last executing test programs:

3m29.943434637s ago: executing program 32 (id=192):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r0, &(0x7f0000000300)=@generic={0x1f, "000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}, 0xa)

3m21.656987651s ago: executing program 2 (id=427):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x21980}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f00001f5e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3m21.656801055s ago: executing program 2 (id=428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x4000, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)

3m21.59424785s ago: executing program 2 (id=429):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ed)
mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000140)='\\owerdir=./lower,upperdir=./upper,workdir=./work,override_creds\x00')

3m21.593984535s ago: executing program 2 (id=430):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000140))
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0xc0003, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f0000000040))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000001300)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x2}}, 0x24, 0x2)

3m21.402594663s ago: executing program 2 (id=436):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0xff08)
write(r0, &(0x7f0000000100)='measure func=FILE_CHECK obj_type=u', 0x22)

3m21.297240122s ago: executing program 2 (id=439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ed)
mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000140)='l:werdir=./lower,upperdir=./upper,workdir=./work,override_creds\x00')

3m20.153833971s ago: executing program 3 (id=464):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14)
r3 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)

3m20.15361709s ago: executing program 3 (id=465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}, 0x1, 0x600000000000000}, 0x0)

3m19.998701936s ago: executing program 3 (id=468):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990311000015000500fe803f00000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) (async)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0xc}) (async, rerun: 64)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (rerun: 64)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@updsa={0xf0, 0x1a, 0x1, 0x70bd26, 0x0, {{@in=@private=0xa010101, @in=@empty}, {@in=@multicast1, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4000000000}, {}, 0x0, 0x20000, 0x2}}, 0xf0}}, 0x0)

3m19.544714246s ago: executing program 3 (id=476):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003640)=ANY=[@ANYBLOB="200000001200010a00000000000000007c0000000c003d8005002cc40e0589c5"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000000c0)='./file0\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000000380), &(0x7f00000005c0), &(0x7f0000000000))
syz_io_uring_setup(0xbbd, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r2}, 0x0, 0x0, &(0x7f0000000000))
ptrace(0x10, r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'})
ptrace$pokeuser(0x6, r1, 0x350, 0x10000)
ptrace$pokeuser(0x6, r1, 0x388, 0x8)
setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x240000, 0x108)
openat(r6, &(0x7f00000002c0)='./file0\x00', 0x200040, 0x28)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r7, 0x0, 0x0)

3m19.326505977s ago: executing program 3 (id=481):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x20004010)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m17.980693902s ago: executing program 3 (id=506):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x21980}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e147e04000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3m17.930207128s ago: executing program 33 (id=506):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x21980}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e147e04000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3m17.162140591s ago: executing program 4 (id=512):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r0, &(0x7f0000000300)=@generic={0x1f, "000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}, 0xa)

3m17.074194397s ago: executing program 4 (id=513):
pipe(&(0x7f0000000380))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socket$kcm(0x29, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x15)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

3m17.02144818s ago: executing program 4 (id=515):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$9p(r0, &(0x7f0000000100)="d52dbd", 0x3)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
readv(r2, &(0x7f0000000b80)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1)
write(r4, &(0x7f0000000280)="86", 0x1)
splice(r4, &(0x7f0000000040), r3, 0x0, 0x6, 0x0)
read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x4000000000, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10000000000000, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r5, {0x7, 0x2d, 0x7, 0x200000, 0x4, 0x5, 0x8, 0x7afa, 0x0, 0x0, 0x40, 0xf}}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/104, 0x68)

3m16.850642957s ago: executing program 4 (id=517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000060064"], 0x20}}, 0x0)

3m16.565981479s ago: executing program 4 (id=520):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000})
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]})
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})

3m16.473952113s ago: executing program 4 (id=522):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xd, 0xfff1}, {0x2, 0xf}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000540)={0x1}, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x109002, 0x0)
read$dsp(r4, &(0x7f00000000c0)=""/108, 0x6c)
write$dsp(r3, &(0x7f0000002000)='`', 0x88020)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600655800000c000280080011"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 32)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (rerun: 32)

3m5.641054425s ago: executing program 34 (id=439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ed)
mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000140)='l:werdir=./lower,upperdir=./upper,workdir=./work,override_creds\x00')

3m1.325904976s ago: executing program 35 (id=522):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xd, 0xfff1}, {0x2, 0xf}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000540)={0x1}, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x109002, 0x0)
read$dsp(r4, &(0x7f00000000c0)=""/108, 0x6c)
write$dsp(r3, &(0x7f0000002000)='`', 0x88020)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600655800000c000280080011"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 32)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (rerun: 32)

2m54.373452828s ago: executing program 1 (id=835):
ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async, rerun: 64)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0100001000130700000000000000000a010100000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d3330000002001000000000000000000000000000200000000000000000000b142c19e1a8913680000000000000000000000000000000000000000000000000000000000000000000000000080ffffffffffffffff01000000000000800000000000000000feffffffffffffff000000000000000000000000000000000000000000000000023500000200020000000000000000004c0014"], 0x13c}}, 0x4000050)
io_uring_enter(r0, 0x180b, 0xcadf, 0x0, &(0x7f0000000040)={[0x8]}, 0x8) (async)
sendfile(r0, r0, 0x0, 0x15)

2m54.305292733s ago: executing program 1 (id=839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000006464"], 0x20}}, 0x0)

2m54.174132788s ago: executing program 1 (id=843):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r0, &(0x7f0000000300)=@generic={0x1f, "0000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}, 0xa)

2m54.173603106s ago: executing program 1 (id=845):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4ed}]}, 0x24}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000d00)={0x0, [{0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x10, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x41c1, 0x0}, {0x1, 0x180, 0x2, &(0x7f00000006c0)="d60d68633b1b18c029347e2e846b70857fb53e9d683640c7f062523903fd9faf2c3f1f64ba797431a4ac36d03bc907c2"}, {0x3, 0x0, 0xd5cd, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x18a, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x6e5, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xad56, 0x0}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r5, r5, 0x0, 0x7f03)
write$cgroup_int(r0, &(0x7f0000000180)=0xfe5f, 0x12)
r6 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x100)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f00000005c0)=0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000640)=0xc)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r10, 0x0)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000700)={{0x1, r7, 0xee00, r8, r9, 0x20, 0x5}, 0x2, 0x7, 0xd67, 0x1, 0xffffffffffffffff, r10, 0x3})
r11 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x513082)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r11, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0x1406, 0x86a35aee23734890, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x4c011)

2m54.084177195s ago: executing program 1 (id=847):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020003004c050000c405000001000000000000000501c025f37c44f90f539940b6eba3d889f3bd4c220451f1ad7e7964120b509d73b1f375ca5e716d17ef6471eb1cd8f9b36ee4346563dc0a8d23b3132730887f930ae36f176c148f4e203e99d3e031c29ba0d634c0dc072b369a"], 0x11a)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000))
syz_open_dev$tty20(0xc, 0x4, 0x1)
read(r0, &(0x7f00000002c0), 0x100)
read(r0, &(0x7f0000000300), 0x100)
read(r0, &(0x7f0000000340), 0x100)
write(r0, &(0x7f0000000380)="0a00000001", 0x5)
mkdir(&(0x7f00000003c0)='sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000440)='sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='sys/bus/hid/drivers/playstation/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000580)='0003:054C:05C4.0002', 0x13)

2m53.75312878s ago: executing program 1 (id=851):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x1300000000000000}, 0x0)

2m53.687519132s ago: executing program 36 (id=851):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x1300000000000000}, 0x0)

1m36.291641841s ago: executing program 7 (id=1755):
pipe(&(0x7f0000000380))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socket$kcm(0x29, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x15)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

1m36.170309785s ago: executing program 7 (id=1758):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x21980}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000efe0a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1m36.088430995s ago: executing program 7 (id=1759):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x3f00, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)

1m36.001146335s ago: executing program 7 (id=1761):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32)
r0 = socket(0x10, 0x80002, 0x0) (rerun: 32)
sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async, rerun: 64)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (rerun: 64)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)

1m34.817231979s ago: executing program 7 (id=1772):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x8c11, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/28, 0x1c}], 0x2}, 0x21)

1m33.772322371s ago: executing program 7 (id=1782):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xffff0000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1m33.628350941s ago: executing program 37 (id=1782):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xffff0000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

40.166989829s ago: executing program 8 (id=2728):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00')
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000506010400000000000000000000000605000100070000000900020073797a3100000000090003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4004804)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0xa, 0x8, "a867dc159d50dfabd78a3e1af7591b97f0758b9a8583fb00", {0x4, 0xff}, 0xffffffff})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3c}, 0x94)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r4, &(0x7f0000000500)='ccgx-ucsi -x', 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r7 = open(&(0x7f00000002c0)='./file0\x00', 0x1, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000440)='%-010d \x00'}, 0x20)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000010150000050000000700000040080000", @ANYRES32, @ANYBLOB="dd01000000db37000000004000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pK    \x00'}, 0x20)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r14, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r14, 0x0)
preadv(r14, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
bind$nfc_llcp(r14, &(0x7f0000000440)={0x27, 0x0, 0x1, 0x5, 0xf7, 0x7, "2fbcbeb47f8bc109058acddca524ead476b501ea346ac80ebaf15a78cf930b2bf80d33ae8b9f927ad5a4b104666b3e37b5b2c655c7d1ecfa82c1e3059e51d1", 0x1a}, 0x60)
r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18)
r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000000087d6000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x11, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x68dd28f4, 0x0, 0x0, 0x0, 0xdee}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @exit, @ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0xfd, 0x7b, &(0x7f0000000240)=""/123, 0x40f00, 0x6, '\x00', r6, @fallback=0xf, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x8, 0xfffffff7, 0x7fffffff}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000800)=[r8, r9, r10, r11, r12, r13, r14, r15, r16, r0], &(0x7f0000000840)=[{0x3, 0x5, 0x0, 0x2}, {0x4, 0x1, 0x9, 0x3}], 0x10, 0x1e18}, 0x94)

39.929108879s ago: executing program 8 (id=2730):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000), 0x1100020, &(0x7f00000000c0)={[], [], 0x2c})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6})
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85)
rmdir(&(0x7f0000000080)='.\x00')
r2 = socket(0x28, 0x5, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000013d40)=ANY=[@ANYBLOB="18000000000000100000000000000700b5000000087c9a0095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90)
r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]})
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r6, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x1461, &(0x7f0000002a00)=ANY=[], 0x0)
syz_emit_ethernet(0x497, &(0x7f00000017c0)=ANY=[], 0x0)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008014)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000180)={0x90, 0x200, 0x0, 0x5, 0xf34})
connect(r0, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010101}}, 0x80)

39.841531078s ago: executing program 8 (id=2731):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x200)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000009c0)={r2})
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x101)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd70000000000014001f0018000180140002006e6574646576000000000000000000000500190001000000"], 0x34}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
read(r0, &(0x7f00000002c0)=""/115, 0x73)
listen(r4, 0x1000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB="747261010000006e69782c00"])
socket$unix(0x1, 0x1, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x200) (async)
socket$kcm(0x2d, 0x2, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000009c0)={r2}) (async)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x101) (async)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd70000000000014001f0018000180140002006e6574646576000000000000000000000500190001000000"], 0x34}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
read(r0, &(0x7f00000002c0)=""/115, 0x73) (async)
listen(r4, 0x1000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB="747261010000006e69782c00"]) (async)

39.781399893s ago: executing program 8 (id=2733):
clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='mydomain / 128\n\x00', 0xf)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r4 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000)
readv(r4, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0xa, 0x5, 0x0)
connect$inet(r6, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0)
r7 = socket(0xa, 0x3, 0xff)
openat$bsg(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f3395f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x2a}], 0x1}, 0x30008b48)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="146fd1850c84513d9770c40f395a22000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040811}, 0x0)

39.699160403s ago: executing program 8 (id=2735):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x0, 0x0) (fail_nth: 15)

39.304712971s ago: executing program 8 (id=2741):
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r3, 0xff, 0x1, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001})
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil)
poll(&(0x7f0000000200)=[{r5, 0x555}], 0x1, 0xfffffffe)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(hmac(sha256),cts(cbc(aes)))\x00'}, 0x58)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x158, 0x111, 0x4b4, 0x0, 0x700, 0x258, 0x278, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x9, 0xfa, 0x10, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, @loopback, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xff000000, 0x0, 0xff], [0xff, 0x0, 0xff, 0x6baabc129a67f641], 0x38c, 0x20a1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x858], 0x4, 0x1c, 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = epoll_create(0x10002e78)
epoll_wait(r7, &(0x7f00000001c0)=[{}], 0x1, 0xb55)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x10000001})
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6)
close_range(r6, r2, 0x0)

39.160053958s ago: executing program 38 (id=2741):
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r3, 0xff, 0x1, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001})
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil)
poll(&(0x7f0000000200)=[{r5, 0x555}], 0x1, 0xfffffffe)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(hmac(sha256),cts(cbc(aes)))\x00'}, 0x58)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x158, 0x111, 0x4b4, 0x0, 0x700, 0x258, 0x278, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x9, 0xfa, 0x10, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, @loopback, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xff000000, 0x0, 0xff], [0xff, 0x0, 0xff, 0x6baabc129a67f641], 0x38c, 0x20a1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x858], 0x4, 0x1c, 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = epoll_create(0x10002e78)
epoll_wait(r7, &(0x7f00000001c0)=[{}], 0x1, 0xb55)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x10000001})
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6)
close_range(r6, r2, 0x0)

16.570349181s ago: executing program 5 (id=2984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000890}, 0xf4)

16.490802448s ago: executing program 5 (id=2985):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}, 0x1, 0x0, 0x700000000000000}, 0x0)

16.351806108s ago: executing program 5 (id=2986):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f8", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

16.260966717s ago: executing program 5 (id=2987):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6048c0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r1, 0x400455c8, 0x0)

16.208982371s ago: executing program 5 (id=2988):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014"], 0x1f0}}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x1412, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0xc011}, 0x4000001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0)
write(r1, &(0x7f0000000640)='3', 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe)
kcmp(0x0, r4, 0x4, 0xffffffffffffffff, r1)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

16.081574081s ago: executing program 5 (id=2990):
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x9, 0x9000, 0x0, 0x0}], 0x1})

2.470738538s ago: executing program 0 (id=3191):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
close$binfmt(r1)
pipe2(&(0x7f0000000040), 0x0)
splice(r1, 0x0, r2, 0x0, 0x7, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="950000000000000018500000ffffffff0000000000000200850000000000000085b20100f0ffffff2000060000e400009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x94)

2.341520927s ago: executing program 0 (id=3192):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x381}, 0x9c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001800dd8d27bd7000fedbdf2502201000fd00fe020000000008000400", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
unshare(0x22020400)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1})
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1803000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000095000000000000009500"/48], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8, <r9=>0xffffffffffffffff}, 0x4)
r10 = dup(0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000e8480f55f9420449e9975612e687e14b6ba25c6c08c91ead0e39a3153dade875530e519766b94fefad47a37da690339b5f58306c16a356fec61ef71aeb7ae00033ecb96935d90b14d3875117732ef781918de7e418843f57b22fe8e10d8346a6026b60ab44640f761768f9c70a7cba497842172e14b7bab19dd24bf5cdeb84b4f0654904a00f2ee2e0ab742eb633a706b29f16383901894a8bb44470e04ec7109491588bc4150451", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf253d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000006900000008005d000000000008005d0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000004)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff4b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r12, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.178548837s ago: executing program 0 (id=3194):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

1.960574864s ago: executing program 0 (id=3196):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000008ffff0f0000000000000000000000000000000074")
socket$nl_generic(0x11, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x1, 0x3, 0x1}}, 0x26)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x20004010)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.700705136s ago: executing program 6 (id=3199):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x4, 0xfffffffd, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5, r6, 0x4, r4}, 0x10)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000500)='0000:00:02.0\x00', 0xd)
close(r8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r9, &(0x7f0000000700)='amd5536udc-pci\x00', 0xf)
close(r9)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write(r10, &(0x7f0000000900)='0000:00:02.0\x00', 0xd)
close(r10)

1.640304573s ago: executing program 0 (id=3200):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0xf7}, {0x0, 0xc8, 0xf801}}}}, 0xb) (async)
syz_open_procfs(0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000001c0)=ANY=[@ANYRES8]) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="2961e1c5951e5987d400b2e6daccf9f14d0cf45ec83138a70eb9fd64e7fce1bb467e744f5f34c5892ba2d918f641d8357ee1a965b8aaa339abb337cdec931dd8c206e6ee9e0cc1e08545dc7874cc64e057d6835760e6e198a373f4dcdbb425175591ba4b4e3c4f316cc891ee26204acfd3f5d74c4d89c041581918"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0)

1.420155913s ago: executing program 0 (id=3203):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0)

1.31939132s ago: executing program 6 (id=3204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}, 0x1, 0x0, 0x0, 0xa000000}, 0x0)

1.150607081s ago: executing program 6 (id=3205):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x21980}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0xfdff}, 0x0)

918.664346ms ago: executing program 6 (id=3206):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

918.286425ms ago: executing program 39 (id=2990):
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x9, 0x9000, 0x0, 0x0}], 0x1})

816.954527ms ago: executing program 6 (id=3209):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x4, 0xfffffffd, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5, r6, 0x4, r4}, 0x10)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd110010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000500)='0000:00:02.0\x00', 0xd)
close(r8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r9, &(0x7f0000000700)='amd5536udc-pci\x00', 0xf)
close(r9)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100ff"], 0x15c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write(r10, &(0x7f0000000900)='0000:00:02.0\x00', 0xd)
close(r10)

538.37076ms ago: executing program 9 (id=3212):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000})
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})

448.892511ms ago: executing program 9 (id=3213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0)

448.420498ms ago: executing program 6 (id=3214):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000)
r2 = getpid()
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) (async)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x2, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"})
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r5, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x3c}}, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) (async)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5202)
r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522)
ioctl$USBDEVFS_BULK(r10, 0x5523, 0x0) (async)
ioctl$USBDEVFS_BULK(r10, 0x5523, 0x0)
tgkill(r2, r2, 0x40)

271.462497ms ago: executing program 9 (id=3215):
r0 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x1403, 0x10, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x40)
mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)

200.998281ms ago: executing program 9 (id=3216):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) (async)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x1, 0x100)
mkdirat(r0, 0x0, 0x1a2)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r2, &(0x7f0000000740)={&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/242, 0xf2}], 0x1, &(0x7f0000000700)=""/49, 0x31}, 0x10120) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=0x2, 0x4) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) (async)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async)
pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4000)
write$P9_RREADDIR(r6, &(0x7f0000000380)={0x4d, 0x29, 0x2, {0xd7, [{{0x0, 0x0, 0x5}, 0x7, 0xc, 0xb, 'mysys/file0'}, {{0x1, 0x0, 0x9}, 0x1, 0x2, 0x7, './file0'}]}}, 0x4d) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mysys/module/xhci_hcd/parameters/quirks\x00', 0x0, 0x0)
read(r10, &(0x7f0000000600), 0x40) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

107.100813ms ago: executing program 9 (id=3217):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x9)
r1 = socket$nl_generic(0x11, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fstat(r7, &(0x7f0000005300))
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r7)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r10, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xeb4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x4000001)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f00000001c0)=0x1, 0x4)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r11, 0x40047435, &(0x7f0000000200)=0x1)
close_range(r2, 0xffffffffffffffff, 0x0)

0s ago: executing program 9 (id=3218):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x10, 0xffffb9c5, 0x6, 0x4, 0x2458})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0x7a, [0x4ec, 0x60, 0x400, 0x10001, 0x5, 0x5], 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/122}, &(0x7f0000000300)=0x78)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='1-1\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

: Unable to find symbol stb0899_attach()
[  210.458098][ T1038] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  210.516650][ T1038] rc_core: IR keymap rc-tt-1500 not found
[  210.518476][ T1038] Registered IR keymap rc-empty
[  210.523294][ T1038] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0
[  210.533809][ T1038] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input34
[  210.538840][T13416] dvb-usb: bulk message failed: -22 (7/0)
[  210.544195][T13416] pctv452e: I2C error -22; AA 02  12 00 00 -> aa 02 31 03 12 00 00
[  210.554141][ T1038] dvb-usb: schedule remote query interval to 100 msecs.
[  210.559103][ T1038] pctv452e: pctv452e_power_ctrl: 0
[  210.559103][ T1038] 
[  210.567224][ T1038] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  210.574385][ T1038] usb 13-1: USB disconnect, device number 9
[  210.619686][ T1038] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  211.139923][T13447] nvme_fabrics: unknown parameter or missing value '.raddr=127trsvcid=8009' in ctrl creation request
[  211.387625][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2487'.
[  211.401200][T13458] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  211.504684][T13465] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2490'.
[  211.587269][T13467] overlay: Unknown parameter 'override_creds�'
[  211.677603][T13473] trusted_key: syz.9.2493 sent an empty control message without MSG_MORE.
[  211.706449][T13475] loop5: detected capacity change from 0 to 7
[  211.709583][T13475] Dev loop5: unable to read RDB block 7
[  211.711347][T13475]  loop5: AHDI p2
[  211.717936][T13475] loop5: partition table partially beyond EOD, truncated
[  212.002091][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2497'.
[  212.012410][T13484] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  212.106812][T13487] program syz.8.2498 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.244252][T13493] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2500'.
[  212.345562][   T42] kauditd_printk_skb: 4 callbacks suppressed
[  212.345582][   T42] audit: type=1400 audit(1786637815.810:996): avc:  denied  { append } for  pid=13496 comm="syz.8.2502" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  212.527676][   T42] audit: type=1400 audit(1786637815.990:997): avc:  denied  { map } for  pid=13504 comm="syz.8.2505" path="/dev/video1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  212.809269][T13511] openvswitch: netlink: Missing key (keys=40, expected=100)
[  212.945113][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2510'.
[  212.949775][T13517] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  213.101546][T13525] overlay: Unknown parameter 'override_creds�'
[  213.171928][T13527] netlink: 'syz.5.2515': attribute type 1 has an invalid length.
[  213.208531][T13527] 8021q: adding VLAN 0 to HW filter on device bond5
[  213.494509][ T1038] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  213.583959][T13543] loop5: detected capacity change from 0 to 7
[  213.596718][T13543] Dev loop5: unable to read RDB block 7
[  213.598508][T13543]  loop5: AHDI p2
[  213.600014][T13543] loop5: partition table partially beyond EOD, truncated
[  213.648529][ T1038] usb 10-1: Using ep0 maxpacket: 8
[  213.655132][ T1038] usb 10-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  213.662005][ T1038] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.674442][ T1038] usb 10-1: Product: syz
[  213.684382][ T1038] usb 10-1: Manufacturer: syz
[  213.686335][ T1038] usb 10-1: SerialNumber: syz
[  213.698730][ T1038] usb 10-1: config 0 descriptor??
[  213.710740][ T1038] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  213.718750][ T1038] pctv452e: pctv452e_power_ctrl: 1
[  213.718750][ T1038] 
[  213.728498][ T1038] usb 10-1: selecting invalid altsetting 3
[  213.730881][ T1038] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  213.730881][ T1038] 
[  213.745955][ T1038] dvb-usb: bulk message failed: -22 (5/0)
[  213.754121][ T1038] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  213.764907][ T1038] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  213.772177][ T1038] usb 10-1: media controller created
[  213.782548][ T1038] dvb-usb: bulk message failed: -22 (8/0)
[  213.785703][ T1038] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  213.800362][ T1038] dvb-usb: MAC address reading failed.
[  213.823598][ T1038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  213.915316][T13527] dvb-usb: bulk message failed: -22 (7/0)
[  213.917288][T13527] pctv452e: I2C error -22; AA 02  12 00 00 -> aa 02 31 03 12 00 00
[  213.950673][ T1038] DVB: Unable to find symbol stb0899_attach()
[  213.953165][ T1038] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  213.992054][   T42] audit: type=1400 audit(1786637817.450:998): avc:  denied  { write } for  pid=13558 comm="syz.9.2528" path="socket:[51715]" dev="sockfs" ino=51715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  214.076868][ T1038] rc_core: IR keymap rc-tt-1500 not found
[  214.079039][ T1038] Registered IR keymap rc-empty
[  214.087962][ T1038] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0
[  214.107701][ T1038] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input36
[  214.108547][T13562] nvme_tcp: malformed address passed: 127trsvcid=8009:8009
[  214.127511][ T1038] dvb-usb: schedule remote query interval to 100 msecs.
[  214.131850][ T1038] pctv452e: pctv452e_power_ctrl: 0
[  214.131850][ T1038] 
[  214.135347][ T1038] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  214.168255][ T1038] usb 10-1: USB disconnect, device number 20
[  214.253515][T13572] netlink: 'syz.8.2533': attribute type 10 has an invalid length.
[  214.262518][T13569] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  214.322327][ T1038] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  214.437015][T13580] loop5: detected capacity change from 0 to 7
[  214.441943][T13580] Dev loop5: unable to read RDB block 7
[  214.444688][T13580]  loop5: unable to read partition table
[  214.452902][T13580] loop5: partition table beyond EOD, truncated
[  214.459814][T13580] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  214.522417][T13582] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  214.557340][T13578] XFS (nullb0): Invalid superblock magic number
[  214.767039][T13602] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  214.917707][T13613] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  214.934392][T13613] CPU: 0 UID: 0 PID: 13613 Comm: syz.8.2545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  214.934426][T13613] Tainted: [L]=SOFTLOCKUP
[  214.934432][T13613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  214.934443][T13613] Call Trace:
[  214.934451][T13613]  <TASK>
[  214.934459][T13613]  dump_stack_lvl+0x100/0x190
[  214.934492][T13613]  sysfs_warn_dup.cold+0x1c/0x28
[  214.934533][T13613]  sysfs_create_dir_ns+0x24b/0x2b0
[  214.934554][T13613]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  214.934571][T13613]  ? find_held_lock+0x2b/0x80
[  214.934588][T13613]  ? kobject_add_internal+0x25f/0x930
[  214.934605][T13613]  ? kobject_add_internal+0x25f/0x930
[  214.934625][T13613]  ? class_dir_child_ns_type+0xd/0x60
[  214.934661][T13613]  kobject_add_internal+0x2c8/0x930
[  214.934683][T13613]  kobject_add+0x16a/0x1e0
[  214.934701][T13613]  ? __pfx_kobject_add+0x10/0x10
[  214.934720][T13613]  ? get_device_parent+0x1b3/0x4c0
[  214.934742][T13613]  ? kobject_put+0xb9/0x640
[  214.934771][T13613]  device_add+0x294/0x1970
[  214.934796][T13613]  ? lockdep_init_map_type+0x5c/0x250
[  214.934817][T13613]  ? __pfx_device_add+0x10/0x10
[  214.934839][T13613]  ? lockdep_init_map_type+0x5c/0x250
[  214.934861][T13613]  ? __init_waitqueue_head+0xca/0x150
[  214.934890][T13613]  tty_register_device_attr+0x388/0x7f0
[  214.934919][T13613]  ? lockdep_init_map_type+0x5c/0x250
[  214.934941][T13613]  ? __pfx_tty_register_device_attr+0x10/0x10
[  214.934967][T13613]  ? tty_port_init+0x156/0x1c0
[  214.934990][T13613]  gsm_activate_mux+0x155/0x2a0
[  214.935013][T13613]  gsmld_ioctl+0xbbc/0x15c0
[  214.935041][T13613]  ? __pfx_gsmld_ioctl+0x10/0x10
[  214.935067][T13613]  ? __ldsem_down_read_nested+0xf3/0x890
[  214.935094][T13613]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[  214.935131][T13613]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  214.935167][T13613]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  214.935187][T13613]  ? __pfx_gsmld_ioctl+0x10/0x10
[  214.935212][T13613]  tty_ioctl+0x11b4/0x1640
[  214.935234][T13613]  ? __pfx_tty_ioctl+0x10/0x10
[  214.935254][T13613]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  214.935299][T13613]  ? __fget_files+0x215/0x3d0
[  214.935317][T13613]  ? hook_file_ioctl_common+0x140/0x440
[  214.935351][T13613]  ? selinux_file_ioctl+0x13b/0x290
[  214.935377][T13613]  ? selinux_file_ioctl+0xb6/0x290
[  214.935402][T13613]  ? __pfx_tty_ioctl+0x10/0x10
[  214.935423][T13613]  __x64_sys_ioctl+0x18e/0x210
[  214.935500][T13613]  do_syscall_64+0x115/0x870
[  214.935525][T13613]  ? clear_bhb_loop+0x70/0xc0
[  214.935547][T13613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.935566][T13613] RIP: 0033:0x7f09dcf9e0d9
[  214.935582][T13613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.935598][T13613] RSP: 002b:00007f09ddec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.935618][T13613] RAX: ffffffffffffffda RBX: 00007f09dd226090 RCX: 00007f09dcf9e0d9
[  214.935631][T13613] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003
[  214.935641][T13613] RBP: 00007f09dd035024 R08: 0000000000000000 R09: 0000000000000000
[  214.935651][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.935661][T13613] R13: 00007f09dd226128 R14: 00007f09dd226090 R15: 00007ffdc9a25398
[  214.935684][T13613]  </TASK>
[  214.935713][T13613] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  215.406406][T13619] __nla_validate_parse: 5 callbacks suppressed
[  215.406421][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2552'.
[  215.430304][T13619] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  215.580052][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2553'.
[  215.597074][T13621] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  215.670592][T13628] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2556'.
[  215.712665][T13630] loop5: detected capacity change from 0 to 7
[  215.728813][T13630] Dev loop5: unable to read RDB block 7
[  215.731494][T13630]  loop5: unable to read partition table
[  215.733955][T13630] loop5: partition table beyond EOD, truncated
[  215.743361][T13630] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  215.918196][T13641] loop5: detected capacity change from 0 to 7
[  215.928955][T13641] Dev loop5: unable to read RDB block 7
[  215.936616][T13641]  loop5: AHDI p2
[  215.945704][T13641] loop5: partition table partially beyond EOD, truncated
[  216.798172][T13657] overlay: Unknown parameter 'override_creds�'
[  216.888250][   T50] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  216.930140][T13664] netlink: 'syz.8.2571': attribute type 10 has an invalid length.
[  216.993759][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2570'.
[  217.007795][T13665] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  217.061225][   T50] usb 10-1: Using ep0 maxpacket: 8
[  217.067792][   T50] usb 10-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  217.087137][   T50] usb 10-1: config 1 interface 0 has no altsetting 0
[  217.092021][   T50] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40
[  217.094893][   T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.099004][   T50] usb 10-1: Product: syz
[  217.100342][   T50] usb 10-1: Manufacturer: syz
[  217.105415][   T50] usb 10-1: SerialNumber: syz
[  217.116119][T13667] fuse: Unknown parameter 'usP�`5�h�T����T�er_id'
[  217.121271][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2572'.
[  217.141958][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2573'.
[  217.149084][T13669] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  217.172307][T13673] IPv6: NLM_F_REPLACE set, but no existing node found!
[  217.525663][T13687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13687 comm=syz.6.2578
[  217.531561][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2578'.
[  217.706882][T13693] netlink: 'syz.8.2581': attribute type 10 has an invalid length.
[  218.158641][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2585'.
[  218.349974][T13716] netlink: 'syz.6.2587': attribute type 12 has an invalid length.
[  218.442203][T13718] nvme_tcp: malformed address passed: 127trdvcid=8009:8009
[  218.486849][T13721] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2589'.
[  218.757678][   T42] audit: type=1400 audit(1786637822.210:999): avc:  denied  { override_creds } for  pid=13726 comm="syz.8.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  218.829554][T13730] overlay: Unknown parameter 'override_creds�'
[  219.055153][T13736] netlink: 'syz.8.2594': attribute type 10 has an invalid length.
[  219.374962][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2600'.
[  219.389773][T13749] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  220.133194][T13758] loop5: detected capacity change from 0 to 7
[  220.149137][T13758] Dev loop5: unable to read RDB block 7
[  220.151282][T13758]  loop5: AHDI p2
[  220.152441][T13758] loop5: partition table partially beyond EOD, truncated
[  220.235770][   T50] usbhid 10-1:1.0: can't add hid device: -71
[  220.238162][   T50] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  220.242359][   T50] usb 10-1: USB disconnect, device number 21
[  220.305882][T13768] nvme_tcp: malformed address passed: 127truvcid=8009:8009
[  220.480018][T13772] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2606'.
[  220.484993][T13772] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  220.527917][   T42] audit: type=1400 audit(1786637823.990:1000): avc:  denied  { map } for  pid=13774 comm="syz.5.2609" path="socket:[53637]" dev="sockfs" ino=53637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  220.545151][   T42] audit: type=1400 audit(1786637824.000:1001): avc:  denied  { read write } for  pid=13774 comm="syz.5.2609" path="socket:[53637]" dev="sockfs" ino=53637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  220.673401][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2610'.
[  220.698720][T13784] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  220.701419][   T42] audit: type=1400 audit(1786637824.160:1002): avc:  denied  { map } for  pid=13788 comm="syz.9.2611" path="socket:[53667]" dev="sockfs" ino=53667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  220.989467][T12265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  221.193043][   T42] audit: type=1800 audit(1786637824.650:1003): pid=13815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2619" name="landingPage" dev="configfs" ino=52073 res=0 errno=0
[  221.204461][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2620'.
[  221.213772][T13814] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  221.345341][T13822] SET target dimension over the limit!
[  221.378931][   T42] audit: type=1400 audit(1786637824.840:1004): avc:  denied  { getopt } for  pid=13828 comm="syz.9.2625" lport=36059 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  221.424138][T13833] netlink: 'syz.6.2627': attribute type 1 has an invalid length.
[  221.459337][T13836] netlink: 200 bytes leftover after parsing attributes in process `syz.8.2626'.
[  221.468327][T13833] gretap1: entered allmulticast mode
[  221.478230][T13833] bond3: (slave gretap1): making interface the new active one
[  221.482022][T13833] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  221.671544][T13841] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=262 sclass=netlink_xfrm_socket pid=13841 comm=syz.8.2629
[  222.319758][   T42] audit: type=1800 audit(1786637825.780:1005): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2631" name="landingPage" dev="configfs" ino=52101 res=0 errno=0
[  222.492177][T13855] 9p: Unknown Cache mode or invalid value f
[  222.620199][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2635'.
[  222.631528][T13857] netlink: 'syz.9.2635': attribute type 16 has an invalid length.
[  222.638433][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2635'.
[  222.678416][T13857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=13857 comm=syz.9.2635
[  222.687723][T13859] netlink: 'syz.8.2636': attribute type 10 has an invalid length.
[  222.698067][T13861] loop5: detected capacity change from 0 to 7
[  222.702780][T13861] Dev loop5: unable to read RDB block 7
[  222.711122][T13861]  loop5: AHDI p2
[  222.712637][T13861] loop5: partition table partially beyond EOD, truncated
[  222.803892][   T42] audit: type=1800 audit(1786637826.260:1006): pid=13863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2638" name="p_chmask" dev="configfs" ino=52109 res=0 errno=0
[  222.870994][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2639'.
[  222.973490][T13869] bond0: entered promiscuous mode
[  222.976409][T13869] bond_slave_0: entered promiscuous mode
[  222.986595][T13869] bond_slave_1: entered promiscuous mode
[  222.991581][T13869] batadv0: entered promiscuous mode
[  223.024213][T13869] 8021q: adding VLAN 0 to HW filter on device hsr1
[  223.059159][T13875] loop9: detected capacity change from 0 to 255852544
[  223.064502][T13869] bond0: left promiscuous mode
[  223.066438][T13869] bond_slave_0: left promiscuous mode
[  223.075118][T13869] bond_slave_1: left promiscuous mode
[  223.083870][T13869] batadv0: left promiscuous mode
[  223.105982][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2642'.
[  223.111884][T13871] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  223.135716][T13875] Invalid logical block size (4)
[  223.378938][T13882] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2646'.
[  223.382869][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2646'.
[  223.403827][T13882] qnx6: unable to set blocksize
[  223.493652][T13877] bond3: (slave gretap1): Releasing active interface
[  223.512711][T13885] openvswitch: netlink: EtherType 0 is less than min 600
[  223.518237][T13880] openvswitch: netlink: EtherType 0 is less than min 600
[  223.791166][   T42] audit: type=1800 audit(1786637827.250:1007): pid=13892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2649" name="p_chmask" dev="configfs" ino=52142 res=0 errno=0
[  223.930000][   T42] audit: type=1800 audit(1786637827.390:1008): pid=13896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2652" name="p_chmask" dev="configfs" ino=52146 res=0 errno=0
[  224.074081][T13903] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  224.247073][T13904] IPVS: You probably need to specify IP address on multicast interface.
[  224.257023][T13904] IPVS: Error connecting to the multicast addr
[  224.519174][T13925] netlink: 'syz.6.2662': attribute type 10 has an invalid length.
[  225.080005][   T42] audit: type=1400 audit(1786637828.540:1009): avc:  denied  { mounton } for  pid=13935 comm="syz.5.2665" path="/508/my_tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  225.088221][T13936] xt_ipcomp: unknown flags 1D
[  225.089711][T13937] xt_ipcomp: unknown flags 1D
[  225.126567][T13939] loop5: detected capacity change from 0 to 7
[  225.130628][T13939] Dev loop5: unable to read RDB block 7
[  225.133616][T13941] FAULT_INJECTION: forcing a failure.
[  225.133616][T13941] name failslab, interval 1, probability 0, space 0, times 0
[  225.135556][T13939]  loop5: AHDI p2
[  225.140420][T13941] CPU: 2 UID: 0 PID: 13941 Comm: syz.9.2668 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  225.140438][T13941] Tainted: [L]=SOFTLOCKUP
[  225.140442][T13941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  225.140448][T13941] Call Trace:
[  225.140452][T13941]  <TASK>
[  225.140457][T13941]  dump_stack_lvl+0x100/0x190
[  225.140476][T13941]  should_fail_ex.cold+0x5/0xa
[  225.140491][T13941]  should_failslab+0xc2/0x120
[  225.140507][T13941]  __kmalloc_noprof+0xfc/0x820
[  225.140520][T13941]  ? rcu_is_watching+0x12/0xc0
[  225.140548][T13941]  ? tomoyo_realpath_from_path+0xb6/0x690
[  225.140562][T13941]  tomoyo_realpath_from_path+0xb6/0x690
[  225.140575][T13941]  tomoyo_check_open_permission+0x2af/0x3c0
[  225.140593][T13941]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  225.140613][T13941]  ? hook_file_open+0x24f/0x8f0
[  225.140635][T13941]  ? path_get+0x61/0x80
[  225.140650][T13941]  tomoyo_file_open+0x6b/0x90
[  225.140662][T13941]  security_file_open+0xb5/0x1e0
[  225.140673][T13941]  do_dentry_open+0x588/0x14d0
[  225.140689][T13941]  vfs_open+0x82/0x3f0
[  225.140703][T13941]  path_openat+0x2873/0x4280
[  225.140721][T13941]  ? __pfx_path_openat+0x10/0x10
[  225.140736][T13941]  do_file_open+0x20e/0x430
[  225.140748][T13941]  ? __pfx_do_file_open+0x10/0x10
[  225.140769][T13941]  ? alloc_fd+0x471/0x7a0
[  225.140783][T13941]  ? do_getname+0x191/0x390
[  225.140798][T13941]  do_sys_openat2+0x10f/0x1e0
[  225.140811][T13941]  ? __pfx_do_sys_openat2+0x10/0x10
[  225.140826][T13941]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  225.140841][T13941]  ? __fget_files+0x21f/0x3d0
[  225.140854][T13941]  __x64_sys_openat+0x12d/0x210
[  225.140868][T13941]  ? __pfx___x64_sys_openat+0x10/0x10
[  225.140881][T13941]  ? ksys_write+0x1ac/0x250
[  225.140895][T13941]  do_syscall_64+0x115/0x870
[  225.140909][T13941]  ? clear_bhb_loop+0x70/0xc0
[  225.140922][T13941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.140932][T13941] RIP: 0033:0x7f229ad9e0d9
[  225.140953][T13941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.140966][T13941] RSP: 002b:00007f229bba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  225.140978][T13941] RAX: ffffffffffffffda RBX: 00007f229b025fa0 RCX: 00007f229ad9e0d9
[  225.140984][T13941] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  225.140991][T13941] RBP: 00007f229bba0090 R08: 0000000000000000 R09: 0000000000000000
[  225.140997][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.141002][T13941] R13: 00007f229b026038 R14: 00007f229b025fa0 R15: 00007ffeb4c081d8
[  225.141016][T13941]  </TASK>
[  225.141107][T13941] ERROR: Out of memory at tomoyo_realpath_from_path.
[  225.144370][T13939] loop5: partition table partially beyond EOD, 
[  225.152304][   T42] audit: type=1800 audit(1786637828.610:1010): pid=13941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2668" name="landingPage" dev="configfs" ino=54333 res=0 errno=0
[  225.164366][T13939] truncated
[  225.500891][T13952] __nla_validate_parse: 6 callbacks suppressed
[  225.500907][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2672'.
[  225.731831][T13962] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2675'.
[  225.758319][   T42] audit: type=1800 audit(1786637829.220:1011): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2673" name="p_chmask" dev="configfs" ino=52648 res=0 errno=0
[  225.849405][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2676'.
[  225.863854][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2679'.
[  225.875129][T13971] bond0: entered promiscuous mode
[  225.876842][T13971] bond_slave_0: entered promiscuous mode
[  225.878742][T13971] bond_slave_1: entered promiscuous mode
[  225.889124][T13972] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  225.897853][T13971] gretap0: entered promiscuous mode
[  225.903416][T13973] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  225.910890][T13971] hsr1: entered promiscuous mode
[  225.949778][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2679'.
[  225.979912][T13971] team_slave_0 (unregistering): left promiscuous mode
[  225.989900][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2680'.
[  225.997212][T13971] team0: Port device team_slave_0 removed
[  226.068959][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.074545][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.080062][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.082809][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.089704][T13985] netlink: 'syz.8.2680': attribute type 10 has an invalid length.
[  226.089766][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.099027][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.103176][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.108787][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.115489][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.118551][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.123858][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.131387][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.133951][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.136662][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.138849][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.141422][T13980] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2680'.
[  226.144682][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.146837][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.148983][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.151026][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.153308][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.156186][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.158327][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.160457][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.162965][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.165500][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.168033][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.170320][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.172965][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.175918][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.178384][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.180449][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.182467][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.185521][T13984] binder: 13983:13984 ioctl 40046205 0 returned -22
[  226.240502][T13990] openvswitch: netlink: IP tunnel TTL not specified.
[  226.332826][T13994] FAULT_INJECTION: forcing a failure.
[  226.332826][T13994] name failslab, interval 1, probability 0, space 0, times 0
[  226.352271][T13985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.367228][T13985] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  226.427595][T13997] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2686'.
[  226.434532][T13994] CPU: 0 UID: 0 PID: 13994 Comm: syz.6.2685 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  226.434565][T13994] Tainted: [L]=SOFTLOCKUP
[  226.434572][T13994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  226.434582][T13994] Call Trace:
[  226.434588][T13994]  <TASK>
[  226.434597][T13994]  dump_stack_lvl+0x100/0x190
[  226.434626][T13994]  should_fail_ex.cold+0x5/0xa
[  226.434650][T13994]  should_failslab+0xc2/0x120
[  226.434674][T13994]  __kmalloc_cache_noprof+0x91/0x6c0
[  226.434693][T13994]  ? __configfs_open_file+0xcb/0x9c0
[  226.434726][T13994]  __configfs_open_file+0xcb/0x9c0
[  226.434754][T13994]  do_dentry_open+0x6ab/0x14d0
[  226.434772][T13994]  ? __pfx_configfs_open_file+0x10/0x10
[  226.434799][T13994]  vfs_open+0x82/0x3f0
[  226.434824][T13994]  path_openat+0x2873/0x4280
[  226.434854][T13994]  ? __pfx_path_openat+0x10/0x10
[  226.434881][T13994]  do_file_open+0x20e/0x430
[  226.434902][T13994]  ? __pfx_do_file_open+0x10/0x10
[  226.434939][T13994]  ? alloc_fd+0x471/0x7a0
[  226.434962][T13994]  ? do_getname+0x191/0x390
[  226.434987][T13994]  do_sys_openat2+0x10f/0x1e0
[  226.435010][T13994]  ? __pfx_do_sys_openat2+0x10/0x10
[  226.435033][T13994]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  226.435060][T13994]  ? __fget_files+0x21f/0x3d0
[  226.435082][T13994]  __x64_sys_openat+0x12d/0x210
[  226.435106][T13994]  ? __pfx___x64_sys_openat+0x10/0x10
[  226.435128][T13994]  ? ksys_write+0x1ac/0x250
[  226.435152][T13994]  do_syscall_64+0x115/0x870
[  226.435175][T13994]  ? clear_bhb_loop+0x70/0xc0
[  226.435196][T13994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.435215][T13994] RIP: 0033:0x7f2afcb9e0d9
[  226.435230][T13994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.435247][T13994] RSP: 002b:00007f2afdab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  226.435266][T13994] RAX: ffffffffffffffda RBX: 00007f2afce25fa0 RCX: 00007f2afcb9e0d9
[  226.435277][T13994] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  226.435288][T13994] RBP: 00007f2afdab2090 R08: 0000000000000000 R09: 0000000000000000
[  226.435299][T13994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  226.435309][T13994] R13: 00007f2afce26038 R14: 00007f2afce25fa0 R15: 00007ffe016d6fd8
[  226.435334][T13994]  </TASK>
[  226.484223][   T42] audit: type=1400 audit(1786637829.910:1012): avc:  denied  { write } for  pid=14000 comm="syz.8.2688" name="configs" dev="configfs" ino=9698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  226.562161][   T42] audit: type=1800 audit(1786637830.020:1013): pid=14002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2688" name="p_chmask" dev="configfs" ino=52680 res=0 errno=0
[  226.979443][T14026] netlink: 'syz.8.2696': attribute type 12 has an invalid length.
[  227.239059][T14025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.368362][T14025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.444005][T14025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.523517][T14025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.544485][   T50] usb 13-1: new high-speed USB device number 10 using dummy_hcd
[  227.694425][   T50] usb 13-1: Using ep0 maxpacket: 16
[  227.703603][   T50] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.713781][   T50] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.719783][   T50] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  227.726855][   T50] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  227.738145][   T50] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.742115][   T50] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  227.745856][   T50] usb 13-1: SerialNumber: syz
[  227.759650][   T50] hub 13-1:1.0: bad descriptor, ignoring hub
[  227.763996][   T50] hub 13-1:1.0: probe with driver hub failed with error -5
[  227.777920][   T50] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -22
[  227.829444][T14042] FAULT_INJECTION: forcing a failure.
[  227.829444][T14042] name failslab, interval 1, probability 0, space 0, times 0
[  227.840047][T14042] CPU: 2 UID: 0 PID: 14042 Comm: syz.9.2700 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  227.840067][T14042] Tainted: [L]=SOFTLOCKUP
[  227.840071][T14042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.840078][T14042] Call Trace:
[  227.840082][T14042]  <TASK>
[  227.840087][T14042]  dump_stack_lvl+0x100/0x190
[  227.840107][T14042]  should_fail_ex.cold+0x5/0xa
[  227.840121][T14042]  should_failslab+0xc2/0x120
[  227.840136][T14042]  __kmalloc_cache_noprof+0x91/0x6c0
[  227.840148][T14042]  ? __configfs_open_file+0xcb/0x9c0
[  227.840165][T14042]  __configfs_open_file+0xcb/0x9c0
[  227.840200][T14042]  do_dentry_open+0x6ab/0x14d0
[  227.840211][T14042]  ? __pfx_configfs_open_file+0x10/0x10
[  227.840227][T14042]  vfs_open+0x82/0x3f0
[  227.840242][T14042]  path_openat+0x2873/0x4280
[  227.840259][T14042]  ? __pfx_path_openat+0x10/0x10
[  227.840275][T14042]  do_file_open+0x20e/0x430
[  227.840287][T14042]  ? __pfx_do_file_open+0x10/0x10
[  227.840308][T14042]  ? alloc_fd+0x471/0x7a0
[  227.840321][T14042]  ? do_getname+0x191/0x390
[  227.840336][T14042]  do_sys_openat2+0x10f/0x1e0
[  227.840349][T14042]  ? __pfx_do_sys_openat2+0x10/0x10
[  227.840363][T14042]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.840378][T14042]  ? __fget_files+0x21f/0x3d0
[  227.840391][T14042]  __x64_sys_openat+0x12d/0x210
[  227.840405][T14042]  ? __pfx___x64_sys_openat+0x10/0x10
[  227.840418][T14042]  ? ksys_write+0x1ac/0x250
[  227.840432][T14042]  do_syscall_64+0x115/0x870
[  227.840445][T14042]  ? clear_bhb_loop+0x70/0xc0
[  227.840458][T14042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.840469][T14042] RIP: 0033:0x7f229ad9e0d9
[  227.840479][T14042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.840489][T14042] RSP: 002b:00007f229bba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  227.840500][T14042] RAX: ffffffffffffffda RBX: 00007f229b025fa0 RCX: 00007f229ad9e0d9
[  227.840507][T14042] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  227.840513][T14042] RBP: 00007f229bba0090 R08: 0000000000000000 R09: 0000000000000000
[  227.840519][T14042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  227.840525][T14042] R13: 00007f229b026038 R14: 00007f229b025fa0 R15: 00007ffeb4c081d8
[  227.840538][T14042]  </TASK>
[  227.946575][   T42] audit: type=1800 audit(1786637831.390:1014): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2701" name="p_chmask" dev="configfs" ino=55351 res=0 errno=0
[  227.954436][   T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.956943][   T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.959483][   T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.959872][T14044] FAULT_INJECTION: forcing a failure.
[  227.959872][T14044] name failslab, interval 1, probability 0, space 0, times 0
[  227.961841][   T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.984442][T14044] CPU: 2 UID: 0 PID: 14044 Comm: syz.5.2702 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  227.984464][T14044] Tainted: [L]=SOFTLOCKUP
[  227.984468][T14044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  227.984474][T14044] Call Trace:
[  227.984492][T14044]  <TASK>
[  227.984497][T14044]  dump_stack_lvl+0x100/0x190
[  227.984529][T14044]  should_fail_ex.cold+0x5/0xa
[  227.984544][T14044]  should_failslab+0xc2/0x120
[  227.984559][T14044]  kmem_cache_alloc_noprof+0x91/0x6a0
[  227.984572][T14044]  ? __pfx_map_id_range_down+0x10/0x10
[  227.984586][T14044]  ? security_inode_alloc+0x3b/0x2c0
[  227.984604][T14044]  security_inode_alloc+0x3b/0x2c0
[  227.984618][T14044]  inode_init_always_gfp+0xc77/0xfb0
[  227.984634][T14044]  alloc_inode+0x8e/0x250
[  227.984649][T14044]  new_inode+0x22/0x1c0
[  227.984663][T14044]  ? do_raw_spin_lock+0x128/0x260
[  227.984680][T14044]  configfs_new_inode+0x24/0x4a0
[  227.984695][T14044]  configfs_create+0xcc/0x290
[  227.984708][T14044]  configfs_lookup+0x38f/0x7d0
[  227.984722][T14044]  ? __pfx_configfs_lookup+0x10/0x10
[  227.984738][T14044]  path_openat+0x241f/0x4280
[  227.984756][T14044]  ? __pfx_path_openat+0x10/0x10
[  227.984771][T14044]  do_file_open+0x20e/0x430
[  227.984783][T14044]  ? __pfx_do_file_open+0x10/0x10
[  227.984804][T14044]  ? alloc_fd+0x471/0x7a0
[  227.984817][T14044]  ? do_getname+0x191/0x390
[  227.984832][T14044]  do_sys_openat2+0x10f/0x1e0
[  227.984846][T14044]  ? __pfx_do_sys_openat2+0x10/0x10
[  227.984861][T14044]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.984876][T14044]  ? __fget_files+0x21f/0x3d0
[  227.984889][T14044]  __x64_sys_openat+0x12d/0x210
[  227.984903][T14044]  ? __pfx___x64_sys_openat+0x10/0x10
[  227.984917][T14044]  ? ksys_write+0x1ac/0x250
[  227.984931][T14044]  do_syscall_64+0x115/0x870
[  227.984944][T14044]  ? clear_bhb_loop+0x70/0xc0
[  227.984957][T14044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.984968][T14044] RIP: 0033:0x7f266179e0d9
[  227.984978][T14044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.984988][T14044] RSP: 002b:00007f2662680028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  227.985000][T14044] RAX: ffffffffffffffda RBX: 00007f2661a25fa0 RCX: 00007f266179e0d9
[  227.985006][T14044] RDX: 0000000000002080 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  227.985013][T14044] RBP: 00007f2662680090 R08: 0000000000000000 R09: 0000000000000000
[  227.985019][T14044] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001
[  227.985025][T14044] R13: 00007f2661a26038 R14: 00007f2661a25fa0 R15: 00007fff23b8c808
[  227.985038][T14044]  </TASK>
[  228.274549][   T50] usb 13-1: USB disconnect, device number 10
[  228.340066][T14059] bond3: (slave veth7): Releasing active interface
[  228.351671][T14053] netlink: 200 bytes leftover after parsing attributes in process `syz.9.2706'.
[  228.432443][T14065] overlayfs: failed to resolve './file0': -2
[  228.588263][T14072] FAULT_INJECTION: forcing a failure.
[  228.588263][T14072] name failslab, interval 1, probability 0, space 0, times 0
[  228.597246][T14072] CPU: 2 UID: 0 PID: 14072 Comm: syz.6.2712 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  228.597268][T14072] Tainted: [L]=SOFTLOCKUP
[  228.597272][T14072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  228.597278][T14072] Call Trace:
[  228.597282][T14072]  <TASK>
[  228.597287][T14072]  dump_stack_lvl+0x100/0x190
[  228.597305][T14072]  should_fail_ex.cold+0x5/0xa
[  228.597321][T14072]  should_failslab+0xc2/0x120
[  228.597336][T14072]  __kmalloc_cache_noprof+0x91/0x6c0
[  228.597347][T14072]  ? ima_calc_file_hash_tfm+0x236/0x350
[  228.597362][T14072]  ima_calc_file_hash_tfm+0x236/0x350
[  228.597394][T14072]  ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[  228.597405][T14072]  ? is_bpf_text_address+0x8a/0x1a0
[  228.597448][T14072]  ? ima_alloc_tfm+0x21a/0x2e0
[  228.597461][T14072]  ima_calc_file_hash+0x1e3/0x380
[  228.597474][T14072]  ima_collect_measurement+0x94f/0xb30
[  228.597490][T14072]  ? __pfx_ima_collect_measurement+0x10/0x10
[  228.597510][T14072]  ? process_measurement+0x5ab/0x2350
[  228.597521][T14072]  ? is_bad_inode+0xd/0x40
[  228.597531][T14072]  ? xattr_resolve_name+0x27d/0x3f0
[  228.597545][T14072]  ? vfs_getxattr_alloc+0xec/0x350
[  228.597565][T14072]  ? ima_get_hash_algo+0x241/0x400
[  228.597581][T14072]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  228.597601][T14072]  ? process_measurement+0xdfe/0x2350
[  228.597611][T14072]  process_measurement+0xdfe/0x2350
[  228.597626][T14072]  ? __pfx_process_measurement+0x10/0x10
[  228.597657][T14072]  ? __configfs_open_file+0x6ca/0x9c0
[  228.597673][T14072]  ima_file_check+0xc3/0x110
[  228.597684][T14072]  ? __pfx_ima_file_check+0x10/0x10
[  228.597699][T14072]  security_file_post_open+0xc4/0x210
[  228.597724][T14072]  path_openat+0x985/0x4280
[  228.597742][T14072]  ? __pfx_path_openat+0x10/0x10
[  228.597757][T14072]  do_file_open+0x20e/0x430
[  228.597769][T14072]  ? __pfx_do_file_open+0x10/0x10
[  228.597790][T14072]  ? alloc_fd+0x471/0x7a0
[  228.597803][T14072]  ? do_getname+0x191/0x390
[  228.597818][T14072]  do_sys_openat2+0x10f/0x1e0
[  228.597833][T14072]  ? __pfx_do_sys_openat2+0x10/0x10
[  228.597846][T14072]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  228.597862][T14072]  ? __fget_files+0x21f/0x3d0
[  228.597875][T14072]  __x64_sys_openat+0x12d/0x210
[  228.597889][T14072]  ? __pfx___x64_sys_openat+0x10/0x10
[  228.597902][T14072]  ? ksys_write+0x1ac/0x250
[  228.597916][T14072]  do_syscall_64+0x115/0x870
[  228.597929][T14072]  ? clear_bhb_loop+0x70/0xc0
[  228.597943][T14072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.597954][T14072] RIP: 0033:0x7f2afcb9e0d9
[  228.597964][T14072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.597974][T14072] RSP: 002b:00007f2afdab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  228.597986][T14072] RAX: ffffffffffffffda RBX: 00007f2afce25fa0 RCX: 00007f2afcb9e0d9
[  228.597993][T14072] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  228.597999][T14072] RBP: 00007f2afdab2090 R08: 0000000000000000 R09: 0000000000000000
[  228.598005][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  228.598011][T14072] R13: 00007f2afce26038 R14: 00007f2afce25fa0 R15: 00007ffe016d6fd8
[  228.598025][T14072]  </TASK>
[  228.598151][   T42] audit: type=1800 audit(1786637832.060:1015): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2712" name="landingPage" dev="configfs" ino=54787 res=0 errno=0
[  228.741539][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2713'.
[  228.806143][T14078] FAULT_INJECTION: forcing a failure.
[  228.806143][T14078] name failslab, interval 1, probability 0, space 0, times 0
[  228.814458][T14078] CPU: 3 UID: 0 PID: 14078 Comm: syz.6.2714 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  228.814505][T14078] Tainted: [L]=SOFTLOCKUP
[  228.814511][T14078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  228.814520][T14078] Call Trace:
[  228.814527][T14078]  <TASK>
[  228.814533][T14078]  dump_stack_lvl+0x100/0x190
[  228.814560][T14078]  should_fail_ex.cold+0x5/0xa
[  228.814581][T14078]  should_failslab+0xc2/0x120
[  228.814602][T14078]  __kmalloc_noprof+0xfc/0x820
[  228.814632][T14078]  ? rcu_is_watching+0x12/0xc0
[  228.814659][T14078]  ? tomoyo_realpath_from_path+0xb6/0x690
[  228.814681][T14078]  tomoyo_realpath_from_path+0xb6/0x690
[  228.814701][T14078]  tomoyo_check_open_permission+0x2af/0x3c0
[  228.814725][T14078]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  228.814754][T14078]  ? hook_file_open+0x24f/0x8f0
[  228.814795][T14078]  ? path_get+0x61/0x80
[  228.814818][T14078]  tomoyo_file_open+0x6b/0x90
[  228.814836][T14078]  security_file_open+0xb5/0x1e0
[  228.814852][T14078]  do_dentry_open+0x588/0x14d0
[  228.814874][T14078]  vfs_open+0x82/0x3f0
[  228.814895][T14078]  path_openat+0x2873/0x4280
[  228.814924][T14078]  ? __pfx_path_openat+0x10/0x10
[  228.814953][T14078]  do_file_open+0x20e/0x430
[  228.814972][T14078]  ? __pfx_do_file_open+0x10/0x10
[  228.815005][T14078]  ? alloc_fd+0x471/0x7a0
[  228.815024][T14078]  ? do_getname+0x191/0x390
[  228.815045][T14078]  do_sys_openat2+0x10f/0x1e0
[  228.815065][T14078]  ? __pfx_do_sys_openat2+0x10/0x10
[  228.815090][T14078]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  228.815116][T14078]  ? __fget_files+0x21f/0x3d0
[  228.815135][T14078]  __x64_sys_openat+0x12d/0x210
[  228.815155][T14078]  ? __pfx___x64_sys_openat+0x10/0x10
[  228.815174][T14078]  ? ksys_write+0x1ac/0x250
[  228.815195][T14078]  do_syscall_64+0x115/0x870
[  228.815214][T14078]  ? clear_bhb_loop+0x70/0xc0
[  228.815238][T14078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.815258][T14078] RIP: 0033:0x7f2afcb9e0d9
[  228.815272][T14078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.815287][T14078] RSP: 002b:00007f2afdab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  228.815303][T14078] RAX: ffffffffffffffda RBX: 00007f2afce25fa0 RCX: 00007f2afcb9e0d9
[  228.815313][T14078] RDX: 0000000000002080 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  228.815323][T14078] RBP: 00007f2afdab2090 R08: 0000000000000000 R09: 0000000000000000
[  228.815332][T14078] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001
[  228.815341][T14078] R13: 00007f2afce26038 R14: 00007f2afce25fa0 R15: 00007ffe016d6fd8
[  228.815362][T14078]  </TASK>
[  228.844421][T14078] ERROR: Out of memory at tomoyo_realpath_from_path.
[  228.932367][   T42] audit: type=1800 audit(1786637832.390:1016): pid=14078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2714" name="p_chmask" dev="configfs" ino=54808 res=0 errno=0
[  229.376879][   T42] audit: type=1400 audit(1786637832.840:1017): avc:  denied  { getopt } for  pid=14090 comm="syz.8.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  229.519799][   T42] audit: type=1400 audit(1786637832.980:1018): avc:  denied  { setopt } for  pid=14099 comm="syz.9.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  229.633941][T14110] loop5: detected capacity change from 0 to 7
[  229.645520][T14110] Dev loop5: unable to read RDB block 7
[  229.647316][T14110]  loop5: AHDI p2
[  229.653365][T14110] loop5: partition table partially beyond EOD, truncated
[  229.769285][   T42] audit: type=1400 audit(1786637833.230:1019): avc:  denied  { ioctl } for  pid=14119 comm="syz.8.2728" path="net:[4026533304]" dev="nsfs" ino=4026533304 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  230.005693][T14131] program syz.8.2730 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  230.048713][   T42] audit: type=1400 audit(1786637833.510:1020): avc:  denied  { ioctl } for  pid=14135 comm="syz.8.2731" path="socket:[55001]" dev="sockfs" ino=55001 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  230.060868][T14136] 9pnet_virtio: no channels available for device ./file0
[  230.068825][   T42] audit: type=1400 audit(1786637833.520:1021): avc:  denied  { listen } for  pid=14135 comm="syz.8.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  230.084905][   T42] audit: type=1400 audit(1786637833.520:1022): avc:  denied  { mounton } for  pid=14135 comm="syz.8.2731" path="/487/file0" dev="tmpfs" ino=2680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  230.139450][   T42] audit: type=1400 audit(1786637833.600:1023): avc:  denied  { search } for  pid=14142 comm="syz.8.2733" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  230.152235][T14143] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  230.164539][   T42] audit: type=1400 audit(1786637833.610:1024): avc:  denied  { read write } for  pid=14142 comm="syz.8.2733" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[  230.178947][   T42] audit: type=1400 audit(1786637833.610:1025): avc:  denied  { open } for  pid=14142 comm="syz.8.2733" path="/488/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[  230.530566][T14158] netlink: 'syz.9.2739': attribute type 1 has an invalid length.
[  230.537981][T14158] __nla_validate_parse: 3 callbacks suppressed
[  230.537992][T14158] netlink: 232 bytes leftover after parsing attributes in process `syz.9.2739'.
[  230.553408][T14158] netlink: 'syz.9.2739': attribute type 1 has an invalid length.
[  230.736112][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2740'.
[  230.778351][ T5803] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.786429][T14163] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  230.804750][T14166] netlink: 208 bytes leftover after parsing attributes in process `syz.9.2743'.
[  230.815853][ T5803] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.984246][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.994392][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.999998][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  231.006609][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  231.012051][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  231.385204][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.392461][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.398265][ T5803] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.401523][ T5803] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.406607][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.418433][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.439011][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.458889][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.475115][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.494337][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.541447][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.559950][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.572875][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.584482][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.592436][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.605374][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.632938][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.645499][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.653309][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.657071][ T5803] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.663698][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.673920][ T5803] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.679940][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.698399][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.712664][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.728972][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.741629][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.754088][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.767016][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.780877][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.791591][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.796001][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.801487][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.807855][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.812728][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.816959][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.819841][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.822017][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.824160][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.827322][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.829483][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.831660][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.833828][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.839831][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.843080][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.846731][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.855334][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.859997][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.871236][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.882092][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.892861][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.911162][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  231.922616][T14179] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  232.178171][ T5803] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.187404][ T5803] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.271539][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2752'.
[  232.328170][T14202] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  232.554928][T14212] loop5: detected capacity change from 0 to 7
[  232.579903][T14212] Dev loop5: unable to read RDB block 7
[  232.589595][T14212]  loop5: AHDI p2
[  232.598744][T14212] loop5: partition table partially beyond EOD, truncated
[  232.882432][T14222] ip6gretap1: entered promiscuous mode
[  232.884801][T14222] ip6gretap1: entered allmulticast mode
[  233.111053][T14171] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.123209][T14171] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.131921][T14171] bridge_slave_0: entered allmulticast mode
[  233.135084][ T5085] Bluetooth: hci1: command tx timeout
[  233.151846][T14171] bridge_slave_0: entered promiscuous mode
[  233.162342][ T5803] bridge_slave_1: left allmulticast mode
[  233.168068][ T5803] bridge_slave_1: left promiscuous mode
[  233.170788][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.204859][T14234] bpf: Bad value for 'uid'
[  233.222268][T14236] openvswitch: netlink: IP tunnel dst address not specified
[  233.228962][ T5803] bridge_slave_0: left allmulticast mode
[  233.236526][ T5803] bridge_slave_0: left promiscuous mode
[  233.247771][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.252585][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2762'.
[  233.272552][ T5803] dvmrp0: left allmulticast mode
[  233.329777][T14239] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2762'.
[  233.486448][T14243] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2764'.
[  233.623117][ T5803] bond1 (unregistering): (slave erspan1): Releasing active interface
[  233.627499][ T5803] erspan1 (unregistering): left promiscuous mode
[  233.768003][ T5803] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  233.889083][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.908361][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.966212][ T5803] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  233.971332][ T5803] bond0 (unregistering): Released all slaves
[  233.980750][ T5803] bond1 (unregistering): Released all slaves
[  234.001788][ T5803] bond2 (unregistering): (slave bond3): Releasing backup interface
[  234.005100][ T5803] bond2 (unregistering): Released all slaves
[  234.020256][ T5803] bond3 (unregistering): Released all slaves
[  234.032494][ T5803] bond4 (unregistering): Released all slaves
[  234.051080][ T5803] bond5 (unregistering): (slave veth3): Releasing active interface
[  234.078184][ T5803] bond5 (unregistering): Released all slaves
[  234.096267][ T5803] bond6 (unregistering): (slave veth5): Releasing active interface
[  234.129540][ T5803] bond6 (unregistering): Released all slaves
[  234.148023][ T5803] bond7 (unregistering): (slave veth7): Releasing active interface
[  234.157619][ T5803] bond7 (unregistering): Released all slaves
[  234.172636][T14171] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.177861][T14171] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.182549][T14171] bridge_slave_1: entered allmulticast mode
[  234.190334][T14171] bridge_slave_1: entered promiscuous mode
[  234.315962][T14171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.334135][T14171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.378163][   T42] kauditd_printk_skb: 208 callbacks suppressed
[  234.378176][   T42] audit: type=1400 audit(1786637837.840:1234): avc:  denied  { write } for  pid=14254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.406123][T14171] team0: Port device team_slave_0 added
[  234.422185][T14171] team0: Port device team_slave_1 added
[  234.501111][   T42] audit: type=1400 audit(1786637837.960:1235): avc:  denied  { write } for  pid=14262 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.519223][T14171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.522079][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  234.544882][T14171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.549487][T14171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.551983][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  234.575674][T14171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.621316][ T5437] 8021q: adding VLAN 0 to HW filter on device eth25
[  234.756927][T14171] hsr_slave_0: entered promiscuous mode
[  234.766859][T14171] hsr_slave_1: entered promiscuous mode
[  234.778687][T14171] debugfs: 'hsr0' already exists in 'hsr'
[  234.783088][T14171] Cannot create hsr debugfs directory
[  234.814429][ T5803] hsr_slave_0: left promiscuous mode
[  234.827377][ T5803] hsr_slave_1: left promiscuous mode
[  234.832740][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.843894][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.855498][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.862641][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.909216][T14268] loop5: detected capacity change from 0 to 2640
[  234.913976][T14268] buffer_io_error: 11 callbacks suppressed
[  234.913987][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.920129][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.923517][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.927181][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.930470][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.933821][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.937556][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.940847][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.944002][T14268] ldm_validate_partition_table(): Disk read failed.
[  234.946817][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.949568][T14268] Buffer I/O error on dev loop5, logical block 0, async page read
[  234.952246][T14268] Dev loop5: unable to read RDB block 0
[  234.954239][T14268]  loop5: unable to read partition table
[  234.956489][T14268] loop_reread_partitions: partition scan of loop5 (3�����) failed (rc=-5)
[  234.970909][ T5135] ldm_validate_partition_table(): Disk read failed.
[  234.973730][ T5135] Dev loop5: unable to read RDB block 0
[  234.976650][ T5135]  loop5: unable to read partition table
[  235.087852][ T5803] veth1_macvtap: left promiscuous mode
[  235.092032][ T5803] veth0_macvtap: left promiscuous mode
[  235.093884][ T5803] veth1_vlan: left promiscuous mode
[  235.099840][ T5803] veth0_vlan: left promiscuous mode
[  235.214810][ T5085] Bluetooth: hci1: command tx timeout
[  235.354882][T14279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14279 comm=syz.5.2770
[  235.377473][   T42] audit: type=1800 audit(1786637838.830:1236): pid=14279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2770" name="p_chmask" dev="configfs" ino=56422 res=0 errno=0
[  235.586015][ T5803] team0 (unregistering): Port device team_slave_1 removed
[  235.614994][ T5803] team0 (unregistering): Port device team_slave_0 removed
[  235.881488][T14273] bridge2: entered allmulticast mode
[  235.887268][T14274] bridge2: left allmulticast mode
[  235.961609][T14275] bond4: entered promiscuous mode
[  235.963628][T14275] bond4: entered allmulticast mode
[  235.973046][T14275] 8021q: adding VLAN 0 to HW filter on device bond4
[  235.988861][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2773'.
[  236.026491][T14295] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2772'.
[  236.145318][   T42] audit: type=1800 audit(1786637839.600:1237): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2774" name="idVendor" dev="configfs" ino=56448 res=0 errno=0
[  236.367754][T14308] GUP no longer grows the stack in syz.6.2776 (14308): 200000007000-20000000a000 (200000004000)
[  236.411528][   T42] audit: type=1400 audit(1786637839.870:1238): avc:  denied  { listen } for  pid=14313 comm="syz.5.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  236.412958][T14308] CPU: 0 UID: 0 PID: 14308 Comm: syz.6.2776 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  236.412990][T14308] Tainted: [L]=SOFTLOCKUP
[  236.412997][T14308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  236.413008][T14308] Call Trace:
[  236.413015][T14308]  <TASK>
[  236.413022][T14308]  dump_stack_lvl+0x100/0x190
[  236.413054][T14308]  gup_vma_lookup.cold+0x83/0x96
[  236.413082][T14308]  __get_user_pages+0x241/0x32a0
[  236.413131][T14308]  ? down_read_killable+0x35e/0x520
[  236.413159][T14308]  ? __pfx___get_user_pages+0x10/0x10
[  236.413188][T14308]  __gup_longterm_locked+0x87d/0x16f0
[  236.413213][T14308]  ? lock_acquire+0x1b9/0x370
[  236.413253][T14308]  ? __pfx___gup_longterm_locked+0x10/0x10
[  236.413277][T14308]  ? lock_acquire+0x1b9/0x370
[  236.413305][T14308]  gup_fast_fallback+0x16dc/0x2790
[  236.413348][T14308]  ? __pfx_gup_fast_fallback+0x10/0x10
[  236.413378][T14308]  ? __lock_acquire+0x49f/0x1a40
[  236.413400][T14308]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  236.413430][T14308]  get_user_pages_fast+0xa7/0xf0
[  236.413453][T14308]  ? __pfx_get_user_pages_fast+0x10/0x10
[  236.413481][T14308]  __iov_iter_get_pages_alloc+0x8f2/0x1f20
[  236.413509][T14308]  ? __mutex_lock+0x26d/0x1bd0
[  236.413529][T14308]  ? pipe_lock+0x69/0x80
[  236.413546][T14308]  ? __pfx___schedule+0x10/0x10
[  236.413566][T14308]  ? __pfx___iov_iter_get_pages_alloc+0x10/0x10
[  236.413597][T14308]  ? __pfx___mutex_lock+0x10/0x10
[  236.413620][T14308]  ? import_ubuf+0x1b6/0x220
[  236.413647][T14308]  iov_iter_get_pages2+0xa3/0x100
[  236.413671][T14308]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  236.413696][T14308]  ? wait_for_space+0x2ca/0x3b0
[  236.413734][T14308]  __do_sys_vmsplice+0x7dd/0x13c0
[  236.413761][T14308]  ? plist_del+0x308/0x510
[  236.413784][T14308]  ? __pfx___do_sys_vmsplice+0x10/0x10
[  236.413805][T14308]  ? futex_private_hash_put+0x115/0x1c0
[  236.413837][T14308]  ? futex_wake+0x220/0x5e0
[  236.413857][T14308]  ? __pfx_futex_wake+0x10/0x10
[  236.413915][T14308]  ? do_syscall_64+0x115/0x870
[  236.413937][T14308]  do_syscall_64+0x115/0x870
[  236.413957][T14308]  ? clear_bhb_loop+0x70/0xc0
[  236.413979][T14308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.413996][T14308] RIP: 0033:0x7f2afcb9e0d9
[  236.414012][T14308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.414028][T14308] RSP: 002b:00007f2afdab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  236.414047][T14308] RAX: ffffffffffffffda RBX: 00007f2afce25fa0 RCX: 00007f2afcb9e0d9
[  236.414059][T14308] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000006
[  236.414070][T14308] RBP: 00007f2afcc35024 R08: 0000000000000000 R09: 0000000000000000
[  236.414080][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.414092][T14308] R13: 00007f2afce26038 R14: 00007f2afce25fa0 R15: 00007ffe016d6fd8
[  236.414117][T14308]  </TASK>
[  236.475413][T14310] PID 14310 killed due to inadequate hugepage pool
[  236.485867][   T42] audit: type=1400 audit(1786637839.920:1239): avc:  denied  { write } for  pid=14304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  236.565765][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2778'.
[  236.619923][   T42] audit: type=1400 audit(1786637840.070:1240): avc:  denied  { write } for  pid=14321 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  236.703334][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2780'.
[  236.730940][T14330] loop5: detected capacity change from 0 to 7
[  236.736785][T14330] Dev loop5: unable to read RDB block 7
[  236.749683][T14330]  loop5: unable to read partition table
[  236.751415][T14330] loop5: partition table beyond EOD, truncated
[  236.774791][T14330] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  236.899006][   T42] audit: type=1400 audit(1786637840.360:1241): avc:  denied  { connect } for  pid=14335 comm="syz.6.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  236.964901][   T42] audit: type=1326 audit(1786637840.420:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14340 comm="syz.9.2786" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f229ad9e0d9 code=0x0
[  237.015924][T14338] netlink: 'syz.5.2785': attribute type 10 has an invalid length.
[  237.021974][ T5437] 8021q: adding VLAN 0 to HW filter on device eth26
[  237.087402][T14338] veth0_to_bond: entered promiscuous mode
[  237.213683][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2787'.
[  237.234621][T14346] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  237.263629][   T42] audit: type=1400 audit(1786637840.720:1243): avc:  denied  { write } for  pid=14349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  237.305465][ T5085] Bluetooth: hci1: command tx timeout
[  237.484931][ T5437] 8021q: adding VLAN 0 to HW filter on device eth27
[  237.654428][   T24] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  237.670540][ T5803] IPVS: stop unused estimator thread 0...
[  237.804435][   T24] usb 11-1: device descriptor read/64, error -71
[  237.808458][ T5437] 8021q: adding VLAN 0 to HW filter on device eth28
[  237.992636][T14171] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  238.006178][T14171] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  238.009224][T14171] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  238.028282][T14171] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  238.031491][T14171] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  238.043418][T14171] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  238.046314][T14171] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  238.054770][   T24] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  238.077595][T14171] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  238.184399][   T24] usb 11-1: device descriptor read/64, error -71
[  238.200964][T14171] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.210187][T14171] 8021q: adding VLAN 0 to HW filter on device team0
[  238.236679][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.238898][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.297557][   T24] usb usb11-port1: attempt power cycle
[  238.301886][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.304082][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.510727][T14403] xt_nfacct: accounting object `syz1' does not exist
[  238.622002][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2799'.
[  238.627870][T14418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.644595][   T24] usb 11-1: new high-speed USB device number 14 using dummy_hcd
[  238.681292][   T24] usb 11-1: device descriptor read/8, error -71
[  238.856422][T14171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.924640][   T24] usb 11-1: new high-speed USB device number 15 using dummy_hcd
[  238.956554][   T24] usb 11-1: device descriptor read/8, error -71
[  238.959381][T14171] veth0_vlan: entered promiscuous mode
[  238.966950][T14171] veth1_vlan: entered promiscuous mode
[  238.980758][T14171] veth0_macvtap: entered promiscuous mode
[  238.986127][T14171] veth1_macvtap: entered promiscuous mode
[  239.067959][   T24] usb usb11-port1: unable to enumerate USB device
[  239.072550][T14171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.106689][T14171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.123444][T14440] block2mtd: error: cannot open device /dev/loop0
[  239.214094][T14450] ������: renamed from vlan0 (while UP)
[  239.317283][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.320463][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.390022][ T5085] Bluetooth: hci1: command tx timeout
[  239.455630][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.458842][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.563635][   T42] kauditd_printk_skb: 13 callbacks suppressed
[  239.563648][   T42] audit: type=1400 audit(1786637843.020:1257): avc:  denied  { write } for  pid=14459 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  239.611954][T12268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.617492][T12268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.655034][T12268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.657935][T12268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.716591][T14470] openvswitch: netlink: Actions may not be safe on all matching packets
[  239.730728][   T42] audit: type=1800 audit(1786637843.190:1258): pid=14470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2813" name="p_chmask" dev="configfs" ino=57268 res=0 errno=0
[  239.828333][   T42] audit: type=1400 audit(1786637843.290:1259): avc:  denied  { setopt } for  pid=14474 comm="syz.9.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  239.853011][T14478] loop5: detected capacity change from 0 to 7
[  239.868011][T14478] Dev loop5: unable to read RDB block 7
[  239.870785][T14478]  loop5: unable to read partition table
[  239.876130][   T42] audit: type=1400 audit(1786637843.340:1260): avc:  denied  { write } for  pid=14471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  239.886711][T14478] loop5: partition table beyond EOD, truncated
[  239.896260][T14478] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  240.060133][   T42] audit: type=1400 audit(1786637843.520:1261): avc:  denied  { write } for  pid=14482 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.068327][T14490] loop5: detected capacity change from 0 to 7
[  240.078002][T14490] Dev loop5: unable to read RDB block 7
[  240.079855][T14490]  loop5: AHDI p2
[  240.083493][T14490] loop5: partition table partially beyond EOD, truncated
[  240.184075][   T42] audit: type=1400 audit(1786637843.640:1262): avc:  denied  { getopt } for  pid=14483 comm="syz.5.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  240.272681][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2821'.
[  240.288381][   T42] audit: type=1400 audit(1786637843.750:1263): avc:  denied  { write } for  pid=14495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.300595][T14498] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  240.425628][   T42] audit: type=1400 audit(1786637843.880:1264): avc:  denied  { write } for  pid=14507 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.549717][T14514] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  240.577607][T14512] netlink: 'syz.6.2824': attribute type 10 has an invalid length.
[  240.705630][   T42] audit: type=1800 audit(1786637844.170:1265): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2827" name="landingPage" dev="configfs" ino=57451 res=0 errno=0
[  240.731645][   T42] audit: type=1400 audit(1786637844.180:1266): avc:  denied  { write } for  pid=14516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.920974][T14542] netlink: 'syz.0.2833': attribute type 1 has an invalid length.
[  240.929821][T14542] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2833'.
[  240.945701][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2833'.
[  240.967776][T14547] nft_compat: unsupported protocol 0
[  241.054260][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2836'.
[  241.080612][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2838'.
[  241.084261][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2836'.
[  241.095098][T14549] netlink: 'syz.9.2836': attribute type 7 has an invalid length.
[  241.113343][T14549] netlink: 'syz.9.2836': attribute type 13 has an invalid length.
[  241.140646][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2836'.
[  241.200430][T14564] loop5: detected capacity change from 0 to 7
[  241.216922][T14564] Dev loop5: unable to read RDB block 7
[  241.221732][T14564]  loop5: AHDI p2
[  241.223285][T14564] loop5: partition table partially beyond EOD, truncated
[  241.448876][T14578] netlink: 'syz.5.2843': attribute type 30 has an invalid length.
[  241.462827][T14581] netlink: 'syz.0.2846': attribute type 1 has an invalid length.
[  241.466119][T14581] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2846'.
[  241.469073][T14581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2846'.
[  241.557461][T14571] netlink: 'syz.5.2843': attribute type 30 has an invalid length.
[  241.603368][T14584] netlink: 'syz.0.2847': attribute type 15 has an invalid length.
[  241.756971][T14588] IPv6: addrconf: prefix option has invalid lifetime
[  241.806558][T14582] geneve2: entered allmulticast mode
[  241.917849][T14591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2848'.
[  242.013804][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2850'.
[  242.022649][T14600] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  242.175383][T14612] loop5: detected capacity change from 0 to 7
[  242.211518][T14612] Dev loop5: unable to read RDB block 7
[  242.213351][T14612]  loop5: AHDI p2
[  242.221219][T14612] loop5: partition table partially beyond EOD, truncated
[  242.606477][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2861'.
[  242.641766][T14642] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  242.675709][T14648] netlink: 'syz.9.2862': attribute type 1 has an invalid length.
[  242.687464][T14648] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2862'.
[  242.816042][T14651] netlink: 'syz.6.2863': attribute type 10 has an invalid length.
[  243.380998][T14679] netlink: 'syz.6.2872': attribute type 1 has an invalid length.
[  243.390128][T14676] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  243.504435][T11692] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  243.591749][T14691] i2c i2c-0: new_device: Extra parameters
[  243.634537][T11692] usb 5-1: device descriptor read/64, error -71
[  243.771472][T14698] netlink: 'syz.6.2879': attribute type 1 has an invalid length.
[  243.870301][T14705] netlink: 'syz.5.2881': attribute type 1 has an invalid length.
[  243.874429][T11692] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  243.952755][T14698] 8021q: adding VLAN 0 to HW filter on device bond6
[  243.971533][T14698] bond5: (slave bond6): making interface the new active one
[  243.983341][T14698] bond5: (slave bond6): Enslaving as an active interface with an up link
[  244.015956][T11692] usb 5-1: device descriptor read/64, error -71
[  244.058350][T14702] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  244.064194][T14713] loop5: detected capacity change from 0 to 7
[  244.066187][T14704] bond5: (slave gretap1): Enslaving as a backup interface with an up link
[  244.077317][T14713] Dev loop5: unable to read RDB block 7
[  244.079357][T14713]  loop5: AHDI p2
[  244.082024][T14713] loop5: partition table partially beyond EOD, truncated
[  244.090185][T14698] 8021q: adding VLAN 0 to HW filter on device bond5
[  244.128342][T11692] usb usb5-port1: attempt power cycle
[  244.188218][T14715] netlink: 'syz.9.2883': attribute type 10 has an invalid length.
[  244.474447][T11692] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  244.491372][T14728] netlink: 'syz.9.2887': attribute type 1 has an invalid length.
[  244.494118][T14728] netlink: 'syz.9.2887': attribute type 1 has an invalid length.
[  244.498493][T11692] usb 5-1: device descriptor read/8, error -71
[  244.727568][T14737] netlink: 'syz.6.2890': attribute type 1 has an invalid length.
[  244.746797][T11692] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  244.766774][T11692] usb 5-1: device descriptor read/8, error -71
[  244.886805][T11692] usb usb5-port1: unable to enumerate USB device
[  244.940132][   T42] kauditd_printk_skb: 19 callbacks suppressed
[  244.940146][   T42] audit: type=1400 audit(1786637848.400:1286): avc:  denied  { getattr } for  pid=14738 comm="syz.6.2891" path="pid:[4026532868]" dev="nsfs" ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  245.162249][T14753] program syz.5.2892 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  245.170313][T14753] tmpfs: Bad value for 'mpol'
[  245.200125][   T42] audit: type=1400 audit(1786637848.660:1287): avc:  denied  { shutdown } for  pid=14749 comm="syz.9.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  245.308050][T14760] sock: sock_timestamping_bind_phc: sock not bind to device
[  245.449195][T14769] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  245.665822][T14773] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  245.673160][   T42] audit: type=1400 audit(1786637849.130:1288): avc:  denied  { unmount } for  pid=7725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  245.864011][T14783] syzkaller0: entered promiscuous mode
[  245.868329][T14783] syzkaller0: entered allmulticast mode
[  245.877067][T14784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.014504][    T9] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  246.157155][    T9] usb 10-1: device descriptor read/64, error -71
[  246.219640][T14800] __nla_validate_parse: 15 callbacks suppressed
[  246.219663][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2911'.
[  246.231938][T14800] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  246.245544][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2910'.
[  246.257779][T14798] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  246.353717][T14802] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2913'.
[  246.402542][T14804] loop5: detected capacity change from 0 to 7
[  246.404465][    T9] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  246.416363][   T42] audit: type=1800 audit(1786637849.870:1289): pid=14806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2912" name="p_chmask" dev="configfs" ino=55991 res=0 errno=0
[  246.427693][T14804] Dev loop5: unable to read RDB block 7
[  246.429476][T14804]  loop5: unable to read partition table
[  246.439440][T14804] loop5: partition table beyond EOD, truncated
[  246.444155][T14804] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  246.544407][    T9] usb 10-1: device descriptor read/64, error -71
[  246.545031][   T42] audit: type=1400 audit(1786637850.010:1290): avc:  denied  { append } for  pid=14807 comm="syz.0.2915" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  246.595788][T14814] No control pipe specified
[  246.654722][    T9] usb usb10-port1: attempt power cycle
[  246.705415][   T42] audit: type=1400 audit(1786637850.170:1291): avc:  denied  { map } for  pid=14817 comm="syz.6.2918" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  246.800777][T14826] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  246.811626][T14826] VFS: Can't find a romfs filesystem on dev nullb0.
[  246.811626][T14826] 
[  246.830183][T14824] netlink: 'syz.9.2920': attribute type 10 has an invalid length.
[  247.014426][    T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  247.035264][    T9] usb 10-1: device descriptor read/8, error -71
[  247.053814][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'.
[  247.073347][T14830] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  247.091197][T14835] tmpfs: Bad value for 'mpol'
[  247.124679][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2925'.
[  247.130093][T14836] block nbd0: Unsupported socket: should be TCP or UNIX.
[  247.299732][   T42] audit: type=1800 audit(1786637850.760:1292): pid=14845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2927" name="landingPage" dev="configfs" ino=53173 res=0 errno=0
[  247.304509][    T9] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  247.337634][    T9] usb 10-1: device descriptor read/8, error -71
[  247.420665][ T5730] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.429197][ T5730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.435292][ T5730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.451247][    T9] usb usb10-port1: unable to enumerate USB device
[  247.459003][ T5730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.472002][ T5730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.789335][ T7725] bond0: (slave syz_tun): Releasing backup interface
[  247.898692][T14861] netlink: 'syz.9.2931': attribute type 10 has an invalid length.
[  248.048857][T14868] 9pnet_virtio: no channels available for device syz
[  248.058187][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.192921][T14875] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2935'.
[  248.268322][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2934'.
[  248.282166][T14878] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  248.357516][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.423163][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2937'.
[  248.459216][T14880] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  248.489430][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.760679][   T42] audit: type=1400 audit(1786637852.220:1293): avc:  denied  { read } for  pid=14884 comm="syz.0.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  248.862380][T14898] netlink: 'syz.9.2941': attribute type 10 has an invalid length.
[  248.877699][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.006221][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2943'.
[  249.205244][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'.
[  249.228418][T14908] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  249.300483][T14906] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  249.534623][ T5730] Bluetooth: hci3: command tx timeout
[  249.755671][T14846] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.768313][T14846] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.784847][   T24] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  249.788246][T14846] bridge_slave_0: entered allmulticast mode
[  249.794065][   T42] audit: type=1400 audit(1786637853.250:1294): avc:  denied  { write } for  pid=14923 comm="syz.9.2951" name="functions" dev="configfs" ino=9697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  249.807530][T14846] bridge_slave_0: entered promiscuous mode
[  249.813276][T14846] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.816872][T14846] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.821034][T14846] bridge_slave_1: entered allmulticast mode
[  249.825695][T14846] bridge_slave_1: entered promiscuous mode
[  249.830507][   T42] audit: type=1400 audit(1786637853.290:1295): avc:  denied  { write } for  pid=14926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.878818][   T12] bridge_slave_1: left promiscuous mode
[  249.888788][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.914224][   T12] bridge_slave_0: left allmulticast mode
[  249.926195][   T12] bridge_slave_0: left promiscuous mode
[  249.936353][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.951728][   T42] audit: type=1400 audit(1786637853.410:1296): avc:  denied  { write } for  pid=14931 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.958906][   T24] usb 10-1: device descriptor read/64, error -71
[  250.021558][T14938] /dev/nbd9: Can't lookup blockdev
[  250.041251][T14943] /dev/nbd9: Can't lookup blockdev
[  250.133345][   T12] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  250.204442][   T24] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  250.247133][   T12] bond5 (unregistering): (slave gretap1): Releasing backup interface
[  250.271265][T14946] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  250.308194][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.313216][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.319368][   T12] bond0 (unregistering): Released all slaves
[  250.327626][   T12] bond1 (unregistering): Released all slaves
[  250.336396][   T24] usb 10-1: device descriptor read/64, error -71
[  250.346374][   T12] bond2 (unregistering): Released all slaves
[  250.361856][   T12] bond3 (unregistering): Released all slaves
[  250.385746][   T12] bond4 (unregistering): Released all slaves
[  250.397215][   T12] bond5 (unregistering): (slave bond6): Releasing backup interface
[  250.402272][   T12] bond5 (unregistering): Released all slaves
[  250.428875][   T12] bond6 (unregistering): Released all slaves
[  250.444877][   T24] usb usb10-port1: attempt power cycle
[  250.458446][ T5437] 8021q: adding VLAN 0 to HW filter on device eth2
[  250.605738][T14846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.616397][   T42] audit: type=1400 audit(1786637854.070:1297): avc:  denied  { write } for  pid=14948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  250.626215][T14846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.640838][   T12] : left promiscuous mode
[  250.806141][   T24] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  250.844731][T14846] team0: Port device team_slave_0 added
[  250.849534][T14846] team0: Port device team_slave_1 added
[  250.864949][   T24] usb 10-1: device descriptor read/8, error -71
[  250.878085][T14846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.880291][   T42] audit: type=1400 audit(1786637854.340:1298): avc:  denied  { write } for  pid=14956 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  250.890159][T14846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.910947][T14846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.924226][T14846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.938117][T14846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.954713][T14846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.037788][T14846] hsr_slave_0: entered promiscuous mode
[  251.044477][T14846] hsr_slave_1: entered promiscuous mode
[  251.048143][T14846] debugfs: 'hsr0' already exists in 'hsr'
[  251.050615][T14846] Cannot create hsr debugfs directory
[  251.101214][T14965] netlink: 'syz.0.2959': attribute type 5 has an invalid length.
[  251.118783][   T24] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  251.151842][   T24] usb 10-1: device descriptor read/8, error -71
[  251.255218][   T24] usb usb10-port1: unable to enumerate USB device
[  251.354613][   T42] audit: type=1400 audit(1786637854.810:1299): avc:  denied  { write } for  pid=14968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  251.384209][T14971] scsi_nl_rcv_msg: discarding partial skb
[  251.387188][   T42] audit: type=1400 audit(1786637854.840:1300): avc:  denied  { create } for  pid=14970 comm="syz.9.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  251.402977][   T42] audit: type=1400 audit(1786637854.840:1301): avc:  denied  { write } for  pid=14970 comm="syz.9.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  251.446238][T14973] netlink: 'syz.0.2962': attribute type 13 has an invalid length.
[  251.459817][T14973] __nla_validate_parse: 3 callbacks suppressed
[  251.459836][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'.
[  251.521084][T14976] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  251.524598][T14973] netlink: 'syz.0.2962': attribute type 13 has an invalid length.
[  251.537907][   T42] audit: type=1400 audit(1786637855.000:1302): avc:  denied  { write } for  pid=14978 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  251.545518][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'.
[  251.615955][ T5085] Bluetooth: hci3: command tx timeout
[  251.710367][ T5437] 8021q: adding VLAN 0 to HW filter on device eth3
[  251.737591][   T12] hsr_slave_0: left promiscuous mode
[  251.741812][   T12] hsr_slave_1: left promiscuous mode
[  251.750778][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.758720][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.766110][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.769543][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.804940][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2964'.
[  251.820390][   T12] veth1_macvtap: left promiscuous mode
[  251.820766][T14985] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  251.825639][   T12] veth0_macvtap: left promiscuous mode
[  251.830965][   T12] veth1_vlan: left promiscuous mode
[  251.832633][   T12] veth0_vlan: left promiscuous mode
[  252.020742][   T12] team0 (unregistering): Port device team_slave_1 removed
[  252.039520][   T12] team0 (unregistering): Port device team_slave_0 removed
[  252.048633][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'.
[  252.121678][T12268] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  252.214635][ T5803] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.218756][ T5803] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.228436][ T5803] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.234691][ T5803] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.375978][   T42] audit: type=1400 audit(1786637855.830:1303): avc:  denied  { write } for  pid=14991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  252.393637][   T42] audit: type=1400 audit(1786637855.840:1304): avc:  denied  { getopt } for  pid=14997 comm="syz.0.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  252.399806][   T42] audit: type=1400 audit(1786637855.840:1305): avc:  denied  { setopt } for  pid=14997 comm="syz.0.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  252.701677][T15009] jffs2: notice: (15009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 5 orphan) and 10 of xref (0 dead, 9 orphan) found.
[  252.810234][   T12] IPVS: stop unused estimator thread 0...
[  252.847536][T14846] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  252.862235][T15020] device-mapper: ioctl: Unable to rename non-existent device,  to j f�l�
[  252.862235][T15020] 
[  252.871960][T15016] 9p: Bad value for 'rfdno'
[  252.878532][T14846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  252.883386][T14846] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  252.893437][T14846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  252.905458][T14846] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  252.940121][T14846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  252.945973][T14846] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  252.982822][T14846] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  253.065180][T15038] /dev/nbd9: Can't lookup blockdev
[  253.082571][T15040] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  253.161307][T14846] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.181696][T14846] 8021q: adding VLAN 0 to HW filter on device team0
[  253.190010][T12261] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.192262][T12261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.216443][T12261] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.218733][T12261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.564865][T15068] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2986'.
[  253.686991][T15075] usbip-vudc usbip-vudc.0: gadget not bound
[  253.693039][T14846] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.705888][ T5730] Bluetooth: hci3: command tx timeout
[  253.717306][T15075] netlink: 'syz.5.2988': attribute type 1 has an invalid length.
[  253.734385][T15075] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2988'.
[  254.175440][T14846] veth0_vlan: entered promiscuous mode
[  254.188361][T14846] veth1_vlan: entered promiscuous mode
[  254.225090][T14846] veth0_macvtap: entered promiscuous mode
[  254.227961][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'.
[  254.236543][T14846] veth1_macvtap: entered promiscuous mode
[  254.240716][T15088] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  254.270826][T14846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.297876][T14846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.437020][T14255] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.461040][T14255] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.533568][T12269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.541793][T12269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.555125][T14255] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.560525][T14255] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.592413][T12268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.597824][T12268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.616748][T15097] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2994'.
[  255.152864][   T42] kauditd_printk_skb: 7 callbacks suppressed
[  255.152877][   T42] audit: type=1400 audit(1786637858.610:1313): avc:  denied  { write } for  pid=15112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.296878][   T42] audit: type=1400 audit(1786637858.760:1314): avc:  denied  { write } for  pid=15117 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.304090][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3000'.
[  255.324911][T15119] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  255.470206][T15124] bridge_slave_0: left allmulticast mode
[  255.474144][T15124] bridge_slave_0: left promiscuous mode
[  255.482868][T15124] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.506075][T15124] bridge_slave_1: left allmulticast mode
[  255.512660][T15124] bridge_slave_1: left promiscuous mode
[  255.523981][T15124] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.566967][T15124] bond0: (slave bond_slave_0): Releasing backup interface
[  255.597127][T15124] bond0: (slave bond_slave_1): Releasing backup interface
[  255.644177][T15124] team0: Port device team_slave_0 removed
[  255.703598][T15124] team0: Port device team_slave_1 removed
[  255.725537][T15124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.737017][T15124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.787702][ T5730] Bluetooth: hci3: command tx timeout
[  255.837220][T15124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.866533][T15124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.903638][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3001'.
[  255.932977][T15131] loop5: detected capacity change from 0 to 7
[  255.940109][T15124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  255.947633][T15131] Dev loop5: unable to read RDB block 7
[  255.953743][T15131]  loop5: AHDI p2
[  255.957468][T15131] loop5: partition table partially beyond EOD, truncated
[  256.110048][ T1435] ieee802154 phy1 wpan1: encryption failed: -22
[  256.176069][   T42] audit: type=1400 audit(1786637859.640:1315): avc:  denied  { write } for  pid=15134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  256.223486][T15143] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  256.294050][   T42] audit: type=1400 audit(1786637859.750:1316): avc:  denied  { write } for  pid=15145 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  256.486470][T15153] fuse: Bad value for 'fd'
[  256.519805][   T42] audit: type=1400 audit(1786637859.980:1317): avc:  denied  { connect } for  pid=15154 comm="syz.6.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  256.834780][T15163] __nla_validate_parse: 3 callbacks suppressed
[  256.834794][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3015'.
[  256.855511][T15163] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  256.975822][T15169] loop5: detected capacity change from 0 to 7
[  256.985179][T15169] Dev loop5: unable to read RDB block 7
[  256.987455][T15169]  loop5: AHDI p2
[  256.988940][T15169] loop5: partition table partially beyond EOD, truncated
[  257.122978][T15178] netlink: 'syz.9.3022': attribute type 1 has an invalid length.
[  257.133055][T15178] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3022'.
[  257.149425][T15179] CIFS: Unable to determine destination address
[  257.162300][T15179] binder: 15177:15179 ioctl c0306201 200000000040 returned -14
[  257.427928][T15193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3026'.
[  257.430531][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'.
[  257.453032][T15190] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  257.463120][T15193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3026'.
[  257.474886][   T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.479248][   T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.490817][   T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.507926][   T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.766781][T15208] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3033'.
[  257.776163][T15208] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3033'.
[  257.790967][   T42] audit: type=1400 audit(1786637861.250:1318): avc:  denied  { audit_write } for  pid=15207 comm="syz.0.3033" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  257.801860][T15212] netlink: 'syz.9.3034': attribute type 21 has an invalid length.
[  257.810097][   T42] audit: type=1107 audit(1786637861.270:1319): pid=15207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='���M(���n������7���|�BQ�Xc?�� "�J��;�����҆�&�ms�H�����MPՐ �LK�����Yp�$mDrW`6S��5�'
[  257.915596][ T7869] usb 11-1: new high-speed USB device number 16 using dummy_hcd
[  258.066215][ T7869] usb 11-1: Using ep0 maxpacket: 32
[  258.073817][ T7869] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.094982][ T7869] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  258.101479][ T7869] usb 11-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  258.110933][ T7869] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.122519][ T7869] usb 11-1: config 0 descriptor??
[  258.328802][T15237] xt_ecn: cannot match TCP bits for non-tcp packets
[  258.369672][T15239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3044'.
[  258.381067][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'.
[  258.390279][T15239] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  258.519217][T15244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3045'.
[  259.712045][T15291] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  259.879567][T15298] hfsplus: unable to find HFS+ superblock
[  260.003043][T15307] loop5: detected capacity change from 0 to 7
[  260.029738][T15307] Dev loop5: unable to read RDB block 7
[  260.032742][T15307]  loop5: AHDI p2
[  260.035568][T15307] loop5: partition table partially beyond EOD, truncated
[  260.138111][T15311] overlay: filesystem on ./file0 not supported as upperdir
[  260.498615][   T42] audit: type=1400 audit(1786637863.960:1320): avc:  denied  { write } for  pid=15329 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  260.501694][T15330] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  260.521966][T15328] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  260.586945][   T42] audit: type=1400 audit(1786637864.040:1321): avc:  denied  { read } for  pid=15333 comm="syz.9.3073" dev="sockfs" ino=61107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  260.607937][   T42] audit: type=1800 audit(1786637864.070:1322): pid=15334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3072" name="zoned" dev="configfs" ino=60189 res=0 errno=0
[  260.631736][   T42] audit: type=1800 audit(1786637864.080:1323): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3072" name="memory_backed" dev="configfs" ino=61125 res=0 errno=0
[  260.645572][   T42] audit: type=1800 audit(1786637864.080:1324): pid=15334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3072" name="zone_nr_conv" dev="configfs" ino=60190 res=0 errno=0
[  260.647500][T15334] null_blk: nullb1: using native zone append
[  260.664868][   T42] audit: type=1800 audit(1786637864.080:1325): pid=15334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3072" name="power" dev="configfs" ino=60191 res=0 errno=0
[  260.670099][ T6436] usb 11-1: USB disconnect, device number 16
[  260.746403][T15334] null_blk: disk nullb1 created
[  260.792384][T15346] xt_policy: neither incoming nor outgoing policy selected
[  260.889603][T15352] bridge0: entered allmulticast mode
[  260.896161][T15350] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  260.902973][T15352] bridge_slave_1: left allmulticast mode
[  260.905699][T15352] bridge_slave_1: left promiscuous mode
[  260.910406][T15352] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.927302][T15352] bridge_slave_0: left allmulticast mode
[  260.929775][T15352] bridge_slave_0: left promiscuous mode
[  260.934369][T15352] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.973814][T15352] bridge0 (unregistering): left allmulticast mode
[  261.084906][T15364] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  261.169500][T15370] netlink: 'syz.6.3084': attribute type 2 has an invalid length.
[  261.226070][T15371] fuse: Bad value for 'fd'
[  261.524575][T15389] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  261.554389][T10853] usb 11-1: new high-speed USB device number 17 using dummy_hcd
[  261.705736][T10853] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  261.711174][T10853] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  261.719452][T10853] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  261.722963][T15394] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  261.731371][T10853] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  261.735037][T10853] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.739887][T10853] usb 11-1: Product: syz
[  261.741268][T10853] usb 11-1: Manufacturer: syz
[  261.747885][T10853] usb 11-1: SerialNumber: syz
[  261.753924][T10853] usb 11-1: config 0 descriptor??
[  261.962275][T10853] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  262.144643][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  262.179175][T15404] xt_hashlimit: size too large, truncated to 1048576
[  262.242619][T15407] __nla_validate_parse: 11 callbacks suppressed
[  262.242640][T15407] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3097'.
[  262.271717][T15407] netlink: 'syz.9.3097': attribute type 19 has an invalid length.
[  262.303009][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.309124][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  262.332869][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  262.342634][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.350841][   T10] usb 5-1: Product: syz
[  262.352546][   T10] usb 5-1: Manufacturer: syz
[  262.361212][   T10] usb 5-1: SerialNumber: syz
[  262.364134][ T1038] usb 11-1: USB disconnect, device number 17
[  262.428291][T15413] usb usb8: usbfs: process 15413 (syz.6.3099) did not claim interface 0 before use
[  262.543156][T15423] fuse: Bad value for 'fd'
[  262.575325][T15398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.588066][T15398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.598300][   T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  262.608066][   T10] usb 5-1: USB disconnect, device number 7
[  262.638397][T15425] net2280 0000:00:00.0: unbind
[  262.640330][T15425] net2280 0000:00:00.0: probe with driver net2280 failed with error -16
[  262.878752][T15433] smc: net device lo applied user defined pnetid SYZ0
[  262.881660][T15433] smc: smcd device lo applied user defined pnetid SYZ0
[  262.885945][   T42] audit: type=1400 audit(1786637866.350:1326): avc:  denied  { bind } for  pid=15432 comm="syz.6.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  262.904550][   T42] audit: type=1400 audit(1786637866.350:1327): avc:  denied  { listen } for  pid=15432 comm="syz.6.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  262.939553][   T42] audit: type=1400 audit(1786637866.400:1328): avc:  denied  { accept } for  pid=15432 comm="syz.6.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  263.007205][   T42] audit: type=1400 audit(1786637866.470:1329): avc:  denied  { write } for  pid=15436 comm="syz.6.3108" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  263.016472][T15437] 9pnet_virtio: no channels available for device syz
[  263.044377][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  263.093872][T15440] loop5: detected capacity change from 0 to 7
[  263.098803][T15440] Dev loop5: unable to read RDB block 7
[  263.101359][T15440]  loop5: AHDI p2
[  263.102627][T15440] loop5: partition table partially beyond EOD, truncated
[  263.208004][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.213858][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  263.225424][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  263.233254][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.239276][   T10] usb 5-1: Product: syz
[  263.240318][T15446] Cannot find add_set index 0 as target
[  263.242360][   T10] usb 5-1: Manufacturer: syz
[  263.246095][   T10] usb 5-1: SerialNumber: syz
[  263.569101][   T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  263.581697][   T10] usb 5-1: USB disconnect, device number 8
[  263.624728][ T6436] usb 11-1: new high-speed USB device number 18 using dummy_hcd
[  263.675463][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3119'.
[  263.716589][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3120'.
[  263.720523][T15465] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  264.051186][T15482] netlink: 'syz.9.3127': attribute type 12 has an invalid length.
[  264.158730][T15491] loop5: detected capacity change from 0 to 7
[  264.175628][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3129'.
[  264.187863][T15489] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  264.197218][T15491] Dev loop5: unable to read RDB block 7
[  264.199129][T15491]  loop5: AHDI p2
[  264.201553][T15491] loop5: partition table partially beyond EOD, truncated
[  264.216333][T15493] sctp: [Deprecated]: syz.9.3131 (pid 15493) Use of struct sctp_assoc_value in delayed_ack socket option.
[  264.216333][T15493] Use struct sctp_sack_info instead
[  264.255479][T12265] wlan0: Trigger new scan to find an IBSS to join
[  264.350162][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3135'.
[  264.359806][T15501] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  264.571930][T15510] overlayfs: conflicting options: userxattr,redirect_dir=on
[  264.668414][T15514] loop5: detected capacity change from 0 to 7
[  264.675650][T15514] Dev loop5: unable to read RDB block 7
[  264.680356][T15514]  loop5: AHDI p2
[  264.681621][T15514] loop5: partition table partially beyond EOD, truncated
[  264.852399][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3144'.
[  264.863402][T15522] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  265.044664][T13008] usb 11-1: new high-speed USB device number 19 using dummy_hcd
[  265.224400][T13008] usb 11-1: Using ep0 maxpacket: 32
[  265.230517][T13008] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.238635][T13008] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  265.249880][T13008] usb 11-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  265.263963][T13008] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.279646][T13008] usb 11-1: config 0 descriptor??
[  265.293534][T13008] usbhid 11-1:0.0: couldn't find an input interrupt endpoint
[  265.383750][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3155'.
[  265.490747][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3157'.
[  265.566151][T15553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3158'.
[  265.734275][T15562] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  265.816451][T15566] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3162'.
[  266.196812][ T5730] Bluetooth: hci2: unexpected event for opcode 0x2016
[  266.298525][T15590] loop5: detected capacity change from 0 to 7
[  266.305134][T15590] Dev loop5: unable to read RDB block 7
[  266.309059][T15590]  loop5: AHDI p2
[  266.310252][T15590] loop5: partition table partially beyond EOD, truncated
[  266.686513][T15610] overlayfs: upper fs does not support file handles, falling back to index=off.
[  266.703298][T15611] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  266.715429][T15610] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  266.718550][T15613] openvswitch: netlink: IPv4 tunnel dst address is zero
[  267.149101][T15634] loop5: detected capacity change from 0 to 7
[  267.156026][T15634] Dev loop5: unable to read RDB block 7
[  267.160532][T15634]  loop5: unable to read partition table
[  267.164705][T15634] loop5: partition table beyond EOD, truncated
[  267.169517][T15634] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  267.215877][T12261] wlan0: Trigger new scan to find an IBSS to join
[  267.246793][T15638] loop5: detected capacity change from 0 to 7
[  267.249910][T15638] Dev loop5: unable to read RDB block 7
[  267.251799][T15638]  loop5: AHDI p2
[  267.253077][T15638] loop5: partition table partially beyond EOD, truncated
[  267.349989][T15643] FAT-fs (nbd0): unable to read boot sector
[  267.356693][T15643] sctp: [Deprecated]: syz.0.3190 (pid 15643) Use of int in maxseg socket option.
[  267.356693][T15643] Use struct sctp_assoc_value instead
[  267.366630][T15641] __nla_validate_parse: 4 callbacks suppressed
[  267.366642][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3190'.
[  267.567172][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3192'.
[  267.605740][T15650] PM: Enabling pm_trace changes system date and time during resume.
[  267.605740][T15650] PM: Correct system time has to be restored manually after resume.
[  267.818021][T13008] usb 11-1: USB disconnect, device number 19
[  268.059529][T15663] loop5: detected capacity change from 0 to 7
[  268.072559][T15663] Dev loop5: unable to read RDB block 7
[  268.076805][T15663]  loop5: unable to read partition table
[  268.079633][T15663] loop5: partition table beyond EOD, truncated
[  268.082419][T15663] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  268.187937][T15665] ipt_REJECT: ECHOREPLY no longer supported.
[  268.292512][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3199'.
[  268.336668][T15667] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16
[  268.474199][T15680] SELinux:  Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped).
[  268.497760][   T42] kauditd_printk_skb: 2 callbacks suppressed
[  268.497780][   T42] audit: type=1400 audit(1786637871.960:1332): avc:  denied  { relabelto } for  pid=15679 comm="syz.9.3202" name="file0" dev="tmpfs" ino=2657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0"
[  268.531601][   T42] audit: type=1400 audit(1786637871.960:1333): avc:  denied  { associate } for  pid=15679 comm="syz.9.3202" name="file0" dev="tmpfs" ino=2657 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_notify_exec_t:s0"
[  268.744596][T13008] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  268.904886][T13008] usb 5-1: Using ep0 maxpacket: 32
[  268.913207][T13008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.921117][T13008] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  268.929338][T13008] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  268.958861][T13008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.969032][T13008] usb 5-1: config 0 descriptor??
[  268.985630][T13008] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  269.044250][   T42] audit: type=1400 audit(1786637872.500:1334): avc:  denied  { rmdir } for  pid=11410 comm="syz-executor" name="file0" dev="tmpfs" ino=2657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0"
[  269.122012][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  269.132122][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  269.137861][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  269.142540][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  269.152845][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  269.206245][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3209'.
[  269.504223][T15718] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  269.508817][T15720] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  269.613489][   T42] audit: type=1400 audit(1786637873.070:1335): avc:  denied  { mount } for  pid=15725 comm="syz.9.3215" name="/" dev="hugetlbfs" ino=63140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  269.656455][   T42] audit: type=1400 audit(1786637873.110:1336): avc:  denied  { unmount } for  pid=11410 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  269.699050][T15730] jffs2: notice: (15730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 5 orphan) and 10 of xref (0 dead, 9 orphan) found.
[  269.706614][T15730] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[  269.881599][T15693] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.884438][T15693] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.888738][T15693] bridge_slave_0: entered allmulticast mode
[  269.891893][T15693] bridge_slave_0: entered promiscuous mode
[  269.896973][T15693] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.899458][T15693] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.901974][T15693] bridge_slave_1: entered allmulticast mode
[  269.905056][T15693] bridge_slave_1: entered promiscuous mode
[  269.909939][T15743] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] SMP KASAN NOPTI
[  269.914987][T15743] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7]
[  269.918555][T15743] CPU: 2 UID: 0 PID: 15743 Comm: syz.9.3218 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  269.922970][T15693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.923066][T15743] Tainted: [L]=SOFTLOCKUP
[  269.928547][T15693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.928585][T15743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  269.936407][T15743] RIP: 0010:rebind_store+0x147/0x2d0
[  269.938633][T15743] Code: 53 01 00 00 48 89 d8 48 c1 e0 07 4c 8b b0 d0 4c a4 9b 48 b8 00 00 00 00 00 fc ff df 49 8d be f0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 30 01 00 00 4d 8b be f0 00 00 00 4d 85 ff 74 3c
[  269.943701][T15693] team0: Port device team_slave_0 added
[  269.946553][T15743] RSP: 0018:ffffc900069ffc30 EFLAGS: 00010206
[  269.946578][T15743] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  269.946592][T15743] RDX: 000000000000001e RSI: 0000000000000004 RDI: 00000000000000f0
[  269.946605][T15743] RBP: ffffffff9ba44cd0 R08: 0000000000000000 R09: fffffbfff374899c
[  269.946621][T15743] R10: ffffffff9ba44ce3 R11: 0000000000000001 R12: 0000000000000004
[  269.949808][T15693] team0: Port device team_slave_1 added
[  269.951035][T15743] R13: ffff8880227cf260 R14: 0000000000000000 R15: ffff88802dcbf200
[  269.951054][T15743] FS:  00007f229bba06c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000
[  269.951090][T15743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  269.961133][T15693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.963622][T15743] CR2: 000000110c3e2a26 CR3: 00000000533cd000 CR4: 0000000000352ef0
[  269.963641][T15743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  269.965528][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.968713][T15743] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  269.968734][T15743] Call Trace:
[  269.968742][T15743]  <TASK>
[  269.968750][T15743]  ? __pfx_rebind_store+0x10/0x10
[  269.971594][T15693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.974289][T15743]  drv_attr_store+0x74/0xb0
[  269.974326][T15743]  ? __pfx_drv_attr_store+0x10/0x10
[  269.974354][T15743]  sysfs_kf_write+0xf2/0x150
[  269.974385][T15743]  kernfs_fop_write_iter+0x3e0/0x5f0
[  269.974412][T15743]  ? __pfx_sysfs_kf_write+0x10/0x10
[  269.977770][T15693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.979899][T15743]  vfs_write+0x6ac/0x1050
[  269.979937][T15743]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  269.982443][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.992818][T15743]  ? __pfx_vfs_write+0x10/0x10
[  269.992866][T15743]  ksys_write+0x12a/0x250
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  269.992884][T15743]  ? __pfx_ksys_write+0x10/0x10
[  269.992904][T15743]  do_syscall_64+0x115/0x870
[  269.995791][T15693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.996801][T15743]  ? clear_bhb_loop+0x70/0xc0
[  269.996827][T15743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.018275][T15693] hsr_slave_0: entered promiscuous mode
[  270.019341][T15743] RIP: 0033:0x7f229ad9e0d9
[  270.019364][T15743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.019383][T15743] RSP: 002b:00007f229bba0028 EFLAGS: 00000246
[  270.022502][T15693] hsr_slave_1: entered promiscuous mode
[  270.032079][T15743]  ORIG_RAX: 0000000000000001
[  270.032094][T15743] RAX: ffffffffffffffda RBX: 00007f229b025fa0 RCX: 00007f229ad9e0d9
[  270.032106][T15743] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000005
[  270.032117][T15743] RBP: 00007f229ae35024 R08: 0000000000000000 R09: 0000000000000000
[  270.032126][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.032136][T15743] R13: 00007f229b026038 R14: 00007f229b025fa0 R15: 00007ffeb4c081d8
[  270.032153][T15743]  </TASK>
[  270.032171][T15743] Modules linked in:
[  270.033790][T15743] ---[ end trace 0000000000000000 ]---
[  270.043602][   T42] audit: type=1400 audit(1786637873.500:1337): avc:  denied  { write } for  pid=5640 comm="syz-executor" path="pipe:[2871]" dev="pipefs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  270.047344][T15743] RIP: 0010:rebind_store+0x147/0x2d0
[  270.062307][T15693] debugfs: 'hsr0' already exists in 'hsr'
[  270.084457][T15743] Code: 53 01 00 00 48 89 d8 48 c1 e0 07 4c 8b b0 d0 4c a4 9b 48 b8 00 00 00 00 00 fc ff df 49 8d be f0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 30 01 00 00 4d 8b be f0 00 00 00 4d 85 ff 74 3c
[  270.109921][T15693] Cannot create hsr debugfs directory
[  270.135993][T15743] RSP: 0018:ffffc900069ffc30 EFLAGS: 00010206
[  270.140928][T15743] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  270.151495][T15743] RDX: 000000000000001e RSI: 0000000000000004 RDI: 00000000000000f0
[  270.166079][T15743] RBP: ffffffff9ba44cd0 R08: 0000000000000000 R09: fffffbfff374899c
[  270.169520][T15743] R10: ffffffff9ba44ce3 R11: 0000000000000001 R12: 0000000000000004
[  270.172801][T15743] R13: ffff8880227cf260 R14: 0000000000000000 R15: ffff88802dcbf200
[  270.185945][T15743] FS:  00007f229bba06c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000
[  270.189208][T15743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  270.191737][T15743] CR2: 000000110c3e2a26 CR3: 00000000533cd000 CR4: 0000000000352ef0
[  270.203898][T15743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  270.211751][T15743] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  270.220181][T15743] Kernel panic - not syncing: Fatal exception
[  270.223460][T15743] Kernel Offset: disabled
[  270.225228][T15743] Rebooting in 86400 seconds..