last executing test programs:

4m31.68906974s ago: executing program 32 (id=93):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='prev_comm.function ==', 0x15)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b400000000117910480000009d0061040c00000000009500000c000000cec37cac1a1999384458386edb980b00000017f8617f00f9cc2cf8c1fbd4bdbf41ee0752b3ca89e389b91c84ecd6c2b2a96bf762d7e0fa2969ce6211472d676f35b741f2cb151f66c6dacf24893ed74de1276bac92dffb409e362db8a2bb62d4"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc7, &(0x7f0000000340)=""/199, 0x0, 0x27, '\x00', r3, @sk_msg}, 0x94)
close(r5)
r6 = socket$kcm(0xa, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10)
write(r8, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0x0, 0xf0, 0xb6, &(0x7f00000005c0)="449415c03f349655e2a7133322d8e33ed71fc332ce6e4bf9bd36c8546311badb240694ee06998dc912e7464f657c7d6f06ca7258574fb52d9baff100bba47692de3700c01dcc5f6876e5d76fbf849b95661fff872c6b9ff62ca6bb98ff8ad4d3b0822fbcc2a7f18f268e4a180a5857a3de958803dd19c1acbac5875a0afb9180e846153699733563e1bf114553e821ee2984963d6de04165dd44e1016b26ea43d49959b92512fada96dd1201e96b6caca3df74c51c922c9da8fe5caefed41aedd8191ced67f5a0701597fdaf440dfec700c47033cef8fdab6e1c00f669e302b0146d7bc5d451bd4d30a7599ecc8e83ae", &(0x7f00000006c0)=""/182, 0x7, 0x0, 0xb, 0x57, &(0x7f00000007c0)="91850eebf867e05b16f2b8", &(0x7f0000000940)="8ee6127d9bc841a55fc9190ff0d7448feb7050c860cff95665a7a5789ea528c8e20381927e56333134914c19f5abd8d92ebae330cd17f659ac043f13e3297f6762b44b582fc66f069de179f28d3af0a52cbab6f1c81209", 0x0, 0x0, 0x8000}, 0x50)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0xe5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
recvmsg$kcm(r6, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000)

3m43.289179168s ago: executing program 33 (id=752):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20000, 0x144, 0x14}, 0x18) (async)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840)
r2 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x2010, r2, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3) (async)
ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0) (async, rerun: 64)
newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x6000) (async, rerun: 64)
read$FUSE(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))

3m35.082129972s ago: executing program 34 (id=877):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m28.181590688s ago: executing program 6 (id=964):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x4000000000b, 0x50040)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r1, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x22, 0x0, 0x0, 0x8, 0x1, 0x9, 0x81, 0x6, 0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x208402, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000003600)=""/4125, &(0x7f00000010c0)=0x101d)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

3m27.323629368s ago: executing program 6 (id=973):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000019300)='./file0\x00', 0x189940, 0x70)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0x3, 0x1}, 0x6)
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000780)={0x50, 0x0, r4, {0x7, 0x1f, 0x3, 0xc0004, 0x1, 0x4, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4401, 0x9c)
dup3(r5, r1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000019280)={0x1, 0x1, 0x1000, 0x100000, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x541001, 0x2, 0x20}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="040000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073cb7a300a01020000000000000000020000020900010073797a300000000009000300000000000000000014000000160a010400000000000000000a000009140000001100010000000000000000000000000a000000000000000000"], 0x94}}, 0x0)
r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x20000)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000)
ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f00000000c0)=[{0x12, '\x00', @buffer={"b2e84620c6452a612e86244c8c9b7067dabd5f05ae84058f1989c52762bc77a1", 0x20}, 0x1}]})

3m26.692866408s ago: executing program 6 (id=979):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000000002080400000000000000000a0092eb250a018006000340000300000c00028005000100000000003c0003800c000280050001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @rand_addr=0xc0a80100}, {0x2, 0x0, @empty}, {0x2, 0x0, @rand_addr=0xffffff00}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='syzkaller0\x00'})
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @empty, @rand_addr=0xc0a80101}}}}, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000))

3m26.487399984s ago: executing program 6 (id=980):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=<r0=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc) (async, rerun: 32)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) (rerun: 32)
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2815010, &(0x7f00000002c0)={[{@max={'max', 0x3d, 0xd989}}, {@max={'max', 0x3d, 0xaea4}}, {@stats}, {}], [{@uid_lt={'uid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r1}}, {@subj_user={'subj_user', 0x3d, '\\)-['}}, {@uid_eq={'uid', 0x3d, r2}}, {@obj_type={'obj_type', 0x3d, '('}}]})
r3 = memfd_secret(0x0) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, <r5=>0x0, 0x0, <r6=>0x0, 0x0, <r7=>0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x8, 0x1, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000540)={0x0, r4, r6, 0x6, 0x7fffffff, 0x8, 0x2f, 0x200, 0x8, 0x96, 0x24000, 0x7})
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000580)=0xa0) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000640)={&(0x7f00000005c0)=[<r8=>0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r7, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000006c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x4, r4, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000740)={0x9, r8, r9}) (async)
ioctl$CDROMRESUME(r3, 0x5302) (async, rerun: 64)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x114, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xaf, 0x8, "0cbdcf268be68fae10decdb19a5678f6235be65fa454455c918238ee0bf562fa0086ddaead4e9f58045d795c00b473c25fd064baf5ff1ef04bf0d36594414016ff65dfdf723e0054758e7604120d853ea0464ff299faf2963e3fb6f2b92b007325631cd9ccfaa4ccd29ca003e1e5170fdf5c491daf60b2c70ab64478be0f2b59ede577d645ba987427f074b871eb39dcf31ecf3cf59736813d21aaad22bf4c11908bf2d03e1ac12772e94f"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x114}}, 0x24040041) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000980)={r6, 0x8000, 0x9, 0x9, 0x2, [], [0xcb3, 0x4, 0xd, 0x5], [0xeb6d, 0x10000, 0x0, 0xff], [0xcb, 0x1, 0x3, 0xfff]})
setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000a00)={0x2b, @remote, 0x4e21, 0x0, 'lblc\x00', 0x1a, 0x1, 0x4f}, 0x2c) (async)
setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000a40)=0x1, 0x4) (async)
ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000a80)) (async)
ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) (async, rerun: 32)
close_range(r3, r3, 0x0) (rerun: 32)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r3)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x84, r10, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf96}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async, rerun: 32)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000001040)={0x2, 'pimreg1\x00', 0x4}, 0x18) (rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001180)={&(0x7f0000001080)=[0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, <r12=>0x0, 0x0], &(0x7f0000001100)=[0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f00000011c0)={r12, r5, 0x0, 0xb, 0x542f})
r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001200), 0x2002, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r11, 0x4048587b, &(0x7f00000015c0)={{r13, &(0x7f0000001240)='*\x00', 0x20200, &(0x7f0000001280)={@_ha_fsid={[0x5, 0xa]}, {0xf8, 0x80, 0x10000, 0x3ff}}, 0xbc, &(0x7f00000012c0), &(0x7f0000001300)=0x1dbfa474}, 0x2, &(0x7f0000001580)=[{0x2, 0x8, &(0x7f0000001340)='[\x00', &(0x7f0000001380)="f286e0caffe9438a1ef6829662c3fe9a2df8843aa8a2708d5013224edb2fedf3259196d49e734488f04e7c700f2f21a88f4c88a4dd6c453b839817d87f84b592158d61f9026483104d9334a9a81087f6326c7857fbfe95bc595e413f041aaca5e229bf3ba546b57ce0917092ae2a6924dd3bb5dbbdb92ffe3d9f5ba22bb014f85926018964b67a37b9f9d691525d38c5d5cd5d766cd7a88158069142e4b2bf20f7267d721d17d71a03a3f7a0496e7504fd4eb76ea8594c9ce4fc9deb70", 0xbd, 0x10}, {0x1, 0x7, &(0x7f0000001440)='rootcontext', &(0x7f0000001480)="bae26d553c7e4b7a3f7a7e2bf78a6644f7042b1d445880db634658ff33eb751c86857b28cdfaa0785d8c04d86ab3a560ab2f599f05d49e5e6692b76ded840454e6d23f2fa3ff484ea03e81bb8831b5fda415671050081a35750502616d09d8ad8c6428397a15a8cad0f02be36cb267d78e510b4155aab4e6554e42feaecc38ca6de3e0f2e0e78778c3e3065b89e30f235be2deaa3150b73a809fbad0b1e104bb60afb2cda82014ae3c41799a74a609410468f1fa5b86b334878575155c0a0114040581", 0xc3, 0x70}]}) (async)
syz_open_dev$video(&(0x7f0000001640), 0x9, 0x40242) (async, rerun: 32)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000001680)={0x9, 0x0, 0x3018, 0xb1ea, 0x401, 0x9, 0x9, 0x1}) (rerun: 32)

3m25.904781521s ago: executing program 6 (id=985):
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78)
fcntl$addseals(r0, 0x409, 0x4)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000007fc0)={0x2020}, 0x2020)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x75382abb, 0x9, 0x3, 0x0, 0xc})
pwritev2(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="79b16f3f8c908394f1c065889024ec9224c8bba447b0bf506b53e287bbf090afa45dfd3edab9dc7e01df3873ade9fd1416c691b38b5b14cf18cdd87019f7a390aa837185d5e7e86ad8ad", 0x4a}, {&(0x7f0000000080)="6997c772ec5939cdef393b4444197f3363c6093ed8f66ba7c430d303e0a78c21622884d7935d8e0a689dd3f0242ab45a463561241b71cbd35bd33e23a23cfd3816e3ba737719fbc63d41b28c646beec7e0f246afaaf06f868d3baf5459dec110d7cc68ec80931edb84295f70fadaa8eb8f4c8a44293676bf1ce73c17dbd9e448242e62c0e2b918c61293f52cf4e0d6137e928304de3b570827200e3024ee1bf83a3ee862c39216adc5db357b6e50d18368abb8b42251bfabdde8defc0718c67e3e9406ec89aed5fd93a82c3da52a73765d123a65", 0xd4}, {&(0x7f0000000180)="381b5361efa7b19e3a5e840251fd87aca851e9743a34c049d503f0b1c30f19b5c82342b78ac6426fd9", 0x29}, {&(0x7f00000001c0)="15e9a6ad8b42fd443acc4a462abce4fa977742cd24978a5e3321e3804462f5323fc2965a002464ec839adbe903f9b88238d0d7e8289361eabdf09de8a5673212f3bccfe80f66f39014b911f3e2adcab73d95b45848da3964a0cc25b6c7c9629c951126fa32361d11729b7abae8a445a57da6ed0f8444a4e18b3978f89459b8f93d47ea4ae3a0f0e361f03e714247410001197ef4792bacb57741af58e47a4c7e7fff34", 0xa3}, {&(0x7f0000000280)="0da4807ca90f52", 0x7}], 0x5, 0x8, 0x3d, 0x4)

3m25.203727228s ago: executing program 6 (id=992):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)
ftruncate(r0, 0x2)

3m9.251488677s ago: executing program 35 (id=992):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)
ftruncate(r0, 0x2)

2m38.223354516s ago: executing program 1 (id=1239):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000000))
writev(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000380)="d4c44007", 0x4}], 0x2)

2m38.11402898s ago: executing program 1 (id=1242):
unshare(0x60040000)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000015c0)={0x1f, 0x0, @none}, &(0x7f0000001600)=0xe, 0x800)
recvmsg(r0, &(0x7f0000001880)={&(0x7f0000001640)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/104, 0x68}, {&(0x7f0000001740)=""/215, 0xd7}], 0x2}, 0x2000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
r1 = io_uring_setup(0x1b81, &(0x7f0000000040)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8})
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a30000000000e200000d00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x2000040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x3, 0xffffb51b, {}, {0xffffffffffffffff}, 0x400, 0x9})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10380300000100002800128008000100677470001c00028008000100", @ANYRES32], 0x50}}, 0x24000840)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r7 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

2m36.92121122s ago: executing program 1 (id=1247):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000009391560beede0a2404ffffff017c0000140002de6e32ad4e166fcc80100014800c00c386a98f39f90b88a42c2ca0b2d0c4eb77114f000000000000000000000000d3421fcddc915664e64c9ec825f1edc6022dac104fa715b04b20a55b3452bbe80652f6d70fd13548bb52db75ec78592f2edbde37bd5cb362", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x2400c000)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000009391560beede0a2404ffffff017c0000140002de6e32ad4e166fcc80100014800c00c386a98f39f90b88a42c2ca0b2d0c4eb77114f000000000000000000000000d3421fcddc915664e64c9ec825f1edc6022dac104fa715b04b20a55b3452bbe80652f6d70fd13548bb52db75ec78592f2edbde37bd5cb362", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x2400c000) (async)

2m36.920942177s ago: executing program 1 (id=1248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), &(0x7f0000000280)='./bus\x00', 0x6, 0x1)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @generic=0x2, 0x7f, 0x7, 0x8})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x2, 0x8, &(0x7f0000000180)=0xe530})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88ab}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084014)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x4)
write(r9, &(0x7f0000000000)="000000861600", 0x6)

2m36.703996325s ago: executing program 1 (id=1256):
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'ip6gre0\x00'}}, 0x1e)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0'])
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x4e23, 0x4, 'lblcr\x00', 0x0, 0xfffffffc, 0x80}, 0x2c)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87})
semctl$SETVAL(0x0, 0x4, 0x10, 0x0)
r3 = eventfd2(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000200)={0x4c, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9e}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
r7 = semget(0x3, 0x1, 0x0)
semctl$IPC_INFO(r7, 0x0, 0x3, &(0x7f0000001300)=""/156)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r3, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota')

2m36.444136346s ago: executing program 7 (id=1261):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="ac1414aa0000000000004000000000000004000033000000ac0414bb000000000000000000000000000100000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000200000000000000000000000000000000100000000000000000000000000000000000000100000a000000000000000000000005000000050000000000000000f10000000008"], 0x100}}, 0x0) (async, rerun: 64)
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/112, 0x70}, {0x0}], 0x2) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r3, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1043}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x18) (async, rerun: 32)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x5, 0xa}, {0xffff, 0xfff1}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa2, 0x5, 0x1291}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4804}, 0x44080) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x50deecda08de2091}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x9, 0xe5ae, 0x42, 0x7e71b34}, {0x8, 0x3, 0x7cb, 0x200, 0xf5b, 0x7}, 0x2000007, 0x80000000, 0x1cd9}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)

2m36.374490747s ago: executing program 7 (id=1263):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x739, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x75, 0x5}, &(0x7f0000000100)=0xc)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)

2m36.272164007s ago: executing program 7 (id=1267):
prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f0000000780)='./file0\x00', 0x13f)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@workdir={'workdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x3fffd)
fcntl$setlease(r0, 0x400, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xe0, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000007c0)={0x0, 'lo\x00', 0xffffffff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r4, @ANYRESOCT=r6, @ANYRES32=r4, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="0000000003824792a8320654880d4597d3f06b8c02ea3d6ffb6ab07be5a465b78b481ed8b1a654a23f913a720e857e7c9408aeadcacac02cb3ca14478ae65d659d4db960737bfecae425e735b6723181667256d6d4dc2bca7774c9977ec0c942ca64184b6cc3213b6f", @ANYRES16=r3, @ANYBLOB="01082cbd7000fedbdf250c0000001800058007000100696200000c0002800800040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040)
fremovexattr(r0, &(0x7f0000000140)=@known='trusted.overlay.nlink\x00')
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r7, &(0x7f0000000100)='./file1\x00', 0xe4)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20)

2m36.083985701s ago: executing program 7 (id=1269):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) (async)
mount(0x0, &(0x7f0000001080)='./sys_link\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) (async)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xa800, 0x0)

2m36.014927045s ago: executing program 7 (id=1270):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec621d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m35.850390874s ago: executing program 1 (id=1272):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfc}]}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
connect$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x8001100)

2m35.76902515s ago: executing program 36 (id=1272):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfc}]}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
connect$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x8001100)

2m35.722444027s ago: executing program 7 (id=1274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002f00090027bd7000fedbdf250400000004001f"], 0xcc}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

2m35.720641905s ago: executing program 37 (id=1274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002f00090027bd7000fedbdf250400000004001f"], 0xcc}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

2m17.949055378s ago: executing program 0 (id=1452):
r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
syz_open_dev$mouse(&(0x7f0000000000), 0x1af4, 0xc4240)
read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020)

2m17.872588046s ago: executing program 0 (id=1455):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCFLSH(r1, 0x540b, 0x1)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x24)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000280)="8f35f0d2c5d8aa0ccbac7faced1230db08435781893be65d4d7f57e5a4b97b8975af2cd093ea9575081a75ddfb1c3b744ce9fed271d87454ec91b046de799c06d55ad8b0c3c727c45b086cd9ed94fada9546bdd29d0e1055fa6edfdaa34f1e29", 0x60}, {&(0x7f0000000300)="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", 0xff}], 0x2, &(0x7f0000000480)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x6e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xde}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0xd8}, 0x805)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000020e4ff0f01000001004100640000000000000b000000fbcdfd25fedbc5328f9bb442e1c6bf30ba710497efcab020323a86bb16389ec220f61638e98651f5d4a11aa78686892537c37c59b20a62f2c758d54a0b3684f5acabc7b14e4b68585ea28eb3b36a379e096d07ec91ebd579ff8a71b38bfcba1b5dd78f07a3926e1a5c665d031e9edbbe0c53fcbf865757a8213792e3ff3109fb94162a8dc57c24a9183a55eac207c1b5aba29c6c2b4de24a8a14395a4d5ae746b91070124fc11f6bcd54703ea6ad8baa2c4e57b449753a09c3b498"], 0x18}, 0x0)
recvmsg(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0)

2m17.764169049s ago: executing program 0 (id=1457):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x185640)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x100, 0x233e, &(0x7f0000000240)="f2b19f38f21f9c038941e1af7023192a6b19561f24bb97ace9f646b06cbc85c9d21630460fc38c448011564e8c9ac21e14bb3a03644ee4bc3bc144cff140ed74a0a69a0878aae6b17104d6ec6f2db627b856a1ebc163b1d83362b80404f587be743a30433df05e56d803cdd5951a950209b9a21271b829a3c273bac8d85b8b96d8bda77853da4fa1744de03817df48e14e1833551e7eff49573408fa790c260b33b0d3272fe93445e384dc5f7edeec1a388eec4dda0ba360010762bff528f1f880360e43d1ead66ee636e058"})
r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22)
r2 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x121080)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000002c0)={"c66bf15d", 0x6, 0x6, 0x7f, 0x8, 0x3, "f3658347b1348bf3e4bacca8b73ca7", "ed0d10ab", "35bd2909", "107712b1", ["a1a41b6131960dfdfe5659fc", "2a85625ea3eedb689cc7fac9", "0449672a13711f831d0e0927", "1a7b390243f64d5f43b323d1"]})
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)={0x6ad, 0x10, 0x5, 0x0, 0x0, [{{r1}, 0x8}, {{r0}, 0x7}, {{r2}, 0x6}, {{}, 0x2}, {{r0}, 0x48}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x2be})
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r5, 0x2000000)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r8, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x4})

2m17.534683828s ago: executing program 0 (id=1459):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880)
ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
sendmmsg$unix(r1, &(0x7f0000000140), 0x400000000000140, 0x24008050)
close(r1)

2m17.473567904s ago: executing program 0 (id=1460):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x54, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_PHYS_SWITCH_ID={0xfffffffffffffebf, 0x24, "a7fa54df06d106418b7eb8e2771d94a0bf07ea137bd91e1f3901"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x54}}, 0x8000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x2000, 0xa0363159}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff})
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r6, &(0x7f0000000300)='tcp 2', 0x5)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000800)={0x6c, 0x0, &(0x7f0000000740)=[@acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x1}, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/12, 0xc, 0x1, 0x34}, @fda={0x66646185, 0x0, 0x0, 0x35}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000640)={0x0, 0x28, 0x48}}, 0x1000}], 0x2f, 0x0, &(0x7f00000007c0)="6090882c39f38b26824f64e64cc1c1f745ee06c1d016a9256b9780de78290a3bf824e3beed8835ea300b3ffd63f374"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x2}) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, <r9=>r7, 0x2})
syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) (async)
r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
inotify_init() (async)
inotify_init()
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={<r11=>0x0, 0x0, r9})
ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000300)={r11})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={<r12=>0x0, 0x1})
ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r3, 0xc0186443, &(0x7f0000000380)={0x0, 0x1, {0x30, 0x1, &(0x7f00000002c0)=[{0x2, r11, 0x1, 0x0, 0x7fffffff, {0x10, 0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x7}, {0x1, r12, 0x1}]}}]}})

2m16.665397067s ago: executing program 0 (id=1471):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
geteuid()
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000180)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0\x00', 0x3a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r3, &(0x7f0000000180), 0x1000)

2m16.5904472s ago: executing program 38 (id=1471):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
geteuid()
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000180)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0\x00', 0x3a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r3, &(0x7f0000000180), 0x1000)

1m36.071744s ago: executing program 2 (id=1885):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x401, @private1={0xfc, 0x1, '\x00', 0xff}, 0x7}, 0x1c) (async)
sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x20040040, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x20}}, 0x1c)
shutdown(r1, 0x1) (async)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) (async)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4ed63e12df97c625, 0x7}, {0xa}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x400, 0x1, 0xc, 0x6, 0x40000, 0x5, 0x6, 0x3ff, 0x1, 0x5, 0x7, 0x7, 0x2, 0x401, 0x19af, 0x4, 0x800, 0x400, 0x1ff, 0x147, 0x5, 0x80, 0x57b0, 0x4, 0x2, 0x0, 0x2de, 0x92f, 0xa, 0x8, 0x200, 0x8001, 0x3, 0x8, 0x5, 0x6, 0x10000, 0x6, 0x4, 0x77a0, 0x3, 0x7, 0x5, 0x60, 0x0, 0x8, 0xffffffff, 0x80, 0xff, 0x8, 0x3, 0xfffffffe, 0x1fe06807, 0x662, 0x10000, 0x4, 0x6, 0x40, 0x0, 0x40, 0x6, 0x6, 0x1, 0x1, 0x5, 0x0, 0x8, 0x6, 0x8001, 0x5, 0x3, 0xffffff00, 0x7, 0x6, 0x9, 0x3, 0x9, 0x6, 0xffffffff, 0x8, 0x7, 0x3, 0x9, 0xffff, 0x4, 0x5c, 0x1000, 0x8, 0x38000000, 0x2, 0x8, 0x7, 0xb4ab, 0x0, 0x800, 0x7b9fdafd, 0x2, 0x7f, 0x7, 0x9, 0x2, 0x80, 0x7, 0xf5, 0xa9f2, 0xfffffffa, 0x5, 0x5, 0x401, 0x4, 0x0, 0x6, 0x1, 0x4, 0x0, 0x4, 0xfffffbff, 0x1ff, 0x3f7, 0x1, 0x6, 0x101, 0x1000, 0x68, 0x8b, 0x8, 0x6, 0x7, 0x9, 0xa, 0x7, 0x80000000, 0x8552, 0xa, 0x8, 0x43, 0x8000, 0x8, 0x7, 0x400, 0xc, 0x7, 0x1, 0x5, 0x10, 0x7, 0x4, 0xfffffff8, 0x6, 0x3, 0x2, 0x8, 0x9, 0x0, 0x8, 0x5, 0xfffffffd, 0xfff, 0x420, 0x1, 0x23, 0x4, 0x8, 0x200, 0x0, 0x4, 0x2, 0x1, 0x2ca, 0xa5, 0x7f, 0x80000000, 0xfffffffc, 0x80000, 0x8, 0x1, 0x1, 0x5, 0x80000000, 0x7fff, 0xff, 0x4, 0xfffffff9, 0x5b8, 0xfffffffa, 0xa, 0xc, 0x2, 0x5, 0x9, 0x5, 0x8, 0x8, 0x3, 0x7, 0xfffffff7, 0x1, 0x0, 0x7ff, 0x5, 0x5, 0x3, 0x6, 0x4, 0x723d, 0x0, 0x2f2, 0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x5, 0x9, 0xdf, 0x8f, 0x3, 0x6, 0xfffffffe, 0x7fffffff, 0x200, 0x4deb, 0x6, 0x10001, 0xff, 0x5, 0x80000000, 0x3, 0x0, 0x5, 0x7, 0x1, 0x0, 0x26, 0x8, 0x6, 0x3, 0x400, 0x3, 0xc9, 0x7, 0x8000, 0x3, 0x5, 0x7, 0x6, 0x1, 0xa, 0x8, 0x6, 0x11, 0x3, 0x8, 0x9, 0x5]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffaf)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0xd}, &(0x7f0000000380)=0x8)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

1m35.7724027s ago: executing program 2 (id=1891):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0x4e8, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}]}, @NFQA_PAYLOAD={0x100, 0xa, "f1e64f918d7fa9e2bd07be1a238b7cef7901a5cb954a6751d9ed3cd1c46a2ccef1d47104520574aef6039969850ba61a84dfbdd02fb45a1a2b8800de85e24ee460f56a17090ca25cf4559e5dba06ce657e34384146bc3c22b771585c5e60fbe496554d1f47f9d54336b053a2a6718ba6059601e7869236661e45926c0cd70431c31d2bc75dc519a9a3bca28af5d739e3ba3ded6ed16b94df457e9b93e09056f85fa0d4951912071889a19eca6c85d35aea83906172879d43f0cdcc34d6919290b96250a6b894cb86242a64fca0c481d26005fb31ecc906b5e474f08a5bfe4b9197878090f1c01dd919eaad147f7bdb08adf2dfc33bcc5ec1d55ecb61"}, @NFQA_CT={0x264, 0xb, 0x0, 0x1, [@CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_MASTER={0xbc, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x9}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x5}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xec, 0x10}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xe}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xb}]}}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6f}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x100}}, @NFQA_PAYLOAD={0x3b, 0xa, "860e0aaac75cdabdd0d6c88ca69c2242bd11d0ca53d34ff23f5e2acb7d06bb6362cffc00b799d6080b69b3493c3febc37ff9a9a2cadf99"}, @NFQA_EXP={0x7c, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xf}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1656}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x8000}, 0xc040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="4b53bc6d85bf1a06533f04089a401c6a2cfbd0371220ca9c1d843f7bb3df6d57bbac6e0eab61c3e2382af3f570774b7235b8a80f9a7c9671145360b8865fe649c259248bcb23be974347adf616340aa88fc94b20cc6f12cc777a63a16669abd4b88f467a73d05d6ed5a9d3ecb071a175d34ea96ea0c1fb702f18567c88b1a2aab5f8d1161772740a08e8ffa614931a7d8636ed35d781e6a48d416ab3b1e9e35a1b6edfff3046dfd504740cfc1c7a719800a77fe9bbb78e1114d1a78833cf36466fdf4028988ec608fe774794204fc1130115bb1bd204cc56adb3017a949a39"], 0x10}}], 0x1, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c)
r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r6 = dup(r5)
sendmsg$kcm(r6, &(0x7f0000000880)={&(0x7f0000000080)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="7ab5d8f6158fa2c15b8a22527cc13cedf924b41f5fcac07919b33237dc0d47e44d8b243b9a447b555b995c49a922a0f88a00072e4fac647262256fc4042ee52d389ab090e45749992f50c3ecf4e2e94691d281e7a3febb71e2efc456abce3f9742aa9b7791f020", 0x67}, {&(0x7f0000000200)="8877e60fd948cb3cc4aa1416cee9a78af785259fbc85218687e86396f91cbc8cf6159d65e2a4d4ca520c800dc085dff8313bd887ba7adbb38c502ad5e34d718523db06b8e4386c8804db34c6b8edca414c682a6c0acac0afb10284715bf87719bc29e9a472fde8496c3b0206c0ba04541190b9b02f9be93b949185fc8b", 0x7d}], 0x2}, 0x4000000)
write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x30)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
dup(r0)
madvise(&(0x7f000076e000/0x11000)=nil, 0x11000, 0x15)
r7 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x503, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1244c}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa0100fe}, @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x2d616b45}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x9}]]}}}]}, 0x78}}, 0x0)

1m35.502203462s ago: executing program 2 (id=1892):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-vaes-avx512\x00'}, 0x58)
ioprio_set$uid(0x3, 0x0, 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x1f0, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x0, 0x4, 0x0, 0xfff, 0xf4, {0x4, 0x7, 0x7, 0xfffffffffffffff9, 0x0, 0x80000000, 0x8, 0x806, 0x5, 0xa000, 0x33c1bc78, 0x0, r6, 0x1fd}}, {0x6, 0xe6, 0x2, 0x7, 'fd'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r5, r6, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sg0, r5, &(0x7f00000000c0)='./file0\x00')
read$alg(r2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1m35.427845432s ago: executing program 2 (id=1893):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f0000001080)='./sys_link\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010)
r2 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

1m35.37210741s ago: executing program 2 (id=1894):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x3, [0x4, 0x3, 0x80000001]}})

1m33.850199197s ago: executing program 2 (id=1910):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x80a0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000ffe000/0x1000)=nil})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0xa, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
close_range(r6, 0xffffffffffffffff, 0x0)

1m33.781648502s ago: executing program 39 (id=1910):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x80a0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000ffe000/0x1000)=nil})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0xa, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
close_range(r6, 0xffffffffffffffff, 0x0)

1m27.81099958s ago: executing program 4 (id=1961):
sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000140)={0x2, [0x7fff, 0x0, 0xb6d, 0x9, 0x81, 0x8, 0xc7, 0x7ff, 0x800, 0x5, 0xe4d4, 0x3, 0x8, 0xfff6, 0x2, 0x1, 0xa, 0x0, 0x8, 0x7, 0x9, 0x8, 0xfffb, 0x83, 0xfffe, 0x5, 0x5, 0x9, 0x2, 0xc, 0x4, 0x5, 0x8, 0x5, 0x1, 0x6, 0x8, 0x308, 0x6, 0xb, 0x8001, 0xfff, 0x800, 0x8, 0x0, 0xff27, 0x7a8, 0x8], 0x7})
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0))
r2 = gettid()
mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./mnt/module/block2mtd/parameters/block2mtd\x00', &(0x7f0000000140), &(0x7f0000000200)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x2c, 0x1)
write(r3, &(0x7f00000001c0)='/dev/loop0,', 0xb)
rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})

1m27.259162638s ago: executing program 4 (id=1966):
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = socket$inet(0x2, 0x5, 0x103)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)

1m27.03123119s ago: executing program 4 (id=1969):
r0 = socket(0x10, 0x3, 0x0)
close(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', <r2=>0x0})
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x1, 0x1, 0xa4, r2}, 0xc)
mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='nfs4\x00', 0x0, &(0x7f00000000c0)='rdma')
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0)

1m26.871674621s ago: executing program 4 (id=1973):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x3000004) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708f7ff4788a8", 0x0, 0xd7, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x2) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffee}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x2) (async)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190)
fcntl$setlease(r6, 0x400, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
preadv2(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x101, 0x4, 0x2) (async)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async)
r9 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r9, 0x1, 0x48, &(0x7f0000000700), 0x4)
close_range(r8, 0xffffffffffffffff, 0x0) (async)
r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0)
ioctl$BSG_IO(r10, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) (async)
r11 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="8c0100001300040026bd7000000038195db372af39cc00007c0190802000a08004004980040079801400bf00ff010000000000000000000000000001776021920b48b26e78925ce86a8f9c7db9a05766b5172c10d4aad29ffef2ba03671f51f0775eb42070593260ce87bee71296daac60a540638facb479f51d6b6f0dac9cecaf03bf1c46310c6c530087bd188233a372552f9427ad7ea7ef5011744ae0c24c1d0c378e5ccc8d19694d435e19b925fffe646e6460cbb31d72c902621d4da9b40b34798403dbcabef6b2649f5fbab07418327c276e00d4b9b57ddacf08f68c7b1e97ea520c467ac2d93dafa4d0393b695ec107ad00555b7974cea51bf20781d52dbe64a40500090000000000ebf3a6552f863651a74cdfb93cce9f9f75a7b4ab81c977da569a8baacfb7f0b8c8d50547ee33f8b6bbc4b25680641614e2e6d2d7b8a76cf8c2e0631baf2032d20637eabcd5c32e31d0567aa14a5633de659d2469bbc41842df5e93293ea983313291062f04000800080009000a010101040037801400a400ff01000000000000000000000000000106cb3b8a221f14f18a81e1a032bdb8a5553da23c5b8885e0c6974432370ae49cb50240926e8b043ff412d2fb6e6bb0885bdf97d8031688d2b239b3e9bcd447b579644e3f643e908d5e089ee8e14393a923a7fbab84"], 0x18c}], 0x1}, 0x0)
accept4(r11, 0x0, &(0x7f0000000000)=0xffffff01, 0x0)

1m26.57219329s ago: executing program 4 (id=1977):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x40, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x5, 0xff20, 0x4, 0x7fff, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x50811}, 0x44002)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) (async)
r4 = userfaultfd(0x801)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
fchmod(r4, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))

1m26.388653959s ago: executing program 4 (id=1980):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000040))
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f0000000100)=@v1={0x2, "79eb"}, 0x3, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x100, 0x47e3, 0x180})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {<r9=>0x0}]})
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000002c0)={r9, 0x1})

1m11.358210129s ago: executing program 40 (id=1980):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000040))
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f0000000100)=@v1={0x2, "79eb"}, 0x3, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x100, 0x47e3, 0x180})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {<r9=>0x0}]})
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000002c0)={r9, 0x1})

22.629384658s ago: executing program 9 (id=2757):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]})
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x6})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x2, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3e5210})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="86", 0x1}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040)
sendmsg$AUDIT_TRIM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x20)
r8 = fsmount(r0, 0x1, 0x0)
fchdir(r8)
r9 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000ff0000000085100000030000000800000000000600000000000000000095000000000000129500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r11)
ptrace$setregs(0xd, r11, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r11, 0x2, &(0x7f0000000140)={&(0x7f00000000c0)=""/76, 0x4c})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000540)='./file1\x00', r10}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x1, 0xa)

22.471487185s ago: executing program 9 (id=2761):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}], 0x3, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x7, 0x1, 0x44, @private0, @local, 0x700, 0x8000, 0x3ff, 0x1000}})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@updsa={0xf0, 0x1a, 0x1, 0x70bd26, 0x0, {{@in=@private=0xa010101, @in=@empty}, {@in=@multicast1, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4000000000}, {}, 0x0, 0x20000, 0x2}}, 0xf0}}, 0x0)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001700010026bd7000fd00df25f21e0800"], 0x14}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
syz_open_procfs(r7, &(0x7f0000000280)='net/igmp6\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000871000/0x4000)=nil, 0x4000}, 0x7})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10)

21.541719743s ago: executing program 9 (id=2773):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffff, 0x200)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8", 0x39}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9", 0xc8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000000c0)={0x0, 0x0, [0x9, 0x7, 0x9, 0x4, 0x506, 0x2, 0x9, 0x6]})
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
prctl$PR_SET_ENDIAN(0x14, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x0)
ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, &(0x7f0000000040)=0xfffffffffffffffd)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

21.54094229s ago: executing program 9 (id=2774):
r0 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002440)=0xd)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0xa3b0d000)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0200, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0x4}, 0x83}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)="8ee9349856dbd5836de0bfe20376bf49233375942fd0596b57ef86bd5fac75676a3aa80651", 0x25}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)

21.471710976s ago: executing program 9 (id=2775):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
mkdir(0x0, 0x1ff)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="000b050000000530cef418788ed11fa8c86b2cdf5ce425e3"], &(0x7f0000000200)=ANY=[@ANYBLOB]}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x107ff}, 0x38)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000500)={0x1, 0x0, [{0x9, 0x3, 0x0, 0x0, @msi={0xfff, 0x3, 0xe, 0x33}}]})
ioctl$EVIOCGMASK(r3, 0x5b02, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
readv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/32, 0x20}, {&(0x7f0000000400)=""/122, 0x7a}], 0x3)
ptrace$setsig(0x4203, 0x0, 0x80, &(0x7f00000000c0)={0x16, 0x7, 0x7})
r5 = socket(0x10, 0x80002, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4c90)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000600)=0x40)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.431198156s ago: executing program 5 (id=2794):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async, rerun: 64)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) (rerun: 64)
write(r0, &(0x7f0000000140)='0fc5:1227:b', 0xb)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000100)=0x808c)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x8, 0x4})

1.419723363s ago: executing program 5 (id=2803):
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000280), 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2002090, &(0x7f0000000400)=ANY=[])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0x81, 0x80000001})
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$FICLONE(r3, 0x40049409, r2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

1.419381683s ago: executing program 9 (id=2804):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"})
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x1ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44045}, 0xc090)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.320854995s ago: executing program 5 (id=2806):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@lifetime_val={0x24, 0x9, {0x5, 0x7, 0x2, 0x7}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r3=>0x0], &(0x7f0000000340)=[<r4=>0x0], 0x0, 0x0, 0x1, 0x1})
r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000300)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000240)=[r4, r6, r3], 0x3, 0x80800})
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='openpromfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r7, &(0x7f0000000100)='1000', 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000b19f0000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(r9)
shutdown(r7, 0x1)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x8, 0x13, r10, 0x80000000)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8044)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0xfffffff7, 0x6, 0x4d27}, 0x3}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x80000001, 0xf5f6, 0x8, 0x5, 0x55de5cb1}, 0x2}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x6, 0x5, 0x0, 0x2, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0x8, 0x1, 0x8, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe000001000000000800010000011100"], 0x2c}}, 0x0)

850.374778ms ago: executing program 5 (id=2808):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={<r1=>0x0, 0xb04}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x1}, 0x8)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r8, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r6, 0x3, 0x70bd29, 0x11, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x20000000)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x16, '\x00', @string=0x0}})
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x9, @empty, 0x2803}}, 0x40000b, 0xd603, 0x20000, 0x3, 0xc, 0x0, 0x9}, 0x9c)

740.133226ms ago: executing program 5 (id=2809):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='Y\n', 0x2)
llistxattr(&(0x7f0000000240)='./nfsd\x00', &(0x7f0000000480)=""/209, 0xd1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x19)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x1, 0x48, &(0x7f0000000700), 0x4)
r2 = socket$kcm(0x23, 0x5, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r3, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="000206000000fdb5bedadbdf254100000008", @ANYRES32, @ANYBLOB="0c009900000200000b000000080027000300000008002600b4090000080022013e00000008002201140200000500190105000000080027"], 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x40)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r2, 0x800)
write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)

582.145037ms ago: executing program 5 (id=2810):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x800, @loopback}, 0x10)
listen(r0, 0x5) (async)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='sour\x80e\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='addr\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='vers\x00', &(0x7f00000002c0)='3\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='vers\x00', &(0x7f00000002c0)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='port\x00', &(0x7f0000000340)='2048\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='mountport\x00', &(0x7f00000003c0)='2048\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='mountport\x00', &(0x7f00000003c0)='2048\x00', 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7a, 0x121301)
ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, 0x0) (async)
ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0)
r3 = accept$inet(r0, 0x0, 0x0)
shutdown(r3, 0x2)
close(r3) (async)
close(r3)

581.802647ms ago: executing program 8 (id=2811):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000050)={@private0, 0x40, 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x10000, 0x6, 0x7, 0x7}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46f83}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x40000)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c)
listen(r2, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0}, 0x1c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c)
r4 = accept4$inet6(r2, 0x0, 0x0, 0x0)
close(r3)
close(r4)
syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@nop, @nop, @timestamp={0x8, 0xa, 0x7fffffff}]}}}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1}) (async)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000050)={@private0, 0x40, 0x2}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x10000, 0x6, 0x7, 0x7}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46f83}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x40000) (async)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) (async)
listen(r2, 0x5) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) (async)
accept4$inet6(r2, 0x0, 0x0, 0x0) (async)
close(r3) (async)
close(r4) (async)
syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@nop, @nop, @timestamp={0x8, 0xa, 0x7fffffff}]}}}}}}}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, 0x0) (async)

441.397972ms ago: executing program 3 (id=2812):
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000003cc0))
r1 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "2c36c9b641937e60"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000001)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x70bd28, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000040))
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) (async)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000003cc0)) (async)
fsopen(&(0x7f0000000140)='vfat\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async)
sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "2c36c9b641937e60"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x70bd28, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) (async)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000040)) (async)

361.178151ms ago: executing program 8 (id=2813):
pipe2(&(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84080)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x4, 0x0, 0xc, 0x3, 0x100, &(0x7f00000000c0)="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"})
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000210c0), 0x2, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000600), 0x105002, 0x0)
ioctl$VHOST_GET_FEATURES(r5, 0x4008af25, &(0x7f0000000040))
r6 = socket$inet(0x2, 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3)
ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newqdisc={0x94, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7)

357.444743ms ago: executing program 3 (id=2814):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x4000000) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x57, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4002}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x138}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40045}, 0x4000)

281.621771ms ago: executing program 3 (id=2815):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x5) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x1}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000040)) (async)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000090, 0x0, 0x10}]}) (async)
r7 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f00000003c0)={0x40f0f000, 0x8, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0xfffffffffffffffa, 0x4, 0x1, 0x20000}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1e, 0x16, &(0x7f0000001600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota')
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint}]})
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000300)={0x13, 0x1}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}})
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xfffffff2}}, './file0\x00'}) (async)
ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x1, 0xff, 0x5, 0x1, 0xed30, 0x4, 0x6, 0x3]})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94)
sendmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000401"], 0x10}, 0x331e5c6805043cda) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'})

201.595432ms ago: executing program 8 (id=2816):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000040)={0x14}, 0x14) (async)
write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000040)={0x14}, 0x14)
syz_open_dev$usbfs(&(0x7f0000000c00), 0x73, 0xe2300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x101000)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}]}) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}]})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x98, r4, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @broadcast, @device_a, @random="3a6b7c13e95a"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x8, 0x6, 0x1}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={0x0, 0x0})
socket$inet(0x2, 0x4, 0x5) (async)
r6 = socket$inet(0x2, 0x4, 0x5)
socket(0x6, 0x2, 0x0) (async)
socket(0x6, 0x2, 0x0)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}})
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0xa, 0x148, 0x368, 0x60, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x12, 0x0, [{0x5, 0x1, 0x9, 0x800}, {0x6, 0x3, 0x0, 0x7}, {0x0, 0x7, 0x6, 0x40}, {0x3ffd, 0x10, 0x0, 0xf98}, {0xab, 0x0, 0x8a, 0x6}, {0x7, 0x6, 0x5, 0x3}, {0x8e1, 0x1, 0x6}, {0x0, 0x6, 0xfe, 0xb0}, {0x9, 0x81, 0x9, 0xfffffff9}, {0x9, 0xb, 0xb2, 0x4}, {0x3, 0x2, 0x10, 0x1e56}, {0x38a, 0x1, 0x92, 0x1}, {0x80, 0x7f, 0xc6, 0x1200000}, {0x4, 0x3, 0x3, 0xff}, {0x100, 0x6, 0x9, 0x8b}, {0x4, 0x5, 0x8b, 0x16}, {0x4, 0x3e, 0x1, 0x9}, {0x4, 0x8, 0x0, 0x6}, {0x3, 0x10, 0xfa, 0x4}, {0x8000, 0x0, 0xa, 0x2}, {0xfff, 0x4, 0x3, 0x9}, {0x438, 0x4, 0xc, 0x800}, {0xffff, 0x0, 0x5, 0x401}, {0xf0, 0x7, 0x2, 0x2}, {0xfff, 0x1, 0x2, 0x5}, {0x7ff, 0x2, 0x1, 0x7}, {0x9, 0x5, 0x8, 0xdf4c}, {0x6, 0x3, 0x81, 0x8}, {0x9, 0x3, 0x95, 0x6307}, {0x1, 0x5, 0x8, 0x9}, {0x1, 0x10, 0x8, 0xac7b7f12}, {0xd969, 0x3, 0x89, 0x1000}, {0x3, 0xec, 0x7}, {0x8, 0xec, 0x6, 0x7f}, {0x1ff, 0x7, 0x2f, 0x1000}, {0x238, 0x3d, 0x4, 0x4}, {0x1, 0x20, 0x7, 0xfffffff9}, {0x100, 0x5, 0x3, 0xe00}, {0xfff, 0x95, 0x4, 0x81}, {0x4, 0x9, 0x2, 0x8}, {0x34, 0xa, 0x6d, 0x2}, {0x7, 0x2, 0x4, 0xa6}, {0x307, 0x0, 0xa, 0x800}, {0x1ff, 0x3, 0x2, 0x7}, {0x2, 0xdb, 0xb, 0x5}, {0x328, 0x9, 0x9, 0x4}, {0x362e, 0xcc, 0xb6, 0x6}, {0x7, 0x1, 0x3, 0xfffffff9}, {0xa, 0x7f, 0xb, 0x2}, {0x1d57, 0x2, 0x3, 0xfffffff7}, {0x2ea, 0x1, 0x4, 0x2}, {0x0, 0x7f, 0x31, 0x7}, {0x4, 0x4, 0x10, 0xffff}, {0x80, 0x0, 0xd9, 0x9}, {0x6, 0x6, 0x8}, {0x800, 0x7, 0xe, 0xfffffffe}, {0x8, 0x7, 0xe0, 0x1}, {0x8001, 0x4, 0xd, 0x5}, {0x0, 0x4, 0x1c, 0x5}, {0x7, 0xe, 0x9}, {0x7, 0x0, 0xc, 0x80}, {0xccf4, 0xf7, 0xfe, 0x1}, {0xfff, 0x5, 0x5, 0x7fffffff}, {0x7, 0xf0, 0x91, 0x2}], {0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x548)

138.467192ms ago: executing program 3 (id=2817):
eventfd(0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='tes', 0x3)
read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0xe4)

138.097882ms ago: executing program 3 (id=2818):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/v4_end_grace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='Y\n', 0x2)
llistxattr(&(0x7f0000000240)='./nfsd\x00', &(0x7f0000000480)=""/209, 0xd1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x19)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x1, 0x48, &(0x7f0000000700), 0x4)
r2 = socket$kcm(0x23, 0x5, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r3, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="000206000000fdb5bedadbdf254100000008", @ANYRES32, @ANYBLOB="0c009900000200000b000000080027000300000008002600b4090000080022013e00000008002201140200000500190105000000080027"], 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x40)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)

60.673645ms ago: executing program 8 (id=2819):
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='cramfs\x00', 0x8, 0x0) (async)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='cramfs\x00', 0x8, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) (async)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000110000000a000000090002008d001f106f194ea0050001"], 0x30}}, 0x80)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) (async)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0xaf)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r1 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x101243, 0x1fd)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @void}, 0x10)

60.23216ms ago: executing program 8 (id=2820):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
read$snddsp(r0, &(0x7f0000000040)=""/10, 0xa) (async)
r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x8, 0x10103)
ioctl$MEMERASE64(r1, 0x40104d14, &(0x7f0000000100)={0x2, 0x8000000000000001}) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x67) (async)
io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) (async)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

250.121µs ago: executing program 3 (id=2821):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x9, 0x9, &(0x7f0000000300)=0x6})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r6 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0xc9, 0x30, 0x3, 0x7f}, {0x0, 0x4, 0x7, 0x1}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
read$FUSE(r3, &(0x7f00000007c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002800)={0x50, 0x0, r7, {0x7, 0x2d, 0x89a, 0x200080, 0xe, 0x1, 0xa24, 0x6, 0x0, 0x0, 0x80, 0x9}}, 0x50)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
openat(r5, &(0x7f0000000100)='./file7\x00', 0x10000, 0x20)
r9 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x13)

0s ago: executing program 8 (id=2822):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1c0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x6, 0x4, 0x6, 0x9}, {0x5, 0x1, 0x0, 0xfff}]})
write$sequencer(r0, &(0x7f0000000000)=[@e={0xff, 0xa, 0xc, 0x96, @SEQ_CONTROLLER=0xff, 0x0, 0x0, 0x6}, @x={0x94, 0x5, "d154bf945914"}, @s={0x5, @generic=0x7, 0x3, 0x7f}, @n={0x3, 0x1, @SEQ_NOTEON=@special, 0xf9}, @l={0x92, 0x3, 0xd0, 0x5, 0x81, 0x2, 0x1000}, @l={0x92, 0x0, 0xd0, 0x2, 0x7e, 0x3, 0x9}, @generic={0x2}, @v={0x93, 0x2, 0x80, 0x0, @generic=0x5, 0x6, 0x40}], 0x31)
read(r0, &(0x7f00000001c0)=""/100, 0x64)

kernel console output (not intermixed with test programs):

 netlink: 20 bytes leftover after parsing attributes in process `syz.3.2163'.
[  262.976060][T14359] Unknown options in mask b7f2
[  263.008636][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2
[  263.023529][ T5750] Bluetooth: hci5: command tx timeout
[  263.144665][T14368] f2fs: Unknown parameter 'norecovery�#���ro7�5m��!O�h�5ӲS1*ؘ�+�@�T�!�i��2NF��M�%R#����./file0'
[  263.315990][   T13] hsr_slave_0: left promiscuous mode
[  263.318530][   T13] hsr_slave_1: left promiscuous mode
[  263.321161][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.323776][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.327298][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.329887][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.370442][   T13] veth1_macvtap: left promiscuous mode
[  263.372315][   T13] veth0_macvtap: left promiscuous mode
[  263.374208][   T13] veth1_vlan: left promiscuous mode
[  263.376075][   T13] veth0_vlan: left promiscuous mode
[  263.545817][   T13] team0 (unregistering): Port device team_slave_1 removed
[  263.554633][   T13] team0 (unregistering): Port device team_slave_0 removed
[  263.630882][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2168'.
[  263.635899][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3
[  263.652949][T14385] pim6reg: entered allmulticast mode
[  263.662848][T14388] pim6reg: left allmulticast mode
[  263.703187][T14390] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.9.2170:14390
[  264.169365][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4
[  264.398665][T14235] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  264.406796][T14235] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  264.415889][T14235] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  264.424557][T14235] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  264.434393][T14235] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  264.442731][T14235] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  264.446604][T14235] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  264.461167][T14235] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  264.530439][T14235] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.542184][T14235] 8021q: adding VLAN 0 to HW filter on device team0
[  264.550211][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.552404][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.558518][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.560764][ T6133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.623183][T14453] loop5: detected capacity change from 0 to 7
[  264.809073][T14453] Dev loop5: unable to read RDB block 7
[  264.815438][T14453]  loop5: unable to read partition table
[  264.817349][T14458] loop5: detected capacity change from 7 to 0
[  264.827546][T14453] loop5: partition table beyond EOD, truncated
[  264.833085][T14453] loop_reread_partitions: partition scan of loop5 (CD:�����q�n�;;ցP�	) failed (rc=-5)
[  264.904300][T14235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.063109][T14235] veth0_vlan: entered promiscuous mode
[  265.068475][T14235] veth1_vlan: entered promiscuous mode
[  265.084651][T14235] veth0_macvtap: entered promiscuous mode
[  265.088712][T14235] veth1_macvtap: entered promiscuous mode
[  265.090725][ T5750] Bluetooth: hci5: command tx timeout
[  265.102106][T14235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.111147][T14235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.129580][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.135606][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.245760][ T7759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.261834][ T7759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.346400][ T7759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.348997][ T7759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.389948][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.390912][T14503] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2185'.
[  265.395972][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.462938][T14513] netlink: 'syz.5.2134': attribute type 1 has an invalid length.
[  265.485360][T14513] vlan2: entered allmulticast mode
[  265.486934][T14513] macsec0: entered allmulticast mode
[  265.488541][T14513] veth1_macvtap: entered allmulticast mode
[  265.489993][T14517] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2189'.
[  265.572505][T14524] program syz.9.2190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.848232][   T42] kauditd_printk_skb: 92 callbacks suppressed
[  265.848245][   T42] audit: type=1800 audit(2000000156.508:3172): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  265.890712][   T42] audit: type=1800 audit(2000000156.558:3173): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  265.963655][T14565] xt_socket: unknown flags 0x58
[  266.019967][   T42] audit: type=1400 audit(2000000156.678:3174): avc:  denied  { write } for  pid=14566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.079456][   T42] audit: type=1800 audit(2000000156.738:3175): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  266.106468][   T42] audit: type=1400 audit(2000000156.768:3176): avc:  denied  { write } for  pid=14571 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.185767][   T42] audit: type=1400 audit(2000000156.848:3177): avc:  denied  { write } for  pid=14575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.233485][   T42] audit: type=1400 audit(2000000156.898:3178): avc:  denied  { write } for  pid=14579 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.261405][T14557] 9pnet_virtio: no channels available for device syz
[  266.316196][   T42] audit: type=1400 audit(2000000156.978:3179): avc:  denied  { write } for  pid=14583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.357663][   T42] audit: type=1800 audit(2000000157.008:3180): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  266.378717][   T42] audit: type=1400 audit(2000000157.038:3181): avc:  denied  { write } for  pid=14593 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.396783][T14595] __nla_validate_parse: 2 callbacks suppressed
[  266.396800][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2205'.
[  266.417519][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'.
[  266.434078][T14557] cgroup: Unknown subsys name 'fsuuid'
[  266.538436][T14608] 9pnet_virtio: no channels available for device syz
[  266.749673][ T9635] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  266.782629][T14623] overlay: ./file0 is not a directory
[  266.790437][T14623] overlay: ./file0 is not a directory
[  266.854730][T14629] FAULT_INJECTION: forcing a failure.
[  266.854730][T14629] name failslab, interval 1, probability 0, space 0, times 0
[  266.858674][T14629] CPU: 2 UID: 0 PID: 14629 Comm: syz.5.2216 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.858693][T14629] Tainted: [L]=SOFTLOCKUP
[  266.858697][T14629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  266.858705][T14629] Call Trace:
[  266.858710][T14629]  <TASK>
[  266.858715][T14629]  dump_stack_lvl+0x100/0x190
[  266.858753][T14629]  should_fail_ex.cold+0x5/0xa
[  266.858774][T14629]  should_failslab+0xc2/0x120
[  266.858795][T14629]  kmem_cache_alloc_noprof+0x91/0x6a0
[  266.858813][T14629]  ? __pfx_map_id_range_down+0x10/0x10
[  266.858834][T14629]  ? security_inode_alloc+0x3b/0x2c0
[  266.858856][T14629]  security_inode_alloc+0x3b/0x2c0
[  266.858872][T14629]  inode_init_always_gfp+0xc77/0xfb0
[  266.858888][T14629]  alloc_inode+0x8e/0x250
[  266.858903][T14629]  new_inode+0x22/0x1c0
[  266.858919][T14629]  bdev_alloc+0x2b/0x420
[  266.858933][T14629]  ? bdi_init+0x3f4/0x5b0
[  266.858952][T14629]  ? bdi_init+0x49f/0x5b0
[  266.858966][T14629]  __alloc_disk_node+0x116/0x6b0
[  266.858981][T14629]  __blk_mq_alloc_disk+0x89/0x120
[  266.858993][T14629]  loop_add+0x498/0xb60
[  266.859011][T14629]  ? __pfx_loop_add+0x10/0x10
[  266.859031][T14629]  ? __fget_files+0x215/0x3d0
[  266.859044][T14629]  loop_control_ioctl+0xae/0x620
[  266.859057][T14629]  ? __pfx_loop_control_ioctl+0x10/0x10
[  266.859069][T14629]  ? selinux_file_ioctl+0x13b/0x290
[  266.859086][T14629]  ? selinux_file_ioctl+0xb6/0x290
[  266.859104][T14629]  ? __pfx_loop_control_ioctl+0x10/0x10
[  266.859117][T14629]  __x64_sys_ioctl+0x18e/0x210
[  266.859134][T14629]  do_syscall_64+0x115/0x870
[  266.859181][T14629]  ? clear_bhb_loop+0x40/0x90
[  266.859194][T14629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.859206][T14629] RIP: 0033:0x7f8c6a19e019
[  266.859216][T14629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.859228][T14629] RSP: 002b:00007f8c6b089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  266.859247][T14629] RAX: ffffffffffffffda RBX: 00007f8c6a425fa0 RCX: 00007f8c6a19e019
[  266.859254][T14629] RDX: 0000000007003f00 RSI: 0000000000004c80 RDI: 0000000000000006
[  266.859260][T14629] RBP: 00007f8c6b089090 R08: 0000000000000000 R09: 0000000000000000
[  266.859267][T14629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  266.859273][T14629] R13: 00007f8c6a426038 R14: 00007f8c6a425fa0 R15: 00007ffe2b5d8fc8
[  266.859287][T14629]  </TASK>
[  266.951299][ T9635] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[  266.953851][ T9635] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  266.956929][ T9635] usb 8-1: config 0 interface 0 has no altsetting 0
[  266.960916][ T9635] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  266.963817][ T9635] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  266.966381][ T9635] usb 8-1: Product: syz
[  266.967695][ T9635] usb 8-1: Manufacturer: syz
[  266.969179][ T9635] usb 8-1: SerialNumber: syz
[  266.973706][ T9635] usb 8-1: config 0 descriptor??
[  266.977042][ T9635] hub 8-1:0.0: bad descriptor, ignoring hub
[  266.978815][ T9635] hub 8-1:0.0: probe with driver hub failed with error -5
[  266.982483][ T9635] usb 8-1: selecting invalid altsetting 0
[  267.088812][ T5750] Bluetooth: hci5: Malformed MSFT vendor event: 0x02
[  267.125316][T14635] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2218'.
[  267.477085][T14648] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12336 sclass=netlink_xfrm_socket pid=14648 comm=syz.8.2220
[  267.477130][T14649] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12336 sclass=netlink_xfrm_socket pid=14649 comm=syz.8.2220
[  267.499529][ T5750] Bluetooth: hci5: command tx timeout
[  267.605621][T14605] usb 8-1: reset high-speed USB device number 5 using dummy_hcd
[  268.406282][T14694] 9pnet_virtio: no channels available for device syz
[  270.852081][   T42] kauditd_printk_skb: 50 callbacks suppressed
[  270.852100][   T42] audit: type=1800 audit(2000000161.518:3232): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  271.150566][T14687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  271.223357][   T42] audit: type=1800 audit(2000000161.878:3233): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2235" name="pm_freeze_timeout" dev="sysfs" ino=873 res=0 errno=0
[  271.246732][T14713] loop5: detected capacity change from 0 to 7
[  271.306865][T14715] netlink: 'syz.8.2243': attribute type 10 has an invalid length.
[  271.318627][T14715] team0: Port device veth0 added
[  271.397852][T14716] loop5: detected capacity change from 7 to 0
[  271.397979][T14713] ldm_validate_partition_table(): Disk read failed.
[  271.404440][T14713] Dev loop5: unable to read RDB block 0
[  271.407089][T14713]  loop5: unable to read partition table
[  271.409988][T14713] loop5: partition table beyond EOD, truncated
[  271.412952][T14713] loop_reread_partitions: partition scan of loop5 (CD:�����q�n�;;ցP�	) failed (rc=-5)
[  271.422157][   T42] audit: type=1800 audit(2000000162.088:3234): pid=14723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2237" name="online" dev="sysfs" ino=764 res=0 errno=0
[  271.473493][   T42] audit: type=1800 audit(2000000162.128:3235): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  271.495763][   T42] audit: type=1800 audit(2000000162.158:3236): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  271.532068][   T42] audit: type=1800 audit(2000000162.178:3237): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  271.557877][   T42] audit: type=1800 audit(2000000162.178:3238): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  271.560542][T14730] netlink: 'syz.8.2239': attribute type 1 has an invalid length.
[  271.570281][T14730] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2239'.
[  271.573226][T14730] NCSI netlink: No device for ifindex 0
[  271.576533][T14728] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2240'.
[  271.581339][T14728] xt_hl: Unknown TTL match mode: 255
[  271.583819][   T42] audit: type=1800 audit(2000000162.198:3239): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  271.607741][   T42] audit: type=1800 audit(2000000162.268:3240): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  271.631539][   T42] audit: type=1800 audit(2000000162.298:3241): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  271.662279][T14734] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[  271.666690][T14734] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]
[  271.669208][T14734] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]
[  271.672698][T14734] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]
[  271.676170][T14734] pci 0000:00:01.0: ROM [mem 0x2f690000-0x2f69ffff pref]
[  271.692731][T14734] pci 0000:00:01.0: Adding to iommu group 1
[  271.702783][T14734] pci 0000:00:01.0: vgaarb: bridge control possible
[  271.704959][T14734] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
[  271.716898][T14734] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned
[  271.720125][T14734] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref]: assigned
[  271.722747][T14734] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned
[  271.727220][T14734] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff]: assigned
[  271.733622][T14734] virtio-pci 0000:00:01.0: enabling device (0000 -> 0002)
[  271.769071][T14734] virtio-pci 0000:00:01.0: PCI INT A: failed to register GSI
[  271.772864][T14734] virtio-pci 0000:00:01.0: probe with driver virtio-pci failed with error -16
[  271.873776][T14743] sctp: [Deprecated]: syz.5.2247 (pid 14743) Use of int in max_burst socket option.
[  271.873776][T14743] Use struct sctp_assoc_value instead
[  272.059844][ T1046] usb 13-1: new high-speed USB device number 15 using dummy_hcd
[  272.211741][ T1046] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 242, changing to 11
[  272.217431][ T1046] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 242, changing to 11
[  272.224965][ T1046] usb 13-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  272.228751][ T1046] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.232288][ T1046] usb 13-1: Product: syz
[  272.234012][ T1046] usb 13-1: Manufacturer: syz
[  272.235803][ T1046] usb 13-1: SerialNumber: syz
[  272.246737][ T1046] ti_usb_3410_5052 13-1:2.0: TI USB 5052 2 port adapter converter detected
[  272.253390][ T1046] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  272.264506][ T1046] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  272.289627][ T6027] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  272.444086][ T6027] usb 10-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01
[  272.448678][ T6027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.449118][T14739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.452592][ T6027] usb 10-1: Product: syz
[  272.457090][ T6027] usb 10-1: Manufacturer: syz
[  272.459208][ T6027] usb 10-1: SerialNumber: syz
[  272.467003][ T6027] ums-datafab 10-1:1.0: USB Mass Storage device detected
[  272.490218][ T6027] ums-datafab 10-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  272.490218][ T6027]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  272.502412][ T6027] scsi host6: usb-storage 10-1:1.0
[  272.829602][T14605] usb 8-1: device descriptor read/64, error -110
[  273.085059][T14605] usb 8-1: reset high-speed USB device number 5 using dummy_hcd
[  273.209978][T14605] usb 8-1: device descriptor read/64, error -32
[  273.469579][T14605] usb 8-1: reset high-speed USB device number 5 using dummy_hcd
[  273.499705][T14605] usb 8-1: device descriptor read/8, error -32
[  273.570145][T14768] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  273.574722][T14768] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  273.577158][T14768] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  273.580551][T14768] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32
[  273.584451][ T6141] scsi 6:0:0:0: Direct-Access     Datafab  MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS
[  273.590277][ T6141] scsi 6:0:0:1: Direct-Access     Datafab  MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS
[  273.595319][ T1046] usb 13-1: USB disconnect, device number 15
[  273.608982][ T1046] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  273.675798][ T1046] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  273.723766][ T6141] sd 6:0:0:0: Attached scsi generic sg2 type 0
[  273.733303][ T1046] ti_usb_3410_5052 13-1:2.0: device disconnected
[  273.771466][T14605] usb 8-1: reset high-speed USB device number 5 using dummy_hcd
[  273.800215][T14605] usb 8-1: device descriptor read/8, error -32
[  273.839832][ T6141] sd 6:0:0:1: Attached scsi generic sg3 type 0
[  273.930421][T14605] raw-gadget.0 gadget.3: failed to queue suspend event
[  273.930756][T14783] Invalid argument reading file caps for ./file0
[  273.935515][ T5820] usb 8-1: USB disconnect, device number 5
[  273.980293][T14605] raw-gadget.0 gadget.3: failed to queue disconnect event
[  274.028572][T14786] base or size exceeds the MTRR width
[  274.083646][T14788] qnx6: unable to set blocksize
[  274.187269][T14796] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2262'.
[  274.193171][T14796] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2262'.
[  274.385496][T14812] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  274.386348][T14811] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2268'.
[  274.675416][   T10] usb 10-1: USB disconnect, device number 3
[  274.727905][ T6133] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  274.737301][ T6130] sd 6:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  274.745498][T14827] overlayfs: unescaped trailing colons in lowerdir mount option.
[  274.749063][ T6133] sd 6:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  274.749499][ T6130] sd 6:0:0:0: [sdb] Sense not available.
[  274.758367][ T6133] sd 6:0:0:1: [sdc] Sense not available.
[  274.766460][ T6133] sd 6:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[  274.770721][ T6130] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  274.773783][ T6130] sd 6:0:0:0: [sdb] 0-byte physical blocks
[  274.776305][ T6130] sd 6:0:0:0: [sdb] Write Protect is off
[  274.777692][ T6133] sd 6:0:0:1: [sdc] 0-byte physical blocks
[  274.783855][ T6130] sd 6:0:0:0: [sdb] Asking for cache data failed
[  274.786375][ T6130] sd 6:0:0:0: [sdb] Assuming drive cache: write through
[  274.789032][ T6133] sd 6:0:0:1: [sdc] Test WP failed, assume Write Enabled
[  274.800914][ T6133] sd 6:0:0:1: [sdc] Asking for cache data failed
[  274.809565][ T6133] sd 6:0:0:1: [sdc] Assuming drive cache: write through
[  274.822160][T14835] netlink: 'syz.8.2273': attribute type 1 has an invalid length.
[  274.843598][T14835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.846671][T14835] IPv6: NLM_F_CREATE should be set when creating new route
[  274.866182][T14829] netlink: 'syz.8.2273': attribute type 1 has an invalid length.
[  274.880621][T14829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  275.037177][ T6130] sd 6:0:0:0: [sdb] Attached SCSI removable disk
[  275.040762][ T6133] sd 6:0:0:1: [sdc] Attached SCSI removable disk
[  275.052374][T12797] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  275.331271][T12796] udevd[12796]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  275.337771][T14839] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2275'.
[  275.341799][T14839] unsupported nlmsg_type 40
[  275.430547][T14865] fuse: Bad value for 'fd'
[  275.433760][T14867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.434394][T14868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.599471][T10988] usb 13-1: new full-speed USB device number 16 using dummy_hcd
[  275.631628][T14892] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2291'.
[  275.640432][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2291'.
[  275.672551][T14892] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2291'.
[  275.732357][T14905] netlink: 'syz.3.2295': attribute type 2 has an invalid length.
[  275.747638][T14902] 9pnet_virtio: no channels available for device syz
[  275.751697][T14908] netlink: 'syz.3.2295': attribute type 2 has an invalid length.
[  275.755640][T10988] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  275.763788][T10988] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  275.784266][T10988] usb 13-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  275.788591][T10988] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.793137][T10988] usb 13-1: Product: syz
[  275.794589][T10988] usb 13-1: Manufacturer: syz
[  275.796220][T10988] usb 13-1: SerialNumber: syz
[  275.799247][T10988] usb 13-1: config 0 descriptor??
[  275.817605][T10988] hub 13-1:0.0: bad descriptor, ignoring hub
[  275.821249][T10988] hub 13-1:0.0: probe with driver hub failed with error -5
[  275.825633][T10988] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input24
[  275.860174][   T42] kauditd_printk_skb: 97 callbacks suppressed
[  275.860188][   T42] audit: type=1800 audit(2000000166.528:3339): pid=12797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=274456 res=0 errno=0
[  275.871779][   T42] audit: type=1800 audit(2000000166.528:3340): pid=12797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=274435 res=0 errno=0
[  275.888191][   T42] audit: type=1800 audit(2000000166.528:3341): pid=12797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=274457 res=0 errno=0
[  275.898808][   T42] audit: type=1800 audit(2000000166.528:3342): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274478 res=0 errno=0
[  275.906167][   T42] audit: type=1800 audit(2000000166.528:3343): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274499 res=0 errno=0
[  275.913389][   T42] audit: type=1800 audit(2000000166.528:3344): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=274515 res=0 errno=0
[  275.922842][   T42] audit: type=1800 audit(2000000166.538:3345): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=274518 res=0 errno=0
[  275.932898][   T42] audit: type=1800 audit(2000000166.538:3346): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=274517 res=0 errno=0
[  275.941219][   T42] audit: type=1800 audit(2000000166.538:3347): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=274516 res=0 errno=0
[  275.947966][   T42] audit: type=1800 audit(2000000166.538:3348): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=274507 res=0 errno=0
[  276.075259][T14932] netlink: 172 bytes leftover after parsing attributes in process `syz.9.2304'.
[  276.115723][T14935] openvswitch: netlink: Flow key attr not present in new flow.
[  276.476586][T10991] usb 13-1: USB disconnect, device number 16
[  276.673859][T14966] loop7: detected capacity change from 0 to 16384
[  276.683733][T14968] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  276.717754][T14968] 9p: Could not find request transport: unixs
[  276.720151][T14966] loop7: detected capacity change from 16384 to 0
[  276.861309][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2320'.
[  276.905658][T14994] lo: entered allmulticast mode
[  276.912434][T14993] lo: left allmulticast mode
[  277.015749][T15001] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2322'.
[  277.017827][T14997] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2322'.
[  277.025150][T15001] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.029602][T15001] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.035562][T15001] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2322'.
[  277.038684][T15001] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.041032][T15001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.045697][T15001] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.047925][T15001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.084832][T15001] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2322'.
[  277.088938][T15001] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.092113][T15001] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.205377][T15011] ubi16: attaching mtd0
[  277.227092][T15011] ubi16: scanning is finished
[  277.229205][T15011] ubi16 error: ubi_read_volume_table: the layout volume was not found
[  277.430388][T15011] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  277.433831][T15013] ubi16: attaching mtd0
[  277.436177][T15013] ubi16: scanning is finished
[  277.437896][T15013] ubi16 error: ubi_read_volume_table: the layout volume was not found
[  277.526821][T15013] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  277.809941][T14996] nvme_tcp: queue 0: failed to receive icresp, error -104
[  278.087928][T15079] openvswitch: netlink: Missing key (keys=40, expected=100)
[  278.205724][T15091] netlink: 'syz.9.2343': attribute type 21 has an invalid length.
[  278.212273][T15091] IPv6: NLM_F_CREATE should be specified when creating new route
[  278.218693][T15091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  278.221124][T15091] IPv6: NLM_F_CREATE should be set when creating new route
[  278.223412][T15091] IPv6: NLM_F_CREATE should be set when creating new route
[  278.225683][T15091] IPv6: NLM_F_CREATE should be set when creating new route
[  278.235234][T15091] netlink: 'syz.9.2343': attribute type 21 has an invalid length.
[  278.237809][T15091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  278.268475][T15097] openvswitch: netlink: Unknown nsh attribute 0
[  278.404184][T15108] xfrm1: entered allmulticast mode
[  278.491902][T15116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2352'.
[  278.560944][T15123] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  278.725674][T15114] syz.9.2351 (15114): drop_caches: 2
[  278.797848][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'.
[  278.925515][T15139] macvtap1: entered allmulticast mode
[  278.927248][T15139] bond0: entered allmulticast mode
[  278.929144][T15139] bond_slave_0: entered allmulticast mode
[  278.931955][T15139] bond_slave_1: entered allmulticast mode
[  278.933877][T15139] bond_slave_0: entered promiscuous mode
[  278.935609][T15139] bond_slave_1: entered promiscuous mode
[  278.938549][T15139] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  278.943333][T15139] bond0: left allmulticast mode
[  278.944970][T15139] bond_slave_0: left allmulticast mode
[  278.946737][T15139] bond_slave_1: left allmulticast mode
[  278.968740][   T34] bond_slave_0: left promiscuous mode
[  278.970575][   T34] bond_slave_1: left promiscuous mode
[  278.992402][T15114] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2351'.
[  279.210936][T15149] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  279.262271][T15151] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  279.383773][T15154] netlink: 'syz.3.2364': attribute type 30 has an invalid length.
[  279.396434][T15154] bond3: option arp_missed_max: invalid value (0)
[  279.398572][T15154] bond3: option arp_missed_max: allowed values 1 - 255
[  279.403387][T15154] bond3 (unregistering): Released all slaves
[  279.821681][T15179] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  279.827029][T15179] batman_adv: batadv0: Adding interface: gretap1
[  279.830069][T15179] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.840161][T15179] batman_adv: batadv0: Interface activated: gretap1
[  279.875661][T15182] Invalid ioctl command number [0 >= 10]
[  279.882514][T15182] XFS (loop5): SB validate failed with error -5.
[  279.907758][   T25] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 3
[  279.969821][T15195] netlink: 'syz.5.2374': attribute type 2 has an invalid length.
[  279.972353][T15195] netlink: 'syz.5.2374': attribute type 2 has an invalid length.
[  280.055154][T15199] fuse: Bad value for 'rootmode'
[  280.289771][   T34] usb 14-1: new high-speed USB device number 14 using dummy_hcd
[  280.439989][   T34] usb 14-1: too many configurations: 9, using maximum allowed: 8
[  280.443922][   T34] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.447328][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  280.451460][T15223] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  280.461377][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  280.461400][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  280.463951][   T34] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.469267][T15223] netlink: 'syz.8.2383': attribute type 16 has an invalid length.
[  280.473751][T15223] netlink: 'syz.8.2383': attribute type 17 has an invalid length.
[  280.476285][T15228] batman_adv: batadv0: Adding interface: dummy0
[  280.476305][T15223] netlink: 'syz.8.2383': attribute type 27 has an invalid length.
[  280.479649][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  280.480640][T15228] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.480662][T15228] batman_adv: batadv0: Interface activated: dummy0
[  280.499888][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  280.503851][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  280.507412][   T34] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.510390][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  280.513855][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  280.516635][T15227] batadv0: mtu less than device minimum
[  280.517288][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  280.518042][   T34] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.524111][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  280.527438][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  280.533008][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  280.535937][   T34] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.538925][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  280.541152][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  280.542712][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  280.545852][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  280.548775][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  280.550103][   T34] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.552274][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  280.554253][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  280.556968][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  280.564535][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  280.566234][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  280.572888][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  280.578696][   T34] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.590573][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  280.597703][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  280.602058][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  280.605054][   T34] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.607953][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  280.612182][   T34] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024
[  280.615757][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  280.619549][   T34] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  280.623716][   T34] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  280.626688][   T34] usb 14-1: Product: syz
[  280.628050][   T34] usb 14-1: Manufacturer: syz
[  280.631187][   T34] usb 14-1: SerialNumber: syz
[  280.638788][   T34] usb 14-1: config 0 descriptor??
[  280.650904][   T34] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0
[  280.806642][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2386'.
[  280.866454][   T34] IPVS: starting estimator thread 0...
[  280.867871][T15248] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  280.898128][   T42] kauditd_printk_skb: 109 callbacks suppressed
[  280.898141][   T42] audit: type=1800 audit(2000000171.558:3458): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  280.961007][T15249] IPVS: using max 44 ests per chain, 105600 per kthread
[  280.981744][    C3] usb 14-1: yurex_control_callback - control failed: -2
[  280.996416][   T34] usb 14-1: USB disconnect, device number 14
[  281.002282][   T34] yurex 14-1:0.0: USB YUREX #0 now disconnected
[  281.069281][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2388'.
[  281.167849][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.183138][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.185293][   T42] audit: type=1800 audit(2000000171.848:3459): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  281.190209][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.194573][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.197521][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.202450][T15285] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  281.205933][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.210835][   T42] audit: type=1800 audit(2000000171.868:3460): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  281.218427][T15280] binder: 15279:15280 ioctl c0306201 200000000640 returned -22
[  281.237894][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.251756][   T42] audit: type=1400 audit(2000000171.918:3461): avc:  denied  { create } for  pid=15283 comm="syz.5.2395" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  281.252054][   T42] audit: type=1400 audit(2000000171.918:3462): avc:  denied  { associate } for  pid=15283 comm="syz.5.2395" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  281.257105][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.282071][   T42] audit: type=1400 audit(2000000171.918:3463): avc:  denied  { mounton } for  pid=15283 comm="syz.5.2395" path="/46/bus" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  281.323758][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.356719][   T42] audit: type=1400 audit(2000000172.028:3464): avc:  denied  { write } for  pid=15283 comm="syz.5.2395" name="bus" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  281.357084][   T42] audit: type=1400 audit(2000000172.028:3465): avc:  denied  { add_name } for  pid=15283 comm="syz.5.2395" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  281.372595][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.388554][   T42] audit: type=1400 audit(2000000172.028:3466): avc:  denied  { setattr } for  pid=15283 comm="syz.5.2395" name="work" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  281.416678][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.435139][   T42] audit: type=1400 audit(2000000172.028:3467): avc:  denied  { write } for  pid=15283 comm="syz.5.2395" name="work" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  281.445082][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.489030][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.491903][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.494452][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.496859][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.499412][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.501912][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.504308][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.506731][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.509154][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.512151][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.514951][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.517475][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.520008][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.522538][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.524977][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.527353][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.531079][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.536335][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.538801][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.542236][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.544736][T15282] binder: 15279:15282 ioctl c0306201 200000000040 returned -22
[  281.553288][T15297] bond0: Error: CAN devices cannot be enslaved
[  281.865510][ T5812] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.977099][ T5812] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.989495][ T5813] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  282.009271][T15319] ntfs3(nbd9): try to read out of volume at offset 0x0
[  282.072384][ T5812] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.154547][ T5813] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.157967][ T5813] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.174513][ T5813] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  282.179188][ T5813] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  282.184731][ T5813] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.197732][ T5813] usb 10-1: config 0 descriptor??
[  282.200155][ T5812] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.355230][T15345] 9pnet_virtio: no channels available for device syz
[  282.495873][ T5812] bridge_slave_1: left allmulticast mode
[  282.497762][ T5812] bridge_slave_1: left promiscuous mode
[  282.504568][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.531171][ T5812] bridge_slave_0: left allmulticast mode
[  282.536556][ T5812] bridge_slave_0: left promiscuous mode
[  282.538587][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.652858][T15358] __nla_validate_parse: 3 callbacks suppressed
[  282.652875][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2418'.
[  282.656581][T15359] ALSA: seq fatal error: cannot create timer (-19)
[  282.664530][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2418'.
[  282.678528][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2418'.
[  282.685297][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2418'.
[  282.724572][T15358] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2418'.
[  282.761129][ T5813] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  282.791094][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.795678][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  282.802351][ T5812] bond0 (unregistering): Released all slaves
[  282.861814][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5
[  282.889566][T15305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.899262][T15305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.133308][T15371] Cannot find add_set index 65532 as target
[  283.183578][ T5812] hsr_slave_0: left promiscuous mode
[  283.186806][ T5812] hsr_slave_1: left promiscuous mode
[  283.188879][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.192080][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.200691][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.203403][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.226326][ T5812] veth1_macvtap: left promiscuous mode
[  283.228326][ T5812] veth0_macvtap: left promiscuous mode
[  283.230950][ T5812] veth1_vlan: left promiscuous mode
[  283.232880][ T5812] veth0_vlan: left promiscuous mode
[  283.402627][ T5812] team0 (unregistering): Port device team_slave_1 removed
[  283.417190][ T5812] team0 (unregistering): Port device team_slave_0 removed
[  283.521127][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6
[  283.523612][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'.
[  283.535012][T15390] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.698471][T15402] Invalid ELF header len 18
[  283.769849][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7
[  283.857831][ T5812] IPVS: stop unused estimator thread 0...
[  283.924262][T15414] binder: 15412:15414 ioctl 4068aea3 200000000280 returned -22
[  283.943602][T15413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=15413 comm=syz.9.2427
[  283.988291][T15414] CIFS mount error: No usable UNC path provided in device string!
[  283.988291][T15414] 
[  283.989529][ T5820] usb 10-1: reset high-speed USB device number 4 using dummy_hcd
[  283.991668][T15414] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  284.062303][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8
[  284.235370][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2432'.
[  284.279500][T15443] xt_hashlimit: size too large, truncated to 1048576
[  284.296693][T15446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15446 comm=syz.8.2435
[  284.310218][ T5813] usb 14-1: new high-speed USB device number 15 using dummy_hcd
[  284.463286][ T5813] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  284.469033][ T5813] usb 14-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  284.472696][ T5813] usb 14-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[  284.477862][ T5813] usb 14-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  284.481223][ T5813] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.484460][ T5813] usb 14-1: Product: syz
[  284.486361][ T5813] usb 14-1: Manufacturer: syz
[  284.488297][ T5813] usb 14-1: SerialNumber: syz
[  284.700792][ T5813] usb 14-1: Quirk or no altset; falling back to MIDI 1.0
[  284.706238][ T5813] usb 14-1: MIDIStreaming interface descriptor not found
[  284.763059][ T5813] usb 14-1: USB disconnect, device number 15
[  284.796326][ T3266] usb 10-1: USB disconnect, device number 4
[  284.860338][T10481] udevd[10481]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.991458][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2448'.
[  285.044656][T15485] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[  285.056121][T15485] IPv6: NLM_F_CREATE should be specified when creating new route
[  285.250427][T15491] Bluetooth: MGMT ver 1.23
[  285.569595][T10991] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  285.731569][T10991] usb 10-1: not running at top speed; connect to a high speed hub
[  285.734799][T10991] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  285.738268][T10991] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  285.743050][T10991] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  285.745754][T10991] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.748100][T10991] usb 10-1: Product: syz
[  285.749546][T10991] usb 10-1: Manufacturer: syz
[  285.751006][T10991] usb 10-1: SerialNumber: syz
[  285.757733][T10991] oti6858 10-1:1.0: oti6858 converter detected
[  285.762408][T10991] usb 10-1: oti6858 converter now attached to ttyUSB0
[  286.007035][T10991] usb 10-1: USB disconnect, device number 5
[  286.009987][T15495] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -19
[  286.011701][T15496] CUSE: unknown device info ""
[  286.015655][T15496] CUSE: unknown device info ""
[  286.017752][T15496] CUSE: unknown device info ""
[  286.020166][T15496] CUSE: unknown device info ""
[  286.022210][T15496] CUSE: DEVNAME unspecified
[  286.031618][T10991] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  286.034113][T15496] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  286.035520][T10991] oti6858 10-1:1.0: device disconnected
[  286.394946][   T42] kauditd_printk_skb: 3356 callbacks suppressed
[  286.394964][   T42] audit: type=1800 audit(2000000177.058:6824): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  286.418407][   T42] audit: type=1800 audit(2000000177.078:6825): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35643 res=0 errno=0
[  286.430612][   T42] audit: type=1800 audit(2000000177.088:6826): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35666 res=0 errno=0
[  286.572786][   T42] audit: type=1800 audit(2000000177.238:6827): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  286.582291][   T42] audit: type=1400 audit(2000000177.248:6828): avc:  denied  { connect } for  pid=15518 comm="syz.5.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  286.659918][ T3266] usb 13-1: new high-speed USB device number 17 using dummy_hcd
[  286.804153][   T42] audit: type=1800 audit(2000000177.468:6829): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  286.823061][T15527] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  286.832008][ T3266] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.835636][ T3266] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.839126][ T3266] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  286.844668][ T3266] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  286.847688][ T3266] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.862354][   T42] audit: type=1800 audit(2000000177.528:6830): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  286.872965][ T3266] usb 13-1: config 0 descriptor??
[  286.875062][   T42] audit: type=1800 audit(2000000177.538:6831): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280367 res=0 errno=0
[  286.893883][   T42] audit: type=1800 audit(2000000177.538:6832): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=280396 res=0 errno=0
[  286.903093][   T42] audit: type=1800 audit(2000000177.538:6833): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=280374 res=0 errno=0
[  287.083422][T15517] netlink: 'syz.8.2455': attribute type 4 has an invalid length.
[  287.100219][T15517] netlink: 'syz.8.2455': attribute type 4 has an invalid length.
[  287.120200][ T3266] usbhid 13-1:0.0: can't add hid device: -71
[  287.124445][ T3266] usbhid 13-1:0.0: probe with driver usbhid failed with error -71
[  287.135187][ T3266] usb 13-1: USB disconnect, device number 17
[  287.155446][T15541] netlink: 'syz.8.2460': attribute type 13 has an invalid length.
[  287.163728][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2460'.
[  287.166588][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2460'.
[  287.184667][T15541] gretap0: refused to change device tx_queue_len
[  287.187653][T15541] net_ratelimit: 14 callbacks suppressed
[  287.187664][T15541] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  287.294892][T15546] 9pnet_virtio: no channels available for device syz
[  287.326377][T15548] netlink: 'syz.3.2462': attribute type 7 has an invalid length.
[  287.329119][T15548] netlink: 'syz.3.2462': attribute type 8 has an invalid length.
[  287.523261][ T5828] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  287.576888][T15551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  288.332140][T15600] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  288.383905][T15596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  288.520887][T15614] __nla_validate_parse: 3 callbacks suppressed
[  288.520900][T15614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2479'.
[  288.563496][T15614] kvm: kvm [15612]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4
[  288.609271][T15618] bond0: Error: CAN devices cannot be enslaved
[  288.647636][T15624] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2482'.
[  289.000047][ T1046] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  289.159484][ T1046] usb 8-1: Using ep0 maxpacket: 16
[  289.163873][ T1046] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.168534][ T1046] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  289.175402][ T1046] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  289.179312][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.194211][ T1046] usb 8-1: config 0 descriptor??
[  289.489601][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  289.590965][ T1046] usbhid 8-1:0.0: can't add hid device: -71
[  289.593097][ T1046] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  289.605063][ T1046] usb 8-1: USB disconnect, device number 7
[  289.619555][   T34] usb 14-1: new high-speed USB device number 16 using dummy_hcd
[  289.769503][   T34] usb 14-1: Using ep0 maxpacket: 8
[  289.781723][   T34] usb 14-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  289.787803][   T34] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.791506][   T34] usb 14-1: Product: syz
[  289.792942][   T34] usb 14-1: Manufacturer: syz
[  289.794706][   T34] usb 14-1: SerialNumber: syz
[  289.797858][   T34] usb 14-1: config 0 descriptor??
[  289.943806][T15654] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2491'.
[  289.946725][T15654] openvswitch: netlink: Flow key attr not present in new flow.
[  290.012539][   T34] usb 14-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  290.037068][T15662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.075962][T15665] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  290.078704][T15666] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  290.195951][T15674] 9pnet_virtio: no channels available for device syz
[  290.245591][T15676] openvswitch: netlink: IP tunnel dst address not specified
[  290.319648][T10991] usb 13-1: new full-speed USB device number 18 using dummy_hcd
[  290.327956][T15683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.331604][T15683] batadv0: mtu less than device minimum
[  290.334727][T15683] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  290.343406][T15683] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  290.348258][T15683] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  290.353383][T15683] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  290.358228][T15683] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  290.390132][T15683] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.472261][T10991] usb 13-1: unable to get BOS descriptor or descriptor too short
[  290.480316][T10991] usb 13-1: not running at top speed; connect to a high speed hub
[  290.485383][T10991] usb 13-1: config 14 has an invalid interface number: 57 but max is 1
[  290.490724][T10991] usb 13-1: config 14 has an invalid interface number: 228 but max is 1
[  290.494438][T10991] usb 13-1: config 14 has no interface number 0
[  290.496991][T10991] usb 13-1: config 14 has no interface number 1
[  290.499890][T10991] usb 13-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  290.502993][T15686] UHID_CREATE from different security context by process 833 (syz.3.2500), this is not allowed.
[  290.504383][T10991] usb 13-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  290.504428][T10991] usb 13-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  290.520711][T10991] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  290.524997][T10991] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  290.529889][T10991] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  290.533933][T10991] usb 13-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  290.539081][T10991] usb 13-1: config 14 interface 57 has no altsetting 0
[  290.542260][T10991] usb 13-1: config 14 interface 228 has no altsetting 0
[  290.547006][T10991] usb 13-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  290.550922][T10991] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.554141][T10991] usb 13-1: Product: syz
[  290.555873][T10991] usb 13-1: Manufacturer: syz
[  290.557773][T10991] usb 13-1: SerialNumber: syz
[  290.872550][T15691] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  290.972692][T10991] legousbtower 13-1:14.57: interrupt endpoints not found
[  291.090824][   T34] dvb_usb_rtl28xxu 14-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  291.246432][T15703] syz.5.2506 (15703): drop_caches: 2
[  291.306841][T15703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2506'.
[  291.373501][T10991] legousbtower 13-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  291.388004][T10991] legousbtower 13-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  291.420327][   T42] kauditd_printk_skb: 69 callbacks suppressed
[  291.420338][   T42] audit: type=1800 audit(2000000182.088:6903): pid=12797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281743 res=0 errno=0
[  291.431307][   T42] audit: type=1800 audit(2000000182.088:6904): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281709 res=0 errno=0
[  291.439106][   T42] audit: type=1800 audit(2000000182.098:6905): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281856 res=0 errno=0
[  291.456082][   T42] audit: type=1800 audit(2000000182.108:6906): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281657 res=0 errno=0
[  291.466966][   T42] audit: type=1800 audit(2000000182.108:6907): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=281689 res=0 errno=0
[  291.476597][   T42] audit: type=1800 audit(2000000182.108:6908): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=281664 res=0 errno=0
[  291.485610][   T42] audit: type=1800 audit(2000000182.108:6909): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=281665 res=0 errno=0
[  291.495424][   T42] audit: type=1800 audit(2000000182.118:6910): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  291.508156][   T42] audit: type=1800 audit(2000000182.138:6911): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  291.548732][   T42] audit: type=1800 audit(2000000182.208:6912): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  291.566314][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'.
[  291.636018][   T34] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  291.670633][T15729] netlink: 'syz.3.2514': attribute type 21 has an invalid length.
[  291.673551][T15729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2514'.
[  291.903106][T10988] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  292.073897][T10988] usb 14-1: USB disconnect, device number 16
[  292.409788][T10988] usb 14-1: new high-speed USB device number 17 using dummy_hcd
[  292.437808][   T34] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  292.440156][T15721] ceph: No mds server is up or the cluster is laggy
[  292.555301][T15745] Invalid ELF header type: 0 != 1
[  292.558723][T15745] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2520'.
[  292.569506][T10988] usb 14-1: Using ep0 maxpacket: 16
[  292.572963][T10988] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.576512][T10988] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  292.581099][T10988] usb 14-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  292.583997][T10988] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.588498][T10988] usb 14-1: config 0 descriptor??
[  292.625190][T15747] syz.3.2519 (15747): drop_caches: 2
[  292.647129][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2519'.
[  292.831244][T15750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  293.013174][T15731] usb 13-1: LEGO USB Tower reset control request failed
[  293.025315][T10991] usb 13-1: USB disconnect, device number 18
[  293.033805][T10991] legousbtower 13-1:14.228: LEGO USB Tower #-160 now disconnected
[  293.067861][T15767] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  293.179475][ T5820] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  293.257433][T15784] binder: 15783:15784 ioctl c0306201 200000000040 returned -11
[  293.316031][T15789] Falling back ldisc for ttyS3.
[  293.318364][T15788] ip6gretap0: entered promiscuous mode
[  293.359186][T15797] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  293.360951][ T5820] usb 10-1: config 0 has no interfaces?
[  293.370678][ T5820] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  293.374036][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.382272][ T5820] usb 10-1: Product: syz
[  293.383692][ T5820] usb 10-1: Manufacturer: syz
[  293.388274][ T5820] usb 10-1: SerialNumber: syz
[  293.410216][ T5820] usb 10-1: config 0 descriptor??
[  293.660212][ T5820] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  293.719558][ T3266] usb 13-1: new full-speed USB device number 19 using dummy_hcd
[  293.810779][ T5820] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  293.815678][ T5820] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  293.817784][T15761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.823204][ T5820] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  293.823211][T15761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.826152][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.833258][ T5820] usb 8-1: Product: syz
[  293.835098][ T5820] usb 8-1: Manufacturer: syz
[  293.836858][ T5820] usb 8-1: SerialNumber: syz
[  293.842843][ T6027] usb 10-1: USB disconnect, device number 6
[  293.842846][ T5820] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected
[  293.849773][ T3266] usb 13-1: device descriptor read/64, error -71
[  293.856153][ T5820] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  293.860882][ T5820] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  294.110195][ T3266] usb 13-1: new full-speed USB device number 20 using dummy_hcd
[  294.250272][ T3266] usb 13-1: device descriptor read/64, error -71
[  294.360439][ T3266] usb usb13-port1: attempt power cycle
[  294.555232][T15818] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  294.560014][T15818] net_ratelimit: 14 callbacks suppressed
[  294.560030][T15818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.710184][ T3266] usb 13-1: new full-speed USB device number 21 using dummy_hcd
[  294.740297][ T3266] usb 13-1: device descriptor read/8, error -71
[  294.860303][ T5820] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  294.990353][ T3266] usb 13-1: new full-speed USB device number 22 using dummy_hcd
[  295.020159][ T5820] usb 10-1: Using ep0 maxpacket: 8
[  295.022759][ T3266] usb 13-1: device descriptor read/8, error -71
[  295.032115][ T5820] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  295.036047][ T5820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.049220][ T5820] pvrusb2: Hardware description: Terratec Grabster AV400
[  295.051986][ T5820] pvrusb2: **********
[  295.053298][ T5820] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  295.056463][ T5820] pvrusb2: Important functionality might not be entirely working.
[  295.058924][ T5820] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  295.062698][ T5820] pvrusb2: **********
[  295.137610][T10988] usbhid 14-1:0.0: can't add hid device: -71
[  295.139715][T10988] usbhid 14-1:0.0: probe with driver usbhid failed with error -71
[  295.143179][ T3266] usb usb13-port1: unable to enumerate USB device
[  295.144246][T10988] usb 14-1: USB disconnect, device number 17
[  295.247937][ T2517] pvrusb2: Invalid write control endpoint
[  295.288251][ T2517] pvrusb2: Invalid write control endpoint
[  295.290517][ T2517] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  295.293463][ T2517] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  295.295855][ T2517] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  295.299014][ T2517] pvrusb2: Device being rendered inoperable
[  295.302433][ T2517] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  295.304927][ T2517] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  295.312812][ T2517] pvrusb2: Attached sub-driver cx25840
[  295.314632][ T2517] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  295.317828][ T2517] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  295.454995][T10990] usb 10-1: USB disconnect, device number 7
[  296.129755][T15831] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110
[  296.134479][ T1046] usb 8-1: USB disconnect, device number 8
[  296.157305][ T1046] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  296.163684][ T1046] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  296.199301][ T1046] ti_usb_3410_5052 8-1:2.0: device disconnected
[  296.215887][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2549'.
[  296.283538][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2551'.
[  296.361711][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2554'.
[  296.400823][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2555'.
[  296.463398][   T42] kauditd_printk_skb: 90 callbacks suppressed
[  296.463410][   T42] audit: type=1400 audit(2000000187.128:7003): avc:  denied  { write } for  pid=15885 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  296.474574][   T42] audit: type=1800 audit(2000000187.138:7004): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  296.483319][T15887] /dev/sg0: Can't lookup blockdev
[  296.528291][T15897] 9pnet_virtio: no channels available for device syz
[  296.540313][   T42] audit: type=1800 audit(2000000187.198:7005): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  296.634864][T15900] kvm: user requested TSC rate below hardware speed
[  296.687841][T15884] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.808239][T15884] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.930052][T15884] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.970523][   T42] audit: type=1800 audit(2000000187.638:7006): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  296.981192][T15913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.984131][T15913] batadv0: mtu less than device minimum
[  296.987307][T15913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  296.992489][T15913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  296.997426][T15913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  297.002473][T15913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  297.007452][T15913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  297.014769][T15913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  297.019809][T15913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  297.024925][T15913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  297.067018][T15913] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.137708][T15884] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.157835][T15913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2563'.
[  297.220015][T15924] Invalid argument reading file caps for ./file0
[  297.225941][   T42] audit: type=1400 audit(2000000187.888:7007): avc:  denied  { write } for  pid=15923 comm="syz.3.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  297.226169][T15924] tmpfs: Unknown parameter 'usrqublock_hardlimit'
[  297.338164][T15928] veth1_macvtap: left allmulticast mode
[  297.341369][T15928] veth1_macvtap: left promiscuous mode
[  297.343857][T15928] macsec0: entered promiscuous mode
[  297.357796][T15928] veth1_macvtap: entered promiscuous mode
[  297.371219][T15928] veth1_macvtap: entered allmulticast mode
[  297.375244][T15928] macsec0: left promiscuous mode
[  297.379294][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'.
[  297.385004][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2568'.
[  297.400995][   T42] audit: type=1400 audit(2000000188.068:7008): avc:  denied  { listen } for  pid=15927 comm="syz.3.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  297.409566][   T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.414879][   T42] audit: type=1800 audit(2000000188.068:7009): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  297.416918][   T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.418580][T15928] netlink: 'syz.3.2568': attribute type 1 has an invalid length.
[  297.432837][   T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.435462][   T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.437331][   T42] audit: type=1400 audit(2000000188.098:7010): avc:  denied  { bind } for  pid=15933 comm="syz.5.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  297.492069][   T42] audit: type=1800 audit(2000000188.158:7011): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  297.507907][T15938] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2572'.
[  297.541219][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'.
[  297.559156][T15944] syz.3.2573 (15944): drop_caches: 2
[  297.563078][   T42] audit: type=1800 audit(2000000188.228:7012): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  297.894524][T15952] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  298.118278][T15951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2575'.
[  298.341391][T15958] sctp: [Deprecated]: syz.9.2577 (pid 15958) Use of struct sctp_assoc_value in delayed_ack socket option.
[  298.341391][T15958] Use struct sctp_sack_info instead
[  298.430506][T10988] libceph: mon0 (1)[c::]:6789 socket error on write
[  298.526016][T15975] 9pnet_virtio: no channels available for device syz
[  298.550766][T15975] bond1 (unregistering): Released all slaves
[  298.703507][T15982] syz.5.2583 (15982): drop_caches: 2
[  298.705072][T10988] libceph: mon0 (1)[c::]:6789 socket error on write
[  298.995594][T15988] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  299.117220][T15991] 9pnet_virtio: no channels available for device syz
[  299.220290][T10990] libceph: mon0 (1)[c::]:6789 socket error on write
[  299.239589][T15962] ceph: No mds server is up or the cluster is laggy
[  299.359443][T10991] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  299.509920][T10991] usb 8-1: Using ep0 maxpacket: 8
[  299.513255][T10991] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  299.521644][T10991] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  299.529760][T10991] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  299.538108][T10991] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.554786][T10991] usbtmc 8-1:16.0: bulk endpoints not found
[  300.606675][T16035] netlink: 'syz.9.2601': attribute type 1 has an invalid length.
[  301.126452][T16058] input: syz0 as /devices/virtual/input/input27
[  301.147914][T16069] No control pipe specified
[  301.408998][T16090] ima: policy update completed
[  301.428879][T16085] syz.8.2613 (16085): drop_caches: 2
[  301.496434][T16093] dns_resolver: Unsupported content type (234)
[  301.542889][   T42] kauditd_printk_skb: 54 callbacks suppressed
[  301.542903][   T42] audit: type=1800 audit(2000000192.208:7067): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  301.586903][   T42] audit: type=1800 audit(2000000192.248:7068): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  301.613357][   T42] audit: type=1800 audit(2000000192.278:7069): pid=16098 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2617" name="remove" dev="sysfs" ino=273156 res=0 errno=0
[  301.694370][   T42] audit: type=1800 audit(2000000192.358:7070): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  301.717315][   T42] audit: type=1800 audit(2000000192.378:7071): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  301.752950][T16100] xt_hashlimit: size too large, truncated to 1048576
[  301.755756][   T42] audit: type=1400 audit(2000000192.418:7072): avc:  denied  { mount } for  pid=16103 comm="syz.9.2620" name="/" dev="hugetlbfs" ino=72022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  301.781163][   T42] audit: type=1400 audit(2000000192.448:7073): avc:  denied  { unmount } for  pid=10868 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  301.834487][   T42] audit: type=1400 audit(2000000192.498:7074): avc:  denied  { write } for  pid=16101 comm="syz.8.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  301.842931][T16109] __nla_validate_parse: 5 callbacks suppressed
[  301.842945][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2621'.
[  301.848686][T16102] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2618'.
[  301.916491][   T42] audit: type=1800 audit(2000000192.578:7075): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0
[  301.937535][   T42] audit: type=1800 audit(2000000192.598:7076): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2623" name="blocks" dev="configfs" ino=72102 res=0 errno=0
[  301.937768][T16114] net_ratelimit: 12 callbacks suppressed
[  301.937779][T16114] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  301.964889][T16112] XFS (nbd9): SB validate failed with error -5.
[  302.133729][ T5820] usb 8-1: USB disconnect, device number 9
[  302.254841][T16141] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2629'.
[  302.262864][T16141] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.379165][T16154] 9pnet_virtio: no channels available for device syz
[  302.387677][T16154] 9pnet_virtio: no channels available for device syz
[  302.388712][T16161] netlink: 'syz.8.2635': attribute type 26 has an invalid length.
[  302.395614][T16154] 9pnet_virtio: no channels available for device syz
[  302.401192][T16154] 9pnet_virtio: no channels available for device syz
[  302.403887][T16154] 9pnet_virtio: no channels available for device syz
[  302.406253][T16154] 9pnet_virtio: no channels available for device syz
[  302.408725][T16154] 9pnet_virtio: no channels available for device syz
[  302.412291][T16154] 9pnet_virtio: no channels available for device syz
[  302.414677][T16154] 9pnet_virtio: no channels available for device syz
[  302.416936][T16154] 9pnet_virtio: no channels available for device syz
[  302.419293][T16154] 9pnet_virtio: no channels available for device syz
[  302.422159][T16154] 9pnet_virtio: no channels available for device syz
[  302.424634][T16154] 9pnet_virtio: no channels available for device syz
[  302.427022][T16154] 9pnet_virtio: no channels available for device syz
[  302.430153][T16154] 9pnet_virtio: no channels available for device syz
[  302.433240][T16154] 9pnet_virtio: no channels available for device syz
[  302.435779][T16154] 9pnet_virtio: no channels available for device syz
[  302.438693][T16154] 9pnet_virtio: no channels available for device syz
[  302.443669][T16154] 9pnet_virtio: no channels available for device syz
[  302.446642][T16154] 9pnet_virtio: no channels available for device syz
[  302.451350][T16154] 9pnet_virtio: no channels available for device syz
[  302.458397][T16154] 9pnet_virtio: no channels available for device syz
[  302.468783][T16154] 9pnet_virtio: no channels available for device syz
[  302.480197][T16154] 9pnet_virtio: no channels available for device syz
[  302.487440][T16154] 9pnet_virtio: no channels available for device syz
[  302.498811][T16154] 9pnet_virtio: no channels available for device syz
[  302.506660][T16154] 9pnet_virtio: no channels available for device syz
[  302.518705][T16154] 9pnet_virtio: no channels available for device syz
[  302.524198][T16154] 9pnet_virtio: no channels available for device syz
[  302.526878][T16154] 9pnet_virtio: no channels available for device syz
[  302.530281][T16154] 9pnet_virtio: no channels available for device syz
[  302.533666][T16154] 9pnet_virtio: no channels available for device syz
[  302.537254][T16154] 9pnet_virtio: no channels available for device syz
[  302.559302][T16170] netlink: 144 bytes leftover after parsing attributes in process `syz.9.2637'.
[  302.570738][T16180] netlink: 'syz.8.2640': attribute type 10 has an invalid length.
[  302.745484][T16199] binder: 16198:16199 ioctl c0306201 200000000080 returned -14
[  302.749305][T16199] binder: 16198:16199 ioctl c0306201 2000000003c0 returned -14
[  302.788838][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2646'.
[  302.822536][T16205] qrtr: Invalid version 0
[  302.899936][ T8937] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  303.061864][ T8937] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  303.067319][ T8937] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  303.072889][ T8937] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  303.083084][ T8937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.123954][T16194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  303.127540][T16226] syz.5.2653 (16226): drop_caches: 2
[  303.144045][ T8937] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  303.412601][T16194] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  303.582077][ T8937] usb 8-1: USB disconnect, device number 10
[  303.635711][T16238] syzkaller1: entered promiscuous mode
[  303.642019][T16238] syzkaller1: entered allmulticast mode
[  303.796467][T16253] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  303.808916][T16253] hugetlbfs: Bad value 'x' for mount option 'size'
[  303.808916][T16253] 
[  304.030619][T16263] syz.8.2663 (16263): drop_caches: 2
[  304.139698][T10988] usb 14-1: new full-speed USB device number 18 using dummy_hcd
[  304.195001][T16270] netlink: 'syz.8.2665': attribute type 1 has an invalid length.
[  304.200538][T16273] netlink: 'syz.5.2666': attribute type 13 has an invalid length.
[  304.210576][T16270] bond5: entered promiscuous mode
[  304.212555][T16270] 8021q: adding VLAN 0 to HW filter on device bond5
[  304.216321][T16270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16270 comm=syz.8.2665
[  304.221059][T16271] netlink: 'syz.8.2665': attribute type 1 has an invalid length.
[  304.230797][T16273] gretap0: refused to change device tx_queue_len
[  304.232857][T16273] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  304.294096][T10988] usb 14-1: not running at top speed; connect to a high speed hub
[  304.301367][T10988] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  304.306826][T10988] usb 14-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  304.315192][T10988] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.320165][T16281] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16281 comm=syz.5.2669
[  304.327223][T16286] binder_alloc: binder_alloc_mmap_handler: 16284 200000ffd000-200001000000 already mapped failed -16
[  304.333450][T10988] garmin_gps 14-1:1.0: Garmin GPS usb/tty converter detected
[  304.355685][T16285] binder: BINDER_SET_CONTEXT_MGR already set
[  304.357869][T10988] usb 14-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  304.378337][T16285] binder: 16284:16285 ioctl 4018620d 200000004a80 returned -16
[  304.378368][T16286] binder_alloc: 16284: binder_alloc_buf, no vma
[  304.403227][T16290] netlink: zone id is out of range
[  304.538884][T16297] syz.3.2674 (16297): drop_caches: 2
[  304.816904][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2679'.
[  304.825762][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2679'.
[  304.874540][T16316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=16316 comm=syz.5.2679
[  304.995250][T16325] loop5: detected capacity change from 0 to 7
[  305.201924][T16325] Dev loop5: unable to read RDB block 7
[  305.203770][T16325]  loop5: unable to read partition table
[  305.207816][T16336] xt_hashlimit: size too large, truncated to 1048576
[  305.209901][T16325] loop5: partition table beyond EOD, truncated
[  305.219794][T16336] xt_hashlimit: invalid rate
[  305.222493][T16325] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  305.223388][T16336] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  305.231016][T16335] xt_hashlimit: size too large, truncated to 1048576
[  305.233747][T16335] xt_hashlimit: invalid rate
[  305.366421][T16341] syz.8.2686 (16341): drop_caches: 2
[  305.518515][T16343] tipc: Enabled bearer <ib:wg1>, priority 0
[  305.766404][T16350] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2689'.
[  305.851687][T16354] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  305.915299][T16358] netlink: Failed to add  helper -22
[  305.919690][T16358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.107836][T16371] syz.5.2695 (16371): drop_caches: 2
[  306.151892][T16375] xt_hashlimit: size too large, truncated to 1048576
[  306.243113][T16377] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:1421
[  306.261103][T16379] batman_adv: batadv0: Interface deactivated: dummy0
[  306.263222][T16379] batman_adv: batadv0: Removing interface: dummy0
[  306.272313][T16379] bridge_slave_0: left allmulticast mode
[  306.274171][T16379] bridge_slave_0: left promiscuous mode
[  306.276172][T16379] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.287027][T16379] bridge_slave_1: left promiscuous mode
[  306.288959][T16379] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.313685][T16379] bond0: (slave bond_slave_0): Releasing backup interface
[  306.328896][T16379] bond0: (slave bond_slave_1): Releasing backup interface
[  306.345442][T16381] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2698'.
[  306.356608][T16379] team0: Port device team_slave_0 removed
[  306.367784][T16379] team0: Port device team_slave_1 removed
[  306.371299][T16379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  306.416877][T16389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2701'.
[  306.607507][   T42] kauditd_printk_skb: 111 callbacks suppressed
[  306.607520][   T42] audit: type=1400 audit(2000000197.268:7188): avc:  denied  { ioctl } for  pid=16397 comm="syz.3.2705" path="socket:[75859]" dev="sockfs" ino=75859 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  306.628862][T16398] libceph: resolve '.�R�H�e'�ˠ/����1�C��
�~�1W����e�xEA���eSb{~R�' (ret=-3): failed
[  306.635085][T16401] libceph: resolve '.�R�H�e'�ˠ/����1�C��
�~�1W����e�xEA���eSb{~R�' (ret=-3): failed
[  306.677847][   T42] audit: type=1800 audit(2000000197.338:7189): pid=16405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2706" name="hardlockup_count" dev="sysfs" ino=67165 res=0 errno=0
[  306.738106][   T42] audit: type=1800 audit(2000000197.398:7190): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  306.784678][   T42] audit: type=1800 audit(2000000197.448:7191): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  306.869484][   T42] audit: type=1800 audit(2000000197.528:7192): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  306.920268][T16420] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2712'.
[  306.926571][T10990] usb 14-1: USB disconnect, device number 18
[  306.949051][   T42] audit: type=1800 audit(2000000197.608:7193): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  306.949518][T10990] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  306.962358][   T42] audit: type=1800 audit(2000000197.608:7194): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35693 res=0 errno=0
[  306.973259][T10990] garmin_gps 14-1:1.0: device disconnected
[  306.987313][   T42] audit: type=1800 audit(2000000197.608:7195): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35716 res=0 errno=0
[  307.011117][   T42] audit: type=1400 audit(2000000197.678:7196): avc:  denied  { map } for  pid=16432 comm="syz.9.2716" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  307.023517][T16434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2713'.
[  307.065973][   T42] audit: type=1800 audit(2000000197.728:7197): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  307.137084][T16448] ubi16: attaching mtd0
[  307.145267][T16448] ubi16: scanning is finished
[  307.147452][T16448] ubi16 error: ubi_read_volume_table: the layout volume was not found
[  307.227714][T16460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2721'.
[  307.235430][T16460] "syz.3.2721" (16460) uses obsolete ecb(arc4) skcipher
[  307.326103][T16448] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  307.502325][T16474] program syz.8.2725 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  307.521969][T16464] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2722'.
[  307.626623][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2726'.
[  307.881632][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2729'.
[  307.884639][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2729'.
[  307.892739][T16487] zonefs (loop8) ERROR: Not a zoned block device
[  308.250810][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2735'.
[  308.258924][ T5750] Bluetooth: hci5: unexpected event for opcode 0x0428
[  308.427610][T16516] cdns2-pci 0000:00:00.0: probe with driver cdns2-pci failed with error -22
[  308.530917][T16518] ip_tables: iptables: counters copy to user failed while replacing table
[  308.611236][T10988] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  308.628749][T16524] XFS (nbd9): SB validate failed with error -5.
[  308.779699][T10988] usb 10-1: Using ep0 maxpacket: 8
[  308.784496][T10988] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 230, changing to 11
[  308.789260][T10988] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8777, setting to 1024
[  308.801148][T10988] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  308.813951][T10988] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.826701][T10988] usb 10-1: config 0 descriptor??
[  308.940736][T16556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'.
[  308.997836][T16556] 8021q: adding VLAN 0 to HW filter on device bond3
[  309.037693][T16557] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  309.041745][T10988] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  309.164282][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'.
[  309.167981][T16584] openvswitch: netlink: Flow actions attr not present in new flow.
[  309.294430][T16593] netlink: 'syz.9.2755': attribute type 2 has an invalid length.
[  309.424461][T16602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  309.657379][T16625] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved
[  309.661798][T16624] x_tables: duplicate underflow at hook 3
[  309.666975][T16618] trusted_key: syz.9.2761 sent an empty control message without MSG_MORE.
[  309.686644][T16630] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved
[  309.728206][T16633] netlink: 'syz.3.2765': attribute type 2 has an invalid length.
[  309.837777][T16645] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  310.169627][   T34] usb 13-1: new high-speed USB device number 23 using dummy_hcd
[  310.329627][   T34] usb 13-1: Using ep0 maxpacket: 8
[  310.334400][   T34] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  310.338302][   T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.362129][   T34] pvrusb2: Hardware description: Terratec Grabster AV400
[  310.368485][   T34] pvrusb2: **********
[  310.372738][   T34] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  310.380619][   T34] pvrusb2: Important functionality might not be entirely working.
[  310.383140][   T34] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  310.386687][   T34] pvrusb2: **********
[  310.558951][ T2517] pvrusb2: Invalid write control endpoint
[  310.586618][ T2517] pvrusb2: Invalid write control endpoint
[  310.588507][ T2517] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  310.591701][ T2517] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  310.594402][ T2517] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  310.597549][ T2517] pvrusb2: Device being rendered inoperable
[  310.605346][ T2517] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  310.607727][ T2517] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  310.614059][ T2517] pvrusb2: Attached sub-driver cx25840
[  310.616386][ T2517] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  310.620715][ T2517] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  310.739692][T10988] usb 14-1: new high-speed USB device number 19 using dummy_hcd
[  310.841463][T16663] xt_time: invalid argument - start or stop time greater than 23:59:59
[  310.909529][T10988] usb 14-1: Using ep0 maxpacket: 8
[  310.913099][T10988] usb 14-1: config index 0 descriptor too short (expected 301, got 45)
[  310.916218][T10988] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  310.919495][T10988] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  310.922753][T10988] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  310.925940][T10988] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  310.930907][T10988] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  310.933898][T10988] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.031717][T16672] openvswitch: netlink: EtherType 0 is less than min 600
[  311.147179][T10988] usb 14-1: usb_control_msg returned -32
[  311.149076][T10988] usbtmc 14-1:16.0: can't read capabilities
[  311.254711][ T5813] usb 10-1: USB disconnect, device number 8
[  311.449270][T16690] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  311.550139][T16692] (syz.5.2786,16692,2):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  311.554271][T16692] (syz.5.2786,16692,2):ocfs2_fill_super:1177 ERROR: status = -22
[  311.628766][   T42] kauditd_printk_skb: 67 callbacks suppressed
[  311.628785][   T42] audit: type=1800 audit(2000000202.288:7265): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  312.216257][T16707] xt_hashlimit: size too large, truncated to 1048576
[  312.304500][ T5750] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  312.311581][ T5750] Bluetooth: hci5: Injecting HCI hardware error event
[  312.315772][ T5750] Bluetooth: hci5: hardware error 0x00
[  312.366408][T16711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.507549][   T42] audit: type=1800 audit(2000000203.168:7266): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  312.544717][   T42] audit: type=1800 audit(2000000203.208:7267): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  312.642826][   T42] audit: type=1800 audit(2000000203.308:7268): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  312.663325][   T42] audit: type=1800 audit(2000000203.328:7269): pid=16720 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2794" name="quirks" dev="sysfs" ino=62992 res=0 errno=0
[  312.675763][T16720] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  312.908672][T10991] usb 13-1: USB disconnect, device number 23
[  313.266511][T16746] syz.3.2798 (16746): drop_caches: 2
[  313.506126][ T8937] usb 14-1: USB disconnect, device number 19
[  313.516381][   T42] audit: type=1800 audit(2000000204.178:7270): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35693 res=0 errno=0
[  313.525733][   T42] audit: type=1800 audit(2000000204.178:7271): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35716 res=0 errno=0
[  313.551767][   T42] audit: type=1800 audit(2000000204.218:7272): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  313.563254][   T42] audit: type=1800 audit(2000000204.228:7273): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  313.732448][ T6130] wlan1: Trigger new scan to find an IBSS to join
[  314.375096][ T5750] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  316.689890][ T6142] wlan1: Trigger new scan to find an IBSS to join
[  317.013492][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[  319.649618][ T6142] wlan1: Trigger new scan to find an IBSS to join
[  320.559965][ T6142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.605067][   T42] audit: type=1800 audit(2000000221.268:7274): pid=16776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2803" name="scan_sleep_millisecs" dev="sysfs" ino=1339 res=0 errno=0
[  330.621717][   T42] audit: type=1800 audit(2000000221.268:7275): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5514 res=0 errno=0
[  330.625105][T16776] No control pipe specified
[  330.655023][   T42] audit: type=1800 audit(2000000221.318:7276): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0
[  330.672124][T16784] syz.5.2806: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  330.682708][T16784] CPU: 2 UID: 0 PID: 16784 Comm: syz.5.2806 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  330.682728][T16784] Tainted: [L]=SOFTLOCKUP
[  330.682733][T16784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  330.682742][T16784] Call Trace:
[  330.682759][T16784]  <TASK>
[  330.682764][T16784]  dump_stack_lvl+0x100/0x190
[  330.682833][T16784]  warn_alloc.cold+0x94/0xa8
[  330.682852][T16784]  ? __pfx_warn_alloc+0x10/0x10
[  330.682874][T16784]  ? register_lock_class+0x40/0x560
[  330.682903][T16784]  ? kasan_save_stack+0x3f/0x50
[  330.682924][T16784]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  330.682943][T16784]  ? xskq_create+0x52/0x1d0
[  330.683000][T16784]  ? xsk_setsockopt+0x743/0xab0
[  330.683011][T16784]  ? do_sock_setsockopt+0xf3/0x1d0
[  330.683065][T16784]  ? __sys_setsockopt+0x195/0x220
[  330.683079][T16784]  ? __x64_sys_setsockopt+0xbd/0x160
[  330.683094][T16784]  ? do_syscall_64+0x115/0x870
[  330.683115][T16784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.683131][T16784]  ? xskq_create+0xfb/0x1d0
[  330.683143][T16784]  __vmalloc_node_range_noprof+0x136c/0x1630
[  330.683165][T16784]  ? xskq_create+0xfb/0x1d0
[  330.683181][T16784]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  330.683199][T16784]  ? kasan_save_track+0x14/0x30
[  330.683213][T16784]  ? __kasan_kmalloc+0xaa/0xb0
[  330.683227][T16784]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  330.683247][T16784]  ? xskq_create+0xfb/0x1d0
[  330.683260][T16784]  vmalloc_user_noprof+0x9e/0xe0
[  330.683276][T16784]  ? xskq_create+0xfb/0x1d0
[  330.683288][T16784]  xskq_create+0xfb/0x1d0
[  330.683300][T16784]  xsk_setsockopt+0x743/0xab0
[  330.683312][T16784]  ? __pfx_xsk_setsockopt+0x10/0x10
[  330.683346][T16784]  ? find_held_lock+0x2b/0x80
[  330.683357][T16784]  ? __fget_files+0x215/0x3d0
[  330.683379][T16784]  ? selinux_socket_setsockopt+0x6a/0x80
[  330.683403][T16784]  ? __pfx_xsk_setsockopt+0x10/0x10
[  330.683415][T16784]  do_sock_setsockopt+0xf3/0x1d0
[  330.683433][T16784]  __sys_setsockopt+0x195/0x220
[  330.683452][T16784]  __x64_sys_setsockopt+0xbd/0x160
[  330.683465][T16784]  ? do_syscall_64+0x90/0x870
[  330.683482][T16784]  ? lockdep_hardirqs_on+0x78/0x100
[  330.683496][T16784]  do_syscall_64+0x115/0x870
[  330.683509][T16784]  ? clear_bhb_loop+0x40/0x90
[  330.683524][T16784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.683537][T16784] RIP: 0033:0x7f8c6a19e019
[  330.683549][T16784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.683560][T16784] RSP: 002b:00007f8c6b089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  330.683584][T16784] RAX: ffffffffffffffda RBX: 00007f8c6a425fa0 RCX: 00007f8c6a19e019
[  330.683591][T16784] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  330.683597][T16784] RBP: 00007f8c6a23500c R08: 0000000000000029 R09: 0000000000000000
[  330.683604][T16784] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.683610][T16784] R13: 00007f8c6a426038 R14: 00007f8c6a425fa0 R15: 00007ffe2b5d8fc8
[  330.683625][T16784]  </TASK>
[  330.683655][T16784] Mem-Info:
[  330.777433][   T42] audit: type=1800 audit(2000000221.438:7277): pid=16789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2807" name="remove" dev="sysfs" ino=2953 res=0 errno=0
[  330.778650][T16784] active_anon:32138 inactive_anon:2485 isolated_anon:0
[  330.778650][T16784]  active_file:4407 inactive_file:23832 isolated_file:0
[  330.778650][T16784]  unevictable:768 dirty:123 writeback:0
[  330.778650][T16784]  slab_reclaimable:9421 slab_unreclaimable:96536
[  330.778650][T16784]  mapped:23733 shmem:29501 pagetables:6388
[  330.778650][T16784]  sec_pagetables:301 bounce:0
[  330.778650][T16784]  kernel_misc_reclaimable:0
[  330.778650][T16784]  free:411415 free_pcp:5328 free_cma:0
[  330.787902][   T42] audit: type=1400 audit(2000000221.448:7278): avc:  denied  { map } for  pid=16783 comm="syz.5.2806" path="socket:[75299]" dev="sockfs" ino=75299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  330.788050][T16784] Node 0 active_anon:123448kB inactive_anon:9760kB active_file:13756kB inactive_file:79296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:69156kB dirty:516kB writeback:0kB shmem:113776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18920kB pagetables:15820kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  330.797166][T16787] __nla_validate_parse: 7 callbacks suppressed
[  330.797181][T16787] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2806'.
[  330.797199][T16787] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2806'.
[  330.797570][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2806'.
[  330.847329][T16784] Node 1 active_anon:5020kB inactive_anon:168kB active_file:3872kB inactive_file:16036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:25776kB dirty:4kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:160kB pagetables:9784kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  330.847684][   T42] audit: type=1800 audit(2000000221.508:7279): pid=16777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  330.864028][T16784] Node 0 
[  330.868361][T16789] pci_bus 0000:01: busn_res: [bus 01] is released
[  330.874968][T16784] DMA free:14824kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:148kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  330.877976][   T42] audit: type=1800 audit(2000000221.528:7280): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2952 res=0 errno=0
[  330.885890][T16784] lowmem_reserve[]:
[  330.888351][ T8937] usb 14-1: new high-speed USB device number 20 using dummy_hcd
[  330.896918][T16784]  0 1225 1225 1225 1225
[  330.898316][T16784] Node 0 DMA32 free:107820kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:123448kB inactive_anon:9760kB active_file:13712kB inactive_file:79148kB unevictable:1536kB writepending:516kB zspages:928kB present:2080628kB managed:1255220kB mlocked:0kB bounce:0kB free_pcp:20980kB local_pcp:7960kB free_cma:0kB
[  330.903943][   T42] audit: type=1800 audit(2000000221.568:7281): pid=16786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2807" name="rescan" dev="sysfs" ino=1106 res=0 errno=0
[  330.912495][T16784] lowmem_reserve[]: 0 0 0 0 0
[  330.916777][T16784] Node 1 Normal free:1522944kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5020kB inactive_anon:168kB active_file:3872kB inactive_file:16036kB unevictable:1536kB writepending:4kB zspages:3932kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB
[  330.922847][T16786] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[  330.927331][T16784] lowmem_reserve[]: 0 0 0 0 0
[  330.963143][T16786] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]
[  330.964597][T16784] Node 0 DMA: 44*4kB (UM) 29*8kB (UM) 27*16kB (UM) 23*32kB (UM) 15*64kB (UM) 12*128kB (UM) 14*256kB (UM) 10*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 14824kB
[  330.967042][T16786] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]
[  330.973060][T16784] Node 0 
[  330.975763][T16786] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff]
[  330.975804][T16784] DMA32: 
[  330.976848][T16786] pci 0000:00:01.0: ROM [mem 0x2f690000-0x2f69ffff pref]
[  330.978961][T16784] 2253*4kB 
[  330.981061][T16786] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  330.983031][T16784] (UME) 1159*8kB (UME) 732*16kB (UME) 204*32kB (UME) 181*64kB (UME) 166*128kB (UME) 98*256kB (UM) 18*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 107756kB
[  330.991990][T16784] Node 1 Normal: 1446*4kB (UME) 823*8kB (UME) 979*16kB (UME) 810*32kB (UME) 861*64kB (UME) 776*128kB (UME) 537*256kB (UME) 357*512kB (UM) 243*1024kB (UME) 10*2048kB (UM) 177*4096kB (UM) = 1522944kB
[  330.996727][   T42] audit: type=1800 audit(2000000221.658:7282): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288615 res=0 errno=0
[  330.998215][T16784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  330.999810][T16786] pci 0000:00:01.0: Adding to iommu group 1
[  331.008919][T16786] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  331.011338][T16784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  331.012189][T16786] pci 0000:00:01.0: vgaarb: bridge control possible
[  331.012202][T16786] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none
[  331.015262][T16784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  331.020966][   T42] audit: type=1800 audit(2000000221.688:7283): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288630 res=0 errno=0
[  331.021862][T16786] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port
[  331.026891][T16786] pci 0000:00:04.0: PCI bridge to [bus 01]
[  331.027388][T16784] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  331.027401][T16784] 58618 total pagecache pages
[  331.027406][T16784] 880 pages in swap cache
[  331.027411][T16784] Free swap  = 108064kB
[  331.027415][T16784] Total swap = 124996kB
[  331.027422][T16784] 1048443 pages RAM
[  331.027426][T16784] 0 pages HighMem/MovableOnly
[  331.027431][T16784] 285327 pages reserved
[  331.027435][T16784] 0 pages cma reserved
[  331.059603][T16786] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  331.062123][T16786] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[  331.070186][T16786] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref]
[  331.073840][T16786] pci 0000:00:04.0: enabling Extended Tags
[  331.081695][ T8937] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.088154][ T8937] usb 14-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  331.092035][T16786] pci 0000:00:04.0: Adding to iommu group 4
[  331.105565][ T8937] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  331.107371][T16786] pci 0000:00:04.0: PCI bridge to [bus 01]
[  331.110816][ T8937] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.113852][T16786] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[  331.116359][ T8937] usb 14-1: Product: syz
[  331.116372][ T8937] usb 14-1: Manufacturer: syz
[  331.116381][ T8937] usb 14-1: SerialNumber: syz
[  331.127286][ T8937] cdc_mbim 14-1:1.0: skipping garbage
[  331.128752][T16786] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000
[  331.133098][T16786] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned
[  331.135800][T16786] pci 0000:00:04.0: bridge window [mem 0x80800000-0x809fffff]: assigned
[  331.138420][T16786] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned
[  331.141706][T16786] pci 0000:00:01.0: BAR 2 [mem 0x380000200000-0x380000203fff 64bit pref]: assigned
[  331.162923][T16786] pci 0000:00:01.0: BAR 4 [mem 0x80a00000-0x80a00fff]: assigned
[  331.167102][T16786] pci 0000:00:04.0: bridge window [io  0x1000-0x1fff]: assigned
[  331.171987][T16786] pci 0000:00:04.0: PCI bridge to [bus 01]
[  331.173990][T16786] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  331.177816][T16786] pci 0000:00:04.0:   bridge window [mem 0x80800000-0x809fffff]
[  331.181530][T16786] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]
[  331.220437][T16786] virtio-pci 0000:00:01.0: PCI INT A: failed to register GSI
[  331.222948][T16786] virtio-pci 0000:00:01.0: probe with driver virtio-pci failed with error -16
[  331.271223][T16794] syz.5.2809 (16794): drop_caches: 2
[  331.297595][T16786] pcieport 0000:00:04.0: PME: Signaling with IRQ 25
[  331.308709][T16786] pcieport 0000:00:04.0: AER: enabled with IRQ 26
[  331.333190][T16774] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  331.527825][T16805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2812'.
[  331.603044][T16813] netlink: 'syz.3.2814': attribute type 23 has an invalid length.
[  331.871138][T16830] syz.3.2818 (16830): drop_caches: 2
[  331.951267][T16774] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  331.953719][ T8937] cdc_mbim 14-1:1.0: setting tx_max = 16384
[  331.959240][ T8937] cdc_mbim 14-1:1.0: cdc-wdm0: USB WDM device
[  331.983675][ T8937] wwan wwan0: port wwan0mbim0 attached
[  332.042779][T16845] 
[  332.043555][T16845] ======================================================
[  332.045702][T16845] WARNING: possible circular locking dependency detected
[  332.047832][T16845] syzkaller #0 Tainted: G             L     
[  332.048858][ T8937] cdc_mbim 14-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 9e:b8:29:1c:a2:27
[  332.049642][T16845] ------------------------------------------------------
[  332.049649][T16845] syz.3.2821/16845 is trying to acquire lock:
[  332.049657][T16845] ffff8880569ceec0 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: lookup_slow+0x42/0x70
[  332.049804][T16845] 
[  332.049804][T16845] but task is already holding lock:
[  332.049808][T16845] ffff8880237f5080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  332.049839][T16845] 
[  332.049839][T16845] which lock already depends on the new lock.
[  332.049839][T16845] 
[  332.049843][T16845] 
[  332.049843][T16845] the existing dependency chain (in reverse order) is:
[  332.049847][T16845] 
[  332.049847][T16845] -> #3 (&of->mutex){+.+.}-{4:4}:
[  332.049864][T16845]        lock_acquire+0x1b9/0x370
[  332.049890][T16845]        __mutex_lock+0x1a4/0x1bd0
[  332.049966][T16845]        kernfs_fop_read_iter+0x188/0x610
[  332.049982][T16845]        __kernel_read+0x397/0xad0
[  332.050010][T16845]        integrity_kernel_read+0x7e/0xb0
[  332.050033][T16845]        ima_calc_file_hash_tfm+0x25e/0x350
[  332.050045][T16845]        ima_calc_file_hash+0x1e3/0x380
[  332.050059][T16845]        ima_collect_measurement+0x94f/0xb30
[  332.050072][T16845]        process_measurement+0xdfe/0x2350
[  332.050084][T16845]        ima_file_check+0xc3/0x110
[  332.050094][T16845]        security_file_post_open+0xc4/0x210
[  332.050112][T16845]        path_openat+0x985/0x4280
[  332.050125][T16845]        do_file_open+0x20e/0x430
[  332.050135][T16845]        do_sys_openat2+0x10f/0x1e0
[  332.050149][T16845]        __x64_sys_openat+0x12d/0x210
[  332.050162][T16845]        do_syscall_64+0x115/0x870
[  332.050176][T16845]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.050188][T16845] 
[  332.050188][T16845] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  332.050205][T16845]        lock_acquire+0x1b9/0x370
[  332.050218][T16845]        __mutex_lock+0x1a4/0x1bd0
[  332.050230][T16845]        process_measurement+0x5ab/0x2350
[  332.050240][T16845]        ima_file_check+0xc3/0x110
[  332.050250][T16845]        security_file_post_open+0xc4/0x210
[  332.050266][T16845]        path_openat+0x985/0x4280
[  332.050276][T16845]        do_file_open+0x20e/0x430
[  332.050286][T16845]        do_sys_openat2+0x10f/0x1e0
[  332.050299][T16845]        __x64_sys_openat+0x12d/0x210
[  332.050312][T16845]        do_syscall_64+0x115/0x870
[  332.050324][T16845]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.050334][T16845] 
[  332.050334][T16845] -> #1 (sb_writers#6){.+.+}-{0:0}:
[  332.124791][T16845]        lock_acquire+0x1b9/0x370
[  332.126344][T16845]        mnt_want_write+0x6f/0x410
[  332.127884][T16845]        ovl_create_object+0x12b/0x3b0
[  332.129530][T16845]        path_openat+0x341f/0x4280
[  332.131030][T16845]        do_file_open+0x20e/0x430
[  332.132584][T16845]        do_sys_openat2+0x10f/0x1e0
[  332.134233][T16845]        __x64_sys_creat+0xcc/0x120
[  332.135859][T16845]        do_syscall_64+0x115/0x870
[  332.137437][T16845]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.139394][T16845] 
[  332.139394][T16845] -> #0 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}:
[  332.142156][T16845]        check_prev_add+0xeb/0xe60
[  332.143691][T16845]        __lock_acquire+0x136c/0x1a40
[  332.145314][T16845]        lock_acquire+0x1b9/0x370
[  332.146841][T16845]        down_read+0x99/0x4c0
[  332.148294][T16845]        lookup_slow+0x42/0x70
[  332.149855][T16845]        path_lookupat+0x5e8/0xc40
[  332.151492][T16845]        filename_lookup+0x202/0x590
[  332.153204][T16845]        kern_path+0x37/0x50
[  332.154707][T16845]        lookup_bdev+0xd8/0x280
[  332.156283][T16845]        resume_store+0x1d6/0x460
[  332.157860][T16845]        kobj_attr_store+0x58/0x80
[  332.159476][T16845]        sysfs_kf_write+0xf2/0x150
[  332.161109][T16845]        kernfs_fop_write_iter+0x3e0/0x5f0
[  332.162970][T16845]        vfs_write+0x6ac/0x1050
[  332.164506][T16845]        ksys_write+0x12a/0x250
[  332.166033][T16845]        do_syscall_64+0x115/0x870
[  332.167642][T16845]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.169626][T16845] 
[  332.169626][T16845] other info that might help us debug this:
[  332.169626][T16845] 
[  332.172602][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2804'.
[  332.172684][T16845] Chain exists of:
[  332.172684][T16845]   &ovl_i_mutex_dir_key[depth]#2 --> &ima_iint_mutex_key[depth] --> &of->mutex
[  332.172684][T16845] 
[  332.175846][T16774] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2804'.
[  332.180522][T16845]  Possible unsafe locking scenario:
[  332.180522][T16845] 
[  332.180530][T16845]        CPU0                    CPU1
[  332.180534][T16845]        ----                    ----
[  332.180537][T16845]   lock(&of->mutex);
[  332.180547][T16845]                                lock(&ima_iint_mutex_key[depth]);
[  332.180556][T16845]                                lock(&of->mutex);
[  332.180563][T16845]   rlock(&ovl_i_mutex_dir_key[depth]#2);
[  332.180575][T16845] 
[  332.180575][T16845]  *** DEADLOCK ***
[  332.180575][T16845] 
[  332.180578][T16845] 4 locks held by syz.3.2821/16845:
[  332.180585][T16845]  #0: ffff88803d63c9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  332.180617][T16845]  #1: ffff88802cd80450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  332.180650][T16845]  #2: ffff8880237f5080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  332.180679][T16845]  #3: ffff88801c7ef008 (kn->active#71){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  332.180709][T16845] 
[  332.180709][T16845] stack backtrace:
[  332.180719][T16845] CPU: 3 UID: 0 PID: 16845 Comm: syz.3.2821 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  332.180735][T16845] Tainted: [L]=SOFTLOCKUP
[  332.180740][T16845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  332.180748][T16845] Call Trace:
[  332.180764][T16845]  <TASK>
[  332.180770][T16845]  dump_stack_lvl+0x100/0x190
[  332.180797][T16845]  print_circular_bug.cold+0x178/0x1c7
[  332.180816][T16845]  check_noncircular+0x146/0x160
[  332.180831][T16845]  check_prev_add+0xeb/0xe60
[  332.180843][T16845]  ? __lock_acquire+0x49f/0x1a40
[  332.180856][T16845]  __lock_acquire+0x136c/0x1a40
[  332.180871][T16845]  lock_acquire+0x1b9/0x370
[  332.180883][T16845]  ? lookup_slow+0x42/0x70
[  332.180898][T16845]  ? __pfx___might_resched+0x10/0x10
[  332.180919][T16845]  ? try_to_unlazy+0x296/0x910
[  332.180940][T16845]  down_read+0x99/0x4c0
[  332.180956][T16845]  ? lookup_slow+0x42/0x70
[  332.180969][T16845]  ? __pfx_down_read+0x10/0x10
[  332.180984][T16845]  lookup_slow+0x42/0x70
[  332.180998][T16845]  path_lookupat+0x5e8/0xc40
[  332.181015][T16845]  filename_lookup+0x202/0x590
[  332.181025][T16845]  ? __pfx_filename_lookup+0x10/0x10
[  332.181040][T16845]  ? __asan_memcpy+0x3c/0x60
[  332.181058][T16845]  ? do_getname_kernel+0x1be/0x250
[  332.181071][T16845]  kern_path+0x37/0x50
[  332.181080][T16845]  lookup_bdev+0xd8/0x280
[  332.181093][T16845]  ? __pfx_lookup_bdev+0x10/0x10
[  332.181107][T16845]  ? __asan_memcpy+0x3c/0x60
[  332.181117][T16845]  resume_store+0x1d6/0x460
[  332.181133][T16845]  ? __pfx_resume_store+0x10/0x10
[  332.181150][T16845]  ? find_held_lock+0x2b/0x80
[  332.181159][T16845]  ? sysfs_file_kobj+0xe4/0x290
[  332.181174][T16845]  ? sysfs_file_kobj+0xe4/0x290
[  332.181190][T16845]  ? __pfx_resume_store+0x10/0x10
[  332.181204][T16845]  kobj_attr_store+0x58/0x80
[  332.181220][T16845]  ? __pfx_kobj_attr_store+0x10/0x10
[  332.181235][T16845]  sysfs_kf_write+0xf2/0x150
[  332.181251][T16845]  kernfs_fop_write_iter+0x3e0/0x5f0
[  332.181264][T16845]  ? __pfx_sysfs_kf_write+0x10/0x10
[  332.181280][T16845]  vfs_write+0x6ac/0x1050
[  332.181296][T16845]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  332.181311][T16845]  ? __pfx_vfs_write+0x10/0x10
[  332.181330][T16845]  ksys_write+0x12a/0x250
[  332.181346][T16845]  ? __pfx_ksys_write+0x10/0x10
[  332.181363][T16845]  do_syscall_64+0x115/0x870
[  332.181376][T16845]  ? clear_bhb_loop+0x40/0x90
[  332.181389][T16845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.181400][T16845] RIP: 0033:0x7f396479e019
[  332.181411][T16845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.181422][T16845] RSP: 002b:00007f39656b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  332.181441][T16845] RAX: ffffffffffffffda RBX: 00007f3964a25fa0 RCX: 00007f396479e019
[  332.181449][T16845] RDX: 0000000000000050 RSI: 0000200000002800 RDI: 0000000000000005
[  332.181455][T16845] RBP: 00007f396483500c R08: 0000000000000000 R09: 0000000000000000
[  332.181461][T16845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.181468][T16845] R13: 00007f3964a26038 R14: 00007f3964a25fa0 R15: 00007ffdfdbcac38
[  332.181478][T16845]  </TASK>
[  332.349272][T10990] usb 14-1: USB disconnect, device number 20
[  332.351932][T10990] cdc_mbim 14-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM
[  332.400937][T10990] wwan wwan0: port wwan0mbim0 disconnected
[  332.530057][ T8937] usb 13-1: new high-speed USB device number 24 using dummy_hcd
[  332.679966][ T8937] usb 13-1: Using ep0 maxpacket: 8
[  332.684291][ T8937] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  332.687429][ T8937] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  332.692034][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  332.697037][ T8937] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  332.701412][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  332.705595][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  332.709226][ T8937] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  332.714748][ T8937] usb 13-1: config 168 interface 0 has no altsetting 0
[  332.718586][ T8937] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  332.721779][ T8937] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  332.726118][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  332.729924][ T8937] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  332.733926][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  332.737482][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  332.741483][ T8937] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  332.745704][ T8937] usb 13-1: config 168 interface 0 has no altsetting 0
[  332.748692][ T8937] usb 13-1: config 168 descriptor has 1 excess byte, ignoring
[  332.751530][ T8937] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  332.755278][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  332.760019][ T8937] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  332.764763][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  332.769229][ T8937] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  332.773727][ T8937] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  332.777782][ T8937] usb 13-1: config 168 interface 0 has no altsetting 0
[  332.782698][ T8937] usb 13-1: string descriptor 0 read error: -22
[  332.784622][ T8937] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  332.787441][ T8937] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.793850][ T8937] adutux 13-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  332.995840][ T8937] usb 13-1: USB disconnect, device number 24
[  333.198428][T16852] adutux: No device or device unplugged -19