last executing test programs:

5m53.136252908s ago: executing program 32 (id=1172):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x100000005)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d3970323030302c00c225ac9b27c79db2e62a8cafa45d072f9b8e4c18cb53c1f70483fbd55d8ecce043a77bee7cb04e638380ba82193b7b4d4ca8b72d49e9f55a985e56ecb9bd135e0bd3643a4f246abfd8c6960bbb0339f5cc203146f28c8bb8245fcda4895a6357260e7edf0dff5fcfa073d9f82efa5d83b9129559d5f28a838cf6c8a2892ffc07f304658a649d77598fc1d7aeacae553fed9b1a0f6ed81273c9dea842cb044911"])
r5 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x6f31, 0x4)
r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c)
getdents64(r8, &(0x7f00000000c0)=""/55, 0x37)
lseek(r8, 0x1, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r9, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

4m3.186086937s ago: executing program 4 (id=3279):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x97, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}, @acquire_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x100}, @flat=@binder={0x73622a85, 0x2100, 0x3}}, &(0x7f00000002c0)}}, @register_looper, @increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x3}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0})

4m3.122980316s ago: executing program 4 (id=3281):
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) (async, rerun: 32)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (rerun: 32)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) (async)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async, rerun: 64)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (rerun: 64)
socket$inet6(0xa, 0x2, 0x0)

4m3.1223092s ago: executing program 4 (id=3283):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x10001, 0x6}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42, 0x4000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000a00000000ff1100000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

4m2.882311993s ago: executing program 4 (id=3289):
r0 = add_key$keyring(&(0x7f000000fa80), &(0x7f000000fac0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f000000fb00), &(0x7f000000fb40)={'syz', 0x1}, &(0x7f000000fb80)="37480ccb54", 0x5, r0)
keyctl$search(0xa, r1, &(0x7f000000fc00)='encrypted\x00', &(0x7f000000fc40)={'syz', 0x3}, 0xfffffffffffffffa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7e}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x541b, &(0x7f0000000100))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x40, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_MARK={0x8, 0x10, 0x9}, @RTA_OIF={0x8, 0x4, r4}]}, 0x40}, 0x1, 0x11}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x9e)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

4m2.796975385s ago: executing program 4 (id=3293):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000ac0)={0x1, 0x0, @raw_data=[0xdc, 0x8000, 0x7f, 0x3c000, 0x80, 0x2, 0x8, 0x2, 0x6d, 0x7, 0x97, 0x7fffffff, 0x1000, 0x0, 0x2]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchdir(r3)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x101, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x1a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x84)

4m2.795611783s ago: executing program 4 (id=3295):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0xff8d}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="671723d7c60133", 0x1f}, {&(0x7f00000006c0)="9e91d91a92dc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f0000000400)="dcdd61e53a41", 0x6}], 0x3}, 0x0)

3m47.778667066s ago: executing program 33 (id=3295):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0xff8d}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="671723d7c60133", 0x1f}, {&(0x7f00000006c0)="9e91d91a92dc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f0000000400)="dcdd61e53a41", 0x6}], 0x3}, 0x0)

2m0.771361599s ago: executing program 5 (id=5369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800026306000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="bd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000004)

2m0.701719962s ago: executing program 5 (id=5372):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@local, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x3}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0xfffff000, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

2m0.698924245s ago: executing program 5 (id=5373):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000001100)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x1, 0x3, 0xf0}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0})

2m0.622992447s ago: executing program 5 (id=5375):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000100)='./file0\x00') (async)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pipe2(&(0x7f0000000200)={0x0, <r1=>0x0}, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0x0, <r3=>0x0}, 0x0)
tee(r2, r1, 0xff, 0x0) (async)
tee(r2, r1, 0xff, 0x0)
vmsplice(r3, &(0x7f0000001700)=[{&(0x7f0000001340)="89", 0x1}], 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1m58.455378985s ago: executing program 5 (id=5394):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x19, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a8)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file1\x00', 0x0, 0x4000, r0}, 0x18)
mkdir(&(0x7f0000000080)='./file1\x00', 0xb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x48, r5, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1a7c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1ecb, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r10, 0x2000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BLKALIGNOFF(r10, 0x127a, &(0x7f0000000640))
fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000680))
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'tunl0\x00', <r13=>0x0, 0x7800, 0x8, 0x2, 0x5, {{0x1f, 0x4, 0x1, 0x24, 0x7c, 0x64, 0x0, 0x81, 0x29, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x1c, 0xc0, 0x0, 0x3, [0x10000, 0x7, 0x800, 0x3, 0x7fff, 0x6]}, @timestamp={0x44, 0xc, 0x7, 0x0, 0xd, [0x8, 0x7]}, @rr={0x7, 0x17, 0xc8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010101, @broadcast, @multicast1]}, @end, @lsrr={0x83, 0x17, 0x8d, [@local, @broadcast, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}, @lsrr={0x83, 0xf, 0x84, [@broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r6)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x4044810)

1m56.775129336s ago: executing program 5 (id=5408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff8400000088a8000003125ce882cbf490d908f1523f000000000000", 0x2e}, {&(0x7f0000000640)="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", 0x320}, {&(0x7f0000002680)="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", 0x58c}, {&(0x7f0000000980)="281a9d23fdff85a6f28bf48173b0e3b782453b0ad70cf48abf0b0ab0071d3c3d7b736f8f27fe30efd1bbe7b703e34502c0da00f7dee9782d8c52f31b1f69a6ebc9ade94566ea5d541e4e11a1c42a24ab80d01f836864e5ccf2b525074fe96a2c62ce224fee666f0f8d6ed490152373b15d394974fe3925f81e59194dc94dce66bf2cc8f4b2029aa530aa6e0bfae783c3ae787158726c450f9ac7ade3b2d2687a097200e4b25fe2bfe5a319a550b94b10d8dbd47286e42b64b97d3857ebc356e12f38ef18af76", 0xc6}, {&(0x7f0000003340)="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", 0x65b}], 0x5}, 0x4005)

1m56.663236108s ago: executing program 34 (id=5408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff8400000088a8000003125ce882cbf490d908f1523f000000000000", 0x2e}, {&(0x7f0000000640)="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", 0x320}, {&(0x7f0000002680)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355ea32dfc72e59254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656", 0x58c}, {&(0x7f0000000980)="281a9d23fdff85a6f28bf48173b0e3b782453b0ad70cf48abf0b0ab0071d3c3d7b736f8f27fe30efd1bbe7b703e34502c0da00f7dee9782d8c52f31b1f69a6ebc9ade94566ea5d541e4e11a1c42a24ab80d01f836864e5ccf2b525074fe96a2c62ce224fee666f0f8d6ed490152373b15d394974fe3925f81e59194dc94dce66bf2cc8f4b2029aa530aa6e0bfae783c3ae787158726c450f9ac7ade3b2d2687a097200e4b25fe2bfe5a319a550b94b10d8dbd47286e42b64b97d3857ebc356e12f38ef18af76", 0xc6}, {&(0x7f0000003340)="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", 0x65b}], 0x5}, 0x4005)

48.763967118s ago: executing program 2 (id=6253):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0xd, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x44}}, 0x0)
r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000280)={<r7=>0x0, 0x1, 0x2})
ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r6, 0xc010644d, &(0x7f0000000300)={r7, 0x0, &(0x7f00000002c0)='\x00'})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$FBIOGET_FSCREENINFO(r9, 0x4602, &(0x7f0000000140))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0xffed}, {0xfff1, 0xc}, {0x9, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xa}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

48.485263775s ago: executing program 2 (id=6258):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x28, 0x140b, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008814}, 0x4040050)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0)
ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000640)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xad, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1e, 0x0, &(0x7f0000000080)=""/86, 0x10, 0x30, 0x0, 0x1})

48.484276044s ago: executing program 2 (id=6260):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b708"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = gettid()
sigaltstack(&(0x7f0000000000)={0x0, 0x1}, 0x0)
rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0x3d})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
write$cgroup_int(r3, 0x0, 0xd)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x7}}}, 0xa)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x800000010000002}], 0x0, 0x0, 0x0})

48.23470423s ago: executing program 2 (id=6265):
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401)
fsopen(&(0x7f0000000000)='pstore\x00', 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0) (async)
syz_pidfd_open(r0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) (async)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) (async)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4042, 0x60)
openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x18) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x18)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x7})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48885) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)

48.18523511s ago: executing program 2 (id=6266):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x940, 0x0)
userfaultfd(0x801)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

45.823151793s ago: executing program 2 (id=6311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x1c1103, 0x0)
ioctl$DVD_WRITE_STRUCT(r1, 0x5392, &(0x7f0000000000)=@physical={0x0, 0x1, [{0xa, 0x4, 0x4, 0x3, 0x8, 0x1, 0x1, 0x0, 0x9, 0x1, 0x4, 0x3, 0x1}, {0x6, 0x3, 0x3, 0xe, 0x4, 0x1, 0x2, 0x6, 0x1, 0x1, 0xef37, 0x2, 0x1000}, {0x5, 0xf, 0x1, 0x9, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, 0xfa84, 0x37f7345d, 0x4}, {0x6, 0x6, 0x8, 0x8, 0xf, 0x1, 0x1, 0x7, 0x9, 0x1, 0x3, 0x9, 0x8}]})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r3=>0x0, 0x2f, 0x3, 0x8, 0x65, 0x44, @mcast1, @mcast1, 0x8, 0xf0, 0x10001, 0xfffffffb}})
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3, 0x2, {0x0, 0x0, 0x1}, 0xfc}, 0x18)
r4 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x2})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x6dc8}]}}}]}, 0x40}}, 0x0)

45.718408699s ago: executing program 35 (id=6311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x1c1103, 0x0)
ioctl$DVD_WRITE_STRUCT(r1, 0x5392, &(0x7f0000000000)=@physical={0x0, 0x1, [{0xa, 0x4, 0x4, 0x3, 0x8, 0x1, 0x1, 0x0, 0x9, 0x1, 0x4, 0x3, 0x1}, {0x6, 0x3, 0x3, 0xe, 0x4, 0x1, 0x2, 0x6, 0x1, 0x1, 0xef37, 0x2, 0x1000}, {0x5, 0xf, 0x1, 0x9, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, 0xfa84, 0x37f7345d, 0x4}, {0x6, 0x6, 0x8, 0x8, 0xf, 0x1, 0x1, 0x7, 0x9, 0x1, 0x3, 0x9, 0x8}]})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r3=>0x0, 0x2f, 0x3, 0x8, 0x65, 0x44, @mcast1, @mcast1, 0x8, 0xf0, 0x10001, 0xfffffffb}})
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3, 0x2, {0x0, 0x0, 0x1}, 0xfc}, 0x18)
r4 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x2})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x6dc8}]}}}]}, 0x40}}, 0x0)

28.073980435s ago: executing program 1 (id=6592):
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
r0 = socket(0x22, 0x5, 0x2) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mount(0x0, 0x0, &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) (async)
connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async, rerun: 32)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32)
ioctl$FS_IOC_GETFSLABEL(r2, 0x541b, &(0x7f0000000100))
sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="8238", 0x2}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800e80010008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000", @ANYRESDEC=r0], 0x48}}, 0x4084) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc15}, 0x4008840) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

28.013153236s ago: executing program 1 (id=6596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000300)='./file0\x00') (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
ftruncate(r3, 0xc17a) (async)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) (async)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r6, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) (async)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='virtiofs\x00', 0x3081020, 0x0)

27.844983122s ago: executing program 1 (id=6600):
connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB])
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000019580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x57, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0xfb, {0x9, 0x21, 0x3, 0xa, 0x1, {0x22, 0x89c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb2, 0x3}}}}}]}}]}}, &(0x7f0000019840)={0xa, &(0x7f00000195c0)={0xa, 0x6, 0x250, 0x3, 0xfa, 0x9, 0xff, 0x5}, 0x5, &(0x7f0000019600)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000019680)=@lang_id={0x4, 0x3, 0x80c}}, {0x96, &(0x7f00000196c0)=@string={0x96, 0x3, "fe2d23707caa7405774c2c09a23108ddc4a59b1cd26cebccc3f28c6685ef11611ea552d94f2332a73cbffee3ae9db569f3fe71ec7805cd73185a03fb3004f059672dc042b20c282cf59cc910956c5721e8c814b4bd238e908d4f751946a4db6dc13100da4c565a42c107b4f432a4850c44894965a7d3759fc11cd85bdd6ad45e0a334908674f064634c91a90013fddd053af18d8"}}, {0x5b, &(0x7f0000019780)=@string={0x5b, 0x3, "be2bbcb8731df9ed28c4826390f44b6902264e422c8b5596a31d17c766c490c6a13abdc383ad411bab7d9d3adb2e1fd33363690d8ab00612c8f9dfe528d512bb16e3bbded0cdacc55a9202bddd6283af0ed3eb1e2217c16dee"}}, {0xf, &(0x7f0000019800)=@string={0xf, 0x3, "68160b81e43041cafd8dbf0d24"}}]})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYBLOB="bcf791f0f2d463aa632af8798b7fd9243621152f25cba75641014785b19c9e9ea7630e30b0c83b69c9e50763b91059a3c340d75d4c2499674d94ef99a2f50f47d8ab9e90f2563bda7bd80507cf0bbab799a5e8cde925464bb0f88fbc7669307e279a6e7f6a4d753b224a1212ac317ec492f4b91f0a003cdb554a478b803157edecd2cddb0c8949c4d76429b2403446488b4f92098dcf006a71ea9b04ce0065efebf648b7ae7da9c1c1dc56abb79cdb531b68dbb0e9eddad023852f60e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x5, 0x240c44)
ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000340)=""/9)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2})
r6 = dup3(r4, r4, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000440)={<r8=>0x0, 0x3, 0x8}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000020c0)={0x0, 0x51, "38645898976510521d88bfc36c20864f173fc5297b617c133db562f4a8f2dc21195ed1020a07168326711401bf52e9a7e18ddca6a4a14627d49fb9a39629d1c65c853cc32ece4c57f30961f63a43133fe8"}, &(0x7f0000002140)=0x59)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, &(0x7f00000021c0))
sendmmsg$inet_sctp(r7, &(0x7f0000003c40)=[{&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x723c40c, @mcast1, 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000198c0)="c12c7b2e423471d43d93b278ac4aa1d47cc45760003790f38db69c91a959cdf1321c019e4c3c8ecf50e5c42a3987d434598785b3caeea2e184466821cea2bd1ef64d6eef00f7bd07b1f62c6cf4b953c6070c71a8ddac935a21c7d4185b37d7905e056f5a028ecc20a90b764d7e2fb5ae2d6a40433f2c2a24ee603e432cf55ab272f777af2e6323d01124131e7195ab9cad8791", 0x93}, {&(0x7f0000000100)="1b39495d3a831310c0b26151ec33aa0a14714742bdd2c422de5e163f1ee00112dd4ec132fbe3cb548708640daf6da7a6482c2b8fc53de9c239d8c829ea88a7eac762418d216e6c51b05467b826768297115bd14d04bc8c35195aba1ad94cf642da7212617d1f562d267ead87f0dd75c47b5dff47398985fd", 0x78}, {&(0x7f00000003c0)="9412c6e2f41e1e664cd6d327496825412665af82c03baecc764a35f58e2c955364d8f8303c2f6333fb48ee22b316540d7dbea7c8f9136e89db88696954", 0x3d}], 0x3, &(0x7f00000004c0)=[@authinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0xd4b2, 0x208, 0x0, 0x63f6, r8}}], 0x38, 0x4000000}, {&(0x7f0000000500)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000540)="3e031c0fca31e41b2b6a4ad7b5b2eae43c18129c1258f7163c3ca8117664db3132b578f158913f8f777eefd440d42b29263d6db69f3f5d00de25ff40d21daea4af7429106d7523f58a36e41caa959891dd01ee7047ee970b779349c74086015062bc25b032f67ff99da1224a2df447849fc7968eee864b5c80068602e7d251083accc91d06312bdc17ce13ce1f463ab3072b7e40e9eb44a392943f33a37d7679c7cc69e7158538c337066f05e5c5f5936c5bdc2cef27770cd0eac9eaa072d91b0c7fb9ccb9611ed4b0f90d6b47", 0xcd}, {&(0x7f0000000640)="dea117c2d015e07fc5203c5c8cec661536af0c05a241c54ac665733227c9f40dd543db671bdfa9c4e5a8f940d5055974cb1e8c2234591676738500068f7532db4c6eb9cb3c3571275a57946fc515f12e113173c40f0ad0a7459f5f79239b78faa2c761159ee02257ffef99291d9e0eaf3d37fe1f18f02b91aae93a718815db8069d2528727ad9303f79c1332dedd917c5d3288f7d5549d04b31edc76f3d04c3f3924f6fe785be108a08769858bba16b6f1f077eaf6a7adc2de1718e2d334d60e9470e6", 0xc3}, {&(0x7f0000000780)="2c248d6c319bc8bab5c4026d168d278e902677b616bd0f109aab4e201e3a1705ed28709e424767e691b76cd04ed48747be34abe56774d07e8a0365c237369848f70da474418906482db73e87c7af5bfcdbbab57d60697f60a7a6d23f6abcd3f50f7b1abc281a4c1edae547260830a3c1d55e3a6db87dfe7df7de671b6acf3e5c70163341c47c028244db344db9e71dbee5a4d7ad790ef564cf0c51c6336122c691cea42d16e2", 0xa6}, {&(0x7f0000000840)="e21cb80bc8be6e4174c8e4c9c1cd946fce9b4fcd6bd9415c2f53dbcf027ef5b2154e8fb8eb5886905baa59b7e33df45ea7172a54a78be8de58ebff82d98682bd815399fb1694afb676541a7a13a15bf8a599ec857d53b6631d5023343b1abc2575ccf0a4a235a0c9765182b4b63b905044b288b9730d2d15920d4a071ff7dbdab8b17f4cfa", 0x85}], 0x4, &(0x7f0000001980)=[@init={0x18, 0x84, 0x0, {0x7, 0xb, 0xfff, 0xfffb}}, @init={0x18, 0x84, 0x0, {0x47, 0x6, 0x2, 0x1}}], 0x30, 0x20000010}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)}, {&(0x7f0000001ec0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001f00)="ca3737be8abaf15da59d5d29d387d29ae5eb5bf311b4bd1744ffa12641ee0f7757bfff286e1050ef2077081d4e2903a348dd0b65f909a30098b63302e83dd2554ce761c53a4e354a51041a0d20db112266be163b697a8c030f1d028fe7e44d114ddb279f828cfd32ffe6720f9d6fb1cde8219870c33f489b41eeae87d5bf473d5e8b700e2cfc1d5c5193a82a65e9ca6f2c5258bd5d0d0a38d94ef78b40330e9900537c0b0980c72fd1ad30c3a5621a87025534dc09b7aa07a60839240d", 0xbd}, {0x0}], 0x2, &(0x7f0000002200)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xd0f}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x2, 0x208, 0xfffffffc, 0x5, 0x5, 0x4ed, 0xda37, r8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xe}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffff20ef}}, @sndinfo={0x20, 0x84, 0x2, {0x8001, 0x200, 0x5, 0x7}}], 0x100}, {&(0x7f0000002300)=@in={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000002500)=[{&(0x7f0000002340)="c20b", 0x2}, {&(0x7f0000002380)="3123cc390c1117b6bce79c15a1985529ebe98684e7fb32c6ab0bc6f9ec25b5a6d5bac2fcee5907283f1125dfe1793f369791a99ce5cba5329a6c1ed768350616dd3a3e213087ab68229106ee", 0x4c}, {&(0x7f0000002400)="a8b972c8267021a5103873ac07fc68f4d285b079c9d25fcc5d22802f8567e7d8afe028281bc5ac16f0009709b6006890e9d359", 0x33}, {0x0}], 0x4, &(0x7f0000002540)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0xfcd1, 0x5, 0x9, 0x3}}], 0x68, 0x400c0}, {&(0x7f00000025c0)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000002600)="1c7d566e7134fa15832864f0a24e6578e3075c190cab5e8641065aab1b26abc2093abc108eab9cab863c863eb0b5e7928b8c91a998103c1ea8af30a4d9dbd47a4494c1396ccb070ffd071ca2f866d51ad4c2a94779c9f82e99074c475fcfdeb0f2e8d52f5945b6b0a1fb7428c0", 0x6d}, {&(0x7f0000002680)="6d4c220e685b1c5a104f1665712a85985ae1", 0x12}, {&(0x7f0000002780)="2db0ef473b58d7547c561d467e499456c7a8d30d48f91a61547c7c03e281af50ace4fae88e3b18a9b9173b055a7bf7dc994029dfb60bc0b4845a6dbdddfe19e1f70f9511d2a260f7bfee2e0be88579bce74980f9f791a6c5dbb7a182d9d928aad8d80ea81f083dd4a13102e273f79d5beafdd7824c98a44645bad9ab966ecd4a032f6aba0334a3fd193ce3070c46f79aaab1f67135c1f474ca55b46f44060ace587e02dec1fc5e1b4ccf0e05ccf519a94ecb00d1f8e56fbd94a6c9e090432307c6e5624e2a48ddd0dba69f66ad607fad0edc7c948dec", 0xd6}, {&(0x7f0000002880)="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", 0xfe0}, {&(0x7f0000003880)}, {&(0x7f00000038c0)="bb93cbe5f5b300f972cd170d6a43fb7f6047a95a2da485a56ff2f851be0a4059e1f28505ef6139073ec525360f5018ecb7f7537a970b34194a920fd35406660d7a207eec4cc551bc12c8f9f5207728e62d0b294477c9b3a534bdd84e090147001a665a9ff20980b7790ee3f13610b886a75e97ad8f973b0f9768d7f51ec04c5b446eef39db00df5e05b9b90c89af56b3f15539b679f08cf83bd6c7c38db177a70fbee9292bef6f33740dd971e1ae86110f2758cabbdf86e87b0b7c59f326551328c1a8747961567dd6beb195eb76", 0xce}, {&(0x7f00000039c0)="3d604dee4c1b818dbfe3ea77bf4e535ad13b14d2d77060205d1ada98acf502ceea04dda51b12c1db27742cbe483ddfde7a50f3b54fd9523780dd4ccea9980433be4739286b59544af53ac5b3fc6026cf2e81e4355ac2e6dc70fdb364c602defef689c8218e74d2bec8447b938eef7327fe3c6fe7fc3c3a97df23b447f323ef0b860b4acba5600cd6fcbceb6e3ec0ac8ab61b73003f51102d96d14d23692e39a60c26afff7e823fc4de353513ae67a4977bd58cef580993444c07dcf01bc9efc8", 0xc0}, {&(0x7f0000003ac0)="93f45a0592ef2cba7aa8fd35a4ec21562f054945439d52c69bbae4f20434ce11be0d495eb42d36726ff97ae0c5f53be23085d889fa721e8eeed6f19e3abacb7373176d5720e0a9233e1b3b49e2191535fad85bfe58b949d1a9a3a4c3dc3341f2a3464d050221b6e3e60b0bedbfb0fac2760a181f8c8614735f2af51dc5abd9276e71da903380cab30fccbbb3e4ed5c37e6b8325bac9c7868205151b218a000fd", 0xa0}], 0x8, 0x0, 0x0, 0x20004095}], 0x6, 0x8001)
setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x5)
ioctl$FS_IOC_GETVERSION(r4, 0x40045b0a, &(0x7f0000000040))

27.605862571s ago: executing program 6 (id=6604):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000070000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)

27.530137875s ago: executing program 6 (id=6605):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x940, 0x0)
userfaultfd(0x801)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

27.464242372s ago: executing program 6 (id=6608):
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='\\],[:&\x00', r0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
times(0xfffffffffffffffe)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0)

27.364903069s ago: executing program 6 (id=6610):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}]}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x168)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x82101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x236f003, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2408c064}, 0x40804)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100800160f00007b017c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48)

27.200782974s ago: executing program 6 (id=6612):
r0 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
close(0x3)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2)
fcntl$setsig(r1, 0xa, 0x12)
r4 = getpgid(r0)
fcntl$setown(r1, 0x8, r4)
tkill(r0, 0x13)

26.875437116s ago: executing program 6 (id=6616):
openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0)

26.796994518s ago: executing program 36 (id=6616):
openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0)

25.214103239s ago: executing program 0 (id=6640):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x40003, 0x9}) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r1, r1], 0x0, 0x10, 0x10000}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2, 0x0, 0x8000000}, 0x27) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000006c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x9, 0x6}) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
poll(&(0x7f0000000080)=[{r2, 0x7680}, {r3, 0x1000}], 0x2, 0xcb)

25.145030009s ago: executing program 0 (id=6641):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000280)=0x20)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x2c, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, 0x1}, @request_death], 0xd4, 0x0, &(0x7f0000000500)="3e862ef3ad3ec88e2ce99ae0bf95f83885dcbf34a19db41ddd393e3e47c441c7c6e54e231a299f930ae88c8bbd85a3e26f21ef67a4d34733182d92e62f70cdedd408ef12ca7103ee47df8c9605a59af00529d25df02f67ffea95ae182a34b4e84be0556950c89eb5f2a5e9d44ee9981fa7d315a304cdd15750beca870fad174433aab3669a821cf0f349814b63bb708c1ec1e393b61f52402611294cebb26497e15386b7d2ef6416c06c8dd7238133b5356f8ba740ff73f5dafe0465be6674a0cf152a69fa1287e2a0665a3b1c714baf69e195e5"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
clock_gettime(0x0, &(0x7f00000002c0)={<r5=>0x0, <r6=>0x0})
clock_gettime(0x0, &(0x7f0000000300)={<r7=>0x0, <r8=>0x0})
write$evdev(r2, &(0x7f0000000340)=[{{0x0, 0x2710}, 0x1, 0x9, 0xcd75}, {{0x0, 0xea60}, 0x11, 0x0, 0x10000}, {{r5, r6/1000+10000}, 0x14, 0x3, 0xcb98}, {{0x0, 0xea60}, 0x4, 0x5, 0x5}, {{r7, r8/1000+60000}, 0x2, 0xfff, 0x5}], 0x78)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
syz_open_dev$dmmidi(&(0x7f0000000240), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000006c0)="b3185d69b56f70f043dc2367345603360fa86fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6a124dcb27df7938e7ddfdd52a5425c59f95ef81a9109992b1f64"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

24.624924221s ago: executing program 1 (id=6646):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}]}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x168)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x82101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x236f003, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2408c064}, 0x40804)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100800160f00007b017c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48)

24.521177901s ago: executing program 1 (id=6647):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x10001, 0x6}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42, 0x4000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00033c000a00000000ff1100000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

24.311486603s ago: executing program 0 (id=6648):
syz_io_uring_setup(0x2787, &(0x7f0000000200)={0x0, 0x9bb, 0x1, 0x3, 0x2b9}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x1, 0x2, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x49, 0x0, &(0x7f0000000280))
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2, 0x0, '\x00', 0x0, 0x800000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @pic={0x9, 0x9, 0x8, 0x3, 0x0, 0x4, 0x8, 0xc, 0x10, 0xb, 0xc, 0x4, 0x0, 0xb, 0x3, 0x5}})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x90}}}, &(0x7f0000000180)=0x84)

24.308909433s ago: executing program 1 (id=6649):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="180200000000000000000e0000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)

24.102364581s ago: executing program 37 (id=6649):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="180200000000000000000e0000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)

23.344590939s ago: executing program 0 (id=6656):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}]}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x168)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x82101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x236f003, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2408c064}, 0x40804)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100800160f00007b017c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48)

23.208714492s ago: executing program 0 (id=6657):
r0 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x20000000, 0x0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x92}}]}, 0x9c}}, 0x801) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
read(r0, 0x0, 0x0) (async)
mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='minix\x00', 0x200013, 0x0)

22.904877138s ago: executing program 0 (id=6658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x10001, 0x6}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42, 0xb0000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00033c000a00000000ff1100000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

22.816507247s ago: executing program 38 (id=6658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x10001, 0x6}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42, 0xb0000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00033c000a00000000ff1100000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

3.345305676s ago: executing program 9 (id=6900):
r0 = socket(0x10, 0x3, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x1000001, 0x0, 0x7fe}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (fail_nth: 4)

3.293527993s ago: executing program 9 (id=6901):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x191f}, 0x0, 0x0, 0x7, 0x5, 0x2, 0x4, 0x5, 0xfffffffffffffff9}}], 0x58}, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d98a02e20ae6c23828462696e643d7374617469633a", @ANYRESDEC]) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bind$bt_sco(r5, &(0x7f0000000040), 0x8) (async)
listen(r5, 0x3)
accept4(r6, 0x0, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) (rerun: 32)
close_range(r0, 0xffffffffffffffff, 0x0)

2.880213713s ago: executing program 9 (id=6902):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x1000, 0x1, 0x11f}, 0x0, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]})
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x940, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

2.773895391s ago: executing program 9 (id=6903):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1205000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

2.564743815s ago: executing program 9 (id=6906):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000008510000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

2.513861024s ago: executing program 9 (id=6907):
connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB])
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000019580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x57, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0xfb, {0x9, 0x21, 0x3, 0xa, 0x1, {0x22, 0x89c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb2, 0x3}}}}}]}}]}}, &(0x7f0000019840)={0xa, &(0x7f00000195c0)={0xa, 0x6, 0x250, 0x3, 0xfa, 0x9, 0xff, 0x5}, 0x5, &(0x7f0000019600)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000019680)=@lang_id={0x4, 0x3, 0x80c}}, {0x96, &(0x7f00000196c0)=@string={0x96, 0x3, "fe2d23707caa7405774c2c09a23108ddc4a59b1cd26cebccc3f28c6685ef11611ea552d94f2332a73cbffee3ae9db569f3fe71ec7805cd73185a03fb3004f059672dc042b20c282cf59cc910956c5721e8c814b4bd238e908d4f751946a4db6dc13100da4c565a42c107b4f432a4850c44894965a7d3759fc11cd85bdd6ad45e0a334908674f064634c91a90013fddd053af18d8"}}, {0x5b, &(0x7f0000019780)=@string={0x5b, 0x3, "be2bbcb8731df9ed28c4826390f44b6902264e422c8b5596a31d17c766c490c6a13abdc383ad411bab7d9d3adb2e1fd33363690d8ab00612c8f9dfe528d512bb16e3bbded0cdacc55a9202bddd6283af0ed3eb1e2217c16dee"}}, {0xf, &(0x7f0000019800)=@string={0xf, 0x3, "68160b81e43041cafd8dbf0d24"}}]})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYBLOB="bcf791f0f2d463aa632af8798b7fd9243621152f25cba75641014785b19c9e9ea7630e30b0c83b69c9e50763b91059a3c340d75d4c2499674d94ef99a2f50f47d8ab9e90f2563bda7bd80507cf0bbab799a5e8cde925464bb0f88fbc7669307e279a6e7f6a4d753b224a1212ac317ec492f4b91f0a003cdb554a478b803157edecd2cddb0c8949c4d76429b2403446488b4f92098dcf006a71ea9b04ce0065efebf648b7ae7da9c1c1dc56abb79cdb531b68dbb0e9eddad023852f60e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x5, 0x240c44)
ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000340)=""/9)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2})
r6 = dup3(r4, r4, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000440)={<r8=>0x0, 0x3, 0x8}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000020c0)={0x0, 0x51, "38645898976510521d88bfc36c20864f173fc5297b617c133db562f4a8f2dc21195ed1020a07168326711401bf52e9a7e18ddca6a4a14627d49fb9a39629d1c65c853cc32ece4c57f30961f63a43133fe8"}, &(0x7f0000002140)=0x59)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, &(0x7f00000021c0))
sendmmsg$inet_sctp(r7, &(0x7f0000003c40)=[{&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x723c40c, @mcast1, 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000198c0)="c12c7b2e423471d43d93b278ac4aa1d47cc45760003790f38db69c91a959cdf1321c019e4c3c8ecf50e5c42a3987d434598785b3caeea2e184466821cea2bd1ef64d6eef00f7bd07b1f62c6cf4b953c6070c71a8ddac935a21c7d4185b37d7905e056f5a028ecc20a90b764d7e2fb5ae2d6a40433f2c2a24ee603e432cf55ab272f777af2e6323d01124131e7195ab9cad8791", 0x93}, {&(0x7f0000000100)="1b39495d3a831310c0b26151ec33aa0a14714742bdd2c422de5e163f1ee00112dd4ec132fbe3cb548708640daf6da7a6482c2b8fc53de9c239d8c829ea88a7eac762418d216e6c51b05467b826768297115bd14d04bc8c35195aba1ad94cf642da7212617d1f562d267ead87f0dd75c47b5dff47398985fd", 0x78}, {&(0x7f00000003c0)="9412c6e2f41e1e664cd6d327496825412665af82c03baecc764a35f58e2c955364d8f8303c2f6333fb48ee22b316540d7dbea7c8f9136e89db88696954", 0x3d}], 0x3, &(0x7f00000004c0)=[@authinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0xd4b2, 0x208, 0x0, 0x63f6, r8}}], 0x38, 0x4000000}, {&(0x7f0000000500)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000540)="3e031c0fca31e41b2b6a4ad7b5b2eae43c18129c1258f7163c3ca8117664db3132b578f158913f8f777eefd440d42b29263d6db69f3f5d00de25ff40d21daea4af7429106d7523f58a36e41caa959891dd01ee7047ee970b779349c74086015062bc25b032f67ff99da1224a2df447849fc7968eee864b5c80068602e7d251083accc91d06312bdc17ce13ce1f463ab3072b7e40e9eb44a392943f33a37d7679c7cc69e7158538c337066f05e5c5f5936c5bdc2cef27770cd0eac9eaa072d91b0c7fb9ccb9611ed4b0f90d6b47", 0xcd}, {&(0x7f0000000640)="dea117c2d015e07fc5203c5c8cec661536af0c05a241c54ac665733227c9f40dd543db671bdfa9c4e5a8f940d5055974cb1e8c2234591676738500068f7532db4c6eb9cb3c3571275a57946fc515f12e113173c40f0ad0a7459f5f79239b78faa2c761159ee02257ffef99291d9e0eaf3d37fe1f18f02b91aae93a718815db8069d2528727ad9303f79c1332dedd917c5d3288f7d5549d04b31edc76f3d04c3f3924f6fe785be108a08769858bba16b6f1f077eaf6a7adc2de1718e2d334d60e9470e6", 0xc3}, {&(0x7f0000000740)="0a78d259a985e181c35a093552fded71", 0x10}, {&(0x7f0000000780)="2c248d6c319bc8bab5c4026d168d278e902677b616bd0f109aab4e201e3a1705ed28709e424767e691b76cd04ed48747be34abe56774d07e8a0365c237369848f70da474418906482db73e87c7af5bfcdbbab57d60697f60a7a6d23f6abcd3f50f7b1abc281a4c1edae547260830a3c1d55e3a6db87dfe7df7de671b6acf3e5c70163341c47c028244db344db9e71dbee5a4d7ad790ef564cf0c51c6336122c691cea42d16e2", 0xa6}, {&(0x7f0000000840)="e21cb80bc8be6e4174c8e4c9c1cd946fce9b4fcd6bd9415c2f53dbcf027ef5b2154e8fb8eb5886905baa59b7e33df45ea7172a54a78be8de58ebff82d98682bd815399fb1694afb676541a7a13a15bf8a599ec857d53b6631d5023343b1abc2575ccf0a4a235a0c9765182b4b63b905044b288b9730d2d15920d4a071ff7dbdab8b17f4cfa", 0x85}], 0x5, &(0x7f0000001980)=[@init={0x18, 0x84, 0x0, {0x7, 0xb, 0xfff, 0xfffb}}, @init={0x18, 0x84, 0x0, {0x47, 0x6, 0x2, 0x1}}], 0x30, 0x20000010}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)}, {&(0x7f0000001ec0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001f00)="ca3737be8abaf15da59d5d29d387d29ae5eb5bf311b4bd1744ffa12641ee0f7757bfff286e1050ef2077081d4e2903a348dd0b65f909a30098b63302e83dd2554ce761c53a4e354a51041a0d20db112266be163b697a8c030f1d028fe7e44d114ddb279f828cfd32ffe6720f9d6fb1cde8219870c33f489b41eeae87d5bf473d5e8b700e2cfc1d5c5193a82a65e9ca6f2c5258bd5d0d0a38d94ef78b40330e9900537c0b0980c72fd1ad30c3a5621a87025534dc09b7aa07a60839240d", 0xbd}, {0x0}], 0x2, &(0x7f0000002200)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xd0f}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x2, 0x208, 0xfffffffc, 0x5, 0x5, 0x4ed, 0xda37, r8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xe}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffff20ef}}, @sndinfo={0x20, 0x84, 0x2, {0x8001, 0x200, 0x5, 0x7}}], 0x100}, {&(0x7f0000002300)=@in={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000002500)=[{&(0x7f0000002340)="c20b", 0x2}, {&(0x7f0000002380)="3123cc390c1117b6bce79c15a1985529ebe98684e7fb32c6ab0bc6f9ec25b5a6d5bac2fcee5907283f1125dfe1793f369791a99ce5cba5329a6c1ed768350616dd3a3e213087ab68229106ee", 0x4c}, {&(0x7f0000002400)="a8b972c8267021a5103873ac07fc68f4d285b079c9d25fcc5d22802f8567e7d8afe028281bc5ac16f0009709b6006890e9d359", 0x33}, {0x0}], 0x4, &(0x7f0000002540)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0xfcd1, 0x5, 0x9, 0x3}}], 0x68, 0x400c0}, {&(0x7f00000025c0)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000002600)="1c7d566e7134fa15832864f0a24e6578e3075c190cab5e8641065aab1b26abc2093abc108eab9cab863c863eb0b5e7928b8c91a998103c1ea8af30a4d9dbd47a4494c1396ccb070ffd071ca2f866d51ad4c2a94779c9f82e99074c475fcfdeb0f2e8d52f5945b6b0a1fb7428c0", 0x6d}, {&(0x7f0000002680)="6d4c220e685b1c5a104f1665712a85985ae1", 0x12}, {&(0x7f0000002780)="2db0ef473b58d7547c561d467e499456c7a8d30d48f91a61547c7c03e281af50ace4fae88e3b18a9b9173b055a7bf7dc994029dfb60bc0b4845a6dbdddfe19e1f70f9511d2a260f7bfee2e0be88579bce74980f9f791a6c5dbb7a182d9d928aad8d80ea81f083dd4a13102e273f79d5beafdd7824c98a44645bad9ab966ecd4a032f6aba0334a3fd193ce3070c46f79aaab1f67135c1f474ca55b46f44060ace587e02dec1fc5e1b4ccf0e05ccf519a94ecb00d1f8e56fbd94a6c9e090432307c6e5624e2a48ddd0dba69f66ad607fad0edc7c948dec", 0xd6}, {&(0x7f0000002880)="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", 0xfe0}, {&(0x7f0000003880)}, {&(0x7f00000038c0)="bb93cbe5f5b300f972cd170d6a43fb7f6047a95a2da485a56ff2f851be0a4059e1f28505ef6139073ec525360f5018ecb7f7537a970b34194a920fd35406660d7a207eec4cc551bc12c8f9f5207728e62d0b294477c9b3a534bdd84e090147001a665a9ff20980b7790ee3f13610b886a75e97ad8f973b0f9768d7f51ec04c5b446eef39db00df5e05b9b90c89af56b3f15539b679f08cf83bd6c7c38db177a70fbee9292bef6f33740dd971e1ae86110f2758cabbdf86e87b0b7c59f326551328c1a8747961567dd6beb195eb76", 0xce}, {&(0x7f00000039c0)="3d604dee4c1b818dbfe3ea77bf4e535ad13b14d2d77060205d1ada98acf502ceea04dda51b12c1db27742cbe483ddfde7a50f3b54fd9523780dd4ccea9980433be4739286b59544af53ac5b3fc6026cf2e81e4355ac2e6dc70fdb364c602defef689c8218e74d2bec8447b938eef7327fe3c6fe7fc3c3a97df23b447f323ef0b860b4acba5600cd6fcbceb6e3ec0ac8ab61b73003f51102d96d14d23692e39a60c26afff7e823fc4de353513ae67a4977bd58cef580993444c07dcf01bc9efc8", 0xc0}, {&(0x7f0000003ac0)="93f45a0592ef2cba7aa8fd35a4ec21562f054945439d52c69bbae4f20434ce11be0d495eb42d36726ff97ae0c5f53be23085d889fa721e8eeed6f19e3abacb7373176d5720e0a9233e1b3b49e2191535fad85bfe58b949d1a9a3a4c3dc3341f2a3464d050221b6e3e60b0bedbfb0fac2760a181f8c8614735f2af51dc5abd9276e71da903380cab30fccbbb3e4ed5c37e6b8325bac9c7868205151b218a000fd", 0xa0}], 0x8, 0x0, 0x0, 0x20004095}], 0x6, 0x8001)
setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x5)
ioctl$FS_IOC_GETVERSION(r4, 0x40045b0a, &(0x7f0000000040))

1.222651969s ago: executing program 3 (id=6939):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x4, 0x28000003, 0x4, 0x1, 0xcc7, 0x8, 0x8d, 0x0, 0x0, 0x2, 0x1, 0xfffffffd, 0x1, 0x8026, 0x4007c, 0x6, 0x1a449, 0x9, 0x80775, 0x89, 0xcaa6, 0x0, 0x28001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8, 0xfffffffb]})
ioctl$COMEDI_SETRSUBD(r0, 0x6410)
landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000180))
mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='adfs\x00', 0x221000d, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x4, 0x28000003, 0x4, 0x1, 0xcc7, 0x8, 0x8d, 0x0, 0x0, 0x2, 0x1, 0xfffffffd, 0x1, 0x8026, 0x4007c, 0x6, 0x1a449, 0x9, 0x80775, 0x89, 0xcaa6, 0x0, 0x28001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8, 0xfffffffb]}) (async)
ioctl$COMEDI_SETRSUBD(r0, 0x6410) (async)
landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0) (async)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000180)) (async)
mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='adfs\x00', 0x221000d, 0x0) (async)

1.152520298s ago: executing program 3 (id=6941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

1.148078858s ago: executing program 3 (id=6943):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

1.083767254s ago: executing program 3 (id=6946):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x80c1)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x120, 0x1006}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180))
ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x208062, 0x0)
openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil)
readahead(r5, 0x101, 0x100000003)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0))
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r7)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000009f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2)

752.416143ms ago: executing program 7 (id=6955):
socket(0x10, 0x3, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x2)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
socket$pptp(0x18, 0x1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r0=>0x0})
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18a047302900000400007df5961d161a00000c0000006ebd115c", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x7771, 0x0, 0x0, 0xd7b8dbcd861891a2, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa51c, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x2, 0x4, "c0f479", 0x3, 0x5})
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.pending_reads\x00', 0x2a0001, 0x157)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1000, '\x00', 0x0, r3, 0x3, 0x0, 0x2}, 0x50)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2)
fsetxattr$security_selinux(r4, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0)

434.641795ms ago: executing program 8 (id=6960):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/226, 0xe2}], 0x6}, 0x20000200)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ee3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e99e3c14", 0x5}, {&(0x7f0000000d00)="7aa6", 0x2}], 0x3}, 0x0)

374.838438ms ago: executing program 7 (id=6961):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000034000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

311.784439ms ago: executing program 8 (id=6962):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x940, 0x0)
userfaultfd(0x801)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)

311.382749ms ago: executing program 7 (id=6963):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x100}, @flat=@binder={0x73622a85, 0x2100, 0x3}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0xfff0, 0x0})

264.075389ms ago: executing program 7 (id=6964):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x10001, 0x6}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000a00000000ff8800000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

263.609148ms ago: executing program 8 (id=6965):
r0 = socket(0x10, 0x3, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x1000001, 0x0, 0x7fe}, 0x10)
write(r0, &(0x7f0000000000)="2400001f1a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

263.32407ms ago: executing program 8 (id=6966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r1, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0db70100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd8}], 0x1}, 0xc0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x19c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8bb0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c4}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000500), 0x12)
preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x10003, 0x21cdc71a)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000002880), 0x1)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, 0x2, 0x6, 0x75171fd0268065fa, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80)

174.915117ms ago: executing program 3 (id=6967):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

173.205625ms ago: executing program 3 (id=6968):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x10001, 0x6}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000a00000000ff1100000000000000000000000800060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

104.746092ms ago: executing program 7 (id=6969):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x1000, 0x1, 0x11f}, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x940, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

91.849996ms ago: executing program 8 (id=6970):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x480800)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x8}, 'port1\x00', 0xe3, 0x1a3807, 0x1, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x6, 0xfe})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_UID={0x8}]}, 0x24}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0)
close(0x3)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0x200, 0x4)
fadvise64(r0, 0x400007, 0x7fffffff, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/139, 0x8b}], 0x1, 0x7, 0x5)

761.289µs ago: executing program 8 (id=6971):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000f000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

0s ago: executing program 7 (id=6972):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x100}, @flat=@binder={0x73622a85, 0x2100, 0x3}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x40000000, 0x0})

kernel console output (not intermixed with test programs):

0
[  465.598809][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.604622][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.608452][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.612420][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.615907][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.620001][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.631466][T23511] FAULT_INJECTION: forcing a failure.
[  465.631466][T23511] name failslab, interval 1, probability 0, space 0, times 0
[  465.636924][T23511] CPU: 3 UID: 0 PID: 23511 Comm: syz.6.6324 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.636954][T23511] Tainted: [L]=SOFTLOCKUP
[  465.636961][T23511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  465.636972][T23511] Call Trace:
[  465.636981][T23511]  <TASK>
[  465.636989][T23511]  dump_stack_lvl+0x100/0x190
[  465.637023][T23511]  should_fail_ex.cold+0x5/0xa
[  465.637046][T23511]  ? tomoyo_realpath_from_path+0xb6/0x690
[  465.637067][T23511]  should_failslab+0xc2/0x120
[  465.637095][T23511]  __kmalloc_noprof+0xe0/0x850
[  465.637124][T23511]  tomoyo_realpath_from_path+0xb6/0x690
[  465.637152][T23511]  tomoyo_path_number_perm+0x23c/0x580
[  465.637169][T23511]  ? tomoyo_path_number_perm+0x22e/0x580
[  465.637189][T23511]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  465.637234][T23511]  ? find_held_lock+0x2b/0x80
[  465.637256][T23511]  ? __fget_files+0x215/0x3d0
[  465.637272][T23511]  ? hook_file_ioctl_common+0x146/0x410
[  465.637302][T23511]  ? __fget_files+0x21f/0x3d0
[  465.637324][T23511]  security_file_ioctl+0xd3/0x230
[  465.637345][T23511]  __x64_sys_ioctl+0xb7/0x210
[  465.637373][T23511]  do_syscall_64+0x106/0xf80
[  465.637390][T23511]  ? clear_bhb_loop+0x40/0x90
[  465.637413][T23511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.637431][T23511] RIP: 0033:0x7efd3119c799
[  465.637446][T23511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.637464][T23511] RSP: 002b:00007efd320a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  465.637482][T23511] RAX: ffffffffffffffda RBX: 00007efd31415fa0 RCX: 00007efd3119c799
[  465.637493][T23511] RDX: 0000200000000380 RSI: 00000000c014563b RDI: 0000000000000003
[  465.637504][T23511] RBP: 00007efd320a5090 R08: 0000000000000000 R09: 0000000000000000
[  465.637514][T23511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.637525][T23511] R13: 00007efd31416038 R14: 00007efd31415fa0 R15: 00007ffe66ee7748
[  465.637550][T23511]  </TASK>
[  465.637557][T23511] ERROR: Out of memory at tomoyo_realpath_from_path.
[  465.691169][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.697485][T23515] syzkaller0: entered promiscuous mode
[  465.700578][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.704438][T23515] syzkaller0: entered allmulticast mode
[  465.708557][T23099] ldm_validate_partition_table(): Disk read failed.
[  465.736435][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.740121][T23099] Buffer I/O error on dev loop6, logical block 0, async page read
[  465.742995][T23099] Dev loop6: unable to read RDB block 0
[  465.745491][T23099]  loop6: unable to read partition table
[  465.748650][T23507] ldm_validate_partition_table(): Disk read failed.
[  465.756217][T23507] Dev loop6: unable to read RDB block 0
[  465.758747][T23507]  loop6: unable to read partition table
[  465.768707][T23507] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  465.786213][ T5336] ldm_validate_partition_table(): Disk read failed.
[  465.788992][ T5336] Dev loop6: unable to read RDB block 0
[  465.794671][ T5336]  loop6: unable to read partition table
[  465.865403][T23525] bridge_slave_0: entered promiscuous mode
[  465.929924][T23493] chnl_net:caif_netlink_parms(): no params data found
[  465.942718][T23530] FAULT_INJECTION: forcing a failure.
[  465.942718][T23530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.951166][T23530] CPU: 1 UID: 0 PID: 23530 Comm: syz.1.6331 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.951188][T23530] Tainted: [L]=SOFTLOCKUP
[  465.951192][T23530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  465.951200][T23530] Call Trace:
[  465.951204][T23530]  <TASK>
[  465.951210][T23530]  dump_stack_lvl+0x100/0x190
[  465.951235][T23530]  should_fail_ex.cold+0x5/0xa
[  465.951267][T23530]  _copy_from_iter+0x1f4/0x1690
[  465.951287][T23530]  ? __asan_memset+0x23/0x50
[  465.951303][T23530]  ? __pfx__copy_from_iter+0x10/0x10
[  465.951319][T23530]  ? __pfx___alloc_skb+0x10/0x10
[  465.951336][T23530]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  465.951356][T23530]  netlink_sendmsg+0x808/0xda0
[  465.951373][T23530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.951386][T23530]  ? __might_fault+0x40/0x140
[  465.951407][T23530]  ____sys_sendmsg+0xa54/0xc30
[  465.951424][T23530]  ? __pfx_____sys_sendmsg+0x10/0x10
[  465.951449][T23530]  ___sys_sendmsg+0x190/0x1e0
[  465.951466][T23530]  ? __pfx____sys_sendmsg+0x10/0x10
[  465.951499][T23530]  __sys_sendmsg+0x170/0x220
[  465.951512][T23530]  ? __pfx___sys_sendmsg+0x10/0x10
[  465.951537][T23530]  do_syscall_64+0x106/0xf80
[  465.951549][T23530]  ? clear_bhb_loop+0x40/0x90
[  465.951563][T23530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.951576][T23530] RIP: 0033:0x7f610e79c799
[  465.951588][T23530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.951600][T23530] RSP: 002b:00007f610f6e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.951613][T23530] RAX: ffffffffffffffda RBX: 00007f610ea15fa0 RCX: 00007f610e79c799
[  465.951620][T23530] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  465.951627][T23530] RBP: 00007f610f6e1090 R08: 0000000000000000 R09: 0000000000000000
[  465.951634][T23530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.951641][T23530] R13: 00007f610ea16038 R14: 00007f610ea15fa0 R15: 00007ffc2df3e568
[  465.951656][T23530]  </TASK>
[  466.123519][T23493] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.125940][T23493] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.128381][T23493] bridge_slave_0: entered allmulticast mode
[  466.133226][T23493] bridge_slave_0: entered promiscuous mode
[  466.183192][T23546] FAULT_INJECTION: forcing a failure.
[  466.183192][T23546] name failslab, interval 1, probability 0, space 0, times 0
[  466.187205][T23547] netlink: 'syz.0.6337': attribute type 83 has an invalid length.
[  466.187248][T23546] CPU: 1 UID: 0 PID: 23546 Comm: syz.1.6338 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.187267][T23546] Tainted: [L]=SOFTLOCKUP
[  466.187271][T23546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  466.187278][T23546] Call Trace:
[  466.187283][T23546]  <TASK>
[  466.187289][T23546]  dump_stack_lvl+0x100/0x190
[  466.187311][T23546]  should_fail_ex.cold+0x5/0xa
[  466.187325][T23546]  ? tomoyo_encode2+0xfb/0x3c0
[  466.187338][T23546]  should_failslab+0xc2/0x120
[  466.187357][T23546]  __kmalloc_noprof+0xe0/0x850
[  466.187371][T23546]  ? d_absolute_path+0x136/0x1b0
[  466.187393][T23546]  tomoyo_encode2+0xfb/0x3c0
[  466.187408][T23546]  tomoyo_encode+0x29/0x50
[  466.187420][T23546]  tomoyo_realpath_from_path+0x18c/0x690
[  466.187437][T23546]  tomoyo_path_number_perm+0x23c/0x580
[  466.187447][T23546]  ? tomoyo_path_number_perm+0x22e/0x580
[  466.187459][T23546]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  466.187484][T23546]  ? find_held_lock+0x2b/0x80
[  466.187497][T23546]  ? __fget_files+0x215/0x3d0
[  466.187507][T23546]  ? hook_file_ioctl_common+0x146/0x410
[  466.187525][T23546]  ? __fget_files+0x21f/0x3d0
[  466.187538][T23546]  security_file_ioctl+0xd3/0x230
[  466.187551][T23546]  __x64_sys_ioctl+0xb7/0x210
[  466.187568][T23546]  do_syscall_64+0x106/0xf80
[  466.187579][T23546]  ? clear_bhb_loop+0x40/0x90
[  466.187593][T23546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.187604][T23546] RIP: 0033:0x7f610e79c799
[  466.187614][T23546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.187625][T23546] RSP: 002b:00007f610f6e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  466.187636][T23546] RAX: ffffffffffffffda RBX: 00007f610ea15fa0 RCX: 00007f610e79c799
[  466.187642][T23546] RDX: 0000200000000380 RSI: 00000000c014563b RDI: 0000000000000003
[  466.187649][T23546] RBP: 00007f610f6e1090 R08: 0000000000000000 R09: 0000000000000000
[  466.187655][T23546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.187661][T23546] R13: 00007f610ea16038 R14: 00007f610ea15fa0 R15: 00007ffc2df3e568
[  466.187675][T23546]  </TASK>
[  466.187687][T23546] ERROR: Out of memory at tomoyo_realpath_from_path.
[  466.297141][T23493] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.300533][T23493] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.304494][T23493] bridge_slave_1: entered allmulticast mode
[  466.308685][T23493] bridge_slave_1: entered promiscuous mode
[  466.349054][T23493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.370002][T23543] syzkaller0: entered promiscuous mode
[  466.377471][T23543] syzkaller0: entered allmulticast mode
[  466.385486][T23493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.464492][T23567] Cannot find del_set index 1 as target
[  466.784672][T23577] __nla_validate_parse: 1 callbacks suppressed
[  466.784687][T23577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6345'.
[  467.465912][T19883] Bluetooth: hci4: command tx timeout
[  468.671487][T23577] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  468.672952][T23493] team0: Port device team_slave_0 added
[  468.773219][T23586] xt_hashlimit: size too large, truncated to 1048576
[  468.784544][T23493] team0: Port device team_slave_1 added
[  468.822619][T23493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.825446][T23493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.836793][T23493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.843832][T23493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.846402][T23493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.866592][T23493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.947913][T23493] hsr_slave_0: entered promiscuous mode
[  468.950660][T23493] hsr_slave_1: entered promiscuous mode
[  468.953347][T23493] debugfs: 'hsr0' already exists in 'hsr'
[  468.955388][T23493] Cannot create hsr debugfs directory
[  468.970791][T23597] program syz.1.6354 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  468.976837][T23599] FAULT_INJECTION: forcing a failure.
[  468.976837][T23599] name failslab, interval 1, probability 0, space 0, times 0
[  468.981509][T23599] CPU: 1 UID: 0 PID: 23599 Comm: syz.0.6353 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.981529][T23599] Tainted: [L]=SOFTLOCKUP
[  468.981534][T23599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  468.981541][T23599] Call Trace:
[  468.981546][T23599]  <TASK>
[  468.981550][T23599]  dump_stack_lvl+0x100/0x190
[  468.981574][T23599]  should_fail_ex.cold+0x5/0xa
[  468.981589][T23599]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[  468.981606][T23599]  should_failslab+0xc2/0x120
[  468.981624][T23599]  __kmalloc_noprof+0xe0/0x850
[  468.981643][T23599]  genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[  468.981659][T23599]  ? cred_has_capability.isra.0+0x186/0x300
[  468.981675][T23599]  genl_family_rcv_msg_doit+0xc7/0x300
[  468.981692][T23599]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  468.981712][T23599]  ? bpf_lsm_capable+0x9/0x10
[  468.981723][T23599]  ? security_capable+0x80/0x260
[  468.981741][T23599]  ? ns_capable+0xd2/0xf0
[  468.981755][T23599]  genl_rcv_msg+0x560/0x800
[  468.981772][T23599]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.981787][T23599]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  468.981805][T23599]  netlink_rcv_skb+0x159/0x420
[  468.981819][T23599]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.981834][T23599]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  468.981854][T23599]  ? netlink_deliver_tap+0x1ae/0xcc0
[  468.981869][T23599]  genl_rcv+0x28/0x40
[  468.981882][T23599]  netlink_unicast+0x5aa/0x870
[  468.981897][T23599]  ? __pfx_netlink_unicast+0x10/0x10
[  468.981916][T23599]  netlink_sendmsg+0x8b0/0xda0
[  468.981932][T23599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.981944][T23599]  ? __might_fault+0x40/0x140
[  468.981964][T23599]  ____sys_sendmsg+0xa54/0xc30
[  468.981980][T23599]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.982001][T23599]  ___sys_sendmsg+0x190/0x1e0
[  468.982017][T23599]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.982049][T23599]  __sys_sendmsg+0x170/0x220
[  468.982060][T23599]  ? __pfx___sys_sendmsg+0x10/0x10
[  468.982081][T23599]  do_syscall_64+0x106/0xf80
[  468.982092][T23599]  ? clear_bhb_loop+0x40/0x90
[  468.982105][T23599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.982117][T23599] RIP: 0033:0x7fbcaeb9c799
[  468.982127][T23599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.982137][T23599] RSP: 002b:00007fbcafa42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.982149][T23599] RAX: ffffffffffffffda RBX: 00007fbcaee15fa0 RCX: 00007fbcaeb9c799
[  468.982156][T23599] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  468.982162][T23599] RBP: 00007fbcafa42090 R08: 0000000000000000 R09: 0000000000000000
[  468.982169][T23599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.982175][T23599] R13: 00007fbcaee16038 R14: 00007fbcaee15fa0 R15: 00007ffe33f62c28
[  468.982190][T23599]  </TASK>
[  469.053744][T23601] bond8: (slave bond_slave_1): Device is not our slave
[  469.106440][T23601] bond8: option active_slave: invalid value (bond_slave_1)
[  469.125127][T23601] bond8 (unregistering): Released all slaves
[  469.207268][T23493] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  469.213034][T23493] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  469.233679][T23493] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  469.247337][T23493] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  469.285985][T23611] syzkaller0: entered promiscuous mode
[  469.288256][T23611] syzkaller0: entered allmulticast mode
[  469.312292][T23620] Cannot find del_set index 1 as target
[  469.361941][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6361'.
[  469.376357][T23625] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  469.403721][T23627] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  469.436743][T23623] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address
[  469.454390][T23623] bond8: (slave vxcan7): Error -95 calling set_mac_address
[  469.470262][T23631] xt_hashlimit: size too large, truncated to 1048576
[  469.507291][T23630] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  469.540897][T19883] Bluetooth: hci4: command tx timeout
[  469.547982][T23493] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.582962][T23493] 8021q: adding VLAN 0 to HW filter on device team0
[  469.589711][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.592180][ T8257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.616201][T19950] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.619310][T19950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.718006][T23650] syzkaller0: entered promiscuous mode
[  469.720008][T23650] syzkaller0: entered allmulticast mode
[  469.720916][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  469.720931][   T40] audit: type=1400 audit(2000000174.139:1131): avc:  denied  { read } for  pid=23651 comm="syz.0.6373" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  469.750911][   T40] audit: type=1400 audit(2000000174.139:1132): avc:  denied  { open } for  pid=23651 comm="syz.0.6373" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  469.850538][T23662] Cannot find del_set index 1 as target
[  469.879419][T23493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.916868][T23667] syzkaller0: entered promiscuous mode
[  469.918752][T23667] syzkaller0: entered allmulticast mode
[  470.038933][T23682] xt_hashlimit: size too large, truncated to 1048576
[  470.122129][T23493] veth0_vlan: entered promiscuous mode
[  470.128980][T23493] veth1_vlan: entered promiscuous mode
[  470.155120][T23493] veth0_macvtap: entered promiscuous mode
[  470.159956][T23493] veth1_macvtap: entered promiscuous mode
[  470.169845][T19883] Bluetooth: hci2: unknown advertising packet type: 0x82
[  470.169865][T19883] Bluetooth: hci2: Dropping invalid advertising data
[  470.175841][T23493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.178813][T19883] Bluetooth: hci2: Malformed LE Event: 0x02
[  470.183154][T23493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.193396][T19950] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.197025][T23689] veth1_to_team: Caught tx_queue_len zero misconfig
[  470.203348][T19950] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.207001][T19950] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.211631][T19950] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.286771][T23696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6387'.
[  470.291551][T23696] cgroup: none used incorrectly
[  470.292165][T19947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.295487][T19947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.316353][T19950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.322552][T19950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.403131][T23700] netlink: 'syz.1.6389': attribute type 1 has an invalid length.
[  470.465267][T23708] Cannot find add_set index 0 as target
[  470.482470][T23706] bond18: (slave vxcan7): The slave device specified does not support setting the MAC address
[  470.486283][T23706] bond18: (slave vxcan7): Setting fail_over_mac to active for active-backup mode
[  470.502023][T23706] bond18: (slave vxcan7): making interface the new active one
[  470.508527][T23706] bond18: (slave vxcan7): Enslaving as an active interface with an up link
[  470.568895][   T40] audit: type=1400 audit(2000000174.989:1133): avc:  denied  { ioctl } for  pid=23714 comm="syz.1.6394" path="socket:[110093]" dev="sockfs" ino=110093 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  470.599176][T23717] xt_hashlimit: size too large, truncated to 1048576
[  470.695691][T23721] bond9: (slave bond_slave_1): Device is not our slave
[  470.698867][T23721] bond9: option active_slave: invalid value (bond_slave_1)
[  470.704105][T23721] bond9 (unregistering): Released all slaves
[  470.778501][T23730] syzkaller0: entered promiscuous mode
[  470.781885][T23730] syzkaller0: entered allmulticast mode
[  470.863028][T23732] Cannot find del_set index 1 as target
[  470.949167][T23738] FAULT_INJECTION: forcing a failure.
[  470.949167][T23738] name failslab, interval 1, probability 0, space 0, times 0
[  470.954703][T23738] CPU: 2 UID: 0 PID: 23738 Comm: syz.0.6404 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  470.954722][T23738] Tainted: [L]=SOFTLOCKUP
[  470.954726][T23738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  470.954733][T23738] Call Trace:
[  470.954737][T23738]  <TASK>
[  470.954742][T23738]  dump_stack_lvl+0x100/0x190
[  470.954763][T23738]  should_fail_ex.cold+0x5/0xa
[  470.954779][T23738]  should_failslab+0xc2/0x120
[  470.954796][T23738]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  470.954812][T23738]  ? ethnl_default_set_doit+0x2f0/0x9b0
[  470.954824][T23738]  ? pause_parse_request+0xea/0x170
[  470.954840][T23738]  ? __pfx_pause_parse_request+0x10/0x10
[  470.954858][T23738]  kmemdup_noprof+0x29/0x60
[  470.954874][T23738]  ethnl_default_set_doit+0x2f0/0x9b0
[  470.954888][T23738]  genl_family_rcv_msg_doit+0x214/0x300
[  470.954904][T23738]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  470.954924][T23738]  ? bpf_lsm_capable+0x9/0x10
[  470.954934][T23738]  ? security_capable+0x80/0x260
[  470.954951][T23738]  ? ns_capable+0xd2/0xf0
[  470.954965][T23738]  genl_rcv_msg+0x560/0x800
[  470.954981][T23738]  ? __pfx_genl_rcv_msg+0x10/0x10
[  470.954995][T23738]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  470.955049][T23738]  netlink_rcv_skb+0x159/0x420
[  470.955070][T23738]  ? __pfx_genl_rcv_msg+0x10/0x10
[  470.955090][T23738]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  470.955109][T23738]  ? netlink_deliver_tap+0x1ae/0xcc0
[  470.955123][T23738]  genl_rcv+0x28/0x40
[  470.955135][T23738]  netlink_unicast+0x5aa/0x870
[  470.955150][T23738]  ? __pfx_netlink_unicast+0x10/0x10
[  470.955168][T23738]  netlink_sendmsg+0x8b0/0xda0
[  470.955183][T23738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.955194][T23738]  ? __might_fault+0x40/0x140
[  470.955213][T23738]  ____sys_sendmsg+0xa54/0xc30
[  470.955229][T23738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.955250][T23738]  ___sys_sendmsg+0x190/0x1e0
[  470.955265][T23738]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.955297][T23738]  __sys_sendmsg+0x170/0x220
[  470.955308][T23738]  ? __pfx___sys_sendmsg+0x10/0x10
[  470.955328][T23738]  do_syscall_64+0x106/0xf80
[  470.955339][T23738]  ? clear_bhb_loop+0x40/0x90
[  470.955353][T23738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.955364][T23738] RIP: 0033:0x7fbcaeb9c799
[  470.955375][T23738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.955386][T23738] RSP: 002b:00007fbcafa42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.955397][T23738] RAX: ffffffffffffffda RBX: 00007fbcaee15fa0 RCX: 00007fbcaeb9c799
[  470.955404][T23738] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  470.955410][T23738] RBP: 00007fbcafa42090 R08: 0000000000000000 R09: 0000000000000000
[  470.955416][T23738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.955423][T23738] R13: 00007fbcaee16038 R14: 00007fbcaee15fa0 R15: 00007ffe33f62c28
[  470.955437][T23738]  </TASK>
[  470.966350][T23742] netlink: 'syz.6.6405': attribute type 1 has an invalid length.
[  470.996323][T23744] FAULT_INJECTION: forcing a failure.
[  470.996323][T23744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.076275][T23746] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address
[  471.079573][T23744] CPU: 3 UID: 0 PID: 23744 Comm: syz.0.6407 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  471.079594][T23744] Tainted: [L]=SOFTLOCKUP
[  471.079599][T23744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  471.079606][T23744] Call Trace:
[  471.079610][T23744]  <TASK>
[  471.079616][T23744]  dump_stack_lvl+0x100/0x190
[  471.079637][T23744]  should_fail_ex.cold+0x5/0xa
[  471.079652][T23744]  _copy_from_user+0x2e/0xd0
[  471.079669][T23744]  drm_ioctl+0x520/0xc60
[  471.079687][T23744]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  471.079706][T23744]  ? __pfx_drm_ioctl+0x10/0x10
[  471.079727][T23744]  ? selinux_file_ioctl+0x139/0x290
[  471.079740][T23744]  ? selinux_file_ioctl+0xb4/0x290
[  471.079753][T23744]  ? __pfx_drm_ioctl+0x10/0x10
[  471.079769][T23744]  __x64_sys_ioctl+0x18e/0x210
[  471.079787][T23744]  do_syscall_64+0x106/0xf80
[  471.079800][T23744]  ? clear_bhb_loop+0x40/0x90
[  471.079813][T23744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.079825][T23744] RIP: 0033:0x7fbcaeb9c799
[  471.079835][T23744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.079846][T23744] RSP: 002b:00007fbcafa42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  471.079864][T23744] RAX: ffffffffffffffda RBX: 00007fbcaee15fa0 RCX: 00007fbcaeb9c799
[  471.079871][T23744] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f
[  471.079878][T23744] RBP: 00007fbcafa42090 R08: 0000000000000000 R09: 0000000000000000
[  471.079884][T23744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.079891][T23744] R13: 00007fbcaee16038 R14: 00007fbcaee15fa0 R15: 00007ffe33f62c28
[  471.079905][T23744]  </TASK>
[  471.165191][T23746] bond9: (slave vxcan7): Setting fail_over_mac to active for active-backup mode
[  471.174525][T23746] bond9: (slave vxcan7): making interface the new active one
[  471.178381][T23746] bond9: (slave vxcan7): Enslaving as an active interface with an up link
[  471.229200][T23748] xt_hashlimit: size too large, truncated to 1048576
[  471.265680][T23753] tmpfs: Unknown parameter 'smackfsfloor'
[  471.267377][   T40] audit: type=1400 audit(2000000175.689:1134): avc:  denied  { remount } for  pid=23751 comm="syz.0.6410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  471.352155][T23758] bond10: (slave bond_slave_1): Device is not our slave
[  471.354606][T23758] bond10: option active_slave: invalid value (bond_slave_1)
[  471.363154][T23758] bond10 (unregistering): Released all slaves
[  471.382765][T23753] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  471.431187][T19883] Bluetooth: hci0: unknown advertising packet type: 0x82
[  471.431240][T19883] Bluetooth: hci0: Malformed LE Event: 0x02
[  471.516051][T23767] netlink: 'syz.6.6415': attribute type 13 has an invalid length.
[  471.610984][T19883] Bluetooth: hci4: command tx timeout
[  471.631873][T23775] FAULT_INJECTION: forcing a failure.
[  471.631873][T23775] name failslab, interval 1, probability 0, space 0, times 0
[  471.636129][T23775] CPU: 3 UID: 0 PID: 23775 Comm: syz.0.6418 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  471.636150][T23775] Tainted: [L]=SOFTLOCKUP
[  471.636155][T23775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  471.636162][T23775] Call Trace:
[  471.636168][T23775]  <TASK>
[  471.636175][T23775]  dump_stack_lvl+0x100/0x190
[  471.636198][T23775]  should_fail_ex.cold+0x5/0xa
[  471.636214][T23775]  ? ethnl_default_notify+0x178/0x9f0
[  471.636227][T23775]  should_failslab+0xc2/0x120
[  471.636249][T23775]  __kmalloc_noprof+0xe0/0x850
[  471.636265][T23775]  ? rcu_is_watching+0x12/0xc0
[  471.636281][T23775]  ethnl_default_notify+0x178/0x9f0
[  471.636296][T23775]  ? __pfx_ethnl_default_notify+0x10/0x10
[  471.636314][T23775]  ? ethnl_set_pause+0x3aa/0x680
[  471.636332][T23775]  ? __pfx_ethnl_set_pause+0x10/0x10
[  471.636352][T23775]  ? __pfx_ethnl_default_notify+0x10/0x10
[  471.636364][T23775]  ethnl_notify+0xc2/0x1c0
[  471.636377][T23775]  ethnl_default_set_doit+0x436/0x9b0
[  471.636393][T23775]  genl_family_rcv_msg_doit+0x214/0x300
[  471.636410][T23775]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  471.636431][T23775]  ? bpf_lsm_capable+0x9/0x10
[  471.636442][T23775]  ? security_capable+0x80/0x260
[  471.636461][T23775]  ? ns_capable+0xd2/0xf0
[  471.636477][T23775]  genl_rcv_msg+0x560/0x800
[  471.636494][T23775]  ? __pfx_genl_rcv_msg+0x10/0x10
[  471.636510][T23775]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  471.636529][T23775]  netlink_rcv_skb+0x159/0x420
[  471.636543][T23775]  ? __pfx_genl_rcv_msg+0x10/0x10
[  471.636559][T23775]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  471.636579][T23775]  ? netlink_deliver_tap+0x1ae/0xcc0
[  471.636595][T23775]  genl_rcv+0x28/0x40
[  471.636608][T23775]  netlink_unicast+0x5aa/0x870
[  471.636625][T23775]  ? __pfx_netlink_unicast+0x10/0x10
[  471.636644][T23775]  netlink_sendmsg+0x8b0/0xda0
[  471.636661][T23775]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.636674][T23775]  ? __might_fault+0x40/0x140
[  471.636694][T23775]  ____sys_sendmsg+0xa54/0xc30
[  471.636711][T23775]  ? __pfx_____sys_sendmsg+0x10/0x10
[  471.636734][T23775]  ___sys_sendmsg+0x190/0x1e0
[  471.636750][T23775]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.636785][T23775]  __sys_sendmsg+0x170/0x220
[  471.636798][T23775]  ? __pfx___sys_sendmsg+0x10/0x10
[  471.636820][T23775]  do_syscall_64+0x106/0xf80
[  471.636832][T23775]  ? clear_bhb_loop+0x40/0x90
[  471.636851][T23775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.636864][T23775] RIP: 0033:0x7fbcaeb9c799
[  471.636875][T23775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.636886][T23775] RSP: 002b:00007fbcafa42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  471.636898][T23775] RAX: ffffffffffffffda RBX: 00007fbcaee15fa0 RCX: 00007fbcaeb9c799
[  471.636905][T23775] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  471.636913][T23775] RBP: 00007fbcafa42090 R08: 0000000000000000 R09: 0000000000000000
[  471.636920][T23775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.636926][T23775] R13: 00007fbcaee16038 R14: 00007fbcaee15fa0 R15: 00007ffe33f62c28
[  471.636942][T23775]  </TASK>
[  471.807139][T23785] Cannot find del_set index 1 as target
[  471.854478][T23789] xt_hashlimit: size too large, truncated to 1048576
[  471.871397][   T40] audit: type=1400 audit(2000000176.299:1135): avc:  denied  { mount } for  pid=23786 comm="syz.6.6425" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  472.036832][   T40] audit: type=1400 audit(2000000176.459:1136): avc:  denied  { bind } for  pid=23795 comm="syz.0.6428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  472.137948][T23799] bond1: (slave bond_slave_1): Device is not our slave
[  472.140397][T23799] bond1: option active_slave: invalid value (bond_slave_1)
[  472.144621][T23799] bond1 (unregistering): Released all slaves
[  472.289732][T23810] FAULT_INJECTION: forcing a failure.
[  472.289732][T23810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.295756][T23810] CPU: 0 UID: 0 PID: 23810 Comm: syz.0.6432 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  472.295780][T23810] Tainted: [L]=SOFTLOCKUP
[  472.295786][T23810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  472.295793][T23810] Call Trace:
[  472.295798][T23810]  <TASK>
[  472.295803][T23810]  dump_stack_lvl+0x100/0x190
[  472.295828][T23810]  should_fail_ex.cold+0x5/0xa
[  472.295844][T23810]  _copy_from_user+0x2e/0xd0
[  472.295861][T23810]  kstrtouint_from_user+0xd6/0x1d0
[  472.295874][T23810]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  472.295885][T23810]  ? __lock_acquire+0x4a5/0x2630
[  472.295905][T23810]  ? lock_acquire+0x1cf/0x380
[  472.295924][T23810]  proc_fail_nth_write+0x83/0x220
[  472.295942][T23810]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  472.295960][T23810]  vfs_write+0x2aa/0x1070
[  472.295978][T23810]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  472.295994][T23810]  ? __pfx_vfs_write+0x10/0x10
[  472.296009][T23810]  ? __fget_files+0x215/0x3d0
[  472.296024][T23810]  ? __fget_files+0x21f/0x3d0
[  472.296039][T23810]  ksys_write+0x12a/0x250
[  472.296062][T23810]  ? __pfx_ksys_write+0x10/0x10
[  472.296082][T23810]  do_syscall_64+0x106/0xf80
[  472.296095][T23810]  ? clear_bhb_loop+0x40/0x90
[  472.296109][T23810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.296120][T23810] RIP: 0033:0x7fbcaeb5cfce
[  472.296131][T23810] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  472.296142][T23810] RSP: 002b:00007fbcafa41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  472.296153][T23810] RAX: ffffffffffffffda RBX: 00007fbcafa426c0 RCX: 00007fbcaeb5cfce
[  472.296160][T23810] RDX: 0000000000000001 RSI: 00007fbcafa420a0 RDI: 0000000000000004
[  472.296167][T23810] RBP: 00007fbcafa42090 R08: 0000000000000000 R09: 0000000000000000
[  472.296173][T23810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  472.296180][T23810] R13: 00007fbcaee16038 R14: 00007fbcaee15fa0 R15: 00007ffe33f62c28
[  472.296194][T23810]  </TASK>
[  472.426295][T23813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.429831][T23813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.447864][T23819] syzkaller0: entered promiscuous mode
[  472.450542][T23819] syzkaller0: entered allmulticast mode
[  472.656850][   T40] audit: type=1400 audit(2000000177.079:1137): avc:  denied  { unmount } for  pid=20898 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  472.660913][   T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  472.666535][ T7817] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  472.792308][T19883] Bluetooth: hci1: unknown advertising packet type: 0x82
[  472.792355][T19883] Bluetooth: hci1: Malformed LE Event: 0x02
[  472.820969][ T7817] usb 6-1: Using ep0 maxpacket: 8
[  472.823750][   T10] usb 12-1: Using ep0 maxpacket: 8
[  472.828813][ T7817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9
[  472.835639][ T7817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59209, setting to 1024
[  472.841217][ T7817] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  472.845634][ T7817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.849320][   T10] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  472.855411][   T10] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  472.862245][ T7817] usb 6-1: config 0 descriptor??
[  472.867624][T23812] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  472.871396][   T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  472.878071][   T10] usb 12-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  472.884748][   T10] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  472.889223][   T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.904172][   T10] usbtmc 12-1:16.0: bulk endpoints not found
[  472.963086][T23834] Cannot find del_set index 1 as target
[  473.074234][T23838] netlink: 'syz.0.6442': attribute type 1 has an invalid length.
[  473.105734][T23817] program syz.7.6435 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  473.117375][T23817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.122306][T23817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.149645][T23841] bond20: (slave bond_slave_1): Device is not our slave
[  473.154383][T23841] bond20: option active_slave: invalid value (bond_slave_1)
[  473.158943][T23841] bond20 (unregistering): Released all slaves
[  473.215244][ T7817] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  473.225946][ T7817] usb 6-1: USB disconnect, device number 43
[  473.506134][T23850] syzkaller0: entered promiscuous mode
[  473.508878][T23850] syzkaller0: entered allmulticast mode
[  473.700132][T23860] Cannot find del_set index 1 as target
[  473.701397][T19883] Bluetooth: hci4: command tx timeout
[  473.757462][T23864] netlink: 'syz.6.6452': attribute type 1 has an invalid length.
[  473.789526][T23864] bond10: (slave vxcan9): The slave device specified does not support setting the MAC address
[  473.794031][T23864] bond10: (slave vxcan9): Setting fail_over_mac to active for active-backup mode
[  473.799406][T23864] bond10: (slave vxcan9): making interface the new active one
[  473.802960][T23864] bond10: (slave vxcan9): Enslaving as an active interface with an up link
[  473.849747][T23868] bond20: (slave bond_slave_1): Device is not our slave
[  473.855202][T23868] bond20: option active_slave: invalid value (bond_slave_1)
[  473.860248][T23868] bond20 (unregistering): Released all slaves
[  473.866724][   T40] audit: type=1400 audit(2000000178.289:1138): avc:  denied  { bind } for  pid=23872 comm="syz.1.6455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  473.878471][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6455'.
[  473.940192][T19883] Bluetooth: hci1: unknown advertising packet type: 0x82
[  473.940238][T19883] Bluetooth: hci1: Malformed LE Event: 0x02
[  474.009770][T23884] syzkaller0: entered promiscuous mode
[  474.012639][T23884] syzkaller0: entered allmulticast mode
[  474.064892][T23886] XFS (nullb0): Invalid superblock magic number
[  474.145971][T23893] netlink: 'syz.1.6460': attribute type 1 has an invalid length.
[  474.157312][T23896] Cannot find del_set index 1 as target
[  474.160581][T23893] 8021q: adding VLAN 0 to HW filter on device bond19
[  474.198525][T23893] bond19: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  474.221659][   T40] audit: type=1400 audit(2000000178.649:1139): avc:  denied  { ioctl } for  pid=23897 comm="syz.0.6462" path="socket:[109538]" dev="sockfs" ino=109538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  474.222839][T19883] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28
[  474.235204][T23898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6462'.
[  474.243250][T23898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6462'.
[  474.364151][T23901] trusted_key: encrypted_key: insufficient parameters specified
[  474.442566][   T40] audit: type=1400 audit(2000000178.869:1140): avc:  denied  { read } for  pid=23900 comm="syz.0.6463" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  474.623440][T23905] netlink: 'syz.0.6464': attribute type 1 has an invalid length.
[  474.649066][T23905] bond20: (slave vxcan13): The slave device specified does not support setting the MAC address
[  474.653600][T23905] bond20: (slave vxcan13): Setting fail_over_mac to active for active-backup mode
[  474.660967][T23905] bond20: (slave vxcan13): making interface the new active one
[  474.666240][T23905] bond20: (slave vxcan13): Enslaving as an active interface with an up link
[  474.776993][T23910] bond21: (slave bond_slave_1): Device is not our slave
[  474.780112][T23910] bond21: option active_slave: invalid value (bond_slave_1)
[  474.786231][T23910] bond21 (unregistering): Released all slaves
[  474.837303][T23912] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  474.949401][T23917] syzkaller0: entered promiscuous mode
[  474.952258][T23917] syzkaller0: entered allmulticast mode
[  475.144169][T23930] syzkaller0: entered promiscuous mode
[  475.146209][T23930] syzkaller0: entered allmulticast mode
[  475.264622][T19883] Bluetooth: hci2: unknown advertising packet type: 0x82
[  475.264650][T19883] Bluetooth: hci2: Dropping invalid advertising data
[  475.269741][T19883] Bluetooth: hci2: Malformed LE Event: 0x02
[  475.304526][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6474'.
[  475.336354][T23935] bond20: (slave vxcan9): The slave device specified does not support setting the MAC address
[  475.340554][T23935] bond20: (slave vxcan9): Error -95 calling set_mac_address
[  475.392631][T23937] bond20: (slave bridge0): Enslaving as an active interface with an up link
[  475.431897][ T6013] usb 12-1: USB disconnect, device number 2
[  475.524393][T23944] tmpfs: Bad value for 'mpol'
[  475.637256][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6479'.
[  475.651910][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6479'.
[  475.655686][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  475.655703][   T40] audit: type=1326 audit(2000000180.079:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.668325][   T40] audit: type=1326 audit(2000000180.079:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.678642][   T40] audit: type=1326 audit(2000000180.079:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.689228][   T40] audit: type=1326 audit(2000000180.079:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.700846][   T40] audit: type=1326 audit(2000000180.079:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.711242][   T40] audit: type=1326 audit(2000000180.079:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.720381][   T40] audit: type=1326 audit(2000000180.079:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.720426][   T40] audit: type=1326 audit(2000000180.079:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.720462][   T40] audit: type=1326 audit(2000000180.079:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.749551][   T40] audit: type=1326 audit(2000000180.079:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23951 comm="syz.7.6480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x50000
[  475.749751][T23953] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6479'.
[  475.896012][T23955] FAULT_INJECTION: forcing a failure.
[  475.896012][T23955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.902205][T23955] CPU: 0 UID: 0 PID: 23955 Comm: syz.6.6481 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  475.902235][T23955] Tainted: [L]=SOFTLOCKUP
[  475.902242][T23955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  475.902253][T23955] Call Trace:
[  475.902266][T23955]  <TASK>
[  475.902275][T23955]  dump_stack_lvl+0x100/0x190
[  475.902320][T23955]  should_fail_ex.cold+0x5/0xa
[  475.902345][T23955]  _copy_from_user+0x2e/0xd0
[  475.902381][T23955]  drm_mode_atomic_ioctl+0x689/0x2680
[  475.902422][T23955]  ? avc_has_extended_perms+0x484/0x1080
[  475.902451][T23955]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  475.902478][T23955]  ? __lock_acquire+0x4a5/0x2630
[  475.902522][T23955]  ? drm_is_current_master+0x2c/0x40
[  475.902549][T23955]  ? drm_is_current_master+0x2c/0x40
[  475.902579][T23955]  ? do_raw_spin_unlock+0x145/0x1e0
[  475.902601][T23955]  drm_ioctl_kernel+0x1f3/0x3e0
[  475.902627][T23955]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  475.902655][T23955]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  475.902688][T23955]  drm_ioctl+0x5e6/0xc60
[  475.902717][T23955]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  475.902745][T23955]  ? __pfx_drm_ioctl+0x10/0x10
[  475.902779][T23955]  ? selinux_file_ioctl+0x139/0x290
[  475.902801][T23955]  ? selinux_file_ioctl+0xb4/0x290
[  475.902823][T23955]  ? __pfx_drm_ioctl+0x10/0x10
[  475.902848][T23955]  __x64_sys_ioctl+0x18e/0x210
[  475.902877][T23955]  do_syscall_64+0x106/0xf80
[  475.902903][T23955]  ? clear_bhb_loop+0x40/0x90
[  475.902927][T23955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.902945][T23955] RIP: 0033:0x7efd3119c799
[  475.902983][T23955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.902997][T23955] RSP: 002b:00007efd320a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  475.903016][T23955] RAX: ffffffffffffffda RBX: 00007efd31415fa0 RCX: 00007efd3119c799
[  475.903028][T23955] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f
[  475.903039][T23955] RBP: 00007efd320a5090 R08: 0000000000000000 R09: 0000000000000000
[  475.903049][T23955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.903060][T23955] R13: 00007efd31416038 R14: 00007efd31415fa0 R15: 00007ffe66ee7748
[  475.903084][T23955]  </TASK>
[  476.059248][T23957] Cannot find del_set index 1 as target
[  476.188354][T23961] binder_alloc: 23960: binder_alloc_buf, no vma
[  476.247828][T23964] binder: 23960:23964 ioctl 5394 200000000280 returned -22
[  476.265963][T23966] tmpfs: Bad value for 'mpol'
[  476.444120][T23978] syzkaller0: entered promiscuous mode
[  476.447917][T23978] syzkaller0: entered allmulticast mode
[  476.511431][T23980] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6491'.
[  476.544905][T23980] syzkaller0: entered promiscuous mode
[  476.547470][T23980] syzkaller0: entered allmulticast mode
[  478.876197][T24008] Cannot find del_set index 1 as target
[  478.918733][T24012] netlink: 'syz.0.6504': attribute type 17 has an invalid length.
[  478.921449][T24012] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6504'.
[  479.022183][T24025] syzkaller0: entered promiscuous mode
[  479.024511][T24025] syzkaller0: entered allmulticast mode
[  479.240554][T24032] syzkaller0: entered promiscuous mode
[  479.242882][T24032] syzkaller0: entered allmulticast mode
[  479.397761][T24042] netlink: 'syz.1.6515': attribute type 1 has an invalid length.
[  479.488089][T24050] Cannot find add_set index 0 as target
[  479.640901][T24059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6520'.
[  479.650845][ T6013] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  479.729512][T24062] syzkaller0: entered promiscuous mode
[  479.731986][T24062] syzkaller0: entered allmulticast mode
[  479.775937][T23099] udevd[23099]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  479.810564][ T6013] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  479.816155][ T6013] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  479.823630][ T6013] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66
[  479.828099][ T6013] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  479.834769][ T6013] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  479.842421][ T6013] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  479.861258][ T6013] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  479.877688][ T6013] usb 12-1: Product: syz
[  479.879755][ T6013] usb 12-1: Manufacturer: syz
[  479.903028][ T6013] cdc_wdm 12-1:1.0: skipping garbage
[  479.905879][ T6013] cdc_wdm 12-1:1.0: skipping garbage
[  479.912592][ T6013] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device
[  479.915500][ T6013] cdc_wdm 12-1:1.0: Unknown control protocol
[  480.040715][T24090] random: crng reseeded on system resumption
[  480.090824][T21455] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  480.112422][T24101] syzkaller0: entered promiscuous mode
[  480.114315][T24101] syzkaller0: entered allmulticast mode
[  480.150700][ T6013] usb 12-1: USB disconnect, device number 3
[  480.228661][T24104] syzkaller0: entered promiscuous mode
[  480.230666][T24104] syzkaller0: entered allmulticast mode
[  480.240825][T21455] usb 11-1: Using ep0 maxpacket: 8
[  480.245819][T21455] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  480.249560][T21455] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  480.259796][T21455] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  480.267307][T21455] usb 11-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  480.276157][T21455] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  480.279207][T21455] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.292899][T21455] usbtmc 11-1:16.0: bulk endpoints not found
[  480.316441][T24112] binder: 24111:24112 ioctl ae80 0 returned -22
[  480.326766][T24112] binder: 24111:24112 ioctl 80045700 200000000400 returned -22
[  480.371168][T24119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6538'.
[  480.395114][T24119] bond21: (slave vxcan15): The slave device specified does not support setting the MAC address
[  480.399789][T24119] bond21: (slave vxcan15): Error -95 calling set_mac_address
[  480.457912][T24125] bond21: (slave bridge4): Enslaving as an active interface with an up link
[  480.492899][T24074] program syz.6.6523 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  480.501584][T24074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.508665][T24074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.638954][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6541'.
[  480.658076][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6541'.
[  480.662607][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6541'.
[  480.666327][T24136] netlink: 'syz.0.6541': attribute type 19 has an invalid length.
[  480.776350][T24141] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6543'.
[  480.828534][T24145] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  480.832193][T24145] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  480.886005][T24148] binder: BINDER_SET_CONTEXT_MGR already set
[  480.888518][T24148] binder: 24147:24148 ioctl 4018620d 200000004a80 returned -16
[  480.907464][T19883] Bluetooth: hci0: unknown advertising packet type: 0x82
[  480.907497][T19883] Bluetooth: hci0: Dropping invalid advertising data
[  480.914817][T19883] Bluetooth: hci0: Malformed LE Event: 0x02
[  480.948006][T24152] syzkaller0: entered promiscuous mode
[  480.950609][T24152] syzkaller0: entered allmulticast mode
[  481.100092][   T40] kauditd_printk_skb: 18291 callbacks suppressed
[  481.100113][   T40] audit: type=1400 audit(2000000185.519:19443): avc:  denied  { cmd } for  pid=24160 comm="syz.1.6551" path="socket:[113794]" dev="sockfs" ino=113794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  481.322628][T21455] IPVS: starting estimator thread 0...
[  481.364073][T24176] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  481.364960][T24177] syzkaller0: entered promiscuous mode
[  481.373595][T24177] syzkaller0: entered allmulticast mode
[  481.411105][T24173] IPVS: using max 26 ests per chain, 62400 per kthread
[  481.488783][T24183] binder: BINDER_SET_CONTEXT_MGR already set
[  481.491277][T24183] binder: 24182:24183 ioctl 4018620d 200000004a80 returned -16
[  481.506733][T24185] netlink: 'syz.1.6560': attribute type 1 has an invalid length.
[  481.566026][T24189] syzkaller0: entered promiscuous mode
[  481.568021][T24189] syzkaller0: entered allmulticast mode
[  481.572424][T24189] FAULT_INJECTION: forcing a failure.
[  481.572424][T24189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.576642][T24189] CPU: 3 UID: 0 PID: 24189 Comm: syz.0.6562 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  481.576660][T24189] Tainted: [L]=SOFTLOCKUP
[  481.576664][T24189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  481.576671][T24189] Call Trace:
[  481.576677][T24189]  <TASK>
[  481.576682][T24189]  dump_stack_lvl+0x100/0x190
[  481.576704][T24189]  should_fail_ex.cold+0x5/0xa
[  481.576718][T24189]  _copy_to_user+0x32/0xd0
[  481.576736][T24189]  simple_read_from_buffer+0xcb/0x170
[  481.576754][T24189]  proc_fail_nth_read+0x1af/0x230
[  481.576770][T24189]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  481.576785][T24189]  ? rw_verify_area+0xce/0x6d0
[  481.576801][T24189]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  481.576815][T24189]  vfs_read+0x1e4/0xb30
[  481.576832][T24189]  ? __pfx_vfs_read+0x10/0x10
[  481.576847][T24189]  ? __fget_files+0x215/0x3d0
[  481.576865][T24189]  ? __fget_files+0x21f/0x3d0
[  481.576879][T24189]  ksys_read+0x12a/0x250
[  481.576895][T24189]  ? __pfx_ksys_read+0x10/0x10
[  481.576914][T24189]  do_syscall_64+0x106/0xf80
[  481.576926][T24189]  ? clear_bhb_loop+0x40/0x90
[  481.576939][T24189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.576950][T24189] RIP: 0033:0x7fbcaeb5cfce
[  481.576959][T24189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  481.576970][T24189] RSP: 002b:00007fbcafa41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  481.576981][T24189] RAX: ffffffffffffffda RBX: 00007fbcafa426c0 RCX: 00007fbcaeb5cfce
[  481.576988][T24189] RDX: 000000000000000f RSI: 00007fbcafa420a0 RDI: 0000000000000009
[  481.576994][T24189] RBP: 00007fbcafa42090 R08: 0000000000000000 R09: 0000000000000000
[  481.577001][T24189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.577007][T24189] R13: 00007fbcaee16038 R14: 00007fbcaee15fa0 R15: 00007ffe33f62c28
[  481.577022][T24189]  </TASK>
[  481.953171][T24200] bond1: (slave bond_slave_1): Device is not our slave
[  481.955719][T24200] bond1: option active_slave: invalid value (bond_slave_1)
[  481.960291][T24200] bond1 (unregistering): Released all slaves
[  482.006593][T24203] set match dimension is over the limit!
[  482.051785][   T40] audit: type=1400 audit(2000000186.479:19444): avc:  denied  { bind } for  pid=24206 comm="syz.0.6569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  482.128626][   T40] audit: type=1400 audit(2000000186.549:19445): avc:  denied  { setopt } for  pid=24215 comm="syz.1.6572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  482.131539][T24216] ÿÿÿÿÿÿ: renamed from vlan0 (while UP)
[  482.353548][T24238] Cannot find add_set index 0 as target
[  482.438643][T24245] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  482.489672][T24248] bond23: (slave bond_slave_1): Device is not bonding slave
[  482.493278][T24248] bond23: option active_slave: invalid value (bond_slave_1)
[  482.498259][T24248] bond23 (unregistering): Released all slaves
[  482.657839][T24251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  482.662482][T24251] nftables ruleset with unbound chain
[  482.667230][T24257] binder: BINDER_SET_CONTEXT_MGR already set
[  482.669593][T24257] binder: 24256:24257 ioctl 4018620d 200000000440 returned -16
[  482.673775][   T40] audit: type=1400 audit(2000000187.099:19446): avc:  denied  { ioctl } for  pid=24256 comm="syz.1.6585" path="socket:[113007]" dev="sockfs" ino=113007 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  482.748013][T19883] Bluetooth: hci4: unknown advertising packet type: 0x82
[  482.748078][T19883] Bluetooth: hci4: Dropping invalid advertising data
[  482.758875][T19883] Bluetooth: hci4: Malformed LE Event: 0x02
[  482.799143][T24263] netlink: 'syz.1.6588': attribute type 1 has an invalid length.
[  482.826358][T24263] bond23: (slave vxcan9): The slave device specified does not support setting the MAC address
[  482.830234][T24263] bond23: (slave vxcan9): Setting fail_over_mac to active for active-backup mode
[  482.847182][T24263] bond23: (slave vxcan9): making interface the new active one
[  482.850248][T24263] bond23: (slave vxcan9): Enslaving as an active interface with an up link
[  482.896114][ T7817] usb 11-1: USB disconnect, device number 4
[  482.915843][T24266] set match dimension is over the limit!
[  482.994651][T19883] Bluetooth: hci2: unknown advertising packet type: 0x82
[  482.994692][T19883] Bluetooth: hci2: Dropping invalid advertising data
[  483.002596][T19883] Bluetooth: hci2: Malformed LE Event: 0x02
[  483.037662][   T40] audit: type=1400 audit(2000000187.459:19447): avc:  denied  { remount } for  pid=24277 comm="syz.1.6596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  483.078188][T24285] binder: 24284:24285 ioctl c0306201 2000000004c0 returned -22
[  483.121159][T24291] netlink: 'syz.7.6601': attribute type 1 has an invalid length.
[  483.124817][T24287] syzkaller0: entered promiscuous mode
[  483.127854][T24287] syzkaller0: entered allmulticast mode
[  483.176999][T24289] syzkaller0: entered promiscuous mode
[  483.179631][T24289] syzkaller0: entered allmulticast mode
[  483.194365][T24291] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  483.198824][T24291] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  483.208760][T24291] bond1: (slave vxcan3): making interface the new active one
[  483.213440][T24291] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[  483.430389][T24304] set match dimension is over the limit!
[  483.484827][T19883] Bluetooth: hci2: unknown advertising packet type: 0x82
[  483.484850][T19883] Bluetooth: hci2: Dropping invalid advertising data
[  483.489504][T19883] Bluetooth: hci2: Malformed LE Event: 0x02
[  483.500860][ T6012] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  483.530929][ T1025] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  483.557957][T24311] bond22: (slave bond_slave_1): Device is not our slave
[  483.563241][T24311] bond22: option active_slave: invalid value (bond_slave_1)
[  483.573380][T24311] bond22 (unregistering): Released all slaves
[  483.652673][T24314] netlink: 'syz.6.6610': attribute type 1 has an invalid length.
[  483.655288][T24314] netlink: 'syz.6.6610': attribute type 2 has an invalid length.
[  483.657783][T24314] netlink: 'syz.6.6610': attribute type 2 has an invalid length.
[  483.660255][T24314] netlink: 'syz.6.6610': attribute type 2 has an invalid length.
[  483.676064][ T6012] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  483.679179][ T6012] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.682518][ T1025] usb 6-1: Using ep0 maxpacket: 8
[  483.684776][ T6012] usb 12-1: Product: syz
[  483.686614][ T6012] usb 12-1: Manufacturer: syz
[  483.687748][T24316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6611'.
[  483.688629][ T6012] usb 12-1: SerialNumber: syz
[  483.696796][ T1025] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  483.702817][ T1025] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  483.713262][ T6012] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  483.721355][ T1025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  483.725781][ T1025] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  483.757802][   T40] audit: type=1400 audit(2000000188.179:19448): avc:  denied  { firmware_load } for  pid=29 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  483.768964][T24318] bond22: (slave vxcan15): The slave device specified does not support setting the MAC address
[  483.769922][ T1025] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  483.776771][ T1025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.785355][   T29] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  483.786872][T24318] bond22: (slave vxcan15): Error -95 calling set_mac_address
[  483.797107][ T1025] usbtmc 6-1:16.0: bulk endpoints not found
[  483.830330][T24316] bond22: (slave bridge6): Enslaving as an active interface with an up link
[  484.001757][T24296] program syz.1.6600 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  484.006182][T24296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.009368][T24296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.041405][T24324] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  484.261599][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  484.267286][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  484.271290][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  484.275731][   T40] audit: type=1400 audit(2000000188.699:19449): avc:  denied  { unmount } for  pid=19458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  484.276827][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  484.290561][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  484.371776][T24338] bond23: (slave bond_slave_1): Device is not our slave
[  484.375009][T24338] bond23: option active_slave: invalid value (bond_slave_1)
[  484.380366][T24338] bond23 (unregistering): Released all slaves
[  484.498028][T24332] chnl_net:caif_netlink_parms(): no params data found
[  484.532887][T24349] set match dimension is over the limit!
[  484.547330][T24336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.551232][T24336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.555645][T24336] binder: 24293:24336 ioctl c018620c 200000000280 returned -22
[  484.563917][T24332] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.566532][T24332] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.569124][T24332] bridge_slave_0: entered allmulticast mode
[  484.572345][T24332] bridge_slave_0: entered promiscuous mode
[  484.575840][T24332] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.578208][T24332] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.581061][T24332] bridge_slave_1: entered allmulticast mode
[  484.584647][T24332] bridge_slave_1: entered promiscuous mode
[  484.587366][   T40] audit: type=1400 audit(2000000189.009:19450): avc:  denied  { setopt } for  pid=24351 comm="syz.0.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  484.602853][T24332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.607674][T24332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.624648][T24332] team0: Port device team_slave_0 added
[  484.628359][T24332] team0: Port device team_slave_1 added
[  484.646815][T24332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.649191][T24332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.660996][T24332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.667745][T24332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.670226][T24332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.679403][T24332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.689997][T24355] syzkaller0: entered promiscuous mode
[  484.692841][T24355] syzkaller0: entered allmulticast mode
[  484.746995][T24332] hsr_slave_0: entered promiscuous mode
[  484.749456][T24332] hsr_slave_1: entered promiscuous mode
[  484.753033][T24332] debugfs: 'hsr0' already exists in 'hsr'
[  484.754774][T24332] Cannot create hsr debugfs directory
[  484.820836][   T29] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive
[  484.823561][   T29] ath9k_htc: Failed to initialize the device
[  484.846737][   T29] usb 12-1: ath9k_htc: USB layer deinitialized
[  484.855229][   T29] usb 12-1: USB disconnect, device number 4
[  484.898109][T24357] syzkaller0: entered promiscuous mode
[  484.900648][T24357] syzkaller0: entered allmulticast mode
[  484.937059][T24332] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  484.942151][T24332] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  484.946985][T24332] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  484.952476][T24332] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  484.973996][T24332] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.977017][T24332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.980071][T24332] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.983230][T24332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.035099][T24332] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.050976][T19948] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.056540][T19948] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.071107][T24332] 8021q: adding VLAN 0 to HW filter on device team0
[  485.079061][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.081733][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.095499][T19948] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.098192][T19948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.099709][T24369] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  485.214428][T24375] bond23: (slave bond_slave_1): Device is not our slave
[  485.216741][T24375] bond23: option active_slave: invalid value (bond_slave_1)
[  485.220186][T24375] bond23 (unregistering): Released all slaves
[  485.245962][T24332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.411824][T24391] syzkaller0: entered promiscuous mode
[  485.414294][T24391] syzkaller0: entered allmulticast mode
[  485.422659][T24332] veth0_vlan: entered promiscuous mode
[  485.429046][T24332] veth1_vlan: entered promiscuous mode
[  485.475493][T24332] veth0_macvtap: entered promiscuous mode
[  485.492990][T24332] veth1_macvtap: entered promiscuous mode
[  485.509959][T24332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.529011][T24332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.542132][ T8257] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.545616][ T8257] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.549314][T24401] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  485.558115][ T8257] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.562915][ T8257] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.567530][T24399] syzkaller0: entered promiscuous mode
[  485.569383][T24399] syzkaller0: entered allmulticast mode
[  485.639578][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.652610][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.673681][ T8257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.676644][ T8257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.721872][T24407] bond2: (slave bond_slave_1): Device is not our slave
[  485.724581][T24407] bond2: option active_slave: invalid value (bond_slave_1)
[  485.728410][T24407] bond2 (unregistering): Released all slaves
[  485.799481][T24418] binder: 24417:24418 ioctl 40047211 200000000280 returned -22
[  485.843565][T24420] binder_alloc: 24419: binder_alloc_buf, no vma
[  485.940833][T24427] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  486.064676][T24430] syzkaller0: entered promiscuous mode
[  486.066988][T24430] syzkaller0: entered allmulticast mode
[  486.296245][ T1336] usb 6-1: USB disconnect, device number 44
[  486.334420][ T5942] Bluetooth: hci1: command tx timeout
[  486.359926][T24432] validate_nla: 2 callbacks suppressed
[  486.359941][T24432] netlink: 'syz.1.6646': attribute type 1 has an invalid length.
[  486.367107][T24432] netlink: 'syz.1.6646': attribute type 2 has an invalid length.
[  486.372064][T24432] netlink: 'syz.1.6646': attribute type 2 has an invalid length.
[  486.374751][T24432] netlink: 'syz.1.6646': attribute type 2 has an invalid length.
[  486.378712][T24432] netlink: 'syz.1.6646': attribute type 1 has an invalid length.
[  486.381336][T24432] netlink: 'syz.1.6646': attribute type 2 has an invalid length.
[  486.945465][T19883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  486.956532][T19883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  486.960613][T19883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  486.967946][T19883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  486.982453][T19883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  487.053439][T24444] bond2: (slave bond_slave_1): Device is not our slave
[  487.056059][T24444] bond2: option active_slave: invalid value (bond_slave_1)
[  487.060070][T24444] bond2 (unregistering): Released all slaves
[  487.182849][T24447] Cannot find del_set index 1 as target
[  487.335643][   T40] audit: type=1400 audit(2000000191.759:19451): avc:  denied  { setopt } for  pid=24454 comm="syz.8.6655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  487.364188][T24441] chnl_net:caif_netlink_parms(): no params data found
[  487.434003][T24441] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.437017][T24441] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.439849][T24441] bridge_slave_0: entered allmulticast mode
[  487.444615][T24441] bridge_slave_0: entered promiscuous mode
[  487.449635][T24441] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.454037][T24441] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.458114][T24441] bridge_slave_1: entered allmulticast mode
[  487.463195][T24441] bridge_slave_1: entered promiscuous mode
[  487.480944][ T1336] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  487.499947][T24441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.508389][T24441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.537999][T24441] team0: Port device team_slave_0 added
[  487.542708][T24441] team0: Port device team_slave_1 added
[  487.567500][T24441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.570541][T24441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.581467][T24441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.587684][T24441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.590689][T24441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.600894][T24441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.628304][T24441] hsr_slave_0: entered promiscuous mode
[  487.630882][ T1336] usb 12-1: Using ep0 maxpacket: 8
[  487.631139][T24441] hsr_slave_1: entered promiscuous mode
[  487.635093][ T1336] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  487.635490][T24441] debugfs: 'hsr0' already exists in 'hsr'
[  487.639620][ T1336] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  487.641458][T24441] Cannot create hsr debugfs directory
[  487.649275][ T1336] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  487.653702][ T1336] usb 12-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  487.655427][T24464] netlink: 'syz.0.6656': attribute type 1 has an invalid length.
[  487.659136][ T1336] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  487.662488][T24464] netlink: 'syz.0.6656': attribute type 2 has an invalid length.
[  487.667841][ T1336] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.669917][T24464] netlink: 'syz.0.6656': attribute type 2 has an invalid length.
[  487.676946][T24464] netlink: 'syz.0.6656': attribute type 2 has an invalid length.
[  487.683470][ T1336] usbtmc 12-1:16.0: bulk endpoints not found
[  487.863999][T24441] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  487.870590][T24441] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  487.877063][T24441] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  487.883099][T24441] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  487.887119][T24451] program syz.7.6654 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  487.894028][T24451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.898295][T24451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.901379][T24441] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.903903][T24441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.906706][T24441] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.909371][T24441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.946294][T24441] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.957103][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.959992][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.967899][T24441] 8021q: adding VLAN 0 to HW filter on device team0
[  487.975570][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.978035][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.986296][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.988890][ T8257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.165098][T24441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  488.222437][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  488.228557][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  488.235939][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  488.240381][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  488.255523][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  488.331541][T19883] Bluetooth: hci1: unknown advertising packet type: 0x82
[  488.331594][T19883] Bluetooth: hci1: Malformed LE Event: 0x02
[  488.386356][T24441] veth0_vlan: entered promiscuous mode
[  488.396401][T24441] veth1_vlan: entered promiscuous mode
[  488.410939][T19883] Bluetooth: hci1: command tx timeout
[  488.424491][T24441] veth0_macvtap: entered promiscuous mode
[  488.432440][T24441] veth1_macvtap: entered promiscuous mode
[  488.473749][T24441] batman_adv: batadv0: Interface activated: batadv_slave_0
[  488.494711][T24441] batman_adv: batadv0: Interface activated: batadv_slave_1
[  488.506732][ T8257] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.511378][ T8257] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.523177][ T8257] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.527075][ T8257] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.615563][T24478] chnl_net:caif_netlink_parms(): no params data found
[  488.627420][T19950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.630084][T19950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.695972][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.698662][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.723358][T24478] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.726380][T24478] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.729642][T24478] bridge_slave_0: entered allmulticast mode
[  488.736183][T24478] bridge_slave_0: entered promiscuous mode
[  488.745663][T24478] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.748716][T24478] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.751764][T24478] bridge_slave_1: entered allmulticast mode
[  488.754894][T24478] bridge_slave_1: entered promiscuous mode
[  488.773416][T24478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.778288][T24478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.800896][T24478] team0: Port device team_slave_0 added
[  488.805523][T24478] team0: Port device team_slave_1 added
[  488.822636][T24478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.824951][T24478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.833747][T24478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.838735][T24478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.841508][T24478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.850063][T24478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.875193][T24478] hsr_slave_0: entered promiscuous mode
[  488.877598][T24478] hsr_slave_1: entered promiscuous mode
[  488.879872][T24478] debugfs: 'hsr0' already exists in 'hsr'
[  488.881894][T24478] Cannot create hsr debugfs directory
[  488.989367][T24478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.051227][T19883] Bluetooth: hci0: command tx timeout
[  489.092780][T24499] binder: 24497:24499 ioctl c0306201 200000000080 returned -14
[  489.104581][T24478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.123431][T24501] binder: BINDER_SET_CONTEXT_MGR already set
[  489.126335][T24501] binder: 24500:24501 ioctl 4018620d 200000004a80 returned -16
[  489.157140][T24498] binder: 24497:24498 ioctl c0306201 200000000200 returned -14
[  489.182803][T24503] Cannot find del_set index 1 as target
[  489.238009][T24478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.271881][T24505] syzkaller0: entered promiscuous mode
[  489.273773][T24505] syzkaller0: entered allmulticast mode
[  489.283046][   T40] audit: type=1400 audit(2000000193.709:19452): avc:  denied  { remount } for  pid=24504 comm="syz.8.6664" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  489.349217][T24478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.487509][   T40] audit: type=1400 audit(2000000193.909:19453): avc:  denied  { watch } for  pid=24508 comm="syz.8.6666" path="/10/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  489.500093][   T40] audit: type=1400 audit(2000000193.909:19454): avc:  denied  { watch_sb } for  pid=24508 comm="syz.8.6666" path="/10/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  489.633740][T24478] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  489.639144][T24512] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6667'.
[  489.642452][T24478] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  489.649329][T24478] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  489.675237][T24478] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  489.808451][T24478] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.821216][T24478] 8021q: adding VLAN 0 to HW filter on device team0
[  489.831461][T19950] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.834017][T19950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.842720][T19955] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.846013][T19955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.888798][T24521] syzkaller0: entered promiscuous mode
[  489.890702][T24521] syzkaller0: entered allmulticast mode
[  490.105271][T24478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.143330][T24478] veth0_vlan: entered promiscuous mode
[  490.152222][T24478] veth1_vlan: entered promiscuous mode
[  490.176325][T24478] veth0_macvtap: entered promiscuous mode
[  490.185707][T24478] veth1_macvtap: entered promiscuous mode
[  490.204185][T24478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.217565][T24478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.228229][ T1175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.237775][ T1175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.250868][ T1175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.255552][ T1175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.271148][ T1029] usb 12-1: USB disconnect, device number 5
[  490.331343][T19883] Bluetooth: hci2: command tx timeout
[  490.332411][ T1025] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  490.365374][T24536] syzkaller0: entered promiscuous mode
[  490.367430][T24536] syzkaller0: entered allmulticast mode
[  490.390212][T19947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.398088][T19947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.424790][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.427856][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.491093][T19883] Bluetooth: hci1: command tx timeout
[  490.500984][ T1025] usb 13-1: Using ep0 maxpacket: 8
[  490.512694][ T1025] usb 13-1: config 179 has an invalid interface number: 65 but max is 0
[  490.516370][ T1025] usb 13-1: config 179 has no interface number 0
[  490.519212][ T1025] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  490.533124][ T1025] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  490.539179][ T1025] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  490.550972][ T1025] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  490.558805][ T1025] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  490.563877][ T1025] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.578100][T24532] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  490.603387][T24542] bond2: (slave bond_slave_1): Device is not our slave
[  490.606265][T24542] bond2: option active_slave: invalid value (bond_slave_1)
[  490.611517][T24542] bond2 (unregistering): Released all slaves
[  490.713032][T24547] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.6675'.
[  490.717570][T24547] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  490.789424][T24552] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6678'.
[  490.829181][   T40] audit: type=1400 audit(2000000195.249:19455): avc:  denied  { read } for  pid=24554 comm="syz.7.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  490.929259][   T40] audit: type=1400 audit(2000000195.349:19456): avc:  denied  { setattr } for  pid=24563 comm="syz.3.6682" name="NETLINK" dev="sockfs" ino=117313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  490.941908][T24564] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6682'.
[  490.949100][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6682'.
[  490.958178][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6682'.
[  490.970286][T24556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  491.140862][T19883] Bluetooth: hci0: command tx timeout
[  491.154257][T24574] bond1: (slave bond_slave_1): Device is not our slave
[  491.157486][T24574] bond1: option active_slave: invalid value (bond_slave_1)
[  491.171533][T24574] bond1 (unregistering): Released all slaves
[  491.224547][   T40] audit: type=1400 audit(2000000195.649:19457): avc:  denied  { mount } for  pid=24578 comm="syz.7.6688" name="/" dev="hugetlbfs" ino=115111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  491.286610][   T40] audit: type=1400 audit(2000000195.709:19458): avc:  denied  { unmount } for  pid=24578 comm="syz.7.6688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  491.297595][   T40] audit: type=1400 audit(2000000195.729:19459): avc:  denied  { remount } for  pid=24578 comm="syz.7.6688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  491.453708][T24590] bond2: (slave bond_slave_1): Device is not our slave
[  491.459072][T24590] bond2: option active_slave: invalid value (bond_slave_1)
[  491.465962][T24590] bond2 (unregistering): Released all slaves
[  491.581592][T24595] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6693'.
[  491.614544][T24598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  491.627349][T24595] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[  491.632646][T24595] bond2: (slave vxcan5): Error -95 calling set_mac_address
[  491.679730][T24599] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  491.827406][T24604] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  491.834086][T24604] Error validating options; rc = [-22]
[  492.110940][   T40] audit: type=1400 audit(2000000196.529:19460): avc:  denied  { listen } for  pid=24613 comm="syz.7.6700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  492.157726][T24621] bond1: (slave bond_slave_1): Device is not our slave
[  492.164713][T24621] bond1: option active_slave: invalid value (bond_slave_1)
[  492.170596][T24621] bond1 (unregistering): Released all slaves
[  492.324441][T24627] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6703'.
[  492.420899][T19883] Bluetooth: hci2: command tx timeout
[  492.500613][T24629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.571903][T19883] Bluetooth: hci1: command tx timeout
[  492.584997][T24632] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6705'.
[  492.817042][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  492.817054][   T40] audit: type=1400 audit(2000000197.239:19465): avc:  denied  { map } for  pid=24642 comm="syz.9.6707" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  492.830590][   T40] audit: type=1400 audit(2000000197.239:19466): avc:  denied  { execute } for  pid=24642 comm="syz.9.6707" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  492.914418][   T40] audit: type=1400 audit(2000000197.339:19467): avc:  denied  { write } for  pid=24652 comm="syz.9.6711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  493.066727][   T40] audit: type=1400 audit(2000000197.489:19468): avc:  denied  { kexec_image_load } for  pid=24657 comm="syz.9.6714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  493.181244][T24662] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  493.194187][ T1029] usb 13-1: USB disconnect, device number 2
[  493.211995][T19883] Bluetooth: hci0: command tx timeout
[  493.219100][T24665] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6716'.
[  493.389980][T24678] Cannot find del_set index 1 as target
[  493.489669][T24676] syzkaller0: entered promiscuous mode
[  493.493669][T24676] syzkaller0: entered allmulticast mode
[  493.624165][T24690] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  493.717785][   T40] audit: type=1804 audit(2000000198.139:19469): pid=24688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.6725" name="/newroot/20/file0" dev="fuse" ino=1 res=1 errno=0
[  493.752029][   T40] audit: type=1400 audit(2000000198.179:19470): avc:  denied  { mounton } for  pid=24687 comm="syz.9.6725" path="/20/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  494.019015][T24704] validate_nla: 2 callbacks suppressed
[  494.019035][T24704] netlink: 'syz.9.6729': attribute type 30 has an invalid length.
[  494.494023][T19883] Bluetooth: hci2: command tx timeout
[  495.291510][T19883] Bluetooth: hci0: command tx timeout
[  495.893233][T24700] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  495.919077][T24708] Cannot find del_set index 1 as target
[  495.930265][T24704] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  495.946915][T24711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6732'.
[  496.076335][T24715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  496.147016][T24726] overlayfs: invalid origin (0000)
[  496.201310][T24728] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  496.272135][T24735] bond1: (slave bond_slave_1): Device is not our slave
[  496.274723][T24735] bond1: option active_slave: invalid value (bond_slave_1)
[  496.278564][T24735] bond1 (unregistering): Released all slaves
[  496.300054][T24734] syzkaller0: entered promiscuous mode
[  496.302574][T24734] syzkaller0: entered allmulticast mode
[  496.455599][T24745] syzkaller0: entered promiscuous mode
[  496.458145][T24745] syzkaller0: entered allmulticast mode
[  496.570947][T19883] Bluetooth: hci2: command tx timeout
[  496.637731][T24756] syzkaller0: entered promiscuous mode
[  496.640218][T24756] syzkaller0: entered allmulticast mode
[  496.770358][T24770] Cannot find del_set index 1 as target
[  496.982420][T24785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  497.838979][T24803] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  499.134359][T24795] syzkaller0: entered promiscuous mode
[  499.138160][T24795] syzkaller0: entered allmulticast mode
[  499.249940][T24812] Cannot find del_set index 1 as target
[  499.310234][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6767'.
[  499.435625][ T1029] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  499.587717][ T1029] usb 13-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  499.591980][ T1029] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  499.595628][ T1029] usb 13-1: Product: syz
[  499.597622][ T1029] usb 13-1: Manufacturer: syz
[  499.600029][ T1029] usb 13-1: SerialNumber: syz
[  499.606108][ T1029] usb 13-1: config 0 descriptor??
[  499.615837][ T1029] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  499.633302][ T1029] dvb-usb: bulk message failed: -22 (2/0)
[  499.818351][T24806] cxusb: i2c wr: len=80 is too big!
[  499.818351][T24806] 
[  499.826505][ T1029] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  499.846679][ T1029] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  499.858385][ T1029] usb 13-1: media controller created
[  499.933085][ T1029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  501.678231][T24818] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  501.684418][T24818] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  501.751227][T24819] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  501.857011][T24827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  501.861465][   T40] audit: type=1400 audit(2000000206.269:19471): avc:  denied  { setattr } for  pid=24828 comm="syz.3.6770" name="ALG" dev="sockfs" ino=117859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  501.877713][T24835] bond4: (slave bond_slave_1): Device is not our slave
[  501.880900][T24835] bond4: option active_slave: invalid value (bond_slave_1)
[  501.897529][T24835] bond4 (unregistering): Released all slaves
[  501.976101][T24843] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  502.071121][T24850] macvlan0: entered allmulticast mode
[  502.087724][   T40] audit: type=1400 audit(2000000206.509:19472): avc:  denied  { setopt } for  pid=24847 comm="syz.3.6776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  502.087747][T24850] veth1_vlan: entered allmulticast mode
[  502.103526][T24850] pim6reg: entered allmulticast mode
[  502.190499][T24857] openvswitch: netlink: Unknown key attributes 2
[  502.192713][T24860] veth1_vlan: left allmulticast mode
[  502.201874][T24860] macvlan0 (unregistering): left allmulticast mode
[  502.281934][T24870] team_slave_0: entered promiscuous mode
[  502.285360][T24870] team_slave_1: entered promiscuous mode
[  502.289502][T24870] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  502.356266][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6780'.
[  502.366940][T24874] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6781'.
[  502.389702][T24871] 8021q: adding VLAN 0 to HW filter on device bond1
[  502.424356][T24870] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  502.439603][T24874] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  502.445156][T24874] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  502.495692][T24876] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  502.501055][T19955] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  502.566221][T24880] Cannot find del_set index 1 as target
[  502.603306][T24885] befs: (nullb0): No write support. Marking filesystem read-only
[  502.608713][T24885] befs: (nullb0): invalid magic header
[  502.612667][T24882] bond2: (slave bond_slave_1): Device is not our slave
[  502.615762][T24882] bond2: option active_slave: invalid value (bond_slave_1)
[  502.621579][T19949] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  502.625632][T24882] bond2 (unregistering): Released all slaves
[  502.728774][T24889] pim6reg99999999: entered allmulticast mode
[  502.742629][   T40] audit: type=1326 audit(2000000207.159:19473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.7.6787" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c3099c799 code=0x0
[  502.785028][ T1029] cxusb: set interface failed
[  502.786749][ T1029] dvb-usb: bulk message failed: -22 (1/0)
[  502.815234][ T1029] DVB: Unable to find symbol mt352_attach()
[  502.817376][ T1029] dvb-usb: bulk message failed: -22 (5/0)
[  502.819896][ T1029] zl10353_read_register: readreg error (reg=127, ret==-121)
[  502.843628][ T1029] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  502.853554][T24896] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  502.891122][ T1029] rc_core: IR keymap rc-dvico-mce not found
[  502.893286][ T1029] Registered IR keymap rc-empty
[  502.897057][ T1029] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0
[  502.903207][ T1029] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input36
[  502.908085][   T40] audit: type=1400 audit(2000000207.329:19474): avc:  denied  { read } for  pid=5321 comm="acpid" name="event4" dev="devtmpfs" ino=3439 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  502.909065][ T1029] dvb-usb: schedule remote query interval to 100 msecs.
[  502.917833][   T40] audit: type=1400 audit(2000000207.329:19475): avc:  denied  { open } for  pid=5321 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3439 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  502.919176][ T1029] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  502.930012][   T40] audit: type=1400 audit(2000000207.329:19476): avc:  denied  { ioctl } for  pid=5321 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3439 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  502.949339][ T1029] usb 13-1: USB disconnect, device number 3
[  503.016941][T24906] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6793'.
[  503.094562][ T1029] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  503.127676][T24914] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  503.138358][T24906] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  503.145530][T24906] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  503.200919][T24917] bond1: (slave bond_slave_1): Device is not our slave
[  503.203329][T24917] bond1: option active_slave: invalid value (bond_slave_1)
[  503.207753][T24917] bond1 (unregistering): Released all slaves
[  503.248773][T24915] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  503.301760][T24920] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6798'.
[  503.306477][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6798'.
[  503.386944][T24929] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  503.518966][T24942] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6808'.
[  503.569243][T24945] bond2: (slave bond_slave_1): Device is not our slave
[  503.572112][T24945] bond2: option active_slave: invalid value (bond_slave_1)
[  503.576681][T24945] bond2 (unregistering): Released all slaves
[  503.631764][T24942] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  503.637259][T24942] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  503.693862][T24949] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  503.702368][T24954] binder: BINDER_SET_CONTEXT_MGR already set
[  503.704989][T24954] binder: 24952:24954 ioctl 4018620d 200000004a80 returned -16
[  503.754668][T24956] Bluetooth: MGMT ver 1.23
[  503.857653][T24965] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  504.157577][T24982] bond5: (slave bond_slave_1): Device is not our slave
[  504.159849][T24982] bond5: option active_slave: invalid value (bond_slave_1)
[  504.169887][T24982] bond5 (unregistering): Released all slaves
[  504.173080][T24985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6824'.
[  504.232759][T24985] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  504.238631][T24985] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  504.285846][T24991] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  504.302734][T24990] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  504.408967][T24996] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  504.414248][T24999] tmpfs: Unknown parameter 'appraise'
[  504.416516][   T40] audit: type=1400 audit(2000000208.839:19477): avc:  denied  { write } for  pid=24995 comm="syz.9.6828" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  504.426661][   T40] audit: type=1400 audit(2000000208.849:19478): avc:  denied  { bind } for  pid=25000 comm="syz.7.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  504.435525][   T40] audit: type=1400 audit(2000000208.849:19479): avc:  denied  { listen } for  pid=25000 comm="syz.7.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  504.444565][T25001] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  504.607115][T25015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6836'.
[  504.645131][T25015] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  504.649982][T25015] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  504.687150][T25020] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  504.716331][T25023] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  504.741082][ T1025] usb 14-1: new high-speed USB device number 2 using dummy_hcd
[  504.901044][ T1025] usb 14-1: Using ep0 maxpacket: 8
[  504.904088][ T1025] usb 14-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  504.907418][ T1025] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  504.911576][ T1025] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  504.915036][ T1025] usb 14-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  504.919293][ T1025] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  504.922754][ T1025] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.928670][ T1025] usbtmc 14-1:16.0: bulk endpoints not found
[  504.980034][   T40] audit: type=1400 audit(2000000209.399:19480): avc:  denied  { mount } for  pid=25043 comm="syz.7.6845" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  504.991829][T25051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6846'.
[  505.010429][T15768] libceph: mon0 (1)[c::]:6789 socket error on write
[  505.050355][T25055] Cannot find del_set index 1 as target
[  505.101340][T25057] 8021q: adding VLAN 0 to HW filter on device bond3
[  505.122055][T25061] 8021q: adding VLAN 0 to HW filter on device bond4
[  505.132267][T25004] program syz.9.6832 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  505.138415][T25004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.142923][T25066] binder: 25065:25066 ioctl c0306201 0 returned -14
[  505.146978][T25066] binder: BINDER_SET_CONTEXT_MGR already set
[  505.147420][T25004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.149304][T25066] binder: 25065:25066 ioctl 4018620d 200000004a80 returned -16
[  505.172634][T25068] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  505.277892][T15768] libceph: mon0 (1)[c::]:6789 socket error on write
[  505.318325][T25078] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6856'.
[  505.343385][T25081] bond5: (slave bond_slave_1): Device is not our slave
[  505.346790][T25081] bond5: option active_slave: invalid value (bond_slave_1)
[  505.353201][T25081] bond5 (unregistering): Released all slaves
[  505.448069][T25086] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  505.490720][T25092] FAULT_INJECTION: forcing a failure.
[  505.490720][T25092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.499956][T25092] CPU: 0 UID: 0 PID: 25092 Comm: syz.8.6859 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  505.499986][T25092] Tainted: [L]=SOFTLOCKUP
[  505.499993][T25092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  505.500004][T25092] Call Trace:
[  505.500010][T25092]  <TASK>
[  505.500017][T25092]  dump_stack_lvl+0x100/0x190
[  505.500064][T25092]  should_fail_ex.cold+0x5/0xa
[  505.500087][T25092]  _copy_from_user+0x2e/0xd0
[  505.500120][T25092]  l2cap_sock_setsockopt+0x18eb/0x2330
[  505.500147][T25092]  ? __pfx_sock_has_perm+0x10/0x10
[  505.500178][T25092]  ? __pfx_l2cap_sock_setsockopt+0x10/0x10
[  505.500203][T25092]  ? find_held_lock+0x2b/0x80
[  505.500225][T25092]  ? __fget_files+0x215/0x3d0
[  505.500248][T25092]  ? selinux_socket_setsockopt+0x6a/0x80
[  505.500266][T25092]  ? __pfx_l2cap_sock_setsockopt+0x10/0x10
[  505.500286][T25092]  do_sock_setsockopt+0xf3/0x1d0
[  505.500312][T25092]  __sys_setsockopt+0x195/0x220
[  505.500335][T25092]  __x64_sys_setsockopt+0xbd/0x160
[  505.500352][T25092]  ? do_syscall_64+0x95/0xf80
[  505.500372][T25092]  ? lockdep_hardirqs_on+0x78/0x100
[  505.500390][T25092]  do_syscall_64+0x106/0xf80
[  505.500406][T25092]  ? clear_bhb_loop+0x40/0x90
[  505.500428][T25092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.500447][T25092] RIP: 0033:0x7f22ee59c799
[  505.500463][T25092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  505.500481][T25092] RSP: 002b:00007f22ef3e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  505.500500][T25092] RAX: ffffffffffffffda RBX: 00007f22ee815fa0 RCX: 00007f22ee59c799
[  505.500512][T25092] RDX: 0000000000000009 RSI: 0000000000000112 RDI: 0000000000000004
[  505.500521][T25092] RBP: 00007f22ef3e5090 R08: 0000000000000001 R09: 0000000000000000
[  505.500530][T25092] R10: 0000200000002880 R11: 0000000000000246 R12: 0000000000000001
[  505.500542][T25092] R13: 00007f22ee816038 R14: 00007f22ee815fa0 R15: 00007ffdec25f618
[  505.500568][T25092]  </TASK>
[  505.501282][T25084] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  505.583444][T25097] syzkaller0: entered promiscuous mode
[  505.588030][T25097] syzkaller0: entered allmulticast mode
[  505.753183][T25103] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  505.792179][  T830] libceph: mon0 (1)[c::]:6789 socket error on write
[  505.807708][T25044] ceph: No mds server is up or the cluster is laggy
[  505.972605][T25118] FAULT_INJECTION: forcing a failure.
[  505.972605][T25118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.976654][T25116] syzkaller0: entered promiscuous mode
[  505.982165][T25116] syzkaller0: entered allmulticast mode
[  505.991861][T25118] CPU: 3 UID: 0 PID: 25118 Comm: syz.8.6871 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  505.991888][T25118] Tainted: [L]=SOFTLOCKUP
[  505.991895][T25118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  505.991906][T25118] Call Trace:
[  505.991912][T25118]  <TASK>
[  505.991920][T25118]  dump_stack_lvl+0x100/0x190
[  505.991954][T25118]  should_fail_ex.cold+0x5/0xa
[  505.991978][T25118]  _copy_to_user+0x32/0xd0
[  505.992005][T25118]  simple_read_from_buffer+0xcb/0x170
[  505.992034][T25118]  proc_fail_nth_read+0x1af/0x230
[  505.992058][T25118]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  505.992082][T25118]  ? rw_verify_area+0xce/0x6d0
[  505.992102][T25118]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  505.992124][T25118]  vfs_read+0x1e4/0xb30
[  505.992150][T25118]  ? __pfx_vfs_read+0x10/0x10
[  505.992173][T25118]  ? __fget_files+0x215/0x3d0
[  505.992194][T25118]  ? __fget_files+0x21f/0x3d0
[  505.992217][T25118]  ksys_read+0x12a/0x250
[  505.992244][T25118]  ? __pfx_ksys_read+0x10/0x10
[  505.992276][T25118]  do_syscall_64+0x106/0xf80
[  505.992296][T25118]  ? clear_bhb_loop+0x40/0x90
[  505.992319][T25118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.992337][T25118] RIP: 0033:0x7f22ee55cfce
[  505.992353][T25118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  505.992369][T25118] RSP: 002b:00007f22ef3e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  505.992384][T25118] RAX: ffffffffffffffda RBX: 00007f22ef3e56c0 RCX: 00007f22ee55cfce
[  505.992393][T25118] RDX: 000000000000000f RSI: 00007f22ef3e50a0 RDI: 0000000000000003
[  505.992403][T25118] RBP: 00007f22ef3e5090 R08: 0000000000000000 R09: 0000000000000000
[  505.992413][T25118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.992425][T25118] R13: 00007f22ee816038 R14: 00007f22ee815fa0 R15: 00007ffdec25f618
[  505.992451][T25118]  </TASK>
[  506.147718][T25121] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  506.153186][T25121] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  506.183906][T25123] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  506.430603][T25131] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  506.458988][T25134] syzkaller0: entered promiscuous mode
[  506.461713][T25134] syzkaller0: entered allmulticast mode
[  506.582311][T25142] bond5: (slave bond_slave_1): Device is not our slave
[  506.585355][T25142] bond5: option active_slave: invalid value (bond_slave_1)
[  506.590163][T25142] bond5 (unregistering): Released all slaves
[  506.655855][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  506.743271][T25161] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  506.974455][T25178] bond2: (slave bond_slave_1): Device is not our slave
[  506.976838][T25178] bond2: option active_slave: invalid value (bond_slave_1)
[  506.980990][T25178] bond2 (unregistering): Released all slaves
[  507.033324][ T1029] usb 12-1: new full-speed USB device number 6 using dummy_hcd
[  507.071706][ T7817] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[  507.184091][ T1029] usb 12-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  507.188738][ T1029] usb 12-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  507.193646][ T1029] usb 12-1: config 0 interface 0 has no altsetting 0
[  507.197456][ T1029] usb 12-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  507.201565][ T1029] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.209250][ T1029] usb 12-1: config 0 descriptor??
[  507.220887][ T7817] usb 13-1: Using ep0 maxpacket: 8
[  507.228085][ T7817] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  507.238778][ T7817] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  507.243191][ T7817] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  507.247178][ T7817] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  507.253499][ T7817] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  507.257520][ T7817] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.493178][T15914] usb 14-1: USB disconnect, device number 2
[  507.501886][ T7817] usb 13-1: GET_CAPABILITIES returned 0
[  507.511895][ T7817] usbtmc 13-1:16.0: can't read capabilities
[  507.636476][ T1029] hid_parser_main: 183 callbacks suppressed
[  507.636498][ T1029] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0
[  507.645151][ T1029] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0
[  507.649094][ T1029] hid-steam 0003:28DE:1102.0010: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0
[  507.669498][T25200] tmpfs: Bad value for 'mpol'
[  507.691912][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  507.691925][   T40] audit: type=1400 audit(2000000212.119:19485): avc:  denied  { listen } for  pid=25198 comm="syz.9.6901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  507.704555][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.708730][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.712874][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.716862][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.721291][ T1029] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' connected
[  507.723207][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.728776][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.730358][ T1029] input: Steam Controller as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:28DE:1102.0010/input/input38
[  507.732741][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.732786][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.732822][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.732856][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.755884][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.761456][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.765799][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.769681][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.773466][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.776993][ T1029] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0
[  507.784378][    C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  507.797681][ T1029] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0
[  507.817297][ T1029] hid-steam 0003:28DE:1102.0011: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0
[  507.823702][   T40] audit: type=1400 audit(2000000212.249:19486): avc:  denied  { accept } for  pid=25198 comm="syz.9.6901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  507.962219][ T6012] usb 12-1: USB disconnect, device number 6
[  508.071492][T25219] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  508.123913][ T6012] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' disconnected
[  508.124197][T15768] usb 13-1: USB disconnect, device number 4
[  508.175728][T25226] __nla_validate_parse: 33 callbacks suppressed
[  508.175749][T25226] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6903'.
[  508.235584][T25226] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  508.250238][T25226] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  508.295401][T25234] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  508.309848][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6905'.
[  508.316590][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6905'.
[  508.419261][T25239] netlink: 'syz.3.6905': attribute type 1 has an invalid length.
[  508.586541][T25251] syzkaller0: entered promiscuous mode
[  508.588927][T25251] syzkaller0: entered allmulticast mode
[  508.671169][T15768] usb 14-1: new high-speed USB device number 3 using dummy_hcd
[  508.679292][T25256] syzkaller0: entered promiscuous mode
[  508.682829][T25256] syzkaller0: entered allmulticast mode
[  508.710108][T25259] loop2: detected capacity change from 0 to 7
[  508.726461][T23099] Dev loop2: unable to read RDB block 7
[  508.728809][T23099]  loop2: AHDI p1
[  508.730161][T23099] loop2: partition table partially beyond EOD, truncated
[  508.749395][T25259] Dev loop2: unable to read RDB block 7
[  508.752875][T25259]  loop2: AHDI p1
[  508.756698][T25259] loop2: partition table partially beyond EOD, truncated
[  508.820921][T15768] usb 14-1: Using ep0 maxpacket: 8
[  508.825737][T15768] usb 14-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  508.831833][T15768] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  508.837210][T15768] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  508.842983][T15768] usb 14-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  508.848840][T15768] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  508.853184][T15768] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.870688][T15768] usbtmc 14-1:16.0: bulk endpoints not found
[  508.954596][T25269] FAULT_INJECTION: forcing a failure.
[  508.954596][T25269] name failslab, interval 1, probability 0, space 0, times 0
[  508.960005][T25269] CPU: 3 UID: 0 PID: 25269 Comm: syz.8.6920 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  508.960036][T25269] Tainted: [L]=SOFTLOCKUP
[  508.960044][T25269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  508.960056][T25269] Call Trace:
[  508.960063][T25269]  <TASK>
[  508.960072][T25269]  dump_stack_lvl+0x100/0x190
[  508.960107][T25269]  should_fail_ex.cold+0x5/0xa
[  508.960133][T25269]  should_failslab+0xc2/0x120
[  508.960163][T25269]  __kmalloc_cache_noprof+0x7a/0x6f0
[  508.960186][T25269]  ? inet6_dump_fib+0x9b2/0x11b0
[  508.960205][T25269]  ? inet_dump_fib+0x536/0x990
[  508.960232][T25269]  inet6_dump_fib+0x9b2/0x11b0
[  508.960258][T25269]  ? __pfx_inet6_dump_fib+0x10/0x10
[  508.960291][T25269]  ? __pfx_inet6_dump_fib+0x10/0x10
[  508.960311][T25269]  rtnl_dump_all+0x285/0x5d0
[  508.960345][T25269]  ? __pfx_rtnl_dump_all+0x10/0x10
[  508.960371][T25269]  rtnl_dumpit+0x19b/0x1f0
[  508.960398][T25269]  netlink_dump+0x539/0xd30
[  508.960423][T25269]  ? __pfx_netlink_dump+0x10/0x10
[  508.960441][T25269]  ? __pfx___mutex_lock+0x10/0x10
[  508.960486][T25269]  __netlink_dump_start+0x6d6/0x990
[  508.960511][T25269]  ? __pfx_rtnl_dump_all+0x10/0x10
[  508.960537][T25269]  rtnetlink_rcv_msg+0xb3e/0xe90
[  508.960556][T25269]  ? __pfx_rtnl_dump_all+0x10/0x10
[  508.960584][T25269]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  508.960604][T25269]  ? __pfx_rtnl_dumpit+0x10/0x10
[  508.960628][T25269]  ? __pfx_rtnl_dump_all+0x10/0x10
[  508.960664][T25269]  ? ref_tracker_free+0x37e/0x6c0
[  508.960697][T25269]  netlink_rcv_skb+0x159/0x420
[  508.960720][T25269]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  508.960760][T25269]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.960794][T25269]  ? netlink_deliver_tap+0x1ae/0xcc0
[  508.960821][T25269]  netlink_unicast+0x5aa/0x870
[  508.960848][T25269]  ? __pfx_netlink_unicast+0x10/0x10
[  508.960881][T25269]  netlink_sendmsg+0x8b0/0xda0
[  508.960915][T25269]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.960948][T25269]  sock_write_iter+0x566/0x610
[  508.960975][T25269]  ? __pfx_sock_write_iter+0x10/0x10
[  508.961010][T25269]  ? bpf_lsm_file_permission+0x9/0x10
[  508.961037][T25269]  ? security_file_permission+0x76/0x210
[  508.961063][T25269]  ? rw_verify_area+0xce/0x6d0
[  508.961091][T25269]  vfs_write+0x6ac/0x1070
[  508.961120][T25269]  ? __pfx_sock_write_iter+0x10/0x10
[  508.961147][T25269]  ? __pfx_vfs_write+0x10/0x10
[  508.961173][T25269]  ? find_held_lock+0x2b/0x80
[  508.961217][T25269]  ksys_write+0x1f8/0x250
[  508.961245][T25269]  ? __pfx_ksys_write+0x10/0x10
[  508.961282][T25269]  do_syscall_64+0x106/0xf80
[  508.961301][T25269]  ? clear_bhb_loop+0x40/0x90
[  508.961325][T25269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.961345][T25269] RIP: 0033:0x7f22ee59c799
[  508.961363][T25269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.961382][T25269] RSP: 002b:00007f22ef3e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  508.961401][T25269] RAX: ffffffffffffffda RBX: 00007f22ee815fa0 RCX: 00007f22ee59c799
[  508.961413][T25269] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003
[  508.961424][T25269] RBP: 00007f22ef3e5090 R08: 0000000000000000 R09: 0000000000000000
[  508.961436][T25269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.961446][T25269] R13: 00007f22ee816038 R14: 00007f22ee815fa0 R15: 00007ffdec25f618
[  508.961473][T25269]  </TASK>
[  509.065091][T25243] program syz.9.6907 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  509.103645][T25243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.107268][T25243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.169677][T25276] input: syz1 as /devices/virtual/input/input39
[  509.196589][T25278] syzkaller0: entered promiscuous mode
[  509.199289][T25278] syzkaller0: entered allmulticast mode
[  509.260203][T25280] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  509.412727][T25290] syzkaller0: entered promiscuous mode
[  509.415316][T25290] syzkaller0: entered allmulticast mode
[  509.544922][T25303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6932'.
[  509.577788][T25303] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  509.586942][T25303] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  509.596566][T25309] binder: 25308:25309 ioctl 4018620d 0 returned -22
[  509.629200][T25310] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  509.717866][T25318] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  509.729767][T25321] comedi comedi3: comedi_config --init_data is deprecated
[  509.737614][T25321] comedi comedi3: comedi_config --init_data is deprecated
[  509.848248][T25332] binder: 25331:25332 ioctl 4018620d 0 returned -22
[  509.897205][T25337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6946'.
[  509.924240][   T40] audit: type=1400 audit(2000000214.339:19487): avc:  denied  { setopt } for  pid=25339 comm="syz.7.6945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  509.927045][T25337] bond2: entered promiscuous mode
[  509.946795][T25337] 8021q: adding VLAN 0 to HW filter on device bond2
[  509.955228][T25343] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6947'.
[  509.976397][T25343] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  509.982744][T25343] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  510.038281][T25349] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  510.126105][T25355] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  510.319152][T25370] macsec0: entered promiscuous mode
[  510.324691][T25370] macsec0: entered allmulticast mode
[  510.327210][T25370] veth1_macvtap: entered allmulticast mode
[  510.382212][T25362] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  510.686450][T25385] syzkaller0: entered promiscuous mode
[  510.688310][T25385] syzkaller0: entered allmulticast mode
[  510.717200][T25389] netlink: 'syz.8.6966': attribute type 21 has an invalid length.
[  510.720660][T25389] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6966'.
[  510.772030][T25391] binder: 25390:25391 ioctl c0306201 0 returned -14
[  510.840647][T25394] syzkaller0: entered promiscuous mode
[  510.844701][T25394] syzkaller0: entered allmulticast mode
[  510.943350][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6971'.
[  510.968622][T25400] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  510.973468][T25400] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  510.991418][T19945] ------------[ cut here ]------------
[  510.993543][T19945] conntrack cleanup blocked for 60s
[  510.993553][T19945] WARNING: net/netfilter/nf_conntrack_core.c:2511 at nf_conntrack_cleanup_net_list+0x4f7/0x690, CPU#2: kworker/u32:49/19945
[  511.000104][T19945] Modules linked in:
[  511.002271][T19945] CPU: 2 UID: 0 PID: 19945 Comm: kworker/u32:49 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  511.005973][T19945] Tainted: [L]=SOFTLOCKUP
[  511.007421][T19945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  511.010697][T19945] Workqueue: netns cleanup_net
[  511.012786][T19945] RIP: 0010:nf_conntrack_cleanup_net_list+0x4f7/0x690
[  511.015878][T19945] Code: 29 c3 48 89 de e8 c9 16 5b f8 48 85 db 78 0f e8 df 1b 5b f8 e8 da 79 e3 01 e9 0e fc ff ff e8 d0 1b 5b f8 48 8d 3d 49 78 3a 07 <67> 48 0f b9 3a eb de 4c 8b 6c 24 40 e8 b8 1b 5b f8 48 b8 00 00 00
[  511.022899][T19945] RSP: 0018:ffffc90003d27970 EFLAGS: 00010293
[  511.024945][T19945] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff89ad96f7
[  511.027477][T19945] RDX: ffff888036118000 RSI: ffffffff89ad9710 RDI: ffffffff90e80f60
[  511.030067][T19945] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[  511.033469][T19945] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000001
[  511.036202][T19945] R13: 0000000000000001 R14: ffffc90003d27b28 R15: dffffc0000000000
[  511.039018][T19945] FS:  0000000000000000(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000
[  511.042156][T19945] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  511.044344][T19945] CR2: 00007f1c30a4eaeb CR3: 0000000056c77000 CR4: 0000000000352ef0
[  511.046973][T19945] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: fffffffffffffffd
[  511.049574][T19945] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  511.052745][T19945] Call Trace:
[  511.053961][T19945]  <TASK>
[  511.054980][T19945]  ? nf_conntrack_cleanup_net_list+0x158/0x690
[  511.057114][T19945]  ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10
[  511.059375][T19945]  ? nf_conntrack_pernet_exit+0xaa/0x150
[  511.062023][T19945]  ? kfree+0x1f6/0x6b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  511.063517][T19945]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  511.066049][T19945]  ops_undo_list+0x363/0xab0
[  511.066980][   T40] audit: type=1400 audit(2000000215.489:19488): avc:  denied  { write } for  pid=5913 comm="syz-executor" path="pipe:[7304]" dev="pipefs" ino=7304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  511.067733][T19945]  ? __pfx_ops_undo_list+0x10/0x10
[  511.079943][T19945]  ? cleanup_net+0x332/0x920
[  511.081924][T19945]  ? idr_destroy+0x62/0x2e0
[  511.083605][T19945]  cleanup_net+0x499/0x920
[  511.085321][T19945]  ? __pfx_cleanup_net+0x10/0x10
[  511.087134][T19945]  ? rcu_is_watching+0x12/0xc0
[  511.088855][T19945]  process_one_work+0x9d7/0x1920
[  511.090701][T19945]  ? __pfx_process_one_work+0x10/0x10
[  511.093170][T19945]  ? __pfx_cleanup_net+0x10/0x10
[  511.095298][T19945]  worker_thread+0x5da/0xe40
[  511.097041][T19945]  ? kthread+0x13a/0x450
[  511.098473][T19945]  ? __pfx_worker_thread+0x10/0x10
[  511.100222][T19945]  kthread+0x370/0x450
[  511.101746][T19945]  ? __pfx_kthread+0x10/0x10
[  511.103333][T19945]  ret_from_fork+0x754/0xd80
[  511.104888][T19945]  ? __pfx_ret_from_fork+0x10/0x10
[  511.106803][T19945]  ? __switch_to+0x7b4/0x1120
[  511.108579][T19945]  ? __pfx_kthread+0x10/0x10
[  511.110218][T19945]  ret_from_fork_asm+0x1a/0x30
[  511.111946][T19945]  </TASK>
[  511.113027][T19945] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  511.115407][T19945] CPU: 2 UID: 0 PID: 19945 Comm: kworker/u32:49 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  511.119036][T19945] Tainted: [L]=SOFTLOCKUP
[  511.120544][T19945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  511.124410][T19945] Workqueue: netns cleanup_net
[  511.126080][T19945] Call Trace:
[  511.127295][T19945]  <TASK>
[  511.128332][T19945]  dump_stack_lvl+0x100/0x190
[  511.129917][T19945]  vpanic+0x552/0x970
[  511.131267][T19945]  ? __pfx_vpanic+0x10/0x10
[  511.132801][T19945]  panic+0xd1/0xe0
[  511.134038][T19945]  ? __pfx_panic+0x10/0x10
[  511.135725][T19945]  ? check_panic_on_warn+0x1f/0x90
[  511.137927][T19945]  check_panic_on_warn.cold+0x19/0x34
[  511.140270][T19945]  ? nf_conntrack_cleanup_net_list+0x4f7/0x690
[  511.143083][T19945]  __warn.cold+0x191/0x348
[  511.145270][T19945]  __report_bug+0x296/0x3d0
[  511.147221][T19945]  ? nf_conntrack_cleanup_net_list+0x4f7/0x690
[  511.149481][T19945]  ? __pfx___report_bug+0x10/0x10
[  511.151617][T19945]  ? __lock_acquire+0x4a5/0x2630
[  511.153763][T19945]  ? nf_conntrack_cleanup_net_list+0x4f0/0x690
[  511.156407][T19945]  ? nf_conntrack_cleanup_net_list+0x4d7/0x690
[  511.159905][T19945]  ? nf_ct_iterate_cleanup_net+0xd9/0x110
[  511.162804][T19945]  ? nf_ct_iterate_cleanup_net+0xd9/0x110
[  511.165446][T19945]  report_bug_entry+0xe1/0x290
[  511.167626][T19945]  ? nf_conntrack_cleanup_net_list+0x4f7/0x690
[  511.170383][T19945]  handle_bug+0x1cd/0x2a0
[  511.172211][T19945]  exc_invalid_op+0x17/0x50
[  511.174215][T19945]  asm_exc_invalid_op+0x1a/0x20
[  511.176272][T19945] RIP: 0010:nf_conntrack_cleanup_net_list+0x4f7/0x690
[  511.178813][T19945] Code: 29 c3 48 89 de e8 c9 16 5b f8 48 85 db 78 0f e8 df 1b 5b f8 e8 da 79 e3 01 e9 0e fc ff ff e8 d0 1b 5b f8 48 8d 3d 49 78 3a 07 <67> 48 0f b9 3a eb de 4c 8b 6c 24 40 e8 b8 1b 5b f8 48 b8 00 00 00
[  511.185479][T19945] RSP: 0018:ffffc90003d27970 EFLAGS: 00010293
[  511.187518][T19945] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff89ad96f7
[  511.190219][T19945] RDX: ffff888036118000 RSI: ffffffff89ad9710 RDI: ffffffff90e80f60
[  511.192938][T19945] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[  511.195616][T19945] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000001
[  511.198196][T19945] R13: 0000000000000001 R14: ffffc90003d27b28 R15: dffffc0000000000
[  511.200893][T19945]  ? nf_conntrack_cleanup_net_list+0x4d7/0x690
[  511.203063][T19945]  ? nf_conntrack_cleanup_net_list+0x4f0/0x690
[  511.205096][T19945]  ? nf_conntrack_cleanup_net_list+0x158/0x690
[  511.207160][T19945]  ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10
[  511.209295][T19945]  ? nf_conntrack_pernet_exit+0xaa/0x150
[  511.211238][T19945]  ? kfree+0x1f6/0x6b0
[  511.212745][T19945]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  511.214837][T19945]  ops_undo_list+0x363/0xab0
[  511.216373][T19945]  ? __pfx_ops_undo_list+0x10/0x10
[  511.218081][T19945]  ? cleanup_net+0x332/0x920
[  511.219631][T19945]  ? idr_destroy+0x62/0x2e0
[  511.221149][T19945]  cleanup_net+0x499/0x920
[  511.222685][T19945]  ? __pfx_cleanup_net+0x10/0x10
[  511.224406][T19945]  ? rcu_is_watching+0x12/0xc0
[  511.226137][T19945]  process_one_work+0x9d7/0x1920
[  511.227955][T19945]  ? __pfx_process_one_work+0x10/0x10
[  511.230073][T19945]  ? __pfx_cleanup_net+0x10/0x10
[  511.232014][T19945]  worker_thread+0x5da/0xe40
[  511.233663][T19945]  ? kthread+0x13a/0x450
[  511.235096][T19945]  ? __pfx_worker_thread+0x10/0x10
[  511.236794][T19945]  kthread+0x370/0x450
[  511.238217][T19945]  ? __pfx_kthread+0x10/0x10
[  511.239804][T19945]  ret_from_fork+0x754/0xd80
[  511.241437][T19945]  ? __pfx_ret_from_fork+0x10/0x10
[  511.243282][T19945]  ? __switch_to+0x7b4/0x1120
[  511.244955][T19945]  ? __pfx_kthread+0x10/0x10
[  511.246594][T19945]  ret_from_fork_asm+0x1a/0x30
[  511.248243][T19945]  </TASK>
[  511.250275][T19945] Kernel Offset: disabled
[  511.251816][T19945] Rebooting in 86400 seconds..