511db6de60b717a6ff9fe72a034898b3b4fb0ef0f1c3ae82bffe7c52ee7d62e7fd7960111f0dfd47429eb72b5b3518b2803e11c116d4d2386223032789f9cc076b2161a60b5023c3e25c3f7a04dc99a9"}], [{{0x9, 0x5, 0xe, 0x8, 0x8, 0x4, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xf2e6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x4, 0x5, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0xf7, 0x6, 0x4}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x81, 0x4, 0xee, 0x8, 0x2a}, 0x57, &(0x7f0000000380)={0x5, 0xf, 0x57, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x4, 0xf, 0xfff8, [0xff0000, 0x3f00, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "2ffc57d9537c26bd3c72a027b30b0f45"}, @ext_cap={0x7, 0x10, 0x2, 0x17, 0x3, 0xa, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7fffff7, 0xf000, 0x546, [0xffc000, 0xff0030, 0x3f3f, 0x3f00]}]}, 0x4, [{0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="2703e5e44c63376c00e87386a3abb244a9ad7e2c0fa8ad3269375b640f404c020d340f5cfb442729c7800b"]}, {0x6e, &(0x7f0000000440)=@string={0x6e, 0x3, "da0ea236c0c22a0b8473f142eb1e60f2ce3d4aa785b34e2707ec7ef551df8bb1c317b91c122c7f86eee062d77759a1467ce75085fd5117fa4e71aa66b7bcdbbd7496120e67428d20f2cdda49bc5e2c5779fa5f50f57ffc9a0735cc86bb5978d0c2eea532bb837c8bb8a4a1d6"}}, {0x3b, &(0x7f00000004c0)=@string={0x3b, 0x3, "ccdb28fa14ea3e3dcd38d82a0034a1b65963c934df2fd3dc78b5304196d1b82693413a3bb9e364643a8aba29bbe7a3376bf6dce80279e8e9fc"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}]})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

3m25.29776684s ago: executing program 2 (id=419):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20040040)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

3m24.749999433s ago: executing program 2 (id=424):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, {0xa, 0xfffd, 0xfffffffd, @remote}, r1, 0xfffffffc}}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendto$inet(r3, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

3m24.698654557s ago: executing program 2 (id=426):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mkdir(&(0x7f0000000000)='my_proc\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='my_proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
open(&(0x7f0000000400)='my_proc/modules\x00', 0x106505, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)="642ee48e", 0x4)
r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000020905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c000480080001000000000120f502800c000100706f8369637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000780)={<r4=>0x0, 0x5, 0x400})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000d80)={r4, 0x6, 0x5, 0x1})
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffff00000000000000000200000702000000000000000000000075da67f5ca1d8f8eea326ae1948a29423eb10b24eff4b1ece8dba9cf533928833c5d240aacf47eb33393f59c1f6fb893f8d70b9f907ceda6f32c761d68a0dca45a23c5eb0c4437"])

3m24.609108512s ago: executing program 2 (id=428):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@getaddr={0x14, 0x16, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x0)

3m24.390471019s ago: executing program 2 (id=431):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0)
write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006)
socket$kcm(0x11, 0x3, 0x0)

3m24.28763802s ago: executing program 32 (id=431):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x0)
write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006)
socket$kcm(0x11, 0x3, 0x0)

2m1.159959213s ago: executing program 1 (id=1536):
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00')
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000140))
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
r1 = syz_open_procfs(r0, &(0x7f0000000280)='net/raw\x00')
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x34117e, 0x44)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x5f1, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2c, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x7b, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x61, 0x1, 0xd}}}}}]}}]}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m58.986224005s ago: executing program 1 (id=1551):
r0 = gettid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000300)=0x3, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x1c1, 0x4)
write$binfmt_misc(r2, &(0x7f0000000040), 0xfe46)
recvfrom$inet6(r2, 0x0, 0x5a, 0x0, 0x0, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008850}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r5=>0x0)
socket$inet(0x2, 0x801, 0x100)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})

1m58.770966416s ago: executing program 1 (id=1557):
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=0x10) (async)
r0 = syz_open_dev$audion(&(0x7f0000000100), 0xfffffffffffffffd, 0x4a000)
ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f0000000140))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x2000800) (async)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3) (async)
r4 = syz_clone(0x40002011, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4) (async)
setpgid(0x0, r4) (async)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x50000, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c801300"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async)
r5 = socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r8], 0x54}}, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
pidfd_send_signal(r9, 0x0, &(0x7f0000002280)={0x0, 0x0, 0xfffffffe}, 0x0) (async)
write$sndseq(r7, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x35, 0x4, 0x4, 0xf5, 0xff}}], 0x1c)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)

1m58.31110087s ago: executing program 1 (id=1564):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0xda6e0000) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1\x00', 0x1) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x581100, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)='1', 0x1)

1m58.307988178s ago: executing program 1 (id=1566):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x13, 0x240, 0x3f, 0x3f, 0x32, 0x7f, 0x0, 0x1f000000, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})

1m58.065655843s ago: executing program 1 (id=1569):
socket$kcm(0x2, 0xa, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x5})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0})
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000240)={0x98, 0x9, 0x53, 0x4589, 0x0, 0x58})
write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0x1046a)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000002000/0x400000)=nil)
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000000)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x3})
ioctl$VT_RELDISP(r1, 0x5605)
chdir(&(0x7f0000000540)='./cgroup\x00')
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000001000000000000030000000200000000000000000000004e1ce6cbac1bff9c550f06a19bb71fdd94e3f627360ca60bfd44ddf1754777"])
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r2, 0x0, 0xee01)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x10})
bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10)
bind$phonet(r3, &(0x7f0000000000)={0x23, 0x14}, 0x10)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
socket$kcm(0x10, 0x2, 0x0)

1m58.002013276s ago: executing program 33 (id=1569):
socket$kcm(0x2, 0xa, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x5})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0})
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000240)={0x98, 0x9, 0x53, 0x4589, 0x0, 0x58})
write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0x1046a)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000002000/0x400000)=nil)
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000000)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x3})
ioctl$VT_RELDISP(r1, 0x5605)
chdir(&(0x7f0000000540)='./cgroup\x00')
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000001000000000000030000000200000000000000000000004e1ce6cbac1bff9c550f06a19bb71fdd94e3f627360ca60bfd44ddf1754777"])
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r2, 0x0, 0xee01)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x10})
bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10)
bind$phonet(r3, &(0x7f0000000000)={0x23, 0x14}, 0x10)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
socket$kcm(0x10, 0x2, 0x0)

1m28.519272328s ago: executing program 3 (id=1853):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)

1m28.458699396s ago: executing program 3 (id=1855):
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00')
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000140)=0xffffffffffffffff)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004440)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x1000000000000, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000740)='8'})
r3 = syz_open_procfs(r1, &(0x7f0000000280)='net/raw\x00')
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f00000001c0)=[{0x6, 0x0, 0xfd, 0x7fff0000}, {0x88, 0x5, 0xc2, 0x81}, {0x1, 0x7, 0x3}, {0x1, 0x40, 0x40, 0x6}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x34117e, 0x44)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1m26.360123986s ago: executing program 3 (id=1872):
ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000000))
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, r0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000800)={0x10201, 0x300, 0x180, &(0x7f0000000400)=[0x4, 0xd9, 0x10001, 0x401, 0x8, 0x9, 0x2, 0xa1, 0x6, 0x3, 0x3, 0x8, 0x0, 0x6, 0x9, 0x7f, 0x9, 0xc, 0x40, 0x8, 0x3b09a256, 0x7, 0xcf, 0xe05, 0x1, 0x3, 0x8, 0x5, 0xc7a6, 0x400, 0x40, 0x0, 0xfffffffffffffffd, 0x2, 0x60, 0x2, 0x6, 0x7fffffff, 0x9, 0x9, 0x100000001, 0x4, 0x7, 0x49, 0xfffffffffffffffb, 0xffffffffffffff8d, 0x7f, 0x40, 0x5, 0x6, 0x3ff, 0x7, 0x500000000000, 0x100000000, 0xf, 0x11ff, 0xe, 0x6, 0x1ff, 0x8, 0x8, 0x6, 0x8, 0x797c, 0xc1, 0xad, 0x1, 0x0, 0x8, 0xa, 0x100000000, 0x80000001, 0x0, 0xa, 0x2, 0x6, 0x7, 0x88a, 0x9, 0x3, 0x2, 0x3, 0x1, 0x7, 0x8, 0x5f2, 0x4, 0xa, 0x8, 0x9e5, 0x1, 0x100000000, 0x8001, 0x8, 0x8, 0x0, 0x4, 0xc, 0x2, 0x1, 0x8000, 0x5, 0x1000, 0x1ff, 0xfffffffffffffff7, 0x0, 0x5, 0x0, 0x7fffffff, 0x3ff, 0xfffffffffffffff1, 0x9, 0x8, 0xac, 0x1, 0xd9, 0x2, 0x100000000, 0x10, 0x1, 0x4, 0x9, 0x9, 0x2, 0xf, 0xc, 0xd3cc, 0xfffffffffffffff9]})
r2 = socket(0x6, 0x3, 0x52)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x8, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@ipv6_getnetconf={0x24, 0x52, 0x100, 0x80000001, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @NETCONFA_RP_FILTER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8800)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000980)={0x3, 0x0, [{0x6, 0x1a, 0x0, 0x4, 0xc, 0xe, 0x7}, {0xc0000000, 0x5, 0x5, 0x0, 0x2, 0x0, 0x67}, {0xc0000001, 0x3, 0x3, 0x4, 0x8, 0x9, 0xff}]})
fchdir(r2)
fsync(r1)
r3 = syz_open_dev$usbmon(&(0x7f0000000a00), 0xb6, 0x602601)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000a80)={&(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x3, 0x5})
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000ac0), 0x123082, 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000b00)={0x3a, 0x1d, 0x11, 0xf, 0x6, 0x5, 0x4, 0x61, 0xffffffffffffffff})
syz_open_dev$usbfs(&(0x7f0000000b40), 0x1, 0x361003)
r5 = syz_open_dev$loop(&(0x7f0000000b80), 0x8, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000bc0)={r5, 0x4, {0x0, 0x0, 0x0, 0x8777, 0x36c00, 0x0, 0x12, 0x1f, 0x1, "88003d2dd8479fdb19dceda59da2b842eb760eef49aae42a354c34f21b983910792b9f1ab8ea74ab88605cf50d18da77889f33fad39ceb47020bee12733da2ff", "1a6b6590e2605a46c75102c446e3f86cfd34aefbb5fc07d66da163e317c06b8cdb232ed0d921d0810a21c7c4155e88e76602b05679a815200b3fe5adc938f908", "2139a64a1481d64309aea0b6af37dca9dbe0e2ca9a2b1fae5345a6ff2ea092a7", [0x1, 0x7]}})
r6 = syz_open_dev$audion(&(0x7f0000000d00), 0x5, 0x4000)
ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f0000000d40)={0x5, @broadcast})
close_range(r6, r1, 0x2)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000f00)=<r7=>0x0, &(0x7f0000000f40)=0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r4, 0x20, &(0x7f0000001140)={&(0x7f0000000fc0)=""/217, 0xd9, <r8=>0x0, &(0x7f00000010c0)=""/77, 0x4d}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x4, 0x16, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ldst={0x3, 0x0, 0x4, 0x1, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f0000000e40)='syzkaller\x00', 0x6, 0x69, &(0x7f0000000e80)=""/105, 0x41100, 0x1, '\x00', r7, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r4, 0x4, 0x0, &(0x7f00000011c0)=[{0x3, 0x5, 0x6, 0x3}, {0x0, 0x4, 0xb, 0x8}, {0x3, 0x3, 0xd, 0x8}, {0x0, 0x2, 0xc, 0xb}], 0x10, 0x2227}, 0x94)
write$cgroup_subtree(r4, &(0x7f00000012c0)={[{0x2b, 'cpuacct'}]}, 0x9)
bind$inet(r4, &(0x7f0000001300)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10)
pwritev2(r1, &(0x7f0000002600)=[{&(0x7f0000001340)="b489aae9137648d437712998c7ef6ec9310d99332830a16afd53bdc59b5b90c32778a536b6c1b9f3d5fea98cc72f29aea053a34ef5dd5a2592861f659f95ae1f0644114156926c8b3734b72a7cd4204949884165c5361967e5226b8894834489c5fca871e0ea44f0defd74664993ccf74235ba119d7a427f3de3ede280a5b797a03fca7bd8e02d6b80adcd7b317258ba", 0x90}, {&(0x7f0000001400)="2aff5b80b724348f49eca47e93fb672153673ce9c8011ab452", 0x19}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="890c0b3022ee0fa261675d38b929997fea830d5ed642c04f4090e5ddcdb3693e1dfd50b32fea141c6f84245e7c9b37ea902c10adb570ef5c6b578af5ceed20564cf538670313263039867fee53b764a9d10cd65a", 0x54}, {&(0x7f00000024c0)="da26346f0064ed81bde09f6e7f7b9d7efc999a6c2500f71d8fc0a50d53d7227d922e660342921dc28589793ff3e9654454fdeec4e3b24c9a38803b919323a467ba6030cb24b356781de6849ca05c6a26ef55abf593472e608bd80e91d42d47e988496b1e15046f123888b59c3133ace63559ca958b3e7d94da2b343f26c4c9b2bf488a64221e98427f61b9ca0895473dce3194042effb052defc2637b0f344067aac6096698dc106dc05d1df01f5ce2f6665b63b9d5f1498e49a870a378a089d58cf4f9974e12e3455a6a132fdfa16aa", 0xd0}, {&(0x7f00000025c0)="ddb1b02f093040b3ac8b52541bc49161a9951d7ab0d0cc14b237ed7f7f269a", 0x1f}], 0x6, 0x8, 0x4, 0x4)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002fc0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002700)={0x84c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "f0e2102fd3f2358fe43a0800383024490be2638d8848ed3a8a3c37fb166da1b7256d7af990651341eb5ce24735f8a408f3c6d94a3d6bf9b150c97756558ec90c8887d128991b83f3bbb2e7475807ef15e59752e598e96aa0db4b9d9d1437eeda7c98a79e60bb8025fe79dffc301ba46c5555cfc4492e72a14cb3d11ead1509e3eb4e170aea3a31df1728ac4fdeab3bef77bb635f1c2a01086decf622923e802095aa032dbd5dd93a7a62afd70c3f44ee9c019dbe"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x324, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cpuacct'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-]%\\.#\xbf#!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cpuacct'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, ')'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{!)::/::\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "b93f052cc4b091fb95241984429fddfd399db21751df8f478ca18fca9143d27e8d1b511d44ca866cb6f7da8828ba44103f415cc27ebe59cbe2af1264355326af72d5dd468a287d693a1f05c39717daee3081be1194fc0cc6f10cb5c21029eeab9c794d7a7017c514c7571f9d3a13efdcb77adc9af2d6685a07e5f8c234a0ad5cdcd7a5911bfb500a7ba5bb530b0e93f2c9bb79113a5943f2bca83899a7814a749bb32f7a3197abefe9e0aa64001d27b87408fdc34562ee73"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf8, 0x4, "fa95e5adbad925db4b02687380b53c9ec8e52ba6c51b14c6c29eaca9d00605bad0f56f53e72f46773843041ed66ef7ec9c751cab5e4ac17edaa8e08f60e35dd7947d33efbbe2d7d27c4d997cdd4ef842dccf30b3ef6e08889c208af613e3c5616bf31cf8d9a87583b6da3a3360f335e8ba77f9db9ff22db3cae0f54c9e9d76f33cd5f7eb58d33504693f3bb9ec94e6c080120c69361b8ee609fd52e0cf0f75867148c1e004a7a895a6a0f429b12b08f62d5a702009a6066564d97d106c32e9269fd7301eac9a19e0d4fbf9381428cf3276d4d29ab74bea61dc14ee6d6049c0bc7f5e57eb76d8b94d8ef5958cb8318bf447544dd0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')!/\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "997ee693ae0961c80e85ced28a8212f0cc6ad4a099dd921e9582b57c5dc65b9e88ce3d2c5de00670045fafe84dd664c66fa3898db02b5efffab5fb3bd1dd0519295f5d0f4606e933dfc59844de825eda06ca44c64ffc56c4ed5f2c0caa208bb430b1726baf6166698424bea560c07f971f79c687a3f38ae0a309526434581aeb664a51c2031b755d7f5de9dae07a160bd1e56e0af464c4522965540a5ce3d8cec6073631054a4910d026a13dbed21bedf3ef8d2067e0ff65e12a723c4fed7f00ba2a40638fb5007c91573d3202d9e883e89bc75bc7c34171"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x831}]}, @ETHTOOL_A_FEATURES_WANTED={0x304, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/loop#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf0dd}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5b6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/loop#\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '${+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "cb1faccd01f9df39dc24aa5178bcb2778ffcda1bdaa06258a646aa924b99a50347f2b2d29f7c8e004665080dee26d3334783f6c4064695ba6391622cc53d5b6721d50bb444a8b7445adc3c7c484e80640bce7ce0b23a0bae5a499a99d695388a88a9b99e50e857f8f080edac2b83a0cc5fdd3a6f47039a90ebb4714192dcc0c7fb9338d33dcb063a5dd805a70b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "8d3e1b607d1ef79ed3da116ab2152a1a99801a3215085c3044f826c83dde42add4082e11139379e44d67e1a7c3a6155d8221dc3f762344461e16e957e1683bc9879dc1e3518921ffc18d4c08caf567c1e0f74b6560fab925d6049e473c1c806e8c28b8a115d5d4334f04722988dbbc5353c3a057e29ce88c4158036b6323fcc852fff690371fbf41812625a9576b8b7151e61796f1a6f35450c2ece6bcecdb6a7888410e1717bb5ba1503448b3314af5413debb4a98ae2b6972c29fc4909aaa56f5d31e12ecc63eb8c4b73825a7ed352e3707cdfc2392775453d888c"}, @ETHTOOL_A_BITSET_VALUE={0x72, 0x4, "a3b3ca837405f44fef4d19390aca55031a5c60f30e2f1673a40cc36baf5c5ec1c26dd77d089ada9f41789599ee7169e608398808ca2815776b993873d7054321493e3c6be1e30397c4e40f78db2d965fafd1965e40b923969815e31e93ecd6cab4df70f26a92be3735bf9fd762cb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "ef4efe80eebd3fdbc1548543a2f4bcab"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x11177c64}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5b69}]}]}, 0x84c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)

1m26.268330005s ago: executing program 3 (id=1875):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r2, &(0x7f0000000240)="3b826a8687", 0x5, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @multicast}, 0x14)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)

1m26.089999498s ago: executing program 3 (id=1878):
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xacb068393a079645, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000003cc0)=0xb)

1m25.34548949s ago: executing program 3 (id=1882):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)

1m25.293213297s ago: executing program 34 (id=1882):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000200000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010270000050000001000000000e8030000e803000020"], 0x128}}, 0x0)

17.000733741s ago: executing program 6 (id=2681):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x1, 0x240020c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.865533872s ago: executing program 6 (id=2684):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x8b, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0) (async)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073007a310000000008000a40fffffffc080003400000010614000000f30001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
chdir(&(0x7f0000000080)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2)

16.739741075s ago: executing program 6 (id=2687):
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
pipe2(&(0x7f0000000080), 0x800) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
socket$inet(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async, rerun: 64)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (rerun: 32)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0xff, 0xd, 0x40, 0x0, 0x2, 0x80, 0x7, 0x7, 0xa, 0x59, 0x5, 0x4, 0x7f, 0x8, 0x5}})

16.679485583s ago: executing program 6 (id=2688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x18, 0x121, 0xfffffffc, 0x0, {0x23, 0x20}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x2, 0x1, 0x3}}]}, 0x2c}}, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendfile(r2, r2, 0x0, 0x3)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002180)='coredump_filter\x00')
write$binfmt_misc(r3, &(0x7f0000000100), 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000240), 0x8000000000000002, 0x107780)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @random="e68aadaed53d", @multicast1}}}}, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x7, 0x14a1fa, 0x0, 0x0, 0x0, 0xc, "339f020bbe82b398000000000000fdffffff0c0ec0c1b4e9b1c4369d03740250ceaac594b1b3d749dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x2, 0x3fd]}})
dup(r4)
r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SLAVE(r5, 0x703, 0x68)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r6, 0x0)
write$UHID_INPUT(r2, &(0x7f0000002c40)={0x8, {"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", 0x1000}}, 0x1006)

16.61946422s ago: executing program 6 (id=2690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {<r5=>0x80000000, <r6=>0x0}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000240)={r5, &(0x7f0000000200)=[{<r7=>0x80000000}], &(0x7f00000003c0)=[{{}, {<r8=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={r8, 0x0, &(0x7f0000000080)=[{{<r9=>0x80000000, <r10=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f000000a300)={{r7, r10, 0x2, [0x80000001, 0x8]}, {r9, r6, 0x2, [0xc1b, 0x3]}, 0x0, [0x7d, 0x8]})
syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x88840)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)={0x14, 0x24, 0x1, 0x70ad26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f05", 0x2}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x68747541, 0x444d4163, 0x69746e65}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000140)=0x7ffff, 0x4)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

16.404177605s ago: executing program 6 (id=2693):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240020c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.337135038s ago: executing program 35 (id=2693):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240020c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.179965855s ago: executing program 4 (id=2715):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)="98bd80d1b51fac3cd42406000000000003003395f2ad", 0x16}}, 0x4094)

13.049108403s ago: executing program 4 (id=2716):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141101)
ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000000)={0x1, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x50, r7, 0x1, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x40, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x44081)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
r11 = socket$netlink(0x10, 0x3, 0x0)
io_setup(0x8, &(0x7f0000000380)=<r12=>0x0)
io_cancel(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r5, &(0x7f00000003c0)="c511781e278b1ebc60a3169d6865ba86fc1d3306d301", 0x16, 0xad}, &(0x7f0000000440))
close_range(r9, r1, 0x0)
open_by_handle_at(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r11], 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xb, 0xfff2}, {0xffe2, 0xc}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x40000)

12.707559182s ago: executing program 4 (id=2719):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r1=>0x0], &(0x7f0000000180)=[<r2=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2})
preadv(r0, &(0x7f0000000100), 0x0, 0x1bf, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048010}, 0x4000)
syz_genetlink_get_family_id$wireguard(0x0, r5)
sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x4000040)
socket$inet(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)

11.962220943s ago: executing program 4 (id=2727):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054)
write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)

8.200389257s ago: executing program 4 (id=2739):
socketpair(0x23, 0x5, 0x7, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12d0}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe46}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xabb16d77bc4fe03}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r5, &(0x7f0000000080), &(0x7f0000000100)=0x20)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8040}, 0x48000)
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000140)=[{0xc, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @uvalue=0x5}, {0x3}, {0x3, @uvalue=0x5}]}, 0x6}]})

7.945774023s ago: executing program 4 (id=2742):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x400000009)
syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x8, 0x1, 0x5, 0x8, 0x9})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0xcd, 0x7})

2.069958187s ago: executing program 7 (id=2773):
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40808)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351", 0x800, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00')

2.00628385s ago: executing program 7 (id=2774):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)={0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10)

1.550285287s ago: executing program 0 (id=2775):
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000)
ioctl$BLKRASET(r0, 0x1262, &(0x7f0000000100)=0xfffffffffffffffb)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

1.449970703s ago: executing program 0 (id=2776):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)

1.37478157s ago: executing program 0 (id=2777):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000010000000000fddbdf25e0000001000092e0e6fd115acb91c48af8ec9332008b00000000000000000000000000000000000000000000000040000000000300030000200000000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="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"/290], 0x15c}, 0x1, 0x0, 0x0, 0x48011}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
setns(r5, 0x24020000)
syz_clone(0xde280000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
fstat(r5, &(0x7f0000000240))
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fadbdf250200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000024aa638d000800a000070000000800276453b70dcc08ba0000b8b85fe973ccc9eaea5da9ec37247a30d09b5b87c4e26c9e00"/66], 0x38}, 0x1, 0x0, 0x0, 0xffad46ab7102f497}, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @private=0xa010102}, 0x40)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffffc}, 0x1c)
r10 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x6, 0xfffffffffffffffe}}], 0x20})
ioctl$KVM_SET_GUEST_DEBUG_x86(r11, 0x4048ae9b, &(0x7f0000000140)={0x10001, 0x0, {[0x0, 0x0, 0x0, 0x1000]}})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r12 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r12, &(0x7f0000001c80)=[{&(0x7f00000002c0)=""/119, 0x77}], 0x1, 0xfffffffd, 0x1)
ioctl$TUNSETLINK(r12, 0x400454cd, 0x3)

1.317598247s ago: executing program 7 (id=2778):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001a0049bc2dbd7000fedbdf250a208002ff00000100000000050014000800000008001900", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32], 0x3c}}, 0x40000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r2, 0x23, 0x81886fed200085e0, 0xb5, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0]}, 0x40)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000000)=[0x81, 0x400010, 0xc, 0x7fe, 0x4007fe, 0x9, 0x8, 0x7ffffffd])
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x336, 0x0, 0xffffffffffffffff}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.138696664s ago: executing program 7 (id=2779):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae03, 0xa3)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})

999.738927ms ago: executing program 7 (id=2780):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xbe2107921a252cc6, &(0x7f0000000000)=0xc, 0x4)

919.614179ms ago: executing program 5 (id=2781):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)="98bd80d1b51fac3cd42406000000000000003395f2ad", 0x12}}, 0x4094)

918.903983ms ago: executing program 7 (id=2782):
epoll_create1(0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x581100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000700)="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", 0x118)
write(r1, &(0x7f00000001c0)='1', 0x1)

815.418439ms ago: executing program 5 (id=2783):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
setrlimit(0x7, &(0x7f0000000400))
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x8}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r3}, 0x14)

815.065545ms ago: executing program 5 (id=2784):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)

710.239947ms ago: executing program 0 (id=2785):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)={0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10)

708.852979ms ago: executing program 5 (id=2786):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x10003, 0x0)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0)

478.296113ms ago: executing program 5 (id=2787):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x200, 0x2d8}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x70}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x44)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01980400419a04002800128008000100736974001c00028008000100", @ANYRES32=r4, @ANYBLOB="060008002f"], 0x48}}, 0x0)
sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14)

291.358494ms ago: executing program 5 (id=2788):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x402400, 0x0) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000240)={0x9, 0x100, 0x4, {0x0, 0x10000000, 0x1, 0x5}})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0xe, 0x0, 0x308, 0x7, 0x0, 0x0, 0x8000000001002, 0x1, 0x6, 0x6, 0xffffffffffff0001, 0xb7, 0x80000000008bd9, 0xfffffffffffffefd, 0x7f, 0x20], 0x25000, 0x286343})
rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffd4e, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r2)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) (async)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async)
ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000000)) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

151.36389ms ago: executing program 0 (id=2789):
creat(&(0x7f0000000280)='./file2\x00', 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x2)

0s ago: executing program 0 (id=2790):
add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
read$FUSE(r1, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0xcd0}}, 0x800)

kernel console output (not intermixed with test programs):

  208.133654][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'.
[  208.137923][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'.
[  208.325879][T12800] random: crng reseeded on system resumption
[  208.428934][T12800] xfrm1: entered promiscuous mode
[  208.430734][T12800] xfrm1: entered allmulticast mode
[  208.855775][T12812] FAULT_INJECTION: forcing a failure.
[  208.855775][T12812] name fail_page_alloc, interval 1, probability 100, space 0, times 0
[  208.861672][T12812] CPU: 2 UID: 0 PID: 12812 Comm: syz.4.2107 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  208.861690][T12812] Tainted: [L]=SOFTLOCKUP
[  208.861695][T12812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  208.861708][T12812] Call Trace:
[  208.861713][T12812]  <TASK>
[  208.861718][T12812]  dump_stack_lvl+0x100/0x190
[  208.861810][T12812]  should_fail_ex.cold+0x5/0xa
[  208.861836][T12812]  ? fs_reclaim_acquire+0x70/0x100
[  208.861887][T12812]  should_fail_alloc_page+0xeb/0x140
[  208.861904][T12812]  prepare_alloc_pages+0x1f0/0x5f0
[  208.861923][T12812]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  208.861940][T12812]  ? __blk_mq_get_tag+0xb4/0x4f0
[  208.861977][T12812]  ? blk_mq_get_tag+0xa8d/0xdf0
[  208.861990][T12812]  ? __lock_acquire+0x49f/0x1a40
[  208.862012][T12812]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  208.862026][T12812]  ? __pfx_blk_mq_get_tag+0x10/0x10
[  208.862039][T12812]  ? __pfx_autoremove_wake_function+0x10/0x10
[  208.862055][T12812]  ? __lock_acquire+0x49f/0x1a40
[  208.862074][T12812]  ? bio_associate_blkg+0xcf/0x730
[  208.862092][T12812]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  208.862114][T12812]  ? policy_nodemask+0xed/0x4f0
[  208.862132][T12812]  alloc_pages_mpol+0x1fb/0x540
[  208.862149][T12812]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  208.862171][T12812]  ? __pfx___debug_object_init+0x10/0x10
[  208.862202][T12812]  alloc_pages_noprof+0x1a/0x160
[  208.862221][T12812]  blk_rq_map_kern+0x4d3/0x820
[  208.862243][T12812]  scsi_execute_cmd+0xbb1/0xe70
[  208.862304][T12812]  ? __lock_acquire+0x49f/0x1a40
[  208.862322][T12812]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  208.862341][T12812]  ? lock_acquire+0x1b9/0x370
[  208.862357][T12812]  sr_check_events+0x1f1/0xaa0
[  208.862400][T12812]  ? trace_contention_end+0x126/0x160
[  208.862415][T12812]  ? __pfx_sr_check_events+0x10/0x10
[  208.862433][T12812]  ? find_held_lock+0x2b/0x80
[  208.862451][T12812]  ? disk_block_events+0xc4/0x140
[  208.862469][T12812]  ? do_raw_spin_lock+0x128/0x260
[  208.862488][T12812]  cdrom_check_events+0x68/0x110
[  208.862519][T12812]  sr_block_check_events+0xc4/0x100
[  208.862538][T12812]  disk_check_events+0xc7/0x420
[  208.862549][T12812]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.862597][T12812]  disk_check_media_change+0x100/0x270
[  208.862610][T12812]  ? __pfx_disk_check_media_change+0x10/0x10
[  208.862622][T12812]  ? lockdep_hardirqs_on+0x78/0x100
[  208.862635][T12812]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  208.862647][T12812]  ? __pm_runtime_resume+0xc3/0x170
[  208.862677][T12812]  sr_block_open+0x97/0x180
[  208.862694][T12812]  ? __pfx_sr_block_open+0x10/0x10
[  208.862712][T12812]  blkdev_get_whole+0x99/0x290
[  208.862734][T12812]  bdev_open+0x2c7/0xe40
[  208.862754][T12812]  bdev_file_open_by_dev+0x179/0x210
[  208.862772][T12812]  swsusp_check+0x72/0x470
[  208.862786][T12812]  software_resume+0x6f/0x330
[  208.862804][T12812]  resume_store+0x248/0x460
[  208.862821][T12812]  ? __pfx_resume_store+0x10/0x10
[  208.862842][T12812]  ? find_held_lock+0x2b/0x80
[  208.862859][T12812]  ? sysfs_file_kobj+0xe4/0x290
[  208.862882][T12812]  ? sysfs_file_kobj+0xe4/0x290
[  208.862900][T12812]  ? __pfx_resume_store+0x10/0x10
[  208.862916][T12812]  kobj_attr_store+0x58/0x80
[  208.862937][T12812]  ? __pfx_kobj_attr_store+0x10/0x10
[  208.862953][T12812]  sysfs_kf_write+0xf2/0x150
[  208.862972][T12812]  kernfs_fop_write_iter+0x3e0/0x5f0
[  208.862987][T12812]  ? __pfx_sysfs_kf_write+0x10/0x10
[  208.863006][T12812]  vfs_write+0x6ac/0x1050
[  208.863027][T12812]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  208.863044][T12812]  ? __pfx_vfs_write+0x10/0x10
[  208.863072][T12812]  ksys_write+0x12a/0x250
[  208.863090][T12812]  ? __pfx_ksys_write+0x10/0x10
[  208.863112][T12812]  do_syscall_64+0x115/0x870
[  208.863125][T12812]  ? clear_bhb_loop+0x40/0x90
[  208.863141][T12812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.863153][T12812] RIP: 0033:0x7ff9bdb9df99
[  208.863167][T12812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.863178][T12812] RSP: 002b:00007ff9be987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  208.863189][T12812] RAX: ffffffffffffffda RBX: 00007ff9bde25fa0 RCX: 00007ff9bdb9df99
[  208.863199][T12812] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003
[  208.863209][T12812] RBP: 00007ff9be987090 R08: 0000000000000000 R09: 0000000000000000
[  208.863218][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.863227][T12812] R13: 00007ff9bde26038 R14: 00007ff9bde25fa0 R15: 00007ffd061cd8b8
[  208.863247][T12812]  </TASK>
[  209.212700][T12828] ieee802154 phy1 wpan1: encryption failed: -22
[  209.363978][T12846] FAULT_INJECTION: forcing a failure.
[  209.363978][T12846] name fail_page_alloc, interval 1, probability 100, space 0, times 0
[  209.377698][T12846] CPU: 2 UID: 0 PID: 12846 Comm: syz.6.2121 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  209.377725][T12846] Tainted: [L]=SOFTLOCKUP
[  209.377732][T12846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  209.377742][T12846] Call Trace:
[  209.377748][T12846]  <TASK>
[  209.377755][T12846]  dump_stack_lvl+0x100/0x190
[  209.377785][T12846]  should_fail_ex.cold+0x5/0xa
[  209.377804][T12846]  ? fs_reclaim_acquire+0x70/0x100
[  209.377830][T12846]  should_fail_alloc_page+0xeb/0x140
[  209.377876][T12846]  prepare_alloc_pages+0x1f0/0x5f0
[  209.377900][T12846]  ? kasan_save_track+0x14/0x30
[  209.377919][T12846]  ? __kasan_slab_alloc+0x89/0x90
[  209.377942][T12846]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  209.377961][T12846]  ? sr_block_open+0x97/0x180
[  209.377988][T12846]  ? bdev_file_open_by_dev+0x179/0x210
[  209.378013][T12846]  ? swsusp_check+0x72/0x470
[  209.378031][T12846]  ? software_resume+0x6f/0x330
[  209.378052][T12846]  ? resume_store+0x248/0x460
[  209.378074][T12846]  ? kobj_attr_store+0x58/0x80
[  209.378102][T12846]  ? sysfs_kf_write+0xf2/0x150
[  209.378126][T12846]  ? kernfs_fop_write_iter+0x3e0/0x5f0
[  209.378146][T12846]  ? vfs_write+0x6ac/0x1050
[  209.378170][T12846]  ? ksys_write+0x12a/0x250
[  209.378193][T12846]  ? do_syscall_64+0x115/0x870
[  209.378212][T12846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.378236][T12846]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  209.378270][T12846]  ? trace_kmem_cache_alloc+0xdd/0x100
[  209.378291][T12846]  ? __kasan_slab_alloc+0x89/0x90
[  209.378312][T12846]  ? kmem_cache_alloc_noprof+0x2d7/0x6a0
[  209.378331][T12846]  ? bio_associate_blkg+0xcf/0x730
[  209.378385][T12846]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  209.378422][T12846]  ? policy_nodemask+0xed/0x4f0
[  209.378449][T12846]  alloc_pages_mpol+0x1fb/0x540
[  209.378473][T12846]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  209.378497][T12846]  ? __pfx___debug_object_init+0x10/0x10
[  209.378523][T12846]  alloc_pages_noprof+0x1a/0x160
[  209.378549][T12846]  blk_rq_map_kern+0x4d3/0x820
[  209.378579][T12846]  scsi_execute_cmd+0xbb1/0xe70
[  209.378608][T12846]  ? __lock_acquire+0x49f/0x1a40
[  209.378635][T12846]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  209.378661][T12846]  ? lock_acquire+0x1b9/0x370
[  209.378684][T12846]  sr_check_events+0x1f1/0xaa0
[  209.378709][T12846]  ? trace_contention_end+0x126/0x160
[  209.378731][T12846]  ? __pfx_sr_check_events+0x10/0x10
[  209.378757][T12846]  ? find_held_lock+0x2b/0x80
[  209.378781][T12846]  ? disk_block_events+0xc4/0x140
[  209.378806][T12846]  ? do_raw_spin_lock+0x128/0x260
[  209.378834][T12846]  cdrom_check_events+0x68/0x110
[  209.378855][T12846]  sr_block_check_events+0xc4/0x100
[  209.378881][T12846]  disk_check_events+0xc7/0x420
[  209.378897][T12846]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.378916][T12846]  disk_check_media_change+0x100/0x270
[  209.378934][T12846]  ? __pfx_disk_check_media_change+0x10/0x10
[  209.378951][T12846]  ? lockdep_hardirqs_on+0x78/0x100
[  209.378970][T12846]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  209.378987][T12846]  ? __pm_runtime_resume+0xc3/0x170
[  209.379012][T12846]  sr_block_open+0x97/0x180
[  209.379036][T12846]  ? __pfx_sr_block_open+0x10/0x10
[  209.379061][T12846]  blkdev_get_whole+0x99/0x290
[  209.379088][T12846]  bdev_open+0x2c7/0xe40
[  209.379116][T12846]  bdev_file_open_by_dev+0x179/0x210
[  209.379141][T12846]  swsusp_check+0x72/0x470
[  209.379160][T12846]  software_resume+0x6f/0x330
[  209.379183][T12846]  resume_store+0x248/0x460
[  209.379207][T12846]  ? __pfx_resume_store+0x10/0x10
[  209.379238][T12846]  ? find_held_lock+0x2b/0x80
[  209.379262][T12846]  ? sysfs_file_kobj+0xe4/0x290
[  209.379284][T12846]  ? sysfs_file_kobj+0xe4/0x290
[  209.379309][T12846]  ? __pfx_resume_store+0x10/0x10
[  209.379332][T12846]  kobj_attr_store+0x58/0x80
[  209.379353][T12846]  ? __pfx_kobj_attr_store+0x10/0x10
[  209.379375][T12846]  sysfs_kf_write+0xf2/0x150
[  209.379401][T12846]  kernfs_fop_write_iter+0x3e0/0x5f0
[  209.379422][T12846]  ? __pfx_sysfs_kf_write+0x10/0x10
[  209.379449][T12846]  vfs_write+0x6ac/0x1050
[  209.379474][T12846]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  209.379498][T12846]  ? __pfx_vfs_write+0x10/0x10
[  209.379539][T12846]  ksys_write+0x12a/0x250
[  209.379563][T12846]  ? __pfx_ksys_write+0x10/0x10
[  209.379595][T12846]  do_syscall_64+0x115/0x870
[  209.379613][T12846]  ? clear_bhb_loop+0x40/0x90
[  209.379634][T12846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.379651][T12846] RIP: 0033:0x7f3d5cb9df99
[  209.379666][T12846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.379682][T12846] RSP: 002b:00007f3d5da59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  209.379699][T12846] RAX: ffffffffffffffda RBX: 00007f3d5ce25fa0 RCX: 00007f3d5cb9df99
[  209.379710][T12846] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003
[  209.379720][T12846] RBP: 00007f3d5da59090 R08: 0000000000000000 R09: 0000000000000000
[  209.379730][T12846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  209.379740][T12846] R13: 00007f3d5ce26038 R14: 00007f3d5ce25fa0 R15: 00007fff3e4984f8
[  209.379763][T12846]  </TASK>
[  209.610865][T12855] ieee802154 phy1 wpan1: encryption failed: -22
[  209.669257][T12859] ieee802154 phy1 wpan1: encryption failed: -22
[  209.744308][T12867] comedi comedi2: board detection failed
[  209.962759][T12900] ieee802154 phy1 wpan1: encryption failed: -22
[  210.053382][T12906] binder: 12905:12906 ioctl 4018620d 0 returned -22
[  210.231839][ T5742] Bluetooth: hci4: command 0x1003 tx timeout
[  210.236849][   T64] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  210.330953][T12915] comedi comedi2: board detection failed
[  210.685030][T12932] FAULT_INJECTION: forcing a failure.
[  210.685030][T12932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  210.691120][T12932] CPU: 2 UID: 0 PID: 12932 Comm: syz.0.2147 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.691138][T12932] Tainted: [L]=SOFTLOCKUP
[  210.691142][T12932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  210.691150][T12932] Call Trace:
[  210.691154][T12932]  <TASK>
[  210.691159][T12932]  dump_stack_lvl+0x100/0x190
[  210.691179][T12932]  should_fail_ex.cold+0x5/0xa
[  210.691195][T12932]  _copy_to_user+0x32/0xd0
[  210.691213][T12932]  simple_read_from_buffer+0xcb/0x170
[  210.691241][T12932]  proc_fail_nth_read+0x1af/0x230
[  210.691261][T12932]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  210.691280][T12932]  ? rw_verify_area+0xce/0x6d0
[  210.691296][T12932]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  210.691313][T12932]  vfs_read+0x1e4/0xb40
[  210.691333][T12932]  ? __pfx_vfs_read+0x10/0x10
[  210.691350][T12932]  ? __fget_files+0x215/0x3d0
[  210.691366][T12932]  ? __fget_files+0x21f/0x3d0
[  210.691381][T12932]  ksys_read+0x12a/0x250
[  210.691398][T12932]  ? __pfx_ksys_read+0x10/0x10
[  210.691420][T12932]  do_syscall_64+0x115/0x870
[  210.691437][T12932]  ? clear_bhb_loop+0x40/0x90
[  210.691451][T12932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.691463][T12932] RIP: 0033:0x7fb3ba15e7ce
[  210.691473][T12932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  210.691485][T12932] RSP: 002b:00007fb3baffafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  210.691496][T12932] RAX: ffffffffffffffda RBX: 00007fb3baffb6c0 RCX: 00007fb3ba15e7ce
[  210.691503][T12932] RDX: 000000000000000f RSI: 00007fb3baffb0a0 RDI: 0000000000000004
[  210.691526][T12932] RBP: 00007fb3baffb090 R08: 0000000000000000 R09: 0000000000000000
[  210.691532][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  210.691539][T12932] R13: 00007fb3ba426038 R14: 00007fb3ba425fa0 R15: 00007ffc2d9e6378
[  210.691554][T12932]  </TASK>
[  210.907988][T12943] geneve1: entered allmulticast mode
[  210.934871][T12941] validate_nla: 3 callbacks suppressed
[  210.934882][T12941] netlink: 'syz.4.2150': attribute type 1 has an invalid length.
[  210.939188][T12941] netlink: 'syz.4.2150': attribute type 4 has an invalid length.
[  210.943020][T12941] netlink: 'syz.4.2150': attribute type 1 has an invalid length.
[  210.945606][T12941] netlink: 'syz.4.2150': attribute type 4 has an invalid length.
[  211.128681][T12956] netlink: 'syz.4.2155': attribute type 1 has an invalid length.
[  211.153309][T12956] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  211.382726][T12973] hsr_slave_0: left promiscuous mode
[  211.387718][T12973] hsr_slave_1: left promiscuous mode
[  211.797147][T12979] 9p: Bad value for 'rfdno'
[  212.132444][   T42] kauditd_printk_skb: 1221 callbacks suppressed
[  212.132467][   T42] audit: type=1400 audit(524756.059:25730): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  212.151563][   T42] audit: type=1400 audit(524756.059:25731): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  212.164381][   T42] audit: type=1400 audit(524756.069:25732): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  212.175493][   T42] audit: type=1400 audit(524756.069:25733): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  212.183255][   T42] audit: type=1400 audit(524756.069:25734): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  212.195759][   T42] audit: type=1400 audit(524756.089:25735): avc:  denied  { create } for  pid=12984 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  212.204336][   T42] audit: type=1400 audit(524756.089:25736): avc:  denied  { create } for  pid=12984 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  212.211742][   T42] audit: type=1400 audit(524756.089:25737): avc:  denied  { write } for  pid=12984 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  212.220482][   T42] audit: type=1400 audit(524756.089:25738): avc:  denied  { read } for  pid=12984 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  212.226897][   T42] audit: type=1400 audit(524756.099:25739): avc:  denied  { create } for  pid=12984 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  212.663701][T12998] ieee802154 phy1 wpan1: encryption failed: -22
[  212.858903][T13004] netlink: 'syz.4.2170': attribute type 18 has an invalid length.
[  212.861790][T13004] __nla_validate_parse: 16 callbacks suppressed
[  212.861800][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'.
[  212.866743][T13004] netlink: 'syz.4.2170': attribute type 18 has an invalid length.
[  212.869104][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'.
[  213.139508][T13023] ieee802154 phy1 wpan1: encryption failed: -22
[  213.266094][T13032] loop2: detected capacity change from 0 to 7
[  213.282624][T13032] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  213.290690][T13032] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  213.306029][T13032] Dev loop2: unable to read RDB block 7
[  213.307814][T13032]  loop2: unable to read partition table
[  213.320560][T13032] loop2: partition table beyond EOD, truncated
[  213.325459][T13032] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  213.344363][T13034] loop6: detected capacity change from 0 to 2640
[  213.375426][ T5746] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.395842][ T5746] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.413867][ T5746] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.422438][ T5746] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.427607][ T5746] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.491159][T13039] netlink: 'syz.6.2181': attribute type 18 has an invalid length.
[  213.494328][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2181'.
[  213.499505][T13039] netlink: 'syz.6.2181': attribute type 18 has an invalid length.
[  213.509322][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2181'.
[  213.567459][ T6030] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.576930][ T6030] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.584173][ T6030] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.588822][ T6030] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.591959][ T6030] Buffer I/O error on dev loop6, logical block 0, async page read
[  213.601308][T13045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13045 comm=syz.6.2182
[  213.781970][T13054] ieee802154 phy1 wpan1: encryption failed: -22
[  213.918146][T13062] netlink: 'syz.4.2190': attribute type 18 has an invalid length.
[  213.920676][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2190'.
[  213.924685][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2190'.
[  214.211797][T13080] ieee802154 phy1 wpan1: encryption failed: -22
[  214.295102][T13085] ipt_rpfilter: unknown options
[  214.344593][T13089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2198'.
[  214.378591][T13089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13089 comm=syz.4.2198
[  214.548207][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'.
[  214.554743][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'.
[  214.722942][ T5815] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.763473][T13104] ieee802154 phy1 wpan1: encryption failed: -22
[  214.879626][T13106] syzkaller1: entered promiscuous mode
[  214.891549][T13106] syzkaller1: entered allmulticast mode
[  214.921091][ T5815] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.034651][ T5815] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.145626][ T5815] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.169547][T13125] tcpci 0-0050: Can't find connector node.
[  215.176005][T13125] tcpci 0-0050: probe with driver tcpci failed with error -22
[  215.213713][T13126] tcpci 1-0005: probe with driver tcpci failed with error -5
[  215.226073][T13125] i2c i2c-0: new_device: Instantiated device tcpci at 0x50
[  215.235200][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'.
[  215.237636][T13126] i2c i2c-1: new_device: Instantiated device tcpci at 0x05
[  215.249678][T13129] IPv6: sit3: Disabled Multicast RS
[  215.374268][T13135] ieee802154 phy1 wpan1: encryption failed: -22
[  215.642979][ T5815] bridge_slave_1: left allmulticast mode
[  215.644921][ T5815] bridge_slave_1: left promiscuous mode
[  215.648113][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.663810][ T5815] bridge_slave_0: left allmulticast mode
[  215.665713][ T5815] bridge_slave_0: left promiscuous mode
[  215.670774][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.733052][T13164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.747306][T13164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.904671][ T5815] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  215.914549][ T5815] ip6gretap1 (unregistering): left allmulticast mode
[  215.936990][T13176] ieee802154 phy1 wpan1: encryption failed: -22
[  215.941082][ T5813] SELinux: failure in sel_netif_sid_slow(), invalid network interface (74)
[  216.144665][ T5815] bond1 (unregistering): (slave vti0): Releasing backup interface
[  216.154929][ T5815] vti0 (unregistering): left promiscuous mode
[  216.164905][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  216.169543][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  216.175692][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  216.178757][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  216.183191][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  216.186065][ T5813] usb 5-1: USB disconnect, device number 40
[  216.360356][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.367734][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.372386][ T5815] bond0 (unregistering): Released all slaves
[  216.377401][ T5815] bond1 (unregistering): Released all slaves
[  216.409972][ T5815] bond2 (unregistering): Released all slaves
[  216.495070][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5
[  216.604087][T13196] VFS: file-max limit 0 reached
[  216.636489][ T5815] tipc: Left network mode
[  216.784060][T13210] ieee802154 phy1 wpan1: encryption failed: -22
[  216.934975][T13215] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  216.937844][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6
[  217.039866][ T5815] hsr_slave_0: left promiscuous mode
[  217.042863][ T5815] hsr_slave_1: left promiscuous mode
[  217.049713][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.051993][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.067180][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.070878][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.092538][ T5815] veth1_vlan: left promiscuous mode
[  217.094207][ T5815] veth0_vlan: left promiscuous mode
[  217.147422][   T42] kauditd_printk_skb: 1328 callbacks suppressed
[  217.147444][   T42] audit: type=1400 audit(524761.069:27068): avc:  denied  { read write } for  pid=13223 comm="syz.5.2237" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  217.158928][T13224] afs: Unknown parameter 'dynxüó'
[  217.175187][   T42] audit: type=1400 audit(524761.079:27069): avc:  denied  { open } for  pid=13223 comm="syz.5.2237" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  217.200776][   T42] audit: type=1400 audit(524761.079:27070): avc:  denied  { ioctl } for  pid=13223 comm="syz.5.2237" path="/dev/video7" dev="devtmpfs" ino=975 ioctlcmd=0x5628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  217.216163][   T42] audit: type=1400 audit(524761.079:27072): avc:  denied  { mounton } for  pid=13223 comm="syz.5.2237" path="/90/file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  217.234050][   T42] audit: type=1400 audit(524761.079:27071): avc:  denied  { sys_admin } for  pid=13229 comm="rm" capability=21  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  217.253195][   T42] audit: type=1400 audit(524761.089:27073): avc:  denied  { mounton } for  pid=13223 comm="syz.5.2237" path="/90" dev="tmpfs" ino=484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  217.262236][   T42] audit: type=1400 audit(524761.099:27074): avc:  denied  { mount } for  pid=13223 comm="syz.5.2237" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  217.274581][   T42] audit: type=1400 audit(524761.099:27075): avc:  denied  { search } for  pid=13229 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.282918][   T42] audit: type=1400 audit(524761.099:27076): avc:  denied  { search } for  pid=13229 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.289004][   T42] audit: type=1400 audit(524761.099:27077): avc:  denied  { search } for  pid=13229 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  217.415272][T13243] FAULT_INJECTION: forcing a failure.
[  217.415272][T13243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.419451][T13243] CPU: 0 UID: 0 PID: 13243 Comm: syz.6.2243 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  217.419469][T13243] Tainted: [L]=SOFTLOCKUP
[  217.419474][T13243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  217.419488][T13243] Call Trace:
[  217.419492][T13243]  <TASK>
[  217.419497][T13243]  dump_stack_lvl+0x100/0x190
[  217.419560][T13243]  should_fail_ex.cold+0x5/0xa
[  217.419587][T13243]  _copy_from_user+0x2e/0xd0
[  217.419631][T13243]  copy_msghdr_from_user+0x9f/0x4c0
[  217.419698][T13243]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  217.419723][T13243]  ___sys_sendmsg+0x106/0x1e0
[  217.419742][T13243]  ? __pfx____sys_sendmsg+0x10/0x10
[  217.419760][T13243]  ? __lock_acquire+0x49f/0x1a40
[  217.419799][T13243]  ? get_pid_task+0x106/0x250
[  217.419835][T13243]  __sys_sendmsg+0x160/0x210
[  217.419850][T13243]  ? __pfx___sys_sendmsg+0x10/0x10
[  217.419872][T13243]  do_syscall_64+0x115/0x870
[  217.419922][T13243]  ? clear_bhb_loop+0x40/0x90
[  217.419937][T13243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.419949][T13243] RIP: 0033:0x7f3d5cb9df99
[  217.419959][T13243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.419970][T13243] RSP: 002b:00007f3d5da59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.419982][T13243] RAX: ffffffffffffffda RBX: 00007f3d5ce25fa0 RCX: 00007f3d5cb9df99
[  217.419992][T13243] RDX: 0000000000004094 RSI: 0000200000000040 RDI: 0000000000000004
[  217.420000][T13243] RBP: 00007f3d5da59090 R08: 0000000000000000 R09: 0000000000000000
[  217.420006][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.420013][T13243] R13: 00007f3d5ce26038 R14: 00007f3d5ce25fa0 R15: 00007fff3e4984f8
[  217.420027][T13243]  </TASK>
[  217.477666][ T5815] team0 (unregistering): Port device team_slave_1 removed
[  217.487376][ T5815] team0 (unregistering): Port device team_slave_0 removed
[  217.509769][T13245] tmpfs: Bad value for 'mpol'
[  217.586260][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7
[  217.946880][T13183] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.949299][T13183] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.952061][T13183] bridge_slave_0: entered allmulticast mode
[  217.954911][T13183] bridge_slave_0: entered promiscuous mode
[  217.959717][T13183] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.962095][T13183] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.964431][T13183] bridge_slave_1: entered allmulticast mode
[  217.967256][T13183] bridge_slave_1: entered promiscuous mode
[  217.987234][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8
[  217.997931][T13183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.007258][T13183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.076378][T13183] team0: Port device team_slave_0 added
[  218.080151][T13183] team0: Port device team_slave_1 added
[  218.096052][T13284] validate_nla: 6 callbacks suppressed
[  218.096063][T13284] netlink: 'syz.4.2253': attribute type 1 has an invalid length.
[  218.133036][T13284] 8021q: adding VLAN 0 to HW filter on device bond7
[  218.197661][T13284] veth5: entered promiscuous mode
[  218.209357][T13183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.212434][T13291] netlink: 'syz.4.2253': attribute type 1 has an invalid length.
[  218.215724][T13183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.216211][ T5815] IPVS: stop unused estimator thread 0...
[  218.224290][T13183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.238580][T13183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.244161][T13183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.269503][T13183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.310762][   T64] Bluetooth: hci4: command tx timeout
[  218.328788][T13183] hsr_slave_0: entered promiscuous mode
[  218.337075][T13183] hsr_slave_1: entered promiscuous mode
[  218.339280][T13183] debugfs: 'hsr0' already exists in 'hsr'
[  218.341295][T13183] Cannot create hsr debugfs directory
[  218.486036][T13183] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  218.490751][T13183] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  218.494349][T13183] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  218.499717][T13183] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  218.502635][T13183] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  218.507149][T13183] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  218.509901][T13183] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  218.513939][T13183] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  218.537034][T13183] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.539987][T13183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.543193][T13183] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.546162][T13183] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.587705][T13183] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.598257][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.602283][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.608803][T13183] 8021q: adding VLAN 0 to HW filter on device team0
[  218.615537][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.617947][ T8041] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.625459][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.628186][ T8041] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.795843][T13323] 9pnet_virtio: no channels available for device syz
[  218.917233][T13334] __nla_validate_parse: 7 callbacks suppressed
[  218.917244][T13334] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2265'.
[  218.964949][T13183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.037683][T13340] Unsupported ieee802154 address type: 0
[  219.044731][T13183] veth0_vlan: entered promiscuous mode
[  219.053117][T13183] veth1_vlan: entered promiscuous mode
[  219.086725][T13183] veth0_macvtap: entered promiscuous mode
[  219.092092][T13183] veth1_macvtap: entered promiscuous mode
[  219.119121][T13183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.144426][T13183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.164099][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.168194][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.174664][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.182782][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.235680][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2271'.
[  219.268338][T13350] xfrm2: entered promiscuous mode
[  219.269994][T13350] xfrm2: entered allmulticast mode
[  219.339292][ T8042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.345309][ T8042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.405273][ T8042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.410118][ T8042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.431228][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2271'.
[  219.566444][T13372] netlink: 'syz.0.2226': attribute type 18 has an invalid length.
[  219.571605][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'.
[  219.585622][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.585925][T13372] netlink: 'syz.0.2226': attribute type 18 has an invalid length.
[  219.589007][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.597305][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.598288][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'.
[  219.618203][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.636290][ T8541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.642763][ T8541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.645212][T13374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.748767][T13382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2279'.
[  219.764534][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'.
[  219.767578][T13382] hsr_slave_0: left promiscuous mode
[  219.770866][T13382] hsr_slave_1: left promiscuous mode
[  219.920565][ T5816] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  220.081423][ T5816] usb 10-1: Using ep0 maxpacket: 16
[  220.085467][ T5816] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.090262][ T5816] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.094649][ T5816] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  220.098965][ T5816] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  220.102123][ T5816] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.106691][ T5816] usb 10-1: config 0 descriptor??
[  220.236822][T13403] netlink: 'syz.6.2286': attribute type 18 has an invalid length.
[  220.239873][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2286'.
[  220.244727][T13403] netlink: 'syz.6.2286': attribute type 18 has an invalid length.
[  220.247277][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2286'.
[  220.331696][T13406] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472)
[  220.336232][T13406] SELinux:  invalid class
[  220.342177][T13406] SELinux: failed to load policy
[  220.380796][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'.
[  220.400569][   T64] Bluetooth: hci4: command tx timeout
[  220.581430][ T5816] usbhid 10-1:0.0: can't add hid device: -71
[  220.586365][ T5816] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  220.593296][ T5816] usb 10-1: USB disconnect, device number 23
[  220.970785][T13419] FAULT_INJECTION: forcing a failure.
[  220.970785][T13419] name failslab, interval 1, probability 0, space 0, times 0
[  220.974908][T13419] CPU: 0 UID: 0 PID: 13419 Comm: syz.0.2291 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  220.974936][T13419] Tainted: [L]=SOFTLOCKUP
[  220.974943][T13419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  220.974951][T13419] Call Trace:
[  220.974956][T13419]  <TASK>
[  220.974961][T13419]  dump_stack_lvl+0x100/0x190
[  220.974981][T13419]  should_fail_ex.cold+0x5/0xa
[  220.974996][T13419]  should_failslab+0xc2/0x120
[  220.975026][T13419]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  220.975043][T13419]  ? sidtab_sid2str_get+0x17a/0x670
[  220.975067][T13419]  kmemdup_noprof+0x29/0x60
[  220.975082][T13419]  sidtab_sid2str_get+0x17a/0x670
[  220.975100][T13419]  security_sid_to_context_core+0x35a/0x6d0
[  220.975127][T13419]  avc_audit_post_callback+0x109/0x910
[  220.975143][T13419]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  220.975155][T13419]  ? skb_put+0x138/0x180
[  220.975174][T13419]  ? audit_log_n_string+0x256/0x550
[  220.975197][T13419]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  220.975209][T13419]  common_lsm_audit+0x23f/0x2b0
[  220.975229][T13419]  ? __pfx_common_lsm_audit+0x10/0x10
[  220.975248][T13419]  ? lockdep_hardirqs_on+0x78/0x100
[  220.975264][T13419]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  220.975278][T13419]  slow_avc_audit+0x186/0x210
[  220.975292][T13419]  ? __pfx_slow_avc_audit+0x10/0x10
[  220.975306][T13419]  ? avc_denied+0x14a/0x190
[  220.975320][T13419]  ? avc_has_perm_noaudit+0x2fc/0x3b0
[  220.975336][T13419]  avc_has_perm+0x1a6/0x1e0
[  220.975350][T13419]  ? __pfx_avc_has_perm+0x10/0x10
[  220.975362][T13419]  ? bpf_ksym_find+0x128/0x1c0
[  220.975380][T13419]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  220.975394][T13419]  ? is_bpf_text_address+0x94/0x1a0
[  220.975410][T13419]  ? kernel_text_address+0x8d/0x100
[  220.975425][T13419]  sock_has_perm+0x253/0x2f0
[  220.975442][T13419]  ? __pfx_sock_has_perm+0x10/0x10
[  220.975466][T13419]  selinux_socket_sendmsg+0x8f/0x2f0
[  220.975484][T13419]  security_socket_sendmsg+0xfb/0x230
[  220.975509][T13419]  ____sys_sendmsg+0x89e/0xbe0
[  220.975529][T13419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  220.975548][T13419]  ? run_posix_cpu_timers+0x16f/0x820
[  220.975568][T13419]  ___sys_sendmsg+0x190/0x1e0
[  220.975589][T13419]  ? __pfx____sys_sendmsg+0x10/0x10
[  220.975607][T13419]  ? __lock_acquire+0x49f/0x1a40
[  220.975638][T13419]  __sys_sendmsg+0x160/0x210
[  220.975654][T13419]  ? __pfx___sys_sendmsg+0x10/0x10
[  220.975667][T13419]  ? __irq_exit_rcu+0x162/0x210
[  220.975691][T13419]  do_syscall_64+0x115/0x870
[  220.975703][T13419]  ? clear_bhb_loop+0x40/0x90
[  220.975717][T13419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.975740][T13419] RIP: 0033:0x7fed86f9df99
[  220.975750][T13419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.975761][T13419] RSP: 002b:00007fed87f22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.975773][T13419] RAX: ffffffffffffffda RBX: 00007fed87225fa0 RCX: 00007fed86f9df99
[  220.975781][T13419] RDX: 0000000000004094 RSI: 0000200000000040 RDI: 0000000000000004
[  220.975787][T13419] RBP: 00007fed87f22090 R08: 0000000000000000 R09: 0000000000000000
[  220.975794][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.975801][T13419] R13: 00007fed87226038 R14: 00007fed87225fa0 R15: 00007ffc8d9486a8
[  220.975816][T13419]  </TASK>
[  221.229885][T13423] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13423 comm=syz.0.2293
[  221.234629][T13423] netlink: 'syz.0.2293': attribute type 1 has an invalid length.
[  221.237179][T13423] netlink: 'syz.0.2293': attribute type 7 has an invalid length.
[  221.334557][T13433] netlink: 'syz.4.2297': attribute type 18 has an invalid length.
[  221.337406][T13433] netlink: 'syz.4.2297': attribute type 18 has an invalid length.
[  221.380862][T13437] xt_ipcomp: unknown flags 1D
[  221.387747][T13441] FAULT_INJECTION: forcing a failure.
[  221.387747][T13441] name failslab, interval 1, probability 0, space 0, times 0
[  221.394358][T13441] CPU: 0 UID: 0 PID: 13441 Comm: syz.6.2301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  221.394376][T13441] Tainted: [L]=SOFTLOCKUP
[  221.394380][T13441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  221.394387][T13441] Call Trace:
[  221.394391][T13441]  <TASK>
[  221.394396][T13441]  dump_stack_lvl+0x100/0x190
[  221.394416][T13441]  should_fail_ex.cold+0x5/0xa
[  221.394432][T13441]  should_failslab+0xc2/0x120
[  221.394449][T13441]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  221.394465][T13441]  ? sidtab_sid2str_get+0x17a/0x670
[  221.394481][T13441]  kmemdup_noprof+0x29/0x60
[  221.394494][T13441]  sidtab_sid2str_get+0x17a/0x670
[  221.394508][T13441]  security_sid_to_context_core+0x35a/0x6d0
[  221.394529][T13441]  avc_audit_post_callback+0x109/0x910
[  221.394545][T13441]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  221.394557][T13441]  ? skb_put+0x138/0x180
[  221.394576][T13441]  ? audit_log_n_string+0x256/0x550
[  221.394593][T13441]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  221.394606][T13441]  common_lsm_audit+0x23f/0x2b0
[  221.394625][T13441]  ? __pfx_common_lsm_audit+0x10/0x10
[  221.394643][T13441]  ? avc_denied+0x14a/0x190
[  221.394659][T13441]  slow_avc_audit+0x186/0x210
[  221.394672][T13441]  ? __pfx_slow_avc_audit+0x10/0x10
[  221.394686][T13441]  ? find_held_lock+0x2b/0x80
[  221.394705][T13441]  ? avc_has_perm_noaudit+0x2b3/0x3b0
[  221.394724][T13441]  avc_has_perm+0x1a6/0x1e0
[  221.394738][T13441]  ? __pfx_avc_has_perm+0x10/0x10
[  221.394750][T13441]  ? bpf_ksym_find+0x128/0x1c0
[  221.394773][T13441]  sock_has_perm+0x253/0x2f0
[  221.394789][T13441]  ? __pfx_sock_has_perm+0x10/0x10
[  221.394814][T13441]  selinux_socket_sendmsg+0x8f/0x2f0
[  221.394836][T13441]  security_socket_sendmsg+0xfb/0x230
[  221.394854][T13441]  ____sys_sendmsg+0x89e/0xbe0
[  221.394874][T13441]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.394898][T13441]  ___sys_sendmsg+0x190/0x1e0
[  221.394918][T13441]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.394935][T13441]  ? __lock_acquire+0x49f/0x1a40
[  221.394949][T13441]  ? get_pid_task+0x106/0x250
[  221.394983][T13441]  __sys_sendmsg+0x160/0x210
[  221.394998][T13441]  ? __pfx___sys_sendmsg+0x10/0x10
[  221.395021][T13441]  do_syscall_64+0x115/0x870
[  221.395035][T13441]  ? clear_bhb_loop+0x40/0x90
[  221.395049][T13441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.395062][T13441] RIP: 0033:0x7f3d5cb9df99
[  221.395072][T13441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.395088][T13441] RSP: 002b:00007f3d5da59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.395100][T13441] RAX: ffffffffffffffda RBX: 00007f3d5ce25fa0 RCX: 00007f3d5cb9df99
[  221.395108][T13441] RDX: 0000000000004094 RSI: 0000200000000040 RDI: 0000000000000004
[  221.395115][T13441] RBP: 00007f3d5da59090 R08: 0000000000000000 R09: 0000000000000000
[  221.395121][T13441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.395128][T13441] R13: 00007f3d5ce26038 R14: 00007f3d5ce25fa0 R15: 00007fff3e4984f8
[  221.395142][T13441]  </TASK>
[  221.520569][T13448] team_slave_1: entered promiscuous mode
[  221.524595][T13448] team_slave_1: entered allmulticast mode
[  221.531580][T13448] team0: Port device team_slave_1 removed
[  221.533785][T13448] bridge0: port 3(team_slave_1) entered blocking state
[  221.536066][T13448] bridge0: port 3(team_slave_1) entered disabled state
[  221.600981][T13455] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.623974][T13455] A link change request failed with some changes committed already. Interface vlaj0 may have been left with an inconsistent configuration, please check.
[  221.629580][ T8041] bridge0: port 3(team_slave_1) entered blocking state
[  221.631846][ T8041] bridge0: port 3(team_slave_1) entered forwarding state
[  221.635384][T13457] cgroup: Unknown subsys name 'cpuset'
[  221.798495][T13476] FAULT_INJECTION: forcing a failure.
[  221.798495][T13476] name failslab, interval 1, probability 0, space 0, times 0
[  221.821459][T13476] CPU: 3 UID: 0 PID: 13476 Comm: syz.4.2312 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  221.821479][T13476] Tainted: [L]=SOFTLOCKUP
[  221.821483][T13476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  221.821490][T13476] Call Trace:
[  221.821494][T13476]  <TASK>
[  221.821499][T13476]  dump_stack_lvl+0x100/0x190
[  221.821519][T13476]  should_fail_ex.cold+0x5/0xa
[  221.821535][T13476]  should_failslab+0xc2/0x120
[  221.821552][T13476]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  221.821566][T13476]  ? __alloc_skb+0x5b7/0x710
[  221.821580][T13476]  ? __alloc_skb+0x140/0x710
[  221.821595][T13476]  __alloc_skb+0x140/0x710
[  221.821607][T13476]  ? __alloc_skb+0x5b7/0x710
[  221.821620][T13476]  ? __pfx___alloc_skb+0x10/0x10
[  221.821633][T13476]  ? look_up_lock_class+0x55/0x120
[  221.821650][T13476]  alloc_skb_with_frags+0xdd/0x760
[  221.821670][T13476]  sock_alloc_send_pskb+0x801/0x980
[  221.821688][T13476]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  221.821701][T13476]  ? raw_sendmsg+0x14c/0x880
[  221.821725][T13476]  ? find_held_lock+0x2b/0x80
[  221.821743][T13476]  ? raw_sendmsg+0x14c/0x880
[  221.821755][T13476]  ? raw_sendmsg+0x14c/0x880
[  221.821768][T13476]  ? __local_bh_enable_ip+0x9e/0x120
[  221.821786][T13476]  raw_sendmsg+0x3d7/0x880
[  221.821822][T13476]  ? __pfx_raw_sendmsg+0x10/0x10
[  221.821835][T13476]  ? selinux_socket_sendmsg+0x198/0x2f0
[  221.821856][T13476]  ____sys_sendmsg+0xa4d/0xbe0
[  221.821874][T13476]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  221.821887][T13476]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.821910][T13476]  ___sys_sendmsg+0x190/0x1e0
[  221.821930][T13476]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.821947][T13476]  ? __lock_acquire+0x49f/0x1a40
[  221.821961][T13476]  ? get_pid_task+0x106/0x250
[  221.821994][T13476]  __sys_sendmsg+0x160/0x210
[  221.822009][T13476]  ? __pfx___sys_sendmsg+0x10/0x10
[  221.822030][T13476]  do_syscall_64+0x115/0x870
[  221.822042][T13476]  ? clear_bhb_loop+0x40/0x90
[  221.822056][T13476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.822068][T13476] RIP: 0033:0x7ff9bdb9df99
[  221.822079][T13476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.822089][T13476] RSP: 002b:00007ff9be987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.822101][T13476] RAX: ffffffffffffffda RBX: 00007ff9bde25fa0 RCX: 00007ff9bdb9df99
[  221.822108][T13476] RDX: 0000000000004094 RSI: 0000200000000040 RDI: 0000000000000004
[  221.822115][T13476] RBP: 00007ff9be987090 R08: 0000000000000000 R09: 0000000000000000
[  221.822121][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.822128][T13476] R13: 00007ff9bde26038 R14: 00007ff9bde25fa0 R15: 00007ffd061cd8b8
[  221.822141][T13476]  </TASK>
[  221.831925][T13478] /dev/sg0: Can't lookup blockdev
[  221.863223][T13480] gadgetfs: bound to dummy_udc driver
[  222.014943][T13489] vivid-004: disconnect
[  222.018494][T13489] vivid-004: reconnect
[  222.158066][   T42] kauditd_printk_skb: 1419 callbacks suppressed
[  222.158077][   T42] audit: type=1400 audit(524766.080:28493): avc:  denied  { read write } for  pid=12074 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  222.172470][   T42] audit: type=1400 audit(524766.080:28494): avc:  denied  { open } for  pid=12074 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  222.185776][   T42] audit: type=1400 audit(524766.080:28495): avc:  denied  { create } for  pid=13500 comm="syz.4.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  222.193474][   T42] audit: type=1400 audit(524766.080:28496): avc:  denied  { ioctl } for  pid=12074 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  222.210199][   T42] audit: type=1400 audit(524766.090:28497): avc:  denied  { recv } for  pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  222.221135][   T42] audit: type=1400 audit(524766.090:28498): avc:  denied  { recv } for  pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  222.230680][   T42] audit: type=1400 audit(524766.090:28499): avc:  denied  { write } for  pid=13500 comm="syz.4.2321" path="socket:[64027]" dev="sockfs" ino=64027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  222.239188][   T42] audit: type=1400 audit(524766.090:28500): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  222.247597][   T42] audit: type=1400 audit(524766.100:28501): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  222.248726][T13507] 9pnet_virtio: no channels available for device syz
[  222.256845][   T42] audit: type=1400 audit(524766.100:28502): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  222.277090][T13507] netlink: del zone limit has 8 unknown bytes
[  222.289991][T13507] : entered promiscuous mode
[  222.305090][T13509] FAULT_INJECTION: forcing a failure.
[  222.305090][T13509] name failslab, interval 1, probability 0, space 0, times 0
[  222.308812][T13509] CPU: 0 UID: 0 PID: 13509 Comm: syz.4.2324 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  222.308829][T13509] Tainted: [L]=SOFTLOCKUP
[  222.308834][T13509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  222.308841][T13509] Call Trace:
[  222.308845][T13509]  <TASK>
[  222.308850][T13509]  dump_stack_lvl+0x100/0x190
[  222.308869][T13509]  should_fail_ex.cold+0x5/0xa
[  222.308884][T13509]  should_failslab+0xc2/0x120
[  222.308901][T13509]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  222.308916][T13509]  ? __alloc_skb+0x5b7/0x710
[  222.308929][T13509]  ? __alloc_skb+0x140/0x710
[  222.308945][T13509]  __alloc_skb+0x140/0x710
[  222.308957][T13509]  ? __alloc_skb+0x5b7/0x710
[  222.308969][T13509]  ? __pfx___alloc_skb+0x10/0x10
[  222.308983][T13509]  ? look_up_lock_class+0x55/0x120
[  222.309004][T13509]  alloc_skb_with_frags+0xdd/0x760
[  222.309024][T13509]  sock_alloc_send_pskb+0x801/0x980
[  222.309042][T13509]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  222.309055][T13509]  ? raw_sendmsg+0x14c/0x880
[  222.309068][T13509]  ? find_held_lock+0x2b/0x80
[  222.309087][T13509]  ? raw_sendmsg+0x14c/0x880
[  222.309098][T13509]  ? raw_sendmsg+0x14c/0x880
[  222.309111][T13509]  ? __local_bh_enable_ip+0x9e/0x120
[  222.309129][T13509]  raw_sendmsg+0x3d7/0x880
[  222.309142][T13509]  ? __pfx_raw_sendmsg+0x10/0x10
[  222.309154][T13509]  ? selinux_socket_sendmsg+0x198/0x2f0
[  222.309176][T13509]  ____sys_sendmsg+0xa4d/0xbe0
[  222.309195][T13509]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  222.309208][T13509]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.309232][T13509]  ___sys_sendmsg+0x190/0x1e0
[  222.309251][T13509]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.309269][T13509]  ? __lock_acquire+0x49f/0x1a40
[  222.309283][T13509]  ? get_pid_task+0x106/0x250
[  222.309315][T13509]  __sys_sendmsg+0x160/0x210
[  222.309330][T13509]  ? __pfx___sys_sendmsg+0x10/0x10
[  222.309351][T13509]  do_syscall_64+0x115/0x870
[  222.309364][T13509]  ? clear_bhb_loop+0x40/0x90
[  222.309378][T13509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.309390][T13509] RIP: 0033:0x7ff9bdb9df99
[  222.309400][T13509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.309411][T13509] RSP: 002b:00007ff9be987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.309423][T13509] RAX: ffffffffffffffda RBX: 00007ff9bde25fa0 RCX: 00007ff9bdb9df99
[  222.309431][T13509] RDX: 0000000000004094 RSI: 0000200000000040 RDI: 0000000000000004
[  222.309437][T13509] RBP: 00007ff9be987090 R08: 0000000000000000 R09: 0000000000000000
[  222.309444][T13509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.309450][T13509] R13: 00007ff9bde26038 R14: 00007ff9bde25fa0 R15: 00007ffd061cd8b8
[  222.309464][T13509]  </TASK>
[  222.465251][ T2327] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  222.480268][   T64] Bluetooth: hci4: command tx timeout
[  222.489520][ T2327] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  222.514351][T13522] xt_time: unknown flags 0x78
[  222.573202][T13527] bond0: option ad_select: unable to set because the bond device is up
[  222.853309][ T5813] IPVS: starting estimator thread 0...
[  222.960233][T13553] IPVS: using max 44 ests per chain, 105600 per kthread
[  223.338421][T13523] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  223.345168][T13523] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  223.349145][T13523] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  223.370900][T13523] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  223.373325][T13523] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  223.383607][T13523] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  223.387603][T13523] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  223.389873][T13523] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  223.435115][T13523] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  223.514935][T13570] FAULT_INJECTION: forcing a failure.
[  223.514935][T13570] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.524805][T13570] CPU: 3 UID: 0 PID: 13570 Comm: syz.5.2345 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  223.524833][T13570] Tainted: [L]=SOFTLOCKUP
[  223.524840][T13570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  223.524858][T13570] Call Trace:
[  223.524865][T13570]  <TASK>
[  223.524873][T13570]  dump_stack_lvl+0x100/0x190
[  223.524958][T13570]  should_fail_ex.cold+0x5/0xa
[  223.525010][T13570]  _copy_from_iter+0x1f4/0x1690
[  223.525076][T13570]  ? __pfx__copy_from_iter+0x10/0x10
[  223.525101][T13570]  ? raw_sendmsg+0x14c/0x880
[  223.525169][T13570]  ? find_held_lock+0x2b/0x80
[  223.525210][T13570]  ? raw_sendmsg+0x14c/0x880
[  223.525229][T13570]  ? raw_sendmsg+0x14c/0x880
[  223.525247][T13570]  ? __local_bh_enable_ip+0x9e/0x120
[  223.525269][T13570]  raw_sendmsg+0x528/0x880
[  223.525282][T13570]  ? __pfx_raw_sendmsg+0x10/0x10
[  223.525295][T13570]  ? selinux_socket_sendmsg+0x198/0x2f0
[  223.525325][T13570]  ____sys_sendmsg+0xa4d/0xbe0
[  223.525377][T13570]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  223.525390][T13570]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.525414][T13570]  ___sys_sendmsg+0x190/0x1e0
[  223.525434][T13570]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.525451][T13570]  ? __lock_acquire+0x49f/0x1a40
[  223.525465][T13570]  ? get_pid_task+0x106/0x250
[  223.525498][T13570]  __sys_sendmsg+0x160/0x210
[  223.525513][T13570]  ? __pfx___sys_sendmsg+0x10/0x10
[  223.525534][T13570]  do_syscall_64+0x115/0x870
[  223.525559][T13570]  ? clear_bhb_loop+0x40/0x90
[  223.525573][T13570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.525585][T13570] RIP: 0033:0x7f0ae299df99
[  223.525596][T13570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.525606][T13570] RSP: 002b:00007f0ae3952028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.525618][T13570] RAX: ffffffffffffffda RBX: 00007f0ae2c25fa0 RCX: 00007f0ae299df99
[  223.525625][T13570] RDX: 0000000000004094 RSI: 0000200000000040 RDI: 0000000000000004
[  223.525632][T13570] RBP: 00007f0ae3952090 R08: 0000000000000000 R09: 0000000000000000
[  223.525638][T13570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  223.525645][T13570] R13: 00007f0ae2c26038 R14: 00007f0ae2c25fa0 R15: 00007ffeffa24f58
[  223.525658][T13570]  </TASK>
[  223.648747][T13574] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  223.780586][T13587] validate_nla: 4 callbacks suppressed
[  223.780598][T13587] netlink: 'syz.6.2351': attribute type 18 has an invalid length.
[  223.788179][T13587] netlink: 'syz.6.2351': attribute type 18 has an invalid length.
[  223.949315][T13606] FAULT_INJECTION: forcing a failure.
[  223.949315][T13606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.957088][T13606] CPU: 3 UID: 0 PID: 13606 Comm: syz.6.2357 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  223.957107][T13606] Tainted: [L]=SOFTLOCKUP
[  223.957111][T13606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  223.957118][T13606] Call Trace:
[  223.957122][T13606]  <TASK>
[  223.957127][T13606]  dump_stack_lvl+0x100/0x190
[  223.957149][T13606]  should_fail_ex.cold+0x5/0xa
[  223.957165][T13606]  _copy_to_user+0x32/0xd0
[  223.957194][T13606]  simple_read_from_buffer+0xcb/0x170
[  223.957228][T13606]  proc_fail_nth_read+0x1af/0x230
[  223.957267][T13606]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  223.957296][T13606]  ? rw_verify_area+0xce/0x6d0
[  223.957323][T13606]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  223.957351][T13606]  vfs_read+0x1e4/0xb40
[  223.957381][T13606]  ? __pfx_vfs_read+0x10/0x10
[  223.957408][T13606]  ? __fget_files+0x215/0x3d0
[  223.957434][T13606]  ? __fget_files+0x21f/0x3d0
[  223.957461][T13606]  ksys_read+0x12a/0x250
[  223.957489][T13606]  ? __pfx_ksys_read+0x10/0x10
[  223.957520][T13606]  do_syscall_64+0x115/0x870
[  223.957544][T13606]  ? clear_bhb_loop+0x40/0x90
[  223.957567][T13606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.957586][T13606] RIP: 0033:0x7f3d5cb5e7ce
[  223.957603][T13606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  223.957621][T13606] RSP: 002b:00007f3d5da58fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  223.957645][T13606] RAX: ffffffffffffffda RBX: 00007f3d5da596c0 RCX: 00007f3d5cb5e7ce
[  223.957654][T13606] RDX: 000000000000000f RSI: 00007f3d5da590a0 RDI: 0000000000000003
[  223.957667][T13606] RBP: 00007f3d5da59090 R08: 0000000000000000 R09: 0000000000000000
[  223.957680][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  223.957691][T13606] R13: 00007f3d5ce26038 R14: 00007f3d5ce25fa0 R15: 00007fff3e4984f8
[  223.957716][T13606]  </TASK>
[  224.090020][ T2327] usb 10-1: new low-speed USB device number 24 using dummy_hcd
[  224.243009][ T2327] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  224.247461][ T2327] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0
[  224.252549][ T2327] usb 10-1: too many endpoints for config 1 interface 2 altsetting 177: 229, using maximum allowed: 30
[  224.256751][ T2327] usb 10-1: config 1 interface 2 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 229
[  224.262448][ T2327] usb 10-1: config 1 interface 2 has no altsetting 0
[  224.563886][T13645] netlink: 'syz.6.2364': attribute type 18 has an invalid length.
[  224.566545][T13645] __nla_validate_parse: 26 callbacks suppressed
[  224.566558][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2364'.
[  224.572154][T13645] netlink: 'syz.6.2364': attribute type 18 has an invalid length.
[  224.574765][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2364'.
[  224.632720][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  224.753337][T13654] hub 8-0:1.0: USB hub found
[  224.758915][T13654] hub 8-0:1.0: 1 port detected
[  224.768949][ T5813] IPVS: starting estimator thread 0...
[  224.859978][T13658] IPVS: using max 43 ests per chain, 103200 per kthread
[  224.950524][ T5843] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  225.001318][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.005365][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.099863][ T5843] usb 5-1: Using ep0 maxpacket: 8
[  225.104056][ T5843] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  225.106672][ T5843] usb 5-1: config 0 has no interface number 0
[  225.108662][ T5843] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  225.112128][ T5843] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  225.115737][ T5843] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  225.119198][ T5843] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  225.123288][ T5843] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  225.126140][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.131936][ T5843] usb 5-1: config 0 descriptor??
[  225.142924][ T5843] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  225.215244][T13662] erspan0: entered promiscuous mode
[  225.221130][T13662] erspan0: left promiscuous mode
[  225.227274][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.231327][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.239992][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.243870][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.352730][ T5823] usb 5-1: USB disconnect, device number 41
[  225.358993][ T5823] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  225.430011][   T64] Bluetooth: hci4: command 0x0c1a tx timeout
[  225.430051][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[  225.670035][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout
[  225.670143][T13534] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  225.740994][T13669] 9pnet: Found fid 0 not clunked
[  225.896839][T13674] netlink: 'syz.6.2373': attribute type 18 has an invalid length.
[  225.900225][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2373'.
[  225.903907][T13674] netlink: 'syz.6.2373': attribute type 18 has an invalid length.
[  225.906928][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2373'.
[  225.980061][T13681] input: syz0 as /devices/virtual/input/input29
[  226.046928][T13685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13685 comm=syz.4.2378
[  226.349749][ T5851] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  226.509760][ T5851] usb 5-1: Using ep0 maxpacket: 32
[  226.514297][ T5851] usb 5-1: config 0 has no interfaces?
[  226.516161][ T5851] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  226.529655][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.535441][ T5851] usb 5-1: config 0 descriptor??
[  226.709736][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout
[  226.750639][ T5851] usb 5-1: USB disconnect, device number 42
[  226.780581][ T2327] usb 10-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice= 0.40
[  226.787271][ T2327] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.798591][ T2327] usb 10-1: can't set config #1, error -71
[  226.808577][ T2327] usb 10-1: USB disconnect, device number 24
[  226.982986][T13714] netlink: 'syz.5.2383': attribute type 18 has an invalid length.
[  226.987848][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2383'.
[  226.991533][T13714] netlink: 'syz.5.2383': attribute type 18 has an invalid length.
[  226.996011][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2383'.
[  227.162194][   T42] kauditd_printk_skb: 1088 callbacks suppressed
[  227.162214][   T42] audit: type=1400 audit(524771.090:29591): avc:  denied  { search } for  pid=13724 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  227.189796][   T42] audit: type=1400 audit(524771.090:29592): avc:  denied  { search } for  pid=13724 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  227.213175][   T42] audit: type=1400 audit(524771.090:29593): avc:  denied  { search } for  pid=13724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  227.233152][   T42] audit: type=1400 audit(524771.090:29594): avc:  denied  { getattr } for  pid=13724 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  227.252664][   T42] audit: type=1400 audit(524771.090:29595): avc:  denied  { sys_admin } for  pid=13724 comm="dhcpcd-run-hook" capability=21  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  227.266796][   T42] audit: type=1400 audit(524771.090:29596): avc:  denied  { write } for  pid=13724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  227.287069][   T42] audit: type=1400 audit(524771.090:29597): avc:  denied  { add_name } for  pid=13724 comm="dhcpcd-run-hook" name="resolv.conf.sl0.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  227.296273][   T42] audit: type=1400 audit(524771.090:29598): avc:  denied  { create } for  pid=13724 comm="dhcpcd-run-hook" name="resolv.conf.sl0.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  227.313599][   T42] audit: type=1400 audit(524771.090:29599): avc:  denied  { write open } for  pid=13724 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.dhcp" dev="tmpfs" ino=11768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  227.331993][   T42] audit: type=1400 audit(524771.090:29600): avc:  denied  { append } for  pid=13724 comm="dhcpcd-run-hook" name="resolv.conf.sl0.dhcp" dev="tmpfs" ino=11768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  227.376276][T13737] netlink: 'syz.5.2386': attribute type 4 has an invalid length.
[  227.378794][T13737] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2386'.
[  227.509583][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[  227.519543][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout
[  227.663169][T13755] netlink: 'syz.0.2392': attribute type 18 has an invalid length.
[  227.665674][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'.
[  227.668549][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'.
[  227.732920][T13761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.736113][T13761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.818804][T13765] trusted_key: encrypted_key: insufficient parameters specified
[  227.883384][T13769] loop9: detected capacity change from 0 to 255852544
[  227.940947][T13769] loop9: detected capacity change from 255852544 to 524287999
[  228.361584][T13784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2402'.
[  228.789431][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout
[  229.256459][T13854] 9pnet_virtio: no channels available for device syz
[  229.327213][T13854] syzkaller0: entered promiscuous mode
[  229.329849][T13854] syzkaller0: entered allmulticast mode
[  229.593497][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout
[  229.593583][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[  231.214215][T13861] __nla_validate_parse: 8 callbacks suppressed
[  231.214228][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'.
[  231.220897][T13861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2422'.
[  231.224222][T13868] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  231.228651][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'.
[  231.232431][T13861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2422'.
[  231.519982][T13897] NILFS (nullb0): couldn't find nilfs on the device
[  231.574970][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'.
[  231.579062][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2433'.
[  231.587236][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'.
[  231.592996][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2433'.
[  231.613202][T13908] Trying to write to read-only block-device nullb0
[  231.655493][T13908] syzkaller1: entered promiscuous mode
[  231.657417][T13908] syzkaller1: entered allmulticast mode
[  232.550589][   T42] kauditd_printk_skb: 1480 callbacks suppressed
[  232.550607][   T42] audit: type=1400 audit(524776.481:31081): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  232.560555][   T42] audit: type=1400 audit(524776.481:31082): avc:  denied  { sendto } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  232.875734][ T8549] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  233.190162][   T42] audit: type=1400 audit(524777.121:31083): avc:  denied  { egress } for  pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  233.197354][   T42] audit: type=1400 audit(524777.121:31084): avc:  denied  { sendto } for  pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  234.981651][   T42] audit: type=1400 audit(524778.911:31085): avc:  denied  { recv } for  pid=0 comm="swapper/2" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  234.990665][   T42] audit: type=1400 audit(524778.911:31086): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  235.029655][   T42] audit: type=1400 audit(524778.961:31087): avc:  denied  { recv } for  pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.457104][   T42] audit: type=1400 audit(524790.383:31088): avc:  denied  { recv } for  pid=0 comm="swapper/2" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.465963][   T42] audit: type=1400 audit(524790.393:31089): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.484382][   T42] audit: type=1400 audit(524790.393:31090): avc:  denied  { recv } for  pid=42 comm="kauditd" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.496491][   T42] audit: type=1400 audit(524790.393:31091): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.512082][   T42] audit: type=1400 audit(524790.403:31092): avc:  denied  { recv } for  pid=5718 comm="syz-executor" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.519864][   T42] audit: type=1400 audit(524790.403:31093): avc:  denied  { recv } for  pid=8541 comm="kworker/u33:50" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.527038][   T42] audit: type=1400 audit(524790.413:31094): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.536854][   T42] audit: type=1400 audit(524790.413:31095): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.545140][   T42] audit: type=1400 audit(524790.413:31096): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  246.552945][   T42] audit: type=1400 audit(524790.413:31097): avc:  denied  { create } for  pid=13931 comm="syz.0.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  246.657823][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2444'.
[  246.660878][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2444'.
[  246.669927][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2444'.
[  246.675349][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2444'.
[  246.759975][T13966] netlink: 'syz.4.2451': attribute type 11 has an invalid length.
[  246.795031][T13963] binder: BINDER_SET_CONTEXT_MGR already set
[  246.802170][T13966] 8021q: adding VLAN 0 to HW filter on device eth0
[  246.803193][T13963] binder: 13961:13963 ioctl 4018620d 200000000100 returned -16
[  246.805398][T13966] 8021q: adding VLAN 0 to HW filter on device eth1
[  246.826992][T13966] 8021q: adding VLAN 0 to HW filter on device eth2
[  246.840719][T13966] 8021q: adding VLAN 0 to HW filter on device eth3
[  246.843989][T13966] 8021q: adding VLAN 0 to HW filter on device bond1
[  246.878929][ T1358] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  246.898846][T13966] 8021q: adding VLAN 0 to HW filter on device bond3
[  246.902596][T13966] 8021q: adding VLAN 0 to HW filter on device bond5
[  246.936583][T13966] 8021q: adding VLAN 0 to HW filter on device bond6
[  246.946801][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.949145][ T8025] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.168001][ T1358] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  247.500715][T13987] vcan0: tx address claim with different name
[  247.572601][T13992] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  247.644338][T13995] tipc: Trying to set illegal importance in message
[  247.661133][T13995] syzkaller0: entered promiscuous mode
[  247.662991][T13995] syzkaller0: entered allmulticast mode
[  247.735841][T14005] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2460'.
[  247.852042][T14011] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2463'.
[  247.998835][T14021] syzkaller0: entered promiscuous mode
[  248.000670][T14021] syzkaller0: entered allmulticast mode
[  248.009531][T14024] xfrm1: entered allmulticast mode
[  248.015192][T14024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=14024 comm=syz.0.2474
[  248.302999][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2469'.
[  248.383924][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.390907][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.208147][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2477'.
[  250.211046][T14068] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2477'.
[  250.214586][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2477'.
[  250.478261][    C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  250.717757][T14104] syzkaller0: entered allmulticast mode
[  250.763492][T14123] openvswitch: netlink: Key type 30 is not supported
[  250.778802][T14125] tmpfs: Unknown parameter 'nïs'
[  251.036722][ T1358] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  251.186991][ T1358] usb 5-1: Using ep0 maxpacket: 8
[  251.192533][ T1358] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  251.195273][ T1358] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  251.200654][ T1358] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  251.205366][ T1358] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  251.210757][ T1358] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  251.218483][ T1358] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  251.221412][ T1358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.456962][   T42] kauditd_printk_skb: 1375 callbacks suppressed
[  251.456986][   T42] audit: type=1400 audit(524795.393:32473): avc:  denied  { ioctl } for  pid=14126 comm="syz.0.2492" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  251.457057][ T1358] usb 5-1: usb_control_msg returned -32
[  251.470213][   T42] audit: type=1400 audit(524795.403:32474): avc:  denied  { recv } for  pid=5718 comm="syz-executor" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  251.476796][ T1358] usbtmc 5-1:16.0: can't read capabilities
[  251.483249][   T42] audit: type=1400 audit(524795.403:32475): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  251.498710][   T42] audit: type=1400 audit(524795.413:32476): avc:  denied  { prog_load } for  pid=14126 comm="syz.0.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  251.508303][   T42] audit: type=1400 audit(524795.413:32477): avc:  denied  { bpf } for  pid=14126 comm="syz.0.2492" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  251.520441][   T42] audit: type=1400 audit(524795.413:32478): avc:  denied  { prog_load } for  pid=14126 comm="syz.0.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  251.529700][   T42] audit: type=1400 audit(524795.413:32479): avc:  denied  { perfmon } for  pid=14126 comm="syz.0.2492" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  251.548152][   T42] audit: type=1400 audit(524795.413:32480): avc:  denied  { read write } for  pid=12074 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  251.558760][   T42] audit: type=1400 audit(524795.413:32481): avc:  denied  { bpf } for  pid=14126 comm="syz.0.2492" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  251.565079][   T42] audit: type=1400 audit(524795.413:32482): avc:  denied  { open } for  pid=12074 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  252.002156][T14177] __nla_validate_parse: 7 callbacks suppressed
[  252.002177][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2506'.
[  252.007780][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2506'.
[  252.010675][T14178] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2506'.
[  252.013588][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2506'.
[  252.170764][T14182] kvm: kvm [14181]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xbe702111
[  252.179872][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'.
[  252.182814][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2508'.
[  252.186191][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'.
[  252.190691][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2508'.
[  252.536155][T14212] loop2: detected capacity change from 0 to 3
[  252.543062][T14212] ldm_validate_privheads(): Disk read failed.
[  252.545031][T14212] Dev loop2: unable to read RDB block 3
[  252.550027][T14212]  loop2: unable to read partition table
[  252.551917][T14212] loop2: partition table beyond EOD, truncated
[  252.556073][T14212] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  252.579223][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'.
[  252.596557][T14210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2517'.
[  252.694527][T14218] validate_nla: 3 callbacks suppressed
[  252.694539][T14218] netlink: 'syz.4.2519': attribute type 3 has an invalid length.
[  252.917115][T14232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.921062][T14232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.941267][T14232] netlink: 'syz.4.2524': attribute type 1 has an invalid length.
[  252.963764][T14232] bond8: entered promiscuous mode
[  252.965958][T14232] 8021q: adding VLAN 0 to HW filter on device bond8
[  252.975007][T14232] bond8: entered allmulticast mode
[  252.995408][T14232] bond8: (slave bridge5): making interface the new active one
[  252.998625][T14232] bridge5: entered promiscuous mode
[  253.000377][T14232] bridge5: entered allmulticast mode
[  253.003390][T14232] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  253.179000][  T847] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  253.312011][T14240] netlink: 'syz.6.2527': attribute type 18 has an invalid length.
[  253.315010][T14240] netlink: 'syz.6.2527': attribute type 18 has an invalid length.
[  253.326447][  T847] usb 10-1: Using ep0 maxpacket: 8
[  253.331179][  T847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  253.346417][  T847] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  253.356403][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  253.362218][  T847] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.368130][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  253.376553][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  253.382903][  T847] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  253.396930][  T847] usb 10-1: config 168 interface 0 has no altsetting 0
[  253.400294][  T847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  253.402595][  T847] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  253.412139][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  253.426509][  T847] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.430254][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  253.433582][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  253.447028][  T847] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  253.451394][  T847] usb 10-1: config 168 interface 0 has no altsetting 0
[  253.454883][  T847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  253.466387][  T847] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  253.469765][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  253.473117][  T847] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.486486][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  253.489921][  T847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  253.493320][  T847] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  253.506404][  T847] usb 10-1: config 168 interface 0 has no altsetting 0
[  253.510876][  T847] usb 10-1: string descriptor 0 read error: -22
[  253.512880][  T847] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  253.526360][  T847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.534704][  T847] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  253.605468][   T64] Bluetooth: hci3: Dropping invalid advertising data
[  253.608062][   T64] Bluetooth: hci3: Malformed LE Event: 0x02
[  253.750512][ T1358] usb 10-1: USB disconnect, device number 25
[  253.818463][ T5851] usb 5-1: USB disconnect, device number 43
[  253.991579][T14262] netlink: 'syz.4.2536': attribute type 18 has an invalid length.
[  253.999954][T14262] netlink: 'syz.4.2536': attribute type 18 has an invalid length.
[  254.182203][T14278] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  254.322186][T14291] netlink: 'syz.5.2547': attribute type 18 has an invalid length.
[  254.325265][T14291] netlink: 'syz.5.2547': attribute type 18 has an invalid length.
[  254.671951][T14313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14313 comm=syz.5.2555
[  255.027857][T14355] binder: 14354:14355 ioctl c0306201 200000000640 returned -22
[  255.031792][T14351] binder: BINDER_SET_CONTEXT_MGR already set
[  255.033713][T14351] binder: 14349:14351 ioctl 4018620d 200000000100 returned -16
[  255.279384][T14372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14372 comm=syz.6.2570
[  255.589209][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  255.921874][T14362] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  255.924272][T14362] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  255.927601][T14362] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  256.009439][T14376] trusted_key: encrypted_key: key trusted:syz not found
[  257.196051][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  257.985971][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout
[  257.987960][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout
[  257.988927][T14370] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  257.990153][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[  258.009196][   T42] kauditd_printk_skb: 1042 callbacks suppressed
[  258.009278][   T42] audit: type=1400 audit(524801.934:33525): avc:  denied  { recv } for  pid=5718 comm="syz-executor" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  258.027082][   T42] audit: type=1400 audit(524801.934:33526): avc:  denied  { read write } for  pid=12074 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  258.047295][   T42] audit: type=1400 audit(524801.934:33527): avc:  denied  { read write open } for  pid=12074 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  258.055104][   T42] audit: type=1400 audit(524801.934:33528): avc:  denied  { ioctl } for  pid=12074 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  258.084329][   T42] audit: type=1400 audit(524801.934:33529): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  258.093860][   T42] audit: type=1400 audit(524801.954:33530): avc:  denied  { create } for  pid=14387 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  258.100278][   T42] audit: type=1400 audit(524801.954:33531): avc:  denied  { write } for  pid=14387 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  258.109587][   T42] audit: type=1400 audit(524801.954:33532): avc:  denied  { create } for  pid=14387 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  258.115884][   T42] audit: type=1400 audit(524801.954:33533): avc:  denied  { write } for  pid=14387 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  258.121807][   T42] audit: type=1400 audit(524801.964:33534): avc:  denied  { create } for  pid=14387 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  258.143647][T14394] __nla_validate_parse: 24 callbacks suppressed
[  258.143666][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'.
[  258.144379][T14399] 9pnet_virtio: no channels available for device syz
[  258.147869][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'.
[  258.182423][T14396] 9pnet_virtio: no channels available for device syz
[  258.273135][T14418] tmpfs: Bad value for 'mpol'
[  258.323365][T14418] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  258.370077][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2588'.
[  258.397598][T14428] tipc: Started in network mode
[  258.399747][T14428] tipc: Node identity 06a8d2eb4488, cluster identity 4711
[  258.404544][T14428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.420806][T14427] tipc: Disabling bearer <eth:syzkaller0>
[  258.435422][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'.
[  258.438740][T14432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2592'.
[  258.442593][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'.
[  258.445474][T14432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2592'.
[  258.496774][T14440] xt_CT: No such helper "syz1"
[  258.585327][T14461] i2c i2c-1: dtv_property_process_set: SET cmd 0x00002000 undefined
[  258.726536][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2606'.
[  258.729578][T14478] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2606'.
[  258.733305][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2606'.
[  258.814186][T14486] unsupported nla_type 4111
[  258.816653][T14486] netlink: 'syz.6.2609': attribute type 17 has an invalid length.
[  258.822279][T14486] gretap0: entered promiscuous mode
[  258.825102][T14486] gretap0: left promiscuous mode
[  258.952363][T14496] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  258.958082][T14496] batman_adv: batadv0: Adding interface: gretap1
[  258.960498][T14496] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.970587][T14496] batman_adv: batadv0: Interface activated: gretap1
[  259.187509][T14515] 9pnet_virtio: no channels available for device syz
[  259.246234][T14515] kvm: pic: level sensitive irq not supported
[  259.665500][T14563] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  259.754172][T14576] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  259.830621][T14582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.855444][T14582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.885278][T14585] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  259.900118][T14585] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  260.249442][T14603] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.384032][T14603] bridge_slave_0 (unregistering): left allmulticast mode
[  260.386531][T14603] bridge_slave_0 (unregistering): left promiscuous mode
[  260.392077][T14603] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.420140][T14613] bond9: entered promiscuous mode
[  260.766125][T14642] ieee802154 phy1 wpan1: encryption failed: -22
[  260.868540][T14648] SET target dimension over the limit!
[  261.670415][T14674] ieee802154 phy1 wpan1: encryption failed: -22
[  263.693546][T14635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  263.717959][   T42] kauditd_printk_skb: 1363 callbacks suppressed
[  263.717971][   T42] audit: type=1400 audit(524807.645:34898): avc:  denied  { recv } for  pid=5718 comm="syz-executor" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  263.751763][   T42] audit: type=1400 audit(524807.655:34899): avc:  denied  { recv } for  pid=5717 comm="sshd-session" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  263.761630][   T42] audit: type=1400 audit(524807.655:34900): avc:  denied  { read write } for  pid=11682 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.806710][   T42] audit: type=1400 audit(524807.655:34901): avc:  denied  { open } for  pid=11682 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.836087][   T42] audit: type=1400 audit(524807.655:34902): avc:  denied  { ioctl } for  pid=11682 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.850492][   T42] audit: type=1400 audit(524807.665:34903): avc:  denied  { read write } for  pid=12074 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.882430][   T42] audit: type=1400 audit(524807.665:34904): avc:  denied  { open } for  pid=12074 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.882618][T14695] __nla_validate_parse: 23 callbacks suppressed
[  263.882629][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2681'.
[  263.898510][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2681'.
[  263.906100][T14696] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2680'.
[  263.911376][   T42] audit: type=1400 audit(524807.665:34905): avc:  denied  { ioctl } for  pid=12074 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.949933][   T42] audit: type=1400 audit(524807.695:34906): avc:  denied  { recv } for  pid=14633 comm="syz.4.2663" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  263.960396][   T42] audit: type=1400 audit(524807.695:34907): avc:  denied  { recv } for  pid=14633 comm="syz.4.2663" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  263.987056][T14702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2682'.
[  263.989976][T14702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  263.994064][T14702] IPv6: NLM_F_CREATE should be set when creating new route
[  263.996506][T14706] 9pnet_virtio: no channels available for device syz
[  264.046293][T14710] ieee802154 phy1 wpan1: encryption failed: -22
[  264.099981][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2688'.
[  264.248204][T14719] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2689'.
[  264.337442][ T5843] usb 11-1: USB disconnect, device number 2
[  264.346112][T14731] binder: BINDER_SET_CONTEXT_MGR already set
[  264.348245][T14731] binder: 14729:14731 ioctl 4018620d 200000000080 returned -16
[  264.352889][T14731] binder: 14729:14731 ioctl c018620c 200000000040 returned -22
[  264.532637][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  264.541636][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  264.546395][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  264.549968][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  264.552593][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  265.114801][T14737] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.118122][T14737] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.121178][T14737] bridge_slave_0: entered allmulticast mode
[  265.128330][T14737] bridge_slave_0: entered promiscuous mode
[  265.135042][T14737] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.138127][T14737] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.141142][T14737] bridge_slave_1: entered allmulticast mode
[  265.150134][T14737] bridge_slave_1: entered promiscuous mode
[  265.199059][T14737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.203556][T14737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.222767][T14761] ieee802154 phy1 wpan1: encryption failed: -22
[  265.241662][T14737] team0: Port device team_slave_0 added
[  265.247358][T14737] team0: Port device team_slave_1 added
[  265.264068][T14737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.266822][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.274770][T14737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.279262][T14737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.281454][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.289342][T14737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.320581][T14737] hsr_slave_0: entered promiscuous mode
[  265.322850][T14737] hsr_slave_1: entered promiscuous mode
[  265.328507][T14737] debugfs: 'hsr0' already exists in 'hsr'
[  265.330350][T14737] Cannot create hsr debugfs directory
[  266.592843][T14781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2705'.
[  266.598420][T14782] ieee802154 phy1 wpan1: encryption failed: -22
[  266.625538][   T64] Bluetooth: hci1: command tx timeout
[  266.777923][T14781] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found
[  266.780997][T14784] netlink: 'syz.0.2707': attribute type 16 has an invalid length.
[  266.787280][T14784] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2707'.
[  266.827475][T14788] netlink: 'syz.4.2708': attribute type 1 has an invalid length.
[  266.868951][T14788] 8021q: adding VLAN 0 to HW filter on device bond1
[  266.955258][T14789] bond1: (slave geneve0): making interface the new active one
[  266.958415][T14789] bond1: (slave geneve0): Enslaving as an active interface with an up link
[  266.961381][T12072] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  266.966945][T12072] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  266.981061][T12072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  266.990551][T12072] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20004 - 0
[  266.993374][T12072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  267.065536][T12072] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 20004 - 0
[  267.068346][T12072] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 20004 - 0
[  267.070977][T12072] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 20004 - 0
[  267.074293][T12072] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 20004 - 0
[  267.217212][T14725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  267.232891][T14737] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  267.252787][T14737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  267.258636][T14737] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  267.281852][    C0] sched: DL replenish lagged too much
[  267.300705][T14737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  267.321320][T14737] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  267.333890][T14737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  267.338027][T14737] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  267.349990][T14737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  267.369133][T14814] tmpfs: Unknown parameter 'ipol'
[  267.370912][T14815] netlink: 'syz.4.2711': attribute type 21 has an invalid length.
[  267.376953][T14815] netlink: 'syz.4.2711': attribute type 7 has an invalid length.
[  267.576228][T14737] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.624431][T14737] 8021q: adding VLAN 0 to HW filter on device team0
[  267.645571][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.648704][ T8031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.670415][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2714'.
[  267.677575][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.679921][ T8031] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.740259][T14838] usb usb8: usbfs: process 14838 (syz.4.2716) did not claim interface 0 before use
[  267.774187][T14840] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0
[  268.375288][ T5813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  268.555242][T14858] 8021q: adding VLAN 0 to HW filter on device bond9
[  268.705374][   T64] Bluetooth: hci1: command tx timeout
[  268.732267][   T42] kauditd_printk_skb: 1108 callbacks suppressed
[  268.732280][   T42] audit: type=1400 audit(524812.655:36013): avc:  denied  { getattr } for  pid=14889 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  268.758704][T14737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.767559][   T42] audit: type=1400 audit(524812.655:36014): avc:  denied  { search } for  pid=14889 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  268.793965][   T42] audit: type=1400 audit(524812.655:36015): avc:  denied  { search } for  pid=14889 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  268.821616][   T42] audit: type=1400 audit(524812.655:36016): avc:  denied  { search } for  pid=14889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  268.851704][   T42] audit: type=1400 audit(524812.655:36017): avc:  denied  { search } for  pid=14889 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  268.868263][   T42] audit: type=1400 audit(524812.655:36018): avc:  denied  { sys_admin } for  pid=14889 comm="dhcpcd-run-hook" capability=21  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  268.886673][T14899] audit: audit_backlog=65 > audit_backlog_limit=64
[  268.888716][T14899] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64
[  268.893057][   T42] audit: type=1400 audit(524812.655:36019): avc:  denied  { search } for  pid=14889 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  268.896974][T14899] audit: backlog limit exceeded
[  268.900324][T14897] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2726'.
[  269.083520][T14737] veth0_vlan: entered promiscuous mode
[  269.089327][T14737] veth1_vlan: entered promiscuous mode
[  269.109366][T14737] veth0_macvtap: entered promiscuous mode
[  269.114392][T14737] veth1_macvtap: entered promiscuous mode
[  269.136181][T14737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.140812][T14737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.161439][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.164276][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.168524][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.172018][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.266108][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  269.596327][T14921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2729'.
[  269.605145][T14921] netlink: 'syz.5.2729': attribute type 7 has an invalid length.
[  269.610822][T14921] netlink: 'syz.5.2729': attribute type 8 has an invalid length.
[  269.613445][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2729'.
[  269.988548][T14924] fuse: Bad value for 'fd'
[  270.784527][   T64] Bluetooth: hci1: command tx timeout
[  271.036539][T14940] bond0: Error: Cannot enslave bond to itself.
[  271.040906][T14940] loop5: detected capacity change from 0 to 7
[  271.045185][T14940] Dev loop5: unable to read RDB block 7
[  271.046995][T14940]  loop5: AHDI p2 p4
[  271.048304][T14940] loop5: partition table partially beyond EOD, truncated
[  271.050648][T14940] loop5: p4 start 254 is beyond EOD, truncated
[  271.856149][T14899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  272.555957][ T8031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.565404][ T8031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.599197][ T8031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.612373][ T8031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.755173][T14955] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  272.803656][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.831336][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.861919][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2741'.
[  272.864967][   T64] Bluetooth: hci1: command tx timeout
[  272.883364][T14971] netlink: 'syz.7.2695': attribute type 1 has an invalid length.
[  272.903488][ T8031] Bluetooth: hci3: Frame reassembly failed (-84)
[  273.034289][ T5940] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  273.151339][T14991] input: syz0 as /devices/virtual/input/input32
[  273.187847][ T5940] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  273.207212][ T5940] usb 5-1: config 1 has no interface number 0
[  273.209261][ T5940] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023
[  273.218910][ T5940] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16
[  273.231053][ T5940] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  273.241704][ T5940] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  273.245703][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.248472][ T5940] usb 5-1: Product: syz
[  273.249837][ T5940] usb 5-1: Manufacturer: syz
[  273.251325][ T5940] usb 5-1: SerialNumber: syz
[  273.259062][T14964] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  273.264286][T14964] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  273.273844][ T5940] usb 5-1: Expected 3 endpoints, found: 2
[  273.476144][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.480503][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.485328][ T5940] usb 5-1: USB disconnect, device number 44
[  273.739895][   T42] kauditd_printk_skb: 851 callbacks suppressed
[  273.739907][   T42] audit: type=1400 audit(524817.666:36841): avc:  denied  { search } for  pid=15014 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.749211][   T42] audit: type=1400 audit(524817.666:36842): avc:  denied  { search } for  pid=15014 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.756107][   T42] audit: type=1400 audit(524817.666:36843): avc:  denied  { search } for  pid=15014 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.762666][   T42] audit: type=1400 audit(524817.666:36844): avc:  denied  { getattr } for  pid=15014 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.dhcp" dev="tmpfs" ino=12866 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  273.770962][   T42] audit: type=1400 audit(524817.666:36845): avc:  denied  { search } for  pid=15014 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.778123][   T42] audit: type=1400 audit(524817.666:36846): avc:  denied  { search } for  pid=15014 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.785886][   T42] audit: type=1400 audit(524817.666:36847): avc:  denied  { search } for  pid=15014 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.793902][   T42] audit: type=1400 audit(524817.666:36848): avc:  denied  { write search } for  pid=15014 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.800871][   T42] audit: type=1400 audit(524817.666:36849): avc:  denied  { remove_name } for  pid=15014 comm="rm" name="resolv.conf.dummy0.dhcp" dev="tmpfs" ino=12866 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  273.813085][   T42] audit: type=1400 audit(524817.666:36850): avc:  denied  { unlink } for  pid=15014 comm="rm" name="resolv.conf.dummy0.dhcp" dev="tmpfs" ino=12866 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  274.946571][ T5742] Bluetooth: hci3: command 0xfc11 tx timeout
[  274.951384][   T64] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  275.187605][T15029] ieee802154 phy1 wpan1: encryption failed: -22
[  275.636670][T15042] overlayfs: failed to resolve './file2': -2
[  275.900747][T15046] loop4: detected capacity change from 0 to 2640
[  275.905993][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.908574][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.911126][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.913894][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.916682][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.919233][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.921787][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.924643][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.927122][T15046] ldm_validate_partition_table(): Disk read failed.
[  275.929192][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.931727][T15046] Buffer I/O error on dev loop4, logical block 0, async page read
[  275.934563][T15046] Dev loop4: unable to read RDB block 0
[  275.936446][T15046]  loop4: unable to read partition table
[  275.938378][T15046] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  276.223902][ T2327] usb 10-1: new full-speed USB device number 26 using dummy_hcd
[  276.385188][ T2327] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64
[  276.389181][ T2327] usb 10-1: config 0 interface 0 has no altsetting 0
[  276.392722][ T2327] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  276.395776][ T2327] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  276.398659][ T2327] usb 10-1: Product: syz
[  276.400323][ T2327] usb 10-1: Manufacturer: syz
[  276.401841][ T2327] usb 10-1: SerialNumber: syz
[  276.405725][ T2327] usb 10-1: config 0 descriptor??
[  276.411777][T15048] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  276.416824][ T2327] usb 10-1: selecting invalid altsetting 0
[  276.629393][ T5813] usb 10-1: USB disconnect, device number 26
[  277.081954][T15019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  277.198866][T15054] ieee802154 phy1 wpan1: encryption failed: -22
[  277.543617][ T2327] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  277.693821][ T2327] usb 10-1: Using ep0 maxpacket: 16
[  277.710100][ T2327] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  277.721800][ T2327] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.726396][ T2327] usb 10-1: Product: syz
[  277.728298][ T2327] usb 10-1: Manufacturer: syz
[  277.730346][ T2327] usb 10-1: SerialNumber: syz
[  277.950682][ T2327] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  277.968992][ T2327] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  277.974662][ T2327] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  277.983229][ T2327] usb 10-1: media controller created
[  277.987009][ T8547] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  278.011614][ T2327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  278.059709][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  278.070413][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  278.077215][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  278.080708][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  278.094579][ T5940] usb 9-1: USB disconnect, device number 37
[  278.094637][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  278.194067][T15083] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.204976][T15083] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.207920][T15083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.254563][ T2327] zl10353_read_register: readreg error (reg=127, ret==-110)
[  278.400331][T15060] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2762'.
[  278.423030][ T2327] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  278.432862][ T5813] usb 10-1: USB disconnect, device number 27
[  278.563568][T15096] ieee802154 phy1 wpan1: encryption failed: -22
[  278.748167][   T42] kauditd_printk_skb: 443 callbacks suppressed
[  278.748186][   T42] audit: type=1400 audit(524822.667:37294): avc:  denied  { recv } for  pid=14737 comm="syz-executor" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  278.762021][   T42] audit: type=1400 audit(524822.677:37295): avc:  denied  { read write } for  pid=14737 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  278.778925][   T42] audit: type=1400 audit(524822.677:37296): avc:  denied  { open } for  pid=14737 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  278.788888][   T42] audit: type=1400 audit(524822.677:37297): avc:  denied  { ioctl } for  pid=14737 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  278.826732][   T42] audit: type=1400 audit(524822.717:37298): avc:  denied  { recv } for  pid=5815 comm="kworker/u32:3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  278.834408][   T42] audit: type=1400 audit(524822.717:37299): avc:  denied  { recv } for  pid=5815 comm="kworker/u32:3" saddr=127.0.0.1 src=48666 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  278.842418][   T42] audit: type=1400 audit(524822.717:37300): avc:  denied  { recv } for  pid=5815 comm="kworker/u32:3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48666 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  278.851013][   T42] audit: type=1400 audit(524822.727:37301): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=10.0.2.2 src=33580 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  278.858746][   T42] audit: type=1400 audit(524822.737:37302): avc:  denied  { create } for  pid=15107 comm="syz.7.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  278.868610][   T42] audit: type=1400 audit(524822.747:37303): avc:  denied  { write } for  pid=15107 comm="syz.7.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  279.390715][T15119] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2777'.
[  279.470939][ T5815] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.476695][ T5815] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.759172][ T5815] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.769307][ T5815] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.898446][T15135] ieee802154 phy1 wpan1: encryption failed: -22
[  280.013069][ T5815] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.024370][ T5815] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.144048][ T5742] Bluetooth: hci3: command tx timeout
[  280.181831][ T5815] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.181854][ T5815] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.196875][T15079] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.196957][T15079] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.197130][T15079] bridge_slave_0: entered allmulticast mode
[  280.198052][T15079] bridge_slave_0: entered promiscuous mode
[  280.205867][T15079] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.205911][T15079] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.206018][T15079] bridge_slave_1: entered allmulticast mode
[  280.209665][T15079] bridge_slave_1: entered promiscuous mode
[  280.246458][T15079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.250564][T15079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.290568][T15079] team0: Port device team_slave_0 added
[  280.336178][T15079] team0: Port device team_slave_1 added
[  280.354773][T15152] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  280.366312][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'.
[  280.367907][T15079] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.379089][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.407059][T15079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.420062][T15152] IPv6: sit1: Disabled Multicast RS
[  280.424332][T15079] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.433882][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.449906][T15079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.497991][ T5742] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  280.500888][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1407
[  280.620217][T12072] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 20004 - 0
[  280.627668][T15079] hsr_slave_0: entered promiscuous mode
[  280.629946][T15079] hsr_slave_1: entered promiscuous mode
[  280.632523][T15079] debugfs: 'hsr0' already exists in 'hsr'
[  280.634600][T15079] Cannot create hsr debugfs directory
[  280.700530][   T13] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 20004 - 0
[  280.730795][T12072] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 20004 - 0
[  280.801697][T15136] ------------[ cut here ]------------
[  280.804172][T15136] Memory manager not clean during takedown.
[  280.806142][T15136] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#3: syz.7.2782/15136
[  280.810478][T15136] Modules linked in:
[  280.812110][T15136] CPU: 3 UID: 0 PID: 15136 Comm: syz.7.2782 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  280.815988][T15136] Tainted: [L]=SOFTLOCKUP
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  280.817644][T15136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  280.821252][T15136] RIP: 0010:drm_mm_takedown+0x62/0x280
[  280.823203][T15136] Code: 8b 43 38 48 39 c5 75 16 e8 eb bf 44 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 d5 bf 44 fc 48 8d 3d ae 71 68 0b <67> 48 0f b9 3a 48 c7 c0 e0 f3 46 8e 48 ba 00 00 00 00 00 fc ff df
[  280.829353][T15136] RSP: 0018:ffffc9000576f790 EFLAGS: 00010283
[  280.831553][T15136] RAX: 000000000003f007 RBX: ffff888027bc4868 RCX: ffffc9000c001000
[  280.834343][T15136] RDX: 0000000000080000 RSI: ffffffff85c5a06b RDI: ffffffff912e1220
[  280.837073][T15136] RBP: ffff888027bc48a0 R08: 0000000000000007 R09: 0000000000000000
[  280.839648][T15136] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880279d1900
[  280.842227][T15136] R13: ffff8880279d1918 R14: ffffffff85c47d70 R15: 0000000000000000
[  280.844982][T15136] FS:  00007f9f3444e6c0(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000
[  280.847993][T15136] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.850178][T15136] CR2: 000000110c40b0aa CR3: 0000000036c20000 CR4: 0000000000352ef0
[  280.852691][T15136] Call Trace:
[  280.853595][   T12] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 20004 - 0
[  280.853883][T15136]  <TASK>
[  280.857329][T15136]  ? __pfx_drm_gem_init_release+0x10/0x10
[  280.859195][T15136]  drm_managed_release+0x1bb/0x540
[  280.861061][T15136]  ? __pfx_virtio_gpu_release+0x10/0x10
[  280.862954][T15136]  drm_dev_put.part.0+0xca/0x140
[  280.864665][T15136]  drm_dev_put+0x1f/0x30
[  280.866099][T15136]  virtio_dev_remove+0xb8/0x170
[  280.867792][T15136]  ? __pfx_virtio_dev_remove+0x10/0x10
[  280.869615][T15136]  device_remove+0xcb/0x180
[  280.871116][T15136]  device_release_driver_internal+0x44e/0x620
[  280.873204][T15136]  bus_remove_device+0x2bc/0x560
[  280.874892][T15136]  ? __pfx_bus_remove_device+0x10/0x10
[  280.876743][T15136]  ? __pfx_device_remove_attrs+0x10/0x10
[  280.878580][T15136]  device_del+0x376/0x9b0
[  280.880073][T15136]  ? __pfx_device_del+0x10/0x10
[  280.881899][T15136]  ? __pfx___might_resched+0x10/0x10
[  280.883889][T15136]  ? __pfx_pci_device_is_present+0x10/0x10
[  280.885827][T15136]  device_unregister+0x1d/0xe0
[  280.887318][T15136]  unregister_virtio_device+0x39/0x60
[  280.889067][T15136]  virtio_pci_remove+0x7c/0x110
[  280.890776][T15136]  pci_device_remove+0xb2/0x1d0
[  280.892384][T15136]  ? __pfx_pci_device_remove+0x10/0x10
[  280.894549][T15136]  device_remove+0xcb/0x180
[  280.896200][T15136]  device_release_driver_internal+0x44e/0x620
[  280.898271][T15136]  pci_stop_bus_device+0x120/0x160
[  280.900027][T15136]  pci_stop_and_remove_bus_device+0x58/0xa0
[  280.902012][T15136]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  280.904215][T15136]  remove_store+0x123/0x140
[  280.906063][T15136]  ? __pfx_remove_store+0x10/0x10
[  280.907739][T15136]  ? find_held_lock+0x2b/0x80
[  280.909316][T15136]  ? sysfs_file_kobj+0xe4/0x290
[  280.911051][T15136]  ? sysfs_file_kobj+0xe4/0x290
[  280.912800][T15136]  ? __pfx_remove_store+0x10/0x10
[  280.914527][T15136]  dev_attr_store+0x58/0x80
[  280.916088][T15136]  ? __pfx_dev_attr_store+0x10/0x10
[  280.918179][T15136]  sysfs_kf_write+0xf2/0x150
[  280.919892][T15136]  kernfs_fop_write_iter+0x3e0/0x5f0
[  280.921785][T15136]  ? __pfx_sysfs_kf_write+0x10/0x10
[  280.923800][T15136]  vfs_write+0x6ac/0x1050
[  280.925373][T15136]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  280.927664][T15136]  ? __pfx_vfs_write+0x10/0x10
[  280.929140][T15136]  ksys_write+0x12a/0x250
[  280.930498][T15136]  ? __pfx_ksys_write+0x10/0x10
[  280.931972][T15136]  do_syscall_64+0x115/0x870
[  280.933607][T15136]  ? clear_bhb_loop+0x40/0x90
[  280.935132][T15136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.937048][T15136] RIP: 0033:0x7f9f3359df99
[  280.938480][T15136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.944537][T15136] RSP: 002b:00007f9f3444e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  280.947157][T15136] RAX: ffffffffffffffda RBX: 00007f9f33825fa0 RCX: 00007f9f3359df99
[  280.949715][T15136] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004
[  280.949726][T15136] RBP: 00007f9f33634ec4 R08: 0000000000000000 R09: 0000000000000000
[  280.949734][T15136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.949741][T15136] R13: 00007f9f33826038 R14: 00007f9f33825fa0 R15: 00007fff1d46b608
[  280.949761][T15136]  </TASK>
[  280.949769][T15136] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  280.949781][T15136] CPU: 3 UID: 0 PID: 15136 Comm: syz.7.2782 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  280.949798][T15136] Tainted: [L]=SOFTLOCKUP
[  280.949802][T15136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  280.949810][T15136] Call Trace:
[  280.949815][T15136]  <TASK>
[  280.949820][T15136]  dump_stack_lvl+0x100/0x190
[  280.949857][T15136]  vpanic+0x552/0x970
[  280.949870][T15136]  ? __pfx_vpanic+0x10/0x10
[  280.949885][T15136]  panic+0xd1/0xe0
[  280.949896][T15136]  ? __pfx_panic+0x10/0x10
[  280.949913][T15136]  check_panic_on_warn.cold+0x19/0x34
[  280.949927][T15136]  ? drm_mm_takedown+0x62/0x280
[  280.949943][T15136]  __warn.cold+0x191/0x318
[  280.949956][T15136]  __report_bug+0x30f/0x440
[  280.949978][T15136]  ? drm_mm_takedown+0x62/0x280
[  280.949994][T15136]  ? __pfx___report_bug+0x10/0x10
[  280.950006][T15136]  ? device_release_driver_internal+0x44e/0x620
[  280.950024][T15136]  ? pci_stop_bus_device+0x120/0x160
[  280.950039][T15136]  ? pci_stop_and_remove_bus_device+0x58/0xa0
[  280.950054][T15136]  ? drm_mm_takedown+0x5b/0x280
[  280.950075][T15136]  report_bug_entry+0xe1/0x290
[  280.950088][T15136]  ? drm_mm_takedown+0x62/0x280
[  280.950103][T15136]  handle_bug+0x1cd/0x2a0
[  280.950120][T15136]  exc_invalid_op+0x17/0x50
[  280.950135][T15136]  asm_exc_invalid_op+0x1a/0x20
[  280.950147][T15136] RIP: 0010:drm_mm_takedown+0x62/0x280
[  280.950163][T15136] Code: 8b 43 38 48 39 c5 75 16 e8 eb bf 44 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 d5 bf 44 fc 48 8d 3d ae 71 68 0b <67> 48 0f b9 3a 48 c7 c0 e0 f3 46 8e 48 ba 00 00 00 00 00 fc ff df
[  280.950175][T15136] RSP: 0018:ffffc9000576f790 EFLAGS: 00010283
[  280.950185][T15136] RAX: 000000000003f007 RBX: ffff888027bc4868 RCX: ffffc9000c001000
[  280.950193][T15136] RDX: 0000000000080000 RSI: ffffffff85c5a06b RDI: ffffffff912e1220
[  280.950201][T15136] RBP: ffff888027bc48a0 R08: 0000000000000007 R09: 0000000000000000
[  280.950208][T15136] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880279d1900
[  280.950215][T15136] R13: ffff8880279d1918 R14: ffffffff85c47d70 R15: 0000000000000000
[  280.950223][T15136]  ? __pfx_drm_gem_init_release+0x10/0x10
[  280.950245][T15136]  ? drm_mm_takedown+0x5b/0x280
[  280.950263][T15136]  ? __pfx_drm_gem_init_release+0x10/0x10
[  280.950281][T15136]  drm_managed_release+0x1bb/0x540
[  280.950298][T15136]  ? __pfx_virtio_gpu_release+0x10/0x10
[  280.950315][T15136]  drm_dev_put.part.0+0xca/0x140
[  280.950331][T15136]  drm_dev_put+0x1f/0x30
[  280.950344][T15136]  virtio_dev_remove+0xb8/0x170
[  280.950360][T15136]  ? __pfx_virtio_dev_remove+0x10/0x10
[  280.950375][T15136]  device_remove+0xcb/0x180
[  280.950389][T15136]  device_release_driver_internal+0x44e/0x620
[  280.950408][T15136]  bus_remove_device+0x2bc/0x560
[  280.950423][T15136]  ? __pfx_bus_remove_device+0x10/0x10
[  280.950436][T15136]  ? __pfx_device_remove_attrs+0x10/0x10
[  280.950453][T15136]  device_del+0x376/0x9b0
[  280.950469][T15136]  ? __pfx_device_del+0x10/0x10
[  280.950483][T15136]  ? __pfx___might_resched+0x10/0x10
[  280.950498][T15136]  ? __pfx_pci_device_is_present+0x10/0x10
[  280.950517][T15136]  device_unregister+0x1d/0xe0
[  280.950531][T15136]  unregister_virtio_device+0x39/0x60
[  280.950547][T15136]  virtio_pci_remove+0x7c/0x110
[  280.950560][T15136]  pci_device_remove+0xb2/0x1d0
[  280.950572][T15136]  ? __pfx_pci_device_remove+0x10/0x10
[  280.950584][T15136]  device_remove+0xcb/0x180
[  280.950598][T15136]  device_release_driver_internal+0x44e/0x620
[  280.950617][T15136]  pci_stop_bus_device+0x120/0x160
[  280.950632][T15136]  pci_stop_and_remove_bus_device+0x58/0xa0
[  280.950646][T15136]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  280.950662][T15136]  remove_store+0x123/0x140
[  280.950678][T15136]  ? __pfx_remove_store+0x10/0x10
[  280.950693][T15136]  ? find_held_lock+0x2b/0x80
[  280.950712][T15136]  ? sysfs_file_kobj+0xe4/0x290
[  280.950730][T15136]  ? sysfs_file_kobj+0xe4/0x290
[  280.950748][T15136]  ? __pfx_remove_store+0x10/0x10
[  280.950766][T15136]  dev_attr_store+0x58/0x80
[  280.950783][T15136]  ? __pfx_dev_attr_store+0x10/0x10
[  280.950799][T15136]  sysfs_kf_write+0xf2/0x150
[  280.950818][T15136]  kernfs_fop_write_iter+0x3e0/0x5f0
[  280.950834][T15136]  ? __pfx_sysfs_kf_write+0x10/0x10
[  280.950853][T15136]  vfs_write+0x6ac/0x1050
[  280.950873][T15136]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  280.950890][T15136]  ? __pfx_vfs_write+0x10/0x10
[  280.950917][T15136]  ksys_write+0x12a/0x250
[  280.950936][T15136]  ? __pfx_ksys_write+0x10/0x10
[  280.950958][T15136]  do_syscall_64+0x115/0x870
[  280.950971][T15136]  ? clear_bhb_loop+0x40/0x90
[  280.950986][T15136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.950998][T15136] RIP: 0033:0x7f9f3359df99
[  280.951009][T15136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.951019][T15136] RSP: 002b:00007f9f3444e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  280.951030][T15136] RAX: ffffffffffffffda RBX: 00007f9f33825fa0 RCX: 00007f9f3359df99
[  280.951038][T15136] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004
[  280.951045][T15136] RBP: 00007f9f33634ec4 R08: 0000000000000000 R09: 0000000000000000
[  280.951052][T15136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.951059][T15136] R13: 00007f9f33826038 R14: 00007f9f33825fa0 R15: 00007fff1d46b608
[  280.951074][T15136]  </TASK>
[  280.951682][T15136] Kernel Offset: disabled