last executing test programs:

21.429549601s ago: executing program 1 (id=108):
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_route_sched(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfffff00a, 0xff, 0x101, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10000, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0x2, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x80000000, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x1, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x1, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x800, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e6, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000001, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x200, 0x1ff, 0x8163, 0x4306ded, 0x1de7, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x5, 0x0, 0x3, 0x8, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x40f, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x0, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0x9, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="a200000000", @ANYRES16=r1, @ANYBLOB="00022dbd7000ffdbdf250100000000000000014100000018001700000000000000007564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8014)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='selinuxfs\x00', 0x1210051, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}]})

21.288464868s ago: executing program 1 (id=112):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x5, 0x6, 0x5, 0x4, 0x1, 0x9, 0x4, 0x1, 0x1, 0xf, 0x1a, 0x12, 0x5, 0x80, 0x1, 0xfffffbff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$sysctl(r4, &(0x7f0000000000)='1\x00', 0x2)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)

21.213817581s ago: executing program 1 (id=114):
syz_emit_ethernet(0x44, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x36, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}, {"b485c43dc2d3e83ab2597f0d86dd"}}}}}}, 0x0) (async)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x444000, 0x0) (async)
r1 = inotify_init1(0x0) (async)
r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r1, 0x8, r2)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)) (async)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7)
fsopen(0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x7a006bf8fdd78da7, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xfa}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x5)

21.203832859s ago: executing program 1 (id=118):
unshare(0x22020600)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x300, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

21.127834299s ago: executing program 1 (id=122):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
read(r0, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r2 = accept(r1, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xde3ebb5)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
fstat(r3, &(0x7f0000000300))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368653d7265616461686561642c63616368657461673d403a282c76657273696f6e3d3970323030302e752c0004d53f73b2b0ab7364a9071e6e7578c41d94539ca5de16001328141a02729bb0b4d0235c2aef76bef7c75528a51e6221017ae5f1c38a9e8898c18a5c2edcb0bb0bde5da6d8a1b5e7f5adf986910b56fc6d0dbc8f647b917b4ca348f10b4fb6f8c3bde96be99a99d17f7f362622aeba2e85df0d6608"])
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r7 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x355}, &(0x7f0000000240), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440)=r6, 0x1)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004084)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800)
ioctl$HIDIOCGREPORTINFO(r9, 0xc00c4809, 0x0)

19.350043999s ago: executing program 1 (id=146):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r2 = syz_clone(0x1000000, &(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r2, &(0x7f0000002280), 0x0, &(0x7f0000002780), 0x0, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)

4.183553145s ago: executing program 32 (id=146):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r2 = syz_clone(0x1000000, &(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r2, &(0x7f0000002280), 0x0, &(0x7f0000002780), 0x0, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)

1.860119253s ago: executing program 4 (id=322):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31", 0x5d}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892f", 0x13}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995", 0x20}], 0x4}}], 0x2, 0x810) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async, rerun: 32)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.077481203s ago: executing program 4 (id=328):
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)

1.074603837s ago: executing program 4 (id=331):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250100000040000680060001000a000000080006000400000008000700", @ANYRES32=r2, @ANYBLOB="0800030000000000055a504c4e7d7875d7000400fc010000000000000000000000000001040001800800040001610000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002)

939.591221ms ago: executing program 4 (id=335):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40300, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xb3f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x2, 0x400})
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

879.025154ms ago: executing program 4 (id=338):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x100000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00c8"], 0x24}}, 0x0)
accept4(r0, &(0x7f0000000180)=@qipcrtr, &(0x7f0000000080)=0x80, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01040000000000000010300000003000000002000000000000000000001068f2cc41f5687153b0040000090100000000000000010000840000000000000000020000000000004000"/83], 0x0, 0x4a}, 0x28)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e8"], 0xb4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'pim6reg0\x00'})
socket$netlink(0x10, 0x3, 0x15)

807.950075ms ago: executing program 3 (id=339):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0)

806.480467ms ago: executing program 3 (id=341):
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e08000740000000002400028014000180080001"], 0x168}}, 0x4010)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x1, 0x170bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @local}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100005800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x1818c1, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x6, @mcast2, 0x2}}, 0x129f, 0x5}, 0x90)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000040000000000000e0100000000000000000000d500e321deac5fff48d1e4af9e846817ecdc6c7473522d3d98e3b4ad1fc2dd484a2a7698431f99ce02fe30f6d1c8186628bab0a00da3fca5a16ddba75839d7b290dad999f2394bda7e47089c8b1d2263e2f8d877b6c5f9f13bb35981754a1173564c6acd140fd457b8b153ae496c877651b7127df9764d16cc3d06943b61548a7eb51bb9a084e92e2b1f31ac4c3c146be82bef877454c6f2d226dc0e946d"], 0x0, 0x2d, 0x0, 0x1}, 0x28)
r6 = accept$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000300)=0x1c)
mmap(&(0x7f0000003000/0x13000)=nil, 0x13000, 0x100000d, 0x13, r6, 0x0)

703.219934ms ago: executing program 4 (id=344):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x715, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r0}, 0x4)

702.023049ms ago: executing program 3 (id=345):
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0)
pivot_root(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00') (async)
pivot_root(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1c000, &(0x7f0000000200)={[{@nfs_export_off}, {@nfs_export_on}, {@redirect_dir_on}, {@xino_auto}, {@verity_require}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6e)
fsopen(&(0x7f0000000300)='jfs\x00', 0x0) (async)
r2 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) (async)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) (async)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff)
socket$nl_generic(0x10, 0x3, 0x10)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

619.255924ms ago: executing program 0 (id=347):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESDEC])
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket(0x40000000015, 0x5, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4], 0x7c}}, 0x20000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f00000000c0)=[<r7=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000002c0)=[r7], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0x13235166, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x0, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x100000003, 0x8], 0xdddd1000, 0x2a80})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x1d9)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000240)={0x10001, 0x402000, 0x1000000, 0xfffffffc, 0xc})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r8, 0xffffffffffffffff, 0x521}, 0x57)
r10 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10002, 0x9)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

559.720832ms ago: executing program 2 (id=348):
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c, 0x0}, 0x0)

557.204146ms ago: executing program 2 (id=349):
mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000280)={'trans=virtio,', {[{@access_any}]}})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x250, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3, 0xf4, 'kmp\x00', "377da29a98a85027440fb1647c5950ecfd45c615dfd84bacf537ed92ac620b95fe75775bfa0c1f3636674f1bc9affc23d45f6e27b674720897315a51a5338ca0ac2dd6b5b2d96bd558dc767e923d15aba2f74dff1149e15f5ba483d804234a06e4bc7d462efc9092f876f845199bb88c0f39fec8f07125d04e8375b370fdb68d", 0x5d, 0x2, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x3, 0x0, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b201664bd37d5e1dcb2f64ec074a225ac13a89be79e2bd5bdcd8cffc5ee0512dfe666423022c73264aee90673292872b9ed8e53787dcf53322f00", 0xfffff, r0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)

455.97583ms ago: executing program 2 (id=350):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
accept(r1, 0x0, 0x0) (async)
accept(r1, 0x0, 0x0)
shutdown(r1, 0x0) (async)
shutdown(r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)

454.872864ms ago: executing program 0 (id=351):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ptrace(0x10, r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r3, 0x4, 0x44000)
write$UHID_CREATE2(r3, 0x0, 0x1118)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a", 0x2}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x2}, 0x8)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000740)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r4)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="4e6677076f8e1853ef6abdc0503079388e1c4395f5f6061628ab710b157141cc1e37b30686138add5ae00b60c686304947d831580c36d94223f616fa4e8fec8737ee60a3d8999f306ab55bec6d43e99f389b8d0f43ac8ebe92d80387ae84e0668843d00314db286407baf340da6eb49a73500d6acb5366a3e10125bac8c3b5c666a7d6d69ed1716d7d5eba72fcce438b84aee605fdb325f855880083333fbdc164723ade6ab3028213321d6725fd8489ed90f7825b4317a87365d99f02e0ee810d6a7e4d22633ba309e1f00663ce7d797f3660c1ad75e43a302d", @ANYRES16=r8, @ANYBLOB="00042dbd7000fddbdf250c00000005002e000100000006002800030000000500300001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8841)
setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r7, 0xd}, 0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={r7, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x5}, &(0x7f0000000000)=0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)
ptrace$getsig(0x4202, r2, 0x8, &(0x7f0000000280))
sendto$inet(r3, &(0x7f0000000340)="5ed880de5ed3686687e4134cba451f2441e9f96b4477b2b388f388c79ab71118df8730c4605a57f8d49864e0ff38e661e46df985eea31950db1478b58a99fc861ecf3aa9d8f7636c40fb30a4765c4eb4a00d260fbd6f2275a6e9c07125ad9f33e1f7fbf86f46518bf01f1dfd4ae6a0536ad75bd99213195172a51d0a51328897278eceedbaea18f55eed4db4339bc7afb3", 0x91, 0x4000, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x7})

369.909309ms ago: executing program 3 (id=352):
sendmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000002900000043"], 0x10}}], 0x1, 0x20040000)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @empty}, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x4e22, @private=0xa010102}, 'veth1_vlan\x00'})
listen(r0, 0x1000)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x7, 0x0, 0x0, 0x1, 0x2, 0x8}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000804)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8e85}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008041}, 0x24000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'pimreg1\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)={'team0\x00', <r8=>0x0})
getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000580)={@private, @initdev, <r9=>0x0}, &(0x7f00000005c0)=0xc)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000700)={&(0x7f0000000480), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4011)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]})
close_range(r10, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)

268.45948ms ago: executing program 3 (id=353):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="042c11effa623886d90588fff4"], 0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
mq_unlink(0x0)
fanotify_init(0x200, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0)

268.107016ms ago: executing program 0 (id=354):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020011}, 0x0)
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
fstat(r4, &(0x7f0000003200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
close(r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x876, 0x1, 0x5, 0x20000, 0x1, 0x5, '\x00', r5, r6, 0x2, 0x4, 0x1}, 0x50)

179.685069ms ago: executing program 2 (id=355):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000000000000000000000006a195511000000"], 0x48) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000000000000000000000006a195511000000"], 0x48)
io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0xca8a}) (async)
r0 = io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0xca8a})
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', <r2=>0x0})
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r2}, 0xc) (async)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r2}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4) (async)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r5, 0x4)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r10, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r11 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r11, &(0x7f0000000000)={0x23, 0x5, 0x9, 0xfd}, 0x10)
socket$inet(0x2, 0x2, 0x0) (async)
r12 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000580)={0x1, {{0x2, 0x4e24, @multicast2}}}, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)

178.676046ms ago: executing program 0 (id=356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0)

79.660333ms ago: executing program 0 (id=357):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="0000838d99af812b5e6d0000"])
read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

77.231027ms ago: executing program 2 (id=358):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000d02000077ab0000000061fab4b0eb3646b77f8b58f8d68f78338af8b9129ebe070dcdfbf6ec49bbee8b0813956c9f12ed3d9086efba8c857b0eff17d23e9a9004292b1239b39ae588eb6510bc1cfd4783d8b335c633821c"], 0x96)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x4b)
close(r2)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [<r4=>0x0, 0x0, 0x0, <r5=>0x0], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x81, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8], [], [0x0, 0x0, 0x405]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff1})
r6 = socket$inet6(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}, 0x1c)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
r7 = socket(0x2, 0x2, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r7)
r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
syz_open_dev$sndpcmc(&(0x7f0000000280), 0x2, 0x40000)
write$FUSE_NOTIFY_RESEND(r8, &(0x7f0000000340)={0x14}, 0x14)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$FIOCLEX(r9, 0x5451)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x811044, 0x0)
preadv(r8, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0)

76.226975ms ago: executing program 2 (id=359):
socket$netlink(0x10, 0x3, 0x4)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000240)=r5)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c00028008001a00e0000002de2481b04e442eb7f5a87314a323c5e88ecc2d9e42a7e0936bfad4166cece596c9db0b6f0377053938a8218f2a2bfc9f1991cda4518be3a63bf0c91544b0c281d8e99cc4cb062b0d9915e51db29b01bd02f1541f8cb038f10b3694db03521ffa50a77c2eec9044cc7b09f53c9eac52bd5601efb68693eedf8bb488d8875fad19b5f93ab02cb289541ffd716519981eece760d3a7176b39c255884c25b9a22c6d44bd8d572b1e98989d9bfb0240a818e806c6c45e15a2a767fa340ed8922ddfe8c458ef"], 0x3c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x0)

75.887626ms ago: executing program 0 (id=360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900010000000000000000000200000000000009002e"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4898) (async, rerun: 32)
r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x13, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
connect$packet(r3, &(0x7f0000000480)={0x11, 0x1c, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) (async)
ioctl$VT_DISALLOCATE(r2, 0x5608)
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) (async)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x101, 0x6}, {0x7c4, 0xe88}]})

0s ago: executing program 3 (id=361):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newae={0x40, 0x1e, 0x100, 0x70bd25, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0xa, 0x3c}, @in=@loopback, 0x7, 0x3506}}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x44)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1947' (ED25519) to the list of known hosts.
[   45.683857][   T40] audit: type=1400 audit(1763822153.890:62): avc:  denied  { name_bind } for  pid=5870 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   45.703774][   T40] audit: type=1400 audit(1763822153.910:63): avc:  denied  { write } for  pid=5873 comm="sh" path="pipe:[7199]" dev="pipefs" ino=7199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   45.719521][   T40] audit: type=1400 audit(1763822153.920:64): avc:  denied  { execute } for  pid=5873 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   45.729855][   T40] audit: type=1400 audit(1763822153.920:65): avc:  denied  { execute_no_trans } for  pid=5873 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   47.804657][   T40] audit: type=1400 audit(1763822156.010:66): avc:  denied  { mounton } for  pid=5873 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   47.817463][ T5873] cgroup: Unknown subsys name 'net'
[   47.975426][ T5873] cgroup: Unknown subsys name 'cpuset'
[   47.982030][ T5873] cgroup: Unknown subsys name 'rlimit'
[   48.285667][ T5919] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   49.286110][ T5873] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.855054][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   52.855068][   T40] audit: type=1400 audit(1763822161.060:80): avc:  denied  { execmem } for  pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   53.109525][   T40] audit: type=1400 audit(1763822161.310:81): avc:  denied  { create } for  pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.119086][   T40] audit: type=1400 audit(1763822161.310:82): avc:  denied  { read write } for  pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   53.126971][   T40] audit: type=1400 audit(1763822161.310:83): avc:  denied  { open } for  pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   53.135370][   T40] audit: type=1400 audit(1763822161.320:84): avc:  denied  { ioctl } for  pid=5929 comm="syz-executor" path="socket:[2627]" dev="sockfs" ino=2627 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.144593][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.147791][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.150263][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.153396][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.157355][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.160086][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.163031][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.165737][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.168107][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.176527][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.179762][   T40] audit: type=1400 audit(1763822161.380:85): avc:  denied  { read } for  pid=5933 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   53.182857][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.190174][   T40] audit: type=1400 audit(1763822161.380:86): avc:  denied  { open } for  pid=5933 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   53.190235][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.199828][   T40] audit: type=1400 audit(1763822161.380:87): avc:  denied  { mounton } for  pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   53.205332][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   53.207223][   T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.210232][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   53.213659][   T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.218049][   T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   53.221617][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.225273][ T5293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   53.229532][ T5932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   53.341155][   T40] audit: type=1400 audit(1763822161.540:88): avc:  denied  { module_request } for  pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   53.382585][ T5933] chnl_net:caif_netlink_parms(): no params data found
[   53.572424][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.575130][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.577821][ T5933] bridge_slave_0: entered allmulticast mode
[   53.583369][ T5933] bridge_slave_0: entered promiscuous mode
[   53.611233][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.614172][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.617101][ T5933] bridge_slave_1: entered allmulticast mode
[   53.620760][ T5933] bridge_slave_1: entered promiscuous mode
[   53.680699][ T5929] chnl_net:caif_netlink_parms(): no params data found
[   53.697074][ T5940] chnl_net:caif_netlink_parms(): no params data found
[   53.705151][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.735314][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.758287][ T5937] chnl_net:caif_netlink_parms(): no params data found
[   53.861708][ T5933] team0: Port device team_slave_0 added
[   53.915408][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.918421][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.921582][ T5929] bridge_slave_0: entered allmulticast mode
[   53.925151][ T5929] bridge_slave_0: entered promiscuous mode
[   53.962976][ T5933] team0: Port device team_slave_1 added
[   54.020096][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.023245][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.026427][ T5929] bridge_slave_1: entered allmulticast mode
[   54.030237][ T5929] bridge_slave_1: entered promiscuous mode
[   54.089323][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.092694][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.095744][ T5940] bridge_slave_0: entered allmulticast mode
[   54.099592][ T5940] bridge_slave_0: entered promiscuous mode
[   54.104667][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.107703][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.110738][ T5940] bridge_slave_1: entered allmulticast mode
[   54.114179][ T5940] bridge_slave_1: entered promiscuous mode
[   54.177308][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.179708][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.189845][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.236542][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.240488][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.244248][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.253398][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.257503][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.259944][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.263742][ T5937] bridge_slave_0: entered allmulticast mode
[   54.266868][ T5937] bridge_slave_0: entered promiscuous mode
[   54.288490][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.308772][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.311038][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.314281][ T5937] bridge_slave_1: entered allmulticast mode
[   54.317282][ T5937] bridge_slave_1: entered promiscuous mode
[   54.336490][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.343365][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.449716][ T5929] team0: Port device team_slave_0 added
[   54.455815][ T5929] team0: Port device team_slave_1 added
[   54.462227][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.482800][ T5933] hsr_slave_0: entered promiscuous mode
[   54.485535][ T5933] hsr_slave_1: entered promiscuous mode
[   54.533622][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.554291][ T5940] team0: Port device team_slave_0 added
[   54.612274][ T5940] team0: Port device team_slave_1 added
[   54.615174][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.618074][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.629888][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.638485][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.641381][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.651758][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.657354][ T5937] team0: Port device team_slave_0 added
[   54.694294][ T5937] team0: Port device team_slave_1 added
[   54.742194][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.745097][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.755518][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.779611][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.782815][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.793282][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.841330][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.843535][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.854449][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.861892][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.864209][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.875798][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.886834][ T5929] hsr_slave_0: entered promiscuous mode
[   54.889737][ T5929] hsr_slave_1: entered promiscuous mode
[   54.894017][ T5929] debugfs: 'hsr0' already exists in 'hsr'
[   54.896044][ T5929] Cannot create hsr debugfs directory
[   55.050689][ T5940] hsr_slave_0: entered promiscuous mode
[   55.056821][ T5940] hsr_slave_1: entered promiscuous mode
[   55.059550][ T5940] debugfs: 'hsr0' already exists in 'hsr'
[   55.061957][ T5940] Cannot create hsr debugfs directory
[   55.106506][ T5937] hsr_slave_0: entered promiscuous mode
[   55.109126][ T5937] hsr_slave_1: entered promiscuous mode
[   55.111518][ T5937] debugfs: 'hsr0' already exists in 'hsr'
[   55.113666][ T5937] Cannot create hsr debugfs directory
[   55.241830][   T64] Bluetooth: hci0: command tx timeout
[   55.241834][ T5935] Bluetooth: hci1: command tx timeout
[   55.251364][   T64] Bluetooth: hci3: command tx timeout
[   55.251725][ T5935] Bluetooth: hci2: command tx timeout
[   55.366322][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.379554][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.389252][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.409001][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.438907][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.443727][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.448005][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.452482][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.506114][ T5929] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.510347][ T5929] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.529093][ T5929] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.537875][ T5929] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.594114][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.603221][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.610252][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.623070][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.650488][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.684901][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.690659][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[   55.711026][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.714059][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.733986][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.736832][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.756628][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[   55.774804][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.777885][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.783749][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.786820][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.804634][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.842570][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.863082][ T5929] 8021q: adding VLAN 0 to HW filter on device team0
[   55.878385][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[   55.884319][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.887254][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.890441][   T40] audit: type=1400 audit(1763822164.090:89): avc:  denied  { sys_module } for  pid=5933 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   55.903281][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.906190][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.910825][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.913717][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.922386][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.925287][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.002986][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.037783][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.059126][ T5933] veth0_vlan: entered promiscuous mode
[   56.067196][ T5933] veth1_vlan: entered promiscuous mode
[   56.080952][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.102863][ T5933] veth0_macvtap: entered promiscuous mode
[   56.109487][ T5933] veth1_macvtap: entered promiscuous mode
[   56.121036][ T5937] veth0_vlan: entered promiscuous mode
[   56.128386][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.138792][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.148251][ T5937] veth1_vlan: entered promiscuous mode
[   56.152529][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.161863][ T5929] veth0_vlan: entered promiscuous mode
[   56.178275][ T1236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.181839][ T1236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.186776][ T5929] veth1_vlan: entered promiscuous mode
[   56.195111][ T1236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.199092][ T1236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.228121][ T5937] veth0_macvtap: entered promiscuous mode
[   56.248366][ T5937] veth1_macvtap: entered promiscuous mode
[   56.262787][ T5940] veth0_vlan: entered promiscuous mode
[   56.263026][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.267065][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.270275][ T5929] veth0_macvtap: entered promiscuous mode
[   56.276409][ T5929] veth1_macvtap: entered promiscuous mode
[   56.292677][ T5940] veth1_vlan: entered promiscuous mode
[   56.296972][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.300020][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.303303][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.306931][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.307748][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.315835][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.326197][ T1236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.329823][ T1236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.338551][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.339643][ T1236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.346889][ T1236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.353137][ T1236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.358070][ T1236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.372383][ T1236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.377343][ T1236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.384442][ T5940] veth0_macvtap: entered promiscuous mode
[   56.397953][ T5940] veth1_macvtap: entered promiscuous mode
[   56.402209][ T6012] syzkaller0: entered promiscuous mode
[   56.403935][ T6012] syzkaller0: entered allmulticast mode
[   56.437240][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.441964][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.456340][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.459497][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.482811][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.501913][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.504367][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.506038][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.509216][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.512964][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.512963][ T1236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.522134][ T1236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.528646][ T1236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.533425][ T1236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.590190][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.600244][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.635852][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.636236][ T6020] syzkaller0: entered promiscuous mode
[   56.639180][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.644779][ T6020] syzkaller0: entered allmulticast mode
[   56.663228][ T6020] tipc: Started in network mode
[   56.665446][ T6020] tipc: Node identity caa347058333, cluster identity 4711
[   56.669244][ T6020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.672778][ T6032] binder: 6031:6032 unknown command 116
[   56.674638][ T6032] binder: 6031:6032 ioctl c0306201 200000000080 returned -22
[   56.677193][ T6019] tipc: Resetting bearer <eth:syzkaller0>
[   56.686138][ T6019] tipc: Disabling bearer <eth:syzkaller0>
[   56.710248][ T6035] random: crng reseeded on system resumption
[   56.719914][ T6035] PM: hibernation: Image mismatch: memory size
[   56.756402][ T6037] tmpfs: Unknown parameter 'usrquota3'
[   56.893277][ T6037] binder: 6036:6037 ioctl c0306201 200000000040 returned -22
[   56.995916][ T6052] bond1: option all_slaves_active: invalid value (3)
[   57.004353][ T6052] bond1 (unregistering): Released all slaves
[   57.042722][ T6059] overlayfs: failed to get inode (-116)
[   57.045665][ T6059] overlayfs: failed to get inode (-116)
[   57.149073][ T6063] process 'syz.1.15' launched '/dev/fd/5' with NULL argv: empty string added
[   57.321489][ T5935] Bluetooth: hci3: command tx timeout
[   57.321552][ T5932] Bluetooth: hci1: command tx timeout
[   57.324064][ T5293] Bluetooth: hci2: command tx timeout
[   57.325965][   T64] Bluetooth: hci0: command tx timeout
[   57.405633][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.435700][ T6075] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   57.445470][ T6075] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   57.450926][ T6075] xt_socket: unknown flags 0xe4
[   57.457347][ T6075] netlink: 'syz.0.18': attribute type 10 has an invalid length.
[   57.464464][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.469395][ T6075] bridge_slave_1: left allmulticast mode
[   57.477721][ T6075] bridge_slave_1: left promiscuous mode
[   57.480364][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.489700][ T6075] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   57.874470][   T40] kauditd_printk_skb: 100 callbacks suppressed
[   57.874485][   T40] audit: type=1400 audit(1763822166.080:190): avc:  denied  { ioctl } for  pid=6090 comm="syz.3.24" path="socket:[9740]" dev="sockfs" ino=9740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.876266][ T6091] netlink: 52 bytes leftover after parsing attributes in process `syz.3.24'.
[   57.934937][   T40] audit: type=1400 audit(1763822166.140:191): avc:  denied  { setopt } for  pid=6096 comm="syz.3.26" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   57.941776][   T40] audit: type=1400 audit(1763822166.140:192): avc:  denied  { ioctl } for  pid=6096 comm="syz.3.26" path="pid:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   57.967311][   T40] audit: type=1400 audit(1763822166.170:193): avc:  denied  { create } for  pid=6099 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   57.980166][   T40] audit: type=1400 audit(1763822166.180:194): avc:  denied  { create } for  pid=6099 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   58.047030][   T40] audit: type=1400 audit(1763822166.250:195): avc:  denied  { create } for  pid=6104 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   58.061342][   T40] audit: type=1400 audit(1763822166.250:196): avc:  denied  { write } for  pid=6104 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   58.067247][   T40] audit: type=1400 audit(1763822166.260:197): avc:  denied  { ioctl } for  pid=6104 comm="syz.0.29" path="socket:[9761]" dev="sockfs" ino=9761 ioctlcmd=0x6c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   58.075821][   T40] audit: type=1400 audit(1763822166.260:198): avc:  denied  { create } for  pid=6104 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   58.085407][   T40] audit: type=1400 audit(1763822166.260:199): avc:  denied  { setopt } for  pid=6104 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   58.151671][ T6032] Set syz1 is full, maxelem 65536 reached
[   58.410594][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'.
[   58.469168][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'.
[   58.480914][ T6137] Zero length message leads to an empty skb
[   58.643141][ T6151] bridge0: entered allmulticast mode
[   58.645829][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'.
[   58.649514][ T6151] bridge_slave_1: left allmulticast mode
[   58.652244][ T6151] bridge_slave_1: left promiscuous mode
[   58.655264][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.660618][ T6151] bridge_slave_0: left allmulticast mode
[   58.663443][ T6151] bridge_slave_0: left promiscuous mode
[   58.666056][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.682821][ T6151] bridge0 (unregistering): left allmulticast mode
[   59.262762][ T6175] =======================================================
[   59.262762][ T6175] WARNING: The mand mount option has been deprecated and
[   59.262762][ T6175]          and is ignored by this kernel. Remove the mand
[   59.262762][ T6175]          option from the mount to silence this warning.
[   59.262762][ T6175] =======================================================
[   59.276698][ T6175] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   59.312590][ T6182] xt_hashlimit: size too large, truncated to 1048576
[   59.401280][   T64] Bluetooth: hci3: command tx timeout
[   59.401349][ T5293] Bluetooth: hci2: command tx timeout
[   59.403035][   T64] Bluetooth: hci1: command tx timeout
[   59.405384][ T5935] Bluetooth: hci0: command tx timeout
[   59.722009][ T6195] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   59.927718][ T6197] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   59.930420][ T6197] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   59.936498][ T6197] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   59.940345][ T6197] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   59.943033][ T6197] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   59.946700][ T6197] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   59.950483][ T6197] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   59.953121][ T6197] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   59.957915][ T6197] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   59.962266][ T6197] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   59.964742][ T6197] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   59.968242][ T6197] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   60.057097][ T2296] hid (null): unknown global tag 0xc
[   60.059439][ T2296] hid (null): unknown global tag 0xe
[   60.064463][ T2296] hid (null): unknown global tag 0xc
[   60.069899][ T2296] hid-generic 0006:0003:0005.0002: unknown main item tag 0x2
[   60.073626][ T2296] hid-generic 0006:0003:0005.0002: unknown global tag 0xc
[   60.076622][ T2296] hid-generic 0006:0003:0005.0002: item 0 4 1 12 parsing failed
[   60.080171][ T2296] hid-generic 0006:0003:0005.0002: probe with driver hid-generic failed with error -22
[   60.125957][ T6208] FAT-fs (nullb0): bogus number of reserved sectors
[   60.128783][ T6208] FAT-fs (nullb0): Can't find a valid FAT filesystem
[   60.223945][ T6214] netlink: 45 bytes leftover after parsing attributes in process `syz.2.64'.
[   60.465450][ T5935] block nbd0: Receive control failed (result -22)
[   60.501922][ T6227] nbd0: detected capacity change from 0 to 32
[   60.510960][ T6084] block nbd0: Dead connection, failed to find a fallback
[   60.514904][ T6084] block nbd0: shutting down sockets
[   60.520195][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.523959][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.526514][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.526659][ T6234] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   60.529381][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.532394][ T6234] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   60.538143][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.541911][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.545088][ T6234] vhci_hcd vhci_hcd.0: Device attached
[   60.547871][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.550711][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.556412][ T6235] vhci_hcd: connection closed
[   60.556536][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.560893][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.561212][ T1150] vhci_hcd: stop threads
[   60.564562][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.568044][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.568149][ T1150] vhci_hcd: release socket
[   60.571768][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.574465][ T1150] vhci_hcd: disconnect device
[   60.575095][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.579263][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.72'.
[   60.581323][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.585856][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.589101][ T6084] ldm_validate_partition_table(): Disk read failed.
[   60.593932][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.598916][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.602558][ T6084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.605704][ T6084] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.608980][ T6084] Dev nbd0: unable to read RDB block 0
[   60.611549][ T6084]  nbd0: unable to read partition table
[   60.617395][ T6084] ldm_validate_partition_table(): Disk read failed.
[   60.620269][ T6084] Dev nbd0: unable to read RDB block 0
[   60.622793][ T6084]  nbd0: unable to read partition table
[   60.836168][ T6252] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   60.841484][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.76'.
[   60.954000][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'.
[   60.990158][ T6263] Bluetooth: MGMT ver 1.23
[   61.034944][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'.
[   61.056964][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'.
[   61.066341][ T6274] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6274 comm=syz.1.82
[   61.101758][  T841] cfg80211: failed to load regulatory.db
[   61.172363][ T6289] mmap: syz.3.88 (6289) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   61.226780][ T6295] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[   61.265616][ T6298] capability: warning: `syz.2.91' uses deprecated v2 capabilities in a way that may be insecure
[   61.357925][ T6310] x_tables: duplicate underflow at hook 2
[   61.407762][ T6310] GUP no longer grows the stack in syz.0.95 (6310): 200000007000-20000000a000 (200000004000)
[   61.413635][ T6310] CPU: 2 UID: 0 PID: 6310 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) 
[   61.413649][ T6310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   61.413655][ T6310] Call Trace:
[   61.413659][ T6310]  <TASK>
[   61.413663][ T6310]  dump_stack_lvl+0x16c/0x1f0
[   61.413679][ T6310]  gup_vma_lookup+0x1d2/0x220
[   61.413691][ T6310]  __get_user_pages+0x241/0x3530
[   61.413707][ T6310]  ? do_sock_setsockopt+0xf3/0x1d0
[   61.413725][ T6310]  ? __pfx___get_user_pages+0x10/0x10
[   61.413737][ T6310]  ? check_path.constprop.0+0x24/0x50
[   61.413757][ T6310]  __gup_longterm_locked+0x2dd/0x17e0
[   61.413775][ T6310]  ? hlock_class+0x30/0x70
[   61.413786][ T6310]  ? __lock_acquire+0x1053/0x1c90
[   61.413798][ T6310]  ? __pfx___gup_longterm_locked+0x10/0x10
[   61.413817][ T6310]  pin_user_pages+0x13c/0x160
[   61.413830][ T6310]  ? __pfx_pin_user_pages+0x10/0x10
[   61.413841][ T6310]  ? __kvmalloc_node_noprof+0x3c0/0x9c0
[   61.413853][ T6310]  ? xdp_umem_create+0x657/0x1270
[   61.413872][ T6310]  xdp_umem_create+0x741/0x1270
[   61.413890][ T6310]  xsk_setsockopt+0x6db/0x9a0
[   61.413911][ T6310]  ? __pfx_xsk_setsockopt+0x10/0x10
[   61.413923][ T6310]  ? find_held_lock+0x2b/0x80
[   61.413942][ T6310]  ? selinux_socket_setsockopt+0x6a/0x80
[   61.413958][ T6310]  ? __pfx_xsk_setsockopt+0x10/0x10
[   61.413978][ T6310]  do_sock_setsockopt+0xf3/0x1d0
[   61.414001][ T6310]  __sys_setsockopt+0x1a0/0x230
[   61.414027][ T6310]  __x64_sys_setsockopt+0xbd/0x160
[   61.414046][ T6310]  ? do_syscall_64+0x91/0xfa0
[   61.414062][ T6310]  ? lockdep_hardirqs_on+0x7c/0x110
[   61.414081][ T6310]  do_syscall_64+0xcd/0xfa0
[   61.414100][ T6310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.414118][ T6310] RIP: 0033:0x7f12e718f749
[   61.414134][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.414153][ T6310] RSP: 002b:00007f12e8074038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   61.414171][ T6310] RAX: ffffffffffffffda RBX: 00007f12e73e5fa0 RCX: 00007f12e718f749
[   61.414183][ T6310] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a
[   61.414193][ T6310] RBP: 00007f12e7213f91 R08: 0000000000000020 R09: 0000000000000000
[   61.414205][ T6310] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[   61.414215][ T6310] R13: 00007f12e73e6038 R14: 00007f12e73e5fa0 R15: 00007ffc73b0ad58
[   61.414239][ T6310]  </TASK>
[   61.626913][ T6328] netlink: 'syz.2.96': attribute type 39 has an invalid length.
[   61.693655][ T6338] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6338 comm=syz.3.97
[   61.891417][ T5935] Bluetooth: hci0: command 0x0c1a tx timeout
[   61.892827][ T6347] trusted_key: encrypted_key: master key parameter is missing
[   61.971342][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout
[   61.971531][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[   62.041297][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   62.332389][ T6391] pimreg: entered allmulticast mode
[   62.389348][ T6399] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   62.507773][   T64] Bluetooth: hci0: unexpected event for opcode 0x200a
[   62.612053][ T6425] netlink: zone id is out of range
[   62.614173][ T6425] netlink: zone id is out of range
[   62.617501][ T6425] netlink: set zone limit has 8 unknown bytes
[   62.634516][ T6429] netlink: 'syz.3.123': attribute type 1 has an invalid length.
[   62.670714][ T6429] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   62.682200][ T6439] netlink: 'syz.2.126': attribute type 1 has an invalid length.
[   62.687298][   T64] Bluetooth: hci3: unexpected event for opcode 0x0c13
[   62.712362][ T6429] syzkaller0: entered promiscuous mode
[   62.714689][ T6429] syzkaller0: entered allmulticast mode
[   62.729153][ T6439] bond1: entered promiscuous mode
[   62.731005][ T6439] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.753550][ T6439] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.758791][ T6439] bond1: (slave bond2): making interface the new active one
[   62.762234][ T6439] bond2: entered promiscuous mode
[   62.765585][ T6439] bond1: (slave bond2): Enslaving as an active interface with an up link
[   62.772767][ T6429] sctp: [Deprecated]: syz.3.123 (pid 6429) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.772767][ T6429] Use struct sctp_sack_info instead
[   62.780034][ T6444] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   62.785152][ T6444] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   62.931309][   T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   63.081330][   T53] usb 6-1: Using ep0 maxpacket: 32
[   63.093694][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.097545][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.101274][   T53] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   63.104188][   T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.120115][   T53] usb 6-1: config 0 descriptor??
[   63.174462][   T40] kauditd_printk_skb: 116 callbacks suppressed
[   63.174524][   T40] audit: type=1400 audit(1763822171.380:316): avc:  denied  { read write } for  pid=6453 comm="syz.2.130" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.187072][   T40] audit: type=1400 audit(1763822171.380:317): avc:  denied  { open } for  pid=6453 comm="syz.2.130" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.282251][   T40] audit: type=1400 audit(1763822171.490:318): avc:  denied  { map } for  pid=6453 comm="syz.2.130" path="socket:[12583]" dev="sockfs" ino=12583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   63.291947][   T40] audit: type=1400 audit(1763822171.490:319): avc:  denied  { read accept } for  pid=6453 comm="syz.2.130" path="socket:[12583]" dev="sockfs" ino=12583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   63.607049][   T53] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   63.818071][   T53] usb 6-1: USB disconnect, device number 2
[   63.850925][   T40] audit: type=1400 audit(1763822172.050:320): avc:  denied  { connect } for  pid=6461 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.879089][   T40] audit: type=1400 audit(1763822172.060:321): avc:  denied  { ioctl } for  pid=6459 comm="syz.3.131" path="socket:[10911]" dev="sockfs" ino=10911 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   63.887939][   T40] audit: type=1400 audit(1763822172.060:322): avc:  denied  { ioctl } for  pid=6459 comm="syz.3.131" path="socket:[10913]" dev="sockfs" ino=10913 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1
[   63.898730][   T40] audit: type=1400 audit(1763822172.060:323): avc:  denied  { bind } for  pid=6459 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   63.907964][   T40] audit: type=1400 audit(1763822172.060:324): avc:  denied  { read } for  pid=6459 comm="syz.3.131" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.918379][   T40] audit: type=1400 audit(1763822172.060:325): avc:  denied  { open } for  pid=6459 comm="syz.3.131" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.975471][ T6470] input: syz1 as /devices/virtual/input/input5
[   64.050889][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[   64.095797][ T6484] netlink: 'syz.3.139': attribute type 1 has an invalid length.
[   64.098645][ T6484] __nla_validate_parse: 7 callbacks suppressed
[   64.098656][ T6484] netlink: 5988 bytes leftover after parsing attributes in process `syz.3.139'.
[   64.104187][ T6486] warning: `syz.2.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.115952][ T6488] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   64.129605][ T6486] bridge_slave_0: left allmulticast mode
[   64.134750][ T6486] bridge_slave_0: left promiscuous mode
[   64.137351][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.144744][ T6486] bridge_slave_1: left allmulticast mode
[   64.150551][ T6486] bridge_slave_1: left promiscuous mode
[   64.153600][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.163662][ T6486] bond0: (slave bond_slave_0): Releasing backup interface
[   64.166926][ T6493] netlink: 'syz.2.140': attribute type 10 has an invalid length.
[   64.169526][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.172757][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.176851][ T6486] bond0: (slave bond_slave_1): Releasing backup interface
[   64.186951][ T6486] team0: Port device team_slave_0 removed
[   64.195189][ T6486] team0: Port device team_slave_1 removed
[   64.197776][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.200025][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.205624][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.208713][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.214525][ T6486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   64.229382][ T6488] bond1: entered promiscuous mode
[   64.231764][ T6488] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.241138][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.244310][ T6493] bond0: (slave wlan1): Opening slave failed
[   64.278423][ T6495] bond1: (slave bridge1): making interface the new active one
[   64.282294][ T6495] bridge1: entered promiscuous mode
[   64.286378][ T6495] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   64.499694][ T6516] program syz.2.149 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   64.510639][ T6516] binder: 6515:6516 ioctl 40405514 200000000240 returned -22
[   64.543355][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.150'.
[   64.554083][ T6518] binder: BINDER_SET_CONTEXT_MGR already set
[   64.556221][ T6518] binder: 6517:6518 ioctl 4018620d 200000001bc0 returned -16
[   65.080380][ T6547] cgroup2: Unknown parameter 'pidsRlocalevents'
[   65.128350][  T841] IPVS: starting estimator thread 0...
[   65.132536][ T6563] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   65.132880][ T6565] IPVS: ovf: FWM 3 0x00000003 - no destination available
[   65.231222][ T6564] IPVS: using max 46 ests per chain, 110400 per kthread
[   66.131823][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[   66.137550][ T6578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.150224][ T6578] openvswitch: netlink: Duplicate key (type 1).
[   66.270383][ T6580] netlink: 'syz.0.161': attribute type 3 has an invalid length.
[   66.274424][ T6580] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   66.277609][ T6580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.161'.
[   66.288169][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'.
[   66.294975][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'.
[   66.393661][ T6591] netlink: 76 bytes leftover after parsing attributes in process `syz.2.165'.
[   66.441981][   T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   66.444709][   T64] Bluetooth: hci2: Injecting HCI hardware error event
[   66.447708][ T5935] Bluetooth: hci2: hardware error 0x00
[   67.498027][ T6622] fuse: Unknown parameter 'f'
[   67.501224][ T1462] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   67.641302][ T1462] usb 7-1: device descriptor read/64, error -71
[   67.892520][ T1462] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   68.031965][ T1462] usb 7-1: device descriptor read/64, error -71
[   68.141372][ T1462] usb usb7-port1: attempt power cycle
[   68.357781][   T40] kauditd_printk_skb: 35 callbacks suppressed
[   68.357795][   T40] audit: type=1400 audit(1763822176.560:361): avc:  denied  { write } for  pid=6625 comm="syz.3.177" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   68.368948][   T40] audit: type=1400 audit(1763822176.560:362): avc:  denied  { open } for  pid=6625 comm="syz.3.177" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   68.378264][   T40] audit: type=1400 audit(1763822176.560:363): avc:  denied  { ioctl } for  pid=6625 comm="syz.3.177" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   68.388939][   T40] audit: type=1400 audit(1763822176.580:364): avc:  denied  { read write } for  pid=6625 comm="syz.3.177" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   68.398979][   T40] audit: type=1400 audit(1763822176.580:365): avc:  denied  { open } for  pid=6625 comm="syz.3.177" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   68.491177][ T1462] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   68.505778][   T40] audit: type=1400 audit(1763822176.710:366): avc:  denied  { ioctl } for  pid=6628 comm="syz.3.178" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   68.517576][   T40] audit: type=1400 audit(1763822176.710:367): avc:  denied  { ioctl } for  pid=6628 comm="syz.3.178" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   68.517786][ T1462] usb 7-1: device descriptor read/8, error -71
[   68.538147][ T5935] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   68.771264][ T1462] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[   68.791853][ T1462] usb 7-1: device descriptor read/8, error -71
[   68.902872][   T40] audit: type=1400 audit(1763822177.110:368): avc:  denied  { append } for  pid=6630 comm="syz.3.179" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   68.912500][ T1462] usb usb7-port1: unable to enumerate USB device
[   69.489292][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.182'.
[   69.493213][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[   69.500393][   T40] audit: type=1400 audit(1763822177.700:369): avc:  denied  { load_policy } for  pid=6644 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   69.501471][ T6645] SELinux:  policydb table sizes (1,0) do not match mine (8,7)
[   69.511914][ T6645] SELinux: failed to load policy
[   69.590841][ T6652] netlink: 'syz.0.184': attribute type 1 has an invalid length.
[   69.620313][ T6652] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   69.627713][ T6558] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   69.628144][ T6652] 8021q: adding VLAN 0 to HW filter on device bond4
[   69.650354][ T6652] veth3: entered promiscuous mode
[   69.654451][ T6652] bond4: (slave veth3): Enslaving as a backup interface with a down link
[   69.687351][   T40] audit: type=1400 audit(1763822177.890:370): avc:  denied  { write } for  pid=6654 comm="syz.0.185" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   69.742052][ T6557] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   70.290159][ T6677] netlink: 'syz.2.192': attribute type 12 has an invalid length.
[   70.364583][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[   70.368381][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'.
[   70.812229][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'.
[   71.085300][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.087446][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.430791][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'.
[   71.456301][ T6714] netlink: 152 bytes leftover after parsing attributes in process `syz.0.207'.
[   71.459140][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'.
[   71.724359][ T6749] bridge_slave_1: entered allmulticast mode
[   71.831359][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'.
[   71.835286][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'.
[   72.181371][ T6769] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   72.314297][ T6774] netlink: 'syz.3.223': attribute type 1 has an invalid length.
[   72.316830][ T6774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.367857][ T6776] capability: warning: `syz.3.224' uses 32-bit capabilities (legacy support in use)
[   72.634522][ T6792] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.955070][ T6812] 
[   73.506766][ T6814] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   73.510364][ T6814] overlayfs: missing 'lowerdir'
[   73.550660][   T40] kauditd_printk_skb: 124 callbacks suppressed
[   73.550675][   T40] audit: type=1326 audit(1763822181.750:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.0.236" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12e718f749 code=0x0
[   73.653182][ T5935] Bluetooth: hci3: unexpected event for opcode 0x1004
[   73.777662][   T40] audit: type=1400 audit(1763822181.980:496): avc:  denied  { create } for  pid=6821 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   73.785775][   T40] audit: type=1400 audit(1763822181.980:497): avc:  denied  { connect } for  pid=6821 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   73.832702][   T40] audit: type=1400 audit(1763822182.040:498): avc:  denied  { bind } for  pid=6821 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   73.839810][   T40] audit: type=1400 audit(1763822182.040:499): avc:  denied  { listen } for  pid=6821 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   73.845555][   T40] audit: type=1400 audit(1763822182.040:500): avc:  denied  { accept } for  pid=6821 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   73.885191][   T40] audit: type=1400 audit(1763822182.090:501): avc:  denied  { write } for  pid=6821 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1
[   74.367986][ T5935] Bluetooth: hci1: unexpected event for opcode 0x200c
[   74.601275][ T2296] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   74.752412][ T2296] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   74.755585][ T2296] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   74.759464][ T2296] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   74.762502][ T2296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.968829][ T2296] usb 8-1: GET_CAPABILITIES returned 0
[   74.971430][ T2296] usbtmc 8-1:16.0: can't read capabilities
[   75.428588][ T6851] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   75.506375][   T40] audit: type=1400 audit(1763822183.710:502): avc:  denied  { append } for  pid=6858 comm="syz.0.250" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   75.508560][ T6859] __nla_validate_parse: 3 callbacks suppressed
[   75.508569][ T6859] netlink: 44 bytes leftover after parsing attributes in process `syz.0.250'.
[   75.518389][   T40] audit: type=1400 audit(1763822183.710:503): avc:  denied  { ioctl } for  pid=6858 comm="syz.0.250" path="socket:[13815]" dev="sockfs" ino=13815 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   75.555379][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.251'.
[   75.560467][ T6865] autofs: Unknown parameter 'l��:/�BS���\��.确��＀Q6Ń0���8'
[   75.621125][   T40] audit: type=1400 audit(1763822183.820:504): avc:  denied  { ioctl } for  pid=6867 comm="syz.2.252" path="socket:[16473]" dev="sockfs" ino=16473 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   75.645737][ T6872] 9pnet_fd: Insufficient options for proto=fd
[   75.703019][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'.
[   75.706785][ T6878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.255'.
[   75.894611][ T6890] use of bytesused == 0 is deprecated and will be removed in the future,
[   75.898358][ T6890] use the actual size instead.
[   75.908446][ T6894] binder: 6891:6894 ioctl c00c620f 200000000000 returned -22
[   75.946860][ T6897] netlink: 'syz.2.261': attribute type 21 has an invalid length.
[   75.946953][ T6896] netlink: 'syz.2.261': attribute type 21 has an invalid length.
[   75.953201][ T6896] netlink: 156 bytes leftover after parsing attributes in process `syz.2.261'.
[   75.957189][ T6897] netlink: 156 bytes leftover after parsing attributes in process `syz.2.261'.
[   76.343538][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'.
[   76.771158][   T54] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   76.921194][   T54] usb 7-1: device descriptor read/64, error -71
[   77.171239][   T54] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   77.296189][ T5935] Bluetooth: hci3: unexpected event for opcode 0x2016
[   77.305946][   T54] usb 7-1: device descriptor read/64, error -71
[   77.373368][   T53] usb 8-1: USB disconnect, device number 2
[   77.411450][   T54] usb usb7-port1: attempt power cycle
[   77.643419][ T6951] Invalid ELF header magic: != ELF
[   77.706637][ T6956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.722257][ T5935] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   77.725963][ T5935] Bluetooth: hci3: Injecting HCI hardware error event
[   77.729909][   T64] Bluetooth: hci3: hardware error 0x00
[   77.751231][   T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   77.773807][   T54] usb 7-1: device descriptor read/8, error -71
[   77.893715][ T6965] netlink: 'syz.0.284': attribute type 2 has an invalid length.
[   77.905559][ T6965] !: entered promiscuous mode
[   77.910865][ T6965] program syz.0.284 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.915192][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'.
[   77.918875][ T6965] netlink: 'syz.0.284': attribute type 2 has an invalid length.
[   77.922034][ T6965] !: left promiscuous mode
[   78.016217][   T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   78.031908][   T54] usb 7-1: device descriptor read/8, error -71
[   78.142178][   T54] usb usb7-port1: unable to enumerate USB device
[   78.191158][  T841] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   78.357512][  T841] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.363171][  T841] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   78.367036][  T841] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[   78.372618][  T841] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   78.376566][  T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.383031][ T6974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   78.389680][  T841] hub 8-1:1.0: bad descriptor, ignoring hub
[   78.392645][  T841] hub 8-1:1.0: probe with driver hub failed with error -5
[   78.396257][  T841] cdc_wdm 8-1:1.0: skipping garbage
[   78.398573][  T841] cdc_wdm 8-1:1.0: skipping garbage
[   78.404650][  T841] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   78.407206][  T841] cdc_wdm 8-1:1.0: Unknown control protocol
[   78.588949][   T40] kauditd_printk_skb: 24 callbacks suppressed
[   78.588964][   T40] audit: type=1400 audit(1763822186.790:529): avc:  denied  { read write } for  pid=6972 comm="syz.3.287" name="cdc-wdm0" dev="devtmpfs" ino=2884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   78.603187][   T40] audit: type=1400 audit(1763822186.790:530): avc:  denied  { open } for  pid=6972 comm="syz.3.287" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   78.671617][ T6995] Cannot find map_set index 65532 as target
[   78.674477][ T6995] trusted_key: encrypted_key: master key parameter '�ga�!�'ef�鷤�>�#aH7��@���ܵ����8ޚ���k�]��P���w�٧���j�!���!5὚�OD��5�G]���>�ݶc����[Y�d𩴻��{�3)�N�X��3Z�4����蕠nY��'��H���֤�ы~��W�' is invalid
[   78.704843][  T840] usb 8-1: USB disconnect, device number 3
[   78.961377][   T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   79.122982][   T54] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.126522][   T54] usb 5-1: config 0 has no interfaces?
[   79.129379][   T54] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.132852][   T54] usb 5-1: config 0 has no interfaces?
[   79.135687][   T54] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.139158][   T54] usb 5-1: config 0 has no interfaces?
[   79.142809][   T54] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[   79.145985][   T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[   79.148703][   T54] usb 5-1: Product: syz
[   79.150194][   T54] usb 5-1: Manufacturer: syz
[   79.151813][   T54] usb 5-1: SerialNumber: syz
[   79.154755][   T54] usb 5-1: config 0 descriptor??
[   79.529863][  T841] usb 5-1: USB disconnect, device number 2
[   79.581297][   T40] audit: type=1400 audit(1763822187.780:531): avc:  denied  { execute } for  pid=7001 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   79.590227][   T40] audit: type=1400 audit(1763822187.780:532): avc:  denied  { execute_no_trans } for  pid=7001 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   79.658036][ T7007] fuseblk: Unknown parameter ''
[   79.723770][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.728142][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.732581][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.736962][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.739871][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.801216][   T64] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   79.897993][ T7013] chnl_net:caif_netlink_parms(): no params data found
[   79.926833][ T7023] tmpfs: Bad value for 'mpol'
[   79.989803][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.993043][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.996258][ T7013] bridge_slave_0: entered allmulticast mode
[   80.000097][ T7013] bridge_slave_0: entered promiscuous mode
[   80.004549][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.007219][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.010013][ T7013] bridge_slave_1: entered allmulticast mode
[   80.012798][ T7013] bridge_slave_1: entered promiscuous mode
[   80.062608][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.068942][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.114385][ T7013] team0: Port device team_slave_0 added
[   80.118712][ T7013] team0: Port device team_slave_1 added
[   80.158640][ T7029] dlm: non-version read from control device 4096
[   80.163717][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.166628][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.179037][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.184347][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.187246][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.201612][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.253991][ T7013] hsr_slave_0: entered promiscuous mode
[   80.256249][ T7013] hsr_slave_1: entered promiscuous mode
[   80.258389][ T7013] debugfs: 'hsr0' already exists in 'hsr'
[   80.260213][ T7013] Cannot create hsr debugfs directory
[   80.352973][   T40] audit: type=1400 audit(1763822188.560:533): avc:  denied  { read } for  pid=7040 comm="syz.0.302" name="file0" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   80.360008][   T40] audit: type=1400 audit(1763822188.560:534): avc:  denied  { open } for  pid=7040 comm="syz.0.302" path="/99/file0" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   80.390754][ T7043] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.303' sets config #1
[   80.449627][ T7013] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.454784][ T7013] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.460929][ T7013] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.467345][ T7013] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.488161][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.491033][ T7013] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.494074][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.496839][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.542545][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.558569][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.563639][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.566465][   T40] audit: type=1400 audit(1763822188.770:535): avc:  denied  { bind } for  pid=7051 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.572739][   T40] audit: type=1400 audit(1763822188.770:536): avc:  denied  { listen } for  pid=7051 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.578996][   T40] audit: type=1400 audit(1763822188.780:537): avc:  denied  { accept } for  pid=7051 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.596969][ T7013] 8021q: adding VLAN 0 to HW filter on device team0
[   80.657437][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.660520][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.670268][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.672595][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.679188][   T40] audit: type=1400 audit(1763822188.880:538): avc:  denied  { read } for  pid=7061 comm="syz.2.307" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   80.699663][ T7063] netlink: 156 bytes leftover after parsing attributes in process `syz.2.307'.
[   80.774348][ T7068] bond0: (slave caif0): Error: Device type is different from other slaves
[   80.825294][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.976246][ T7013] veth0_vlan: entered promiscuous mode
[   80.980976][ T7013] veth1_vlan: entered promiscuous mode
[   80.995715][ T7013] veth0_macvtap: entered promiscuous mode
[   80.999384][ T7013] veth1_macvtap: entered promiscuous mode
[   81.008093][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.015222][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.022141][ T6556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.025124][ T6556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.028981][ T6556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.032108][ T6556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.076634][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.079625][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.094170][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.096900][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.331737][ T7087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7087 comm=syz.2.309
[   81.374663][ T7091] cdrom: dropping to single frame dma
[   81.378051][ T7093] bond0: entered allmulticast mode
[   81.433903][ T7095] netlink: 'syz.2.311': attribute type 1 has an invalid length.
[   81.454688][ T7095] bond3: entered promiscuous mode
[   81.457306][ T7095] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.525254][ T7095] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.528448][ T7095] bond3: (slave gre1): The slave device specified does not support setting the MAC address
[   81.534526][ T7095] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode
[   81.538738][ T7095] bond3: (slave gre1): making interface the new active one
[   81.541944][ T7095] gre1: entered promiscuous mode
[   81.546248][ T7095] bond3: (slave gre1): Enslaving as an active interface with an up link
[   81.575804][ T7106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4123156252 (32985250016 ns) > initial count (17662921744 ns). Using initial count to start timer.
[   81.744290][ T7114] Bluetooth: MGMT ver 1.23
[   81.801443][ T5935] Bluetooth: hci0: command tx timeout
[   82.095258][ T6973] cdc_wdm 8-1:1.0: Error autopm - -16
[   82.322902][ T2296] hid-generic 0005:15C2:1012.0004: unknown main item tag 0x1
[   82.326671][ T2296] hid-generic 0005:15C2:1012.0004: ignoring exceeding usage max
[   82.330646][ T2296] hid-generic 0005:15C2:1012.0004: unknown main item tag 0x4
[   82.334197][ T2296] hid-generic 0005:15C2:1012.0004: unknown main item tag 0x5
[   82.337607][ T2296] hid-generic 0005:15C2:1012.0004: reserved main item tag 0xd
[   82.340832][ T2296] hid-generic 0005:15C2:1012.0004: item fetching failed at offset 31/47
[   82.345396][ T2296] hid-generic 0005:15C2:1012.0004: probe with driver hid-generic failed with error -22
[   82.598200][ T7120] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   82.646327][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.329'.
[   82.693973][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'.
[   82.698056][ T7151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7151 comm=syz.4.331
[   82.710027][ T7151] macvtap1: entered promiscuous mode
[   82.710850][ T7158] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   82.713449][ T7151] macvtap1: entered allmulticast mode
[   82.733978][ T7158] ipvlan0: entered allmulticast mode
[   82.736214][ T7158] team0: entered allmulticast mode
[   82.738339][ T7158] team_slave_0: entered allmulticast mode
[   82.740830][ T7158] team_slave_1: entered allmulticast mode
[   82.745448][ T7158] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   82.760759][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.333'.
[   82.833706][ T7171] Attempt to restore checkpoint with obsolete wellknown handles
[   82.837830][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.333'.
[   82.856787][ T7173] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.336'.
[   82.887625][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'.
[   82.904834][ T7177] netlink: 80 bytes leftover after parsing attributes in process `syz.4.338'.
[   83.002714][ T7201] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   83.034119][ T5942] udevd[5942]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   83.132622][ T7211] can: request_module (can-proto-0) failed.
[   83.186550][ T7214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   83.222218][ T7220] Option '�_n'�tr�1ZQ�3���-ֵ��k�X�v~�' to dns_resolver key: bad/missing value
[   83.467327][ T5935] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[   83.516863][ T7241] tipc: Started in network mode
[   83.518995][ T7241] tipc: Node identity 2, cluster identity 4711
[   83.522002][ T7241] tipc: Node number set to 2
[   83.537722][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'.
[   83.606791][ T7235] team0: Port device team_slave_0 removed
[   83.647730][   T40] kauditd_printk_skb: 10 callbacks suppressed
[   83.647741][   T40] audit: type=1400 audit(1763822191.850:549): avc:  denied  { name_bind } for  pid=7249 comm="syz.2.358" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   83.647896][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'.
[   83.650482][   T40] audit: type=1400 audit(1763822191.850:550): avc:  denied  { write } for  pid=7249 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   83.698007][ T7254] tipc: Started in network mode
[   83.699884][ T7254] tipc: Node identity 0a19e44f8519, cluster identity 4711
[   83.703988][ T7254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.710744][ T7257] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   83.711980][ T7254] syzkaller0: entered promiscuous mode
[   83.716500][ T7254] syzkaller0: entered allmulticast mode
[   83.721584][ T7257] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   83.730672][ T7254] tipc: Resetting bearer <eth:syzkaller0>
[   83.736703][ T7253] tipc: Resetting bearer <eth:syzkaller0>
[   83.746816][ T7253] tipc: Disabling bearer <eth:syzkaller0>
[   83.802735][   T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   83.810748][ T7013] 
[   83.811790][ T7013] ======================================================
[   83.814334][ T7013] WARNING: possible circular locking dependency detected
[   83.816903][ T7013] syzkaller #0 Not tainted
[   83.818638][ T7013] ------------------------------------------------------
[   83.821293][ T7013] syz-executor/7013 is trying to acquire lock:
[   83.823576][ T7013] ffff888105c7a040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0
[   83.827754][ T7013] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   83.827754][ T7013] but task is already holding lock:
[   83.830640][ T7013] ffff888105c7a338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[   83.833850][ T7013] 
[   83.833850][ T7013] which lock already depends on the new lock.
[   83.833850][ T7013] 
[   83.837578][ T7013] 
[   83.837578][ T7013] the existing dependency chain (in reverse order) is:
[   83.840793][ T7013] 
[   83.840793][ T7013] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[   83.843510][ T7013]        __mutex_lock+0x193/0x1060
[   83.845374][ T7013]        l2cap_info_timeout+0x79/0xa0
[   83.847321][ T7013]        process_one_work+0x9cf/0x1b70
[   83.849318][ T7013]        worker_thread+0x6c8/0xf10
[   83.851185][ T7013]        kthread+0x3c5/0x780
[   83.852906][ T7013]        ret_from_fork+0x675/0x7d0
[   83.854790][ T7013]        ret_from_fork_asm+0x1a/0x30
[   83.856756][ T7013] 
[   83.856756][ T7013] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[   83.860425][ T7013]        __lock_acquire+0x126f/0x1c90
[   83.862381][ T7013]        lock_acquire+0x179/0x350
[   83.864226][ T7013]        __flush_work+0x4e4/0xcc0
[   83.866058][ T7013]        __cancel_work_sync+0x10c/0x130
[   83.868102][ T7013]        l2cap_conn_del+0x5af/0x730
[   83.869977][ T7013]        l2cap_disconn_cfm+0x96/0xd0
[   83.871718][ T7013]        hci_conn_hash_flush+0x10e/0x260
[   83.873526][ T7013]        hci_dev_close_sync+0x602/0x11d0
[   83.875566][ T7013]        hci_dev_do_close+0x2e/0x90
[   83.877482][ T7013]        hci_unregister_dev+0x227/0x640
[   83.879433][ T7013]        vhci_release+0x17d/0x230
[   83.881251][ T7013]        __fput+0x402/0xb70
[   83.882922][ T7013]        task_work_run+0x150/0x240
[   83.884790][ T7013]        do_exit+0x86f/0x2bf0
[   83.886519][ T7013]        do_group_exit+0xd3/0x2a0
[   83.888396][ T7013]        __x64_sys_exit_group+0x3e/0x50
[   83.890407][ T7013]        x64_sys_call+0x150b/0x1730
[   83.892322][ T7013]        do_syscall_64+0xcd/0xfa0
[   83.894145][ T7013]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.896425][ T7013] 
[   83.896425][ T7013] other info that might help us debug this:
[   83.896425][ T7013] 
[   83.900043][ T7013]  Possible unsafe locking scenario:
[   83.900043][ T7013] 
[   83.902734][ T7013]        CPU0                    CPU1
[   83.904678][ T7013]        ----                    ----
[   83.906639][ T7013]   lock(&conn->lock#2);
[   83.908215][ T7013]                                lock((work_completion)(&(&conn->info_timer)->work));
[   83.911638][ T7013]                                lock(&conn->lock#2);
[   83.914000][ T7013]   lock((work_completion)(&(&conn->info_timer)->work));
[   83.916508][ T7013] 
[   83.916508][ T7013]  *** DEADLOCK ***
[   83.916508][ T7013] 
[   83.919436][ T7013] 5 locks held by syz-executor/7013:
[   83.921347][ T7013]  #0: ffff888044298dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[   83.924764][ T7013]  #1: ffff8880442980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0
[   83.928251][ T7013]  #2: ffffffff9035bcc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260
[   83.931790][ T7013]  #3: ffff888105c7a338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[   83.935114][ T7013]  #4: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0
[   83.938404][ T7013] 
[   83.938404][ T7013] stack backtrace:
[   83.940515][ T7013] CPU: 3 UID: 0 PID: 7013 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   83.940531][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   83.940539][ T7013] Call Trace:
[   83.940546][ T7013]  <TASK>
[   83.940552][ T7013]  dump_stack_lvl+0x116/0x1f0
[   83.940566][ T7013]  print_circular_bug+0x275/0x350
[   83.940586][ T7013]  check_noncircular+0x14c/0x170
[   83.940607][ T7013]  __lock_acquire+0x126f/0x1c90
[   83.940621][ T7013]  lock_acquire+0x179/0x350
[   83.940633][ T7013]  ? __flush_work+0x4d0/0xcc0
[   83.940647][ T7013]  ? mark_held_locks+0x49/0x80
[   83.940658][ T7013]  ? __flush_work+0x4d0/0xcc0
[   83.940672][ T7013]  __flush_work+0x4e4/0xcc0
[   83.940686][ T7013]  ? __flush_work+0x4d0/0xcc0
[   83.940700][ T7013]  ? detach_if_pending+0x1f1/0x280
[   83.940720][ T7013]  ? __pfx___flush_work+0x10/0x10
[   83.940735][ T7013]  ? __pfx_wq_barrier_func+0x10/0x10
[   83.940756][ T7013]  ? __pfx___might_resched+0x10/0x10
[   83.940774][ T7013]  __cancel_work_sync+0x10c/0x130
[   83.940789][ T7013]  l2cap_conn_del+0x5af/0x730
[   83.940806][ T7013]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[   83.940821][ T7013]  l2cap_disconn_cfm+0x96/0xd0
[   83.940836][ T7013]  hci_conn_hash_flush+0x10e/0x260
[   83.940850][ T7013]  hci_dev_close_sync+0x602/0x11d0
[   83.940865][ T7013]  ? __pfx_hci_dev_close_sync+0x10/0x10
[   83.940878][ T7013]  ? up_write+0x1b2/0x520
[   83.940891][ T7013]  hci_dev_do_close+0x2e/0x90
[   83.940903][ T7013]  hci_unregister_dev+0x227/0x640
[   83.940916][ T7013]  vhci_release+0x17d/0x230
[   83.940930][ T7013]  ? __pfx_vhci_release+0x10/0x10
[   83.940941][ T7013]  __fput+0x402/0xb70
[   83.940959][ T7013]  task_work_run+0x150/0x240
[   83.940973][ T7013]  ? __pfx_task_work_run+0x10/0x10
[   83.940988][ T7013]  do_exit+0x86f/0x2bf0
[   83.941008][ T7013]  ? do_raw_spin_lock+0x12c/0x2b0
[   83.941022][ T7013]  ? __pfx_do_exit+0x10/0x10
[   83.941040][ T7013]  ? rcu_is_watching+0x12/0xc0
[   83.941060][ T7013]  do_group_exit+0xd3/0x2a0
[   83.941083][ T7013]  __x64_sys_exit_group+0x3e/0x50
[   83.941103][ T7013]  x64_sys_call+0x150b/0x1730
[   83.941121][ T7013]  do_syscall_64+0xcd/0xfa0
[   83.941134][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.941147][ T7013] RIP: 0033:0x7f1c59d8f749
[   83.941157][ T7013] Code: Unable to access opcode bytes at 0x7f1c59d8f71f.
[   83.941163][ T7013] RSP: 002b:00007fff3c50d348 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   83.941175][ T7013] RAX: ffffffffffffffda RBX: 00007f1c59e13def RCX: 00007f1c59d8f749
[   83.941183][ T7013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   83.941190][ T7013] RBP: 0000000000000016 R08: 00007fff3c50b0e6 R09: 00007fff3c50e600
[   83.941198][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3c50e600
[   83.941206][ T7013] R13: 00007f1c59e13d7d R14: 00005555876874a8 R15: 00007fff3c5118b0
[   83.941218][ T7013]  </TASK>
[   83.941343][   T64] Bluetooth: hci0: command 0x041b tx timeout
[   83.961406][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout
[   84.307259][ T6559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.375129][ T6559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.433859][ T6559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.494526][ T6559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.587204][ T6559] bridge_slave_0: left allmulticast mode
[   84.589125][ T6559] bridge_slave_0: left promiscuous mode
[   84.590991][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.610343][ T6559] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   84.614621][ T6559] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[   84.618006][ T6559] bond4 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 06:43:79:29:50:a1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   84.733172][ T6559] bond1 (unregistering): (slave bridge1): Releasing backup interface
[   84.736287][ T6559] bridge1 (unregistering): left promiscuous mode
[   84.799713][ T6559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.804561][ T6559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.808858][ T6559] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[   84.812776][ T6559] bond0 (unregistering): Released all slaves
[   84.863716][ T6559] bond1 (unregistering): Released all slaves
[   84.869374][ T6559] bond2 (unregistering): Released all slaves
[   84.875506][ T6559] bond3 (unregistering): Released all slaves
[   84.884084][ T6559] bond4 (unregistering): (slave veth3): Releasing backup interface
[   84.888204][ T6559] bond4 (unregistering): Released all slaves
[   84.963051][ T6559] tipc: Left network mode
[   85.119692][ T6559] hsr_slave_0: left promiscuous mode
[   85.121817][ T6559] hsr_slave_1: left promiscuous mode
[   85.123790][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.126087][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.128814][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.132126][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.136688][ T6559] veth1_macvtap: left promiscuous mode
[   85.138470][ T6559] veth0_macvtap: left promiscuous mode
[   85.293461][ T6559] team_slave_1 (unregistering): left allmulticast mode
[   85.295730][ T6559] team0 (unregistering): Port device team_slave_1 removed
[   85.320958][ T6559] team_slave_0 (unregistering): left allmulticast mode
[   85.324023][ T6559] team0 (unregistering): Port device team_slave_0 removed
[   85.726588][ T6559] IPVS: stop unused estimator thread 0...
[   85.829710][ T6559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.888179][ T6559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.986387][ T6559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.083901][ T6559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.168571][ T6559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.227242][ T6559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.328029][ T6559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.386117][ T6559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.578540][ T6559] bond1 (unregistering): (slave bridge1): Releasing backup interface
[   86.635516][ T6559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.640540][ T6559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.645457][ T6559] bond0 (unregistering): Released all slaves
[   86.651931][ T6559] bond1 (unregistering): Released all slaves
[   86.675925][ T6559] bond3 (unregistering): (slave gre1): Releasing backup interface
[   86.679044][ T6559] gre1 (unregistering): left promiscuous mode
[   86.895156][ T6559] bond0 (unregistering): Released all slaves
[   86.904159][ T6559] bond1 (unregistering): (slave bond2): Releasing backup interface
[   86.907443][ T6559] bond2 (unregistering): left promiscuous mode
[   86.910447][ T6559] bond1 (unregistering): Released all slaves
[   86.965100][ T6559] bond2 (unregistering): Released all slaves
[   87.018058][ T6559] bond3 (unregistering): Released all slaves
[   87.106098][ T6559] tipc: Left network mode
[   87.548639][ T6559] hsr_slave_0: left promiscuous mode
[   87.550782][ T6559] hsr_slave_1: left promiscuous mode
[   87.554682][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.557116][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.559896][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.562390][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.566532][ T6559] hsr_slave_0: left promiscuous mode
[   87.568503][ T6559] hsr_slave_1: left promiscuous mode
[   87.573728][ T6559] veth1_macvtap: left promiscuous mode
[   87.576051][ T6559] veth0_macvtap: left promiscuous mode
[   87.578400][ T6559] veth1_vlan: left promiscuous mode
[   87.580664][ T6559] veth0_vlan: left promiscuous mode
[   87.584721][ T6559] veth1_macvtap: left promiscuous mode
[   87.586720][ T6559] veth0_macvtap: left promiscuous mode
[   87.588827][ T6559] veth1_vlan: left promiscuous mode
[   87.590757][ T6559] veth0_vlan: left promiscuous mode
[   87.785620][ T6559] team0 (unregistering): Port device team_slave_1 removed
[   87.914441][ T6559] pimreg (unregistering): left allmulticast mode