last executing test programs:

4m35.163474071s ago: executing program 2 (id=3):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
socket$igmp(0x2, 0x3, 0x2)
write$binfmt_elf64(r1, 0x0, 0x78)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00001104000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdir(0x0, 0xfffffffffffffffe)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3f", 0x6}], 0x1}}], 0x1, 0x20000001)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff)
read$FUSE(r5, &(0x7f0000003000)={0x2020}, 0x2020)
sendmmsg$inet(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)="b30d3d", 0x3}], 0x1}}], 0x1, 0x4000040)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000040), 0x10a, 0x18f480)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/notes', 0xc2883, 0x8a)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}})
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRESDEC=r4, @ANYBLOB="0000000000000000180012800e0001007769726567756109000000000000008008b8000000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x44010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000001640)=@deltclass={0x850, 0x29, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x9, 0x5}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @tclass_kind_options=@c_htb={{0x8}, {0x81c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xfff}, @TCA_HTB_RTAB={0x404, 0x4, [0x8, 0x10001, 0xe5, 0x10, 0x3, 0x8, 0x2a9, 0x9c, 0x9de, 0x4, 0x7, 0x3, 0xdff2, 0x8000, 0x5c, 0x6, 0x2, 0x6, 0x8001, 0x100, 0x370, 0x8, 0x3, 0x97, 0x4, 0x101, 0xe, 0x2, 0x447c, 0xe6a, 0x19, 0x903a, 0x8, 0x6, 0xbd2, 0x3, 0xfffffffd, 0x8, 0x6, 0xb, 0x56, 0xf4, 0xfffffff7, 0xfffffff9, 0x5, 0x6, 0x3, 0x3, 0x6, 0x8, 0x1000, 0x2, 0x9, 0x6, 0x3ff, 0xd, 0x1, 0x8, 0x1, 0x2, 0x3, 0x0, 0x1ef00, 0x7fffffff, 0x5, 0x8, 0xb, 0xb0b, 0x401, 0x9b9, 0x3, 0x5, 0x5, 0x10, 0x2, 0x45c, 0x8000, 0x3, 0xfff, 0x5, 0x0, 0x2, 0xb2f, 0x2, 0xbd, 0xfffffffa, 0x3, 0x6, 0x2, 0x8, 0xf9, 0x66c7, 0x8, 0xd, 0xc9, 0xffffffff, 0x478f, 0x1, 0x4, 0xffffff18, 0xffffffff, 0x4, 0x5, 0x9, 0x6, 0x10000003, 0x100, 0x7, 0xb, 0x6, 0x4, 0x6, 0x8000, 0x4, 0x0, 0x0, 0x400, 0x9, 0x98, 0x509f, 0xa730, 0xf99f, 0x1, 0x6, 0x200, 0xf, 0x5, 0x101, 0x5, 0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0xec9, 0x4, 0x3, 0x3, 0xa8, 0xfffffffb, 0x7, 0x9, 0x9, 0x6, 0x80000000, 0x9, 0x766, 0xb4, 0x2, 0xfff, 0x1, 0x5, 0x8, 0x5, 0x3, 0x7, 0x9, 0xf01, 0xa, 0x2, 0x3, 0xfffffff8, 0x400, 0x0, 0x9, 0x2, 0x2005, 0xf, 0x5cf60d81, 0x7, 0x9, 0x7, 0x1, 0xb, 0xf2cb, 0x7, 0x7, 0x6b6, 0x1, 0x8, 0x7fff, 0x0, 0x0, 0x4, 0x2, 0x4bc2, 0x6, 0x3, 0xa, 0x4, 0x8, 0x8, 0x8, 0x6, 0x1, 0x9, 0x7fff, 0xfffffffe, 0x6, 0x2, 0x1, 0x2, 0x9, 0x7, 0x80000000, 0x7, 0x20000000, 0x10000, 0xd, 0x1, 0x80000001, 0xfffffff9, 0x1, 0xfa5b, 0x4, 0xadd, 0x401, 0xb8d, 0x2, 0x80, 0x9, 0x1, 0x3, 0x2080, 0x4, 0x8, 0x2, 0x3a6, 0x3, 0x3, 0x400, 0x6, 0x9, 0x258, 0x6, 0x5e84ceab, 0x10000, 0x3, 0x400, 0x8, 0x78f0, 0x40, 0x0, 0x4, 0x8001, 0x6, 0xe8, 0x46, 0xdae, 0x1, 0x100, 0x4, 0x7fffffff, 0x5, 0x7]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x3, 0x7, 0x2, 0xbe, 0x40, 0xc, 0x7, 0x8000, 0x200, 0x9, 0xe4df, 0x4, 0x5, 0x1, 0x5, 0xfffffffb, 0x7, 0x4, 0x0, 0x400000, 0xd3e0, 0x3, 0x8, 0x20001, 0x0, 0x8, 0x2, 0x9, 0x8, 0x9, 0x80, 0x5, 0x8, 0x3, 0x2, 0x6, 0x0, 0x3, 0x7, 0x9376, 0x5, 0x3, 0x1, 0x8001, 0x4, 0x6, 0x230, 0x8, 0x4, 0x8, 0x8, 0xe71, 0x9, 0xb899f5a, 0x9, 0x200e289, 0x0, 0x622, 0xfffffffa, 0x194, 0xc82, 0xc6, 0xffffffff, 0xfffffffa, 0xffffffff, 0x9, 0x4, 0x8001, 0xfffffffc, 0x5, 0x0, 0x3ebb, 0xc, 0x6, 0x647, 0x40, 0xae2, 0x81, 0x7, 0xffffffff, 0x22c, 0x7, 0x1ff, 0x3c, 0x10, 0x8, 0x4, 0xfffffff8, 0x1, 0x8, 0x8, 0x1, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x100, 0x9, 0xff, 0xd94, 0x8, 0x5, 0x8, 0xf4a, 0x3ff, 0x9, 0xf1, 0x5, 0x2, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x4, 0xfffffffa, 0x6, 0x9, 0x10, 0x5, 0xd7, 0x0, 0x1000ff, 0x70, 0x80000001, 0xa27, 0x8aab, 0x3ff, 0x3, 0x0, 0x0, 0x7, 0x2, 0x8, 0x8, 0x400, 0x200, 0x7, 0xba, 0x8, 0x40, 0x9b, 0xb, 0x2, 0x810, 0x800, 0x14, 0x40, 0xffff, 0x6, 0x46f, 0x50, 0xfffffffd, 0x8000, 0x3ff, 0xea2, 0x5, 0x5, 0x1660000, 0x1, 0x6, 0x3, 0x8, 0x40, 0x9ac, 0x8000, 0xdf, 0x7fffffff, 0xba, 0x2, 0x6, 0x6, 0x81, 0x8001, 0x3ff, 0x6a9, 0x6, 0x6, 0x7, 0x79e, 0x2, 0x4, 0x7f, 0x9, 0x80000001, 0x10, 0xd, 0x2, 0x3, 0x9, 0x1, 0x9, 0x7, 0x2, 0x3ff, 0xfffff887, 0x3, 0x0, 0x10001, 0x6f6, 0x80000001, 0x2ad5, 0x8b4, 0x401, 0x7fffffff, 0xf57f, 0x7, 0xae9, 0xb, 0x7, 0x7, 0x2b, 0x9, 0x2, 0x4, 0x5, 0x80, 0x7, 0x100, 0x2, 0x94e4, 0x80, 0x7ff, 0x1, 0x7ff, 0xfffffff9, 0x0, 0x1, 0x4a, 0xedb, 0xa, 0x2, 0xd1c, 0x296a3e03, 0x5, 0x10000, 0x6, 0x6, 0x2, 0x5, 0x7, 0x6, 0xe3, 0x0, 0xb0be, 0x80000000, 0x5, 0x5, 0x7, 0x7, 0x9, 0xc, 0x8, 0x7ff, 0x2]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x40}, 0x80)
gettid()

4m35.068004855s ago: executing program 2 (id=9):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa002, 0x1f)
r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0xa)
r2 = syz_open_dev$I2C(&(0x7f0000000140), 0x4, 0x4a0803)
close(0xffffffffffffffff)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x1})
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0})
r4 = socket$inet(0x2, 0x3, 0x4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x5}, 0x0, 0x0, 0x7, 0x5, 0x2, 0x4, 0x5, 0xfffffffffffffff9}}], 0x58}, 0x4000044)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f00000003c0)={[{@pids_localevents}, {@memory_hugetlb_accounting}, {}, {@pids_localevents}, {@favordynmods}, {}], [{@euid_eq}, {@hash}, {@audit}, {@uid_lt}]})
connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
bind$inet6(r8, &(0x7f0000009980)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000080)=0x40)
ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000200))

4m34.004622263s ago: executing program 2 (id=25):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000131401010000000000000000080001"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r3, 0x2, &(0x7f0000000140)={0x9, 0x6e, 0x0, 0x0, <r4=>0xffffffffffffffff})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000040)={0x2, <r6=>r4})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000002b"], 0x50)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000100)=0x5)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001500)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000)
r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0)
read$fb(r11, &(0x7f0000000180)=""/194, 0xc2)
r12 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000)
r13 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SG_IO(r12, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xf4, &(0x7f00000000c0)=""/244}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x10038, 0x0, 0x0})

4m32.962991406s ago: executing program 2 (id=46):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x3, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00')

4m32.88500609s ago: executing program 2 (id=47):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 32)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x1, 0x4000100c, r0, 0x0) (async)
r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) (async)
sendfile(r1, r3, &(0x7f0000000400)=0xc, 0x7f03) (async, rerun: 64)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (rerun: 64)

4m32.590946665s ago: executing program 2 (id=50):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async, rerun: 64)
shutdown(r3, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x8008, 0xffffff6a) (async)
sendfile(r3, r4, 0x0, 0xffffffff004)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m32.473123752s ago: executing program 32 (id=50):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async, rerun: 64)
shutdown(r3, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x8008, 0xffffff6a) (async)
sendfile(r3, r4, 0x0, 0xffffffff004)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

44.454144641s ago: executing program 3 (id=2910):
r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

44.452559211s ago: executing program 3 (id=2912):
r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d, 0x31, 0x3a, 0x31, 0x2f, 0x35]}}}, 0x4e}]})

44.369002714s ago: executing program 3 (id=2913):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000005b6700080085000000870000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = accept4$vsock_stream(r1, &(0x7f00000001c0), 0x10, 0x80800)
recvmsg(r3, &(0x7f0000000a80)={&(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000700)=""/210, 0xd2}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f0000000800)=""/189, 0xbd}, {&(0x7f00000008c0)=""/70, 0x46}], 0x8, &(0x7f00000009c0)=""/167, 0xa7}, 0x3)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x16)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000000), 0x0}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0xc0f85403, &(0x7f0000000140))

44.355226357s ago: executing program 3 (id=2915):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async, rerun: 64)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000400)=""/166, 0xa6}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f00000004c0)=""/212, 0xd4}], 0x4}, 0x2) (async, rerun: 64)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
faccessat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x300) (async)
mkdir(0x0, 0x10) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) (async)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0x4)
listen(r0, 0x5) (async, rerun: 64)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) (async, rerun: 64)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

44.353516134s ago: executing program 3 (id=2917):
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x5, 0x2, 0x1, 0x4, 0x10001, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x5, 0x8, 0x6, 0x6, 0x4, 0x4, 0x2, 0x52dc, 0xffffffff, 0x7, 0x1, 0xec000000, 0x4, 0xff, 0xe4cb45d, 0x9, 0x9b10000, 0xe605, 0x25, 0x7f]}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r3, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
socket$kcm(0x23, 0x5, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000000))
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000680)={0xa22fc007, 0x0, "ee9a8000bc5e143f8437bb6bbe34fb7e7b692abe4bb49c3df484131ac9564da5", 0xffffff81, 0x9, 0xebc3, 0x5, 0x140})

43.718859523s ago: executing program 3 (id=2920):
r0 = socket$inet6(0xa, 0x805, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4052, &(0x7f00000010c0)=0xfd4)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, &(0x7f0000000080))
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
map_shadow_stack(&(0x7f0000ec5000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x6, 0x11, 0x0, &(0x7f0000005280))
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000c17000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x424, 0x5a, 0x1)
mlock(&(0x7f0000d1f000/0x3000)=nil, 0x3000)

43.678406392s ago: executing program 33 (id=2920):
r0 = socket$inet6(0xa, 0x805, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000080)=""/4052, &(0x7f00000010c0)=0xfd4)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, &(0x7f0000000080))
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
map_shadow_stack(&(0x7f0000ec5000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x6, 0x11, 0x0, &(0x7f0000005280))
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000c17000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x424, 0x5a, 0x1)
mlock(&(0x7f0000d1f000/0x3000)=nil, 0x3000)

19.332347718s ago: executing program 5 (id=3051):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x38]}}]})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

19.331432814s ago: executing program 5 (id=3052):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6125d8baac646f6c6f86498289"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x40080)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat(r4, &(0x7f0000000280)='.\x00', 0x2000, 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x0)

19.227272597s ago: executing program 5 (id=3054):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xb})
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000000))
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)={0x14, 0x24, 0x1, 0x70ad26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x0, 0x11f000, 0x8})
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[@wr_drn={0x68, 0x20, {0x7, 0x7}}], 0x20})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xb}) (async)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) (async)
sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)={0x14, 0x24, 0x1, 0x70ad26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000240)={0x0, 0x11f000, 0x8}) (async)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[@wr_drn={0x68, 0x20, {0x7, 0x7}}], 0x20}) (async)

19.141622298s ago: executing program 5 (id=3057):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
pselect6(0x40, &(0x7f0000000080)={0x5096, 0x7eea, 0x33da, 0xdeff, 0x117, 0xf, 0xb, 0x4}, &(0x7f00000000c0)={0x4, 0x3c, 0x6, 0x2, 0x5280, 0x2, 0x100000001, 0x800}, &(0x7f0000000500)={0x1, 0x0, 0x3f8c, 0x0, 0x3, 0xfffffffffffffc01, 0x8000000000000000, 0x10}, &(0x7f0000000540), &(0x7f0000000600)={&(0x7f00000005c0)={[0xf]}, 0x8})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="3e640f792e3f246766c7442400030000006766c7442402df82ad316766c744240600000000670f011c240f6924660ff4930080a956000f01c2db160e00360f013b0f21a50f32", 0x46}], 0x1, 0x52, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x4000, 0x1, {}, 0x0, 0x2}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18.514267277s ago: executing program 5 (id=3060):
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000080)) (async)
syz_emit_ethernet(0x9c, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500008e0000000000019078ac14143aac1414bb0b009078000900004b5e003b006600032b0100097f00000164010102830b2ee0000002ac1414188323c0ac1e00010000000064010100ac1e01010a010101ac1414aae00000026401010044246381e0000001000000faac1414aa0000000d00000000000000030000000000000004018802000000601a67afe4a1"], 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x22401, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, '//:\\'}}, {@defcontext={'defcontext', 0x3d, 'root'}}], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000) (async)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x0, &(0x7f0000000980)='norecovery') (async)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0)

18.513370422s ago: executing program 5 (id=3063):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x106)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0) (async)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
unshare(0x6020400) (async)
unshare(0x6020400)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000000)
fsmount(r6, 0x0, 0x88) (async)
fsmount(r6, 0x0, 0x88)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15)

3.305154236s ago: executing program 1 (id=3266):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x1, 0x7, 0xd03, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xa053}, 0x20800)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2.496127967s ago: executing program 34 (id=3063):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x106)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0) (async)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
unshare(0x6020400) (async)
unshare(0x6020400)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000000)
fsmount(r6, 0x0, 0x88) (async)
fsmount(r6, 0x0, 0x88)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15)

2.40535206s ago: executing program 1 (id=3271):
socket$inet(0x2, 0x4000000000000001, 0x0)
fsopen(&(0x7f0000000080)='efs\x00', 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendfile(r3, r2, 0x0, 0x6)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r4=>0x0})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x200000000000011, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

2.299877962s ago: executing program 1 (id=3275):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) (async)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) (async)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) (async)

2.229277558s ago: executing program 1 (id=3279):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x420280, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1}, {0x7ffa}, @device_a, @device_b, @from_mac=@device_b, {0x3, 0x1}}, 0xc, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xde0}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0)
signalfd(r1, &(0x7f0000000040)={[0x2]}, 0x8)

2.11076533s ago: executing program 1 (id=3280):
r0 = socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x226, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
io_submit(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x17, 0x70, 0x1, 0x0, 0x2, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020)
syz_open_procfs$pagemap(0x0, &(0x7f0000000600))
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x8, 0x8}, {0x400, 0x8, 0x0, 0xfff9}}}}, 0x15)
close_range(r5, 0xffffffffffffffff, 0x200000000000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0xfefffffffffffffc, 0x10000, 0x3, 0x101, 0x7ff, 0xd, 0x3, 0x5d0, 0x7d, 0x89, 0x10000000000, 0x8, 0xa], 0x100000, 0x240046})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

799.846432ms ago: executing program 6 (id=3301):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @enter_looper, @acquire={0x40046305, 0x2}, @increfs={0x40046304, 0x2}], 0x99, 0x0, &(0x7f00000001c0)="4091632d7feddb979a175d587a5c6ea4e5f84dc9a71847e2f55f493e88a124b93a0c9b3d406a97bfe22d07d8fe5fa7cf9f12a6c066d5ad4880965f041ea3993ffc0c5fa85c38e6cfe778a1df17d4954c87395addc512a368569a29d6bf0ea590cd8983bc7a85d22a2c09b8ec378cfff2b6b7db6e5c819c3f9baefb4175375982b902e1a81148573efbd37f4d971fdb8db1b9c42066cb7b1f9b"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x10, 0x0, &(0x7f0000000740)=[@clear_death], 0x0, 0x0, 0x0})

725.656877ms ago: executing program 6 (id=3303):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)

724.713936ms ago: executing program 6 (id=3305):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="440200001000130400000000fedbdf25030000c5ba0bec5d71692b38577da237d28a850100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
r2 = syz_pidfd_open(r0, 0x0)
setns(r2, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x106, 0x0, 0x0, 0x0)

640.583399ms ago: executing program 4 (id=3308):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = syz_open_dev$loop(&(0x7f0000000a40), 0xfffffffffffffffb, 0x1)
ioctl$BLKSECDISCARD(r1, 0x127d, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000, 0x7d67})
init_module(&(0x7f0000000300), 0xaf, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0/file0\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xe, 0x1, 0x9, 0x0, r0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x9}, 0x50)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000200)={0x9, @win={{0x8000, 0x8001, 0x7fffffff, 0x400}, 0x5, 0x101, 0x0, 0x3, 0x0, 0x8}})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x22, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, @call={0x85, 0x0, 0x0, 0x19}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r4, r0, r0], &(0x7f0000000400)=[{0x1, 0x4, 0x7, 0x6}, {0x5, 0x1, 0x4, 0x6}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

513.715665ms ago: executing program 0 (id=3311):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x4, 0x0, "bad07bf278691d4d06f5b96033f59063e1d3ad5b6ea9a132ce8b69ae9f49060a2d8c8d7350aaaebc6ab53fd894335187a4efc4023a81c34efd56075506ad6db7531d2d4e535ade6d02cf67ebd71620f8"}, 0xd8)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @null, @bcast, @netrom, @remote, @rose, @rose]}, &(0x7f0000000080)=0x48, 0x80800)
getsockname$netrom(r1, &(0x7f0000000200)={{0x3, @null}, [@default, @netrom, @null, @netrom, @netrom, @default, @bcast]}, &(0x7f00000000c0)=0x48)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)

513.161182ms ago: executing program 4 (id=3312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

512.795864ms ago: executing program 0 (id=3313):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x42040)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r0})

437.079674ms ago: executing program 4 (id=3314):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'})
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000180)={[0x8000000, 0xffff1000, 0xa000], 0x9777, 0x88})
r6 = socket$netlink(0x10, 0x3, 0x4)
write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
sendmsg$inet6(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
bind$alg(r8, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)

436.841791ms ago: executing program 0 (id=3315):
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
fcntl$setpipe(r0, 0x407, 0x7)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}})

436.014509ms ago: executing program 6 (id=3316):
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async, rerun: 64)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x364, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, 0x0, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05000000001ffedbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="0a00180003030303030300004400238006001800ae"], 0x74}}, 0x0)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x700)
r8 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0)
syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0) (async)
landlock_restrict_self(r0, 0x8)

300.066276ms ago: executing program 6 (id=3317):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0))
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x100000000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @remote}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r3=>0x0})
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000240)=@vmx={0x5, 0x0, 0x2080, {0x80a0000, 0xfec00000, {0x5}, 0x1, 0x6}, {"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", "1f0aa5ef92812652d658ca06d63c2c702ac0bbe7cd67e84571cbab781fba9ee493ff97382333230bd612af7a371132e385509893bd8739f3d8d31e0a7f516dd1dccf906f201738920aaa28970e531fc22c3927b9536b844746a31aa9ed8387d5fec73b91db45d8ddd475fe156798734550daae3d5476aec0c55b0c2881bcc52b8fce968a76dcd99b78c6a3175362a23f30851bcead358cf4ee826381ea6c82256413e099a9866a443357e57340f3da35fe44030a6f2a027120ae4b62bea65dbfe72d432f4526f9b24580fcfe408177c9bde098a03503603e604371e8ea910c2f65fc8732ac58d5de0f4ae3820288534aa9cfe6bf6c710d3f055507b4327f3c72ce5150dc210f10fe61b896a01ec76ad230775611faa47fb2f9c3ff5bb5bd0017704d93bd826dd1cd2ab7f76146f1b87d63566a66a9fa9d894c0fc3c38429c13758c05467e741c2982114fa4c3eea0f403cc6f12256a4338513e92220d2c303ebb7f8a00a589d4b6230eaffe221ac135ff6a736af9dba0944b0c98999040fa3d462aa8a5abddb3088b21db168f0c6eff85fbfaebe0c19b4a2e7c16eb3ff7a48eaf527ca23c6387144891052d3809d9e46a5da123591fa569c1cd7c81af267a39e7ea6a869ef2643ff11805c5169448558fe67e81e956ff7670390a24e4e7218d5cd38bfef1ff66bfa322e282ec6f7693e9f444bda353184168108582a8748c342aaee5edee0d261eb46832f3c9cbb3d4e8c3e007a6f5207b7aeebaeb64afdcb36f5bf1e79ddff4c4d8d3a1eeb9c8e55dc1cc8b8e06246257e02ad9f538cff3959a6bcb074855912b911e17fcf5f6ced2c1c4c4e41d503f8ca9262f8bdb01ab22e4be2b583a47df60adeddeff95cff342eac73e06e7140e2bc2edc621f9dbf91a75e8edf5ae2c0c5e0566044c1ab36f22924fb3e47e1f7ce095bd02730ba5e97ccc8ef2eced545abbe4d0f597d061e3d75231de01e8e4a80b8e8a4b93f5608729d0ee06bed7a69d82b121bec2fb266acf4792ce4fde09ee6095a1da9dd0e2e70152795f25ffb6e0a6f2da7a8f5b0f0b2495be9066c24acea597d95b0129a481dcd527fdef5619f76b86e667c991d627dc186adf9cd08e243829a92e5eee2fa7b247bd06d45a16905308dcf82ef38c1c788178d60547d3e3dad91ff23097da9bebbd9a3fa6439382535c8e630a1dbe04ae3288d7c1ce69299180e1895b24e9bdebc7d6c286f51e5025a83280216851bede2a6a2f3b027232fefcddd39a5b65d17a47c3f3062db430e0d74253ea910553df5fec8f48954804a12f01a23c8eb6c6d4aea78622688a48ff01d561c651bc99fd492b912847308cbbfa76f2f2c41090af46dc42738bcd9adb1a2e886dbec69676945458f08a784ae88f59cb5f03e563a0f9e0386a1d8112799270b869aa3fd27d0d4d553ff79af11f2319c5aa770f9daa870260ccca596f0746acf6930b0388fc2a864b46fefb83c938f37806f00c100fb682f17e9f34ce15502f7e34e3368527a8c64ee02b598d008dddaf93862509794c0d67c7f4ae83870dbba2de900e6e75e00257e2f96bd4fa63d2111b8ea9f23f4d1866b5cef477ee09b3e55326e8cea6bfa7ee798c2589db04632df4d145052e2a2c51bd0af7471bd2aecc9d6340b39336c342093a901c211bb1378caa84aafe4b2ae3d79e266395bf370e98234d9988a9638ba382a816e21521513cd80cdf8eab6483db6026912aa9d97688c2b7538b6674d3399799f96db8e0507249b7d11c5f7259f72c96d6505e8395e602731805e0add4a6898a71a82694f3c41f83bc9efc002a32844256e5e028a1960c6ad6efec550449a17264ed918240ec03923d69ed8c7e34fae7c6733d5adb57a284d2df887da563c73acd4f17da37e790f7fc4ea71c008feb085d0aa281499f37dc642a12b3542b5068cccc7321eb43addde1adfcf0c76be0cbabb2e1a6760a9a2ca54733f33c91872802c372ceab1653b67c48802c7a5d55b3021180edcd9696f021a980eed2103bc4ef6467ff2c713d7679959cbce378af7ebb454abf32dd7712eca230c7c7e47748923381e129516f7bfa80c1d2cdbf14a552c98e96db09f8caaf864da3159e087d63c1ee9421ab4f698b00edd87ac0a01ccae187ad8720f8eecaef3f2137f551f0c0149cc947b6ad76d03d30d279738d986b5570a97105ca9d287163110e416ce32b65a6ad0a2dcc3ed890074c5d7f0c19f00fa29a08c1be3321cf9b28750d9ec646da68a0fbd547dafee060aae737d48fa4678efa473524f637e3d9983b3399a0b2c40a303bc09198a93e7371caaad856fbd7d00c2e05c9e914d0a980ca006f58d29bcf01b63c9d9bab447c02189cc0f56cf60a07f643dca296a7a21d3d082b055688368a670993fec826581475dfdbde937f72d6751c73856962f171b7574ac09a49ef3cee7ff5edc8bba6b8a5c1a86c9bc92c4087d9094de576a65badd21232aa241e93b4f5265a87aa8d84cef83cd51ad702a237687e9162b5a109f99681d7a97566229bc24bdcc66905a2c6f73c6098f3623651f12a292a52d547b49ea4eed5435250382c7a4e689898044ba81ad37bfe2d0a3870a2af68703a00ba066f6c8c49b783b66844082a5e666178c39124ac494d70a6ec831c71787ad2531ddcc843b3eb4b8943355f28cc36208e2b6c4b46cf3ee1202825a5e25ab0d85f5c3d1932ff6a0d7608370f0c026d27c5b4e825cc1fe6aa5958b1607b33b22165dfc78e4474c041ef974bd8e14dc3a29d1810880ff91970299ee60828dae9bc4fd648a8ab16a15e1a12ea65336663c8dd9822e6738be0654788acab250cbed34a3ce9ab301e87c756eb8f759675a310a9039514442b11dc2a4bf557f418995fa50abd1c4982d63f2364eee826ff729472a9153d2ce424a90012e5388ef720cd974e3fce941ad49b87b16d14a9ec259306d94407b853ea3d6a20e719d4b64bbd9254258e956a825cbba7da2da05658a4c16a132a4e03e74ea4af571ee7598f9e66dac451494912953744635349b24af455d0a6481dc45d6c4153d06dd09bdd3461eb0e97b0ed7c391eec570e45f9a70e576b663d18e59972df243b68de973ad235548b3ef034c0e27f9123a050dbdea9593a5f6bf5d36f1777048d73bcbad5fee636b8c35c1a294540bb379f469c4ca457182d44707b12df63d40c0f45dce72dc93ce0f582428d9691e51447efa10ec7701b3256a13a168e1b338e262d3882d028d408ebac8aa588e5ce4abd7e4c2d1f3f70d9509bbc594b4ba6fa485b286129ebcd69af771c210318f600ade425afc69f3faadb87b06b6c64910f529b4037d375291bee3bc6f79f22907b7ec4523b1aa5df393055981cc9b714194ce34150424b4341bc9fb4367300f07c1d77fd0c4695934b5d54bb7f6486517d9da61efa0f930acf7b9b70248588bba2490678a028ec7cbe8a85ddf7a4a9b18bbf8e7ffa5114b6c7f276d0694fdb233c65b73508b3a5c68927784da567cef2bda528cbbe21c73602a31fe11ef85abc63b63fe2eb542a4271ff928afb596d766119ea0774ac0094316043da7888d7aae30811a304ace2b162bd1568ece6ff53559f7b91c27497379976cb717c0615570c7f63e0eb1fe8395c18e4b60acf27dbd6639857f87ce5781974674d0a636e360c2daebef14eb20eb3ed2b6781788bb59125ba9308fa0388eadaea1f87c247f40695c83e60e0e70a3d60095da321eb27e87f876db1e01562fb72b32bd7302e95fc304c55d5d2fb50807ea0c45d3695e628fb0498ca9384c551df7829470715e3761779dbb1f0e8d71287df75ad8eb67fc576ff5226428d01fb53f5082cad2c83ef3c05d724bbcb37e106065e1f0def223223cf36d36f9e6a27d2708ae2ecbc3255f75773c014026d8e20677d4d604c3b2a34521d274d4f38da22ed0eb41a35c474a7038115cc1776c15a45dd4d57bd1303b19f4c8539f17df062f1d64b5c882303a67b5a4b2bbef6a39f5a3a88f31aa2dac93a49efc146910ca8331e0b4b8a5f6b2d0fe50c5f8512bc99ff8a1c7e476a35420a85ecca7ba304362fb90e235da00d70d6c96a790535df8c15009d9305d62a23de5b1e99c4fff5e9eabed698f025e566bbb47ce160feb3972f0c7712e728de5768ad8fc19064f0079ad1d7662c96941d20b46f59c32f90e99fe385bb9825461167b1bf2719f4b54e5ed704d02f31fe99d93a7cdc21b64250ec01c1e3c135c0d27d6629600f0ce480ba3cd1200e6b4faa10cb8d68f2d9b77c8defff694e29c00c164173532ec1e919909c02d61bfe8420ad024603c9fdb35000d4b36dcbc173f326fde22a82df69482aaf2d287ae978cae6a8002af08a9568a0974e1a5f35c82c72297c0261c199c3707932e3af7e590abc15ae0a03c8909f333e6768c1fb69452474810cf3c682f0747812f4192a6256f50f22df8bee60199f0c9ffd76a34f8912a93e01b0aebc9afd8116b2ea12458e14b97af6c31108da9fe58dfe64d6897dceb42162698a632ad4396fd548e3467d0659fc41c054522b6f1c4a632bbdcc4eb039be62d2ae0a8af917a5ddafaecb0e5fd8a296315754beabf1f8eff807a175f78b1a824f1d28f57cc341f079cd761d38533914b09f7b95451773670637565442eb5f023e54b93fa5c4e7055cb44149d7d8425c2a3159c88f3e1ab955e1658382d344c305c541a8682d81dff1bafd89ca4bb9ad5263e56fa639bd1c5aad0d3801ca079e95285d15f38383fa4ca53d1f90324d7e7fefe20130bdd98f1ed9b2bb27d362ed32edfb7dadf7489d3d36a27cc63a40a873b510c8ddc1cfc0172cdc01a38a39244d7c4151ffea6918107a49bad35dc4fcf8543e06d586742155b4db8fd8048ac197cfc94be89b31085dcff39952cb13b685161462a4f0b7b74f8e354102f32477e4c48a81d47d3f9813393e93182aa2b398a23a1f9b96baaba3c9c299696e62678627414f7d728af915dd7e5d3a646c7b7102a45801f3d629195814debab814d989b09706671c8d9ffdaa548708a2352221df4e59133b708f3a92d5a8fb970f6c50ef8fa8af940e39fb447b4ebdffbf667948163dba3a114315c28d6aeff3abc8aa46e4afac8759bb879a572e038f230a784c94eaf5e2fcc2241ca1436113956c4068f9829d4393e57da30a6fbd6de72ceaf63dfc525155145ea139c97aa864c377ed0d3b780aea3ab99fe7c2b9a3b539aee2d4e1f93e04b84de8a6cbd44f6036be9227ae70086a23afbecf8795760e8e8a386efc7a4003f303c705280de3d8078d081688dac7f4c0d1b1d53a5025c2a05644ee298e647ab63b52b2413c462c6362554d2790a24994cde957e752d45525889ef1d134fb70efcfaf4b3d116bd6d605e42d889171d91f1c6fd51b38a6f9e52ddbdc0622b18fa95db9f914b0b70517c03c5a4760c909202df5a12581ae2d30c3b5ae2b9aa88406419cca62c9d8820e83a24d82f0fc2a8b008bdfb5ce29086c5825dc29b71fee6ff2edee9a095291616f218c3aafecf849866556892bb37fcf9d9a3188c0b7fce9c6e3268d430220fce22c9e9629e43156cf4c3b04052455b7276d5ca375252734e7c6d7f98cb1424a520bf8d8757d38516d7b08470e21cdd01690a3586c4987890d5269f76af853417c75a60cf3b2ed4139a633db624e8c5bbc9dc0f45a9a980bedadc378b4995a002c97a6ee13f77c8b30850d95af013324c7905c22ae14c3af5999692febdd95fcf541daea7c6603debfc338adf825225bec1a46d289492918ad41b0d80e6d1eeeb9a85da083624992e28c500"}})
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB='OGAIN \''], 0xbb)
close(r4) (async)
close(r4)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRESOCT=r3, @ANYBLOB="010026bd7000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="04006e800a000600080211"], 0xb0}}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000780000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c00028035000100299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c6200000014000000020a01"], 0x128}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000780000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c00028035000100299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c6200000014000000020a01"], 0x128}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x1380, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x44, 0x2f, 0x0, @private=0xa010100, @multicast1}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x1380, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x44, 0x2f, 0x0, @private=0xa010100, @multicast1}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000008f40), 0x181a00, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/0:0:0:0\x00', 0x2, 0x0)
ioctl$SG_SET_TIMEOUT(r9, 0x2201, &(0x7f00000000c0)=0x2)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xc0}}, 0x0)
ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000009000)={0x8}) (async)
ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000009000)={0x8})
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r10, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async)
getsockopt$bt_hci(r10, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000)
r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x88, 0x1403, 0x200, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x200009c0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x88, 0x1403, 0x200, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x200009c0)

226.10171ms ago: executing program 6 (id=3318):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000001440)=""/123, 0x7b, 0x841)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

139.023616ms ago: executing program 0 (id=3319):
mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x200013, 0x0)
r0 = fanotify_init(0x1a, 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0)
fanotify_mark(r0, 0x1, 0x20, r1, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140)={{0x77359400}, {r2, r3/1000+10000}}, 0x0)
lseek(r0, 0x9, 0x0)

138.512867ms ago: executing program 0 (id=3320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

64.731301ms ago: executing program 4 (id=3321):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x4)
r1 = dup(r0) (async)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x8, 0x0, 0x5e, 0x7}) (async)
execveat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x400)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000a00)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, 0x0}, 0x0)

62.740697ms ago: executing program 4 (id=3322):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@alu={0x7, 0x1, 0x3145d5d8a9bb1132, 0x5, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x40}, 0x94)

1.528597ms ago: executing program 4 (id=3323):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9)
r3 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000010c0), 0x242100)
sendmsg$nl_route(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000)

278.67Вµs ago: executing program 0 (id=3324):
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x0, 0x1)
syz_io_uring_setup(0x1ffc, &(0x7f0000000180)={0x0, 0x5ca3, 0x8, 0x3, 0x1400250}, &(0x7f00000003c0)=<r0=>0x0, &(0x7f0000000380))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3})
r3 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x800)
syz_io_uring_submit(r0, r2, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x54, 0x4, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000001c0)=""/71, 0x47}], 0x4}, 0x0, 0x10020, 0x0, {0x2}})
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='udp\x00')
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f00000004c0)=0xffffff81)

0s ago: executing program 1 (id=3325):
r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000240)={0x9, 0x101, 0x4, {0x0, 0x10000000, 0x1, 0x5}})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000180)=0x10, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bda1, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61783d3030303030302030305a93cddfbeea356b2f3030308b293330303634353031372c004e19a5669c5b2613e8015136938fcbe039859799c109a0d4f9fb09257c8dbe99d81e559376bb48afa297648353f734383e"])

0s ago: executing program 1 (id=3328):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003, 0x0, 0x2], [0x0, 0x3ff, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x20000232, 0x200006, 0x0, 0x6, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xffffffff}, {0x0, 0x1}, {0x400000}, {}, {0x4, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x7fffffff}, {0x8}, {0x804000}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]})
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x300)

kernel console output (not intermixed with test programs):

_r:fixed_disk_device_t tclass=blk_file permissive=1
[  273.846955][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2406'.
[  273.851059][   T40] audit: type=1400 audit(1772445616.473:5077): avc:  denied  { open } for  pid=6200 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  273.860098][T14545] veth0_to_batadv: entered promiscuous mode
[  273.863264][   T40] audit: type=1400 audit(1772445616.473:5078): avc:  denied  { ioctl } for  pid=6200 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  273.873935][   T40] audit: type=1400 audit(1772445616.503:5079): avc:  denied  { create } for  pid=14546 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  273.873975][T14545] veth0_to_batadv: left promiscuous mode
[  273.881704][   T40] audit: type=1400 audit(1772445616.513:5080): avc:  denied  { create } for  pid=14546 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  273.890188][   T40] audit: type=1400 audit(1772445616.513:5081): avc:  denied  { getopt } for  pid=14546 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  273.896656][   T40] audit: type=1400 audit(1772445616.513:5082): avc:  denied  { create } for  pid=14546 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  273.903494][   T40] audit: type=1400 audit(1772445616.513:5083): avc:  denied  { bind } for  pid=14546 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  273.929186][T14529] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.932853][T14529] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.004313][T14529] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  274.007694][T14529] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.082370][T14561] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2411'.
[  274.085638][T14561] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2411'.
[  274.135476][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'.
[  274.139315][T14566] netlink: 'syz.0.2413': attribute type 21 has an invalid length.
[  274.141046][ T8799] bridge_slave_1: left allmulticast mode
[  274.144629][ T8799] bridge_slave_1: left promiscuous mode
[  274.146587][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.157504][ T8799] bridge_slave_0: left allmulticast mode
[  274.159493][ T8799] bridge_slave_0: left promiscuous mode
[  274.171234][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.340991][ T8799] bond2 (unregistering): (slave ip6gretap2): Removing an active aggregator
[  274.344550][ T8799] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface
[  274.432449][ T8799] bond6 (unregistering): (slave geneve2): Releasing active interface
[  274.580033][ T5941] Bluetooth: hci3: command tx timeout
[  274.743495][ T8799] ` (unregistering): (slave bond_slave_0): Releasing backup interface
[  274.748324][ T8799] ` (unregistering): (slave bond_slave_1): Releasing backup interface
[  274.753737][ T8799] ` (unregistering): Released all slaves
[  274.758518][ T8799] bond1 (unregistering): Released all slaves
[  274.765835][ T8799] bond2 (unregistering): Released all slaves
[  274.772689][ T8799] bond0 (unregistering): Released all slaves
[  274.782952][ T8799] bond3 (unregistering): Released all slaves
[  274.792637][ T8799] bond4 (unregistering): Released all slaves
[  274.799728][ T8799] bond5 (unregistering): Released all slaves
[  274.815700][ T8799] bond6 (unregistering): Released all slaves
[  274.890137][T14529] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  274.901621][T14529] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  274.909073][T14529] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  274.925442][T14529] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  274.950352][ T8799] tipc: Left network mode
[  274.986840][ T8799] IPVS: stopping master sync thread 7084 ...
[  274.990881][ T5941] Bluetooth: hci1: command tx timeout
[  275.043885][T14529] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.056491][T14529] 8021q: adding VLAN 0 to HW filter on device team0
[  275.076036][T13231] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.078365][T13231] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.093572][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.096299][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.114595][T14590] syzkaller1: tun_chr_ioctl cmd 1074025673
[  275.117253][T14589] syzkaller1: tun_chr_ioctl cmd 1074025677
[  275.119715][T14589] syzkaller1: linktype set to 1
[  275.134038][T14590] syzkaller1: tun_chr_ioctl cmd 1074025677
[  275.136128][T14590] syzkaller1: linktype set to 1
[  275.246176][T14529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.327589][T14529] veth0_vlan: entered promiscuous mode
[  275.333303][T14529] veth1_vlan: entered promiscuous mode
[  275.361512][T14529] veth0_macvtap: entered promiscuous mode
[  275.371721][T14529] veth1_macvtap: entered promiscuous mode
[  275.385271][T14529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.398812][T14529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.408266][ T1253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.412447][ T1253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.421268][ T1253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.424190][ T1253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.461101][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2422'.
[  275.467077][ T8799] hsr_slave_0: left promiscuous mode
[  275.469299][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.476683][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.498085][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.500988][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.506754][ T8799] veth1_macvtap: left allmulticast mode
[  275.508729][ T8799] veth1_macvtap: left promiscuous mode
[  275.514432][ T8799] veth0_vlan: left promiscuous mode
[  275.540070][ T6477] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  275.558672][ T8799] team0 (unregistering): Port device vlan4 removed
[  275.562851][ T8799] pimreg3 (unregistering): left allmulticast mode
[  275.641964][ T8799] team0 (unregistering): Port device team_slave_1 removed
[  275.648856][ T8799] team0 (unregistering): Port device team_slave_0 removed
[  275.669915][ T6477] usb 9-1: device descriptor read/64, error -71
[  275.713050][   T46] smc: removing ib device syz0
[  275.777499][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.781773][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.805414][T13232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.807965][T13232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.919985][ T6477] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  276.057037][T14628] ip6t_srh: unknown srh invflags 51E8
[  276.069992][ T6477] usb 9-1: device descriptor read/64, error -71
[  276.180608][ T6477] usb usb9-port1: attempt power cycle
[  276.313082][ T8799] IPVS: stop unused estimator thread 0...
[  276.391995][T14636] ./cgroup: Can't lookup blockdev
[  276.454627][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2430'.
[  276.530070][ T6477] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  276.560293][ T6477] usb 9-1: device descriptor read/8, error -71
[  276.659947][ T5941] Bluetooth: hci3: command tx timeout
[  276.794239][T14650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2434'.
[  276.810412][ T6477] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  276.832249][ T6477] usb 9-1: device descriptor read/8, error -71
[  276.950294][ T6477] usb usb9-port1: unable to enumerate USB device
[  277.025042][T14668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2440'.
[  277.060094][ T5941] Bluetooth: hci1: command tx timeout
[  277.643868][T14689] xt_hashlimit: size too large, truncated to 1048576
[  277.694716][T14691] JFS: charset not found
[  277.800515][T14700] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  278.075298][T14710] kvm: apic: phys broadcast and lowest prio
[  278.077411][T14711] kvm: apic: phys broadcast and lowest prio
[  278.364811][T14718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2459'.
[  278.394005][T14718] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  278.399682][T14718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14718 comm=syz.4.2459
[  278.468073][T14724] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2461'.
[  278.470552][T14723] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2457'.
[  278.472760][T14724] bond0: entered allmulticast mode
[  278.476695][T14724] bond_slave_0: entered allmulticast mode
[  278.478616][T14724] bond_slave_1: entered allmulticast mode
[  278.481080][T14724] bridge0: entered allmulticast mode
[  278.604593][   T40] kauditd_printk_skb: 254 callbacks suppressed
[  278.604604][   T40] audit: type=1400 audit(1772445621.243:5338): avc:  denied  { create } for  pid=14726 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  278.662219][   T40] audit: type=1400 audit(1772445621.303:5339): avc:  denied  { unmount } for  pid=14024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  278.691653][   T40] audit: type=1400 audit(1772445621.333:5340): avc:  denied  { read } for  pid=14736 comm="syz.0.2465" dev="nsfs" ino=4026533958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  278.699953][   T40] audit: type=1400 audit(1772445621.333:5341): avc:  denied  { open } for  pid=14736 comm="syz.0.2465" path="net:[4026533958]" dev="nsfs" ino=4026533958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  278.707484][   T40] audit: type=1400 audit(1772445621.333:5342): avc:  denied  { create } for  pid=14736 comm="syz.0.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  278.715615][   T40] audit: type=1400 audit(1772445621.333:5343): avc:  denied  { bind } for  pid=14736 comm="syz.0.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  278.722954][   T40] audit: type=1400 audit(1772445621.333:5344): avc:  denied  { getopt } for  pid=14736 comm="syz.0.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  278.769538][   T40] audit: type=1400 audit(1772445621.403:5345): avc:  denied  { create } for  pid=14761 comm="syz.0.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  278.780966][   T40] audit: type=1400 audit(1772445621.423:5346): avc:  denied  { read } for  pid=14761 comm="syz.0.2467" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  278.796486][   T40] audit: type=1400 audit(1772445621.423:5347): avc:  denied  { open } for  pid=14761 comm="syz.0.2467" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  278.905894][T14773] overlayfs: missing 'lowerdir'
[  279.107446][T14793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=14793 comm=syz.3.2475
[  279.156182][ T5941] Bluetooth: hci1: command tx timeout
[  279.163001][T14797] binder: 14796:14797 ioctl c0306201 0 returned -14
[  279.357183][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2484'.
[  279.384786][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'.
[  279.387789][T14824] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2484'.
[  279.396095][T14824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=14824 comm=syz.0.2484
[  279.413902][T14824] overlayfs: cannot append lower layer
[  279.431642][T14830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.436825][T14829] program syz.4.2486 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  279.482934][T14834] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  279.489322][T14834] overlayfs: failed to set uuid (567/file0, err=-13); falling back to uuid=null.
[  279.590988][T14830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.008851][ T6001] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  280.010190][T14852] xt_hashlimit: size too large, truncated to 1048576
[  280.021852][T14853] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  280.147307][ T6001] usb 5-1: device descriptor read/64, error -71
[  280.331997][T14869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2497'.
[  280.392874][T14873] geneve1: entered allmulticast mode
[  280.403695][ T6001] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  280.427066][T14875] ALSA: mixer_oss: invalid OSS volume ''
[  280.428058][T14876] veth0_to_bridge: entered promiscuous mode
[  280.543016][ T6001] usb 5-1: device descriptor read/64, error -71
[  280.606708][T14895] tipc: Started in network mode
[  280.608780][T14895] tipc: Node identity 0900000000000000000000000000008, cluster identity 4711
[  280.659191][ T6001] usb usb5-port1: attempt power cycle
[  280.773937][T14914] netlink: 'syz.3.2511': attribute type 4 has an invalid length.
[  281.026989][ T6001] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  281.039432][T14936] IPVS: length: 120 != 24
[  281.042994][ T6001] usb 5-1: device descriptor read/8, error -71
[  281.298226][ T5999] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  281.298237][ T6001] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  281.319939][ T6001] usb 5-1: device descriptor read/8, error -71
[  281.362200][ T5286] Bluetooth: hci1: command tx timeout
[  281.436852][ T5999] usb 6-1: device descriptor read/64, error -71
[  281.436996][ T6001] usb usb5-port1: unable to enumerate USB device
[  281.692663][ T5999] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  281.831660][ T5999] usb 6-1: device descriptor read/64, error -71
[  281.949205][ T5999] usb usb6-port1: attempt power cycle
[  282.025940][T14953] net_ratelimit: 31 callbacks suppressed
[  282.025957][T14953] netlink: zone id is out of range
[  282.033239][T14953] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2524'.
[  282.133878][T14959] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2526'.
[  282.199983][T14961] xt_hashlimit: size too large, truncated to 1048576
[  282.310755][ T5999] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  282.332709][ T5999] usb 6-1: device descriptor read/8, error -71
[  282.575093][T14976] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2531'.
[  282.598555][ T5999] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  282.611127][T14980] netlink: 'syz.3.2532': attribute type 1 has an invalid length.
[  282.615113][T14982] tmpfs: Bad value for 'mpol'
[  282.623565][T14980] bond1: entered promiscuous mode
[  282.625555][T14980] 8021q: adding VLAN 0 to HW filter on device bond1
[  282.630894][ T5999] usb 6-1: device descriptor read/8, error -71
[  282.697883][T14987] loop5: detected capacity change from 0 to 7
[  282.758564][ T5999] usb usb6-port1: unable to enumerate USB device
[  282.820174][T14987] Dev loop5: unable to read RDB block 7
[  282.822252][T14987]  loop5: unable to read partition table
[  282.822697][    C3] blk_print_req_error: 131 callbacks suppressed
[  282.822710][    C3] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  282.824276][T14987] loop5: partition table beyond EOD, 
[  282.826621][    C3] buffer_io_error: 130 callbacks suppressed
[  282.826632][    C3] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  282.836720][T14987] truncated
[  282.837808][T14987] loop_reread_partitions: partition scan of loop5 (ъщѓWеЎ™‰ьЌѕГЅё*‹єР	њлЬ%х«µ4FLQkЭЉ5) failed (rc=-5)
[  283.440362][ T5999] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[  283.589617][ T5286] Bluetooth: hci1: command 0x0405 tx timeout
[  283.610983][ T5999] usb 5-1: Invalid ep0 maxpacket: 16
[  283.749435][ T5999] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[  283.909291][ T5999] usb 5-1: Invalid ep0 maxpacket: 16
[  283.911897][ T5999] usb usb5-port1: attempt power cycle
[  284.282782][ T5999] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  284.287595][   T40] kauditd_printk_skb: 218 callbacks suppressed
[  284.287617][   T40] audit: type=1400 audit(1772445626.601:5566): avc:  denied  { prog_run } for  pid=15017 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  284.294415][T15018] lo speed is unknown, defaulting to 1000
[  284.298612][   T40] audit: type=1400 audit(1772445626.610:5567): avc:  denied  { create } for  pid=15017 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  284.302706][T15018] lo speed is unknown, defaulting to 1000
[  284.308507][   T40] audit: type=1400 audit(1772445626.610:5568): avc:  denied  { write } for  pid=15017 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  284.311264][T15018] lo speed is unknown, defaulting to 1000
[  284.315282][ T5999] usb 5-1: Invalid ep0 maxpacket: 16
[  284.327919][T15018] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  284.345667][T15018] lo speed is unknown, defaulting to 1000
[  284.354349][T15018] lo speed is unknown, defaulting to 1000
[  284.357324][T15018] lo speed is unknown, defaulting to 1000
[  284.359593][   T40] audit: type=1400 audit(1772445626.676:5569): avc:  denied  { ioctl } for  pid=15017 comm="syz.1.2544" path="socket:[68174]" dev="sockfs" ino=68174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  284.360760][T15018] lo speed is unknown, defaulting to 1000
[  284.466869][ T5999] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  284.504873][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2547'.
[  284.506573][ T5999] usb 5-1: Invalid ep0 maxpacket: 16
[  284.510862][ T5999] usb usb5-port1: unable to enumerate USB device
[  284.526019][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2547'.
[  284.586060][   T40] audit: type=1400 audit(1772445626.883:5570): avc:  denied  { mounton } for  pid=15042 comm="syz.3.2548" path="/79/file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  284.592051][T15045] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  284.595651][   T40] audit: type=1400 audit(1772445626.883:5571): avc:  denied  { mount } for  pid=15042 comm="syz.3.2548" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  284.612909][   T40] audit: type=1400 audit(1772445626.883:5572): avc:  denied  { remount } for  pid=15042 comm="syz.3.2548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  284.622141][   T40] audit: type=1400 audit(1772445626.892:5573): avc:  denied  { unmount } for  pid=14254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  284.631610][   T40] audit: type=1400 audit(1772445626.920:5574): avc:  denied  { prog_load } for  pid=15046 comm="syz.3.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  284.639835][   T40] audit: type=1400 audit(1772445626.920:5575): avc:  denied  { prog_run } for  pid=15046 comm="syz.3.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  284.670066][T15056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2552'.
[  284.674041][T15056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2552'.
[  284.696534][T15058] SELinux:  policydb string  does not match my string SE Linux
[  284.700117][T15058] SELinux: failed to load policy
[  284.762605][T15062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  285.084715][T15074] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  285.156328][T15076] bond1: option downdelay: invalid value (18446744073709551615)
[  285.160544][T15076] bond1: option downdelay: allowed values 0 - 2147483647
[  285.164953][T15076] bond1 (unregistering): Released all slaves
[  285.463185][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'.
[  285.472214][T15102] hsr_slave_1 (unregistering): left promiscuous mode
[  285.519902][T15104] syzkaller0: entered promiscuous mode
[  285.522695][T15104] syzkaller0: entered allmulticast mode
[  285.728390][T15117] tmpfs: Bad value for 'mpol'
[  285.900354][T15129] tmpfs: Bad value for 'mpol'
[  286.010913][T15132] netlink: 'syz.3.2575': attribute type 89 has an invalid length.
[  286.014113][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'.
[  286.427263][T15137] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2577'.
[  286.813758][T15169] netlink: 'syz.0.2588': attribute type 1 has an invalid length.
[  286.814383][T15170] netlink: 'syz.0.2588': attribute type 1 has an invalid length.
[  286.855663][T15172] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  287.159789][ T5286] Bluetooth: hci3: command 0x0406 tx timeout
[  287.447164][T15179] 9pnet_virtio: no channels available for device syz
[  287.495245][T15186] __nla_validate_parse: 1 callbacks suppressed
[  287.495261][T15186] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2593'.
[  287.792947][ T5941] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  288.161939][ T5999] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  288.191807][T15249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15249 comm=syz.4.2614
[  288.198243][T15249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15249 comm=syz.4.2614
[  288.283595][T15255] lo speed is unknown, defaulting to 1000
[  288.321493][ T5999] usb 5-1: Using ep0 maxpacket: 32
[  288.332949][ T5999] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  288.336330][ T5999] usb 5-1: config 0 has no interface number 0
[  288.340984][ T5999] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  288.345093][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.348510][ T5999] usb 5-1: Product: syz
[  288.350514][ T5999] usb 5-1: Manufacturer: syz
[  288.352474][ T5999] usb 5-1: SerialNumber: syz
[  288.364966][ T5999] usb 5-1: config 0 descriptor??
[  288.374419][ T5999] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  288.381364][ T5999] usb 5-1: selecting invalid altsetting 1
[  288.383931][ T5999] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  288.395298][ T5999] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  288.401934][ T5999] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  288.405561][ T5999] usb 5-1: media controller created
[  288.416006][ T5999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  288.689666][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'.
[  288.693987][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2623'.
[  288.957695][T15286] : entered promiscuous mode
[  288.961009][ T6498] usb 9-1: new full-speed USB device number 39 using dummy_hcd
[  288.970166][T15288] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  288.974341][T15288] qnx6: wrong signature (magic) in superblock #1.
[  288.980031][T15288] qnx6: unable to read the first superblock
[  288.998633][T15290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15290 comm=syz.1.2629
[  289.037253][T15295] hfs: can't find a HFS filesystem on dev sr0
[  289.133511][ T6498] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.137978][ T6498] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  289.142133][ T6498] usb 9-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  289.146122][ T6498] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.157797][ T6498] usb 9-1: config 0 descriptor??
[  289.192731][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2634'.
[  289.377907][T15281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.382180][T15281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.391173][T15281] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2625'.
[  289.394917][T15281] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2625'.
[  289.400131][T15281] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2625'.
[  289.404493][ T6498] usb 9-1: string descriptor 0 read error: -71
[  289.409026][ T6498] usb 9-1: USB disconnect, device number 39
[  289.439621][T15319] lo speed is unknown, defaulting to 1000
[  289.457950][T15324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2638'.
[  289.480510][T15319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15319 comm=syz.3.2637
[  289.527729][T15332] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  289.547237][ T5999] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  289.552388][ T5999] zl10353_read_register: readreg error (reg=127, ret==-110)
[  289.570934][T15230] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  289.587778][ T5999] usb 5-1: USB disconnect, device number 32
[  289.596330][T15335] lo speed is unknown, defaulting to 1000
[  289.624186][T15336] netlink: 'syz.1.2641': attribute type 1 has an invalid length.
[  289.643627][T15336] bond2: entered promiscuous mode
[  289.646123][T15336] 8021q: adding VLAN 0 to HW filter on device bond2
[  289.658809][   T40] kauditd_printk_skb: 318 callbacks suppressed
[  289.658827][   T40] audit: type=1400 audit(1772445631.640:5894): avc:  denied  { create } for  pid=15340 comm="syz.3.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  289.674914][   T40] audit: type=1400 audit(1772445631.640:5895): avc:  denied  { write } for  pid=15340 comm="syz.3.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  289.685311][   T40] audit: type=1400 audit(1772445631.668:5896): avc:  denied  { map_create } for  pid=15343 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  289.692497][   T40] audit: type=1400 audit(1772445631.677:5897): avc:  denied  { prog_load } for  pid=15343 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  289.701439][   T40] audit: type=1400 audit(1772445631.677:5898): avc:  denied  { bpf } for  pid=15343 comm="syz.3.2643" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  289.708562][   T40] audit: type=1400 audit(1772445631.677:5899): avc:  denied  { perfmon } for  pid=15343 comm="syz.3.2643" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  289.719096][   T40] audit: type=1400 audit(1772445631.706:5900): avc:  denied  { create } for  pid=15334 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  289.728356][   T40] audit: type=1400 audit(1772445631.706:5901): avc:  denied  { execmem } for  pid=15345 comm="syz.3.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  289.736687][   T40] audit: type=1400 audit(1772445631.706:5902): avc:  denied  { execute } for  pid=15345 comm="syz.3.2644" path="/101/file1" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  289.742961][T15335] xt_HMARK: spi-set and port-set can't be combined
[  289.747213][   T40] audit: type=1804 audit(1772445631.706:5903): pid=15346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2644" name="/newroot/101/file1" dev="tmpfs" ino=544 res=1 errno=0
[  289.782251][T15351] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  289.836136][T15353] nft_compat: unsupported protocol 0
[  289.868611][T15355] netlink: 'syz.1.2647': attribute type 12 has an invalid length.
[  289.871209][T15355] netlink: 'syz.1.2647': attribute type 29 has an invalid length.
[  289.873772][T15355] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2647'.
[  289.876827][T15355] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2647'.
[  290.047620][T14759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.051027][T14759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.062891][T15383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.098912][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.102384][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.105113][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.107916][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.111912][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.116203][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.120075][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.123420][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.126975][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.130250][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.133932][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.137452][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.140628][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.144448][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.147979][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.151329][T15389] overlayfs: failed to resolve 'smackfstransmute=wlan0': -2
[  290.241112][T15396] netlink: 'syz.4.2657': attribute type 1 has an invalid length.
[  290.463854][ T5286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.470896][ T5286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.476519][ T5286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.480846][ T5286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.486905][ T5286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.528654][T15413] lo speed is unknown, defaulting to 1000
[  290.643189][T15413] chnl_net:caif_netlink_parms(): no params data found
[  290.707268][T15413] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.709553][T15413] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.711828][T15413] bridge_slave_0: entered allmulticast mode
[  290.714888][T15413] bridge_slave_0: entered promiscuous mode
[  290.718281][T15413] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.721078][T15413] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.723527][T15413] bridge_slave_1: entered allmulticast mode
[  290.726211][T15413] bridge_slave_1: entered promiscuous mode
[  290.742389][T15413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.748392][T15413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.764230][T15413] team0: Port device team_slave_0 added
[  290.767386][T15413] team0: Port device team_slave_1 added
[  290.781784][T15413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.784104][T15413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.792140][T15413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.796599][T15413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.798818][T15413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.808085][T15413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.830705][T15413] hsr_slave_0: entered promiscuous mode
[  290.832938][T15413] hsr_slave_1: entered promiscuous mode
[  290.834917][T15413] debugfs: 'hsr0' already exists in 'hsr'
[  290.837396][T15413] Cannot create hsr debugfs directory
[  290.911662][T15413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  290.914886][T15413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.013406][T15413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  291.018198][T15413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.032960][T15438] rtc_cmos 00:05: Alarms can be up to one day in the future
[  291.145188][T15413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  291.149606][T15413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.227064][T15440] netlink: 'syz.0.2668': attribute type 4 has an invalid length.
[  291.296984][ T5999] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  291.301469][T15413] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  291.304945][T15413] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.452564][T15413] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  291.457363][T15413] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  291.461780][T15413] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  291.467171][T15413] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  291.479024][ T5999] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.483091][ T5999] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  291.488731][ T5999] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  291.492580][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.496000][ T5999] usb 6-1: Product: syz
[  291.498074][ T5999] usb 6-1: Manufacturer: syz
[  291.501411][ T5999] usb 6-1: SerialNumber: syz
[  291.512362][ T5999] cdc_mbim 6-1:1.0: skipping garbage
[  291.513634][T15413] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.527756][T15413] 8021q: adding VLAN 0 to HW filter on device team0
[  291.535231][T14758] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.538224][T14758] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.552553][T14758] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.555042][T14758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.691552][T15413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.723255][T15438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  291.800763][T15473] program syz.3.2676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  291.883807][T15413] veth0_vlan: entered promiscuous mode
[  291.892249][T15413] veth1_vlan: entered promiscuous mode
[  291.911860][T15413] veth0_macvtap: entered promiscuous mode
[  291.917248][T15413] veth1_macvtap: entered promiscuous mode
[  291.927382][T15413] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.934929][T15413] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.943853][T14758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.948987][T14758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.952730][T14758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.957172][T14758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.977129][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  291.977483][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  291.980860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  291.984960][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  291.991516][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  292.029981][T15479] Invalid option length (1048180) for dns_resolver key
[  292.345833][T14757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.355415][T14757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.498666][T14756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.507212][T15483] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in;
[  292.507212][T15483]    program syz.3.2679 not setting count and/or reply_len properly
[  292.516529][T14756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.712334][ T5941] Bluetooth: hci2: command tx timeout
[  292.938412][T15494] __nla_validate_parse: 2 callbacks suppressed
[  292.938425][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2682'.
[  292.953656][T15494] netlink: 'syz.3.2682': attribute type 15 has an invalid length.
[  292.966043][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2682'.
[  292.981564][T15438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  292.984152][T14759] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  292.984301][ T5999] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  292.987151][T14759] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  292.989806][ T5999] cdc_mbim 6-1:1.0: setting rx_max = 2048
[  292.995529][ T5999] cdc_mbim 6-1:1.0: setting tx_max = 184
[  292.995578][T14759] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  293.001951][T14759] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  293.170126][T15507] syz_tun: entered allmulticast mode
[  293.185409][T15510] syz_tun: left allmulticast mode
[  293.229607][T15438] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[  293.270002][T15514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2687'.
[  293.276617][T15514] bond0: entered promiscuous mode
[  293.279234][T15514] bond_slave_0: entered promiscuous mode
[  293.281747][T15514] bond_slave_1: entered promiscuous mode
[  293.285203][T15514] gretap0: entered promiscuous mode
[  293.288653][T15514] hsr1: entered promiscuous mode
[  293.500995][ T5999] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  293.509911][ T5999] wwan wwan0: port wwan0mbim0 attached
[  293.526718][ T5999] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, f6:58:11:61:76:52
[  293.535216][ T5999] usb 6-1: USB disconnect, device number 30
[  293.538417][ T5999] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  293.642354][ T5999] wwan wwan0: port wwan0mbim0 disconnected
[  293.659558][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2692'.
[  293.845563][T15538] lo speed is unknown, defaulting to 1000
[  293.865715][ T6477] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  294.006016][T15538] fuse: root generation should be zero
[  294.035041][ T6477] usb 5-1: not running at top speed; connect to a high speed hub
[  294.038615][ T6477] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  294.042301][ T6477] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  294.046239][ T6477] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  294.050308][ T6477] usb 5-1: config 1 interface 0 has no altsetting 0
[  294.074076][ T6477] usb 5-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.40
[  294.079803][ T6477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.083944][ T6477] usb 5-1: Product: syz
[  294.085754][ T6477] usb 5-1: Manufacturer: аЎЎ
[  294.087204][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2696'.
[  294.087980][ T6477] usb 5-1: SerialNumber: syz
[  294.091317][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2696'.
[  294.100635][T15527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  294.105461][T14756] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  294.105538][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2696'.
[  294.109128][T14756] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  294.111444][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2696'.
[  294.114391][T14756] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  294.122366][T14756] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  294.296263][T15550] --map-set only usable from mangle table
[  294.298167][T15558] --map-set only usable from mangle table
[  294.332453][ T6477] usbhid 5-1:1.0: can't add hid device: -71
[  294.334671][ T6477] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  294.340915][ T6477] usb 5-1: USB disconnect, device number 33
[  294.499939][T15575] tmpfs: Unknown parameter 'grpquota,0*'
[  294.505428][T15575] netlink: 'syz.4.2704': attribute type 1 has an invalid length.
[  294.509495][T15575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2704'.
[  294.516622][T15575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15575 comm=syz.4.2704
[  294.645397][T15591] netlink: 'syz.4.2709': attribute type 13 has an invalid length.
[  294.792681][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2712'.
[  294.913595][T15615] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  294.916837][T15615] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  294.918588][ T5941] Bluetooth: hci2: command tx timeout
[  295.053214][   T40] kauditd_printk_skb: 339 callbacks suppressed
[  295.053233][   T40] audit: type=1400 audit(1772445636.707:6243): avc:  denied  { read } for  pid=15621 comm="syz.4.2717" dev="nsfs" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  295.078357][   T40] audit: type=1400 audit(1772445636.707:6244): avc:  denied  { open } for  pid=15621 comm="syz.4.2717" path="net:[4026532927]" dev="nsfs" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  295.086212][   T40] audit: type=1400 audit(1772445636.707:6245): avc:  denied  { create } for  pid=15621 comm="syz.4.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  295.094162][   T40] audit: type=1400 audit(1772445636.716:6246): avc:  denied  { setopt } for  pid=15621 comm="syz.4.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  295.102316][   T40] audit: type=1400 audit(1772445636.716:6247): avc:  denied  { ioctl } for  pid=15621 comm="syz.4.2717" path="socket:[71571]" dev="sockfs" ino=71571 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  295.110792][   T40] audit: type=1400 audit(1772445636.716:6248): avc:  denied  { getopt } for  pid=15621 comm="syz.4.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  295.118203][   T40] audit: type=1400 audit(1772445636.716:6249): avc:  denied  { read write } for  pid=15621 comm="syz.4.2717" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  295.127582][   T40] audit: type=1400 audit(1772445636.726:6250): avc:  denied  { open } for  pid=15621 comm="syz.4.2717" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  295.135453][   T40] audit: type=1400 audit(1772445636.726:6251): avc:  denied  { ioctl } for  pid=15621 comm="syz.4.2717" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  295.213755][   T40] audit: type=1400 audit(1772445636.857:6252): avc:  denied  { write } for  pid=15624 comm="syz.3.2718" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  295.598892][T15633] futex_wake_op: syz.3.2721 tries to shift op by -1; fix this program
[  295.839525][T15643] openvswitch: netlink: Message has 4 unknown bytes.
[  295.842447][T15643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.023027][T15646] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  296.660516][T15640] delete_channel: no stack
[  296.738729][T15678] lo speed is unknown, defaulting to 1000
[  296.766517][T15682] fuse: Unknown parameter 'fdЬфИ'
[  296.771171][T15682] netlink: 'syz.1.2737': attribute type 1 has an invalid length.
[  296.787896][T15682] 8021q: adding VLAN 0 to HW filter on device bond3
[  296.811775][T15682] bond3: (slave veth0_to_bond): making interface the new active one
[  296.816175][T15682] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  297.146049][ T5941] Bluetooth: hci2: command tx timeout
[  297.371054][T15704] cgroup: Need name or subsystem set
[  297.513150][T15719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=15719 comm=syz.0.2747
[  297.654116][T15733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=15733 comm=syz.1.2751
[  297.676996][T15735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.684663][T15735] netlink: 'syz.0.2753': attribute type 1 has an invalid length.
[  297.950686][T15761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=15761 comm=syz.1.2760
[  298.020155][T15766] netlink: 'syz.1.2762': attribute type 12 has an invalid length.
[  298.239484][T15788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.323475][T15795] tmpfs: Bad value for 'nr_inodes'
[  298.430557][T15788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.639053][T15836] __nla_validate_parse: 6 callbacks suppressed
[  298.639066][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2783'.
[  298.656954][T15836] 8021q: adding VLAN 0 to HW filter on device bond1
[  298.683779][T15838] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  298.692356][T15838] bond1 (unregistering): Released all slaves
[  298.816217][T15844] fuse: Bad value for 'fd'
[  299.110853][T15854] netlink: 'syz.3.2787': attribute type 14 has an invalid length.
[  299.362526][ T5941] Bluetooth: hci2: command tx timeout
[  299.415868][ T6001] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  299.444529][T15874] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2795'.
[  299.476452][T15877] netlink: 'syz.0.2796': attribute type 30 has an invalid length.
[  299.588128][ T6001] usb 8-1: Using ep0 maxpacket: 8
[  299.592711][ T6001] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  299.596686][ T6001] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  299.601372][ T6001] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  299.605898][ T6001] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  299.610646][ T6001] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  299.616497][ T6001] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  299.621144][ T6001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.622064][T15887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2800'.
[  299.724860][ T5972] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  299.755096][T15893] team0: Device vlan2 is already an upper device of the team interface
[  299.855260][ T6001] usb 8-1: usb_control_msg returned -32
[  299.857513][ T6001] usbtmc 8-1:16.0: can't read capabilities
[  299.882970][ T5972] usb 6-1: device descriptor read/64, error -71
[  299.989407][T15901] kvm: pic: single mode not supported
[  299.990340][T15901] kvm: pic: non byte write
[  299.995077][T15901] kvm: pic: non byte write
[  299.998097][T15901] kvm: pic: non byte write
[  300.001498][T15901] kvm: pic: non byte write
[  300.005137][T15901] kvm: pic: non byte write
[  300.008620][T15901] kvm: pic: non byte write
[  300.011796][T15901] kvm: pic: non byte write
[  300.015201][T15901] kvm: pic: non byte write
[  300.018638][T15901] kvm: pic: non byte write
[  300.024452][T15901] misc userio: The device must be registered before sending interrupts
[  300.153170][ T5972] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  300.191643][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'.
[  300.195366][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'.
[  300.238952][T15912] usbtmc 8-1:16.0: usb_control_msg returned -32
[  300.247546][ T6017] usb 8-1: USB disconnect, device number 26
[  300.298784][T15914] 9pnet_virtio: no channels available for device 127.0.0.1
[  300.303533][T15916] 9pnet_virtio: no channels available for device 127.0.0.1
[  300.313466][ T5972] usb 6-1: device descriptor read/64, error -71
[  300.406590][   T40] kauditd_printk_skb: 309 callbacks suppressed
[  300.406615][   T40] audit: type=1400 audit(1772445641.727:6562): avc:  denied  { unmount } for  pid=14024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  300.428592][ T5972] usb usb6-port1: attempt power cycle
[  300.439096][   T40] audit: type=1400 audit(1772445641.764:6563): avc:  denied  { bpf } for  pid=15920 comm="syz.0.2812" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  300.468977][   T40] audit: type=1400 audit(1772445641.783:6564): avc:  denied  { write } for  pid=15920 comm="syz.0.2812" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  300.482151][   T40] audit: type=1400 audit(1772445641.802:6565): avc:  denied  { read } for  pid=15920 comm="syz.0.2812" dev="nsfs" ino=4026533958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  300.489146][   T40] audit: type=1400 audit(1772445641.802:6566): avc:  denied  { open } for  pid=15920 comm="syz.0.2812" path="net:[4026533958]" dev="nsfs" ino=4026533958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  300.497326][   T40] audit: type=1400 audit(1772445641.802:6567): avc:  denied  { create } for  pid=15920 comm="syz.0.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  300.504815][   T40] audit: type=1400 audit(1772445641.802:6568): avc:  denied  { connect } for  pid=15920 comm="syz.0.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  300.537901][   T40] audit: type=1400 audit(1772445641.858:6569): avc:  denied  { shutdown } for  pid=15920 comm="syz.0.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  300.688439][   T40] audit: type=1400 audit(1772445641.990:6570): avc:  denied  { create } for  pid=15925 comm="syz.0.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  300.695549][   T40] audit: type=1400 audit(1772445641.990:6571): avc:  denied  { write } for  pid=15925 comm="syz.0.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  300.801590][ T5972] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  300.825099][ T5972] usb 6-1: device descriptor read/8, error -71
[  300.832078][T15938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2817'.
[  300.849680][T15938] tipc: Started in network mode
[  300.852014][T15938] tipc: Node identity 2e785e69df53, cluster identity 4711
[  300.855259][T15938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.864936][T15938] syzkaller0: entered promiscuous mode
[  300.867127][T15938] syzkaller0: entered allmulticast mode
[  301.078475][ T5972] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  301.099995][ T5972] usb 6-1: device descriptor read/8, error -71
[  301.119507][T15949] netlink: 'syz.0.2820': attribute type 18 has an invalid length.
[  301.123075][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'.
[  301.134951][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  301.135050][T15949] netlink: 'syz.0.2820': attribute type 18 has an invalid length.
[  301.142360][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  301.142399][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  301.142430][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  301.146529][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'.
[  301.168174][T15937] tipc: Resetting bearer <eth:syzkaller0>
[  301.183085][T15937] tipc: Disabling bearer <eth:syzkaller0>
[  301.217663][ T5972] usb usb6-port1: unable to enumerate USB device
[  301.251865][T15953] libceph: resolve 'Ѕ@ЅЙe2ІвOAq§Ё­cz' (ret=-3): failed
[  301.334294][T15963] ip6tnl0: Caught tx_queue_len zero misconfig
[  301.579750][ T5941] Bluetooth: hci2: command tx timeout
[  301.771716][T15982] Invalid source name
[  301.773612][T15982] UBIFS error (pid: 15982): cannot open "ubifs", error -22
[  301.849107][T15984] batadv_slave_0: Caught tx_queue_len zero misconfig
[  301.949602][T15992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2831'.
[  301.989412][T15995] netlink: 'syz.3.2832': attribute type 10 has an invalid length.
[  301.993947][T15995] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  301.997728][ T5941] Bluetooth: hci2: Malformed HCI Event: 0x22
[  302.000523][T15995] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  302.004437][T15995] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  302.111088][T16010] new mount options do not match the existing superblock, will be ignored
[  302.174919][T16014] syzkaller0: entered promiscuous mode
[  302.177874][T16014] syzkaller0: entered allmulticast mode
[  302.182890][T16014] TC_ACT_REPEAT abuse ?
[  302.511525][T16037] MINIX-fs: blocksize too small for device
[  302.923750][T16064] netlink: 'syz.1.2858': attribute type 1 has an invalid length.
[  302.927151][T16064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.033974][T16070] team0: Device gtp0 is up. Set it down before adding it as a team port
[  303.266264][T16082] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  303.268876][T16082] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  303.272209][T16082] vhci_hcd vhci_hcd.0: Device attached
[  303.275525][T16078] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  303.281976][T16078] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  303.287344][T16078] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  303.290679][T16078] UDF-fs: Scanning with blocksize 2048 failed
[  303.291114][T16083] vhci_hcd: connection closed
[  303.294171][ T8802] vhci_hcd vhci_hcd.4: stop threads
[  303.300290][ T8802] vhci_hcd vhci_hcd.4: release socket
[  303.302757][ T8802] vhci_hcd vhci_hcd.4: disconnect device
[  303.362061][T16078] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  303.366424][T16078] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  303.371275][T16078] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  303.373708][T16078] UDF-fs: Scanning with blocksize 4096 failed
[  303.376314][T16078] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1)
[  303.471231][T16097] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  303.514211][T16099] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2870'.
[  303.541409][T16104] syz.1.2872(16104): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  303.614683][T10132] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  303.790173][T10132] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  303.794277][T10132] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.797859][T10132] usb 9-1: Product: syz
[  303.799274][T10132] usb 9-1: Manufacturer: syz
[  303.800812][T10132] usb 9-1: SerialNumber: syz
[  303.805680][T16128] bridge0: port 3(syz_tun) entered blocking state
[  303.806963][T10132] usb 9-1: config 0 descriptor??
[  303.808916][T16128] bridge0: port 3(syz_tun) entered disabled state
[  303.812479][T16128] syz_tun: entered allmulticast mode
[  303.815137][T16128] syz_tun: entered promiscuous mode
[  303.817964][T16128] bridge0: port 3(syz_tun) entered blocking state
[  303.820729][T16128] bridge0: port 3(syz_tun) entered forwarding state
[  303.865628][T16133] fuse: Unknown parameter '184467440737095516150x0000000000000003'
[  303.872375][T16133] fuse: Unknown parameter 'gr$u'
[  304.031454][ T5985] usb 9-1: USB disconnect, device number 40
[  304.322263][T16151] overlayfs: missing 'workdir'
[  304.364011][T16155] __nla_validate_parse: 2 callbacks suppressed
[  304.364029][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2888'.
[  304.370923][T16155] openvswitch: netlink: Flow actions attr not present in new flow.
[  304.378839][T16155] autofs4:pid:16155:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  304.475110][T16161] pimreg: entered allmulticast mode
[  304.481193][T16161] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  304.485987][T16161] tmpfs: Group quota block hardlimit too large.
[  304.493502][T16161] netlink: 'syz.3.2891': attribute type 2 has an invalid length.
[  304.619444][T16163] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2892'.
[  305.014220][T16192] netlink: 'syz.3.2898': attribute type 2 has an invalid length.
[  305.054504][T16195] openvswitch: netlink: IP tunnel dst address not specified
[  305.075472][   T39] usb 9-1: new full-speed USB device number 41 using dummy_hcd
[  305.155852][T16207] netlink: 3772 bytes leftover after parsing attributes in process `syz.1.2904'.
[  305.245732][   T39] usb 9-1: no configurations
[  305.247406][   T39] usb 9-1: can't read configurations, error -22
[  305.384924][   T39] usb 9-1: new full-speed USB device number 42 using dummy_hcd
[  305.537146][T16220] overlayfs: conflicting lowerdir path
[  305.544619][   T39] usb 9-1: no configurations
[  305.546757][   T39] usb 9-1: can't read configurations, error -22
[  305.549866][   T39] usb usb9-port1: attempt power cycle
[  305.550161][T16220] SELinux:  Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped).
[  305.625134][T16224] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2911'.
[  305.633884][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'.
[  305.638804][T16226] tmpfs: Bad value for 'mpol'
[  305.652721][T16224] binder: 16223:16224 ioctl c0306201 200000000640 returned -22
[  305.770370][T14254] bridge0: port 3(syz_tun) entered disabled state
[  305.787933][T14254] syz_tun (unregistering): left allmulticast mode
[  305.791960][T14254] syz_tun (unregistering): left promiscuous mode
[  305.794862][T14254] bridge0: port 3(syz_tun) entered disabled state
[  305.906025][   T39] usb 9-1: new full-speed USB device number 43 using dummy_hcd
[  305.928583][   T39] usb 9-1: no configurations
[  305.930355][   T39] usb 9-1: can't read configurations, error -22
[  306.002634][   T40] kauditd_printk_skb: 363 callbacks suppressed
[  306.002656][   T40] audit: type=1400 audit(1772445646.981:6935): avc:  denied  { append } for  pid=16243 comm="syz.1.2919" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  306.017086][T16244] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  306.022761][   T40] audit: type=1400 audit(1772445646.991:6936): avc:  denied  { read } for  pid=16243 comm="syz.1.2919" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  306.031363][   T40] audit: type=1400 audit(1772445646.991:6937): avc:  denied  { open } for  pid=16243 comm="syz.1.2919" path="net:[4026532896]" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  306.039835][   T40] audit: type=1400 audit(1772445647.000:6938): avc:  denied  { create } for  pid=16243 comm="syz.1.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  306.046677][   T40] audit: type=1400 audit(1772445647.000:6939): avc:  denied  { create } for  pid=16243 comm="syz.1.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  306.052868][   T40] audit: type=1400 audit(1772445647.000:6940): avc:  denied  { setopt } for  pid=16243 comm="syz.1.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  306.060104][   T40] audit: type=1400 audit(1772445647.000:6941): avc:  denied  { bind } for  pid=16243 comm="syz.1.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  306.066346][   T40] audit: type=1400 audit(1772445647.000:6942): avc:  denied  { name_bind } for  pid=16243 comm="syz.1.2919" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  306.075380][   T40] audit: type=1400 audit(1772445647.000:6943): avc:  denied  { node_bind } for  pid=16243 comm="syz.1.2919" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  306.084300][   T39] usb 9-1: new full-speed USB device number 44 using dummy_hcd
[  306.084357][   T40] audit: type=1400 audit(1772445647.000:6944): avc:  denied  { listen } for  pid=16243 comm="syz.1.2919" laddr=fe80::bb lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  306.126633][   T39] usb 9-1: no configurations
[  306.128529][   T39] usb 9-1: can't read configurations, error -22
[  306.138350][   T39] usb usb9-port1: unable to enumerate USB device
[  306.142650][ T6291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  306.146068][ T6291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  306.149431][ T6291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.227595][ T6291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  306.231053][ T6291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  306.234385][ T6291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.271534][T16243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.336473][ T6291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  306.341093][ T6291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  306.347265][ T6291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.410005][ T6291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  306.414415][ T6291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  306.419069][ T6291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.473211][ T5286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.480335][ T5286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.484770][ T5286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.488401][ T5286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.494632][ T5286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.551553][ T6291] bridge_slave_1: left allmulticast mode
[  306.554036][ T6291] bridge_slave_1: left promiscuous mode
[  306.557097][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.562154][ T6291] bridge_slave_0: left allmulticast mode
[  306.564097][ T6291] bridge_slave_0: left promiscuous mode
[  306.568330][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.797249][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.802177][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.805939][ T6291] bond0 (unregistering): Released all slaves
[  306.811125][ T6291] bond1 (unregistering): Released all slaves
[  306.818547][ T6291] bond2 (unregistering): Released all slaves
[  306.825891][ T6291] bond3 (unregistering): Released all slaves
[  306.842433][T16250] lo speed is unknown, defaulting to 1000
[  306.965016][ T6291] tipc: Left network mode
[  306.995561][T16263] netlink: 'syz.0.2923': attribute type 1 has an invalid length.
[  307.034665][T16263] bond3: entered promiscuous mode
[  307.037403][T16263] 8021q: adding VLAN 0 to HW filter on device bond3
[  307.045114][T16250] chnl_net:caif_netlink_parms(): no params data found
[  307.051543][T16263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16263 comm=syz.0.2923
[  307.057130][T16263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2923'.
[  307.063127][T16263] bond3: entered allmulticast mode
[  307.175544][T16263] bond3: (slave bridge3): making interface the new active one
[  307.177966][T16263] bridge3: entered promiscuous mode
[  307.180277][T16263] bridge3: entered allmulticast mode
[  307.190677][T16263] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  307.195233][T16250] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.199560][T16250] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.202789][T16250] bridge_slave_0: entered allmulticast mode
[  307.202819][T16272] Bluetooth: MGMT ver 1.23
[  307.205793][T16250] bridge_slave_0: entered promiscuous mode
[  307.210585][T16250] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.212956][T16250] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.215377][T16250] bridge_slave_1: entered allmulticast mode
[  307.218836][T16250] bridge_slave_1: entered promiscuous mode
[  307.268397][T16250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.274157][T16250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.288585][ T6291] hsr_slave_0: left promiscuous mode
[  307.297187][ T6291] hsr_slave_1: left promiscuous mode
[  307.300512][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.311056][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.317007][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.320237][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.335884][ T6291] veth1_macvtap: left promiscuous mode
[  307.338838][ T6291] veth0_macvtap: left promiscuous mode
[  307.341616][ T6291] veth1_vlan: left promiscuous mode
[  307.344469][ T6291] veth0_vlan: left promiscuous mode
[  307.414534][ T6291] pimreg (unregistering): left allmulticast mode
[  307.578986][ T6291] team0 (unregistering): Port device team_slave_1 removed
[  307.593075][ T6291] team0 (unregistering): Port device team_slave_0 removed
[  307.712968][T16288] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  307.724828][T16250] team0: Port device team_slave_0 added
[  307.733628][T16250] team0: Port device team_slave_1 added
[  307.759408][T16250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.762297][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.772401][T16250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.777964][T16250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.780867][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.790138][T16250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.833431][T16250] hsr_slave_0: entered promiscuous mode
[  307.837059][T16250] hsr_slave_1: entered promiscuous mode
[  307.839688][T16250] debugfs: 'hsr0' already exists in 'hsr'
[  307.841458][T16299] program syz.0.2930 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  307.842033][T16250] Cannot create hsr debugfs directory
[  307.999707][T16250] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  308.019986][T16250] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  308.029706][T16250] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  308.040708][T16250] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  308.106438][T16250] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.122409][T16250] 8021q: adding VLAN 0 to HW filter on device team0
[  308.129487][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.132397][ T8802] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.142259][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.145529][ T8802] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.309227][T16250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.486922][T16250] veth0_vlan: entered promiscuous mode
[  308.493042][T16250] veth1_vlan: entered promiscuous mode
[  308.511311][T16250] veth0_macvtap: entered promiscuous mode
[  308.518566][T16250] veth1_macvtap: entered promiscuous mode
[  308.528990][T16250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.537626][T16250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.544995][ T6291] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.548130][ T6291] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.552379][ T6291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.555581][ T6291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.601864][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.605032][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.620131][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.623011][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.645213][ T5941] Bluetooth: hci0: command tx timeout
[  308.685390][T16347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.688432][T16347] batadv_slave_0: entered promiscuous mode
[  308.691304][T16347] batadv_slave_0: entered allmulticast mode
[  310.862028][ T5941] Bluetooth: hci0: command tx timeout
[  313.078518][ T5941] Bluetooth: hci0: command tx timeout
[  315.295558][ T5941] Bluetooth: hci0: command tx timeout
[  319.323474][   T40] kauditd_printk_skb: 174 callbacks suppressed
[  319.327004][   T40] audit: type=1400 audit(1772445659.470:7119): avc:  denied  { search } for  pid=16355 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.334679][   T40] audit: type=1400 audit(1772445659.470:7120): avc:  denied  { search } for  pid=16355 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.342678][   T40] audit: type=1400 audit(1772445659.480:7121): avc:  denied  { search } for  pid=16355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.350506][   T40] audit: type=1400 audit(1772445659.480:7122): avc:  denied  { search } for  pid=16355 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.359328][   T40] audit: type=1400 audit(1772445659.480:7123): avc:  denied  { read open } for  pid=16356 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.367957][   T40] audit: type=1400 audit(1772445659.480:7124): avc:  denied  { getattr } for  pid=16356 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.376068][   T40] audit: type=1400 audit(1772445659.489:7125): avc:  denied  { add_name } for  pid=16355 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  319.383689][   T40] audit: type=1400 audit(1772445659.489:7126): avc:  denied  { create } for  pid=16355 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  319.391863][   T40] audit: type=1400 audit(1772445659.489:7127): avc:  denied  { write open } for  pid=16355 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.ipv4ll" dev="tmpfs" ino=9304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  319.400540][   T40] audit: type=1400 audit(1772445659.489:7128): avc:  denied  { append } for  pid=16355 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" dev="tmpfs" ino=9304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  323.704745][T16437] fuse: Bad value for 'fd'
[  324.511154][T16420] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  324.513866][T16420] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  324.551330][T16420] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  324.553336][T16420] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  324.583826][T16420] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  324.585945][T16420] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  324.610650][T16420] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  324.612661][T16420] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  324.662893][   T40] kauditd_printk_skb: 77 callbacks suppressed
[  324.662907][   T40] audit: type=1400 audit(1772445664.481:7206): avc:  denied  { unmount } for  pid=16250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  324.689460][   T40] audit: type=1400 audit(1772445664.509:7207): avc:  denied  { ioctl } for  pid=16479 comm="syz.1.2957" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  324.701520][   T40] audit: type=1400 audit(1772445664.528:7208): avc:  denied  { read } for  pid=16482 comm="syz.4.2958" dev="nsfs" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  324.712040][   T40] audit: type=1400 audit(1772445664.528:7209): avc:  denied  { open } for  pid=16482 comm="syz.4.2958" path="net:[4026532927]" dev="nsfs" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  324.735200][T16481] lo speed is unknown, defaulting to 1000
[  324.751809][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2956'.
[  324.783476][   T40] audit: type=1400 audit(1772445664.603:7210): avc:  denied  { create } for  pid=16495 comm="syz.4.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  324.789768][   T40] audit: type=1400 audit(1772445664.603:7211): avc:  denied  { read } for  pid=16495 comm="syz.4.2960" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  324.823651][   T40] audit: type=1400 audit(1772445664.641:7212): avc:  denied  { mounton } for  pid=16500 comm="syz.4.2961" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  324.823657][T16501] tmpfs: Unknown parameter 'se'
[  324.834728][   T40] audit: type=1400 audit(1772445664.650:7213): avc:  denied  { name_bind } for  pid=16500 comm="syz.4.2961" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  324.837328][T16501] overlayfs: failed to resolve './file1': -2
[  324.845602][   T40] audit: type=1400 audit(1772445664.650:7214): avc:  denied  { node_bind } for  pid=16500 comm="syz.4.2961" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  324.855840][   T40] audit: type=1400 audit(1772445664.650:7215): avc:  denied  { mounton } for  pid=16500 comm="syz.4.2961" path="/69/bus" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  324.940186][   T39] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  324.954063][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2963'.
[  324.960588][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2963'.
[  325.012148][T16514] netlink: 'syz.5.2967': attribute type 1 has an invalid length.
[  325.013057][T16515] netlink: 'syz.5.2967': attribute type 1 has an invalid length.
[  325.069148][T16516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2966'.
[  325.090724][   T39] usb 6-1: device descriptor read/64, error -71
[  325.109112][T16521] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2968'.
[  325.110607][T16519] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2968'.
[  325.154710][   T67] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  325.273724][T16529] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2971'.
[  325.282937][T16529] netlink: 'syz.5.2971': attribute type 4 has an invalid length.
[  325.290710][T16529] netlink: 'syz.5.2971': attribute type 4 has an invalid length.
[  325.336020][   T67] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  325.342061][   T67] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  325.344990][   T39] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  325.345279][   T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  325.351157][   T67] usb 5-1: Product: syz
[  325.352609][   T67] usb 5-1: Manufacturer: syz
[  325.354222][   T67] usb 5-1: SerialNumber: syz
[  325.483616][   T39] usb 6-1: device descriptor read/64, error -71
[  325.601025][   T39] usb usb6-port1: attempt power cycle
[  325.615405][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  325.617599][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  325.963157][   T39] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  325.995582][   T39] usb 6-1: device descriptor read/8, error -71
[  326.131785][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2977'.
[  326.170694][T16545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2978'.
[  326.173640][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2978'.
[  326.212426][T16548] netlink: 'syz.5.2979': attribute type 89 has an invalid length.
[  326.250885][   T39] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  326.257465][T16551] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  326.262208][T16551] bond1 (unregistering): Released all slaves
[  326.272714][   T39] usb 6-1: device descriptor read/8, error -71
[  326.389666][   T39] usb usb6-port1: unable to enumerate USB device
[  327.479611][T13231] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  327.487135][T13231] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  327.490041][T13231] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  327.492919][T13231] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  327.518474][T16586] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  327.522303][T16586] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  327.544810][T16586] overlay: filesystem on ./bus not supported as upperdir
[  327.719339][T16608] tunl0: Caught tx_queue_len zero misconfig
[  327.906840][   T67] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  327.913244][   T67] usb 5-1: USB disconnect, device number 34
[  327.919949][   T67] usblp0: removed
[  327.971491][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.974776][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.977562][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.980301][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.983010][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.985732][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.988513][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.991388][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.994618][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  327.997344][T16627] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  328.086889][T16648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16648 comm=syz.0.3011
[  328.167146][T16657] IPv6: NLM_F_CREATE should be specified when creating new route
[  328.167630][T16656] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.173201][T16656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.175675][T16656] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.215428][T16659] misc userio: The device must be registered before sending interrupts
[  328.343156][ T5972] usb 9-1: new full-speed USB device number 45 using dummy_hcd
[  328.499685][T10132] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  328.523503][ T5972] usb 9-1: config 0 has no interfaces?
[  328.526811][ T5972] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  328.529781][ T5972] usb 9-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[  328.536031][ T5972] usb 9-1: Manufacturer: syz
[  328.540856][ T5972] usb 9-1: config 0 descriptor??
[  328.648779][T10132] usb 6-1: device descriptor read/64, error -71
[  328.667506][T16697] ptrace attach of "/syz-executor exec"[16250] was attempted by ""[16697]
[  328.678646][T16699] sctp: [Deprecated]: syz.0.3024 (pid 16699) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.678646][T16699] Use struct sctp_sack_info instead
[  328.759513][T16646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.767627][T16646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.773153][ T5930] usb 9-1: USB disconnect, device number 45
[  328.834641][T16712] netlink: 'syz.4.3028': attribute type 58 has an invalid length.
[  328.925860][T10132] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  329.064387][T10132] usb 6-1: device descriptor read/64, error -71
[  329.170458][   T50] IPVS: starting estimator thread 0...
[  329.181753][T10132] usb usb6-port1: attempt power cycle
[  329.288186][T16743] IPVS: using max 45 ests per chain, 108000 per kthread
[  329.299710][ T5930] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[  329.362357][T16749] fuse: Bad value for 'fd'
[  329.458702][ T5930] usb 9-1: Using ep0 maxpacket: 32
[  329.462792][ T5930] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  329.467095][ T5930] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  329.472091][ T5930] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  329.476678][ T5930] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  329.484402][ T5930] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  329.488202][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.492008][ T5930] usb 9-1: Product: syz
[  329.493806][ T5930] usb 9-1: Manufacturer: syz
[  329.495664][ T5930] usb 9-1: SerialNumber: syz
[  329.503553][    C3] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  329.508387][ T5930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input27
[  329.544066][T10132] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  329.566000][T10132] usb 6-1: device descriptor read/8, error -71
[  329.735798][ T5930] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  329.738528][ T5930]  (id 0x00)
[  329.789125][ T5930] rc_core: IR keymap rc-imon-pad not found
[  329.791130][ T5930] Registered IR keymap rc-empty
[  329.792788][ T5930] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  329.796112][ T5930] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  329.799446][ T5930] imon:send_packet: packet tx failed (-71)
[  329.821546][T10132] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[  329.824353][ T5930] imon 9-1:155.0: remote input dev register failed
[  329.826654][ T5930] imon 9-1:155.0: imon_init_intf0: rc device setup failed
[  329.842497][ T5930] imon 9-1:155.0: unable to initialize intf0, err 0
[  329.844716][ T5930] imon:imon_probe: failed to initialize context!
[  329.846838][ T5930] imon 9-1:155.0: unable to register, err -19
[  329.850648][ T5930] usb 9-1: USB disconnect, device number 46
[  329.853400][T10132] usb 6-1: device descriptor read/8, error -71
[  329.970560][T10132] usb usb6-port1: unable to enumerate USB device
[  330.216629][T16757] nbd4: detected capacity change from 0 to 126
[  330.224672][T16755] block nbd4: shutting down sockets
[  330.231111][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.233848][   T40] kauditd_printk_skb: 187 callbacks suppressed
[  330.233859][   T40] audit: type=1400 audit(1772445669.717:7403): avc:  denied  { perfmon } for  pid=16760 comm="syz.0.3042" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  330.235890][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.242482][   T40] audit: type=1400 audit(1772445669.726:7404): avc:  denied  { bpf } for  pid=16760 comm="syz.0.3042" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  330.256403][   T40] audit: type=1400 audit(1772445669.736:7405): avc:  denied  { recv } for  pid=5930 comm="kworker/3:2" saddr=127.0.0.1 src=34934 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  330.264926][   T40] audit: type=1400 audit(1772445669.736:7406): avc:  denied  { ioctl } for  pid=16754 comm="syz.4.3041" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.266890][ T1284] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.282839][ T1284] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.289312][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.294574][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.297170][   T40] audit: type=1400 audit(1772445669.773:7407): avc:  denied  { create } for  pid=16765 comm="syz.0.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  330.297903][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.307951][   T40] audit: type=1400 audit(1772445669.783:7408): avc:  denied  { write } for  pid=16765 comm="syz.0.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  330.317614][ T5930] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  330.320531][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.324387][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.328514][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.331819][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.336877][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.341276][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.345425][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.348980][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.353205][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.357137][T16620] ldm_validate_partition_table(): Disk read failed.
[  330.360305][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.365134][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.368691][T16620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  330.372496][T16620] Buffer I/O error on dev nbd4, logical block 0, async page read
[  330.376313][T16620] Dev nbd4: unable to read RDB block 0
[  330.378798][T16620]  nbd4: unable to read partition table
[  330.380835][T16769] __nla_validate_parse: 9 callbacks suppressed
[  330.380853][T16769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3044'.
[  330.394061][T16620] ldm_validate_partition_table(): Disk read failed.
[  330.397581][T16620] Dev nbd4: unable to read RDB block 0
[  330.400474][T16620]  nbd4: unable to read partition table
[  330.408140][   T40] audit: type=1400 audit(1772445669.886:7409): avc:  denied  { recv } for  pid=16700 comm="syz.5.3025" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=34934 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  330.431266][   T40] audit: type=1400 audit(1772445669.905:7410): avc:  denied  { create } for  pid=16770 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  330.442588][   T40] audit: type=1400 audit(1772445669.914:7411): avc:  denied  { setopt } for  pid=16770 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  330.449421][   T40] audit: type=1400 audit(1772445669.914:7412): avc:  denied  { bind } for  pid=16770 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  330.456817][ T5930] usb 9-1: device descriptor read/64, error -71
[  330.464178][T16772] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  330.468256][T16772] team0 (unregistering): Port device team_slave_0 removed
[  330.476756][T16772] team0 (unregistering): Failed to send options change via netlink (err -105)
[  330.480652][T16772] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  330.486843][T16772] team0 (unregistering): Port device team_slave_1 removed
[  330.664391][T16782] netlink: 'syz.5.3048': attribute type 4 has an invalid length.
[  330.676681][T16782] netlink: 'syz.5.3048': attribute type 4 has an invalid length.
[  330.705611][ T5930] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[  330.776676][T16792] raw_sendmsg: syz.0.3050 forgot to set AF_INET. Fix it!
[  330.844176][ T5930] usb 9-1: device descriptor read/64, error -71
[  330.915662][T16811] fuse: Bad value for 'fd'
[  330.955339][T16813] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3058'.
[  330.961491][ T5930] usb usb9-port1: attempt power cycle
[  330.965509][T16813] JFS: charset not found
[  331.334408][ T5930] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[  331.356462][ T5930] usb 9-1: device descriptor read/8, error -71
[  331.531254][T16819] overlay: ./file0 is not a directory
[  331.643481][ T5930] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[  331.676136][ T5930] usb 9-1: device descriptor read/8, error -71
[  331.792824][ T5930] usb usb9-port1: unable to enumerate USB device
[  331.826637][T16847] hugetlbfs: Bad value for 'uid'
[  331.828906][T16847] hugetlbfs: Bad value for 'uid'
[  332.094508][T16865] syzkaller1: entered promiscuous mode
[  332.096468][T16865] syzkaller1: entered allmulticast mode
[  332.957660][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3078'.
[  332.971325][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3078'.
[  333.085025][T16897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3081'.
[  333.096909][T16897] Process accounting resumed
[  333.474825][T16908] binder: 16907:16908 ioctl c0306201 200000000640 returned -22
[  333.484931][T16909] binder: 16907:16909 ioctl c0306201 200000000640 returned -22
[  333.489205][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  333.492412][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  333.495231][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  333.498549][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.587776][T16917] netlink: 'syz.1.3089': attribute type 1 has an invalid length.
[  333.601782][T16917] 8021q: adding VLAN 0 to HW filter on device bond4
[  333.618578][T16917] netlink: 'syz.1.3089': attribute type 10 has an invalid length.
[  333.622404][T16917] veth0_vlan: entered allmulticast mode
[  333.645288][T16917] veth0_vlan: left promiscuous mode
[  333.653621][T16917] veth0_vlan: entered promiscuous mode
[  333.661423][T16917] team0: Device veth0_vlan failed to register rx_handler
[  333.680582][T16919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=16919 comm=syz.1.3089
[  333.724790][T16921] devtmpfs: Cannot change global quota limit on remount
[  333.848568][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'.
[  333.903054][T16932] usb usb8: usbfs: process 16932 (syz.1.3095) did not claim interface 0 before use
[  333.955575][T16937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3096'.
[  334.084265][T16953] xt_hashlimit: size too large, truncated to 1048576
[  334.175088][T16961] xt_hashlimit: size too large, truncated to 1048576
[  334.270548][T16975] fuse: Unknown parameter '0x0000000000000003'
[  334.307357][T16985] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  334.312673][T16989] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  335.906051][   T40] kauditd_printk_skb: 169 callbacks suppressed
[  335.906069][   T40] audit: type=1400 audit(1772445675.037:7582): avc:  denied  { read write } for  pid=17014 comm="syz.4.3117" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  335.911298][T17015] fuse: Bad value for 'user_id'
[  335.919701][   T40] audit: type=1400 audit(1772445675.037:7583): avc:  denied  { open } for  pid=17014 comm="syz.4.3117" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  335.921761][T17015] fuse: Bad value for 'user_id'
[  335.931389][   T40] audit: type=1400 audit(1772445675.047:7584): avc:  denied  { mounton } for  pid=17014 comm="syz.4.3117" path="/108/file0" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  335.943349][   T40] audit: type=1400 audit(1772445675.075:7585): avc:  denied  { open } for  pid=17014 comm="syz.4.3117" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  335.954112][   T40] audit: type=1400 audit(1772445675.075:7586): avc:  denied  { read write } for  pid=17014 comm="syz.4.3117" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  335.964296][   T40] audit: type=1400 audit(1772445675.075:7587): avc:  denied  { open } for  pid=17014 comm="syz.4.3117" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  336.002302][   T40] audit: type=1400 audit(1772445675.122:7588): avc:  denied  { ioctl } for  pid=17014 comm="syz.4.3117" path="/dev/ptyqc" dev="devtmpfs" ino=139 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  336.016111][T17016] mkiss: ax0: crc mode is auto.
[  336.024884][   T40] audit: type=1400 audit(1772445675.140:7589): avc:  denied  { read } for  pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  336.303019][   T40] audit: type=1400 audit(1772445675.412:7590): avc:  denied  { create } for  pid=17017 comm="syz.4.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  336.337791][   T40] audit: type=1400 audit(1772445675.441:7591): avc:  denied  { mount } for  pid=17019 comm="syz.4.3119" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  336.463702][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'.
[  337.329553][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.332338][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.335632][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.338831][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.341854][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.346517][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.350623][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.354102][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.357646][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.361127][T17053] netlink: 'syz.1.3128': attribute type 3 has an invalid length.
[  337.840949][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'.
[  337.982537][T17081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.986189][T17081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.989560][T17081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.992812][T17081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.074513][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3138'.
[  338.148497][T17087] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  338.263740][T17095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3142'.
[  338.594204][T17117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.599489][T17117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.643531][T17121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3150'.
[  338.696389][T17117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.701992][T17117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.826729][T17117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.831176][T17117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.842992][T17131] net_ratelimit: 44 callbacks suppressed
[  338.843017][T17131] openvswitch: netlink: Key type 103 is out of range max 32
[  338.936730][T17117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.941075][T17117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.057722][ T1253] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  339.060538][ T1253] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.072886][ T1253] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  339.075649][ T1253] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.089782][ T1253] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  339.093165][ T1253] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.107696][ T1253] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  339.110808][ T1253] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.319586][T17147] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3157'.
[  339.328024][T17147] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3157'.
[  339.405337][T17153] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  339.958385][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'.
[  340.341073][T17173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3166'.
[  340.346004][T17173] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3166'.
[  340.515259][T17186] xfrm1: entered promiscuous mode
[  340.517320][T17186] xfrm1: entered allmulticast mode
[  340.627745][T17184] bond1 (unregistering): Released all slaves
[  340.647636][T17195] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.165362][T17241] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  341.244077][   T40] kauditd_printk_skb: 234 callbacks suppressed
[  341.244089][   T40] audit: type=1400 audit(1772445680.048:7826): avc:  denied  { bpf } for  pid=17249 comm="syz.0.3190" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  341.267308][   T40] audit: type=1400 audit(1772445680.067:7827): avc:  denied  { perfmon } for  pid=17249 comm="syz.0.3190" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  341.276501][   T40] audit: type=1400 audit(1772445680.076:7828): avc:  denied  { remove_name } for  pid=17251 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=9469 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  341.290532][   T40] audit: type=1400 audit(1772445680.076:7829): avc:  denied  { unlink } for  pid=17251 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=9469 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  341.300883][   T40] audit: type=1400 audit(1772445680.104:7830): avc:  denied  { unmount } for  pid=15413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  341.320178][   T40] audit: type=1400 audit(1772445680.113:7831): avc:  denied  { read write } for  pid=15413 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.334099][   T40] audit: type=1400 audit(1772445680.123:7832): avc:  denied  { open } for  pid=15413 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.352348][   T40] audit: type=1400 audit(1772445680.123:7833): avc:  denied  { ioctl } for  pid=15413 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.372579][   T40] audit: type=1400 audit(1772445680.132:7834): avc:  denied  { read } for  pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  341.384721][   T40] audit: type=1400 audit(1772445680.170:7835): avc:  denied  { create } for  pid=17254 comm="syz.4.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  341.564433][T17274] ptrace attach of "/syz-executor exec"[14529] was attempted by "/syz-executor exec"[17274]
[  342.006320][T17319] tmpfs: User quota block hardlimit too large.
[  342.183597][   T39] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  342.354240][   T39] usb 6-1: Using ep0 maxpacket: 32
[  342.357479][   T39] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  342.360311][   T39] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  342.363152][   T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  342.366329][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  342.369488][   T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  342.372663][   T39] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  342.377016][   T39] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  342.380082][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.385230][   T39] usb 6-1: config 0 descriptor??
[  342.608922][   T39] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  342.615936][   T39] usb 6-1: USB disconnect, device number 43
[  342.621105][   T39] usblp0: removed
[  342.686292][T17343] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  342.691049][T17343] overlayfs: overlapping lowerdir path
[  342.797866][T17355] random: crng reseeded on system resumption
[  343.002614][T17364] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  343.002749][T17366] fuse: Bad value for 'fd'
[  343.014425][T17367] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  343.021385][T17367] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  343.061954][T17371] __nla_validate_parse: 8 callbacks suppressed
[  343.061965][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3224'.
[  343.093735][T17371] team0: Port device team_slave_0 removed
[  343.180246][T17384] validate_nla: 42 callbacks suppressed
[  343.180258][T17384] netlink: 'syz.0.3230': attribute type 1 has an invalid length.
[  343.203971][T17389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3231'.
[  343.206950][T17384] bond5: entered promiscuous mode
[  343.209801][T17384] 8021q: adding VLAN 0 to HW filter on device bond5
[  343.215048][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'.
[  343.217933][T17389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3231'.
[  343.218937][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'.
[  343.306268][T17398] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  343.309764][T17398] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  343.314417][T17398] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null.
[  343.331082][T17400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3236'.
[  343.349110][T17402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3237'.
[  343.431172][T17411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'.
[  343.434300][T17411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'.
[  343.641427][T17421] overlayfs: maximum fs stacking depth exceeded
[  344.050900][T17441] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  344.127073][T17450] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!'
[  344.130097][T17450] CPU: 3 UID: 0 PID: 17450 Comm: syz.1.3251 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  344.130118][T17450] Tainted: [L]=SOFTLOCKUP
[  344.130122][T17450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  344.130130][T17450] Call Trace:
[  344.130135][T17450]  <TASK>
[  344.130142][T17450]  dump_stack_lvl+0x100/0x190
[  344.130181][T17450]  sysfs_warn_dup.cold+0x1c/0x28
[  344.130201][T17450]  sysfs_do_create_link_sd+0x113/0x140
[  344.130221][T17450]  sysfs_create_link+0x61/0xc0
[  344.130237][T17450]  device_add+0x675/0x1950
[  344.130262][T17450]  ? __pfx_device_add+0x10/0x10
[  344.130277][T17450]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  344.130296][T17450]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  344.130317][T17450]  wiphy_register+0x1e5b/0x2d30
[  344.130331][T17450]  ? __rtnl_unlock+0xb9/0xf0
[  344.130350][T17450]  ? netdev_run_todo+0x790/0x12c0
[  344.130368][T17450]  ? __pfx_wiphy_register+0x10/0x10
[  344.130385][T17450]  ? __asan_memset+0x23/0x50
[  344.130404][T17450]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  344.130427][T17450]  ieee80211_register_hw+0x2cfd/0x4140
[  344.130451][T17450]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  344.130466][T17450]  ? __pfx___debug_object_init+0x10/0x10
[  344.130483][T17450]  ? find_held_lock+0x2b/0x80
[  344.130499][T17450]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  344.130515][T17450]  ? __hrtimer_setup+0x178/0x280
[  344.130529][T17450]  mac80211_hwsim_new_radio+0x2847/0x57d0
[  344.130554][T17450]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  344.130570][T17450]  ? __asan_memcpy+0x3c/0x60
[  344.130588][T17450]  hwsim_new_radio_nl+0xc1f/0x1340
[  344.130603][T17450]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  344.130621][T17450]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[  344.130637][T17450]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[  344.130656][T17450]  genl_family_rcv_msg_doit+0x214/0x300
[  344.130673][T17450]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  344.130694][T17450]  ? bpf_lsm_capable+0x9/0x10
[  344.130705][T17450]  ? security_capable+0x80/0x260
[  344.130730][T17450]  ? ns_capable+0xd2/0xf0
[  344.130745][T17450]  genl_rcv_msg+0x560/0x800
[  344.130762][T17450]  ? __pfx_genl_rcv_msg+0x10/0x10
[  344.130778][T17450]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  344.130796][T17450]  netlink_rcv_skb+0x159/0x420
[  344.130858][T17450]  ? __pfx_genl_rcv_msg+0x10/0x10
[  344.130887][T17450]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  344.130910][T17450]  ? netlink_deliver_tap+0x1ae/0xcc0
[  344.130928][T17450]  genl_rcv+0x28/0x40
[  344.130942][T17450]  netlink_unicast+0x5aa/0x870
[  344.130959][T17450]  ? __pfx_netlink_unicast+0x10/0x10
[  344.130981][T17450]  netlink_sendmsg+0x8b0/0xda0
[  344.131000][T17450]  ? __pfx_netlink_sendmsg+0x10/0x10
[  344.131014][T17450]  ? __might_fault+0xc0/0x140
[  344.131038][T17450]  ____sys_sendmsg+0xa54/0xc30
[  344.131057][T17450]  ? __pfx_____sys_sendmsg+0x10/0x10
[  344.131075][T17450]  ? __pfx_futex_wake_mark+0x10/0x10
[  344.131092][T17450]  ___sys_sendmsg+0x190/0x1e0
[  344.131109][T17450]  ? __pfx____sys_sendmsg+0x10/0x10
[  344.131142][T17450]  __sys_sendmsg+0x170/0x220
[  344.131154][T17450]  ? __pfx___sys_sendmsg+0x10/0x10
[  344.131166][T17450]  ? __x64_sys_futex+0x34f/0x4d0
[  344.131187][T17450]  do_syscall_64+0x106/0xf80
[  344.131201][T17450]  ? clear_bhb_loop+0x40/0x90
[  344.131222][T17450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.131240][T17450] RIP: 0033:0x7f14e419c799
[  344.131255][T17450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.131267][T17450] RSP: 002b:00007f14e50ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  344.131278][T17450] RAX: ffffffffffffffda RBX: 00007f14e4415fa0 RCX: 00007f14e419c799
[  344.131285][T17450] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000006
[  344.131292][T17450] RBP: 00007f14e4232bd9 R08: 0000000000000000 R09: 0000000000000000
[  344.131299][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.131307][T17450] R13: 00007f14e4416038 R14: 00007f14e4415fa0 R15: 00007ffca67f62b8
[  344.131324][T17450]  </TASK>
[  344.901200][ T5972] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[  345.039774][ T5972] usb 9-1: device descriptor read/64, error -71
[  345.306245][ T5972] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  345.444965][ T5972] usb 9-1: device descriptor read/64, error -71
[  345.562652][ T5972] usb usb9-port1: attempt power cycle
[  345.936048][ T5972] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[  345.956725][ T5972] usb 9-1: device descriptor read/8, error -71
[  346.222936][ T5972] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[  346.245046][ T5972] usb 9-1: device descriptor read/8, error -71
[  346.361489][ T5972] usb usb9-port1: unable to enumerate USB device
[  346.599980][T17490] netlink: 'syz.1.3263': attribute type 1 has an invalid length.
[  346.621321][T17490] bond5: entered promiscuous mode
[  346.624020][T17490] 8021q: adding VLAN 0 to HW filter on device bond5
[  346.629500][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3263'.
[  346.673800][   T40] kauditd_printk_skb: 249 callbacks suppressed
[  346.673818][   T40] audit: type=1400 audit(1772445685.143:8085): avc:  denied  { prog_load } for  pid=17498 comm="syz.1.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  346.711633][   T40] audit: type=1400 audit(1772445685.171:8086): avc:  denied  { create } for  pid=17501 comm="syz.1.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  346.738292][   T40] audit: type=1400 audit(1772445685.199:8087): avc:  denied  { map_create } for  pid=17507 comm="syz.1.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  346.750384][   T40] audit: type=1400 audit(1772445685.199:8088): avc:  denied  { map_read map_write } for  pid=17507 comm="syz.1.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  346.757955][   T40] audit: type=1400 audit(1772445685.218:8089): avc:  denied  { prog_run } for  pid=17507 comm="syz.1.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  346.765093][   T40] audit: type=1400 audit(1772445685.218:8090): avc:  denied  { create } for  pid=17507 comm="syz.1.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  346.772400][   T40] audit: type=1400 audit(1772445685.218:8091): avc:  denied  { write } for  pid=17507 comm="syz.1.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  346.779299][   T40] audit: type=1326 audit(1772445685.218:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17507 comm="syz.1.3266" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14e419c799 code=0x0
[  347.542098][   T40] audit: type=1400 audit(1772445685.950:8093): avc:  denied  { execute } for  pid=17511 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  347.554925][   T40] audit: type=1400 audit(1772445685.950:8094): avc:  denied  { execute_no_trans } for  pid=17511 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  347.621981][ T5286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  347.630764][ T5286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  347.635842][ T5286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  347.640625][ T5286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  347.643898][ T5286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  347.664030][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  347.667482][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  347.670739][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  347.679025][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  347.684441][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  347.735828][T17520] lo speed is unknown, defaulting to 1000
[  347.887987][T17520] chnl_net:caif_netlink_parms(): no params data found
[  347.962966][T17520] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.965352][T17520] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.967706][T17520] bridge_slave_0: entered allmulticast mode
[  347.972970][T17520] bridge_slave_0: entered promiscuous mode
[  347.976941][T17520] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.979594][T17520] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.982635][T17520] bridge_slave_1: entered allmulticast mode
[  347.985574][T17520] bridge_slave_1: entered promiscuous mode
[  348.002905][T17520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.007775][T17520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.028693][T17520] team0: Port device team_slave_0 added
[  348.032411][T17520] team0: Port device team_slave_1 added
[  348.049848][T17520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.052485][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.063459][T17520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.068987][T17520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.071570][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.080846][T17581] nbd: must specify an index to disconnect
[  348.081370][T17520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.110402][T17520] hsr_slave_0: entered promiscuous mode
[  348.112935][T17520] hsr_slave_1: entered promiscuous mode
[  348.115521][T17520] debugfs: 'hsr0' already exists in 'hsr'
[  348.117589][T17520] Cannot create hsr debugfs directory
[  348.124395][T17583] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.128005][T17583] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.270341][T17520] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  348.296766][T17520] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  348.303453][T17520] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  348.309189][T17592] syzkaller0: entered promiscuous mode
[  348.311181][T17592] syzkaller0: entered allmulticast mode
[  348.315097][T17520] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  348.328993][T17592] binder: 17591:17592 ioctl c018620c 200000000000 returned -1
[  348.346061][T17600] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=17600 comm=syz.0.3290
[  348.351417][T17520] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.353993][T17520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.356714][T17520] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.359020][T17520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.412318][T17520] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.424596][T14750] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.427682][T14750] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.469253][T17520] 8021q: adding VLAN 0 to HW filter on device team0
[  348.476327][T14758] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.478827][T14758] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.484887][T14750] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.487957][T14750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.595669][T17520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.741686][T17520] veth0_vlan: entered promiscuous mode
[  348.747495][T17520] veth1_vlan: entered promiscuous mode
[  348.767579][T17520] veth0_macvtap: entered promiscuous mode
[  348.773290][T17520] veth1_macvtap: entered promiscuous mode
[  348.785708][T17520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.797891][T17520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.805529][T14758] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.808635][T14758] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.812138][T14758] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.817428][T14758] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.855502][T13234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.858139][T13234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.893389][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.896158][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.100523][T17632] __nla_validate_parse: 1 callbacks suppressed
[  349.100537][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'.
[  349.151958][T17635] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3297'.
[  349.195443][T17637] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3298'.
[  349.199454][T17637] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3298'.
[  349.392269][T17656] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3305'.
[  349.415437][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3307'.
[  349.475814][T17665] lo speed is unknown, defaulting to 1000
[  349.489291][T17670] Invalid ELF header type: 0 != 1
[  349.541133][T17686] ipt_REJECT: ECHOREPLY no longer supported.
[  349.621038][T17694] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3314'.
[  349.910227][ T5941] Bluetooth: hci3: command tx timeout
[  349.946493][T17711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3320'.
[  350.111335][T16620] udevd[16620]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  350.145865][T17727] binder: Bad value for 'max'
[  350.185419][T17730] 
[  350.186299][T17730] ============================================
[  350.188427][T17730] WARNING: possible recursive locking detected
[  350.190489][T17730] syzkaller #0 Tainted: G             L     
[  350.192555][T17730] --------------------------------------------
[  350.194963][T17730] syz.1.3328/17730 is trying to acquire lock:
[  350.197177][T17730] ffff888033d8b0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360
[  350.200250][T17730] 
[  350.200250][T17730] but task is already holding lock:
[  350.202723][T17730] ffff888034dcc8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310
[  350.206031][T17730] 
[  350.206031][T17730] other info that might help us debug this:
[  350.208681][T17730]  Possible unsafe locking scenario:
[  350.208681][T17730] 
[  350.211221][T17730]        CPU0
[  350.212350][T17730]        ----
[  350.213455][T17730]   lock(&dev->mutex#4);
[  350.214886][T17730]   lock(&dev->mutex#4);
[  350.216660][T17730] 
[  350.216660][T17730]  *** DEADLOCK ***
[  350.216660][T17730] 
[  350.219234][T17730]  May be due to missing lock nesting notation
[  350.219234][T17730] 
[  350.221923][T17730] 1 lock held by syz.1.3328/17730:
[  350.223581][T17730]  #0: ffff888034dcc8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310
[  350.226980][T17730] 
[  350.226980][T17730] stack backtrace:
[  350.228929][T17730] CPU: 3 UID: 0 PID: 17730 Comm: syz.1.3328 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  350.228958][T17730] Tainted: [L]=SOFTLOCKUP
[  350.228963][T17730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  350.228970][T17730] Call Trace:
[  350.228977][T17730]  <TASK>
[  350.228983][T17730]  dump_stack_lvl+0x100/0x190
[  350.229005][T17730]  print_deadlock_bug.cold+0xbd/0xca
[  350.229029][T17730]  __lock_acquire+0x12bb/0x2630
[  350.229051][T17730]  lock_acquire+0x1cf/0x380
[  350.229068][T17730]  ? comedi_do_insn+0x2e/0x360
[  350.229081][T17730]  ? __pfx___might_resched+0x10/0x10
[  350.229095][T17730]  __mutex_lock+0x1a2/0x1b90
[  350.229110][T17730]  ? comedi_do_insn+0x2e/0x360
[  350.229122][T17730]  ? comedi_do_insn+0x2e/0x360
[  350.229135][T17730]  ? __pfx___mutex_lock+0x10/0x10
[  350.229148][T17730]  ? __pfx___might_resched+0x10/0x10
[  350.229161][T17730]  ? __up_read+0x2c5/0x700
[  350.229174][T17730]  ? comedi_do_insn+0x2e/0x360
[  350.229186][T17730]  comedi_do_insn+0x2e/0x360
[  350.229206][T17730]  comedi_dio_bitfield2+0x3c0/0x420
[  350.229219][T17730]  ? __pfx_comedi_dio_bitfield2+0x10/0x10
[  350.229234][T17730]  ? do_insn_ioctl+0xda/0x4e0
[  350.229249][T17730]  ? stack_trace_save+0x8e/0xc0
[  350.229264][T17730]  ? __pfx_stack_trace_save+0x10/0x10
[  350.229280][T17730]  bonding_dio_insn_bits+0x2b9/0x570
[  350.229299][T17730]  ? kasan_save_track+0x14/0x30
[  350.229317][T17730]  ? __pfx_bonding_dio_insn_bits+0x10/0x10
[  350.229332][T17730]  ? __x64_sys_ioctl+0x18e/0x210
[  350.229347][T17730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.229360][T17730]  insn_rw_emulate_bits+0x2a2/0x5e0
[  350.229379][T17730]  ? __pfx_insn_rw_emulate_bits+0x10/0x10
[  350.229398][T17730]  ? comedi_check_chanlist+0x27e/0x300
[  350.229416][T17730]  parse_insn+0x83f/0x19f0
[  350.229431][T17730]  ? trace_kmalloc+0x101/0x130
[  350.229441][T17730]  ? __pfx_parse_insn+0x10/0x10
[  350.229455][T17730]  ? __kmalloc_noprof+0x320/0x850
[  350.229471][T17730]  do_insn_ioctl+0x152/0x4e0
[  350.229487][T17730]  comedi_unlocked_ioctl+0xf68/0x3310
[  350.229503][T17730]  ? tomoyo_path_number_perm+0x188/0x580
[  350.229516][T17730]  ? futex_wait+0x125/0x380
[  350.229530][T17730]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  350.229549][T17730]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  350.229567][T17730]  ? do_vfs_ioctl+0x226/0x13e0
[  350.229582][T17730]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  350.229598][T17730]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  350.229613][T17730]  ? __fget_files+0x215/0x3d0
[  350.229624][T17730]  ? hook_file_ioctl_common+0x146/0x410
[  350.229642][T17730]  ? selinux_file_ioctl+0x139/0x290
[  350.229655][T17730]  ? selinux_file_ioctl+0xb4/0x290
[  350.229669][T17730]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  350.229685][T17730]  __x64_sys_ioctl+0x18e/0x210
[  350.229702][T17730]  do_syscall_64+0x106/0xf80
[  350.229714][T17730]  ? clear_bhb_loop+0x40/0x90
[  350.229726][T17730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.229738][T17730] RIP: 0033:0x7f14e419c799
[  350.229748][T17730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.229760][T17730] RSP: 002b:00007f14e50ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  350.229772][T17730] RAX: ffffffffffffffda RBX: 00007f14e4415fa0 RCX: 00007f14e419c799
[  350.229780][T17730] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004
[  350.229788][T17730] RBP: 00007f14e4232bd9 R08: 0000000000000000 R09: 0000000000000000
[  350.229795][T17730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.229802][T17730] R13: 00007f14e4416038 R14: 00007f14e4415fa0 R15: 00007ffca67f62b8
[  350.229812][T17730]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  350.810846][T14748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.814076][T14748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.064203][T14748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.067366][T14748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.106887][T14748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.110368][T14748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.308903][T14748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.312188][T14748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.423695][T14748] bridge_slave_1: left allmulticast mode
[  351.426225][T14748] bridge_slave_1: left promiscuous mode
[  351.428825][T14748] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.433228][T14748] bridge_slave_0: left allmulticast mode
[  351.436085][T14748] bridge_slave_0: left promiscuous mode
[  351.438608][T14748] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.478596][T14748] gretap0 (unregistering): left promiscuous mode
[  351.487642][ T6498] SELinux: failure in sel_netif_sid_slow(), invalid network interface (90)
[  351.713785][T14748] bond3 (unregistering): (slave bridge3): Releasing backup interface
[  351.717124][T14748] bridge3 (unregistering): left promiscuous mode
[  351.719264][T14748] bridge3 (unregistering): left allmulticast mode
[  351.852049][T14748] bond0 (unregistering): left promiscuous mode
[  351.854640][T14748] bond_slave_0: left promiscuous mode
[  351.857258][T14748] bond_slave_1: left promiscuous mode
[  351.862636][T14748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.867898][T14748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.873010][T14748] bond0 (unregistering): Released all slaves
[  351.877944][T14748] bond1 (unregistering): Released all slaves
[  351.884270][T14748] bond2 (unregistering): Released all slaves
[  351.890402][T14748] bond3 (unregistering): Released all slaves
[  351.895753][T14748] bond4 (unregistering): Released all slaves
[  351.901031][T14748] bond5 (unregistering): Released all slaves
[  351.905640][T14748] bond6 (unregistering): Released all slaves
[  352.203485][T14748] hsr_slave_0: left promiscuous mode
[  352.205655][T14748] hsr_slave_1: left promiscuous mode
[  352.209627][T14748] veth1_macvtap: left promiscuous mode
[  352.211953][T14748] veth0_macvtap: left promiscuous mode
[  352.215710][T14748] veth1_vlan: left promiscuous mode
[  352.218016][T14748] veth0_vlan: left promiscuous mode
[  352.632188][T14748] IPVS: stop unused estimator thread 0...
[  352.740484][T14748] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.834362][T14748] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.886902][T14748] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.004922][T14748] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.083687][T14748] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.087103][T14748] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.151831][T14748] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.155634][T14748] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.227111][T14748] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.230197][T14748] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.303691][T14748] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.306905][T14748] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.435806][T14748] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.520734][T14748] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.629297][T14748] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.692135][T14748] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.795148][T14748] bridge_slave_1: left allmulticast mode
[  353.797063][T14748] bridge_slave_1: left promiscuous mode
[  353.798975][T14748] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.803605][T14748] bridge_slave_0: left allmulticast mode
[  353.805454][T14748] bridge_slave_0: left promiscuous mode
[  353.807286][T14748] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.811049][T14748] bridge_slave_1: left allmulticast mode
[  353.812897][T14748] bridge_slave_1: left promiscuous mode
[  353.814835][T14748] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.817750][T14748] bridge_slave_0: left allmulticast mode
[  353.819665][T14748] bridge_slave_0: left promiscuous mode
[  353.821648][T14748] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.825398][T14748] bridge_slave_1: left allmulticast mode
[  353.827301][T14748] bridge_slave_1: left promiscuous mode
[  353.829426][T14748] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.833139][T14748] bridge_slave_0: left allmulticast mode
[  353.835025][T14748] bridge_slave_0: left promiscuous mode
[  353.837033][T14748] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.981819][T14748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  353.986301][T14748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.990997][T14748] bond0 (unregistering): Released all slaves
[  354.164908][T14748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.169504][T14748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.173477][T14748] bond0 (unregistering): Released all slaves
[  354.177339][T14748] bond1 (unregistering): Released all slaves
[  354.182352][T14748] bond2 (unregistering): Released all slaves
[  354.188760][T14748] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  354.193285][T14748] bond3 (unregistering): Released all slaves
[  354.199443][T14748] bond4 (unregistering): Released all slaves
[  354.206955][T14748] bond5 (unregistering): Released all slaves
[  354.516150][T14748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.520063][T14748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.523691][T14748] bond0 (unregistering): Released all slaves
[  354.614012][T14748] : left promiscuous mode
[  354.689577][T14748] tipc: Left network mode
[  355.349156][T14748] hsr_slave_0: left promiscuous mode
[  355.352079][T14748] hsr_slave_1: left promiscuous mode
[  355.355106][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.361022][T14748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.364706][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.368138][T14748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.373798][T14748] hsr_slave_0: left promiscuous mode
[  355.376813][T14748] hsr_slave_1: left promiscuous mode
[  355.379895][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.383200][T14748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.386940][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.392575][T14748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.399724][T14748] hsr_slave_0: left promiscuous mode
[  355.402393][T14748] hsr_slave_1: left promiscuous mode
[  355.405064][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.408229][T14748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.412440][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.415827][T14748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.427440][T14748] veth1_macvtap: left promiscuous mode
[  355.430022][T14748] veth0_macvtap: left promiscuous mode
[  355.432708][T14748] veth1_vlan: left promiscuous mode
[  355.435076][T14748] veth0_vlan: left promiscuous mode
[  355.438543][T14748] veth1_macvtap: left promiscuous mode
[  355.441059][T14748] veth0_macvtap: left promiscuous mode
[  355.443686][T14748] veth1_vlan: left promiscuous mode
[  355.446935][T14748] veth1_macvtap: left promiscuous mode
[  355.449303][T14748] veth0_macvtap: left promiscuous mode
[  355.451711][T14748] veth1_vlan: left promiscuous mode
[  355.455142][T14748] veth0_vlan: left promiscuous mode
[  355.615392][T14748] team0 (unregistering): Port device team_slave_1 removed
[  355.651617][T14748] team0 (unregistering): Port device team_slave_0 removed
[  355.740169][T14748] team0 (unregistering): Port device team_slave_1 removed
[  355.747012][T14748] team0 (unregistering): Port device team_slave_0 removed
[  355.870677][T14748] team0 (unregistering): Port device team_slave_1 removed
[  355.915630][ T6477] lo speed is unknown, defaulting to 1000
[  355.918231][ T6477] infiniband syz2: ib_query_port failed (-19)