last executing test programs:

5m1.300281759s ago: executing program 2 (id=446):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4640, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0xf4240) (async)
ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x3)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a, 0x8000000000002}) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f0000000600)=@ethtool_rx_ntuple={0x35, {0xe, @udp_ip4_spec={@loopback, @remote, 0x4e23, 0x4e22, 0x6}, @tcp_ip4_spec={@private=0xa010100, @rand_addr=0x64010100, 0x4e23, 0x4e24, 0x5}, 0x1, 0x1, 0x3, 0x3fb, 0xfffffffffffffffe}}}) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
r5 = dup3(r4, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, &(0x7f0000000100)=[@request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1f) (async)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000440)={<r7=>0x0, 0x7f}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000004c0)={r7, 0x785}, 0x8) (async)
r8 = socket(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000540))
sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r9 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000580)}) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x1c}}, 0x20004010) (async)
socket(0x15, 0x5, 0x0) (async)
r12 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/connector\x00')
pread64(r12, &(0x7f0000000000)=""/232, 0xe8, 0x40) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 32)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)

5m1.201202278s ago: executing program 2 (id=447):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x80000, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x11, 0x80000, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async)

5m1.06122229s ago: executing program 2 (id=450):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$media(0x0, 0x80000006, 0xd01840)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x0)

5m0.219304118s ago: executing program 2 (id=469):
syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3a86dd6000000000442f00fe880000000000000000000000000001fe8000000000000000000000000000aa0000080000"], 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)

5m0.159834655s ago: executing program 2 (id=471):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30"], 0x1f4}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x91)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

5m0.068920429s ago: executing program 2 (id=474):
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[], 0x20}}, 0x4040000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m45.060549082s ago: executing program 32 (id=474):
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[], 0x20}}, 0x4040000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m59.69016329s ago: executing program 1 (id=2219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xfffffffe}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x17, 0x51, 0x29, 0x20, 0x557, 0x2009, 0xc71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0x7, 0x2, 0x8a, 0xb5, 0x38, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012100800083a"], 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

2m58.238655552s ago: executing program 1 (id=2231):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async, rerun: 32)
listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 32)
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) (async)
read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00')
preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0xf1ff6df90d2390ca)

2m58.020168369s ago: executing program 1 (id=2235):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x8c0}], 0x1, 0x0, 0x0, 0x8094}, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x8, 0x0, 0x0}}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="1d090305c800"], 0x6) (async)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="1d090305c800"], 0x6)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async)
bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60)
socket$netlink(0x10, 0x3, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000002d40)=ANY=[@ANYBLOB="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"/4100], 0x1004)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680)) (async)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680))
eventfd2(0x1, 0x1) (async)
r6 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

2m57.150047077s ago: executing program 1 (id=2244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) (async)
ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff)
listen(r1, 0x0) (async)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40404}, 0x100)

2m57.079518994s ago: executing program 1 (id=2246):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000))
syz_emit_ethernet(0x15, &(0x7f00000005c0)={@broadcast, @local, @val={@void}, {@x25={0x805, {0x2, 0x32, 0x23}}}}, 0x0)

2m56.839602809s ago: executing program 1 (id=2247):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

2m56.781248592s ago: executing program 33 (id=2247):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

2m29.13978017s ago: executing program 0 (id=2693):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004001}, 0x2040084)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600104000040000060001400000000006000240000400000900010073797a30000000000900020073797a320000000014000000110001"], 0x84}}, 0x0)

2m29.139529899s ago: executing program 0 (id=2694):
r0 = socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0)
write$sequencer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8103000000000000663d3d4de309e60d8e05089c267c47f6fa0041c260cdc16c810ec14aab"], 0x8) (async)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0xa180, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000040)={0x4000000, 0x92, 0x0, 0x4, 0x9}) (async, rerun: 32)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) (rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 64)
r5 = dup3(r4, r3, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) (async)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) (async, rerun: 32)
r6 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
fcntl$setstatus(r7, 0x4, 0x2000)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r8, &(0x7f0000000000)='\f\x00', 0x2, 0x4000, &(0x7f0000000340)={0x2, 0x3, @local}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'sit0\x00', 0x3}, 0x18)

2m28.97865918s ago: executing program 0 (id=2697):
r0 = socket$inet6(0xa, 0x5, 0x0)
listen(r0, 0x6)
listen(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000640)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "5c1759", 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, 0xa, 0x0, 0x3, 0xc, 0x2, 0x0, 0x4e20, 0x4e20}, 0x1, 0xfffffff9}}}}}}}}}, 0x5a)
openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x41c9296e1d8f815f, 0x0)
r3 = syz_io_uring_setup(0x5152, &(0x7f0000000300)={0x0, 0x551f, 0x10100, 0x1400000, 0x1d}, &(0x7f0000000140), &(0x7f0000000080))
keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1)
r4 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000d40), &(0x7f0000000d80)=0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={<r5=>r4, 0x8, 0x9, 0x40})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004240), 0xa000, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000004280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1})
setreuid(0x0, 0xee00)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r7})
r8 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x20008000)
recvmsg(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
r9 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000240))
sendmsg$kcm(r9, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r7, 0x0, &(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x10000})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

2m27.999179948s ago: executing program 0 (id=2713):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

2m27.996143233s ago: executing program 0 (id=2716):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x5d, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB="0401000016ac1e01010000000031be41b400000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6714, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x100, 0x5}})

2m27.86741782s ago: executing program 0 (id=2719):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0xfffffffffffffff9}], 0x1}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m27.782773772s ago: executing program 34 (id=2719):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0xfffffffffffffff9}], 0x1}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m0.026056313s ago: executing program 5 (id=3159):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) (async)
write(r0, 0x0, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000040)={'ip6_vti0\x00', @random="0103002000"}) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async)
sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xc78, 0x5}, 0x8) (async)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async)
setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) (async)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffe}, 0x1c) (async)
listen(r2, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) (async)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000003c0)={0x0, @bt={0xa02, 0x870, 0x1, 0x1, 0xd59f80, 0x11f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xcf, 0x9}})
socket(0x1d, 0x2, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00'})
accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800)

1m59.946721445s ago: executing program 5 (id=3162):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/64, 0x40)
r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000140)='personality\x00')
preadv(r2, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000001540)=""/189, 0xbd}], 0x5, 0xffffffc0, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000280)={0x8}, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000001680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf7001c2c0020010000000000000000000000000001ff0200000000000000000000000000013a00000000000000870090780000000000000000000000000000000118cc6df4ace82156b9bad21a67541a5d20"], 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x54, r6, 0x100, 0x70bd2b, 0x25dfdbbd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffb, 0xfffffff7}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r7, 0xc0d05604, &(0x7f0000000180)={0xd, @vbi})

1m59.867402192s ago: executing program 5 (id=3164):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0xab, &(0x7f0000000100)="fa2d2f8ddb49f1388d6bb7d923da9f37f21c8dff4a5f330297ebd64feeadeeb96a47a934f9815825c476f84c09c5a8e50a4ce0fd64fe77c0af7986f380a7e791e1c7eab786089774124fe0a990963a0f748c8db6bd5267bee1d2130bd3d44dd599bfd606197ec16c64d882d5393558a6b4f230910f47fec40643b8867f7b695786a3538cde4d03d2429c41901b29873b923cbd9d89bfd53ecccae05a27ba8219c44ed895d74e09bcdbef4b", 0x59, 0x0, &(0x7f00000001c0)="ea3254f8d6265e7110d967e1ff81a991bcd39268deca779cfa828ea0806d73946f22816b5bdb4b3fd09ea92b9e15d102e374b09ab9c08c0c7db6cf205be5aeced42cdbfd7c0902ef3b364678e968bd791ec06b2012961c3907"})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x140b, 0x0, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r3, 0x100000c, 0x2010, r4, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2)
ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f00000003c0)={0xce, 0x0, r6})
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1})
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480), 0x4ce00, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f00000004c0)=0x5, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{0x8, 0x1, 0x9, 0x61200}, {0x7, 0xff, 0x8, 0xff}]})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000580)={"4db7822246ffed595c1399f98d558a283b1f6eb55993105c01cad4ac75c10fe3", 0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f00000005c0)={{r6}, "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"})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000015c0)={{0x1, 0x1, 0x18, <r10=>r0, {0x2}}, './file0\x00'})
ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000001600)={0x2, {0x2, 0x7, 0x0, 0x4, 0x8, 0x10}})
ioctl$VIDIOC_G_TUNER(r10, 0xc054561d, &(0x7f0000001640)={0x2, "317e7e2b9ef9cfd99225dc29b5571b75d9b5f3eec00915ede0d7ef4465d75c57", 0x2, 0x1000, 0x0, 0x7, 0x1, 0x2, 0x696, 0x7})
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000016c0), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f0000001700)={{0x1, 0x1, 0x18, <r12=>r9}, './file0\x00'})
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x11)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001840)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001740)="3a82bffca0fbe26c1c2a469951088a962b01fd848f06689fa4e0eeedf632fac116d793875979596f3762c40e27c40b7ba89ced4aa388c03842cc8b096a1c4cd906de02eb6cfe0b7003dabaff792b99e75cbe2e7f043bdfc41e1f60ca4bef74b1b02f6b98caab359440ade45005faa44c402d4f1aeb8055158a098a092efcaedc55217ae0237d7f38ef1764a72096f6a8a89169f8251f19e17713533f8b5ab6640cd9850a2eac9c839805686fe346f513197b27866451112697409c001b77049bda3d6dfde50239c9", 0xc8, r7}, 0x68)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000018c0)={0x0, ""/256, <r13=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001ac0)={{r13, 0x9, 0x8001, 0xa1c1, 0xa, 0x1, 0x2, 0x1, 0x8001, 0x7ff, 0x100, 0x10, 0x101, 0x8001, 0x356}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$SNDCTL_DSP_SETTRIGGER(r12, 0x40045010, &(0x7f0000001b80)=0x7)

1m59.808019767s ago: executing program 5 (id=3166):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}})
ioctl$sock_netdev_private(r5, 0x8947, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001980)=ANY=[@ANYBLOB="0401000018001b032cbd7000fddbdf25ac1414aa0000000000000000000000000a0101020000000000000000000000004e2300044e2400370a00802062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d632000000e0000002000000000000000000000000020000000000000007000000000000005400000000000000010000000000000001000080ffffffff0e05000000000000f106000000000000050000000000000008000000000000000700000000000000000200005e000000a80500002abd70000135000002000409210000000000000008000000000000001c0015005a07350000ffffff00"/188], 0x104}, 0x1, 0x0, 0x0, 0x4000811}, 0x4840)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r7=>0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x70, r9, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
kcmp(r7, 0xffffffffffffffff, 0x4, r3, r3)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r14 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi0\x00', 0xa0483, 0x0)
r15 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r15, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r14, 0xf50f, 0x0)
getsockname$packet(r13, &(0x7f00000002c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r16, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x8}, {0xfff1, 0xfff1}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_fw={{0xfffffffffffffdf4}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

1m59.718023706s ago: executing program 5 (id=3169):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0)
inotify_init1(0x80000) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x2) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)

1m59.488228164s ago: executing program 5 (id=3173):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x18000000000002a0, 0x3f, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f0007080d0b038da1880b25", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m59.415801854s ago: executing program 35 (id=3173):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f087e9381d100d968120b11409068ad00000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f800800000f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x18000000000002a0, 0x3f, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f0007080d0b038da1880b25", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

3.456776532s ago: executing program 7 (id=4741):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg(r1, &(0x7f0000000680), 0x0, 0x14)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064010101000000000000000000ab370fbfdb39c8ec94b5bd440a807778dfce4e8f7218c21c78d49f402c5ca3ea04d49e5dcbeb906af5090fe5e14f5768728d9c21bcf763272a517bba0d19fa4b11b530d00e9d830627af077290f0d9c1d8103425abad1e8addd33b20a2a35ff5b4ce95b26b7e2f9cc4af79de97d318fe285e0a314af1b821c3bd495c9a7a1450464401eb2afff3a5174ce8cb0d2fc105fde2eb596e4ba0543f9cae6e7879ffc580f5"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r5 = syz_open_dev$video4linux(&(0x7f00000060c0), 0xfffffffffffffcfd, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x80000)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000080)={0x401, 0x4, [0x9]})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000190a01020000000000000000000000000900010073797a30"], 0x20}}, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfffffffe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={<r13=>0x0, @empty, @multicast2}, &(0x7f0000000580)=0xc)
sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf250000000008000100", @ANYRES32=r12, @ANYBLOB="140002007767320000600000000000000000000008000100", @ANYRES32=r13, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r14, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000004915d5d8d245f82963197242977ce138d5a38d70d70055e8d5cd895d881143b90f20f203a2dca95fd48ed04b0e036f3b1bb1133d0fc643857407cf51160c0fb115ea478467d7ca0287cec2b159b477f55e0b0786494c83d0bba505c84d09540c7ef44db8e27e7090dbb48470321a002f0ba89303e3ee24ae89fabff963c947ee85fbdc1a7c9025b6bfcb4f75aca23af5ca532df95c558babbbe0827f9cd543ef", @ANYRES16=r9, @ANYBLOB="000226bd7000fcdbdf256d0000000c009900ff0300004c000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c000)
socket$nl_generic(0x10, 0x3, 0x10)

3.208222649s ago: executing program 7 (id=4742):
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000))
r1 = syz_open_procfs(r0, &(0x7f0000000100)='net\x00')
exit(0xf)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

2.367558723s ago: executing program 7 (id=4752):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021008a0400000000000800108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004200)=@newtaction={0x1058, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb, {}, [{0x1044, 0x1, [@m_police={0x1040, 0x1d, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10000, 0xc3ca, 0x7fffffff, 0x9, 0x2, 0x9, 0x1, 0x4, 0xffffffff, 0x8, 0x8, 0x1, 0x2cdd, 0x9, 0x7fffffff, 0x2, 0xe6, 0x3, 0xd, 0x10000, 0x6, 0xfffffe00, 0x1, 0x4, 0x6, 0xffffffff, 0x9, 0x3bd9, 0x2, 0x9, 0x4693207a, 0xe, 0x0, 0x9, 0x7, 0x7, 0x0, 0x8, 0x9, 0x7, 0x7, 0x200, 0x3, 0x6, 0x2, 0x0, 0x0, 0x40, 0x2, 0x84000000, 0x7, 0xdc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x800, 0x7, 0x10001, 0x7, 0x1ff, 0x1ff, 0x2, 0x80, 0x6, 0xae, 0xa, 0x7, 0x8, 0x3ff, 0x4, 0x5, 0x7af, 0x6071, 0x101, 0x5, 0x2bb45a3b, 0x6, 0x401, 0x5, 0x7, 0x5a0, 0x7ff, 0x5, 0x5, 0x1, 0x9, 0x800, 0x9, 0x9, 0x8001, 0xfffffffe, 0x349, 0x6, 0x6, 0x8, 0x7, 0xffffffff, 0x4, 0x5c000000, 0x36, 0xffff1ef0, 0x5, 0x24d, 0x93e, 0x9, 0x5, 0xb, 0x200, 0x3, 0xac9, 0xffffffff, 0xd060000, 0x0, 0x1, 0x0, 0x4, 0x101, 0x400, 0xffffffff, 0x8, 0x3, 0x3, 0x1ff, 0x6, 0xfa42, 0x9, 0x2, 0x8, 0x3, 0x2, 0x5, 0x9, 0xfffffff5, 0x5, 0x0, 0x3e276cf, 0x9, 0x7, 0x4, 0xf14, 0x8, 0x7, 0x8, 0x3, 0xff, 0x2, 0x7, 0x2, 0x8, 0xa, 0x2c, 0x6b54c840, 0xfff, 0xfffff980, 0xa, 0x451, 0xa734, 0x1, 0x62, 0x9b, 0x4, 0x1000, 0x0, 0x192e, 0x4, 0xa, 0x10000, 0x3, 0x0, 0x7, 0x4, 0x47d, 0x4f8, 0xc2, 0x0, 0x6, 0xc, 0x401, 0x8000, 0x2, 0x6, 0xf, 0x5, 0x6, 0x6, 0x101, 0x8, 0x9, 0xc8b1, 0x81, 0x8, 0x9, 0x3, 0x1ff, 0x7, 0x0, 0x1000000, 0x1, 0x4, 0x1, 0x400, 0x10001, 0x5, 0x8, 0x2, 0x5, 0x6, 0xffff, 0xff, 0x6, 0x5, 0x8, 0x2, 0x2, 0x5, 0xfffffffc, 0x3, 0x0, 0x0, 0x200, 0xde, 0x7ff, 0x4909, 0x4, 0x0, 0x8, 0x5, 0x6, 0x7, 0x6, 0x6ef, 0x8, 0x7f, 0xa, 0x4, 0x7, 0x0, 0x9, 0x7, 0x52b5, 0x5, 0x80000001, 0x835, 0xfffffffe, 0x1, 0x0, 0xf75c, 0x9, 0x9, 0x7fff, 0x100, 0x4, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x3, 0x6, 0x4, 0x3ff8000, 0x0, 0xb, 0x5, 0x7, 0x9, 0x9, 0x6, 0x2, 0x1ff, 0x8, 0x6, 0xfffffffc, 0x4, 0x80000000, 0x1, 0x6, 0x5, 0x8, 0x1, 0x5, 0x5, 0x800, 0x3, 0x80, 0x1, 0x10001, 0xffffff7f, 0x9, 0x9, 0x6034, 0x200000, 0x4, 0xf, 0x0, 0x4, 0x3, 0xe2b1, 0x0, 0x0, 0x401, 0xfff, 0x9, 0xb1b8, 0x3, 0x8000, 0xf6, 0xffffffff, 0x2, 0x7ff, 0xbc, 0xfffffff8, 0x1, 0x6, 0xd81e, 0x8f9, 0xf5, 0x5, 0x800, 0xb4, 0x6, 0x71, 0xffff, 0x4, 0xa, 0x8, 0x5, 0x5, 0x7fffffff, 0x800, 0x2a10, 0x0, 0x3ff, 0x96bc, 0x7fff, 0x2, 0x7131, 0x80000001, 0x401, 0x80000001, 0x1, 0x7, 0x3, 0x2, 0x6, 0x8, 0x7, 0xfc7, 0xb, 0x97ad, 0x1, 0xf9a3, 0x4, 0x1, 0x2, 0x6, 0x6, 0xfffffb29, 0x1, 0x6, 0x5, 0x2, 0x7, 0x82c, 0x3, 0xfffff767, 0x8000, 0x10000, 0x4, 0x6, 0x9, 0xa0000000, 0xffff, 0x86f, 0x4, 0x3, 0x4ef, 0x3, 0x10000, 0x1, 0x5, 0xf, 0x7, 0x200, 0xffffff80, 0x6, 0x0, 0x8, 0x7, 0x7, 0x4, 0x7fff, 0x9, 0xb, 0x9, 0x6, 0x6, 0xc49, 0x7, 0x2, 0x5, 0xfffffffc, 0x3, 0x5, 0x99f, 0x24d, 0x2, 0x9, 0x727e, 0x414, 0x8, 0x2, 0x7, 0x4, 0x6, 0xffffffff, 0x5, 0x1d9d6799, 0xed90, 0x344, 0x9, 0x44aa, 0x9, 0x5, 0x9, 0x3, 0x7, 0x4, 0x6, 0xffff, 0x7ff, 0x9f000000, 0xffffffff, 0x4, 0x4, 0x6, 0x30000, 0x0, 0x9, 0x0, 0x8b5, 0x6, 0xfffffffa, 0x7fffffff, 0xfffffff7, 0x4, 0x764, 0x81, 0x3c3, 0x9, 0x8, 0x84, 0x5, 0x1, 0x77c7, 0xc33, 0x80000000, 0x8, 0x0, 0x0, 0x0, 0x9, 0x82, 0xd, 0x0, 0x8, 0x6, 0xc, 0x3, 0x6, 0x9, 0xa9, 0x4, 0x1, 0x1ff, 0x3973, 0x4, 0x7, 0x33ee, 0xffff, 0x5b962d4e, 0x1, 0x15a0, 0x24, 0x1, 0xfffffffc, 0x4f, 0x4, 0x3, 0xa, 0x9, 0x9, 0x7fffffff, 0x4c6f, 0xc63a, 0x1aa, 0xffffffff, 0xcfd, 0xb, 0x9, 0x1, 0x5, 0x1000, 0x9, 0x0, 0x50000000, 0x8, 0x2, 0xfffffffe, 0x35, 0x4, 0xe]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0x8, 0x5, 0x1, 0x0, 0x9407, 0x9, 0x2, 0x8, 0x1, 0x4, 0x3, 0x340c000, 0x9, 0x146, 0x1ff, 0x3, 0xa, 0xdac, 0x6, 0x8, 0x1ff, 0x9, 0x0, 0x5, 0x7, 0x9, 0x101, 0x90b9, 0x2, 0x7, 0x8, 0xc, 0x5, 0x4, 0x8, 0x8, 0x6, 0x75, 0xe, 0x4a0, 0x3, 0x95d8, 0x8e, 0x3, 0x3, 0x8, 0x4, 0xb7, 0x9d9, 0x3, 0x200, 0x1, 0x3b621ab2, 0x8001, 0x0, 0x9, 0x7, 0x0, 0x7, 0x968, 0xcdcd, 0xff, 0x97d, 0xc, 0xf, 0x1, 0xffff, 0x0, 0x9fca, 0x8, 0xfffff913, 0xfffffff7, 0x1, 0x7, 0xd, 0x2, 0xffff, 0x5d, 0xffff0001, 0x7f, 0x78c, 0x926e, 0x9, 0x8, 0xfffffffa, 0xb, 0x5, 0x0, 0x5, 0x9, 0x9, 0xa61c, 0x6, 0x1, 0xfffffff2, 0x6, 0x18000, 0x0, 0x2, 0x1, 0x9, 0x2, 0x6, 0x8, 0x5, 0x3, 0x58d5, 0x3, 0x4, 0x7, 0x9, 0x0, 0x1, 0x5, 0x7, 0xcee7, 0x5, 0x2, 0x4327, 0x8, 0x8fb, 0x2, 0x9, 0xfffffffa, 0x2, 0x5, 0xce7, 0x10, 0xff, 0x0, 0x9, 0x8001, 0x4, 0x1, 0x1ff, 0x0, 0xda, 0x8, 0x4, 0x8, 0x9, 0x6, 0x9, 0x10001, 0x8c0, 0x6, 0x3, 0x7, 0x4, 0x7, 0x0, 0x81, 0x200, 0x54b, 0xe4, 0x9, 0x5, 0x80fb, 0x0, 0x6, 0x7, 0x9eb, 0x708, 0x0, 0xf07, 0xd0, 0x0, 0x7, 0x2, 0x2, 0x5, 0x76a, 0x5, 0x8001, 0xfffffffa, 0x9, 0xa37a, 0x3ff, 0xeede, 0x14, 0x4, 0x5, 0x9, 0x8, 0x718000, 0x7, 0x10000, 0x80000000, 0x200, 0x9, 0xf, 0xfff, 0x5, 0x80000001, 0x10000, 0x9, 0x6, 0xb28d, 0x200, 0xfffffa98, 0x5, 0x5, 0xffffffff, 0xcc, 0x800, 0x7, 0x7, 0x7, 0x7, 0x4, 0xd, 0x80000, 0x0, 0xcd3, 0x3ff, 0xb, 0x6, 0x3ff, 0x20000, 0xde1, 0x3, 0x8, 0x8, 0x10, 0x10000, 0x8, 0xed50, 0x1, 0x1, 0x7fffffff, 0x9, 0xd, 0x8, 0xd5ec, 0x9eb, 0xfff, 0x0, 0x7, 0x1, 0x401, 0x3ff, 0x3, 0xfb37, 0x81, 0x0, 0x6, 0x4, 0x67, 0x51a, 0x8, 0xffffff7f, 0x7fffffff, 0x3, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0x4, 0x6, 0xff, 0x7fffffff, 0x8, 0xfff, 0xff, 0x9, 0x4, 0xc58d, 0x1, 0x9, 0x5, 0x2, 0x0, 0x8, 0xb2, 0x1f8, 0x8, 0x7f, 0x10001, 0x517d, 0x4, 0x1000, 0x1, 0x8, 0x10, 0x4, 0xb, 0x7, 0x3, 0x6f3, 0x3, 0x0, 0x6, 0x6, 0xfffffff9, 0x7, 0xf50, 0x8, 0x800, 0x0, 0xf, 0x2, 0x6, 0x7, 0xa, 0x9, 0x4, 0x8, 0x70, 0x309, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4, 0x602, 0x8, 0x8, 0x3, 0xfffff000, 0xed, 0x3, 0x9, 0x8080, 0x875, 0x7, 0x6, 0x640, 0x1, 0x3ff, 0xffffffe3, 0x6b87, 0x33a, 0x6, 0x81, 0x4, 0x49a, 0x7, 0x10, 0x80000001, 0x5, 0x8, 0xc000000, 0x4819, 0x800, 0x6e94, 0x2, 0x100f1, 0x0, 0x9c38, 0xb, 0x10, 0x3, 0x7, 0x6, 0x800, 0x3, 0x2, 0x11, 0x7f, 0x40000, 0x8001, 0x3f, 0x800, 0xffffffff, 0x0, 0x6, 0x5, 0xfffffffe, 0x8, 0x4, 0x5, 0x9, 0x8, 0x6, 0x0, 0x8a0, 0x3, 0x10000, 0x3, 0x9, 0x10, 0x9, 0x401, 0xb1, 0x10, 0x5, 0x4, 0xffff995b, 0x8000, 0xffffee69, 0x2, 0xfffff000, 0x1e, 0x7fff, 0x80000001, 0x4, 0x6, 0x2, 0x7, 0x8e, 0x4, 0xfffff5b5, 0x9, 0x6, 0x10, 0x2ff9, 0xfffffff7, 0x1, 0x359e, 0x6, 0x5, 0x3, 0x1, 0x4, 0xe, 0xffff0000, 0x6, 0x4, 0xffffffff, 0x0, 0x10001, 0xcfd5, 0x5, 0x80, 0x6, 0x4, 0x5, 0x80, 0x28, 0x10, 0x47b, 0x6, 0x6, 0x8, 0x0, 0x3, 0x9c, 0x765b, 0x0, 0x0, 0xd38, 0x7ff, 0x3, 0x6429745b, 0x7fffffff, 0xff, 0xb51a, 0x6, 0x6, 0x8, 0x7, 0xc5, 0x10001, 0xffffffff, 0x1, 0x9, 0x10, 0xfffffff9, 0x1, 0xabb6, 0x1, 0x0, 0x3, 0x5, 0xbe, 0x8, 0x7ff, 0x6, 0x80000000, 0x8000000, 0x3, 0x200, 0x100, 0x81, 0xda, 0x0, 0x9e, 0x8, 0x1, 0x5, 0xe4, 0x1, 0x8f, 0x4, 0x80000001, 0xfff, 0x21c12c19, 0x1ff, 0xfffff173, 0x6, 0x7fffffff, 0x2, 0x8000, 0x4, 0x8, 0x9, 0x0, 0x1, 0x7, 0x8001, 0x8, 0xb749, 0x1, 0x0, 0x7, 0x5, 0x0, 0xbd, 0x6, 0x4]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1058}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5)

1.598247036s ago: executing program 6 (id=4762):
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500), 0x0, 0x4000000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0xffffffffffff65ad}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
close(0xffffffffffffffff)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

1.317341573s ago: executing program 7 (id=4766):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r1, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000013c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40850}, 0x4000080)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x30}}, 0x48000)

1.246560712s ago: executing program 7 (id=4768):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8001, 0x8001, @loopback, 0x1}, 0x1c)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r7, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4718a05f20824a9e}, 0x20000010)

1.1678376s ago: executing program 7 (id=4769):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0)
ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000080))

937.129373ms ago: executing program 3 (id=4778):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
ioctl$BTRFS_IOC_ADD_DEV(r0, 0xb701, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000080)=0x1, 0xd, 0x2, 0x0, 0x0, 0xfffffffe)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}}, &(0x7f00000000c0))
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="edc08818", 0x4}, {0x0, 0x13}], 0x2)

773.181894ms ago: executing program 4 (id=4779):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xb189, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3b)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1)
r3 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000180)=0x1c)
sendto$inet6(r3, &(0x7f0000000400)='7', 0x1, 0x2040, &(0x7f0000000100)={0xa, 0x6e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001)
recvmmsg(r5, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) (async)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xb189, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3b) (async)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) (async)
accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000180)=0x1c) (async)
sendto$inet6(r3, &(0x7f0000000400)='7', 0x1, 0x2040, &(0x7f0000000100)={0xa, 0x6e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async)
accept4$alg(r4, 0x0, 0x0, 0x0) (async)
sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async)
recvmmsg(r5, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

708.108309ms ago: executing program 6 (id=4780):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x2b, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000277000/0x4000)=nil, 0x4000}, 0x1})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc090}, 0xfdc906b7eeb0bc8f)

707.838125ms ago: executing program 4 (id=4781):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4212, r1, 0x201, &(0x7f0000000240)={0x0})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

537.754581ms ago: executing program 4 (id=4782):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600002f07000000cc670000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r0}, 0x38)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600002f07000000cc670000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r0}, 0x38) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async)

465.893223ms ago: executing program 4 (id=4783):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x72, 0x7f, 0x6, 0x4, 0x9, 0x10000, 0x7ff, 0x7f, 0xe4, 0x2, 0x0, 0x80, 0x925, 0xe, 0x2f, 0x0, 0x17, 0x8000, 0x9adf, 0x3, 0x8, 0x1, 0xec32, 0x2637, 0x0, 0x6684, 0x8, 0xef, 0x2, 0x1, 0xfffffffb, 0x9]})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={<r2=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r2, &(0x7f0000000180)=""/52})
r3 = socket$inet6_sctp(0xa, 0xb602df839935fc2b, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={<r4=>0x0, 0x18d, 0x9}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r4, 0x8}, 0x8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000002c0)={<r6=>r4, 0x3, 0x6, [0xe, 0x5, 0x9, 0x2, 0x8, 0x9fc6]}, &(0x7f0000000300)=0x14)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000340))
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000380)={<r7=>0x0, "465f03410544f7d4636c9fabd2bff348"})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001380)={<r8=>0x0, 0x8, 0x6})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001780)={<r9=>0x0, 0x0, 0x1, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001b80)={0x1, 0x4, {0x9, @struct={0x1, 0x6c}, r7, 0x6, 0xafe2, 0x6, 0xffffffff, 0xffff, 0x20, @usage=0x73, 0x7, 0x3, [0x9, 0x5, 0x4, 0x100000001, 0x10, 0x9]}, {0x9, @usage=0x3, r8, 0x2, 0x5, 0x7fffffffffffffff, 0x0, 0xd424, 0x61, @usage=0x9, 0x34a9, 0x280000, [0x8, 0xe, 0x7fffffffffffffff, 0x8000000000000000, 0x80000001, 0x9]}, {0x9, @struct={0x8, 0x4}, r9, 0xffffffffffffffff, 0xfff, 0x667b, 0x2ec2, 0x9, 0x0, @usage=0x10, 0x7, 0x7fff, [0x8000000000000000, 0xc, 0x1, 0x7, 0x3, 0x7f]}, {0x46, 0x3, 0xfffffffffffffff8}})
ioctl$int_out(r3, 0x5462, &(0x7f0000001f80))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000001fc0)={<r10=>r4, @in={{0x2, 0x4e22, @broadcast}}, [0x1200000000000000, 0xffff, 0x3, 0x1, 0x2, 0xd, 0xe0000000, 0xffff, 0x1000, 0xffffffffffffffff, 0x1, 0x67, 0xbaf, 0x1, 0x2]}, &(0x7f00000020c0)=0x100)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002140)={r10, 0x3c, &(0x7f0000002100)=[@in6={0xa, 0x4e24, 0x4, @private2, 0xfffffff7}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000002180)=0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002200)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=@delchain={0x2c, 0x65, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x1, 0xfff1}, {0xffff, 0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
r13 = accept(r11, &(0x7f0000002300)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r14=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000002380)=0x80)
setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000002400)={0x0, &(0x7f00000023c0)}, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r13, 0x84, 0x17, &(0x7f0000002440)={r6, 0x5}, 0x8)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002480)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x80, '\x00', r12, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002700)={0x2, <r16=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x17, 0xf, &(0x7f0000002500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002580)='GPL\x00', 0x0, 0xc5, &(0x7f00000025c0)=""/197, 0xc0e00, 0x55, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f00000026c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r16, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002740)=[{0x5, 0x4, 0x4, 0x4}], 0x10, 0x9}, 0x94)
syz_emit_ethernet(0xd0, &(0x7f0000002840)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@x25={0x805, {0x3, 0x8, 0x17, "dad6d94585e7bb5e9e78c5166c02ffd259f89489fd1d8699656bb47dddb470f2e67b9f471342019fcec0e91e17902168b49cb1cfeb4a74567887493f2b8db370a72c8d8ed8c01aea1b225546c5b1f1a09d88c4291e9fa00c9d05b1985a18d24f5243016495503bb4f416e9419900d5c1f590862aed9f168b98fdf9db9628d5c8e37128e54d08e12913c90b4db2f11079ad0ceec15f901a7b06ca981beef0baa187525d6364ae51ef913fa6c56d4fc75ded2df76fdbbb98bdb8c6d9"}}}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000029c0)={'syztnl1\x00', &(0x7f0000002940)={'syztnl2\x00', r12, 0x4, 0x8, 0x5, 0xffff0001, 0x41, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x10, 0x7800, 0x7b, 0x8000}})

465.660938ms ago: executing program 3 (id=4784):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r1, 0x1, 0x1fff, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400))
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1fd6b38443af8512}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x4)
socket(0x28, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "9a07245bef8c94c07e7fb6b7d0bb1063f1efc886e94b3b4aa0992c3265298455", "a7732af2a249db13d8fb5f4ab359e4ac8f8f4f09af92a89061629e2613346932", "5ae32942c078ae1fb18ea2d7c99832d05ec6f5483fc59687541ebf51475ca62a", "fcdf6fcfdabde50fd53da98126aa73b1100155a346c5fc5b6504579071865f72", "64364ddf5e887f2933934a16cbcf5a52c4d4fa02c14f0f49a3ab77cb2548c9d6", "e5bbca800ffc1c58a6e29216", 0x4, 0xfc5, 0x5, 0x10000, 0x1ff}})

464.786068ms ago: executing program 6 (id=4785):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0xff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x32)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x810c5a, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x4}], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', <r8=>0x0})
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getpeername(r9, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002800128008000100687372001c00028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="050006c6539470e1"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES16=r4, @ANYRESOCT=r6, @ANYRES32=r7, @ANYBLOB="0a000600ffffffffffff00000600ab000802000005007400010000000c0081000500010006000000200013008b6c128cb66c0c026c24861b84cc25c80618b0021885008403e0008c050019000100000008001400", @ANYRES32=r5], 0x74}, 0x1, 0x0, 0x0, 0x4040800}, 0x8008)

361.034667ms ago: executing program 4 (id=4786):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
munlockall()
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) (async)
mremap(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000209000/0x1000)=nil) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

360.677582ms ago: executing program 3 (id=4787):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:etc_mail_t:s0\x00', 0x20)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24d, 0xfffffff6, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0x8}]}, 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

356.109686ms ago: executing program 3 (id=4788):
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x4000000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0xffffffffffff65ad}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
close(0xffffffffffffffff)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

256.656261ms ago: executing program 3 (id=4789):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_netdev_private(r0, 0x8947, &(0x7f0000000040)="a6cc04e2d8f1c38afbf14b29b86e3a")
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58)
close_range(r5, r4, 0x0)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
r7 = socket$inet6(0xa, 0x80002, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0xf0f01e, 0x3})
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_udp_int(r4, 0x88, 0x1, &(0x7f0000000080), 0x4)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

187.659765ms ago: executing program 6 (id=4790):
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000003200), 0x0, 0x2)
ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000000)={0x20000009, "fe1814002189dec0bfffff0800000000000200", 0x5, 0x1000, 0x9, 0x80, 0x4, 0x3, 0xfffefffb, 0x8})
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1, 0x0)

96.804775ms ago: executing program 4 (id=4791):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r2, 0x107, 0xe, 0x0, &(0x7f0000001240))
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffd, 0x80, 0x3231564e, 0x1, [0x2], [0xfffffffd, 0xffffffff, 0x4ec], [0x0, 0x1, 0x800000, 0xfffffffc], [0xa1d6]})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.744992ms ago: executing program 6 (id=4792):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70700000000000063119f00000000000700000000000000950000000000000086b223c17fd5c6311e80752befb60f283890ff0a97195cba4872b282cd13a47f256c1748557c"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x82, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, 'rootmode'}}]}})
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0x6, 0x1, {0xb, @pix={0x8, 0xff, 0x20363159, 0x6, 0x2, 0x4, 0xc, 0x0, 0x1, 0x0, 0x2, 0x1}}, 0x8000})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8)

2.946453ms ago: executing program 3 (id=4793):
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x5210c2, 0x0)
r1 = accept$netrom(r0, 0x0, &(0x7f0000000040))
getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000100)=0x400, 0x4) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x8, 0x200, 0x2, 0x4, 0x9, 0x0, [{0xffffffff9d435f11, 0x2a, 0x8000000000000001, '\x00', 0x400}, {0x5, 0x9, 0x1, '\x00', 0x40c}, {0x1, 0x7, 0xf9, '\x00', 0x287}, {0x401, 0x6, 0x6}, {0x8, 0xffffffff7fffffff, 0x9, '\x00', 0x5}, {0x4, 0xe26, 0x5, '\x00', 0x2202}, {0xfe, 0x0, 0x5, '\x00', 0x80}, {0xfffffffffffffffa, 0x3, 0x87eb, '\x00', 0x689}, {0x4845, 0x5, 0x0, '\x00', 0x400}]})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f00000003c0))
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', <r4=>0x0, 0x2f, 0x8, 0x7, 0x8, 0x40, @local, @loopback, 0x700, 0x10, 0x2, 0x4}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r5=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', <r7=>0x0, 0x7, 0x80, 0x9, 0x9, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @remote, {[@ssrr={0x89, 0x27, 0xc9, [@private=0xa010101, @multicast2, @rand_addr=0x64010100, @private=0xa010100, @multicast1, @multicast2, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', <r8=>0x0, 0x29, 0x3, 0x31, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, @empty, 0x10, 0x8000, 0xffff, 0x41}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001e40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e00)={&(0x7f0000000780)={0x164c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8b}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ',*&,#*/]#.\'%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/hpet\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x40, 0x5, "450533de76901945e2bc50af1153dc0c383b226eedab8edb809d7b0d43db7ce723fdd6f25d9ac3063b7818f9fd07c23eaf02e067ba4408ef5675746b"}]}, @ETHTOOL_A_FEATURES_WANTED={0x290, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "9ea549ef3cde9a03692faa8cb44e8a2c12aca7c6e0ad215f1f8d245e0538d310802d47d5864b0f3ee47444d7309e46b768ce47ca0684"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x89}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/hpet\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/hpet\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '.\'!$(#}-{{\xd9@#]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[-$\x1f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e1a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ':!+-,[#-]:,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-&--!^.@$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4fd}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/hpet\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/hpet\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'g%'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#\xcf$\\#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x19c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe4, 0x4, "7433792bd41a4cbc2b4e7460815c4a629c205e4d0d2017c5a2544b3f274c3cabf932da136ac0adbe6ab7dfe51e57ce8d8e84a92f82740ef4e86bad292b1553f820c8f1cc97610f5d3a8af729b6e3f5e30e9f9c36f27667cf93020a4a72f2590f791bc5d64f569389834aae6324adc97140044abc446dc8f5806cb1ee4ab6833a38bf71202f541bb5e983ad1b92a7253b3b53e9a2af39e7f8fc85c13a5338efe4ba1b900ee0aa269ada4187da6325134b3addef7f349fd132383be0f2529d00b9d771dd01f14101b83a7aa44762a8cc33c0e4c4928b6f26effcda04d10b5fff49"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/hpet\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']!+:@*{(-\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x10a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x41, 0x5, "a5e1caf0e478418dc22b23166f0aa14c8fcc8f5dcea2a2c5b9f23e3b72e09f5fd04a0641df455732f1efe95c1aa06439012bd4b19d7c2be4da16f3dfa6"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/hpet\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':\\(>\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x164c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r10 = socket(0x1f, 0x800, 0x10000)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000001e80)={0xfffffff9, 0xff, 0x5, 0x10000, 0x1a, "c52f3ce95853ee9dbf1792f97a55c05af36dc9"}) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r10, 0x8010661b, &(0x7f0000001ec0)) (async)
r11 = syz_open_dev$vivid(&(0x7f0000001f00), 0x1, 0x2) (async)
fstat(r2, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fchown(r0, 0xee01, r12) (async)
getsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000001fc0), &(0x7f0000002000)=0x4) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x2, 0x3}, {0xffff, 0x2}, {0xc, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000002140)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1f}, @in={0x2, 0x4e24, @loopback}], 0x3c)
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000002180)={0xd, 0x1, 0x5, 0xba, 0x3, 0x3, 0x8001}) (async)
bind$phonet(r0, &(0x7f00000021c0)={0x23, 0xc, 0x40, 0xb7}, 0x10)
ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000002200)={0x200, 0x2}) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000002240), &(0x7f0000002280)=0xc) (async)
syz_emit_ethernet(0x46, &(0x7f00000022c0)={@link_local, @random="55a949771adc", @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @multicast, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @loopback}}}}}, &(0x7f0000002340)={0x0, 0x4, [0xede, 0x447, 0x368, 0x4]})

0s ago: executing program 6 (id=4794):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], &(0x7f0000000280), 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0x0, 0xfff1}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0)

kernel console output (not intermixed with test programs):

kvm: requested 79619 ns i8254 timer period limited to 200000 ns
[  296.992195][T10861] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  297.008241][T17939] lo speed is unknown, defaulting to 1000
[  297.047914][T17941] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000006'
[  297.140622][T17947] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  297.168598][   T40] audit: type=1400 audit(2000000306.014:31146): avc:  denied  { append } for  pid=17946 comm="syz.3.3718" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  297.383489][T17967] binder: binder_mmap: 17966 200000ffd000-200000ffe000 bad vm_flags failed -1
[  297.876988][   T40] audit: type=1400 audit(2000000306.734:31147): avc:  denied  { mount } for  pid=17994 comm="syz.3.3731" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  297.944079][T18009] tmpfs: Unknown parameter 'mŽol'
[  298.488118][ T5935] Bluetooth: hci3: unexpected event for opcode 0x0c7b
[  298.613140][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  298.613154][   T40] audit: type=1800 audit(2000000307.464:31150): pid=18032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3744" name="nullb0" dev="tmpfs" ino=843 res=0 errno=0
[  299.174452][T18068] __nla_validate_parse: 8 callbacks suppressed
[  299.174468][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3760'.
[  299.221548][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3760'.
[  299.340906][T18078] netlink: 'syz.6.3763': attribute type 2 has an invalid length.
[  299.415601][T18080] bond3: (slave bond_slave_1): Device is not bonding slave
[  299.420570][T18080] bond3: option active_slave: invalid value (bond_slave_1)
[  299.425882][T18080] bond3 (unregistering): Released all slaves
[  299.566680][   T40] audit: type=1400 audit(2000000308.424:31151): avc:  denied  { ioctl } for  pid=18088 comm="syz.3.3766" path="socket:[78257]" dev="sockfs" ino=78257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  299.856255][    T9] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  300.006715][    T9] usb 8-1: Using ep0 maxpacket: 8
[  300.010444][    T9] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  300.013173][    T9] usb 8-1: config 179 has no interface number 0
[  300.015790][    T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  300.021460][    T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  300.026413][    T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  300.031184][    T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  300.036419][    T9] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  300.042516][    T9] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  300.047148][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.057149][T18099] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  300.169883][T18105] bond2: option downdelay: invalid value (18446744073709551615)
[  300.172961][T18105] bond2: option downdelay: allowed values 0 - 2147483647
[  300.178435][T18105] bond2 (unregistering): Released all slaves
[  300.489755][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  300.489755][T13056] usb 8-1: USB disconnect, device number 44
[  300.614627][T18124] tipc: Enabling <eth:lo> not permitted
[  300.617129][T18124] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  300.639499][T18125] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3775'.
[  300.790510][T18143] hpfs: Bad magic ... probably not HPFS
[  300.792883][T18143] hpfs: Bad magic ... probably not HPFS
[  300.839615][T18147] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  300.846101][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'.
[  300.930076][T18159] mkiss: ax0: crc mode is auto.
[  300.972047][T18161] lo speed is unknown, defaulting to 1000
[  301.062080][T18176] 8021q: VLANs not supported on vcan0
[  301.064357][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'.
[  301.078558][T18177] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3789'.
[  301.200552][ T5998] libceph: connect (1)[c::]:6789 error -101
[  301.203361][ T5998] libceph: mon0 (1)[c::]:6789 connect error
[  301.280756][ T5998] libceph: connect (1)[b::]:6789 error -101
[  301.282947][ T5998] libceph: mon0 (1)[b::]:6789 connect error
[  301.369221][   T40] audit: type=1400 audit(2000000310.224:31152): avc:  denied  { module_load } for  pid=18178 comm="syz.4.3791" path="/139/bus" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  301.369487][T18197] Invalid ELF header magic: != ELF
[  301.388869][T18192] XFS (nullb0): Invalid superblock magic number
[  301.400035][   T40] audit: type=1400 audit(2000000310.234:31153): avc:  denied  { read } for  pid=18178 comm="syz.4.3791" lport=2381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  301.471516][ T5998] libceph: connect (1)[c::]:6789 error -101
[  301.474497][ T5998] libceph: mon0 (1)[c::]:6789 connect error
[  301.537544][ T5998] libceph: connect (1)[b::]:6789 error -101
[  301.542431][ T5998] libceph: mon0 (1)[b::]:6789 connect error
[  301.573879][T18202] No such timeout policy "syz1"
[  301.986215][ T5998] libceph: connect (1)[c::]:6789 error -101
[  301.988442][ T5998] libceph: mon0 (1)[c::]:6789 connect error
[  302.021543][T18187] ceph: No mds server is up or the cluster is laggy
[  302.023901][T18181] ceph: No mds server is up or the cluster is laggy
[  302.306361][   T54] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  302.457388][   T54] usb 9-1: config index 0 descriptor too short (expected 39, got 27)
[  302.460993][   T54] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  302.465318][   T54] usb 9-1: config 0 interface 0 has no altsetting 0
[  302.482964][T18222] dummy0: Caught tx_queue_len zero misconfig
[  302.485101][T18222] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3800'.
[  302.488558][T18222] netem: unknown loss type 13
[  302.490195][   T54] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  302.490529][T18222] netem: change failed
[  302.494395][   T54] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  302.506916][   T54] usb 9-1: Product: syz
[  302.508949][   T54] usb 9-1: Manufacturer: syz
[  302.511008][   T54] usb 9-1: SerialNumber: syz
[  302.526833][   T54] usb 9-1: config 0 descriptor??
[  302.530534][   T54] hub 9-1:0.0: bad descriptor, ignoring hub
[  302.533065][   T54] hub 9-1:0.0: probe with driver hub failed with error -5
[  302.548337][   T54] usb 9-1: selecting invalid altsetting 0
[  302.553495][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3801'.
[  302.557066][T18224] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3801'.
[  302.573180][T18225] bridge0: entered promiscuous mode
[  302.637194][T13056] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  302.786577][T18240] program syz.4.3796 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  302.806041][T13056] usb 12-1: Using ep0 maxpacket: 8
[  302.810859][T13056] usb 12-1: config 0 interface 0 has no altsetting 0
[  302.817072][T13056] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  302.820218][T13056] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.832771][T13056] usb 12-1: config 0 descriptor??
[  303.254045][T13056] mcp2221 0003:04D8:00DD.002E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[  303.258964][T18256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  303.319155][T18258] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3812'.
[  303.464077][ T5961] hid_parser_main: 7 callbacks suppressed
[  303.464096][ T5961] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  303.528146][ T5961] hid-generic 0000:0000:0000.002F: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  303.602996][ T5998] usb 9-1: USB disconnect, device number 36
[  304.285170][   T40] audit: type=1400 audit(2000000313.134:31154): avc:  denied  { accept } for  pid=18276 comm="syz.4.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  304.300709][T18279] misc userio: Invalid payload size
[  304.406875][T18288] tunl0: Caught tx_queue_len zero misconfig
[  304.467082][   T40] audit: type=1400 audit(2000000313.324:31155): avc:  denied  { append } for  pid=18289 comm="syz.4.3822" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  304.540578][   T40] audit: type=1400 audit(2000000313.394:31156): avc:  denied  { write } for  pid=18289 comm="syz.4.3822" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  304.644486][T18298] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3824'.
[  304.666659][T18299] xt_hashlimit: invalid interval
[  304.744858][T18301] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  304.910680][T18310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3826'.
[  304.940280][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3830'.
[  305.379139][   T10] usb 12-1: USB disconnect, device number 6
[  305.448074][T18331] netlink: 'syz.3.3835': attribute type 8 has an invalid length.
[  305.460860][T18332] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3837'.
[  305.594679][T18340] bond1: option mode: unable to set because the bond device has slaves
[  305.846282][T18345] sit0: Caught tx_queue_len zero misconfig
[  305.976181][T13056] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  306.043610][T18368] ufs: You didn't specify the type of your ufs filesystem
[  306.043610][T18368] 
[  306.043610][T18368] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  306.043610][T18368] 
[  306.043610][T18368] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  306.056421][T18368] ufs: failed to set blocksize
[  306.084054][T18370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3849'.
[  306.091701][T18370] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  306.095178][T18370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.116198][T13056] usb 12-1: device descriptor read/64, error -71
[  306.128119][T18368] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  306.240562][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3851'.
[  306.366296][T13056] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  306.506458][T13056] usb 12-1: device descriptor read/64, error -71
[  306.617719][T13056] usb usb12-port1: attempt power cycle
[  306.623368][   T40] audit: type=1400 audit(2000000315.474:31157): avc:  denied  { remount } for  pid=18398 comm="syz.3.3857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  306.626273][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3857'.
[  306.725236][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3861'.
[  306.997072][T13056] usb 12-1: new high-speed USB device number 9 using dummy_hcd
[  307.002647][   T40] audit: type=1400 audit(2000000315.854:31158): avc:  denied  { setopt } for  pid=18436 comm="syz.4.3869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  307.016552][T13056] usb 12-1: device descriptor read/8, error -71
[  307.156542][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3871'.
[  307.241150][T18452] netlink: 'syz.6.3873': attribute type 10 has an invalid length.
[  307.257008][T13056] usb 12-1: new high-speed USB device number 10 using dummy_hcd
[  307.275664][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'.
[  307.277496][T13056] usb 12-1: device descriptor read/8, error -71
[  307.321832][T18460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.381381][T18465] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  307.399508][T13056] usb usb12-port1: unable to enumerate USB device
[  307.552461][   T40] audit: type=1400 audit(2000000316.404:31159): avc:  denied  { name_bind } for  pid=18469 comm="syz.6.3880" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  307.671592][T18486] geneve2: entered promiscuous mode
[  307.673455][T18486] geneve2: entered allmulticast mode
[  308.108340][   T40] audit: type=1400 audit(2000000316.964:31160): avc:  denied  { unmount } for  pid=15442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  308.619325][T18528] openvswitch: netlink: Flow actions attr not present in new flow.
[  308.622769][T18529] openvswitch: netlink: Flow actions attr not present in new flow.
[  308.908685][T18543] xt_l2tp: v2 tid > 0xffff: 16462212
[  308.978533][T18545] vlan2: entered promiscuous mode
[  308.981004][T18545] vlan2: entered allmulticast mode
[  308.981244][   T40] audit: type=1400 audit(2000000317.834:31161): avc:  denied  { mounton } for  pid=18546 comm="syz.6.3900" path="/376/file0" dev="tmpfs" ino=2013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  309.006274][T18545] hsr_slave_1: entered allmulticast mode
[  309.036081][T13056] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  309.181463][T18554] netlink: 'syz.7.3903': attribute type 29 has an invalid length.
[  309.186260][T18556] netlink: 'syz.6.3904': attribute type 21 has an invalid length.
[  309.197465][T13056] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.207930][T13056] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.217785][T13056] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  309.222678][T13056] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  309.246131][T13056] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.251167][T13056] usb 9-1: config 0 descriptor??
[  309.412023][T18570] netlink: 'syz.3.3905': attribute type 10 has an invalid length.
[  309.429565][T18570] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.435097][T18570] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.437924][T18570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.447689][T18570] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  309.679271][T13056] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  309.698276][T13056] usb 9-1: USB disconnect, device number 37
[  309.748618][T18582] "syz.4.3910" (18582) uses obsolete ecb(arc4) skcipher
[  309.749813][T18580] fido_id[18580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/report_descriptor': No such file or directory
[  309.807102][T18584] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  309.886350][T13058] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[  309.934790][T18592] IPv6: NLM_F_REPLACE set, but no existing node found!
[  309.968989][T18591] netlink: 'syz.7.3912': attribute type 12 has an invalid length.
[  310.022940][T18597] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  310.026507][T18597] SELinux: failed to load policy
[  310.028458][T18600] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  310.031251][T18600] SELinux: failed to load policy
[  310.048474][T13058] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  310.053161][T13058] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  310.059731][T13058] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  310.063471][T13058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.069595][T18578] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  310.074691][T13058] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  310.308942][T18606] netlink: 'syz.6.3918': attribute type 5 has an invalid length.
[  310.392698][T13058] usb 8-1: USB disconnect, device number 45
[  310.478191][T18613] netlink: 'syz.6.3920': attribute type 8 has an invalid length.
[  310.566176][T18617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.575613][T18617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.586281][T18617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.956632][T18626] IPv6: NLM_F_CREATE should be specified when creating new route
[  310.995874][T18630] netlink: 'syz.3.3927': attribute type 1 has an invalid length.
[  310.999515][T18630] __nla_validate_parse: 6 callbacks suppressed
[  310.999524][T18630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3927'.
[  311.005363][T18631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3927'.
[  311.293490][T18656] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  311.430518][   T40] audit: type=1400 audit(2000000320.284:31162): avc:  denied  { mounton } for  pid=18672 comm="syz.4.3942" path="/" dev="ramfs" ino=82168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  311.508918][   T40] audit: type=1326 audit(2000000320.364:31163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.7.3947" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b4998f7c9 code=0x0
[  311.536768][   T40] audit: type=1400 audit(2000000320.394:31164): avc:  denied  { create } for  pid=18688 comm="syz.6.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  311.561395][ T5935] Bluetooth: min 16105 > max 7
[  311.563597][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3947'.
[  311.567953][T18691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.586853][   T40] audit: type=1400 audit(2000000320.444:31165): avc:  denied  { mounton } for  pid=18692 comm="syz.3.3949" path="/219/file0" dev="hugetlbfs" ino=76176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[  311.651441][T18691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.652763][T18693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3949'.
[  311.665978][T18693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3949'.
[  311.704228][   T40] audit: type=1400 audit(2000000320.554:31166): avc:  denied  { unmount } for  pid=15442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  311.834607][T18717] netlink: 'syz.4.3956': attribute type 11 has an invalid length.
[  311.843266][T18717] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3956'.
[  311.902074][T18723] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3956'.
[  311.974056][T18722] IPv6: NLM_F_CREATE should be specified when creating new route
[  311.980127][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3957'.
[  312.064155][   T40] audit: type=1400 audit(2000000320.914:31167): avc:  denied  { unmount } for  pid=18726 comm="syz.3.3959" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  312.107502][   T40] audit: type=1400 audit(2000000320.964:31168): avc:  denied  { write } for  pid=18728 comm="syz.3.3960" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  312.107707][T18730] random: crng reseeded on system resumption
[  312.146098][   T40] audit: type=1400 audit(2000000320.964:31169): avc:  denied  { ioctl } for  pid=18728 comm="syz.3.3960" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  312.246924][ T5935] Bluetooth: hci3: unexpected event for opcode 0x0c23
[  312.250273][T18741] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3966'.
[  312.718088][   T40] audit: type=1400 audit(2000000321.574:31170): avc:  denied  { mounton } for  pid=18783 comm="syz.4.3979" path="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  312.719897][T18785] netlink: 'syz.3.3978': attribute type 21 has an invalid length.
[  312.729293][T18785] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3978'.
[  312.744629][   T40] audit: type=1400 audit(2000000321.594:31171): avc:  denied  { unmount } for  pid=15921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  312.820381][T18799] bridge_slave_0: invalid flags given to default FDB implementation
[  312.877578][T18803] loop9: detected capacity change from 0 to 7
[  312.895358][T18803] Dev loop9: unable to read RDB block 7
[  312.899386][T18803]  loop9: AHDI p3 p4
[  312.900970][T18808] ceph: Path missing in source
[  312.902632][T18803] loop9: partition table partially beyond EOD, truncated
[  312.905300][T18803] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  312.952937][T18812] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  312.965975][T18812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65533 sclass=netlink_route_socket pid=18812 comm=syz.3.3987
[  313.139230][T18809] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  313.235254][T18833] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  313.249062][T18835] tmpfs: Bad value for 'mpol'
[  313.626141][ T5935] Bluetooth: hci0: command 0x0405 tx timeout
[  313.855969][   T10] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  313.881141][T18892] fuse: Bad value for 'fd'
[  313.894813][T18892] 9pnet_virtio: no channels available for device syz
[  314.005946][   T10] usb 9-1: Using ep0 maxpacket: 8
[  314.009210][   T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  314.012405][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  314.015507][   T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  314.019004][   T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  314.023210][   T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  314.026487][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.145912][ T6072] usb 12-1: new high-speed USB device number 11 using dummy_hcd
[  314.234503][   T10] usb 9-1: GET_CAPABILITIES returned 0
[  314.236605][   T10] usbtmc 9-1:16.0: can't read capabilities
[  314.300484][ T6072] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  314.304404][ T6072] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.308439][ T6072] usb 12-1: Product: syz
[  314.310296][ T6072] usb 12-1: Manufacturer: syz
[  314.312310][ T6072] usb 12-1: SerialNumber: syz
[  314.329920][ T6072] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  314.345381][ T5961] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  314.364332][T18897] 9pnet: Could not find request transport: v
[  314.435628][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  314.440395][T18876] netlink: 'syz.4.4007': attribute type 30 has an invalid length.
[  314.455342][T18876] bond3: option arp_missed_max: invalid value (0)
[  314.457797][T18876] bond3: option arp_missed_max: allowed values 1 - 255
[  314.554068][T13055] usb 12-1: USB disconnect, device number 11
[  314.828109][T18876] bond3 (unregistering): Released all slaves
[  315.194087][ T6072] usb 9-1: USB disconnect, device number 38
[  315.386061][ T5961] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive
[  315.389220][ T5961] ath9k_htc: Failed to initialize the device
[  315.392479][T13055] usb 12-1: ath9k_htc: USB layer deinitialized
[  315.872906][T18913] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.878700][T18913] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.973215][T18913] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.976900][T18913] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.060069][T18913] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.064266][T18913] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.071973][T18925] overlayfs: failed to clone upperpath
[  316.103421][T18913] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.109404][T18913] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.157310][T18931] __nla_validate_parse: 6 callbacks suppressed
[  316.157321][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4023'.
[  316.162459][T18929] lo speed is unknown, defaulting to 1000
[  316.162614][T18931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4023'.
[  316.206296][T18934] xt_socket: unknown flags 0xe4
[  316.214528][T18933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  316.220293][T13055] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  316.225693][T18933] 9pnet_fd: p9_fd_create_tcp (18933): problem connecting socket to 127.0.0.1
[  316.226180][T12544] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.236108][T12544] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.253723][T12544] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.257345][T12544] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.286752][T12544] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.290588][T12544] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.386279][T13055] usb 9-1: Using ep0 maxpacket: 8
[  316.390524][T13055] usb 9-1: config 0 interface 0 has no altsetting 0
[  316.393346][T13055] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  316.396015][T10122] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.397617][T13055] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.400768][T10122] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.406962][T13055] usb 9-1: config 0 descriptor??
[  316.473650][T18943] fuse: Unknown parameter 'user_'
[  316.479534][T18943] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[  316.482385][T18943] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  316.487895][T18943] vhci_hcd vhci_hcd.0: Device attached
[  316.504061][T18945] vhci_hcd: connection closed
[  316.511260][T10122] vhci_hcd: stop threads
[  316.514550][T10122] vhci_hcd: release socket
[  316.524570][T10122] vhci_hcd: disconnect device
[  316.824099][T13055] mcp2221 0003:04D8:00DD.0031: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  317.027392][T13055] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  317.083889][T13055] hid-generic 0000:0000:0000.0032: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  317.223407][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  317.223423][   T40] audit: type=1326 audit(2000000326.074:31179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18966 comm="syz.7.4035" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b4998f7c9 code=0x0
[  317.529434][T18984] sch_tbf: burst 19920 is lower than device lo mtu (65550) !
[  317.555950][T18984] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4039'.
[  317.737316][T18995] @: renamed from vlan0 (while UP)
[  318.277989][   T40] audit: type=1800 audit(2000000327.134:31180): pid=19018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4049" name="nullb0" dev="tmpfs" ino=843 res=0 errno=0
[  318.342295][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4050'.
[  318.507183][T19026] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4052'.
[  318.803316][T19046] overlay: filesystem on ./file1 not supported as upperdir
[  318.955558][T13058] usb 9-1: USB disconnect, device number 39
[  318.993007][T19068] ip6gretap2: entered promiscuous mode
[  318.995265][T19068] ip6gretap2: entered allmulticast mode
[  318.999567][T19068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4063'.
[  319.045163][T19073] ieee802154 phy1 wpan1: encryption failed: -126
[  319.156496][T19076] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4065'.
[  319.237631][T19085] SELinux:  policydb version 1402900228 does not match my version range 15-35
[  319.241831][T19085] SELinux: failed to load policy
[  319.451897][   T40] audit: type=1400 audit(2000000328.304:31181): avc:  denied  { relabelfrom } for  pid=19093 comm="syz.7.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  319.458940][   T40] audit: type=1400 audit(2000000328.314:31182): avc:  denied  { relabelto } for  pid=19093 comm="syz.7.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  319.930565][T19114] xt_hashlimit: size too large, truncated to 1048576
[  319.936286][T19114] syz.4.4074: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  319.942824][T19114] CPU: 3 UID: 0 PID: 19114 Comm: syz.4.4074 Not tainted syzkaller #0 PREEMPT(full) 
[  319.942839][T19114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  319.942846][T19114] Call Trace:
[  319.942850][T19114]  <TASK>
[  319.942854][T19114]  dump_stack_lvl+0x16c/0x1f0
[  319.942870][T19114]  warn_alloc+0x248/0x3a0
[  319.942888][T19114]  ? __pfx_warn_alloc+0x10/0x10
[  319.942910][T19114]  ? hashlimit_mt_check_common+0x8c0/0x1460
[  319.942928][T19114]  ? __vmalloc_node_noprof+0xad/0xf0
[  319.942944][T19114]  __vmalloc_node_range_noprof+0xfe2/0x1480
[  319.942958][T19114]  ? lock_acquire+0x179/0x330
[  319.942977][T19114]  ? hashlimit_mt_check_common+0x8c0/0x1460
[  319.942995][T19114]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  319.943009][T19114]  ? __lock_acquire+0x433/0x22f0
[  319.943024][T19114]  ? ___kmalloc_large_node+0xed/0x160
[  319.943041][T19114]  __kvmalloc_node_noprof+0x431/0x9b0
[  319.943052][T19114]  ? hashlimit_mt_check_common+0x8c0/0x1460
[  319.943066][T19114]  ? find_held_lock+0x2b/0x80
[  319.943077][T19114]  ? hashlimit_mt_check_common+0x8c0/0x1460
[  319.943094][T19114]  ? hashlimit_mt_check_common+0x8c0/0x1460
[  319.943108][T19114]  hashlimit_mt_check_common+0x8c0/0x1460
[  319.943127][T19114]  hashlimit_mt_check+0x71/0x90
[  319.943140][T19114]  ? __pfx_hashlimit_mt_check+0x10/0x10
[  319.943154][T19114]  xt_check_match+0x286/0xa50
[  319.943168][T19114]  ? acpi_os_map_iomem+0x150/0x5e0
[  319.943185][T19114]  ? __pfx_xt_check_match+0x10/0x10
[  319.943200][T19114]  ? xt_find_target+0x1f2/0x290
[  319.943215][T19114]  ? xt_find_match+0x1f6/0x290
[  319.943231][T19114]  find_check_entry.constprop.0+0x34e/0xa20
[  319.943250][T19114]  ? __pfx_find_check_entry.constprop.0+0x10/0x10
[  319.943272][T19114]  ? translate_table+0xc0e/0x17b0
[  319.943290][T19114]  translate_table+0xd0b/0x17b0
[  319.943310][T19114]  ? __pfx_translate_table+0x10/0x10
[  319.943329][T19114]  do_ip6t_set_ctl+0x603/0xc50
[  319.943343][T19114]  ? find_held_lock+0x2b/0x80
[  319.943353][T19114]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  319.943368][T19114]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  319.943386][T19114]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  319.943404][T19114]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  319.943419][T19114]  nf_setsockopt+0x8d/0xf0
[  319.943432][T19114]  ipv6_setsockopt+0x135/0x170
[  319.943449][T19114]  rawv6_setsockopt+0xd1/0x6a0
[  319.943462][T19114]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  319.943477][T19114]  ? selinux_socket_setsockopt+0x6a/0x80
[  319.943491][T19114]  ? sock_common_setsockopt+0x2e/0xf0
[  319.943504][T19114]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  319.943516][T19114]  do_sock_setsockopt+0xf3/0x1d0
[  319.943530][T19114]  __sys_setsockopt+0x1a0/0x230
[  319.943548][T19114]  __x64_sys_setsockopt+0xbd/0x160
[  319.943563][T19114]  ? do_syscall_64+0x91/0xf80
[  319.943574][T19114]  ? lockdep_hardirqs_on+0x7c/0x110
[  319.943584][T19114]  do_syscall_64+0xcd/0xf80
[  319.943596][T19114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.943607][T19114] RIP: 0033:0x7f13e0f8f7c9
[  319.943617][T19114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.943627][T19114] RSP: 002b:00007f13df1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  319.943638][T19114] RAX: ffffffffffffffda RBX: 00007f13e11e5fa0 RCX: 00007f13e0f8f7c9
[  319.943645][T19114] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[  319.943651][T19114] RBP: 00007f13e1013f91 R08: 0000000000000528 R09: 0000000000000000
[  319.943657][T19114] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000
[  319.943664][T19114] R13: 00007f13e11e6038 R14: 00007f13e11e5fa0 R15: 00007ffd205bbb48
[  319.943682][T19114]  </TASK>
[  319.943686][T19114] Mem-Info:
[  320.068041][T19114] active_anon:32208 inactive_anon:7465 isolated_anon:0
[  320.068041][T19114]  active_file:1751 inactive_file:30153 isolated_file:0
[  320.068041][T19114]  unevictable:18168 dirty:104 writeback:0
[  320.068041][T19114]  slab_reclaimable:10288 slab_unreclaimable:102823
[  320.068041][T19114]  mapped:36851 shmem:32706 pagetables:1263
[  320.068041][T19114]  sec_pagetables:317 bounce:0
[  320.068041][T19114]  kernel_misc_reclaimable:0
[  320.068041][T19114]  free:384462 free_pcp:15563 free_cma:0
[  320.068384][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'.
[  320.083535][T19114] Node 0 active_anon:72984kB inactive_anon:29860kB active_file:6516kB inactive_file:120096kB unevictable:67724kB isolated(anon):0kB isolated(file):0kB mapped:141080kB dirty:412kB writeback:0kB shmem:75296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16528kB pagetables:4244kB sec_pagetables:1268kB all_unreclaimable? no Balloon:0kB
[  320.091985][T19111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4072'.
[  320.098548][T19114] Node 1 active_anon:60064kB inactive_anon:0kB active_file:488kB inactive_file:516kB unevictable:4948kB isolated(anon):0kB isolated(file):0kB mapped:9176kB dirty:4kB writeback:0kB shmem:59620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:432kB pagetables:808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  320.112318][T19114] Node 0 DMA free:5316kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:216kB inactive_anon:0kB active_file:300kB inactive_file:0kB unevictable:7376kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:64kB free_cma:0kB
[  320.122541][T19111] geneve2: entered promiscuous mode
[  320.123965][T19114] lowmem_reserve[]: 0 1236 1236 1236 1236
[  320.127260][T19114] Node 0 DMA32 free:34016kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72796kB inactive_anon:29860kB active_file:6216kB inactive_file:120096kB unevictable:60348kB writepending:412kB zspages:0kB present:2080628kB managed:1266680kB mlocked:0kB bounce:0kB free_pcp:25868kB local_pcp:4824kB free_cma:0kB
[  320.128597][T19111] geneve2: entered allmulticast mode
[  320.139900][T19114] lowmem_reserve[]: 0 0 0 0 0
[  320.139925][T19114] Node 1 Normal free:1489456kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65520kB inactive_anon:0kB active_file:488kB inactive_file:516kB unevictable:4948kB writepending:4kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:35452kB local_pcp:10284kB free_cma:0kB
[  320.139971][T19114] lowmem_reserve[]: 0 0 0 0 0
[  320.140004][T19114] Node 0 DMA: 9*4kB (UM) 13*8kB (U) 13*16kB (UM) 1*32kB (U) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 5308kB
[  320.140139][T19114] Node 0 DMA32: 286*4kB (UME) 139*8kB (UE) 103*16kB (UME) 101*32kB (UME) 60*64kB (UM) 30*128kB (UME) 13*256kB (M) 13*512kB (UM) 9*1024kB (UM) 0*2048kB 0*4096kB = 34016kB
[  320.140269][T19114] Node 1 Normal: 4*4kB (UE) 6*8kB (UME) 16*16kB (ME) 8*32kB (E) 11*64kB (UME) 3*128kB (E) 51*256kB (UME) 42*512kB (UE) 31*1024kB (UME) 20*2048kB (UME) 337*4096kB (UM) = 1489280kB
[  320.176704][T19114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  320.191197][T19114] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  320.195338][T19114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  320.200611][T19114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  320.204580][T19114] 84790 total pagecache pages
[  320.206702][T19114] 0 pages in swap cache
[  320.208088][T19114] Free swap  = 124996kB
[  320.209503][T19114] Total swap = 124996kB
[  320.210878][T19114] 1048443 pages RAM
[  320.212150][T19114] 0 pages HighMem/MovableOnly
[  320.213707][T19114] 282460 pages reserved
[  320.215074][T19114] 0 pages cma reserved
[  320.464361][   T40] audit: type=1400 audit(2000000329.314:31183): avc:  denied  { getopt } for  pid=19136 comm="syz.3.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  320.465043][T19137] tmpfs: Invalid gid '0x00000000ffffffff'
[  322.237164][T19147] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  322.269853][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  322.321547][T19152] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4087'.
[  322.333067][T19143] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.4083' sets config #3988
[  322.359799][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4087'.
[  322.447282][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4092'.
[  322.454547][T19165] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.516031][T19172] xt_hashlimit: size too large, truncated to 1048576
[  322.581344][T19165] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.606696][T19179] program syz.4.4096 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  322.612005][   T40] audit: type=1400 audit(2000000331.464:31184): avc:  denied  { checkpoint_restore } for  pid=19178 comm="syz.4.4096" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  322.690776][T19165] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.762184][T19185] xt_hashlimit: max too large, truncated to 1048576
[  322.765789][T19185] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4098'.
[  322.770336][T19185] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  322.791521][T19165] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.828368][T19189] loop5: detected capacity change from 0 to 7
[  322.881034][   T35] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.885489][   T35] buffer_io_error: 23 callbacks suppressed
[  322.885503][   T35] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.894070][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.898438][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.901825][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.905652][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.911155][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.914985][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.920065][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.923898][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.927375][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.930866][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.934259][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.935060][T10127] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.938184][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.938277][T19189] ldm_validate_partition_table(): Disk read failed.
[  322.938334][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.950516][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.953955][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.955576][T10127] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.957902][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.963344][T19189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.967322][T19189] Buffer I/O error on dev loop5, logical block 0, async page read
[  322.970784][T19189] Dev loop5: unable to read RDB block 0
[  322.973313][T19189]  loop5: unable to read partition table
[  322.975980][T19189] loop5: partition table beyond EOD, truncated
[  322.978606][T19189] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  322.988364][ T1149] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.009626][ T1149] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.197913][T19204] netlink: 'syz.3.4104': attribute type 1 has an invalid length.
[  323.223948][T19204] syzkaller1: entered promiscuous mode
[  323.226480][T19204] syzkaller1: entered allmulticast mode
[  323.234552][T19204] 8021q: adding VLAN 0 to HW filter on device bond4
[  323.447018][T19214] geneve2: entered promiscuous mode
[  323.449641][T19214] geneve2: entered allmulticast mode
[  323.549900][T19224] fuse: Unknown parameter 'Ü4J»¯o˜v+Æ^Q'
[  323.785637][T19231] i2c i2c-1: Invalid block write size 34
[  323.788677][T19231] i2c i2c-1: Invalid block write size 34
[  323.791176][T19231] i2c i2c-1: Invalid block write size 34
[  323.793646][T19231] i2c i2c-1: Invalid block write size 34
[  323.796326][T19231] i2c i2c-1: Invalid block write size 34
[  323.798832][T19231] i2c i2c-1: Invalid block write size 34
[  323.813172][T19231] i2c i2c-1: Invalid block write size 34
[  323.816049][T19231] i2c i2c-1: Invalid block write size 34
[  323.828825][T19231] i2c i2c-1: Invalid block write size 34
[  323.831653][T19231] i2c i2c-1: Invalid block write size 34
[  323.846040][T19231] i2c i2c-1: Invalid block write size 34
[  323.916227][ T5961] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  324.077868][ T5961] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  324.083483][ T5961] usb 9-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00
[  324.087500][ T5961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.093083][ T5961] usb 9-1: config 0 descriptor??
[  324.933993][T19249] : entered promiscuous mode
[  324.945216][T19249] xfrm1: entered allmulticast mode
[  325.300470][ T5961] usbhid 9-1:0.0: can't add hid device: -71
[  325.306762][ T5961] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  325.316552][ T5961] usb 9-1: USB disconnect, device number 40
[  325.383434][   T40] audit: type=1400 audit(2000000334.234:31185): avc:  denied  { ioctl } for  pid=19255 comm="syz.7.4118" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  325.918976][    C1] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  325.922596][    C1] sr 2:0:0:0: [sr0] tag#19 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[  325.939068][T19263] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7)
[  325.941378][T19263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  325.944655][T19263] vhci_hcd vhci_hcd.0: Device attached
[  325.948986][   T40] audit: type=1400 audit(2000000334.804:31186): avc:  denied  { remount } for  pid=19262 comm="syz.7.4121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  325.958294][T19264] vhci_hcd: connection closed
[  325.961658][T12544] vhci_hcd: stop threads
[  325.965765][T12544] vhci_hcd: release socket
[  325.968269][T12544] vhci_hcd: disconnect device
[  325.991155][   T40] audit: type=1400 audit(2000000334.844:31187): avc:  denied  { unmount } for  pid=15921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  326.195703][T19276] netlink: 'syz.6.4125': attribute type 10 has an invalid length.
[  326.202653][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4125'.
[  326.222714][T19276] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  326.655785][T19293] xt_CT: No such helper "pptp"
[  326.671191][   T40] audit: type=1400 audit(2000000335.524:31188): avc:  denied  { remount } for  pid=19292 comm="syz.3.4130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  326.740612][T19300] tipc: Trying to set illegal importance in message
[  326.744973][T19300] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4132'.
[  327.155966][   T40] audit: type=1400 audit(2000000336.004:31189): avc:  denied  { watch } for  pid=19338 comm="syz.7.4148" path="/179/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  327.164655][   T40] audit: type=1400 audit(2000000336.014:31190): avc:  denied  { watch_sb watch_reads } for  pid=19338 comm="syz.7.4148" path="/179/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  327.305380][   T40] audit: type=1400 audit(2000000336.154:31191): avc:  denied  { map } for  pid=19342 comm="syz.3.4149" path="/257/file0/memory.events" dev="9p" ino=71827927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  327.406998][T19340] team0: Device xfrm2 is of different type
[  327.693732][T19361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4154'.
[  328.173429][T19377] netlink: 'syz.4.4161': attribute type 3 has an invalid length.
[  328.180249][T19377] netlink: 'syz.4.4161': attribute type 3 has an invalid length.
[  328.184646][T19379] 9pnet_fd: Insufficient options for proto=fd
[  328.327963][T19385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4163'.
[  328.331885][T19385] openvswitch: netlink: Flow key attr not present in new flow.
[  328.378290][   T40] audit: type=1400 audit(2000000337.234:31192): avc:  denied  { create } for  pid=19388 comm="syz.4.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  328.397729][   T40] audit: type=1400 audit(2000000337.254:31193): avc:  denied  { setopt } for  pid=19388 comm="syz.4.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  328.418393][   T40] audit: type=1400 audit(2000000337.254:31194): avc:  denied  { prog_load } for  pid=19388 comm="syz.4.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  328.431136][   T40] audit: type=1400 audit(2000000337.254:31195): avc:  denied  { bpf } for  pid=19388 comm="syz.4.4165" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  328.447989][   T40] audit: type=1400 audit(2000000337.254:31196): avc:  denied  { perfmon } for  pid=19388 comm="syz.4.4165" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  328.457242][   T40] audit: type=1400 audit(2000000337.274:31197): avc:  denied  { read write } for  pid=15921 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  328.464866][   T40] audit: type=1400 audit(2000000337.274:31198): avc:  denied  { open } for  pid=15921 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  328.474096][   T40] audit: type=1400 audit(2000000337.274:31199): avc:  denied  { ioctl } for  pid=15921 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  328.483240][   T40] audit: type=1400 audit(2000000337.304:31200): avc:  denied  { read } for  pid=19390 comm="syz.4.4166" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  328.492004][   T40] audit: type=1400 audit(2000000337.304:31201): avc:  denied  { open } for  pid=19390 comm="syz.4.4166" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  328.515048][T19395] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  328.630222][T19405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4171'.
[  328.880213][T19419] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4177'.
[  328.912520][T19419] bond3 (unregistering): Released all slaves
[  328.936321][T13055] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  328.989000][T19422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4177'.
[  328.995065][T19422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19422 comm=syz.6.4177
[  329.097818][T13055] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  329.102325][T13055] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.114969][T13055] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.117210][T19432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19432 comm=syz.7.4180
[  329.120180][T13055] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  329.130619][T13055] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  329.134601][T13055] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  329.139561][T13055] usb 9-1: Manufacturer: syz
[  329.150725][T13055] usb 9-1: config 0 descriptor??
[  329.166215][T19437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4182'.
[  329.196879][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4183'.
[  329.214574][T19441] 8021q: adding VLAN 0 to HW filter on device bond2
[  329.228049][T19442] macsec1: entered allmulticast mode
[  329.230115][T19442] bond2: entered allmulticast mode
[  329.234481][T19442] bond2: left allmulticast mode
[  329.562042][T13055] usbhid 9-1:0.0: can't add hid device: -71
[  329.564168][T13055] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  329.569513][T13055] usb 9-1: USB disconnect, device number 41
[  329.751697][T19464] netlink: 'syz.6.4189': attribute type 322 has an invalid length.
[  330.322503][T19477] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  330.325349][T19477] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  330.329076][T19477] vhci_hcd vhci_hcd.0: Device attached
[  330.596162][ T5961] usb 51-1: new high-speed USB device number 2 using vhci_hcd
[  331.147812][T19479] vhci_hcd: connection reset by peer
[  331.150457][   T80] vhci_hcd: stop threads
[  331.152093][   T80] vhci_hcd: release socket
[  331.156960][   T80] vhci_hcd: disconnect device
[  331.528128][T19494] openvswitch: netlink: Message has 8 unknown bytes.
[  331.531295][T19494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.538351][T19494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7959 sclass=netlink_route_socket pid=19494 comm=syz.6.4198
[  331.545041][T19494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19494 comm=syz.6.4198
[  331.725332][T19505] openvswitch: netlink: IP tunnel dst address not specified
[  331.730299][T19505] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4202'.
[  332.343684][T19515] lo speed is unknown, defaulting to 1000
[  332.440071][T19515] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  332.443443][T19515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.966631][T19543] kAFS: unable to lookup cell 'syz0'
[  333.048914][T19549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.055790][T19549] loop6: detected capacity change from 0 to 515899392
[  333.412322][   T40] kauditd_printk_skb: 96 callbacks suppressed
[  333.412339][   T40] audit: type=1400 audit(2000000342.264:31298): avc:  denied  { create } for  pid=19558 comm="syz.7.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  333.425229][   T40] audit: type=1400 audit(2000000342.274:31299): avc:  denied  { getopt } for  pid=19558 comm="syz.7.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  333.433791][   T40] audit: type=1400 audit(2000000342.274:31300): avc:  denied  { connect } for  pid=19558 comm="syz.7.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  333.587296][T19486] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  333.661762][T19565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4222'.
[  333.662766][   T40] audit: type=1400 audit(2000000342.514:31301): avc:  denied  { write } for  pid=19562 comm="syz.4.4221" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  333.667470][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4222'.
[  333.674888][   T40] audit: type=1400 audit(2000000342.524:31302): avc:  denied  { ioctl } for  pid=19562 comm="syz.4.4221" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  333.689997][   T40] audit: type=1400 audit(2000000342.544:31303): avc:  denied  { open } for  pid=19562 comm="syz.4.4221" path="/dev/ptyqd" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  333.712690][T19569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.751984][   T40] audit: type=1400 audit(2000000342.604:31304): avc:  denied  { write } for  pid=19562 comm="syz.4.4221" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  333.782654][T19564] netlink: 'syz.4.4221': attribute type 21 has an invalid length.
[  333.788606][T19564] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4221'.
[  333.793446][T19564] netlink: 'syz.4.4221': attribute type 21 has an invalid length.
[  333.797398][T19564] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4221'.
[  333.955377][   T40] audit: type=1400 audit(2000000342.804:31305): avc:  denied  { write } for  pid=19580 comm="syz.6.4226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  333.956174][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4226'.
[  333.966318][T19582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4226'.
[  334.006360][   T40] audit: type=1400 audit(2000000342.864:31306): avc:  denied  { getopt } for  pid=19584 comm="syz.4.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  334.051731][T19587] ceph: No source
[  334.091518][   T40] audit: type=1400 audit(2000000342.944:31307): avc:  denied  { write } for  pid=19586 comm="syz.4.4228" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  334.128723][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4228'.
[  334.204651][   T10] IPVS: starting estimator thread 0...
[  334.220662][T19597] IPVS: sh: FWM 3 0x00000003 - no destination available
[  334.308691][T19598] IPVS: using max 33 ests per chain, 79200 per kthread
[  334.538473][T19632] ubi31: attaching mtd0
[  334.542624][T19632] ubi31: scanning is finished
[  334.544600][T19632] ubi31: empty MTD device detected
[  334.597704][T19633] team0: Device xfrm2 is of different type
[  334.706382][T19632] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  334.709765][T19632] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  334.712984][T19632] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  334.716557][T19632] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  334.719889][T19632] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  334.722918][T19632] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  334.727037][T19632] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1128269165
[  334.731282][T19632] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  334.739012][T19635] ubi31: background thread "ubi_bgt31d" started, PID 19635
[  334.950768][T19640] netlink: 'syz.7.4241': attribute type 1 has an invalid length.
[  334.953476][T19640] netlink: 'syz.7.4241': attribute type 2 has an invalid length.
[  335.054877][T19642] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  335.074138][T19645] dvmrp6: entered allmulticast mode
[  335.130458][T19650] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4245'.
[  335.134561][T19650] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  335.139251][T19652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4246'.
[  335.324033][T19673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4251'.
[  335.347995][T19673] bond3: option primary_reselect: invalid value (133)
[  335.369933][T19673] bond3 (unregistering): Released all slaves
[  335.408236][T19656] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  335.457810][T19668] /dev/sr0: Can't open blockdev
[  335.470329][T19668] FAT-fs (nullb0): bogus number of reserved sectors
[  335.472952][T19668] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  335.653754][T19686] ip6erspan1: entered promiscuous mode
[  335.683966][T19655] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  335.706603][ T5961] vhci_hcd: vhci_device speed not set
[  335.946413][T13058] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  336.107402][T13058] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.111135][T13058] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.114540][T13058] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  336.119203][T13058] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.133303][T13058] usb 9-1: config 0 descriptor??
[  336.571640][T19713] could not allocate digest TFM handle sha384-neon
[  336.849913][T19724] kAFS: unable to lookup cell '/,c¾ûL'
[  336.962393][T19735] geneve2: entered promiscuous mode
[  337.326103][ T5961] usb 12-1: new high-speed USB device number 12 using dummy_hcd
[  337.476124][ T5961] usb 12-1: Using ep0 maxpacket: 8
[  337.480282][ T5961] usb 12-1: config 0 interface 0 has no altsetting 0
[  337.483773][ T5961] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  337.488434][ T5961] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.494632][ T5961] usb 12-1: config 0 descriptor??
[  337.917366][T13061] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0
[  337.972291][T13061] hid-generic 0000:0000:0000.0033: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  337.990769][T19780] /dev/nullb0: Can't lookup blockdev
[  338.004963][T19782] xt_cgroup: path and classid specified
[  338.046971][T19787] netlink: 'syz.3.4285': attribute type 1 has an invalid length.
[  338.048214][T19788] netlink: 'syz.3.4285': attribute type 1 has an invalid length.
[  338.050043][T19787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.057063][T19788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.159042][T19802] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  338.164478][T19802] overlayfs: failed to clone upperpath
[  338.271076][T19811] tmpfs: Bad value for 'nr_inodes'
[  338.347359][T19813] xt_bpf: check failed: parse error
[  338.708993][   T40] kauditd_printk_skb: 58 callbacks suppressed
[  338.709004][   T40] audit: type=1326 audit(2000000347.564:31366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19689 comm="syz.4.4255" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e0f8f7c9 code=0x7fc00000
[  338.736703][T13058] usbhid 9-1:0.0: can't add hid device: -71
[  338.746240][T13058] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  338.750875][T13058] usb 9-1: USB disconnect, device number 42
[  338.828801][   T40] audit: type=1400 audit(2000000347.684:31367): avc:  denied  { mounton } for  pid=19823 comm="syz.3.4295" path="/283/file0" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  338.994139][   T40] audit: type=1400 audit(2000000347.844:31368): avc:  denied  { setopt } for  pid=19823 comm="syz.3.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  339.004919][   T40] audit: type=1400 audit(2000000347.854:31369): avc:  denied  { connect } for  pid=19823 comm="syz.3.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  339.005591][T19821] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  339.033398][   T40] audit: type=1400 audit(2000000347.884:31370): avc:  denied  { create } for  pid=19827 comm="syz.6.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  339.045220][   T40] audit: type=1400 audit(2000000347.894:31371): avc:  denied  { setopt } for  pid=19827 comm="syz.6.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  339.072304][   T40] audit: type=1400 audit(2000000347.924:31372): avc:  denied  { bind } for  pid=19827 comm="syz.6.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  339.078602][T19828] __nla_validate_parse: 5 callbacks suppressed
[  339.078612][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4296'.
[  339.090247][   T40] audit: type=1400 audit(2000000347.934:31373): avc:  denied  { read } for  pid=19827 comm="syz.6.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  339.130731][   T40] audit: type=1400 audit(2000000347.984:31374): avc:  denied  { ioctl } for  pid=19831 comm="syz.4.4298" path="socket:[86737]" dev="sockfs" ino=86737 ioctlcmd=0x4160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  339.274203][T19840] sctp: [Deprecated]: syz.6.4300 (pid 19840) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.274203][T19840] Use struct sctp_sack_info instead
[  340.043541][ T5961] usbhid 12-1:0.0: can't add hid device: -71
[  340.056677][ T5961] usbhid 12-1:0.0: probe with driver usbhid failed with error -71
[  340.065965][ T5961] usb 12-1: USB disconnect, device number 12
[  340.074779][T19845] netem: incorrect gi model size
[  340.077573][T19845] netem: change failed
[  340.080746][T19846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19846 comm=syz.7.4302
[  340.136171][T19851] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4304'.
[  340.139987][T19851] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4304'.
[  340.506148][   T10] usb 12-1: new high-speed USB device number 13 using dummy_hcd
[  340.544471][T19861] pim6reg: entered allmulticast mode
[  340.552532][   T40] audit: type=1400 audit(2000000349.404:31375): avc:  denied  { mount } for  pid=19860 comm="syz.6.4308" name="/" dev="hugetlbfs" ino=86841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  340.564785][T19861] pim6reg: left allmulticast mode
[  340.656107][   T10] usb 12-1: Using ep0 maxpacket: 8
[  340.660150][   T10] usb 12-1: config 0 has no interfaces?
[  340.664706][   T10] usb 12-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  340.668704][   T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.671989][T19863] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in;
[  340.671989][T19863]    program syz.4.4309 not setting count and/or reply_len properly
[  340.679975][   T10] usb 12-1: Product: syz
[  340.681796][   T10] usb 12-1: Manufacturer: syz
[  340.686181][   T10] usb 12-1: SerialNumber: syz
[  340.691837][   T10] usb 12-1: config 0 descriptor??
[  340.730867][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4309'.
[  340.750434][T19868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  341.647147][T19878] netlink: 'syz.4.4314': attribute type 2 has an invalid length.
[  341.650716][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'.
[  342.238192][T19904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=19904 comm=syz.3.4324
[  342.243930][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4324'.
[  342.280368][T19904] syzkaller1: entered promiscuous mode
[  342.282659][T19904] syzkaller1: entered allmulticast mode
[  342.411768][T19921] overlayfs: failed to resolve './bus': -2
[  342.454618][T19924] bond0: Caught tx_queue_len zero misconfig
[  342.484345][T19929] netlink: 'syz.4.4331': attribute type 1 has an invalid length.
[  342.526394][T19929] 8021q: adding VLAN 0 to HW filter on device bond3
[  342.550597][T19929] 8021q: adding VLAN 0 to HW filter on device bond3
[  342.553081][T19929] bond3: (slave sit1): The slave device specified does not support setting the MAC address
[  342.558923][T19929] bond3: (slave sit1): Error -95 calling set_mac_address
[  342.690333][T19940] overlayfs: missing 'lowerdir'
[  342.831310][   T10] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0
[  342.888547][   T10] hid-generic 0000:0000:0000.0034: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  343.249749][   T10] usb 12-1: USB disconnect, device number 13
[  343.498931][T19958] team0: Device gtp0 is up. Set it down before adding it as a team port
[  343.530670][T19962] lo speed is unknown, defaulting to 1000
[  343.751893][T19969] tmpfs: Bad value for 'mpol'
[  343.780476][   T40] kauditd_printk_skb: 18 callbacks suppressed
[  343.780492][   T40] audit: type=1400 audit(2000000352.634:31394): avc:  denied  { setopt } for  pid=19965 comm="syz.7.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  343.860906][   T40] audit: type=1400 audit(2000000352.714:31395): avc:  denied  { create } for  pid=19975 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  343.957384][   T40] audit: type=1400 audit(2000000352.784:31396): avc:  denied  { setopt } for  pid=19979 comm="syz.6.4349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  343.966912][   T40] audit: type=1400 audit(2000000352.804:31397): avc:  denied  { ioctl } for  pid=19975 comm="syz.3.4347" path="socket:[89188]" dev="sockfs" ino=89188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  344.136215][   T40] audit: type=1400 audit(2000000352.984:31398): avc:  denied  { read write } for  pid=19988 comm="syz.7.4352" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  344.147873][   T40] audit: type=1400 audit(2000000352.984:31399): avc:  denied  { open } for  pid=19988 comm="syz.7.4352" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  344.249502][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4356'.
[  344.249572][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4356'.
[  344.303468][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4358'.
[  344.303470][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4358'.
[  344.340677][   T40] audit: type=1400 audit(2000000353.194:31400): avc:  denied  { bind } for  pid=19999 comm="syz.6.4358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  344.353340][   T40] audit: type=1400 audit(2000000353.204:31401): avc:  denied  { name_bind } for  pid=20001 comm="syz.7.4357" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  344.383511][T20000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20000 comm=syz.6.4358
[  344.383523][T20003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20003 comm=syz.6.4358
[  344.485384][   T40] audit: type=1400 audit(2000000353.334:31402): avc:  denied  { read } for  pid=20015 comm="syz.4.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  344.509747][   T40] audit: type=1400 audit(2000000353.364:31403): avc:  denied  { execute_no_trans } for  pid=20017 comm="syz.6.4362" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  344.613245][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4363'.
[  344.619620][T20026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.680295][T20030] fuse: Unknown parameter 'ÿÿ0x0000000000000004'
[  344.688184][T20030] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4364'.
[  345.172032][T20040] overlay: Unknown parameter '/'
[  345.182016][T20040] overlay: Unknown parameter '/'
[  345.182359][T20042] 9pnet_virtio: no channels available for device syz
[  345.361898][T20045] netlink: 'syz.7.4367': attribute type 1 has an invalid length.
[  346.560731][T20068] delete_channel: no stack
[  346.685246][T20081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=20081 comm=syz.6.4379
[  346.866967][T20096] nfs4: Unknown parameter '
'
[  346.996674][T20100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.055722][T20100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.093792][T20102] xfs: Unknown parameter 'norecovery_r
àô¨U¨yÖ€g0o>éWâÚÝèۥ®ÈØü×ÚÚJ¹­]Ì°?ô²þÈÓÈ.'
[  347.115783][T20100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.138367][T20104] overlayfs: overlapping lowerdir path
[  347.138863][T20106] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  347.146621][T20106] overlayfs: overlapping lowerdir path
[  348.116139][T20184] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  348.118588][T20184] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  348.132439][T20184] vhci_hcd vhci_hcd.0: Device attached
[  348.149802][T20185] vhci_hcd: connection closed
[  348.156062][ T4973] vhci_hcd: stop threads
[  348.160093][ T4973] vhci_hcd: release socket
[  348.162091][ T4973] vhci_hcd: disconnect device
[  348.266595][T20198] netlink: 'syz.6.4405': attribute type 1 has an invalid length.
[  348.289638][T20192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.293715][T20192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.813835][   T40] kauditd_printk_skb: 27 callbacks suppressed
[  348.813847][   T40] audit: type=1400 audit(2000000357.664:31431): avc:  denied  { read } for  pid=20217 comm="syz.4.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  348.824697][   T40] audit: type=1400 audit(2000000357.674:31432): avc:  denied  { setopt } for  pid=20217 comm="syz.4.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  348.838204][ T6020] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0
[  348.906420][ T6020] hid-generic 0000:0000:0000.0035: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  348.947680][T20225] pim6reg9: entered allmulticast mode
[  349.036836][   T40] audit: type=1400 audit(2000000357.894:31433): avc:  denied  { mount } for  pid=20228 comm="syz.4.4415" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  349.046251][   T40] audit: type=1400 audit(2000000357.894:31434): avc:  denied  { mounton } for  pid=20228 comm="syz.4.4415" path="/286/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  349.960408][T20259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4425'.
[  350.003020][T20259] hsr_slave_1 (unregistering): left promiscuous mode
[  350.151608][   T40] audit: type=1400 audit(2000000358.994:31435): avc:  denied  { create } for  pid=20260 comm="syz.4.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  350.176095][   T40] audit: type=1400 audit(2000000358.994:31436): avc:  denied  { lock } for  pid=20260 comm="syz.4.4426" path="socket:[89456]" dev="sockfs" ino=89456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  350.180960][T20270] Unsupported ieee802154 address type: 0
[  350.193402][   T40] audit: type=1400 audit(2000000358.994:31437): avc:  denied  { ioctl } for  pid=20260 comm="syz.4.4426" path="socket:[89456]" dev="sockfs" ino=89456 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  350.216262][   T40] audit: type=1400 audit(2000000359.034:31438): avc:  denied  { bind } for  pid=20268 comm="syz.7.4428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  350.448078][   T40] audit: type=1400 audit(2000000359.304:31439): avc:  denied  { read } for  pid=20291 comm="syz.7.4434" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  350.459388][   T40] audit: type=1400 audit(2000000359.304:31440): avc:  denied  { open } for  pid=20291 comm="syz.7.4434" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  350.537773][T20302] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4437'.
[  350.541116][T20302] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4437'.
[  350.609725][T20314] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4439'.
[  350.620521][T20313] tmpfs: Unknown parameter 'suo´Ý‡êta'
[  350.717914][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4443'.
[  350.721192][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4443'.
[  351.300893][T20347] overlayfs: missing 'lowerdir'
[  351.308629][T20347] input: syz0 as /devices/virtual/input/input38
[  351.323769][T20347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4451'.
[  351.356280][T13055] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  351.495970][T13055] usb 9-1: device descriptor read/64, error -71
[  351.673176][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4457'.
[  351.702892][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4459'.
[  351.736209][T13055] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  351.788363][T20376] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4461'.
[  351.876042][T13055] usb 9-1: device descriptor read/64, error -71
[  351.988218][T13055] usb usb9-port1: attempt power cycle
[  351.997057][T20394] dvmrp6: entered allmulticast mode
[  352.153119][T20412] netlink: 'syz.6.4471': attribute type 10 has an invalid length.
[  352.162877][T20412] team0: Port device dummy0 added
[  352.168516][T20412] netlink: 'syz.6.4471': attribute type 10 has an invalid length.
[  352.173016][T20412] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  352.181647][T20412] team0: Failed to send options change via netlink (err -105)
[  352.185097][T20412] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  352.190488][T20412] team0: Port device dummy0 removed
[  352.192141][ T5933] Bluetooth: hci0: unexpected event for opcode 0x0c7b
[  352.195174][ T5933] Bluetooth: hci0: unexpected event for opcode 0x0c7b
[  352.292821][ T6020] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0
[  352.335953][T13055] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[  352.347663][ T6020] hid-generic 0000:0000:0000.0036: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  352.356661][T13055] usb 9-1: device descriptor read/8, error -71
[  352.605910][T13055] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[  352.626564][T13055] usb 9-1: device descriptor read/8, error -71
[  352.736201][T13055] usb usb9-port1: unable to enumerate USB device
[  353.608870][T20432] IPv6: Can't replace route, no match found
[  353.654825][T20434] netlink: 'syz.6.4477': attribute type 21 has an invalid length.
[  353.657913][T20434] netlink: 'syz.6.4477': attribute type 21 has an invalid length.
[  353.852298][T20454] IPVS: persistence engine module ip_vs_pe_s not found
[  354.151184][   T40] kauditd_printk_skb: 120 callbacks suppressed
[  354.151199][   T40] audit: type=1400 audit(2000000363.004:31561): avc:  denied  { map } for  pid=20467 comm="syz.4.4486" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  354.174938][T20468] lo speed is unknown, defaulting to 1000
[  354.680149][T20486] lo speed is unknown, defaulting to 1000
[  354.734365][   T40] audit: type=1400 audit(2000000363.584:31562): avc:  denied  { write } for  pid=20488 comm="syz.7.4492" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  354.761111][   T40] audit: type=1400 audit(2000000363.584:31563): avc:  denied  { map } for  pid=20488 comm="syz.7.4492" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  354.773262][   T40] audit: type=1400 audit(2000000363.594:31564): avc:  denied  { execute } for  pid=20488 comm="syz.7.4492" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  354.950533][T20504] lo speed is unknown, defaulting to 1000
[  355.043145][   T40] audit: type=1400 audit(2000000363.894:31565): avc:  denied  { append } for  pid=20510 comm="syz.4.4498" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  355.059645][T20511] __nla_validate_parse: 9 callbacks suppressed
[  355.059662][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4498'.
[  355.207509][T20522] kvm: apic: phys broadcast and lowest prio
[  355.328930][T20535] veth1_to_batadv: entered promiscuous mode
[  355.331847][T20535] batadv_slave_0: entered promiscuous mode
[  355.333924][T20535] batadv_slave_0: left promiscuous mode
[  355.337325][T20535] veth1_to_batadv: left promiscuous mode
[  355.505730][   T40] audit: type=1400 audit(2000000364.354:31566): avc:  denied  { mount } for  pid=20541 comm="syz.3.4509" name="/" dev="overlay" ino=1728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  355.594635][   T40] audit: type=1400 audit(2000000364.444:31567): avc:  denied  { unmount } for  pid=15442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  355.607611][T20545] 9pnet: Could not find request transport: vir
[  355.623590][   T40] audit: type=1400 audit(2000000364.474:31568): avc:  denied  { create } for  pid=20547 comm="syz.3.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  355.665109][T20557] netlink: 'syz.3.4513': attribute type 30 has an invalid length.
[  355.665612][T20558] netlink: 'syz.3.4513': attribute type 30 has an invalid length.
[  355.779494][T13055] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0
[  355.786458][T13055] hid-generic 0000:0000:0000.0037: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  356.061759][T20581] netlink: 'syz.6.4520': attribute type 46 has an invalid length.
[  356.064689][T20581] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4520'.
[  356.069875][   T40] audit: type=1400 audit(2000000364.924:31569): avc:  denied  { create } for  pid=20580 comm="syz.6.4520" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  356.079843][   T40] audit: type=1400 audit(2000000364.934:31570): avc:  denied  { unlink } for  pid=20580 comm="syz.6.4520" name="file0" dev="tmpfs" ino=3153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  356.140959][T20588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20588 comm=syz.6.4523
[  356.146262][T20588] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4523'.
[  356.227821][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4527'.
[  356.285001][T20595] netlink: 'syz.4.4526': attribute type 11 has an invalid length.
[  356.294423][T20595] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4526'.
[  356.363591][T20615] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4530'.
[  356.594696][T20630] netlink: 700 bytes leftover after parsing attributes in process `syz.6.4535'.
[  356.639401][T20636] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  356.642945][T20636] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock
[  356.646522][T20636] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  356.650049][T20636] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock
[  356.836908][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  356.847664][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  356.851480][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  356.854576][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  356.857690][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  356.893041][T20643] lo speed is unknown, defaulting to 1000
[  356.970868][T20649] SELinux:  Context ÜkÁÚ5Æ3&‹Ä^–ä%öòvEÚC"8/šqÕê]œ”e^B¶2²ÆvʾŸ4ìãšËË€áÞQT¸0믔/<|Ò±�Qâ‰X
Ÿ2c#¡¦ï"¢.Ç®%r¸ð'Ùç¿8̓©® is not valid (left unmapped).
[  357.045627][T20643] chnl_net:caif_netlink_parms(): no params data found
[  357.162112][T20660] usb usb8: check_ctrlrecip: process 20660 (syz.7.4544) requesting ep 01 but needs 81
[  357.165402][T20660] usb usb8: usbfs: process 20660 (syz.7.4544) did not claim interface 0 before use
[  357.227763][T20643] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.230182][T20643] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.232587][T20643] bridge_slave_0: entered allmulticast mode
[  357.235343][T20643] bridge_slave_0: entered promiscuous mode
[  357.264789][T20664] can0: slcan on ttyS3.
[  357.266529][T20643] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.268933][T20643] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.271310][T20643] bridge_slave_1: entered allmulticast mode
[  357.275343][T20643] bridge_slave_1: entered promiscuous mode
[  357.311798][T20643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.326713][T20643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.371469][T20643] team0: Port device team_slave_0 added
[  357.376659][T20643] team0: Port device team_slave_1 added
[  357.402603][T20677] mkiss: ax0: crc mode is auto.
[  357.425641][T20643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.437351][T20643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.448856][T20643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.467876][T20643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.470949][T20643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.488161][T20643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.536098][T20643] hsr_slave_0: entered promiscuous mode
[  357.539538][T20643] hsr_slave_1: entered promiscuous mode
[  357.542638][T20643] debugfs: 'hsr0' already exists in 'hsr'
[  357.545175][T20643] Cannot create hsr debugfs directory
[  357.546212][T20675] can0 (unregistered): slcan off ttyS3.
[  357.586505][T20686] dns_resolver: Unsupported content type (234)
[  357.688849][T20696] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4553'.
[  357.774005][T20643] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.899367][T20643] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.929647][T20707] gre0: Master is either lo or non-ether device
[  357.933840][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4556'.
[  357.969159][T20700] lo speed is unknown, defaulting to 1000
[  357.981404][T20643] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.067008][T20643] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.372766][    C3] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  358.377307][    C3] sr 2:0:0:0: [sr0] tag#14 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[  358.395160][T20643] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  358.419342][T20643] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  358.428196][T20643] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  358.445956][ T5961] usb 12-1: new high-speed USB device number 14 using dummy_hcd
[  358.456980][T20643] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  358.476684][T20737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4565'.
[  358.558354][T20643] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.578188][T20643] 8021q: adding VLAN 0 to HW filter on device team0
[  358.581178][ T5961] usb 12-1: device descriptor read/64, error -71
[  358.598196][T11653] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.601618][T11653] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.616418][T11653] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.620175][T11653] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.823525][T20769] FAT-fs (nullb0): bogus number of reserved sectors
[  358.829513][T20769] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  358.846276][ T5961] usb 12-1: new high-speed USB device number 15 using dummy_hcd
[  358.906295][ T5935] Bluetooth: hci1: command tx timeout
[  358.986435][ T5961] usb 12-1: device descriptor read/64, error -71
[  359.040564][T20771] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.059163][T20643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.096448][ T5961] usb usb12-port1: attempt power cycle
[  359.211461][T20643] veth0_vlan: entered promiscuous mode
[  359.223461][T20643] veth1_vlan: entered promiscuous mode
[  359.269828][T20643] veth0_macvtap: entered promiscuous mode
[  359.287731][T20643] veth1_macvtap: entered promiscuous mode
[  359.299804][T20643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.317668][T20643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.330538][T11651] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.339511][T11651] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.359599][T11651] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.363124][T11651] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.408827][T11653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.412098][T11653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.423622][T12544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.429926][T12544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.436490][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  359.436501][   T40] audit: type=1400 audit(2000000368.294:31585): avc:  denied  { mounton } for  pid=20643 comm="syz-executor" path="/syzkaller.JiaWo6/syz-tmp" dev="sda1" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  359.447560][ T5961] usb 12-1: new high-speed USB device number 16 using dummy_hcd
[  359.448374][   T40] audit: type=1400 audit(2000000368.294:31586): avc:  denied  { mount } for  pid=20643 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  359.458508][   T40] audit: type=1400 audit(2000000368.294:31587): avc:  denied  { mounton } for  pid=20643 comm="syz-executor" path="/syzkaller.JiaWo6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  359.466586][ T5961] usb 12-1: device descriptor read/8, error -71
[  359.483218][   T40] audit: type=1400 audit(2000000368.294:31588): avc:  denied  { mounton } for  pid=20643 comm="syz-executor" path="/syzkaller.JiaWo6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=93522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  359.492251][   T40] audit: type=1400 audit(2000000368.304:31589): avc:  denied  { mounton } for  pid=20643 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  359.500619][   T40] audit: type=1400 audit(2000000368.304:31590): avc:  denied  { mount } for  pid=20643 comm="syz-executor" name="/" dev="gadgetfs" ino=10390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  359.508189][   T40] audit: type=1400 audit(2000000368.304:31591): avc:  denied  { mounton } for  pid=20643 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  359.672061][   T40] audit: type=1400 audit(2000000368.524:31592): avc:  denied  { create } for  pid=20805 comm="syz.3.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  359.681970][   T40] audit: type=1400 audit(2000000368.524:31593): avc:  denied  { getopt } for  pid=20805 comm="syz.3.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  359.699366][   T40] audit: type=1400 audit(2000000368.554:31594): avc:  denied  { mounton } for  pid=20812 comm="syz.6.4581" path="/3/file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  359.715928][ T5961] usb 12-1: new high-speed USB device number 17 using dummy_hcd
[  359.736589][ T5961] usb 12-1: device descriptor read/8, error -71
[  359.846659][ T5961] usb usb12-port1: unable to enumerate USB device
[  359.879458][ T6963] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  359.958376][ T6963] hid-generic 0000:0000:0000.0038: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  360.010379][T20822] syz.6.4583 (20822): drop_caches: 2
[  360.271219][T20831] __nla_validate_parse: 1 callbacks suppressed
[  360.271236][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4585'.
[  360.566936][T20835] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  360.570392][T20835] overlayfs: failed to set xattr on upper
[  360.573104][T20835] overlayfs: ...falling back to redirect_dir=nofollow.
[  360.576644][T20835] overlayfs: ...falling back to index=off.
[  360.579278][T20835] overlayfs: ...falling back to uuid=null.
[  360.779727][T20845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4589'.
[  360.919883][T20847] tmpfs: Bad value for 'mpol'
[  360.996346][ T5935] Bluetooth: hci1: command tx timeout
[  361.480510][T20870] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  361.500561][ T6963] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  361.540005][    C0] vkms_vblank_simulate: vblank timer overrun
[  361.652047][ T5961] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0
[  361.707049][ T6963] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  361.712160][ T6963] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  361.717861][ T6963] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  361.718438][ T5961] hid-generic 0000:0000:0000.0039: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  361.721948][ T6963] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.734368][T20859] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  361.754463][ T6963] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  361.952726][T13058] usb 9-1: USB disconnect, device number 47
[  361.977178][T13056] usb 12-1: new high-speed USB device number 18 using dummy_hcd
[  362.106069][T13056] usb 12-1: device descriptor read/64, error -71
[  362.276201][T13058] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[  362.346767][T13056] usb 12-1: new high-speed USB device number 19 using dummy_hcd
[  362.426231][T13058] usb 9-1: Using ep0 maxpacket: 16
[  362.429917][T13058] usb 9-1: no configurations
[  362.431984][T13058] usb 9-1: can't read configurations, error -22
[  362.476086][T13056] usb 12-1: device descriptor read/64, error -71
[  362.565961][T13058] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[  362.586830][T13056] usb usb12-port1: attempt power cycle
[  362.715960][T13058] usb 9-1: Using ep0 maxpacket: 16
[  362.718264][T13058] usb 9-1: no configurations
[  362.719730][T13058] usb 9-1: can't read configurations, error -22
[  362.722276][T13058] usb usb9-port1: attempt power cycle
[  362.925991][T13056] usb 12-1: new high-speed USB device number 20 using dummy_hcd
[  362.947817][T13056] usb 12-1: device descriptor read/8, error -71
[  363.066208][T13058] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[  363.066456][ T5935] Bluetooth: hci1: command tx timeout
[  363.086624][T13058] usb 9-1: Using ep0 maxpacket: 16
[  363.089955][T13058] usb 9-1: no configurations
[  363.091602][T13058] usb 9-1: can't read configurations, error -22
[  363.206215][T13056] usb 12-1: new high-speed USB device number 21 using dummy_hcd
[  363.221990][T20894] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4605'.
[  363.226602][T13058] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[  363.227074][T13056] usb 12-1: device descriptor read/8, error -71
[  363.246867][T13058] usb 9-1: Using ep0 maxpacket: 16
[  363.252192][T13058] usb 9-1: no configurations
[  363.254309][T13058] usb 9-1: can't read configurations, error -22
[  363.257988][T13058] usb usb9-port1: unable to enumerate USB device
[  363.348990][T13056] usb usb12-port1: unable to enumerate USB device
[  363.461684][  T842] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0
[  363.518987][  T842] hid-generic 0000:0000:0000.003A: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  363.648447][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4611'.
[  363.853927][T20925] xt_CONNSECMARK: invalid mode: 0
[  363.856508][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4614'.
[  363.859739][T20925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4614'.
[  363.978831][T20932] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4616'.
[  363.989152][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4616'.
[  364.685977][ T5961] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  364.808882][   T40] kauditd_printk_skb: 96 callbacks suppressed
[  364.808976][   T40] audit: type=1400 audit(2000000373.664:31691): avc:  denied  { map } for  pid=20943 comm="syz.7.4619" path="socket:[94468]" dev="sockfs" ino=94468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  364.833231][   T40] audit: type=1400 audit(2000000373.664:31692): avc:  denied  { read } for  pid=20943 comm="syz.7.4619" path="socket:[94468]" dev="sockfs" ino=94468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  364.837497][ T5961] usb 9-1: Using ep0 maxpacket: 32
[  364.842085][   T40] audit: type=1400 audit(2000000373.664:31693): avc:  denied  { setopt } for  pid=20943 comm="syz.7.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  364.852174][ T5961] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  364.854924][ T5961] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  364.861351][ T5961] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  364.865039][ T5961] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  364.869752][ T5961] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  364.874184][ T5961] usb 9-1: config 0 interface 0 has no altsetting 0
[  364.878597][ T5961] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  364.881611][ T5961] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  364.884423][ T5961] usb 9-1: Product: syz
[  364.886697][ T5961] usb 9-1: Manufacturer: syz
[  364.888605][ T5961] usb 9-1: SerialNumber: syz
[  364.892087][ T5961] usb 9-1: config 0 descriptor??
[  364.899836][ T5961] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  364.907048][ T5961] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  365.036763][T20953] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4623'.
[  365.089224][   T40] audit: type=1400 audit(2000000373.944:31694): avc:  denied  { append } for  pid=20958 comm="syz.3.4625" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  365.099312][T20940] ldusb 9-1:0.0: Couldn't submit interrupt_in_urb -90
[  365.104577][ T5961] usb 9-1: USB disconnect, device number 52
[  365.109663][ T5961] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  365.111526][   T40] audit: type=1400 audit(2000000373.964:31695): avc:  denied  { block_suspend } for  pid=20961 comm="syz.6.4626" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  365.156126][ T5935] Bluetooth: hci1: command tx timeout
[  365.169364][   T40] audit: type=1400 audit(2000000374.024:31696): avc:  denied  { ioctl } for  pid=20963 comm="syz.6.4627" path="socket:[93901]" dev="sockfs" ino=93901 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  365.268142][T13056] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0
[  365.318437][T13056] hid-generic 0000:0000:0000.003B: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  365.732240][   T40] audit: type=1400 audit(2000000374.584:31697): avc:  denied  { map } for  pid=20976 comm="syz.7.4631" path="socket:[95262]" dev="sockfs" ino=95262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  365.795624][   T40] audit: type=1400 audit(2000000374.644:31698): avc:  denied  { getopt } for  pid=20976 comm="syz.7.4631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  366.565769][   T40] audit: type=1400 audit(2000000375.414:31699): avc:  denied  { append } for  pid=20981 comm="syz.4.4632" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  366.595543][   T40] audit: type=1400 audit(2000000375.444:31700): avc:  denied  { append } for  pid=20983 comm="syz.6.4633" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  366.734935][T13056] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0
[  366.742133][T13056] hid-generic 0000:0000:0000.003C: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  367.504485][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4646'.
[  367.544735][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4647'.
[  367.631803][T21028] netlink: 6 bytes leftover after parsing attributes in process `syz.7.4645'.
[  367.845944][T13056] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[  367.987048][T13056] usb 9-1: device descriptor read/64, error -71
[  368.005120][T21033] netlink: 'syz.6.4650': attribute type 1 has an invalid length.
[  368.027900][T21033] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.055295][T21033] bond1: (slave veth3): Enslaving as an active interface with a down link
[  368.067877][T21033] 8021q: adding VLAN 0 to HW filter on device batadv1
[  368.070444][T21033] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  368.226562][T13056] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[  368.366128][T13056] usb 9-1: device descriptor read/64, error -71
[  368.476261][T13056] usb usb9-port1: attempt power cycle
[  368.506068][  T842] usb 12-1: new high-speed USB device number 22 using dummy_hcd
[  368.574345][T21050] erspan1: entered promiscuous mode
[  368.634812][T21052] syzkaller1: entered promiscuous mode
[  368.638634][T21052] syzkaller1: entered allmulticast mode
[  368.659042][  T842] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.665941][  T842] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  368.676944][  T842] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  368.680975][  T842] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  368.683885][  T842] usb 12-1: Manufacturer: syz
[  368.697074][  T842] usb 12-1: config 0 descriptor??
[  368.712734][T21054] JFS: charset not found
[  368.826136][T13056] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[  368.846627][T13056] usb 9-1: device descriptor read/8, error -71
[  368.940923][T21070] netlink: 'syz.3.4664': attribute type 2 has an invalid length.
[  368.944470][T21071] netlink: 'syz.3.4664': attribute type 2 has an invalid length.
[  369.096615][T13056] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[  369.119694][T13056] usb 9-1: device descriptor read/8, error -71
[  369.193755][T21081] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.197359][T21081] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.211513][T21082] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4667'.
[  369.215627][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4667'.
[  369.236783][T13056] usb usb9-port1: unable to enumerate USB device
[  369.278198][T21081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.289519][T21081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.399156][T12544] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.403949][T12544] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.408758][T12544] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.412647][T12544] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.836029][T13056] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  369.861238][T21098] usb usb4: usbfs: interface 0 claimed by hub while 'syz.3.4672' sets config #1
[  369.873079][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4672'.
[  369.986218][T13056] usb 11-1: Using ep0 maxpacket: 32
[  369.990527][T13056] usb 11-1: config 0 has an invalid interface number: 247 but max is 0
[  369.994336][T13056] usb 11-1: config 0 has no interface number 0
[  369.997609][T13056] usb 11-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  370.002222][T13056] usb 11-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  370.009641][T13056] usb 11-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  370.013725][T13056] usb 11-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  370.018175][T13056] usb 11-1: Product: syz
[  370.020230][T13056] usb 11-1: Manufacturer: syz
[  370.025120][T13056] usb 11-1: config 0 descriptor??
[  370.263329][T13056] usb 11-1: USB disconnect, device number 7
[  370.426307][ T5933] Bluetooth: hci4: command 0x0406 tx timeout
[  370.970897][T21113] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4678'.
[  370.975531][T21113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.016291][T13056] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[  371.191398][T13056] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  371.200790][T13056] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  371.205171][T13056] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  371.209970][T13056] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.236779][T21105] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  371.242725][T13056] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  371.247781][   T40] kauditd_printk_skb: 12 callbacks suppressed
[  371.247796][   T40] audit: type=1400 audit(2000000380.084:31713): avc:  denied  { ioctl } for  pid=21118 comm="syz.6.4681" path="socket:[94123]" dev="sockfs" ino=94123 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  371.287176][T13056] usb 12-1: USB disconnect, device number 22
[  371.293657][   T40] audit: type=1400 audit(2000000380.084:31714): avc:  denied  { getopt } for  pid=21118 comm="syz.6.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  371.326875][   T40] audit: type=1400 audit(2000000380.184:31715): avc:  denied  { getopt } for  pid=21125 comm="syz.7.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  371.404592][T21136] autofs: Bad value for 'fd'
[  371.416899][T21136] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4684'.
[  371.530571][T21105] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4674'.
[  371.546792][T13055] usb 9-1: USB disconnect, device number 57
[  371.642595][   T40] audit: type=1400 audit(2000000380.494:31716): avc:  denied  { bind } for  pid=21148 comm="syz.6.4687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  371.651207][   T40] audit: type=1400 audit(2000000380.494:31717): avc:  denied  { create } for  pid=21148 comm="syz.6.4687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  371.659975][   T40] audit: type=1400 audit(2000000380.494:31718): avc:  denied  { map } for  pid=21148 comm="syz.6.4687" path="socket:[94143]" dev="sockfs" ino=94143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  371.671057][   T40] audit: type=1400 audit(2000000380.494:31719): avc:  denied  { read accept } for  pid=21148 comm="syz.6.4687" path="socket:[94143]" dev="sockfs" ino=94143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  371.763854][T21155] IPv6: NLM_F_REPLACE set, but no existing node found!
[  372.072393][T21158] hub 9-0:1.0: USB hub found
[  372.074382][T21158] hub 9-0:1.0: 1 port detected
[  372.151235][T21158] syzkaller0: entered promiscuous mode
[  372.153132][T21158] syzkaller0: entered allmulticast mode
[  372.392543][T21167] lo speed is unknown, defaulting to 1000
[  372.634701][   T40] audit: type=1400 audit(2000000381.484:31720): avc:  denied  { bind } for  pid=21171 comm="syz.7.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  372.692086][   T40] audit: type=1400 audit(2000000381.544:31721): avc:  denied  { shutdown } for  pid=21171 comm="syz.7.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  372.695287][T21177] binder: 21174:21177 ioctl 89f0 200000000180 returned -22
[  372.708242][   T40] audit: type=1400 audit(2000000381.544:31722): avc:  denied  { map } for  pid=21174 comm="syz.6.4694" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  372.708372][T21173] CIFS: iocharset name too long
[  373.005585][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4700'.
[  373.019538][T21199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4701'.
[  373.116753][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4702'.
[  373.120713][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4702'.
[  373.133232][T21205] EXT4-fs (loop3): unable to read superblock
[  373.183849][T21207] pimreg: entered allmulticast mode
[  373.189637][T21207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21207 comm=syz.4.4704
[  373.202536][T21208] pimreg: left allmulticast mode
[  373.387561][T21215] geneve2: entered promiscuous mode
[  373.389961][T21215] geneve2: entered allmulticast mode
[  373.478331][T21171] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  373.583448][T21223] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4710'.
[  373.915913][   T24] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[  373.997938][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4720'.
[  374.016893][T21255] binder: 21254:21255 unknown command 0
[  374.019035][T21255] binder: 21254:21255 ioctl c0306201 200000000080 returned -22
[  374.034212][T21255] binder: BINDER_SET_CONTEXT_MGR already set
[  374.037767][T21255] binder: 21254:21255 ioctl 4018620d 200000000040 returned -16
[  374.049042][   T24] usb 9-1: device descriptor read/64, error -71
[  374.113622][T21264] No source specified
[  374.141999][T21266] input: syz0 as /devices/virtual/input/input40
[  374.169556][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4726'.
[  374.291666][T21278] ipvlan3: entered allmulticast mode
[  374.291690][T21278] team0: entered allmulticast mode
[  374.291703][T21278] team_slave_0: entered allmulticast mode
[  374.291719][T21278] team_slave_1: entered allmulticast mode
[  374.293048][T21278] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  374.295965][   T24] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[  374.425914][   T24] usb 9-1: device descriptor read/64, error -71
[  374.537755][   T24] usb usb9-port1: attempt power cycle
[  374.827389][T21284] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  374.875932][   T24] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[  374.896659][   T24] usb 9-1: device descriptor read/8, error -71
[  374.965146][T21293] tc_dump_action: action bad kind
[  375.021570][T21292] lo speed is unknown, defaulting to 1000
[  375.070423][T21296] netlink: 'syz.6.4735': attribute type 14 has an invalid length.
[  375.072984][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4735'.
[  375.078884][T21296] netlink: 'syz.6.4735': attribute type 14 has an invalid length.
[  375.081766][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4735'.
[  375.135941][   T24] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[  375.157580][   T24] usb 9-1: device descriptor read/8, error -71
[  375.180891][T21303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4737'.
[  375.268072][   T24] usb usb9-port1: unable to enumerate USB device
[  375.904108][    T9] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0
[  375.966655][    T9] hid-generic 0000:0000:0000.003D: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  376.309790][T21344] tmpfs: Too few inodes for current use
[  376.537684][ T5935] Bluetooth: hci4: unexpected event for opcode 0x0c7c
[  376.541164][T21355] bond0: Error: Cannot enslave bond to itself.
[  376.607314][T21358] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  376.724544][T21367] binder: 21366:21367 ioctl 400c620e 200000000100 returned -22
[  376.734770][T21364] xfs: Unknown parameter 'grpquota'
[  376.780633][T21373] netlink: 'syz.4.4759': attribute type 1 has an invalid length.
[  376.823293][T21373] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  376.829915][T21373] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  376.858784][T21377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.893800][T21378] gretap2: entered promiscuous mode
[  376.901587][T21378] bond4: (slave gretap2): making interface the new active one
[  376.905719][T21378] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  376.912660][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  376.912675][   T40] audit: type=1400 audit(2000000385.764:31734): avc:  denied  { accept } for  pid=21376 comm="syz.3.4760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  376.932944][T21373] macvlan2: entered promiscuous mode
[  376.935563][T21377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.942925][T21377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.946296][T21373] macvlan2: entered allmulticast mode
[  376.947153][T21373] bond4: entered promiscuous mode
[  376.949475][T21377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.951888][T21373] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  376.963671][T21373] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  376.971252][T21373] bond4: left promiscuous mode
[  377.000057][T21376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.405562][   T40] audit: type=1400 audit(2000000386.254:31735): avc:  denied  { mount } for  pid=21387 comm="syz.4.4763" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  377.407138][T21388] 9pnet_fd: Insufficient options for proto=fd
[  377.419832][T21390] 9pnet_fd: Insufficient options for proto=fd
[  377.425884][   T40] audit: type=1400 audit(2000000386.254:31736): avc:  denied  { watch } for  pid=21387 comm="syz.4.4763" path="/358/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  377.443020][   T40] audit: type=1400 audit(2000000386.294:31737): avc:  denied  { unmount } for  pid=15921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  377.529896][   T40] audit: type=1400 audit(2000000386.384:31738): avc:  denied  { append } for  pid=21396 comm="syz.4.4765" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  377.798096][T21415] cgroup: subsys name conflicts with all
[  377.845381][   T40] audit: type=1400 audit(2000000386.694:31739): avc:  denied  { lock } for  pid=21419 comm="syz.3.4776" path="socket:[96248]" dev="sockfs" ino=96248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  377.907457][T13056] usb 12-1: new high-speed USB device number 23 using dummy_hcd
[  377.921561][   T40] audit: type=1400 audit(2000000386.774:31740): avc:  denied  { ioctl } for  pid=21427 comm="syz.3.4778" path="net:[4026534273]" dev="nsfs" ino=4026534273 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  378.057599][T13056] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.062069][T13056] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  378.067503][T13056] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  378.074212][T13056] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  378.096669][T13056] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  378.100352][T13056] usb 12-1: Manufacturer: syz
[  378.122567][T13056] usb 12-1: config 0 descriptor??
[  378.139073][T13056] usbhid 12-1:0.0: couldn't find an input interrupt endpoint
[  378.179986][   T40] audit: type=1400 audit(2000000387.034:31741): avc:  denied  { create } for  pid=21436 comm="syz.4.4781" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  378.180962][   T40] audit: type=1400 audit(2000000387.034:31742): avc:  denied  { associate } for  pid=21436 comm="syz.4.4781" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  378.220670][    C0] vkms_vblank_simulate: vblank timer overrun
[  378.260006][    C0] vkms_vblank_simulate: vblank timer overrun
[  378.266591][   T40] audit: type=1400 audit(2000000387.054:31743): avc:  denied  { add_name } for  pid=21436 comm="syz.4.4781" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  378.448046][T21451] bond0: entered promiscuous mode
[  378.487068][    C0] vkms_vblank_simulate: vblank timer overrun
[  378.493255][T21451] bond_slave_0: entered promiscuous mode
[  378.495625][T21451] bond_slave_1: entered promiscuous mode
[  378.517284][T21451] batadv_slave_0: entered promiscuous mode
[  378.520379][T21451] batadv_slave_0: left promiscuous mode
[  378.526111][T21451] bond0: left promiscuous mode
[  378.528234][T21451] bond_slave_0: left promiscuous mode
[  378.530746][T21451] bond_slave_1: left promiscuous mode
[  378.647945][T21462] kvm: pic: non byte read
[  378.650358][T21462] kvm: pic: non byte read
[  378.652732][T21462] kvm: pic: non byte read
[  378.655215][T21462] kvm: pic: non byte read
[  378.666422][T21462] kvm: pic: non byte read
[  378.669137][T21462] kvm: pic: non byte read
[  378.671556][T21462] kvm: pic: non byte read
[  378.678037][T21462] kvm: pic: non byte read
[  378.680431][T21462] kvm: pic: non byte read
[  378.682757][T21462] kvm: pic: non byte read
[  378.941249][T10130] 
[  378.942385][T10130] ============================================
[  378.945054][T10130] WARNING: possible recursive locking detected
[  378.947763][T10130] syzkaller #0 Not tainted
[  378.949822][T10130] --------------------------------------------
[  378.952524][T10130] kworker/u32:18/10130 is trying to acquire lock:
[  378.955490][T10130] ffffe8fefc5fb720 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x7d7/0xda0
[  378.959653][T10130] 
[  378.959653][T10130] but task is already holding lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  378.962869][T10130] ffffe8fefc000bd8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0
[  378.967005][T10130] 
[  378.967005][T10130] other info that might help us debug this:
[  378.970506][T10130]  Possible unsafe locking scenario:
[  378.970506][T10130] 
[  378.973746][T10130]        CPU0
[  378.975231][T10130]        ----
[  378.976740][T10130]   lock(&pd_list->lock);
[  378.978639][T10130]   lock(&pd_list->lock);
[  378.980575][T10130] 
[  378.980575][T10130]  *** DEADLOCK ***
[  378.980575][T10130] 
[  378.984048][T10130]  May be due to missing lock nesting notation
[  378.984048][T10130] 
[  378.987738][T10130] 3 locks held by kworker/u32:18/10130:
[  378.990223][T10130]  #0: ffff888024531148 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  378.995105][T10130]  #1: ffffc90003f67c90 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  378.999823][T10130]  #2: ffffe8fefc000bd8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0
[  379.003951][T10130] 
[  379.003951][T10130] stack backtrace:
[  379.006563][T10130] CPU: 3 UID: 0 PID: 10130 Comm: kworker/u32:18 Not tainted syzkaller #0 PREEMPT(full) 
[  379.006586][T10130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  379.006600][T10130] Workqueue: pdecrypt_parallel padata_parallel_worker
[  379.006620][T10130] Call Trace:
[  379.006626][T10130]  <TASK>
[  379.006632][T10130]  dump_stack_lvl+0x116/0x1f0
[  379.006661][T10130]  print_deadlock_bug+0x285/0x3b0
[  379.006685][T10130]  __lock_acquire+0x136e/0x22f0
[  379.006711][T10130]  lock_acquire+0x179/0x330
[  379.006731][T10130]  ? padata_do_serial+0x7d7/0xda0
[  379.006747][T10130]  ? queue_work_on+0x146/0x1f0
[  379.006771][T10130]  ? queue_work_on+0x86/0x1f0
[  379.006794][T10130]  _raw_spin_lock+0x2e/0x40
[  379.006817][T10130]  ? padata_do_serial+0x7d7/0xda0
[  379.006833][T10130]  padata_do_serial+0x7d7/0xda0
[  379.006851][T10130]  pcrypt_aead_dec+0x5b/0x70
[  379.006883][T10130]  padata_parallel_worker+0x65/0xb0
[  379.006901][T10130]  process_one_work+0x9ba/0x1b20
[  379.006927][T10130]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  379.006954][T10130]  ? __pfx_process_one_work+0x10/0x10
[  379.006979][T10130]  ? assign_work+0x1a0/0x250
[  379.007002][T10130]  worker_thread+0x6c8/0xf10
[  379.007029][T10130]  ? __pfx_worker_thread+0x10/0x10
[  379.007052][T10130]  kthread+0x3c5/0x780
[  379.007071][T10130]  ? __pfx_kthread+0x10/0x10
[  379.007092][T10130]  ? rcu_is_watching+0x12/0xc0
[  379.007110][T10130]  ? __pfx_kthread+0x10/0x10
[  379.007131][T10130]  ret_from_fork+0x983/0xb10
[  379.007150][T10130]  ? __pfx_ret_from_fork+0x10/0x10
[  379.007168][T10130]  ? __switch_to+0x7af/0x10d0
[  379.007188][T10130]  ? __pfx_kthread+0x10/0x10
[  379.007207][T10130]  ret_from_fork_asm+0x1a/0x30
[  379.007235][T10130]  </TASK>
[  379.495771][T10130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.500876][T10130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.532173][    T9] usb 12-1: USB disconnect, device number 23
[  379.580355][T10130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.584828][T10130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.724797][T10130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.728500][T10130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.777887][T10130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.782464][T10130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.885006][T10130] bridge_slave_1: left allmulticast mode
[  379.887997][T10130] bridge_slave_1: left promiscuous mode
[  379.890611][T10130] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.895306][T10130] bridge_slave_0: left allmulticast mode
[  379.898736][T10130] bridge_slave_0: left promiscuous mode
[  379.901248][T10130] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.910042][T10130] batman_adv: batadv0: Interface deactivated: gretap1
[  380.053791][T10130] batman_adv: batadv0: Removing interface: gretap1
[  380.059757][T10130] bond4 (unregistering): (slave gretap2): Releasing active interface
[  380.338807][T10130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.344184][T10130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.350214][T10130] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  380.356560][T10130] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  380.362805][T10130] bond0 (unregistering): Released all slaves
[  380.476158][T10130] bond1 (unregistering): Released all slaves
[  380.482612][T10130] bond2 (unregistering): Released all slaves
[  380.600202][T10130] bond3 (unregistering): Released all slaves
[  380.606600][T10130] bond4 (unregistering): Released all slaves
[  380.694181][T10130] : left promiscuous mode
[  380.774221][T10130] IPVS: stopping backup sync thread 16975 ...
[  380.995189][T10130] hsr_slave_0: left promiscuous mode
[  380.998252][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.001425][T10130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.005150][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.007798][T10130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.011947][T10130] veth1_macvtap: left promiscuous mode
[  381.013840][T10130] veth0_macvtap: left promiscuous mode
[  381.016350][T10130] veth1_vlan: left promiscuous mode
[  381.018637][T10130] veth0_vlan: left promiscuous mode
[  381.058120][T10130] pim6reg9 (unregistering): left allmulticast mode
[  381.069671][T10130] team0 (unregistering): Port device vlan2 removed
[  381.331636][T10130] team0 (unregistering): Port device team_slave_1 removed
[  381.364282][T10130] team0 (unregistering): Port device team_slave_0 removed
[  382.094385][T10130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.182596][T10130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.231427][T10130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.302213][T10130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.380769][T10130] bridge_slave_0: left allmulticast mode
[  382.382728][T10130] bridge_slave_0: left promiscuous mode
[  382.384733][T10130] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.466989][T10130] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  382.597112][T10130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.602235][T10130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.607791][T10130] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  382.612594][T10130] bond0 (unregistering): Released all slaves
[  382.713105][T10130] bond1 (unregistering): Released all slaves
[  382.819072][T10130] bond2 (unregistering): (slave veth5): Releasing active interface
[  382.822763][T10130] bond2 (unregistering): Released all slaves
[  382.919509][T10130] bond3 (unregistering): (slave veth7): Releasing active interface
[  382.923840][T10130] bond3 (unregistering): Released all slaves
[  383.006812][T10130] bond4 (unregistering): Released all slaves
[  383.010962][T10130] bond5 (unregistering): Released all slaves
[  383.014987][T10130] bond6 (unregistering): Released all slaves
[  383.019405][T10130] bond7 (unregistering): Released all slaves
[  383.128741][T10130] IPVS: stopping backup sync thread 16829 ...
[  383.297061][T10130] hsr_slave_0: left promiscuous mode
[  383.299920][T10130] hsr_slave_1: left promiscuous mode
[  383.302706][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.306056][T10130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.309767][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.312850][T10130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.319475][T10130] veth1_macvtap: left promiscuous mode
[  383.321841][T10130] veth0_macvtap: left promiscuous mode
[  383.324247][T10130] veth1_vlan: left promiscuous mode
[  383.327408][T10130] veth0_vlan: left promiscuous mode
[  383.610404][T10130] team_slave_1 (unregistering): left allmulticast mode
[  383.614106][T10130] team0 (unregistering): Port device team_slave_1 removed
[  383.641939][T10130] team_slave_0 (unregistering): left allmulticast mode
[  383.645559][T10130] team0 (unregistering): Port device team_slave_0 removed
[  383.707589][ T1422] ieee802154 phy1 wpan1: encryption failed: -22