last executing test programs:

37.516888794s ago: executing program 0 (id=1):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendfile(r3, r2, 0x0, 0x7ffff000)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a140000000000020024000008001e0000000000080017005ead6b63"], 0x2c}}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1815c48, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000))
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10000, 0xdf, 0x35, 0x9, 0xb, 0x4, 0x0, 0x6, 0x4f})
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x161d43, 0x1a)
fcntl$setlease(r7, 0x400, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r8)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010007a899b2101220d3c7512320eb7023ea0e82fe68afc500fcdb7448040e0000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r9, 0x1, 0x70bd26, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x34, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0)
fcntl$getownex(r7, 0x10, &(0x7f0000000100))

37.334751044s ago: executing program 0 (id=9):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000002c0)=0x80000000, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = semget$private(0x0, 0x7, 0x180)
semtimedop(r3, &(0x7f0000000040)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x32d401, 0x0)
fcntl$getflags(r5, 0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0)
r7 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000)
accept$nfc_llcp(r7, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000180)=0x63, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_io_uring_setup(0x789c, &(0x7f00000000c0)={0x0, 0x690e, 0x4000, 0x1, 0xcf}, &(0x7f0000000140), &(0x7f00000007c0), &(0x7f0000000080))

36.067233379s ago: executing program 0 (id=26):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e04000000000000000000000f0000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28)

35.993778005s ago: executing program 32 (id=26):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e04000000000000000000000f0000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28)

29.856543188s ago: executing program 2 (id=123):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x501800)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000))
read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e"], 0xf0}}, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x25, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x8, 0x4, {0x7, 0x25, 0x1, 0x4, 0xc, 0x90}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0xff, 0x3, {0x7, 0x25, 0x1, 0x4, 0x4, 0xfff}}}}}}}}]}}, 0x0)

26.816834671s ago: executing program 2 (id=175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x500, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2000, 0x17}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x40080)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9c4}, 0x4000804)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r7=>r3, 0x2f, 0x2, 0x10, 0x7, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, 0x7800, 0x8, 0x0, 0x15}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=<r8=>0x0, &(0x7f00000005c0)=0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1e0, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20040094}, 0x4000000)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000880)=0x6, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000008c0)={0x9, 0x1, 0x701, 0x919})
socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/meminfo\x00', 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x1d, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x58000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@ldst={0x1, 0x3, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x1, 0x33, &(0x7f0000000a40)=""/51, 0x41100, 0x8, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x8, 0x484, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000c00)=[r10, r11, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x0, 0x1, 0xf}, {0x3, 0x4, 0x1}, {0x0, 0x4, 0x0, 0x3}, {0x0, 0x2, 0xc, 0x1}, {0x2, 0x2, 0xd, 0x9}, {0x4, 0x1, 0x0, 0x2}, {0x0, 0x4, 0xe, 0x4}, {0x2, 0x2, 0x10}, {0x5, 0x5, 0xc, 0x7}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0xfffffffd}, 0x94)
recvmmsg(r0, &(0x7f00000057c0)=[{{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/40, 0x28}, {&(0x7f0000000e80)=""/217, 0xd9}], 0x2, &(0x7f0000000fc0)=""/70, 0x46}, 0x40}, {{&(0x7f0000001040)=@un=@abs, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/148, 0x94}, {&(0x7f0000001180)=""/3, 0x3}, {&(0x7f00000011c0)=""/247, 0xf7}], 0x3, &(0x7f0000001300)=""/224, 0xe0}, 0x7}, {{&(0x7f0000001400)=@isdn, 0x80, &(0x7f0000001740)=[{&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001500)=""/42, 0x2a}, {&(0x7f0000001540)=""/252, 0xfc}, {&(0x7f0000001640)=""/15, 0xf}, {&(0x7f0000001680)=""/187, 0xbb}], 0x5}, 0x9}, {{&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/222, 0xde}, {&(0x7f0000002940)=""/61, 0x3d}], 0x3, &(0x7f00000029c0)=""/62, 0x3e}, 0x1}, {{&(0x7f0000002a00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002a80)=""/203, 0xcb}, {&(0x7f0000002b80)=""/80, 0x50}, {&(0x7f0000002c00)=""/108, 0x6c}, {&(0x7f0000002c80)=""/203, 0xcb}, {&(0x7f0000002d80)=""/113, 0x71}], 0x5, &(0x7f0000002e80)=""/235, 0xeb}, 0x3}, {{&(0x7f0000002f80)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003000)=""/51, 0x33}, {&(0x7f0000003040)=""/130, 0x82}, {&(0x7f0000003100)=""/217, 0xd9}, {&(0x7f0000003200)=""/228, 0xe4}, {&(0x7f0000003300)=""/214, 0xd6}, {&(0x7f0000003400)=""/54, 0x36}], 0x6, &(0x7f00000034c0)=""/180, 0xb4}, 0x6}, {{&(0x7f0000003580)=@qipcrtr, 0x80, &(0x7f0000005780)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/86, 0x56}, {&(0x7f0000004680)=""/197, 0xc5}, {&(0x7f0000004780)=""/4096, 0x1000}], 0x4}, 0x9}], 0x7, 0x10002, &(0x7f0000005980)={0x0, 0x3938700})
r12 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000059c0), 0x0, 0x0)
close_range(r11, r12, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006d00)={r10, 0x20, &(0x7f0000006cc0)={&(0x7f0000005c40)=""/4096, 0x1000, <r13=>0x0, &(0x7f0000006c40)=""/124, 0x7c}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000006dc0)={{r12, <r14=>0xffffffffffffffff}, &(0x7f0000006d40), &(0x7f0000006d80)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000006e80)={0x14, 0x18, &(0x7f0000005a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005ac0)='syzkaller\x00', 0xff, 0xb5, &(0x7f0000005b00)=""/181, 0x0, 0x40, '\x00', 0x0, @lirc_mode2, r10, 0x8, &(0x7f0000005bc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000005c00)={0x0, 0xe, 0x1, 0x5}, 0x10, r13, r12, 0x2, &(0x7f0000006e00)=[r14, 0x1, r12], &(0x7f0000006e40)=[{0x2, 0x5, 0x10, 0x5}, {0x3, 0x2, 0x4, 0x9}], 0x10, 0x1}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000006f80)={{0x1, 0x1, 0x18, <r15=>r14, {0x0, 0xee01}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000006f40), r15)
landlock_restrict_self(r12, 0x7)

26.816579994s ago: executing program 2 (id=176):
socket(0x2, 0x3, 0x6)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) (async)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090)
r1 = add_key$user(&(0x7f0000000400), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) (async)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000340), 0x0, 0x0, 0x0, <r6=>0xffffffffffffffff})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000280)={0xed, 0x0, 0x6}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x5e) (async)
r9 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) (async)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r10, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r8) (async)
r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

26.665374174s ago: executing program 2 (id=177):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendfile(r3, r2, 0x0, 0x7ffff000)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a140000000000020024000008001e0000000000080017005ead6b63"], 0x2c}}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1815c48, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000))
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10000, 0xdf, 0x35, 0x9, 0xb, 0x4, 0x0, 0x6, 0x4f})
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x161d43, 0x1a)
fcntl$setlease(r7, 0x400, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r8)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010007a899b2101220d3c7512320eb7023ea0e82fe68afc500fcdb7448040e0000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r9, 0x1, 0x70bd26, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x34, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0)

26.555398682s ago: executing program 2 (id=178):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000001800000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28)

26.427236999s ago: executing program 2 (id=179):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(0xffffffffffffffff, 0x3b8f, &(0x7f0000000180)="280000000600000001000000040000000000000000000fff0010")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b0005"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)
recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r9, @ANYRES32=0x0, @ANYBLOB="3f0000000600184421e791ffffffff00"/30, @ANYRES16, @ANYRESHEX=r7, @ANYRES8=r3], 0x38}, 0x1, 0x4000, 0x0, 0x44000}, 0x20000040)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x41010, &(0x7f0000000740)=ANY=[@ANYBLOB="66643d82366d4c0cc498203ac27ee92bb88ed88c55b67310d2cd62e900f1db8423b0da7aba456e841bdd0d18b68875ebdf425f7da5466ef99060ecb9a85dfd8043a8667381ff109ecdd72192aedf927b029f6145eeac007639c29f4d8c73ef34d91a813ac0c9885d561e673f7780d6ebaedb86706389edf48c6fc26ffce7830e950f0232657c17a019c6000000000000", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="3bef482d30db649be7971d97865665d456f0599f958344c74cdd0d720582d0d1a0b6288fb0ec4e2c879c80a8083a2d5cfcd370fa1fd971873b57e3ed4c12583f35a798212267336be11cfa1a54804c3e9baf21dbf1cae3466f785876588cecccb0b6105288cc1795f0445a00da28248d37e3530084ed855f1687699aae90c4f00736823665f8dec215562f0cc26a927cdd7e9ffd879c450c88abb8aa99cb78824e4f47e4881c25f6b9e60668ea41bc00ecf1423c385b8f2bc8000000"])
read$FUSE(r10, &(0x7f0000004280)={0x2020, 0x0, <r11=>0x0}, 0x2020)
syz_fuse_handle_req(r10, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r10, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, r11, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xff7e, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x7ffd}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42042, 0x1)
close(r10)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x121842, 0x110)
userfaultfd(0x801)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r12, 0xa64c000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0401000000ffffffff1300000008000300", @ANYRES32=r7, @ANYBLOB="040013000a000600ffffffffffff000006001200fc0700000600b500c90200000600ab0000100000"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)
r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r13, 0x0, 0x106f)

26.407804138s ago: executing program 33 (id=179):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(0xffffffffffffffff, 0x3b8f, &(0x7f0000000180)="280000000600000001000000040000000000000000000fff0010")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b0005"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)
recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r9, @ANYRES32=0x0, @ANYBLOB="3f0000000600184421e791ffffffff00"/30, @ANYRES16, @ANYRESHEX=r7, @ANYRES8=r3], 0x38}, 0x1, 0x4000, 0x0, 0x44000}, 0x20000040)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x41010, &(0x7f0000000740)=ANY=[@ANYBLOB="66643d82366d4c0cc498203ac27ee92bb88ed88c55b67310d2cd62e900f1db8423b0da7aba456e841bdd0d18b68875ebdf425f7da5466ef99060ecb9a85dfd8043a8667381ff109ecdd72192aedf927b029f6145eeac007639c29f4d8c73ef34d91a813ac0c9885d561e673f7780d6ebaedb86706389edf48c6fc26ffce7830e950f0232657c17a019c6000000000000", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="3bef482d30db649be7971d97865665d456f0599f958344c74cdd0d720582d0d1a0b6288fb0ec4e2c879c80a8083a2d5cfcd370fa1fd971873b57e3ed4c12583f35a798212267336be11cfa1a54804c3e9baf21dbf1cae3466f785876588cecccb0b6105288cc1795f0445a00da28248d37e3530084ed855f1687699aae90c4f00736823665f8dec215562f0cc26a927cdd7e9ffd879c450c88abb8aa99cb78824e4f47e4881c25f6b9e60668ea41bc00ecf1423c385b8f2bc8000000"])
read$FUSE(r10, &(0x7f0000004280)={0x2020, 0x0, <r11=>0x0}, 0x2020)
syz_fuse_handle_req(r10, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r10, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, r11, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xff7e, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x7ffd}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42042, 0x1)
close(r10)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x121842, 0x110)
userfaultfd(0x801)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r12, 0xa64c000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0401000000ffffffff1300000008000300", @ANYRES32=r7, @ANYBLOB="040013000a000600ffffffffffff000006001200fc0700000600b500c90200000600ab0000100000"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)
r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r13, 0x0, 0x106f)

24.396511033s ago: executing program 3 (id=194):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)

24.307105509s ago: executing program 3 (id=195):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000003400000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28)

24.306868409s ago: executing program 3 (id=196):
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xc)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(0xffffffffffffffff, 0x80207501, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x2, 0x0)
socket$inet6(0xa, 0x200000000003, 0x87)
r3 = fcntl$dupfd(r2, 0x406, r2)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x101040)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0xfa6, 0x10000, 0x1000, 0x8000000000000001, 0xfffffffffffffffa, 0x7, 0x2, 0x40, 0x1})
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000240)={'veth0_vlan\x00', 0x100})

24.127315065s ago: executing program 3 (id=197):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='stacktrace', 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000000)={0x0, @reserved})
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0303faffffff000000003d"], 0x34}}, 0x0)

24.066382998s ago: executing program 3 (id=198):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f00000001c0)='./file0\x00', 0x124)
mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x4400, 0x0) (async)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) (async)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2}, 0x2, 0x2, {0x0}, 0x401000}) (async)
r1 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

23.937561312s ago: executing program 3 (id=201):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff)
listns(&(0x7f0000000000)={0x20, 0x0, 0x1, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x5}, {0x9, 0x3}, {0xd, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10) (async)
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) (async)
listns(&(0x7f0000000000)={0x20, 0x0, 0x1, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x5}, {0x9, 0x3}, {0xd, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800) (async)

22.147195011s ago: executing program 4 (id=235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00040002800800057f", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0)

22.076430304s ago: executing program 4 (id=236):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000fff900000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28)

22.076196465s ago: executing program 4 (id=237):
io_setup(0x9, &(0x7f0000000f40)=<r0=>0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async, rerun: 64)
setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (rerun: 64)
io_cancel(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0) (async)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f00000004c0)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r8=>0x0) (async)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r9, r8, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)

21.023754521s ago: executing program 4 (id=255):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendfile(r3, r2, 0x0, 0x7ffff000)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a140000000000020024000008001e0000000000080017005ead6b63"], 0x2c}}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1815c48, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000))
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10000, 0xdf, 0x35, 0x9, 0xb, 0x4, 0x0, 0x6, 0x4f})
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x161d43, 0x1a)
fcntl$setlease(r7, 0x400, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010007a899b2101220d3c7512320eb7023ea0e82fe68afc500fcdb7448040e0000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84)

20.865123991s ago: executing program 4 (id=259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000050000000900030073797a30ddff0000280004800800024000000000080001400000000514000300766574683130d38dd0767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0)

20.864604348s ago: executing program 5 (id=260):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4c400, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000400)={0x9, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f0000000300)=""/62, 0x3e}], &(0x7f00000003c0)=[0x6, 0x66, 0x2], 0x5}, 0x20)
r2 = syz_io_uring_setup(0x4750, &(0x7f0000000440)={0x0, 0xe9bf, 0x8, 0x2, 0x350, 0x0, r1}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
fstat(r0, &(0x7f0000000580))
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000640)=@IORING_OP_LINK_TIMEOUT={0xf, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r7}})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0xefbf5000)
read(r0, &(0x7f00000006c0)=""/4096, 0x1000)
ioctl$BSG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000016c0)=0x8)
r8 = open(&(0x7f0000001700)='./file0\x00', 0x4c4080, 0x28)
socket$packet(0x11, 0x3, 0x300)
file_setattr(r8, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x1410, 0x5, 0x7f7, 0x30000000, 0x8}, 0x18, 0x4190140901aa3335)
preadv2(r8, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/40, 0x28}], 0x1, 0x5, 0x2, 0x5)
mount$bind(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0), 0x800000, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000001900))
setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000001940)=0x7fffffff, 0x4)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f8, 0x0, 0x0, 0x98, 0x130, 0x360, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, &(0x7f0000001980), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x9, 0x8}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00, 0xffffffff, 'ip6tnl0\x00', 'pim6reg0\x00', {0x766464c65100ed03}, {0xff}, 0xff, 0x2, 0x20}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xfffffffc, 0x3, 0x4}}, @common=@addrtype={{0x30}, {0x81, 0x80, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10000, @multicast2, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
sendto$inet_nvme_pdu(r1, &(0x7f0000001e80)=@data_h2c={{0x6, 0x1, 0x18, 0x20}, 0x2, 0x4, 0x200, 0x101, "0c46d34a"}, 0x80, 0x0, 0x0, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001f00)='/sys/power/resume_offset', 0x88c0, 0x100)
ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000001f40)=0x1)
ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000001f80)={0x0, 0x1, 0x7f, 0xa305, 0x7f, 0x40})
sendto$llc(r8, &(0x7f0000001fc0)="8abfbaefc576bada7b5da54bb2d9ee859519546681ad773ed72526903b13a9ed56cb876199cf1717819049a38dadcccaec49e4aca7c315356b4946e3b58800238736e0ef83300cbbd69103991683646ef4aa5bb5c0266646ba341ac4362a67f792ad6383815aa4219041d21d79e67b7c2794f3a14d5b34308e5cad0b0543e4536a7f74ffe60b832948442236084f888ccee639903d7bce6ace793fda1b07cfd5270580c76de20e40f5bda10c54846d666256ade0515a5f77f14e109eae188c", 0xbf, 0x48044, &(0x7f0000002080)={0x1a, 0x320, 0x6, 0x9, 0xf0, 0x3, @remote}, 0x10)
recvfrom$l2tp6(r9, &(0x7f00000020c0)=""/9, 0x9, 0x10001, &(0x7f0000002100)={0xa, 0x0, 0x0, @private0}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002140)={'wlan1\x00'})
write$P9_RREADLINK(r9, &(0x7f0000002180)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0xffffffffffffffff, 0x4)

20.486728943s ago: executing program 4 (id=263):
syz_open_dev$swradio(0x0, 0x1, 0x2)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x22304000, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f000000c2c0)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000500000000002e"], 0x0, 0x43, 0x0, 0x1}, 0x28)
r1 = syz_io_uring_setup(0x400b, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x4b}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_GETXATTR={0x2c, 0x50, 0x0, 0x0, 0x0, &(0x7f0000000140)="90a52f80069f03", 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00'}})
io_uring_enter(r1, 0x458, 0x11, 0xe0, 0x0, 0x0)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040))

20.439251697s ago: executing program 34 (id=263):
syz_open_dev$swradio(0x0, 0x1, 0x2)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x22304000, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f000000c2c0)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000500000000002e"], 0x0, 0x43, 0x0, 0x1}, 0x28)
r1 = syz_io_uring_setup(0x400b, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x4b}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_GETXATTR={0x2c, 0x50, 0x0, 0x0, 0x0, &(0x7f0000000140)="90a52f80069f03", 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00'}})
io_uring_enter(r1, 0x458, 0x11, 0xe0, 0x0, 0x0)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040))

20.302692819s ago: executing program 5 (id=265):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280080005fe", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0)

20.005979203s ago: executing program 5 (id=266):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000180)={0x140, r1}, 0x1)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000080)=0x80, 0x4)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x268}}, 0x40890)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
set_mempolicy(0x4005, &(0x7f0000000080)=0x1, 0xa)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x6c2f2, 0xffffffffffffffff, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, r7, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000200))
ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000840))
pwrite64(r4, &(0x7f0000000000)="ff", 0x58200, 0xfb0000)

20.005515519s ago: executing program 5 (id=267):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendfile(r3, r2, 0x0, 0x7ffff000)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a140000000000020024000008001e0000000000080017005ead6b63"], 0x2c}}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1815c48, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000))
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10000, 0xdf, 0x35, 0x9, 0xb, 0x4, 0x0, 0x6, 0x4f})
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x161d43, 0x1a)
fcntl$setlease(r7, 0x400, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010007a899b2101220d3c7512320eb7023ea0e82fe68afc500fcdb7448040e0000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84)

19.85726366s ago: executing program 5 (id=268):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000ffff0f000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28)

19.856856363s ago: executing program 1 (id=270):
r0 = syz_open_procfs(0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/146, 0x92)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

19.717264537s ago: executing program 5 (id=271):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ac)

19.634227265s ago: executing program 35 (id=271):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1ac)

18.873509516s ago: executing program 1 (id=273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000520", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0)

18.795964022s ago: executing program 1 (id=274):
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000200))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
epoll_create1(0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
pipe(&(0x7f0000000200)) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) (async)

18.646607996s ago: executing program 1 (id=275):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendfile(r3, r2, 0x0, 0x7ffff000)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a140000000000020024000008001e0000000000080017005ead6b63"], 0x2c}}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1815c48, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000))
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10000, 0xdf, 0x35, 0x9, 0xb, 0x4, 0x0, 0x6, 0x4f})
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x161d43, 0x1a)
fcntl$setlease(r7, 0x400, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010007a899b2101220d3c7512320eb7023ea0e82fe68afc500fcdb7448040e0000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84)

18.551470424s ago: executing program 1 (id=276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000300000000900030073797a30ddff0000280004800800024000000000080001400000000514000300766574683130d38dd0767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0)

18.376809474s ago: executing program 1 (id=277):
unshare(0x6a040000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)

18.357555412s ago: executing program 36 (id=277):
unshare(0x6a040000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)

8.754040688s ago: executing program 37 (id=201):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff)
listns(&(0x7f0000000000)={0x20, 0x0, 0x1, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x5}, {0x9, 0x3}, {0xd, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10) (async)
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) (async)
listns(&(0x7f0000000000)={0x20, 0x0, 0x1, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x5}, {0x9, 0x3}, {0xd, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x9, 0x0, 0x0, 0x3, 0x10013}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x34}}, 0x40800) (async)

4.437170496s ago: executing program 7 (id=348):
socket(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='atkbd', 0x5)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x5, 0x8081, r3, 0x0}])
write(r0, &(0x7f0000000240)="736c6176652d32346300000059f1bfa0f5d082a8d079006831303232cd6af90b7f4b0f6c1231e7949581c53cb3235916c30b9b7c69ced1f5f5a9937d18e1d8f1ec903f6a4a330d4f5a69c55cc25dbb105a41f3689f4316", 0xfffffe62)
r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x1, 0x83)
r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r7, 0x8)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x4000, r6}, 0x18)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r8, &(0x7f0000000180)='tcpci 0x2', 0x9)
openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000380)={0x9e0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f911, 0x80008002, '\x00', @ptr=0x5a5}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4000853, 0x1ff, 0x43ff, 0xde9, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0x0, {0x400000, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000)
socket$netlink(0x10, 0x3, 0xc)
r9 = epoll_create1(0x0)
fcntl$dupfd(r9, 0x2, 0xffffffffffffffff)
fanotify_init(0x20, 0x0)

3.992009571s ago: executing program 7 (id=349):
io_uring_setup(0x70f7, &(0x7f0000000440)={0x0, 0x4ef1, 0x4000, 0x400001, 0x2df})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0)
ioctl(r0, 0x40140921, &(0x7f0000000440)="020000000100")

3.916153125s ago: executing program 7 (id=350):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf96, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xbea5, 0x0, 0x8, 0x4026, r1, 0x6, '\x00', 0x0, r0, 0x3, 0x5, 0x2000004, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%-010d \x00'}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r3}, 0xc)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0)
r8 = openat$sr(0xffffff9c, &(0x7f0000000340), 0x101300, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0)
readv(r10, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48)
r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f00000003c0)=0xa0000)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3fffe}, 0x50)

3.7454493s ago: executing program 7 (id=351):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000001080), 0x1, 0x20080)
socket$kcm(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)=[0x5], 0x0, 0x7})

3.733228997s ago: executing program 9 (id=329):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x9, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xfd, 0x0, '\x00', 0x0, 0x40000000003})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.632801878s ago: executing program 7 (id=363):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe})
utimensat(r0, 0x0, 0x0, 0x0)

3.540791388s ago: executing program 9 (id=355):
mount(0x0, 0x0, 0x0, 0x100800c, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000000c000780080012400000000616000300686173683a6e65742c706f72742c6e6574000000050005000a00000005000400020000000900020073797a31000000000500010007000000072b1de4d1a4edb2644c5cdaa9b7bbb7b5904accca27"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

3.202212968s ago: executing program 8 (id=358):
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40008c1}, 0x600448d0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRESOCT=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r7, 0x0, 0x0)
creat(0x0, 0xf2)
r8 = socket(0xa, 0x3, 0xff)
getsockopt$inet6_int(r8, 0x29, 0x24, 0x0, &(0x7f00000000c0))
madvise(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
fsopen(&(0x7f00000000c0)='xfs\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ae9000/0x4000)=nil, 0x3)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000d)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x500, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

2.957270661s ago: executing program 6 (id=359):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000008c0)={0x2e, 0x1e, 0x4, 0x2, 0x3, 0xa9, 0x5, 0x2, 0x1})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0x8100', 0x6)

2.812614153s ago: executing program 6 (id=360):
setns(0xc9, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00'})
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000002100)='smaps\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)

2.715124136s ago: executing program 6 (id=361):
socket$inet6(0xa, 0x800000000000002, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x12df00, 0x0)

2.637203032s ago: executing program 9 (id=364):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000080)={0x1, 0xffbff806, 0x9, 0x6, 0x2, 0xb20, 0x7, 0xe, 0x9, 0x40, 0xefffffff, 0x1})
ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0)

2.504845933s ago: executing program 7 (id=365):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getnetconf={0x1c, 0x52, 0xe11, 0x70bd27, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44104}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x48885)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
getpid()
mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7)
r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x304}, "39df7c109c0ae44a", "d7cb70a11af9ee9ba93fc360f839d9ce", "e557333b", "61fd46b7c5548457"}, 0x28)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96)
openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0)

2.20507777s ago: executing program 8 (id=366):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)

1.932387068s ago: executing program 6 (id=367):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="63202ad3"], 0x9)
sendfile(r0, r1, 0x0, 0x106f)

1.93200556s ago: executing program 8 (id=368):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
memfd_secret(0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x1ca, 0x12)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='270', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='md0', 0x3)

1.213239159s ago: executing program 8 (id=369):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}, @hci_ev_le_ext_adv_report}}, 0x5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014)

810.53177ms ago: executing program 6 (id=370):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf96, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xbea5, 0x0, 0x8, 0x4026, r1, 0x6, '\x00', 0x0, r0, 0x3, 0x5, 0x2000004, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%-010d \x00'}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r3}, 0xc)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0)
r8 = openat$sr(0xffffff9c, &(0x7f0000000340), 0x101300, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0)
readv(r10, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48)
r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f00000003c0)=0xa0000)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3fffe}, 0x50)

174.553895ms ago: executing program 8 (id=371):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000008c0)={0x2e, 0x1e, 0x4, 0x2, 0x3, 0xa9, 0x5, 0x2, 0x1})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0x8100', 0x6)

156.483269ms ago: executing program 6 (id=379):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}, @hci_ev_le_ext_adv_report}}, 0x5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014)

0s ago: executing program 8 (id=372):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)="228910986213087e9e739662c9f1256051a4ffec12caaea0f57e85477ca95cbb44bd35a958a1c2121c99fa32f501cb610db9d002453a9ccf0d3af9a631a7720bd2eaeb9a29c02da460cc856fcc24ef2ab3e80feac7e937b4677748ba20317471e5cedb30f519639a013c55ab285a8c2f12bdb88db1052d63a908b21437a1e7b622c797", 0x83)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x2})
socket$packet(0x11, 0x3, 0x300)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r4, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x4, 0x138, 0xfffffffffffdfffe, 0x100000000, 0xfffffffffffffffb, 0x5, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200))
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000001c0)={0x0, 0x1})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

kernel console output (not intermixed with test programs):

======================================================
[   49.766385][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'.
[   49.778958][ T5904] block2mtd: error: cannot open device #! ./sys
[   49.855486][ T5833] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   50.015582][ T5833] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   50.016706][ T5833] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[   50.016729][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.017592][ T5833] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   50.017609][ T5833] usb 6-1: Manufacturer: syz
[   50.022648][ T5833] usb 6-1: config 0 descriptor??
[   50.086056][ T5833] rc_core: IR keymap rc-hauppauge not found
[   50.086073][ T5833] Registered IR keymap rc-empty
[   50.089476][ T5833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[   50.090788][ T5833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5
[   50.163277][ T5929] ip_tables: iptables: counters copy to user failed while replacing table
[   50.181514][ T5930] ip_tables: iptables: counters copy to user failed while replacing table
[   50.232716][ T5902] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8'.
[   50.253887][ T5812] usb 6-1: USB disconnect, device number 2
[   50.800661][ T5952] qnx4: no qnx4 filesystem (no root dir).
[   50.846937][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   50.889119][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.914771][ T5740] Bluetooth: hci0: command tx timeout
[   50.914806][ T5740] Bluetooth: hci1: command tx timeout
[   50.995850][ T5089] Bluetooth: hci2: command tx timeout
[   51.005808][ T5833] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   51.007195][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.007219][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.007237][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   51.007267][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.010612][ T5833] usb 7-1: config 0 descriptor??
[   51.101596][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   51.103429][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   51.103872][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   51.105761][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   51.106430][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   51.127302][    C3] sd 0:0:0:0: [sda] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   51.127351][    C3] sd 0:0:0:0: [sda] tag#22 CDB: Test Unit Ready 
[   51.425951][ T5833] usbhid 7-1:0.0: can't add hid device: -71
[   51.426028][ T5833] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   51.432756][ T5833] usb 7-1: USB disconnect, device number 2
[   51.533954][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.534043][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.534135][ T5968] bridge_slave_0: entered allmulticast mode
[   51.536207][ T5968] bridge_slave_0: entered promiscuous mode
[   51.538491][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.538629][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.538899][ T5968] bridge_slave_1: entered allmulticast mode
[   51.540265][ T5968] bridge_slave_1: entered promiscuous mode
[   51.567615][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.570381][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.594273][ T5968] team0: Port device team_slave_0 added
[   51.596855][ T5968] team0: Port device team_slave_1 added
[   51.620596][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.620614][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.620644][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.622371][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.622382][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.622402][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.653659][ T5968] hsr_slave_0: entered promiscuous mode
[   51.654264][ T5968] hsr_slave_1: entered promiscuous mode
[   51.655107][ T5968] debugfs: 'hsr0' already exists in 'hsr'
[   51.655120][ T5968] Cannot create hsr debugfs directory
[   51.784195][ T5968] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   51.789991][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   51.791771][ T5968] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   51.796902][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   51.798017][ T5968] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   51.802525][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   51.803349][ T5968] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   51.809421][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   51.832895][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.833088][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.833969][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.834046][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.880049][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.891884][  T125] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.892762][  T125] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.904174][ T5968] 8021q: adding VLAN 0 to HW filter on device team0
[   51.912412][  T125] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.912461][  T125] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.920482][  T125] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.920529][  T125] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.990901][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.013079][ T5999] ip6gretap0: entered promiscuous mode
[   52.029988][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.040278][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   52.040292][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   52.181701][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.188514][   T43] kauditd_printk_skb: 96 callbacks suppressed
[   52.188532][   T43] audit: type=1400 audit(1790983377.451:264): avc:  denied  { write } for  pid=6014 comm="syz.2.37" name="hidraw0" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   52.219141][ T6013] bond1: entered allmulticast mode
[   52.220542][ T6013] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.230401][ T6013] netlink: 'syz.1.36': attribute type 10 has an invalid length.
[   52.242242][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.243874][ T6018] xt_TCPMSS: Only works on TCP SYN packets
[   52.258474][ T6013] syz_tun: entered promiscuous mode
[   52.270693][ T6013] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   52.343328][   T43] audit: type=1400 audit(1790983377.601:265): avc:  denied  { create } for  pid=6014 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   52.399606][   T43] audit: type=1400 audit(1790983377.661:266): avc:  denied  { setopt } for  pid=6014 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   52.417899][ T6018] Zero length message leads to an empty skb
[   52.460336][   T13] bridge_slave_1: left allmulticast mode
[   52.460368][   T13] bridge_slave_1: left promiscuous mode
[   52.461183][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.479964][   T13] bridge_slave_0: left allmulticast mode
[   52.479990][   T13] bridge_slave_0: left promiscuous mode
[   52.480177][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.525590][   T43] audit: type=1400 audit(1790983377.791:267): avc:  denied  { read } for  pid=6032 comm="syz.1.40" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   52.530188][   T43] audit: type=1400 audit(1790983377.791:268): avc:  denied  { open } for  pid=6032 comm="syz.1.40" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   52.534338][   T43] audit: type=1400 audit(1790983377.791:269): avc:  denied  { setopt } for  pid=6032 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.586559][   T43] audit: type=1400 audit(2000000000.000:270): avc:  denied  { bind } for  pid=6034 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.587272][   T43] audit: type=1400 audit(2000000000.000:271): avc:  denied  { name_bind } for  pid=6034 comm="syz.1.41" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   52.587299][   T43] audit: type=1400 audit(2000000000.000:272): avc:  denied  { node_bind } for  pid=6034 comm="syz.1.41" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   52.588053][   T43] audit: type=1400 audit(2000000000.000:273): avc:  denied  { write } for  pid=6034 comm="syz.1.41" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.591944][ T6035] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[   52.594229][ T6035] process 'syz.1.41' launched './file0' with NULL argv: empty string added
[   52.658539][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.661341][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.668737][   T13] bond0 (unregistering): Released all slaves
[   52.687082][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.940830][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2
[   52.997820][ T5089] Bluetooth: hci1: command tx timeout
[   52.997842][ T5089] Bluetooth: hci0: command tx timeout
[   53.015191][ T5968] veth0_vlan: entered promiscuous mode
[   53.018610][ T5968] veth1_vlan: entered promiscuous mode
[   53.083109][ T5740] Bluetooth: hci2: command tx timeout
[   53.145832][ T5968] veth0_macvtap: entered promiscuous mode
[   53.148537][ T5968] veth1_macvtap: entered promiscuous mode
[   53.154877][ T5740] Bluetooth: hci3: command tx timeout
[   53.178135][ T6064] bond1: entered allmulticast mode
[   53.178335][ T6064] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.178929][ T6070] netlink: 'syz.2.45': attribute type 10 has an invalid length.
[   53.181372][ T6070] syz_tun: entered promiscuous mode
[   53.195656][ T6070] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   53.258279][   T13] hsr_slave_0: left promiscuous mode
[   53.259072][   T13] hsr_slave_1: left promiscuous mode
[   53.259883][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.259902][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.260690][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.260701][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.282130][   T13] veth1_macvtap: left promiscuous mode
[   53.282164][   T13] veth0_macvtap: left promiscuous mode
[   53.282216][   T13] veth1_vlan: left promiscuous mode
[   53.282258][   T13] veth0_vlan: left promiscuous mode
[   53.351176][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.353213][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.362831][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.363959][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.365535][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.366781][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.368249][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.369463][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.370727][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.372148][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.373438][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.374897][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.376632][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.377827][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.379148][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.380343][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.381499][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.382937][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.385010][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.386281][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.387578][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.388857][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.390104][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.391726][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.393177][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.397969][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.399204][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.400389][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.401560][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.402687][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.403921][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.409235][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.411046][ T6084] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   53.463566][ T6086] 9p: Bad value for 'rfdno'
[   53.490724][ T6091] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[   53.491071][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'.
[   53.523253][   T13] team0 (unregistering): Port device team_slave_1 removed
[   53.529035][   T13] team0 (unregistering): Port device team_slave_0 removed
[   53.612287][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3
[   53.623455][ T6083] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.632030][ T6091] bond0: entered promiscuous mode
[   53.632048][ T6091] bond_slave_0: entered promiscuous mode
[   53.632212][ T6091] bond_slave_1: entered promiscuous mode
[   53.634256][ T6091] batadv0: entered promiscuous mode
[   53.643658][ T6091] 8021q: adding VLAN 0 to HW filter on device hsr1
[   53.661505][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.672977][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.725007][ T5542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.725034][ T5542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.725051][ T5542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.725069][ T5542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.788842][  T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.788857][  T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.821054][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.821071][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.861479][ T6116] bond1: entered allmulticast mode
[   53.861687][ T6116] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.877530][ T6116] netlink: 'syz.3.55': attribute type 10 has an invalid length.
[   53.884881][ T6116] syz_tun: entered promiscuous mode
[   53.897279][ T6116] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   53.907653][ T6116] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   53.908325][ T6116] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0)
[   53.908346][ T6116] bond1: (slave macvlan2): speed changed to 0 on port 1
[   53.909458][ T6116] macvlan2: entered allmulticast mode
[   53.909478][ T6116] bond0: entered allmulticast mode
[   53.909491][ T6116] bond_slave_0: entered allmulticast mode
[   53.909510][ T6116] bond_slave_1: entered allmulticast mode
[   53.909526][ T6116] syz_tun: entered allmulticast mode
[   53.909763][ T6116] bond_slave_0: entered promiscuous mode
[   53.909801][ T6116] bond_slave_1: entered promiscuous mode
[   53.910744][ T6116] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   53.912412][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4
[   54.122422][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5
[   54.413814][ T6151] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   54.489351][ T6162] bond1: entered allmulticast mode
[   54.489569][ T6162] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.492632][ T6162] netlink: 'syz.4.65': attribute type 10 has an invalid length.
[   54.493316][ T6162] syz_tun: entered promiscuous mode
[   54.499893][ T6162] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   54.517622][ T6162] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   54.517943][ T6162] bond1: (slave macvlan2): speed changed to 0 on port 1
[   54.518439][ T6162] macvlan2: entered allmulticast mode
[   54.518450][ T6162] bond0: entered allmulticast mode
[   54.518458][ T6162] bond_slave_0: entered allmulticast mode
[   54.518468][ T6162] bond_slave_1: entered allmulticast mode
[   54.518477][ T6162] syz_tun: entered allmulticast mode
[   54.518508][ T6162] bond_slave_0: entered promiscuous mode
[   54.518527][ T6162] bond_slave_1: entered promiscuous mode
[   54.518898][ T6162] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   54.606399][ T6171] ip_tables: iptables: counters copy to user failed while replacing table
[   54.632653][ T6173] netlink: ct_mark mask cannot be 0
[   54.632668][ T6173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.634059][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'.
[   54.689277][ T6179] Bluetooth: MGMT ver 1.23
[   54.695141][ T6180] SELinux:  policydb string 
 does not match my string SE Linux
[   54.695334][ T6180] SELinux: failed to load policy
[   54.762935][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   54.802697][ T6128] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   54.827398][ T6193] bond1: option mode: unable to set because the bond device is up
[   54.828210][ T6193] netlink: 'syz.2.76': attribute type 10 has an invalid length.
[   54.845157][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   54.846877][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   54.970207][ T6211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6211 comm=syz.3.83
[   54.991036][ T6215] fuse: Bad value for 'fd'
[   54.993011][ T6215] Cannot find add_set index 0 as target
[   55.074559][ T5740] Bluetooth: hci1: command tx timeout
[   55.106341][ T6221] overlayfs: failed to resolve './file0': -2
[   55.117653][ T6221] trusted_key: syz.4.85 sent an empty control message without MSG_MORE.
[   55.156417][ T5740] Bluetooth: hci2: command tx timeout
[   55.179947][ T5740] Bluetooth: Frame is too long (len 12, expected len 4)
[   55.215324][ T5519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.245185][ T5740] Bluetooth: hci3: command tx timeout
[   55.524895][ T6230] bond1: option mode: unable to set because the bond device is up
[   55.525514][ T6230] netlink: 'syz.1.88': attribute type 10 has an invalid length.
[   55.536772][ T6230] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   55.537684][ T6230] macvlan2: entered allmulticast mode
[   55.537697][ T6230] bond0: entered allmulticast mode
[   55.537705][ T6230] bond_slave_0: entered allmulticast mode
[   55.537715][ T6230] bond_slave_1: entered allmulticast mode
[   55.537723][ T6230] syz_tun: entered allmulticast mode
[   55.537752][ T6230] bond_slave_0: entered promiscuous mode
[   55.537780][ T6230] bond_slave_1: entered promiscuous mode
[   55.538261][ T6230] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   55.805031][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.834922][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'.
[   55.846066][ T6243] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   55.846182][ T6243] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   55.846192][ T6243] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[   55.846199][ T6243] UDF-fs: Scanning with blocksize 512 failed
[   55.847140][ T6243] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   55.847206][ T6243] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   55.847222][ T6243] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[   55.847228][ T6243] UDF-fs: Scanning with blocksize 1024 failed
[   55.856991][ T6245] erspan1: entered promiscuous mode
[   55.864718][ T6243] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   55.864777][ T6243] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   55.864786][ T6243] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[   55.864792][ T6243] UDF-fs: Scanning with blocksize 2048 failed
[   55.865066][ T6243] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   55.865107][ T6243] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   55.865116][ T6243] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[   55.865122][ T6243] UDF-fs: Scanning with blocksize 4096 failed
[   55.865127][ T6243] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[   55.912021][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6253 comm=syz.1.96
[   56.109804][ T6266] bond1: option mode: unable to set because the bond device has slaves
[   56.110648][ T6266] netlink: 'syz.1.98': attribute type 10 has an invalid length.
[   56.118696][ T6266] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   56.238729][ T6272] loop4: detected capacity change from 0 to 7
[   56.254245][ T6272]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   56.254265][ T6272] loop4: partition table partially beyond EOD, truncated
[   56.257461][ T6272] loop4: p1 size 2989602745 extends beyond EOD, truncated
[   56.279820][ T5744] udevd[5744]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   56.318503][ T6277] netlink: 224 bytes leftover after parsing attributes in process `syz.1.102'.
[   56.418725][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'.
[   56.757216][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   56.776499][ T6313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6313 comm=syz.3.112
[   56.825902][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[   56.825926][ T6317] netlink: 'syz.1.113': attribute type 30 has an invalid length.
[   56.825935][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'.
[   56.826427][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[   56.826441][ T6317] netlink: 'syz.1.113': attribute type 30 has an invalid length.
[   56.826449][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'.
[   56.835340][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   56.887550][ T6324] bond1: option mode: unable to set because the bond device has slaves
[   56.888222][ T6324] netlink: 'syz.3.117': attribute type 10 has an invalid length.
[   56.897521][ T6324] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   56.949518][ T6321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   57.199626][ T6346] unsupported nlmsg_type 40
[   57.200430][   T43] kauditd_printk_skb: 122 callbacks suppressed
[   57.200439][   T43] audit: type=1400 audit(2000000004.609:396): avc:  denied  { bind } for  pid=6345 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.202912][   T43] audit: type=1400 audit(2000000004.609:397): avc:  denied  { listen } for  pid=6345 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   57.324750][ T5740] Bluetooth: hci3: command tx timeout
[   57.348349][ T6352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.375500][ T6354] vhci_hcd vhci_hcd.0: failed to lookup sock
[   57.396173][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.402174][ T6356] bond1: option mode: unable to set because the bond device has slaves
[   57.403077][ T6356] netlink: 'syz.4.130': attribute type 10 has an invalid length.
[   57.405884][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.412003][ T6356] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   57.416007][ T1348] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   57.556631][ T5519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.565131][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'.
[   57.574495][ T1348] usb 7-1: Using ep0 maxpacket: 8
[   57.574941][ T1348] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   57.575734][ T1348] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.575745][ T1348] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   57.575765][ T1348] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   57.575779][ T1348] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   57.575798][ T1348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.584026][ T1348] hub 7-1:1.0: bad descriptor, ignoring hub
[   57.584041][ T1348] hub 7-1:1.0: probe with driver hub failed with error -5
[   57.584300][ T1348] cdc_wdm 7-1:1.0: skipping garbage
[   57.584308][ T1348] cdc_wdm 7-1:1.0: skipping garbage
[   57.588962][ T1348] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   57.588975][ T1348] cdc_wdm 7-1:1.0: Unknown control protocol
[   57.780869][   T43] audit: type=1400 audit(2000000005.189:398): avc:  denied  { read write } for  pid=6339 comm="syz.2.123" name="cdc-wdm0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   57.781716][   T43] audit: type=1400 audit(2000000005.189:399): avc:  denied  { open } for  pid=6339 comm="syz.2.123" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   57.866139][   T43] audit: type=1400 audit(2000000005.269:400): avc:  denied  { ioctl } for  pid=6360 comm="syz.1.132" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   57.877329][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.906384][ T6366] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   57.917768][ T6366] FAULT_INJECTION: forcing a failure.
[   57.917768][ T6366] name failslab, interval 1, probability 0, space 0, times 0
[   57.917794][ T6366] CPU: 3 UID: 0 PID: 6366 Comm: syz.3.133 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   57.917812][ T6366] Tainted: [L]=SOFTLOCKUP
[   57.917817][ T6366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.917825][ T6366] Call Trace:
[   57.917829][ T6366]  <TASK>
[   57.917835][ T6366]  dump_stack_lvl+0x100/0x190
[   57.917871][ T6366]  should_fail_ex.cold+0x5/0xa
[   57.917891][ T6366]  should_failslab+0xc2/0x120
[   57.917913][ T6366]  __kmalloc_cache_node_noprof+0x94/0x720
[   57.917931][ T6366]  ? __alloc_workqueue+0x6f2/0x1950
[   57.917951][ T6366]  __alloc_workqueue+0x6f2/0x1950
[   57.917973][ T6366]  alloc_workqueue_noprof+0xc7/0x130
[   57.917990][ T6366]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[   57.918011][ T6366]  ? __ceph_monc_want_map+0x189/0x360
[   57.918030][ T6366]  ? ceph_get_tree+0x399/0x1fd0
[   57.918044][ T6366]  ceph_get_tree+0x3fa/0x1fd0
[   57.918055][ T6366]  ? security_capable+0x80/0x260
[   57.918068][ T6366]  vfs_get_tree+0x92/0x320
[   57.918080][ T6366]  path_mount+0x7d0/0x24c0
[   57.918116][ T6366]  ? __pfx_path_mount+0x10/0x10
[   57.918127][ T6366]  ? lockdep_hardirqs_on+0x7d/0x110
[   57.918142][ T6366]  ? putname+0xb1/0x110
[   57.918159][ T6366]  ? kmem_cache_free+0x127/0x6c0
[   57.918177][ T6366]  ? __x64_sys_mount+0x293/0x310
[   57.918194][ T6366]  __x64_sys_mount+0x293/0x310
[   57.918206][ T6366]  ? __pfx___x64_sys_mount+0x10/0x10
[   57.918242][ T6366]  do_syscall_64+0x123/0x790
[   57.918259][ T6366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.918273][ T6366] RIP: 0033:0x7f493dd9e159
[   57.918285][ T6366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.918297][ T6366] RSP: 002b:00007f493ec40028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   57.918310][ T6366] RAX: ffffffffffffffda RBX: 00007f493e025fa0 RCX: 00007f493dd9e159
[   57.918319][ T6366] RDX: 0000200000003200 RSI: 0000200000003000 RDI: 0000200000003100
[   57.918326][ T6366] RBP: 00007f493de3506b R08: 0000000000000000 R09: 0000000000000000
[   57.918333][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.918340][ T6366] R13: 00007f493e026038 R14: 00007f493e025fa0 R15: 00007ffcf1a3fd98
[   57.918356][ T6366]  </TASK>
[   58.007815][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.033607][   T43] audit: type=1400 audit(2000000005.439:401): avc:  denied  { read write } for  pid=6373 comm="syz.1.135" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   58.033846][   T43] audit: type=1400 audit(2000000005.439:402): avc:  denied  { open } for  pid=6373 comm="syz.1.135" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   58.034347][   T43] audit: type=1400 audit(2000000005.439:403): avc:  denied  { listen } for  pid=6373 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   58.099565][   T43] audit: type=1400 audit(2000000005.509:404): avc:  denied  { read write } for  pid=6382 comm="syz.1.138" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   58.099805][   T43] audit: type=1400 audit(2000000005.509:405): avc:  denied  { open } for  pid=6382 comm="syz.1.138" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   58.181107][ T6347] usb 7-1: reset high-speed USB device number 3 using dummy_hcd
[   58.183062][ T6347] usb 7-1: device reset changed ep0 maxpacket size!
[   58.188813][ T6347] cdc_wdm 7-1:1.0: Error autopm - -16
[   58.192644][ T5804] usb 7-1: USB disconnect, device number 3
[   58.229052][ T6390] bond1: option mode: unable to set because the bond device has slaves
[   58.230252][ T6390] netlink: 'syz.1.139': attribute type 10 has an invalid length.
[   58.237745][ T6390] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   58.335520][ T5804] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   58.390673][ T6401] netlink: 224 bytes leftover after parsing attributes in process `syz.4.143'.
[   58.494602][ T5804] usb 7-1: Using ep0 maxpacket: 16
[   58.495229][ T5804] usb 7-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40
[   58.500554][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.500575][ T5804] usb 7-1: Product: syz
[   58.500588][ T5804] usb 7-1: Manufacturer: syz
[   58.500599][ T5804] usb 7-1: SerialNumber: syz
[   58.521857][ T6411] fuse: fd is not a fuse device
[   58.592669][ T6411] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[   58.666973][ T6419] FAULT_INJECTION: forcing a failure.
[   58.666973][ T6419] name failslab, interval 1, probability 0, space 0, times 0
[   58.666996][ T6419] CPU: 2 UID: 0 PID: 6419 Comm: syz.1.152 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   58.667012][ T6419] Tainted: [L]=SOFTLOCKUP
[   58.667016][ T6419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.667022][ T6419] Call Trace:
[   58.667027][ T6419]  <TASK>
[   58.667032][ T6419]  dump_stack_lvl+0x100/0x190
[   58.667053][ T6419]  should_fail_ex.cold+0x5/0xa
[   58.667073][ T6419]  should_failslab+0xc2/0x120
[   58.667091][ T6419]  __kmalloc_cache_noprof+0x91/0x6d0
[   58.667104][ T6419]  ? bioset_init+0x575/0x8a0
[   58.667126][ T6419]  bioset_init+0x575/0x8a0
[   58.667144][ T6419]  ? __pfx_bioset_init+0x10/0x10
[   58.667160][ T6419]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   58.667171][ T6419]  ? percpu_ref_init+0xec/0x3f0
[   58.667191][ T6419]  ? percpu_ref_init+0x244/0x3f0
[   58.667209][ T6419]  mddev_init+0x17c/0x820
[   58.667241][ T6419]  md_alloc+0xc7/0x10a0
[   58.667257][ T6419]  md_alloc_and_put+0x16/0xb0
[   58.667271][ T6419]  add_named_array+0x27d/0x3a0
[   58.667283][ T6419]  ? __pfx_add_named_array+0x10/0x10
[   58.667304][ T6419]  param_attr_store+0x199/0x300
[   58.667322][ T6419]  ? __pfx_param_attr_store+0x10/0x10
[   58.667335][ T6419]  module_attr_store+0x58/0x80
[   58.667347][ T6419]  ? __pfx_module_attr_store+0x10/0x10
[   58.667358][ T6419]  sysfs_kf_write+0xf2/0x150
[   58.667375][ T6419]  kernfs_fop_write_iter+0x3e0/0x5f0
[   58.667388][ T6419]  ? __pfx_sysfs_kf_write+0x10/0x10
[   58.667404][ T6419]  vfs_write+0x6af/0x1050
[   58.667418][ T6419]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   58.667433][ T6419]  ? __pfx_vfs_write+0x10/0x10
[   58.667444][ T6419]  ? find_held_lock+0x2b/0x80
[   58.667471][ T6419]  ksys_write+0x12a/0x250
[   58.667483][ T6419]  ? __pfx_ksys_write+0x10/0x10
[   58.667501][ T6419]  do_syscall_64+0x123/0x790
[   58.667515][ T6419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.667527][ T6419] RIP: 0033:0x7f01ed59e159
[   58.667537][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.667547][ T6419] RSP: 002b:00007f01ee38e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   58.667559][ T6419] RAX: ffffffffffffffda RBX: 00007f01ed825fa0 RCX: 00007f01ed59e159
[   58.667567][ T6419] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000005
[   58.667573][ T6419] RBP: 00007f01ed63506b R08: 0000000000000000 R09: 0000000000000000
[   58.667579][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.667606][ T6419] R13: 00007f01ed826038 R14: 00007f01ed825fa0 R15: 00007ffe38e49238
[   58.667624][ T6419]  </TASK>
[   58.668437][ T6419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   58.756225][ T6421] bond1: option mode: unable to set because the bond device has slaves
[   58.757425][ T6421] netlink: 'syz.4.150': attribute type 10 has an invalid length.
[   58.762200][ T6421] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   58.900889][ T6442] bond1: option mode: unable to set because the bond device has slaves
[   58.901650][ T6442] netlink: 'syz.1.165': attribute type 10 has an invalid length.
[   58.905794][ T6442] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   58.915600][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   59.140786][ T6457] syz.4.163 uses obsolete (PF_INET,SOCK_PACKET)
[   59.287977][ T6459] netlink: 'syz.3.162': attribute type 30 has an invalid length.
[   59.304006][ T6459] netlink: 'syz.3.162': attribute type 30 has an invalid length.
[   59.314594][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.314635][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.314665][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.314693][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.396281][ T5740] Bluetooth: hci3: command tx timeout
[   59.537013][ T6469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1015 sclass=netlink_tcpdiag_socket pid=6469 comm=syz.4.170
[   59.594113][ T6470] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[   59.594137][ T6470] CPU: 2 UID: 0 PID: 6470 Comm: syz.4.170 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   59.594162][ T6470] Tainted: [L]=SOFTLOCKUP
[   59.594169][ T6470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.594179][ T6470] Call Trace:
[   59.594185][ T6470]  <TASK>
[   59.594193][ T6470]  dump_stack_lvl+0x100/0x190
[   59.594226][ T6470]  sysfs_warn_dup.cold+0x1c/0x28
[   59.594254][ T6470]  sysfs_create_dir_ns+0x24b/0x2b0
[   59.594281][ T6470]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   59.594305][ T6470]  ? find_held_lock+0x2b/0x80
[   59.594332][ T6470]  ? kobject_add_internal+0x25f/0x930
[   59.594372][ T6470]  ? kobject_add_internal+0x25f/0x930
[   59.594398][ T6470]  ? class_dir_child_ns_type+0xd/0x60
[   59.594427][ T6470]  kobject_add_internal+0x2c8/0x930
[   59.594454][ T6470]  kobject_add+0x16a/0x1e0
[   59.594477][ T6470]  ? __pfx_kobject_add+0x10/0x10
[   59.594501][ T6470]  ? get_device_parent+0x1b3/0x4c0
[   59.594525][ T6470]  ? kobject_put+0xb9/0x640
[   59.594578][ T6470]  device_add+0x294/0x1970
[   59.594607][ T6470]  ? lockdep_init_map_type+0x5c/0x250
[   59.594627][ T6470]  ? __pfx_device_add+0x10/0x10
[   59.594651][ T6470]  ? lockdep_init_map_type+0x5c/0x250
[   59.594673][ T6470]  ? __init_waitqueue_head+0xca/0x150
[   59.594708][ T6470]  tty_register_device_attr+0x388/0x7f0
[   59.594732][ T6470]  ? lockdep_init_map_type+0x5c/0x250
[   59.594754][ T6470]  ? __pfx_tty_register_device_attr+0x10/0x10
[   59.594782][ T6470]  ? tty_port_init+0x156/0x1c0
[   59.594809][ T6470]  gsm_activate_mux+0x155/0x2a0
[   59.594835][ T6470]  gsmld_ioctl+0xbbc/0x15c0
[   59.594867][ T6470]  ? __pfx_gsmld_ioctl+0x10/0x10
[   59.594912][ T6470]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   59.594935][ T6470]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[   59.594958][ T6470]  ? __pfx_gsmld_ioctl+0x10/0x10
[   59.594982][ T6470]  tty_ioctl+0x11b4/0x1640
[   59.595083][ T6470]  ? __pfx_tty_ioctl+0x10/0x10
[   59.595113][ T6470]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   59.595139][ T6470]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   59.595165][ T6470]  ? __fget_files+0x34/0x3d0
[   59.595202][ T6470]  ? selinux_file_ioctl+0x13b/0x290
[   59.595224][ T6470]  ? selinux_file_ioctl+0xb6/0x290
[   59.595245][ T6470]  ? __pfx_tty_ioctl+0x10/0x10
[   59.595267][ T6470]  __x64_sys_ioctl+0x18e/0x210
[   59.595291][ T6470]  do_syscall_64+0x123/0x790
[   59.595315][ T6470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.595335][ T6470] RIP: 0033:0x7fd9d039e159
[   59.595355][ T6470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.595373][ T6470] RSP: 002b:00007fd9d11ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   59.595395][ T6470] RAX: ffffffffffffffda RBX: 00007fd9d0626090 RCX: 00007fd9d039e159
[   59.595408][ T6470] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005
[   59.595420][ T6470] RBP: 00007fd9d043506b R08: 0000000000000000 R09: 0000000000000000
[   59.595431][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.595442][ T6470] R13: 00007fd9d0626128 R14: 00007fd9d0626090 R15: 00007fff85984838
[   59.595468][ T6470]  </TASK>
[   59.595659][ T6470] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[   59.659905][ T6476] bond1: option mode: unable to set because the bond device has slaves
[   59.660676][ T6476] netlink: 'syz.3.171': attribute type 10 has an invalid length.
[   59.936571][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.936776][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.938712][ T6497] fuse: Unknown parameter '184467440737095516150x0000000000000008'
[   60.138995][ T5804] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   60.139675][ T5804] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   60.168022][ T5804] usb 7-1: USB disconnect, device number 4
[   60.184512][   T50] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   60.207546][ T6482] udevd[6482]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   60.314613][   T50] usb 6-1: device descriptor read/64, error -71
[   60.443023][ T5736] bond0: (slave syz_tun): Releasing backup interface
[   60.444877][ T5876] net_ratelimit: 8 callbacks suppressed
[   60.444892][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   60.533179][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.574577][   T50] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   60.616358][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.660119][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.663627][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.665148][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.668665][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.669762][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.714690][   T50] usb 6-1: device descriptor read/64, error -71
[   60.723072][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.753990][ T6526] syz.4.185 (6526): attempted to duplicate a private mapping with mremap.  This is not supported.
[   60.796124][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.824640][   T50] usb usb6-port1: attempt power cycle
[   60.952602][   T13] bridge_slave_1: left allmulticast mode
[   60.952632][   T13] bridge_slave_1: left promiscuous mode
[   60.952830][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.958706][   T13] bridge_slave_0: left allmulticast mode
[   60.958729][   T13] bridge_slave_0: left promiscuous mode
[   60.959014][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.994820][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.122138][   T13] bond0 (unregistering): left promiscuous mode
[   61.122159][   T13] bond_slave_0: left promiscuous mode
[   61.122272][   T13] bond_slave_1: left promiscuous mode
[   61.123381][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.127838][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.129055][   T13] bond0 (unregistering): Released all slaves
[   61.133445][   T13] bond1 (unregistering): Released all slaves
[   61.164473][   T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   61.188838][   T50] usb 6-1: device descriptor read/8, error -71
[   61.338682][ T6551] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   61.338725][ T6551] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   61.424487][   T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   61.428693][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6
[   61.429052][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.429131][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.429263][ T6516] bridge_slave_0: entered allmulticast mode
[   61.430650][ T6516] bridge_slave_0: entered promiscuous mode
[   61.432697][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.432801][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.432888][ T6516] bridge_slave_1: entered allmulticast mode
[   61.434186][ T6516] bridge_slave_1: entered promiscuous mode
[   61.445303][   T50] usb 6-1: device descriptor read/8, error -71
[   61.474968][ T5089] Bluetooth: hci3: command tx timeout
[   61.493265][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.500226][   T13] batadv0: left promiscuous mode
[   61.508401][   T13] hsr_slave_0: left promiscuous mode
[   61.509930][   T13] hsr_slave_1: left promiscuous mode
[   61.510751][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.510770][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.513520][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.513536][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.523940][   T13] veth1_macvtap: left promiscuous mode
[   61.523972][   T13] veth0_macvtap: left promiscuous mode
[   61.524138][   T13] veth1_vlan: left promiscuous mode
[   61.524194][   T13] veth0_vlan: left promiscuous mode
[   61.554851][   T50] usb usb6-port1: unable to enumerate USB device
[   61.689507][   T13] team0 (unregistering): Port device team_slave_1 removed
[   61.710272][   T13] team0 (unregistering): Port device team_slave_0 removed
[   61.807490][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.852814][ T6516] team0: Port device team_slave_0 added
[   61.855223][ T6516] team0: Port device team_slave_1 added
[   61.873741][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.873758][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.873776][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.877420][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.877434][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.877453][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.927243][ T6516] hsr_slave_0: entered promiscuous mode
[   61.927913][ T6516] hsr_slave_1: entered promiscuous mode
[   61.928276][ T6516] debugfs: 'hsr0' already exists in 'hsr'
[   61.928295][ T6516] Cannot create hsr debugfs directory
[   62.051664][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.107001][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7
[   62.139160][ T6516] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   62.142329][ T6516] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.143116][ T6516] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   62.147225][ T6516] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.148262][ T6516] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   62.156232][ T6516] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.156881][ T6516] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   62.162754][ T6516] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   62.214493][   T43] kauditd_printk_skb: 33 callbacks suppressed
[   62.214513][   T43] audit: type=1400 audit(2000000009.619:439): avc:  denied  { write } for  pid=6577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.221155][   T43] audit: type=1400 audit(2000000009.629:440): avc:  denied  { ioctl } for  pid=6584 comm="syz.3.192" path="socket:[13932]" dev="sockfs" ino=13932 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.221372][ T6585] syzkaller1: entered promiscuous mode
[   62.221390][ T6585] syzkaller1: entered allmulticast mode
[   62.260668][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.278107][ T6516] 8021q: adding VLAN 0 to HW filter on device team0
[   62.281390][   T43] audit: type=1400 audit(2000000009.689:441): avc:  denied  { write } for  pid=6588 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.283850][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.283936][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.296895][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.296941][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.337912][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8
[   62.416463][   T43] audit: type=1400 audit(2000000009.829:442): avc:  denied  { write } for  pid=6593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.472498][   T43] audit: type=1400 audit(2000000009.879:443): avc:  denied  { mount } for  pid=6600 comm="syz.3.193" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   62.477132][   T43] audit: type=1400 audit(2000000009.889:444): avc:  denied  { write } for  pid=6598 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.491925][ T6603] ./dev/sda1: Can't lookup blockdev
[   62.527834][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9
[   62.564186][   T43] audit: type=1400 audit(2000000009.969:445): avc:  denied  { unmount } for  pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   62.617928][ T6629] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   62.617971][ T6629] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   62.675258][ T5089] Bluetooth: hci2: command tx timeout
[   62.716170][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.772976][ T6643] nbd3: detected capacity change from 0 to 24
[   62.781293][ T6643] block nbd3: shutting down sockets
[   62.784518][    C3] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.784602][    C3] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.785488][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.785507][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.786101][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.786125][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.786213][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.786234][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.786321][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.786342][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.786724][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.786748][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.786840][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.786861][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.786940][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.786959][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.786984][ T6482] ldm_validate_partition_table(): Disk read failed.
[   62.787108][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.787128][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.787442][ T5103] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   62.787464][ T5103] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.787890][ T6482] Dev nbd3: unable to read RDB block 0
[   62.788527][ T6482]  nbd3: unable to read partition table
[   62.788684][ T6482] nbd3: partition table beyond EOD, truncated
[   62.796531][ T6482] ldm_validate_partition_table(): Disk read failed.
[   62.798089][ T6482] Dev nbd3: unable to read RDB block 0
[   62.798371][ T6482]  nbd3: unable to read partition table
[   62.798571][ T6482] nbd3: partition table beyond EOD, truncated
[   62.861858][   T43] audit: type=1400 audit(2000000010.269:446): avc:  denied  { write } for  pid=6647 comm="syz.3.197" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   62.919194][ T6516] veth0_vlan: entered promiscuous mode
[   62.925345][ T6516] veth1_vlan: entered promiscuous mode
[   62.937707][   T43] audit: type=1400 audit(2000000010.349:447): avc:  denied  { mounton } for  pid=6651 comm="syz.3.198" path="/55/file1/file0" dev="autofs" ino=14008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[   62.944224][ T6516] veth0_macvtap: entered promiscuous mode
[   62.947948][ T6516] veth1_macvtap: entered promiscuous mode
[   62.957221][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.961176][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.974884][ T5542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.975372][ T5542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.975407][ T5542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.975436][ T5542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.975611][   T43] audit: type=1400 audit(2000000010.389:448): avc:  denied  { mount } for  pid=6651 comm="syz.3.198" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   63.033358][ T6611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.033373][ T6611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.057741][ T6660] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

`€Ý—‚Õb—¢áì"^‰é¶ø6Có�2W
[   63.057741][ T6660] ø¬Ò7
[   63.064703][ T6611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.064716][ T6611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.076838][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.132450][ T6665] bond1: entered allmulticast mode
[   63.132882][ T6665] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.140562][ T6665] netlink: 'syz.5.180': attribute type 10 has an invalid length.
[   63.141069][ T6665] syz_tun: entered promiscuous mode
[   63.145533][ T6665] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   63.169706][ T6668] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   63.175917][ T6611] Bluetooth: hci4: Frame reassembly failed (-84)
[   63.187975][ T6671] random: crng reseeded on system resumption
[   63.325983][ T6680] __nla_validate_parse: 5 callbacks suppressed
[   63.326002][ T6680] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.206'.
[   63.326015][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.206'.
[   63.474744][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.752502][ T6525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   64.083846][ T6698] bond1: option mode: unable to set because the bond device has slaves
[   64.084570][ T6698] netlink: 'syz.4.212': attribute type 10 has an invalid length.
[   64.115303][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   64.253605][ T6715] openvswitch: netlink: Message has 142 unknown bytes.
[   64.364247][ T6728] bond1: option mode: unable to set because the bond device is up
[   64.364790][ T6728] netlink: 'syz.5.223': attribute type 10 has an invalid length.
[   64.374274][ T6728] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   64.378047][ T6728] macvlan2: entered allmulticast mode
[   64.378076][ T6728] bond0: entered allmulticast mode
[   64.378083][ T6728] bond_slave_0: entered allmulticast mode
[   64.378092][ T6728] bond_slave_1: entered allmulticast mode
[   64.378101][ T6728] syz_tun: entered allmulticast mode
[   64.378133][ T6728] bond_slave_0: entered promiscuous mode
[   64.378152][ T6728] bond_slave_1: entered promiscuous mode
[   64.378479][ T6728] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   64.457607][ T6743] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   64.764502][ T5740] Bluetooth: hci2: command tx timeout
[   64.834926][ T6776] bond1: option mode: unable to set because the bond device has slaves
[   64.835461][ T6776] netlink: 'syz.4.235': attribute type 10 has an invalid length.
[   64.908201][ T6781] netlink: 'syz.4.237': attribute type 4 has an invalid length.
[   64.908862][ T6782] netlink: 'syz.4.237': attribute type 4 has an invalid length.
[   64.919052][ T6782] netlink: 'syz.4.237': attribute type 4 has an invalid length.
[   64.919115][ T6782] netlink: 'syz.4.237': attribute type 4 has an invalid length.
[   64.919173][ T6782] netlink: 'syz.4.237': attribute type 4 has an invalid length.
[   64.919224][ T6782] netlink: 'syz.4.237': attribute type 4 has an invalid length.
[   65.159808][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.160225][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.162312][ T1348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.245139][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   65.245177][ T5740] Bluetooth: hci4: command 0x1003 tx timeout
[   65.314694][ T6807] bond1: option mode: unable to set because the bond device has slaves
[   65.484652][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'.
[   65.806275][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.953393][ T6857] bond1: option mode: unable to set because the bond device has slaves
[   66.101355][ T6889] tunl0: entered promiscuous mode
[   66.102212][ T6889] netlink: 9 bytes leftover after parsing attributes in process `syz.5.258'.
[   66.103720][ T6892] netlink: 9 bytes leftover after parsing attributes in process `syz.5.258'.
[   66.153749][ T5968] bond0: (slave syz_tun): Releasing backup interface
[   66.156168][ T5968] syz_tun (unregistering): left allmulticast mode
[   66.194777][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.260942][ T5542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.328933][ T5542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.421029][ T5542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.586157][ T6905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.599976][ T5542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.661185][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.664336][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.665576][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.666952][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.667535][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.723282][ T6916] bond1: option mode: unable to set because the bond device has slaves
[   66.741994][ T5542] bridge_slave_1: left allmulticast mode
[   66.742010][ T5542] bridge_slave_1: left promiscuous mode
[   66.742117][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.753937][ T5542] bridge_slave_0: left allmulticast mode
[   66.753962][ T5542] bridge_slave_0: left promiscuous mode
[   66.754148][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.773672][ T5542] bond_slave_0: left promiscuous mode
[   66.773705][ T5542] bond_slave_1: left promiscuous mode
[   66.844578][ T5740] Bluetooth: hci2: command tx timeout
[   66.892531][ T5542] bond0 (unregistering): left allmulticast mode
[   66.892552][ T5542] bond_slave_0: left allmulticast mode
[   66.892568][ T5542] bond_slave_1: left allmulticast mode
[   66.897508][ T5542] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[   66.897934][ T5542] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[   66.906270][ T5542] macvlan2 (unregistering): left allmulticast mode
[   66.913796][ T5542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.919806][ T5542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.921233][ T5542] bond0 (unregistering): Released all slaves
[   66.928091][ T5542] bond1 (unregistering): Released all slaves
[   67.184100][ T6516] bond0: (slave syz_tun): Releasing backup interface
[   67.185634][ T6516] syz_tun (unregistering): left allmulticast mode
[   67.189280][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10
[   67.232801][ T5542] hsr_slave_0: left promiscuous mode
[   67.233299][ T5542] hsr_slave_1: left promiscuous mode
[   67.233721][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.233732][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.234242][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.234253][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.243750][ T5542] veth1_macvtap: left promiscuous mode
[   67.243778][ T5542] veth0_macvtap: left promiscuous mode
[   67.243857][ T5542] veth1_vlan: left promiscuous mode
[   67.243943][ T5542] veth0_vlan: left promiscuous mode
[   67.397048][ T5542] team0 (unregistering): Port device team_slave_1 removed
[   67.403785][ T5542] team0 (unregistering): Port device team_slave_0 removed
[   67.475767][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.481533][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.483499][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.497864][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.500105][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.583573][   T43] kauditd_printk_skb: 42 callbacks suppressed
[   67.583586][   T43] audit: type=1400 audit(2000000014.989:491): avc:  denied  { write } for  pid=6952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.756707][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.756789][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.756871][ T6909] bridge_slave_0: entered allmulticast mode
[   67.758736][ T6909] bridge_slave_0: entered promiscuous mode
[   67.760830][   T43] audit: type=1400 audit(2000000015.169:492): avc:  denied  { write } for  pid=6955 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.765627][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.765674][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.765748][ T6909] bridge_slave_1: entered allmulticast mode
[   67.767172][ T6909] bridge_slave_1: entered promiscuous mode
[   67.801760][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.803334][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.829397][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11
[   67.831872][ T6909] team0: Port device team_slave_0 added
[   67.834997][ T6909] team0: Port device team_slave_1 added
[   67.862030][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.862041][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.862053][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.876749][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.876764][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.876785][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.922855][ T6909] hsr_slave_0: entered promiscuous mode
[   67.924170][ T6909] hsr_slave_1: entered promiscuous mode
[   67.924859][ T6909] debugfs: 'hsr0' already exists in 'hsr'
[   67.924877][ T6909] Cannot create hsr debugfs directory
[   67.996794][   T43] audit: type=1400 audit(2000000015.409:493): avc:  denied  { write } for  pid=6970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.102814][   T43] audit: type=1400 audit(2000000015.509:494): avc:  denied  { write } for  pid=6975 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.138234][ T5542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.147239][ T6979] bond1: option mode: unable to set because the bond device has slaves
[   68.147749][ T6979] validate_nla: 65 callbacks suppressed
[   68.147758][ T6979] netlink: 'syz.1.273': attribute type 10 has an invalid length.
[   68.155994][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12
[   68.173348][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'.
[   68.173370][ T6982] netlink: 'syz.1.274': attribute type 7 has an invalid length.
[   68.173376][ T6982] netlink: 'syz.1.274': attribute type 8 has an invalid length.
[   68.173383][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[   68.228873][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'.
[   68.228915][ T6985] netlink: 'syz.1.274': attribute type 7 has an invalid length.
[   68.228924][ T6985] netlink: 'syz.1.274': attribute type 8 has an invalid length.
[   68.228999][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[   68.269882][ T5542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.313666][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.313838][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.313960][ T6946] bridge_slave_0: entered allmulticast mode
[   68.316007][ T6946] bridge_slave_0: entered promiscuous mode
[   68.318652][ T6909] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   68.322496][ T6909] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.322986][ T6909] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   68.327181][ T6909] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.327482][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.327599][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.327717][ T6946] bridge_slave_1: entered allmulticast mode
[   68.328949][ T6946] bridge_slave_1: entered promiscuous mode
[   68.348378][ T6946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.350072][ T6946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.360395][ T6909] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   68.366779][ T6909] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.382231][ T5542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.397808][ T6909] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   68.400100][ T6909] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.401401][ T6946] team0: Port device team_slave_0 added
[   68.402637][   T43] audit: type=1400 audit(2000000015.809:495): avc:  denied  { write } for  pid=6993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.403121][ T6946] team0: Port device team_slave_1 added
[   68.452886][ T6669] bond0: (slave syz_tun): Releasing backup interface
[   68.453458][ T6669] syz_tun (unregistering): left allmulticast mode
[   68.464243][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.464255][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.464269][ T6946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.466406][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.466418][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.466439][ T6946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.471887][   T43] audit: type=1400 audit(2000000015.879:496): avc:  denied  { write } for  pid=7002 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.514669][ T5542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.534189][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13
[   68.558277][ T6946] hsr_slave_0: entered promiscuous mode
[   68.559494][ T6946] hsr_slave_1: entered promiscuous mode
[   68.560300][ T6946] debugfs: 'hsr0' already exists in 'hsr'
[   68.560324][ T6946] Cannot create hsr debugfs directory
[   68.674533][ T5740] Bluetooth: hci3: command tx timeout
[   68.695591][   T43] audit: type=1400 audit(2000000016.109:497): avc:  denied  { write } for  pid=7010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.749773][   T43] audit: type=1400 audit(2000000016.159:498): avc:  denied  { write } for  pid=7013 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.752044][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.764111][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.767221][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.768823][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.769594][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.772704][ T5542] bridge_slave_1: left allmulticast mode
[   68.772722][ T5542] bridge_slave_1: left promiscuous mode
[   68.772853][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.789532][ T5542] bridge_slave_0: left allmulticast mode
[   68.789556][ T5542] bridge_slave_0: left promiscuous mode
[   68.789765][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.804047][ T5542] bond_slave_0: left promiscuous mode
[   68.804079][ T5542] bond_slave_1: left promiscuous mode
[   68.921486][ T5542] bond0 (unregistering): left allmulticast mode
[   68.921508][ T5542] bond_slave_0: left allmulticast mode
[   68.921521][ T5542] bond_slave_1: left allmulticast mode
[   68.923346][ T5542] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[   68.923663][ T5542] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[   68.924148][ T5542] macvlan2 (unregistering): left allmulticast mode
[   68.939479][ T5542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.941582][ T5542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.942914][ T5542] bond0 (unregistering): Released all slaves
[   68.947049][ T5542] bond1 (unregistering): Released all slaves
[   68.980210][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.076513][ T6909] 8021q: adding VLAN 0 to HW filter on device team0
[   69.077654][ T6946] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   69.079936][ T6946] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   69.080865][ T6946] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   69.083067][ T6946] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   69.088039][ T6946] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   69.104747][ T6946] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   69.105554][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.105600][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.105817][ T6946] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   69.107516][ T6946] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   69.111266][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.111315][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.150035][   T43] audit: type=1400 audit(2000000016.559:499): avc:  denied  { write } for  pid=7026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.194747][   T43] audit: type=1400 audit(2000000016.609:500): avc:  denied  { write } for  pid=7036 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.224340][ T5442] 8021q: adding VLAN 0 to HW filter on device eth14
[   69.259801][ T5542] hsr_slave_0: left promiscuous mode
[   69.260437][ T5542] hsr_slave_1: left promiscuous mode
[   69.261097][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.261114][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.261805][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.261821][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.267029][ T5542] veth1_macvtap: left promiscuous mode
[   69.267072][ T5542] veth0_macvtap: left promiscuous mode
[   69.267119][ T5542] veth1_vlan: left promiscuous mode
[   69.267149][ T5542] veth0_vlan: left promiscuous mode
[   69.422028][ T5542] team0 (unregistering): Port device team_slave_1 removed
[   69.430870][ T5542] team0 (unregistering): Port device team_slave_0 removed
[   69.599222][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.635232][ T6946] 8021q: adding VLAN 0 to HW filter on device team0
[   69.635422][ T5089] Bluetooth: hci2: command tx timeout
[   69.683788][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.683836][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.703030][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.703086][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.721831][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.721907][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.721964][ T7014] bridge_slave_0: entered allmulticast mode
[   69.722739][ T7014] bridge_slave_0: entered promiscuous mode
[   69.724180][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.724220][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.724271][ T7014] bridge_slave_1: entered allmulticast mode
[   69.725259][ T7014] bridge_slave_1: entered promiscuous mode
[   69.750446][ T7014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.753161][ T5442] 8021q: adding VLAN 0 to HW filter on device eth15
[   69.754573][ T7014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.788422][ T7014] team0: Port device team_slave_0 added
[   69.794702][ T7014] team0: Port device team_slave_1 added
[   69.815979][ T7014] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.815991][ T7014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.816003][ T7014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.817071][ T7014] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.817078][ T7014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.817092][ T7014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.850567][ T7014] hsr_slave_0: entered promiscuous mode
[   69.851098][ T7014] hsr_slave_1: entered promiscuous mode
[   69.851533][ T7014] debugfs: 'hsr0' already exists in 'hsr'
[   69.851545][ T7014] Cannot create hsr debugfs directory
[   69.882898][ T5542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.906082][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.035390][ T5542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.059971][ T5442] 8021q: adding VLAN 0 to HW filter on device eth16
[   70.101054][ T5542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.105893][ T7014] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   70.110945][ T7014] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.111608][ T7014] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   70.117441][ T7014] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.122054][ T7014] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   70.130444][ T7014] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.146467][ T5542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.152657][ T7014] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   70.156039][ T7014] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.165658][ T6909] veth0_vlan: entered promiscuous mode
[   70.180154][ T6909] veth1_vlan: entered promiscuous mode
[   70.229592][ T6909] veth0_macvtap: entered promiscuous mode
[   70.236778][ T6946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.241285][ T6909] veth1_macvtap: entered promiscuous mode
[   70.264133][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.288876][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.314968][ T7014] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.372022][ T7014] 8021q: adding VLAN 0 to HW filter on device team0
[   70.387314][ T5542] bridge_slave_1: left allmulticast mode
[   70.387332][ T5542] bridge_slave_1: left promiscuous mode
[   70.387473][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.393112][ T5542] bridge_slave_0: left allmulticast mode
[   70.393133][ T5542] bridge_slave_0: left promiscuous mode
[   70.393281][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.405604][ T5542] bond_slave_0: left promiscuous mode
[   70.405709][ T5542] bond_slave_1: left promiscuous mode
[   70.512019][ T5542] bond0 (unregistering): left allmulticast mode
[   70.512046][ T5542] bond_slave_0: left allmulticast mode
[   70.512063][ T5542] bond_slave_1: left allmulticast mode
[   70.514185][ T5542] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[   70.520445][ T5542] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[   70.526279][ T5542] macvlan2 (unregistering): left allmulticast mode
[   70.532059][ T5542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.537157][ T5542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.546113][ T5542] bond0 (unregistering): Released all slaves
[   70.551279][ T5542] bond1 (unregistering): Released all slaves
[   70.563996][ T5442] 8021q: adding VLAN 0 to HW filter on device eth17
[   70.572563][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.572609][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.590179][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.590238][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.616616][ T6611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.616631][ T6611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.649202][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.649255][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.649275][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.649294][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.666926][ T7014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.683481][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.683503][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.707652][ T6946] veth0_vlan: entered promiscuous mode
[   70.717702][ T6946] veth1_vlan: entered promiscuous mode
[   70.756024][ T5089] Bluetooth: hci3: command tx timeout
[   70.775877][ T6946] veth0_macvtap: entered promiscuous mode
[   70.777849][ T6946] veth1_macvtap: entered promiscuous mode
[   70.788711][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.820134][ T5542] hsr_slave_0: left promiscuous mode
[   70.821304][ T5542] hsr_slave_1: left promiscuous mode
[   70.821841][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.821859][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.823032][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.823047][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.830320][ T5542] veth1_macvtap: left promiscuous mode
[   70.830344][ T5542] veth0_macvtap: left promiscuous mode
[   70.830399][ T5542] veth1_vlan: left promiscuous mode
[   70.830429][ T5542] veth0_vlan: left promiscuous mode
[   70.837162][ T5089] Bluetooth: hci0: command tx timeout
[   70.907811][ T7119] ptp ptp0: new virtual clock ptp2
[   70.907827][ T7119] ptp ptp0: guarantee physical clock free running
[   70.910878][ T7119] ptp ptp0: delete virtual clock ptp2
[   70.919859][ T7119] ptp ptp0: only physical clock in use now
[   70.996457][ T5542] team0 (unregistering): Port device team_slave_1 removed
[   71.005204][ T7123] netlink: 'syz.6.280': attribute type 10 has an invalid length.
[   71.012793][ T5542] team0 (unregistering): Port device team_slave_0 removed
[   71.084966][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.086364][ T5442] 8021q: adding VLAN 0 to HW filter on device eth18
[   71.109916][ T7122] bond1: entered allmulticast mode
[   71.111524][ T7122] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.112670][ T7123] syz_tun: entered promiscuous mode
[   71.117526][ T7123] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   71.122092][ T7124] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   71.123415][ T7124] bond1: (slave macvlan2): speed changed to 0 on port 1
[   71.123815][ T7124] macvlan2: entered allmulticast mode
[   71.123825][ T7124] bond0: entered allmulticast mode
[   71.123832][ T7124] bond_slave_0: entered allmulticast mode
[   71.123841][ T7124] bond_slave_1: entered allmulticast mode
[   71.123849][ T7124] syz_tun: entered allmulticast mode
[   71.123874][ T7124] bond_slave_0: entered promiscuous mode
[   71.123891][ T7124] bond_slave_1: entered promiscuous mode
[   71.124447][ T7124] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   71.144630][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.144674][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.144700][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.144720][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.275566][ T7131] netlink: 256 bytes leftover after parsing attributes in process `syz.6.282'.
[   71.281391][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.281414][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.311490][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.311513][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.413326][ T3380] hid-sensor-hub 0003:1234:5678.0002: hidraw1: USB HID v0.01 Device [syz0] on syz0
[   71.449362][ T7014] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.456103][ T7148] program syz.6.284 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   71.459243][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.284'.
[   71.483574][ T7146] fido_id[7146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   71.501166][ T5442] 8021q: adding VLAN 0 to HW filter on device eth19
[   71.560389][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[   71.560443][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[   71.680256][ T7014] veth0_vlan: entered promiscuous mode
[   71.680552][ T7176] syzkaller1: entered promiscuous mode
[   71.680562][ T7176] syzkaller1: entered allmulticast mode
[   71.699652][ T7014] veth1_vlan: entered promiscuous mode
[   71.714581][ T5089] Bluetooth: hci2: command tx timeout
[   71.718014][ T7014] veth0_macvtap: entered promiscuous mode
[   71.726150][ T7014] veth1_macvtap: entered promiscuous mode
[   71.735319][ T7014] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.740342][ T7014] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.758590][ T5442] 8021q: adding VLAN 0 to HW filter on device eth20
[   71.807159][ T5997] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.807189][ T5997] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.807208][ T5997] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.807227][ T5997] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.809346][ T6611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.809358][ T6611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.829003][ T6615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.829020][ T6615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.854588][   T50] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[   71.948344][   T35] hid (null): unknown global tag 0xe
[   71.953220][   T35] hid-generic 0004:0003:0009.0003: unknown global tag 0xe
[   71.953237][   T35] hid-generic 0004:0003:0009.0003: item 0 0 1 14 parsing failed
[   71.953511][   T35] hid-generic 0004:0003:0009.0003: probe with driver hid-generic failed with error -22
[   71.984973][   T50] usb 12-1: device descriptor read/64, error -71
[   72.010474][ T7191] bond1: entered allmulticast mode
[   72.010921][ T7191] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.012477][ T5442] 8021q: adding VLAN 0 to HW filter on device eth21
[   72.014204][ T7191] netlink: 'syz.8.288': attribute type 10 has an invalid length.
[   72.017424][ T7191] syz_tun: entered promiscuous mode
[   72.023918][ T7191] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   72.039159][ T7191] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   72.039614][ T7191] bond1: (slave macvlan2): speed changed to 0 on port 1
[   72.040230][ T7191] macvlan2: entered allmulticast mode
[   72.040243][ T7191] bond0: entered allmulticast mode
[   72.040251][ T7191] bond_slave_0: entered allmulticast mode
[   72.040262][ T7191] bond_slave_1: entered allmulticast mode
[   72.040272][ T7191] syz_tun: entered allmulticast mode
[   72.040303][ T7191] bond_slave_0: entered promiscuous mode
[   72.040322][ T7191] bond_slave_1: entered promiscuous mode
[   72.040668][ T7191] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   72.225143][   T50] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[   72.354636][   T50] usb 12-1: device descriptor read/64, error -71
[   72.464676][   T50] usb usb12-port1: attempt power cycle
[   72.587811][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.588567][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.604290][ T7219] bond_slave_0: left promiscuous mode
[   72.608374][ T7219] bond_slave_1: left promiscuous mode
[   72.743358][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.750580][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.804624][   T50] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[   72.824929][   T50] usb 12-1: device descriptor read/8, error -71
[   72.834572][ T5089] Bluetooth: hci3: command tx timeout
[   72.878706][ T7219] bond0: left allmulticast mode
[   72.878723][ T7219] bond_slave_0: left allmulticast mode
[   72.878732][ T7219] bond_slave_1: left allmulticast mode
[   72.878739][ T7219] syz_tun: left allmulticast mode
[   72.924727][ T5089] Bluetooth: hci0: command tx timeout
[   72.924942][ T5542] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.925020][ T5542] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.925389][ T5997] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.925414][ T5997] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.042699][   T43] kauditd_printk_skb: 21 callbacks suppressed
[   73.042712][   T43] audit: type=1400 audit(2000000020.449:522): avc:  denied  { create } for  pid=7227 comm="syz.6.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   73.043062][   T43] audit: type=1400 audit(2000000020.449:523): avc:  denied  { bind } for  pid=7227 comm="syz.6.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   73.044636][   T43] audit: type=1400 audit(2000000020.449:524): avc:  denied  { listen } for  pid=7227 comm="syz.6.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   73.074629][   T50] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[   73.096582][   T50] usb 12-1: device descriptor read/8, error -71
[   73.206277][   T50] usb usb12-port1: unable to enumerate USB device
[   73.393189][ T7237] Bluetooth: MGMT ver 1.23
[   73.536967][   T43] audit: type=1400 audit(2000000020.949:525): avc:  denied  { write } for  pid=7246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.554618][ T5804] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[   73.581878][   T43] audit: type=1400 audit(2000000020.989:526): avc:  denied  { write } for  pid=7251 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.705013][ T5804] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   73.705906][ T5804] usb 11-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61
[   73.705922][ T5804] usb 11-1: config 0 interface 0 has no altsetting 0
[   73.707611][ T5804] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   73.707623][ T5804] usb 11-1: Product: syz
[   73.707630][ T5804] usb 11-1: Manufacturer: syz
[   73.707638][ T5804] usb 11-1: SerialNumber: syz
[   73.717284][ T5804] usb 11-1: config 0 descriptor??
[   73.718651][ T7241] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[   73.723734][ T5804] usb 11-1: selecting invalid altsetting 0
[   73.795285][ T5089] Bluetooth: hci2: command tx timeout
[   73.801994][   T43] audit: type=1400 audit(2000000021.209:527): avc:  denied  { write } for  pid=7257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.853579][   T43] audit: type=1400 audit(2000000021.259:528): avc:  denied  { write } for  pid=7260 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.922908][ T7241] usb 11-1: BOGUS urb xfer, pipe 0 != type 3
[   74.053089][   T43] audit: type=1400 audit(2000000021.459:529): avc:  denied  { write } for  pid=7269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.141711][   T43] audit: type=1400 audit(2000000021.549:530): avc:  denied  { write } for  pid=7275 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.512954][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.7.305'.
[   74.566508][   T43] audit: type=1400 audit(2000000021.979:531): avc:  denied  { write } for  pid=7288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.926934][ T5089] Bluetooth: hci3: command tx timeout
[   75.004935][ T5089] Bluetooth: hci0: command tx timeout
[   75.055258][ T7311] FAULT_INJECTION: forcing a failure.
[   75.055258][ T7311] name failslab, interval 1, probability 0, space 0, times 0
[   75.055299][ T7311] CPU: 1 UID: 0 PID: 7311 Comm: syz.8.307 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   75.055331][ T7311] Tainted: [L]=SOFTLOCKUP
[   75.055339][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   75.055353][ T7311] Call Trace:
[   75.055361][ T7311]  <TASK>
[   75.055370][ T7311]  dump_stack_lvl+0x100/0x190
[   75.055430][ T7311]  should_fail_ex.cold+0x5/0xa
[   75.055483][ T7311]  should_failslab+0xc2/0x120
[   75.055522][ T7311]  kmem_cache_alloc_noprof+0x92/0x6a0
[   75.055551][ T7311]  ? __kernfs_new_node+0xd2/0xa10
[   75.055580][ T7311]  __kernfs_new_node+0xd2/0xa10
[   75.055607][ T7311]  ? __pfx___kernfs_new_node+0x10/0x10
[   75.055630][ T7311]  ? lock_acquire+0x1d1/0x380
[   75.055655][ T7311]  ? kernfs_root+0x23/0x2a0
[   75.055686][ T7311]  ? find_held_lock+0x2b/0x80
[   75.055716][ T7311]  ? kernfs_root+0xee/0x2a0
[   75.055746][ T7311]  ? kernfs_root+0xee/0x2a0
[   75.055784][ T7311]  kernfs_new_node+0x117/0x150
[   75.055811][ T7311]  __kernfs_create_file+0x53/0x350
[   75.055842][ T7311]  sysfs_add_file_mode_ns+0x207/0x3c0
[   75.055880][ T7311]  internal_create_group+0x593/0xfb0
[   75.055915][ T7311]  ? kernfs_create_dir_ns+0x16f/0x2b0
[   75.055939][ T7311]  ? __pfx_internal_create_group+0x10/0x10
[   75.055972][ T7311]  ? sysfs_create_dir_ns+0x14c/0x2b0
[   75.056003][ T7311]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   75.056033][ T7311]  ? sysfs_create_dir_ns+0x14c/0x2b0
[   75.056066][ T7311]  internal_create_groups+0x9d/0x150
[   75.056108][ T7311]  kobject_add_internal+0x317/0x930
[   75.056151][ T7311]  kobject_add+0x16a/0x1e0
[   75.056181][ T7311]  ? __pfx_kobject_add+0x10/0x10
[   75.056213][ T7311]  ? __pfx_kobject_add+0x10/0x10
[   75.056254][ T7311]  blk_register_queue+0x8d/0x630
[   75.056284][ T7311]  __add_disk+0x7dd/0xf10
[   75.056316][ T7311]  ? find_held_lock+0x2b/0x80
[   75.056350][ T7311]  add_disk_fwnode+0x279/0x480
[   75.056386][ T7311]  md_alloc+0x3cd/0x10a0
[   75.056418][ T7311]  md_alloc_and_put+0x16/0xb0
[   75.056440][ T7311]  add_named_array+0x27d/0x3a0
[   75.056460][ T7311]  ? __pfx_add_named_array+0x10/0x10
[   75.056497][ T7311]  param_attr_store+0x199/0x300
[   75.056525][ T7311]  ? __pfx_param_attr_store+0x10/0x10
[   75.056549][ T7311]  module_attr_store+0x58/0x80
[   75.056570][ T7311]  ? __pfx_module_attr_store+0x10/0x10
[   75.056613][ T7311]  sysfs_kf_write+0xf2/0x150
[   75.056647][ T7311]  kernfs_fop_write_iter+0x3e0/0x5f0
[   75.056670][ T7311]  ? __pfx_sysfs_kf_write+0x10/0x10
[   75.056700][ T7311]  vfs_write+0x6af/0x1050
[   75.056725][ T7311]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   75.056752][ T7311]  ? __pfx_vfs_write+0x10/0x10
[   75.056773][ T7311]  ? find_held_lock+0x2b/0x80
[   75.056823][ T7311]  ksys_write+0x12a/0x250
[   75.056846][ T7311]  ? __pfx_ksys_write+0x10/0x10
[   75.056878][ T7311]  do_syscall_64+0x123/0x790
[   75.056903][ T7311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.056924][ T7311] RIP: 0033:0x7f40fbd9e159
[   75.056943][ T7311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.056962][ T7311] RSP: 002b:00007f40fccc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   75.056985][ T7311] RAX: ffffffffffffffda RBX: 00007f40fc025fa0 RCX: 00007f40fbd9e159
[   75.056999][ T7311] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000006
[   75.057011][ T7311] RBP: 00007f40fbe3506b R08: 0000000000000000 R09: 0000000000000000
[   75.057023][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.057036][ T7311] R13: 00007f40fc026038 R14: 00007f40fc025fa0 R15: 00007fff7c19b208
[   75.057067][ T7311]  </TASK>
[   75.058875][ T7311] kobject: kobject_add_internal failed for queue (error: -12 parent: md0)
[   75.382739][ T7325] syzkaller1: entered promiscuous mode
[   75.382754][ T7325] syzkaller1: entered allmulticast mode
[   75.408231][ T7311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   75.697928][   T25] usb 11-1: USB disconnect, device number 2
[   75.884641][ T5089] Bluetooth: hci2: command tx timeout
[   76.389762][ T7346] FAULT_INJECTION: forcing a failure.
[   76.389762][ T7346] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   76.389785][ T7346] CPU: 2 UID: 0 PID: 7346 Comm: syz.7.315 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   76.389801][ T7346] Tainted: [L]=SOFTLOCKUP
[   76.389805][ T7346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   76.389815][ T7346] Call Trace:
[   76.389819][ T7346]  <TASK>
[   76.389825][ T7346]  dump_stack_lvl+0x100/0x190
[   76.389847][ T7346]  should_fail_ex.cold+0x5/0xa
[   76.389861][ T7346]  ? prepare_alloc_pages+0x16d/0x5b0
[   76.389878][ T7346]  should_fail_alloc_page+0xeb/0x140
[   76.389896][ T7346]  prepare_alloc_pages+0x1f0/0x5b0
[   76.389914][ T7346]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[   76.389928][ T7346]  ? prepare_alloc_pages+0x1f0/0x5b0
[   76.389944][ T7346]  ? rcu_is_watching+0x13/0xc0
[   76.389960][ T7346]  ? __alloc_frozen_pages_noprof+0x56b/0x3300
[   76.389975][ T7346]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   76.389987][ T7346]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   76.390005][ T7346]  ? lockdep_hardirqs_on+0x7d/0x110
[   76.390016][ T7346]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   76.390033][ T7346]  ? stack_depot_save_flags+0x49a/0x9f0
[   76.390050][ T7346]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   76.390064][ T7346]  ? kasan_save_stack+0x30/0x50
[   76.390077][ T7346]  ? kasan_save_track+0x14/0x30
[   76.390090][ T7346]  ? __kasan_kmalloc+0xaa/0xb0
[   76.390103][ T7346]  ? __kmalloc_noprof+0x32f/0x840
[   76.390116][ T7346]  ? vhost_dev_set_owner+0x190/0xa30
[   76.390127][ T7346]  ? vhost_net_ioctl+0xfa6/0x1910
[   76.390137][ T7346]  ? __x64_sys_ioctl+0x18e/0x210
[   76.390162][ T7346]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   76.390179][ T7346]  ? policy_nodemask+0xed/0x4f0
[   76.390197][ T7346]  alloc_pages_mpol+0x201/0x550
[   76.390215][ T7346]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   76.390233][ T7346]  ? lock_acquire+0x1d1/0x380
[   76.390277][ T7346]  ? lruvec_stat_mod_folio+0x76/0x2e0
[   76.390314][ T7346]  ___kmalloc_large_node+0xe8/0x130
[   76.390333][ T7346]  __kmalloc_large_node_noprof+0x1c/0x70
[   76.390350][ T7346]  __kmalloc_noprof+0x5a8/0x840
[   76.390364][ T7346]  ? trace_kmalloc+0xeb/0x110
[   76.390377][ T7346]  ? vhost_dev_set_owner+0x330/0xa30
[   76.390392][ T7346]  vhost_dev_set_owner+0x330/0xa30
[   76.390408][ T7346]  vhost_net_ioctl+0xfa6/0x1910
[   76.390419][ T7346]  ? do_vfs_ioctl+0x226/0x13e0
[   76.390432][ T7346]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   76.390443][ T7346]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   76.390459][ T7346]  ? __pfx_vhost_net_ioctl+0x10/0x10
[   76.390470][ T7346]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   76.390508][ T7346]  ? __fget_files+0x34/0x3d0
[   76.390530][ T7346]  ? selinux_file_ioctl+0xb6/0x290
[   76.390546][ T7346]  ? __pfx_vhost_net_ioctl+0x10/0x10
[   76.390559][ T7346]  __x64_sys_ioctl+0x18e/0x210
[   76.390573][ T7346]  do_syscall_64+0x123/0x790
[   76.390587][ T7346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.390599][ T7346] RIP: 0033:0x7f953d79e159
[   76.390609][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.390628][ T7346] RSP: 002b:00007f953e5b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   76.390644][ T7346] RAX: ffffffffffffffda RBX: 00007f953da25fa0 RCX: 00007f953d79e159
[   76.390654][ T7346] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000004
[   76.390663][ T7346] RBP: 00007f953d83506b R08: 0000000000000000 R09: 0000000000000000
[   76.390673][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.390696][ T7346] R13: 00007f953da26038 R14: 00007f953da25fa0 R15: 00007ffcb2c6ec98
[   76.390711][ T7346]  </TASK>
[   76.684955][  T850] cfg80211: failed to load regulatory.db
[   77.064285][ T7368] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200080 (ahci[0000:00:1f.2])
[   77.074687][ T5089] Bluetooth: hci0: command tx timeout
[   77.088134][ T7368] netlink: 48 bytes leftover after parsing attributes in process `syz.6.321'.
[   77.716386][ T7376] smpboot: CPU 1 is now offline
[   78.240592][ T5740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.263908][ T5740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.264679][ T5740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.265076][ T5740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.265450][ T5740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.467303][ T6208] bond0: (slave syz_tun): Releasing backup interface
[   78.468193][ T6208] syz_tun (unregistering): left allmulticast mode
[   78.662529][   T43] kauditd_printk_skb: 20 callbacks suppressed
[   78.662549][   T43] audit: type=1400 audit(2000000026.069:549): avc:  denied  { unlink } for  pid=7400 comm="syz.6.331" name="#7" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   78.665478][ T5542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.665502][ T5542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.759622][ T5542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.759646][ T5542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.817742][ T5542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.817769][ T5542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.015926][ T5542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.015952][ T5542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.096262][   T43] audit: type=1400 audit(2000000026.509:550): avc:  denied  { mount } for  pid=7409 comm="syz.8.333" name="/" dev="rpc_pipefs" ino=21827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   79.164575][ T5089] Bluetooth: hci0: command tx timeout
[   79.230458][ T5542] bridge_slave_1: left promiscuous mode
[   79.230715][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.232527][ T5542] bridge_slave_0: left allmulticast mode
[   79.232542][ T5542] bridge_slave_0: left promiscuous mode
[   79.233882][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.262906][ T5542] bond_slave_0: left promiscuous mode
[   79.262940][ T5542] bond_slave_1: left promiscuous mode
[   79.321442][   T43] audit: type=1400 audit(2000000026.729:551): avc:  denied  { write } for  pid=7419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.375032][ T5542] bond0 (unregistering): left allmulticast mode
[   79.375047][ T5542] bond_slave_0: left allmulticast mode
[   79.375056][ T5542] bond_slave_1: left allmulticast mode
[   79.379105][ T5542] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[   79.379333][ T5542] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[   79.379968][ T5542] macvlan2 (unregistering): left allmulticast mode
[   79.414893][ T5542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.419618][   T43] audit: type=1400 audit(2000000026.829:552): avc:  denied  { write } for  pid=7422 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.423918][ T5542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.427863][ T5542] bond0 (unregistering): Released all slaves
[   79.436292][ T5542] bond1 (unregistering): Released all slaves
[   79.437536][ T7426] FAULT_INJECTION: forcing a failure.
[   79.437536][ T7426] name failslab, interval 1, probability 0, space 0, times 0
[   79.437574][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.6.335 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   79.437608][ T7426] Tainted: [L]=SOFTLOCKUP
[   79.437617][ T7426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   79.437631][ T7426] Call Trace:
[   79.437639][ T7426]  <TASK>
[   79.437649][ T7426]  dump_stack_lvl+0x100/0x190
[   79.437688][ T7426]  should_fail_ex.cold+0x5/0xa
[   79.437721][ T7426]  should_failslab+0xc2/0x120
[   79.437754][ T7426]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   79.437783][ T7426]  ? copy_process+0x6a2/0x8380
[   79.437816][ T7426]  copy_process+0x6a2/0x8380
[   79.437860][ T7426]  ? __pfx_copy_process+0x10/0x10
[   79.437885][ T7426]  ? kasan_save_track+0x14/0x30
[   79.437915][ T7426]  ? __kasan_kmalloc+0xaa/0xb0
[   79.437972][ T7426]  ? lockdep_init_map_type+0x5c/0x250
[   79.438020][ T7426]  ? lockdep_init_map_type+0x5c/0x250
[   79.438048][ T7426]  ? __pfx_vhost_run_work_list+0x10/0x10
[   79.438083][ T7426]  ? __pfx_vhost_worker_killed+0x10/0x10
[   79.438113][ T7426]  vhost_task_create+0x1db/0x370
[   79.438133][ T7426]  ? __pfx_vhost_task_create+0x10/0x10
[   79.438158][ T7426]  ? __pfx_vhost_task_fn+0x10/0x10
[   79.438184][ T7426]  ? snprintf+0xc7/0x100
[   79.438209][ T7426]  vhost_task_worker_create+0x8d/0x260
[   79.438230][ T7426]  ? __pfx_vhost_task_worker_create+0x10/0x10
[   79.438248][ T7426]  ? lockdep_init_map_type+0x5c/0x250
[   79.438272][ T7426]  ? lockdep_init_map_type+0x5c/0x250
[   79.438300][ T7426]  vhost_worker_create+0x240/0x300
[   79.438331][ T7426]  ? __pfx_vhost_worker_create+0x10/0x10
[   79.438362][ T7426]  ? vhost_dev_set_owner+0x190/0xa30
[   79.438387][ T7426]  vhost_dev_set_owner+0x719/0xa30
[   79.438415][ T7426]  vhost_net_ioctl+0xfa6/0x1910
[   79.438434][ T7426]  ? do_vfs_ioctl+0x226/0x13e0
[   79.438457][ T7426]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   79.438508][ T7426]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   79.438537][ T7426]  ? __pfx_vhost_net_ioctl+0x10/0x10
[   79.438558][ T7426]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   79.438591][ T7426]  ? __fget_files+0x34/0x3d0
[   79.438632][ T7426]  ? selinux_file_ioctl+0xb6/0x290
[   79.438661][ T7426]  ? __pfx_vhost_net_ioctl+0x10/0x10
[   79.438682][ T7426]  __x64_sys_ioctl+0x18e/0x210
[   79.438707][ T7426]  do_syscall_64+0x123/0x790
[   79.438730][ T7426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.438750][ T7426] RIP: 0033:0x7fa7b459e159
[   79.438767][ T7426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.438787][ T7426] RSP: 002b:00007fa7b54de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   79.438807][ T7426] RAX: ffffffffffffffda RBX: 00007fa7b4825fa0 RCX: 00007fa7b459e159
[   79.438820][ T7426] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000004
[   79.438833][ T7426] RBP: 00007fa7b463506b R08: 0000000000000000 R09: 0000000000000000
[   79.438845][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.438856][ T7426] R13: 00007fa7b4826038 R14: 00007fa7b4825fa0 R15: 00007ffca6605c48
[   79.438884][ T7426]  </TASK>
[   79.566846][ T5442] 8021q: adding VLAN 0 to HW filter on device eth22
[   79.646504][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.646594][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.646658][ T7392] bridge_slave_0: entered allmulticast mode
[   79.647398][ T7392] bridge_slave_0: entered promiscuous mode
[   79.652205][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.652283][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.652356][ T7392] bridge_slave_1: entered allmulticast mode
[   79.653179][ T7392] bridge_slave_1: entered promiscuous mode
[   79.696661][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.702948][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.754683][    T9] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[   79.756039][ T7392] team0: Port device team_slave_0 added
[   79.757864][ T7392] team0: Port device team_slave_1 added
[   79.791430][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.791448][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.791472][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.803441][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.803457][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.803479][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.841017][ T5542] hsr_slave_0: left promiscuous mode
[   79.842549][ T5542] hsr_slave_1: left promiscuous mode
[   79.843239][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.843257][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.844248][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.844264][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.859329][ T5542] veth1_macvtap: left promiscuous mode
[   79.859366][ T5542] veth0_macvtap: left promiscuous mode
[   79.860703][ T5542] veth1_vlan: left promiscuous mode
[   79.860783][ T5542] veth0_vlan: left promiscuous mode
[   79.876615][   T43] audit: type=1400 audit(2000000027.279:553): avc:  denied  { write } for  pid=7441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.906349][    T9] usb 12-1: Using ep0 maxpacket: 8
[   79.911869][    T9] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   79.921238][    T9] usb 12-1: config index 0 descriptor too short (expected 74, got 45)
[   79.921284][    T9] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   79.921307][    T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   79.921327][    T9] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[   79.921348][    T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   79.921368][    T9] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   79.921402][    T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.951570][   T43] audit: type=1400 audit(2000000027.359:554): avc:  denied  { write } for  pid=7444 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   80.013974][   T43] audit: type=1400 audit(2000000027.419:555): avc:  denied  { unmount } for  pid=7014 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   80.137501][    T9] usb 12-1: GET_CAPABILITIES returned 0
[   80.137541][    T9] usbtmc 12-1:16.0: can't read capabilities
[   80.202654][ T5542] team0 (unregistering): Port device team_slave_1 removed
[   80.217510][ T5542] team0 (unregistering): Port device team_slave_0 removed
[   80.355127][ T5089] Bluetooth: hci4: command tx timeout
[   80.429801][ T5442] 8021q: adding VLAN 0 to HW filter on device eth23
[   80.444853][ T7448] syz_tun: left promiscuous mode
[   80.499396][ T7392] hsr_slave_0: entered promiscuous mode
[   80.500222][ T7392] hsr_slave_1: entered promiscuous mode
[   80.504315][   T43] audit: type=1400 audit(2000000027.909:556): avc:  denied  { write } for  pid=7429 comm="syz.7.337" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   80.504822][   T43] audit: type=1400 audit(2000000027.919:557): avc:  denied  { open } for  pid=7429 comm="syz.7.337" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   80.536962][   T50] usb 12-1: USB disconnect, device number 6
[   80.943189][   T43] audit: type=1400 audit(2000000028.349:558): avc:  denied  { write } for  pid=7458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.304974][ T5442] 8021q: adding VLAN 0 to HW filter on device eth24
[   81.575279][ T7392] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   81.722920][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.731162][ T7392] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   81.754507][ T5833] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[   81.771807][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.777030][ T7392] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   81.781505][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.782123][ T7392] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   81.794242][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.916779][ T5833] usb 13-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   81.917601][ T5833] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   81.917617][ T5833] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   81.917629][ T5833] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   81.917648][ T5833] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.102292][ T7477] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[   82.102480][ T7477] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[   82.115266][ T5833] pl2303 13-1:1.0: pl2303 converter detected
[   82.132861][ T5833] usb 13-1: pl2303 converter now attached to ttyUSB0
[   82.211498][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.239728][ T7392] 8021q: adding VLAN 0 to HW filter on device team0
[   82.249560][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.249607][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.269113][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.269163][ T6859] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.312198][ T5442] 8021q: adding VLAN 0 to HW filter on device eth25
[   82.435213][ T5089] Bluetooth: hci4: command tx timeout
[   82.437825][ T7477] pl2303 13-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[   82.438221][ T7477] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[   82.438521][ T7477] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[   82.438905][ T7477] pl2303 13-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[   82.439528][ T7477] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[   82.592400][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.705672][ T7518] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[   82.707619][ T7477] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[   82.714266][ T7477] pl2303 ttyUSB0: error sending break = -32
[   82.725901][ T5833] usb 13-1: USB disconnect, device number 2
[   82.745634][ T5833] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   82.746008][ T5833] pl2303 13-1:1.0: device disconnected
[   82.867046][ T7518] i2c i2c-0: new_device: Instantiated device tcpci at 0x02
[   82.930929][ T7392] veth0_vlan: entered promiscuous mode
[   82.942210][ T7392] veth1_vlan: entered promiscuous mode
[   82.970101][ T7392] veth0_macvtap: entered promiscuous mode
[   83.007044][ T7392] veth1_macvtap: entered promiscuous mode
[   83.023129][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.030299][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.053651][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.054018][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.054041][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.054059][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.126930][ T7541] jffs2: notice: (7541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   83.136060][ T6611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.136080][ T6611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.193426][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.193447][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.202508][ T7541] jffs2: warning: (7541) jffs2_sum_write_data: Summary too big (12 data, -14 pad) in eraseblock at 0001d000
[   83.300710][ T7547] syzkaller0: entered promiscuous mode
[   83.300725][ T7547] syzkaller0: entered allmulticast mode
[   83.570965][ T7568] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[   83.651968][ T7568] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16)
[   83.721746][   T43] kauditd_printk_skb: 28 callbacks suppressed
[   83.721767][   T43] audit: type=1400 audit(2000000031.109:587): avc:  denied  { write } for  pid=7577 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.924512][   T43] audit: type=1400 audit(2000000031.309:588): avc:  denied  { write } for  pid=7583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.975055][   T43] audit: type=1400 audit(2000000031.389:589): avc:  denied  { write } for  pid=7589 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.073683][ T7593] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   84.138033][ T7591] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   84.153529][   T43] audit: type=1400 audit(2000000031.559:590): avc:  denied  { write } for  pid=7594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.321793][   T43] audit: type=1400 audit(2000000031.729:591): avc:  denied  { write } for  pid=7602 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.479676][   T43] audit: type=1400 audit(2000000031.889:592): avc:  denied  { write } for  pid=7608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.514565][ T5089] Bluetooth: hci4: command tx timeout
[   84.564528][   T43] audit: type=1400 audit(2000000031.959:593): avc:  denied  { write } for  pid=7613 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.627181][   T50] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   84.802301][ T7622] netlink: 'syz.8.366': attribute type 49 has an invalid length.
[   84.813300][ T7622] bond0: (slave bond_slave_0): Releasing backup interface
[   84.927539][ T7617] Console: switching to colour dummy device 80x25
[   84.931983][ T7622] bond_slave_0: entered promiscuous mode
[   84.931999][ T7622] bond_slave_0: entered allmulticast mode
[   84.933803][   T50] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   85.047316][   T43] audit: type=1400 audit(2000000032.419:594): avc:  denied  { write } for  pid=7624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.071976][   T43] audit: type=1400 audit(2000000032.479:595): avc:  denied  { write } for  pid=7627 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.191650][   T43] audit: type=1400 audit(2000000032.579:596): avc:  denied  { write } for  pid=7630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.625676][   T50] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   85.626691][   T50] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   85.626708][   T50] rtc rtc0: __rtc_set_alarm: err=-22
[   86.253702][ T7667] jffs2: notice: (7667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[   86.594659][ T5089] Bluetooth: hci4: command tx timeout
[   86.904271][ T7677] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   86.968516][ T7676] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[   87.380947][ T7617] ------------[ cut here ]------------
[   87.380962][ T7617] Memory manager not clean during takedown.
[   87.380969][ T7617] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#2: syz.7.365/7617
[   87.390840][ T7617] Modules linked in:
[   87.395344][ T7617] CPU: 2 UID: 0 PID: 7617 Comm: syz.7.365 Tainted: G             L      syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   87.399670][ T7617] Tainted: [L]=SOFTLOCKUP
[   87.401900][ T7617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   87.406816][ T7617] RIP: 0010:drm_mm_takedown+0x62/0x280
[   87.410544][ T7617] Code: 8b 43 38 48 39 c5 75 16 e8 eb 2f 38 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 d5 2f 38 fc 48 8d 3d de a4 7c 0b <67> 48 0f b9 3a 48 c7 c0 00 b4 65 8e 48 ba 00 00 00 00 00 fc ff df
[   87.417836][ T7617] RSP: 0018:ffffc90003fbf798 EFLAGS: 00010287
[   87.419853][ T7617] RAX: 000000000002ca1e RBX: ffff888027dfc068 RCX: ffffc9003249e000
[   87.422418][ T7617] RDX: 0000000000080000 RSI: ffffffff85d4187b RDI: ffffffff9150bd60
[   87.425103][ T7617] RBP: ffff888027dfc0a0 R08: 0000000000000007 R09: 0000000000000000
[   87.427883][ T7617] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880286f3d00
[   87.430411][ T7617] R13: ffff8880286f3d18 R14: ffffffff85d2eac0 R15: 0000000000000000
[   87.433275][ T7617] FS:  00007f953e5926c0(0000) GS:ffff8880d5d4f000(0000) knlGS:0000000000000000
[   87.436978][ T7617] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   87.439855][ T7617] CR2: 0000001b33310ff8 CR3: 0000000064427000 CR4: 0000000000352ef0
[   87.443284][ T7617] Call Trace:
[   87.444836][ T7617]  <TASK>
[   87.446025][ T7617]  ? __pfx_drm_gem_init_release+0x10/0x10
[   87.448217][ T7617]  drm_managed_release+0x1bb/0x540
[   87.450274][ T7617]  ? __pfx_virtio_gpu_release+0x10/0x10
[   87.452300][ T7617]  drm_dev_put.part.0+0xca/0x140
[   87.453982][ T7617]  drm_dev_put+0x1f/0x30
[   87.455536][ T7617]  virtio_dev_remove+0xb8/0x170
[   87.457357][ T7617]  ? __pfx_virtio_dev_remove+0x10/0x10
[   87.459206][ T7617]  device_remove+0xcb/0x180
[   87.460760][ T7617]  device_release_driver_internal+0x44e/0x620
[   87.462754][ T7617]  bus_remove_device+0x2bc/0x560
[   87.464440][ T7617]  ? __pfx_bus_remove_device+0x10/0x10
[   87.466447][ T7617]  ? __pfx_device_remove_attrs+0x10/0x10
[   87.468654][ T7617]  device_del+0x376/0x9b0
[   87.470316][ T7617]  ? __pfx_device_del+0x10/0x10
[   87.472185][ T7617]  ? __pfx___might_resched+0x10/0x10
[   87.473959][ T7617]  ? __pfx_pci_device_is_present+0x10/0x10
[   87.476282][ T7617]  device_unregister+0x1d/0xe0
[   87.478023][ T7617]  unregister_virtio_device+0x39/0x60
[   87.479816][ T7617]  virtio_pci_remove+0x7c/0x110
[   87.481437][ T7617]  pci_device_remove+0xb2/0x1d0
[   87.483462][ T7617]  ? __pfx_pci_device_remove+0x10/0x10
[   87.485849][ T7617]  device_remove+0xcb/0x180
[   87.487703][ T7617]  device_release_driver_internal+0x44e/0x620
[   87.489764][ T7617]  pci_stop_bus_device+0x120/0x160
[   87.491470][ T7617]  pci_stop_and_remove_bus_device+0x58/0xa0
[   87.493393][ T7617]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   87.495676][ T7617]  remove_store+0x123/0x140
[   87.497270][ T7617]  ? __pfx_remove_store+0x10/0x10
[   87.499025][ T7617]  ? find_held_lock+0x2b/0x80
[   87.500608][ T7617]  ? sysfs_file_kobj+0xe4/0x290
[   87.502576][ T7617]  ? sysfs_file_kobj+0xe4/0x290
[   87.504588][ T7617]  ? __pfx_remove_store+0x10/0x10
[   87.506713][ T7617]  dev_attr_store+0x58/0x80
[   87.508401][ T7617]  ? __pfx_dev_attr_store+0x10/0x10
[   87.510039][ T7617]  sysfs_kf_write+0xf2/0x150
[   87.511567][ T7617]  kernfs_fop_write_iter+0x3e0/0x5f0
[   87.513263][ T7617]  ? __pfx_sysfs_kf_write+0x10/0x10
[   87.514970][ T7617]  vfs_write+0x6af/0x1050
[   87.516472][ T7617]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   87.518463][ T7617]  ? __pfx_vfs_write+0x10/0x10
[   87.520136][ T7617]  ? find_held_lock+0x2b/0x80
[   87.521807][ T7617]  ksys_write+0x12a/0x250
[   87.523525][ T7617]  ? __pfx_ksys_write+0x10/0x10
[   87.525515][ T7617]  do_syscall_64+0x123/0x790
[   87.527224][ T7617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.529299][ T7617] RIP: 0033:0x7f953d79e159
[   87.530813][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.536944][ T7617] RSP: 002b:00007f953e592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   87.539868][ T7617] RAX: ffffffffffffffda RBX: 00007f953da26090 RCX: 00007f953d79e159
[   87.542936][ T7617] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[   87.545804][ T7617] RBP: 00007f953d83506b R08: 0000000000000000 R09: 0000000000000000
[   87.548349][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.550937][ T7617] R13: 00007f953da26128 R14: 00007f953da26090 R15: 00007ffcb2c6ec98
[   87.553526][ T7617]  </TASK>
[   87.554923][ T7617] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   87.557496][ T7617] CPU: 2 UID: 0 PID: 7617 Comm: syz.7.365 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   87.561353][ T7617] Tainted: [L]=SOFTLOCKUP
[   87.562857][ T7617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   87.566189][ T7617] Call Trace:
[   87.567310][ T7617]  <TASK>
[   87.568262][ T7617]  dump_stack_lvl+0x100/0x190
[   87.569867][ T7617]  vpanic+0x553/0x970
[   87.571196][ T7617]  ? __pfx_vpanic+0x10/0x10
[   87.572923][ T7617]  panic+0xd1/0xe0
[   87.574227][ T7617]  ? __pfx_panic+0x10/0x10
[   87.576061][ T7617]  check_panic_on_warn.cold+0x19/0x34
[   87.578267][ T7617]  ? drm_mm_takedown+0x62/0x280
[   87.580414][ T7617]  __warn.cold+0x191/0x318
[   87.582339][ T7617]  __report_bug+0x30f/0x440
[   87.584326][ T7617]  ? drm_mm_takedown+0x62/0x280
[   87.586146][ T7617]  ? __pfx___report_bug+0x10/0x10
[   87.588161][ T7617]  ? device_remove+0xcb/0x180
[   87.590305][ T7617]  ? device_release_driver_internal+0x44e/0x620
[   87.593227][ T7617]  ? pci_stop_bus_device+0x120/0x160
[   87.595728][ T7617]  ? drm_mm_takedown+0x5b/0x280
[   87.598017][ T7617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.600507][ T7617]  report_bug_entry+0xe2/0x290
[   87.602542][ T7617]  ? drm_mm_takedown+0x62/0x280
[   87.604613][ T7617]  handle_bug+0x1cd/0x2a0
[   87.606573][ T7617]  exc_invalid_op+0x17/0x50
[   87.608572][ T7617]  asm_exc_invalid_op+0x1a/0x20
[   87.610782][ T7617] RIP: 0010:drm_mm_takedown+0x62/0x280
[   87.612700][ T7617] Code: 8b 43 38 48 39 c5 75 16 e8 eb 2f 38 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 d5 2f 38 fc 48 8d 3d de a4 7c 0b <67> 48 0f b9 3a 48 c7 c0 00 b4 65 8e 48 ba 00 00 00 00 00 fc ff df
[   87.619791][ T7617] RSP: 0018:ffffc90003fbf798 EFLAGS: 00010287
[   87.622089][ T7617] RAX: 000000000002ca1e RBX: ffff888027dfc068 RCX: ffffc9003249e000
[   87.625050][ T7617] RDX: 0000000000080000 RSI: ffffffff85d4187b RDI: ffffffff9150bd60
[   87.628297][ T7617] RBP: ffff888027dfc0a0 R08: 0000000000000007 R09: 0000000000000000
[   87.631301][ T7617] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880286f3d00
[   87.635197][ T7617] R13: ffff8880286f3d18 R14: ffffffff85d2eac0 R15: 0000000000000000
[   87.638855][ T7617]  ? __pfx_drm_gem_init_release+0x10/0x10
[   87.641239][ T7617]  ? drm_mm_takedown+0x5b/0x280
[   87.643015][ T7617]  ? drm_mm_takedown+0x5b/0x280
[   87.644666][ T7617]  ? __pfx_drm_gem_init_release+0x10/0x10
[   87.647049][ T7617]  drm_managed_release+0x1bb/0x540
[   87.649215][ T7617]  ? __pfx_virtio_gpu_release+0x10/0x10
[   87.651675][ T7617]  drm_dev_put.part.0+0xca/0x140
[   87.653899][ T7617]  drm_dev_put+0x1f/0x30
[   87.655994][ T7617]  virtio_dev_remove+0xb8/0x170
[   87.658192][ T7617]  ? __pfx_virtio_dev_remove+0x10/0x10
[   87.660552][ T7617]  device_remove+0xcb/0x180
[   87.662069][ T7617]  device_release_driver_internal+0x44e/0x620
[   87.664020][ T7617]  bus_remove_device+0x2bc/0x560
[   87.665642][ T7617]  ? __pfx_bus_remove_device+0x10/0x10
[   87.667768][ T7617]  ? __pfx_device_remove_attrs+0x10/0x10
[   87.669554][ T7617]  device_del+0x376/0x9b0
[   87.671033][ T7617]  ? __pfx_device_del+0x10/0x10
[   87.672780][ T7617]  ? __pfx___might_resched+0x10/0x10
[   87.674825][ T7617]  ? __pfx_pci_device_is_present+0x10/0x10
[   87.677557][ T7617]  device_unregister+0x1d/0xe0
[   87.679678][ T7617]  unregister_virtio_device+0x39/0x60
[   87.682027][ T7617]  virtio_pci_remove+0x7c/0x110
[   87.684157][ T7617]  pci_device_remove+0xb2/0x1d0
[   87.686272][ T7617]  ? __pfx_pci_device_remove+0x10/0x10
[   87.688178][ T7617]  device_remove+0xcb/0x180
[   87.689648][ T7617]  device_release_driver_internal+0x44e/0x620
[   87.691654][ T7617]  pci_stop_bus_device+0x120/0x160
[   87.693673][ T7617]  pci_stop_and_remove_bus_device+0x58/0xa0
[   87.696288][ T7617]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   87.698913][ T7617]  remove_store+0x123/0x140
[   87.700345][ T7617]  ? __pfx_remove_store+0x10/0x10
[   87.701928][ T7617]  ? find_held_lock+0x2b/0x80
[   87.703474][ T7617]  ? sysfs_file_kobj+0xe4/0x290
[   87.705016][ T7617]  ? sysfs_file_kobj+0xe4/0x290
[   87.706628][ T7617]  ? __pfx_remove_store+0x10/0x10
[   87.708227][ T7617]  dev_attr_store+0x58/0x80
[   87.709673][ T7617]  ? __pfx_dev_attr_store+0x10/0x10
[   87.711321][ T7617]  sysfs_kf_write+0xf2/0x150
[   87.712807][ T7617]  kernfs_fop_write_iter+0x3e0/0x5f0
[   87.714678][ T7617]  ? __pfx_sysfs_kf_write+0x10/0x10
[   87.716370][ T7617]  vfs_write+0x6af/0x1050
[   87.717756][ T7617]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   87.719806][ T7617]  ? __pfx_vfs_write+0x10/0x10
[   87.721521][ T7617]  ? find_held_lock+0x2b/0x80
[   87.723261][ T7617]  ksys_write+0x12a/0x250
[   87.724782][ T7617]  ? __pfx_ksys_write+0x10/0x10
[   87.726480][ T7617]  do_syscall_64+0x123/0x790
[   87.727965][ T7617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.729821][ T7617] RIP: 0033:0x7f953d79e159
[   87.731257][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.737442][ T7617] RSP: 002b:00007f953e592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   87.740295][ T7617] RAX: ffffffffffffffda RBX: 00007f953da26090 RCX: 00007f953d79e159
[   87.743091][ T7617] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[   87.745744][ T7617] RBP: 00007f953d83506b R08: 0000000000000000 R09: 0000000000000000
[   87.748254][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.750739][ T7617] R13: 00007f953da26128 R14: 00007f953da26090 R15: 00007ffcb2c6ec98
[   87.753301][ T7617]  </TASK>
[   87.755088][ T7617] Kernel Offset: disabled
[   87.756588][ T7617] Rebooting in 86400 seconds..