last executing test programs:

3m41.712459547s ago: executing program 3 (id=138):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = userfaultfd(0x80801)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="00380000000000019078ac1e0001ac148c6504009078e00000e04500000000110000ac1414aaac1e0001341517c1b7df60c700"/70], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r4 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r4}, &(0x7f0000000380)=<r5=>0x0)
r6 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r6}, &(0x7f0000000380)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timer_settime(r5, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r8 = gettid()
tkill(r8, 0x16)
pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000100)=0x9, 0x4)
syz_clone(0x1000, &(0x7f0000000280)="ea81e144eff308dbad9855d4f73284dcca7d3dc3d53e500b7c9e452d846b86563e1cbe74a0c60c9b9e5ece561349cd5a6133a8471f341e830fa97384e7eb60bdb68723e399ae3bf8bb3a7c50bf3de6368ec61ebc80369a4c31b6d8f8a34baee38520a0263b70c4ee9e57d09e55154aed262a8ad17d73b10218cdc3a256aa1d10d41971827515751e841aa5c83a9e94be90b20c04bb030a43d826ef87562a28615773297ba0d4f424af29363331dc20d0ae7b7553161f9d9403c4a03e0d6c737689cf47d62c3629332ed8a2575883e157", 0xd0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="a65cf687d3c8d7735ee06a512d2b90e5c30a22b803ebaba27dcef7986e93b7fb3d02f8a0923f05fe103905cbff3908031df2ed428c964c94d7559ab3b6bc8a7c33f130a204c5")
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0xffffff8f)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x1, 0x71, "318d08efb0537972e61c1c6a5632df6cfc0a7e546b4924d694ed0adb9d6f31be864891a407430326cb1c7ac094544588a39be12f3ef1574143b10675fbacfc2d65bb5d4a278b0fe6bc20cfcdea82ed07f9c94ae40168ea8bec47274364623e5180eff7278ac5d0ed07131267a2ba2e45e1"})
listen(r9, 0x3)

3m40.874026096s ago: executing program 3 (id=142):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000fddbdf252500000005002900000000000a0001007770616e3000000005002a"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x8014)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0xd64, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000001)

3m40.693602197s ago: executing program 3 (id=145):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280), &(0x7f0000000300)=0x8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [{@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xd2000, 0x54)
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xc0001, 0x0)
r3 = fanotify_init(0xf00, 0x0)
r4 = creat(&(0x7f0000000000)='./file1\x00', 0xf8)
r5 = fanotify_init(0xf00, 0x1)
fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f00000002c0)='.\x00', 0x10000000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
pipe(&(0x7f0000000100))
read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020)

3m39.763328381s ago: executing program 3 (id=173):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x38]}}], [{@hash}, {@subj_user={'subj_user', 0x3d, 'size'}}]})

3m39.702061243s ago: executing program 3 (id=175):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r0, &(0x7f0000000040)={'system_u:object_r:pam_console_exec_t:s0', 0x20, 'sysadm_u\x00'}, 0x31)
write$tcp_mem(r0, &(0x7f0000000080)={0x7fff, 0x20, 0x3, 0x20, 0x80000000000}, 0x48)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000100)=0x2)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x4, 0x0, 0x0, 0xba, &(0x7f00000001c0)="e7882bd9d0d239124959afe904758a2911c33bfcf82d62d200510311d2efd5fe72a1328323681148500610b93387e0812c5d7dcc3a7e97753a80ac18f1b8db4fa95210b4f40f1318c238ea774444d4949309ddeb8418f4e332dc4d6d9e0a1cc2df808d3dead7bea3b36f4f5f1d89f56acf346466514c709115ac620084d2e51be7fd0b276a1157896f5a7acbfe1b59763b36b482c373f54e22343aaf1c0438be5c1e1e5aa8e1edccd8761be9aff21928705dd554fb77ac15eda7", 0x96b0})
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000300))
r3 = epoll_create1(0x80000)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000003c0)={0x2002})
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000400))
getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000440)=""/132, &(0x7f0000000500)=0x84)
cachestat(r2, &(0x7f0000000540)={0x5, 0x2}, &(0x7f0000000580), 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000005c0)=0xfffffff7, 0x4)
epoll_pwait(r0, &(0x7f0000000600)=[{}, {}, {}], 0x3, 0x2, &(0x7f0000000640)={[0x7]}, 0x8)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfff}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x7}, 0x840)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000007c0)="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")
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000008c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x3})
ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000900)=0xffff)
memfd_secret(0x80000)
ioctl$BLKRRPART(r2, 0x125f, 0x0)
socket(0x1d, 0xa, 0x8)
syz_open_dev$char_usb(0xc, 0xb4, 0x8)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000940))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a00)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000980)="49d63bb616c105385a9924de54551e5f85bf1fd90c64b20cffb33337fc262baf67f5e76722cf81d3901eb9802fddcf052914daf6aa85e1469ff955de38da99dc43fea400c96d177c23ff4f71", 0x4c}, 0x68)
ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000b00)={{[0x401, 0x3, 0x40, 0x6]}, 0x0, 0x1, 0x4, 0x0, &(0x7f0000000a80)=[{{@align=0xfff, {0x0, 0x401, 0x5, 0x1}}, 0x2, 0x0, '$\x00'}, {{@align=0x81, {0x1, 0xe7a, 0x8, 0xe7f8}}, 0xfffffffe, 0x0, '*.\x10$:J%%\x8f\xf1+\'%&\x00'}, {{@_ha_fsid={[0x101, 0xfffffffd]}, {0x81, 0x8, 0xcbc4, 0xb}}, 0x17, 0x0, 'sysadm_u\x00'}]})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000b40)=0xc818, 0x4)
ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(0xffffffffffffffff, 0x6f50, 0x3)

3m39.213244064s ago: executing program 3 (id=183):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdfde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff00, 0xc, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000000100bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="100000feffffff00280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040850}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x418000, 0x0)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000440)={<r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', <r5=>0x0})
connect$can_j1939(r4, &(0x7f0000000500)={0x1d, r5, 0x0, {0x2}, 0xfe}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r7, &(0x7f00000003c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
listen(r7, 0xf5f)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)

3m39.170634223s ago: executing program 32 (id=183):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdfde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff00, 0xc, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000000100bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="100000feffffff00280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040850}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x418000, 0x0)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000440)={<r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', <r5=>0x0})
connect$can_j1939(r4, &(0x7f0000000500)={0x1d, r5, 0x0, {0x2}, 0xfe}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r7, &(0x7f00000003c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
listen(r7, 0xf5f)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)

2m39.071965383s ago: executing program 0 (id=909):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@gettaction={0xe0, 0x32, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb7}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff45, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x85) (async)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 32)
r2 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) (async, rerun: 32)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000600)="ef3d2b2ab3", 0x5}, 0x68)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000440)=ANY=[]) (async)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m38.926871612s ago: executing program 0 (id=914):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000002140)=ANY=[])
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000009c0)="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", 0x4d1}], 0x1}, 0x4040084)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000000c0)={@hyper, 0x1})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000080)={@host})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)
close(r2)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x80101, 0x8c)
dup2(r6, r0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r5, &(0x7f0000000100)='./file0\x00')

2m38.830652781s ago: executing program 0 (id=917):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0)

2m38.770290627s ago: executing program 0 (id=921):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)={0x4c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4062}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r4)
sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r8=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, r5, 0xc151ca0a65241b26, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '/)'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '*,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '%.'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, ')}$}*:'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190009002dbd7000fedbdf2502202000ff02ff02001a00000c00090008002810", @ANYRES32, @ANYBLOB="08000100ac1414aa"], 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000)

2m38.711223745s ago: executing program 0 (id=922):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000027c0)={0x54, r1, 0x1, 0x40400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}]}, 0x54}, 0x1, 0x2000000, 0x0, 0x20000010}, 0x0)
syz_emit_ethernet(0x22a, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x1c, 0x4, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@cipso={0x86, 0xf, 0x2, [{0x5, 0x9, "79969d3ecb74e1"}]}, @timestamp_addr={0x44, 0x4c, 0x61, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x70000}, {@empty, 0xbe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@multicast1, 0x2183afee}, {@loopback, 0x2}, {@multicast2, 0x7}, {@private=0xa010102, 0x1}, {@multicast1, 0x2}, {@multicast1, 0xfffff3e6}]}]}}, "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"}}}}, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000}, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x1, 0x40000004}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYBLOB="202700002c0007012bbd7000ffdbdf25047c0000280301802103dd802001e98008004600", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303800c0001"], 0x2720}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r8, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x78}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xb, 0x34, @random="a10c83e5e5c002"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0297582f2c7f"}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="ff423d386b9481a8b221e28ca52679dd226c5c6b40e1536f061dae"}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r10 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r10, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
openat$cgroup_ro(r6, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000080)=0x2)

2m38.643131635s ago: executing program 0 (id=923):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x4, 0xfffffff3}, {0x6}, {}, @connect}, {0x0, 0x5, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x81}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x200000, 0x0)

2m23.616425729s ago: executing program 33 (id=923):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x4, 0xfffffff3}, {0x6}, {}, @connect}, {0x0, 0x5, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x81}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x200000, 0x0)

13.620281663s ago: executing program 5 (id=2735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r1 = memfd_secret(0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0x7ff, 0x4, 0x0, 0x1})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0)
ftruncate(r1, 0x51a9497)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x82)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0)
syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x102)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c884)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)

13.561938841s ago: executing program 5 (id=2737):
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x5, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x398, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x188, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x204, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19e}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4cc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40c0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r2, &(0x7f0000000640)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
syz_emit_ethernet(0x30, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @empty, @void, {@llc_tr={0x11, {@llc={0x1, 0x0, "fa", "ff9355a4767d144dbcab58549f643735acef6d54e64853794d114725562de2"}}}}}, &(0x7f00000006c0)={0x1, 0x4, [0xae7, 0x961, 0xc2c, 0xca9]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x118, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2f54e79b0740e013a8a0e4768016307304fff71eb37df9ab"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8ee9d9928295933c26410b35472a83015061484ec1f01460"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a8ab8fe3655583395402cd916a8d4073f89f4eac9b09bde0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "26760a6b5810a034a605896f14a865a48c7f78350ec7231a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9fc660d584603a8a58cb4254cf50a95fb37dcd08e3c4263"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "668fc426aa33cca8910419a36d81cd09de90ab70ebfe81da"}]]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r3)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000f40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f00000009c0)={0x504, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "1111f50f3d96567388462803beec0bba48ecd73b96fd9030973b3aaa36fa"}}, @TIPC_NLA_NODE_ID={0x88, 0x3, "3c9f788eee2bbec3f5a6154d844b0459546585890641b808626247223737613c3b8bbf0f8b544e9df77b788f8a8bed34a2bce919fcf8f3194f5049e5e434f12daa9576e54174768cdbad8d193ce3f68a3bd81b9ebb3f2c937164bb069b5c0dcc499710f784914e66cae2151497266ebe761c96b970937c18f952acd88d32ca819c8f0fa9"}]}, @TIPC_NLA_NODE={0x234, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x430}, @TIPC_NLA_NODE_ID={0xda, 0x3, "574bed088843aebd52433c7fe4dd5721be5d93e7acdb34cf22939e117da4944097b2a2d3549b91c874d6dfc16efa795b3585cdf5a8ee874cded26877574b6b41940e662493f9592212ac1836f0503ef758ffc73f3332f00ab1679f5535414b27829cea2d23c40a27fc573c575ece220e212b5100ce2aee3fd0859c65a1a227759d67de298fa3bce426e0e3f120a0e14349df571b2f6208b903822b3be13dc6a7fa9366ef30aeaed20b5b3e5d86ba35aa8b47fee5a1841232a6bb5b2c9803fc3628cb974231ab445b6abe2b857633a30eec0d70cf7e31"}, @TIPC_NLA_NODE_ID={0x4a, 0x3, "3bb0c682410cee7861f4a408cfbebd60642c2c0da276997208844c4831c330a26725c4664bc86312e96c430ebdfdb9c49cbb94387ffcd8a22dd538b8524e7b1850721999852f"}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "35b258c4bbb1703dd29ccc4540d6689aa7048250ac6c7c54"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "93b9d2459612ca9fdc913297e5d075b6b401df240ffec5174da936184c4d50a04b73"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "ff03f52a0d8640dd4ec11336533c9680a21e75c4c00709"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "20877614698a71e316083a1c51a6dbbec139716d5de2353e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe45}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "d3faa579cd7b92cbfb661136432f633bab684af7c049209a913e0325c9c37b35263dc8"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x24fd651e}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x55, 0x3, "b01648f845ceb84530f3038599f0facc626160f4ae6040bdd03f4a1e0d694f284ad81e7af6a31b1a10b552b8932a6a560b639d615ef45c75bc1b06f2798c0eba57daca53b0c3cc4bd6727bc9cdc456e124"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "72222b859db480ffa3fa32c744448754e66f76baec4b3dba8e80bb00dd"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "273a9ce1d443d7972c7b0848a1fc696d971b79a80bf7742e960860982280"}}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x504}}, 0x4004041)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000f80)=""/75, &(0x7f0000001000)=0x4b)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x4c, r8, 0x220, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xa}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xc6ce}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)
getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000001840)={@rand_addr, @loopback, <r10=>0x0}, &(0x7f0000001880)=0xc)
sendmsg$inet6(r1, &(0x7f0000001940)={&(0x7f0000001200)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001240)="f4139d7f34e03eda3698e00c7b78a1c25cb1dc04171544c255565f13513f1b635cc946ff772918e07dafd62f517f435be2faed52eab69dc8df2e706d8c39f681c5e9bca753de0287286e6efa50dd8383dd7fe41c1452a0180d0e2ffbc3ebc17e30a42f898a6f0ed03d326533d2dc04e64fe77e9ebd8d2f309f49a16cf9f66b78d16fa724b905939f67c134d1507b5d10950b414eac62622c0709ff87c554af0819575bb55d9ccf7e10957cd9217c5cf7de028cb09fbc2f05413b7fd49f8433989306506fe460ff0e899e9625e487d982d5c16542930766b40253ef073dd933ad6d3a88585943083036d43b2f16c6c71444b8d0ca672c0f", 0xf7}, {&(0x7f0000001340)="f9d2a3db158d521828f5c44124d2d0b0e54d400352b678af137a1dca307e1135538133b5158296a0897331931d8c6351c0cdaa6cb8c46f543e74957f8ab102fe88d31533450f6ed98995f0e0764563534e9039afb665ac65b3d11d29b8eeb41b1f193970b6f27511b83953e572104b96326dcf0ff51e6657d1586e7598f24cfc3b91", 0x82}, {&(0x7f0000001400)="b95cc70d18fc0ebda4cc09176fddba5f9adc00a5", 0x14}, {&(0x7f0000001440)}, {&(0x7f0000001480)="1fcadc14b65b5bf2c8ca8dd00401e7a35e9fe2aae2a74043724f669b638b368b6067666a67bdb88323ef3a18a06dff4882849ac42e8acc32c5b79a4f96fbb1e3501bea575880384442f2b952df9daa461db0f2062faa92c354dfdef7e451181320fceb29ab43d6f29318cf292e232b67fcd256ba6250a0e71fe06ee41d780ad6cc2a171b5f3bb2bdc6e6a523b6c692f48b64725d0658fd5a2b2d81a6ef4d29facf11a47068c5fa1754d5ef6418efe12537ede3e9ff8a2b701f594366dd41af70c447142861a7ab7849e4e8b15c04ef8794279a92da3213a45116d04f97a7c867aba9", 0xe2}, {&(0x7f0000001580)="7251e8ac564882875516a1232b8c10f7f9f6b34a19f8cf99d69cd33d77a4a9d43c258498a8f84dd956f9f8501a1bba983a38dbd7e4dfdf711d0ff6d35963ce6b61d7e573fcd9d5a933c969f0933a436e4d0da002c2acc747d00c49e9ee7d9030a75b3cd9e970a0e236637317226b66b469164486919e1bb50ca5b345a57547b538c3ea1e093c7bc76261ae90f91d6786a222d87e44b78b59336466e6d171dbeefae3a7388ec5cee42b01a86df20f9ff5e2107423097aad896bc8e6e392a24b90b3c537e38487c5ae1f83fe35ff276a377c09b3e81f3d1b730d81641f0990beff8cdc4399151e848baf12", 0xea}, {&(0x7f0000001680)="87187b181f5a8bc402b2e2da1525da155a", 0x11}, {&(0x7f00000016c0)="c9b32dc547636d240b1a277854f065aee2a52721ecc80d3858142af641bf560767cf3ce00ad845df3aef21cdb1536039e88a376ac62206c80b151869538c708aaf4a931138c5528268a528412872c48ac72fb6cc6a4e6e9b80c5a48247", 0x5d}, {&(0x7f0000001740)="aad4ad1bbfbb85ec9d166059cc38f0cb845ce249c140716c18833ef43722c1105cde0f1361a21c", 0x27}], 0x9, &(0x7f00000018c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r10}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2, 0x4, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}}}], 0x60}, 0x4000)
r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001a00)=[@text64={0x40, &(0x7f0000001980)="f24680b3e80000000666baf80cb83cbe048eef66bafc0cb8e0000000ef66ba4000b80001c0feef66420f38805a5bc4e17f2dbb0100000026f347a5670f019d4e000000409d430f09400f08", 0x4b}], 0x1, 0x53, &(0x7f0000001a40)=[@dstype0={0x6, 0x8}, @cstype3={0x5, 0xf}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001ac0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000001c80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b00)={0x13c, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe2, 0x1, "67fe3ef3d19b0d22c863a2f8f0bcde7224415bb2332c9803146edc9a7a68751a56359454d953372038be13af55b831f91239527e9992ccdfcd27c5119d4704d1972c56a610be4d722b1a663df672d2fffc3c1a2ab59703a48b89375cc6a9c8cef47834118ca39d53c2c7bb9a9571c75b2afc9a679a31f0e9463a1d17d4f87e3038cd11e0a83e5863da5ca08787ccfd9c63a2807dd3f0e6205a0c458045fcb3455528d1bbc58628ba4681f692bb9c61c9ea54950a609c2992fa7c068d43c7300590c61c02bfa1a10391cc1ed94f540fe42eabb0471bac51800f2d1481bf45"}}, {0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r13 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0)
r14 = fcntl$getown(0xffffffffffffffff, 0x9)
fstat(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
r16 = getgid()
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001d80)={r14, r15, r16}, 0xc)
ioctl$sock_qrtr_TIOCINQ(r13, 0x541b, &(0x7f0000001dc0))

13.441394588s ago: executing program 5 (id=2740):
r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x1, 0x5, 0x10}})
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0xffffffff, 0x80000, <r1=>r0})
io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000180))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000200)=0x6)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240)=0x1, 0x4)
r2 = getpgid(0x0)
ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000280)={r2})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000002c0)={0x1, 'veth1_to_bridge\x00', {}, 0x3})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001300)={&(0x7f0000000300)=[0x0, 0x1, 0x1, 0x1, 0x3, 0x1000, 0x3, 0xfffffff8, 0x3000000, 0xa, 0xff, 0x9, 0x0, 0x80000000, 0x4, 0x5, 0x1ef0fd27, 0x8, 0x5, 0x5, 0xe086, 0x1, 0x5, 0x80, 0x2, 0x4, 0xff, 0x4, 0x81, 0x10, 0x823d, 0x5, 0x6, 0x80000001, 0x43, 0x0, 0xffffffff, 0x6, 0x40, 0x8, 0x9, 0x3, 0x401, 0x7ff, 0xf, 0x5, 0x47, 0x784a, 0x8, 0x3ff, 0x5, 0x694, 0x401, 0x3, 0x81, 0x2, 0xffff59d5, 0x8, 0x1ff, 0x401, 0xfb, 0x10000, 0x1, 0x5, 0x6e882373, 0x3a, 0xb1f, 0x9, 0x11d0000, 0x1, 0x7, 0x7, 0x4, 0x91, 0x1, 0x7, 0x800, 0x40, 0x8, 0x9, 0x1, 0x7, 0x3, 0x5, 0x8, 0x7c2, 0xfffffff1, 0xff, 0x4, 0x8000, 0x67, 0x9, 0x3, 0xf, 0x1, 0xffffffff, 0x3, 0x4, 0x4, 0x0, 0x5, 0x7, 0x8, 0x1, 0xee99, 0x5, 0x0, 0x2c, 0xafd, 0x1, 0x3, 0x0, 0x0, 0xe, 0x3, 0xf, 0xcf2, 0x1000, 0x4, 0x4, 0x7, 0x10001, 0x401, 0xf51, 0x1, 0x6, 0x0, 0x8001, 0x319, 0x80000001, 0xf650, 0x958, 0x7, 0x2, 0x10001, 0xa, 0x9, 0xffff, 0x8001, 0x0, 0x20, 0x8, 0x18000, 0x10, 0x8572, 0xa8, 0x3ff, 0x7, 0x5, 0xe, 0x2, 0x1000, 0x800, 0x8000, 0x6, 0xe634, 0x2, 0x4, 0x9, 0x6, 0x40, 0x1, 0x6, 0x6, 0x2, 0x2, 0x9, 0x0, 0x2, 0x8, 0x0, 0x5, 0xfffffff7, 0x7fffffff, 0xffff0000, 0x0, 0x1, 0xe, 0x56, 0x3, 0x10000, 0x2, 0xff00000, 0x6000, 0x7, 0x9, 0x9, 0x0, 0x2, 0x3322, 0x5, 0xd570, 0x5, 0x80000000, 0x1, 0xdf61, 0x8, 0x8, 0x9, 0x3, 0x40, 0xffff, 0x3ff, 0xd, 0x9, 0x8, 0xffff, 0x0, 0xfffffffd, 0xfffffff9, 0xb9c, 0x5, 0x8d7, 0x1, 0x3ff, 0x10001, 0x74, 0x4, 0xff, 0x1, 0xfffffffb, 0x8, 0x9, 0xf, 0x3, 0x4, 0x2, 0x6, 0x8001, 0x8, 0x5, 0x7f, 0x80000001, 0x8, 0x78, 0x7, 0x1000, 0x4, 0xd, 0x99, 0x8, 0x309e, 0x5, 0x4, 0x0, 0x1, 0x0, 0xe6c, 0xfffffffc, 0x14, 0x9, 0x1142, 0x92, 0x22c, 0x9a43, 0x0, 0x7, 0x7fff, 0x5, 0x1, 0xb0dc, 0x358aab5d, 0x9, 0x4, 0x5, 0xf, 0x0, 0xe, 0x2, 0x101, 0xfffffff7, 0x5, 0x346e, 0x6, 0x1ff, 0xfe94, 0x6, 0x0, 0x9, 0x4, 0x228d, 0x0, 0x8e3d, 0xfffffffa, 0x3, 0x8, 0xfffffffa, 0x1, 0xc, 0xaf, 0x9, 0xfffffffa, 0xd, 0x800, 0xfffffffb, 0x10000, 0xfffffffb, 0x5, 0x7150, 0x1, 0x1, 0x9, 0xe844, 0x7, 0xd9, 0x5, 0x7ff, 0x7, 0x4, 0xfffffff6, 0xbbd, 0x7, 0x0, 0x1, 0x73b7, 0x3, 0x7, 0x1, 0x33b0, 0x1, 0x101, 0x4, 0xfffffffe, 0x3, 0x6, 0x100, 0x7ff, 0x6700000, 0x4, 0x6, 0x3, 0x5, 0x5, 0xfffff000, 0x1, 0x3ff, 0x7fffffff, 0x7, 0xf, 0x8, 0x839, 0xd80b, 0x7, 0x7ff, 0x7fff, 0xa, 0xffffffb6, 0x40, 0x3, 0x9, 0x1f1, 0x6, 0x8000, 0x8, 0x10c00000, 0x4, 0x9, 0x7, 0x200, 0xa61, 0x9, 0x4, 0x4, 0x3, 0x81, 0x0, 0x7, 0x1, 0x2, 0x6, 0xc0, 0x2eba6eee, 0xffffff12, 0x5, 0x874d, 0x8, 0x0, 0x0, 0x7fffffff, 0x2a000000, 0x4, 0xa, 0x6, 0x9, 0x10000, 0x60000000, 0x2, 0x2, 0x2, 0xfffffffa, 0xfff, 0x1ff, 0x81, 0x1000, 0xc18, 0x9, 0x0, 0x668d, 0x80000001, 0x8, 0x6, 0x5, 0xfffffffb, 0x5, 0x4, 0x7, 0x5, 0x4, 0x4, 0x2, 0x80000000, 0xfff, 0x1, 0xfffff800, 0xffff, 0x1, 0x7fffffff, 0xd969, 0x0, 0xe, 0x9, 0x8000, 0x508d, 0x3, 0x2, 0x10001, 0x5, 0xa, 0x1, 0x9, 0xa0c1, 0x1, 0xffffffff, 0x3, 0x40, 0x8, 0x100, 0x3, 0x5, 0x5, 0x7, 0x3, 0xe, 0xd, 0x1, 0xc1eb, 0x3, 0x1, 0x6, 0x2, 0x6, 0x0, 0x0, 0x4f, 0x2, 0x0, 0x5, 0x7f, 0x2, 0x0, 0x10001, 0xfffffffc, 0x1, 0xfff, 0x5, 0x1, 0x9, 0x6, 0xd39, 0x3, 0x2, 0x8001, 0x6, 0x21, 0x8, 0x1, 0x2, 0x2, 0xfffffffd, 0x401, 0xa7e, 0xcad, 0x5, 0x4, 0x5, 0x4, 0x1, 0x8, 0xffffffff, 0x8000, 0x401, 0xc9fb, 0x1, 0x2, 0x10001, 0x6, 0x5, 0xd, 0x1, 0xffffa33e, 0xfffffffc, 0x9, 0x60, 0x0, 0x765a, 0x9, 0x0, 0xfffffff9, 0x3, 0x7f, 0x1577136f, 0x5, 0x8001, 0x3df6a82b, 0xd, 0x82, 0x4, 0x7ff, 0x1, 0x74, 0x1ff, 0x7, 0x1, 0x8000, 0x8, 0x4000000, 0xa26, 0x8, 0x1, 0x0, 0xb3, 0x7, 0x2, 0x2, 0x24, 0xffffff01, 0x0, 0x4, 0x1, 0xfffffffa, 0x2, 0x1000, 0x4, 0x8, 0x0, 0x3, 0xfff, 0xb, 0x4, 0x3, 0x17a8, 0x2, 0x4, 0x2, 0x0, 0x81, 0x7fffffff, 0x6, 0x1ff, 0xe59, 0x3, 0x7fffffff, 0x8, 0x5, 0x6, 0x3, 0x7, 0x161, 0x10001, 0xf19d, 0x800, 0x5, 0x2, 0x5, 0x3, 0x2a, 0x6, 0x7ff, 0x9, 0x1, 0x8, 0x4, 0xfef4, 0x1, 0x4, 0x0, 0xffffffe2, 0x7ff, 0xd9a4, 0x5, 0x40, 0x1000, 0x3ff, 0x0, 0xffffff81, 0x50, 0x99, 0x3, 0x1, 0x4, 0x0, 0x8, 0x0, 0x7, 0x3, 0x9, 0x9e38, 0xffff, 0x0, 0xaf6b, 0x3, 0x200, 0x400, 0x764, 0x7, 0x7, 0xa8, 0x80000000, 0xa, 0xfffffffa, 0x9, 0x5, 0x7, 0x800, 0x100, 0xd1d1, 0xa, 0xffff0001, 0xbeca, 0x3, 0x1, 0x0, 0x3, 0x0, 0x9, 0x200, 0x8, 0xaf, 0xd, 0x1, 0xfffffff8, 0x8001, 0x5, 0x1, 0x2, 0xdb8, 0x3, 0x2, 0x1, 0x6, 0x171, 0x7, 0x9, 0x0, 0x6, 0xfffffe00, 0x43, 0x0, 0x9, 0x0, 0x3, 0x10001, 0x7f, 0x5, 0xfffff000, 0x4, 0x8, 0x2074c4a4, 0xffffffff, 0x6, 0x3, 0x7, 0x9, 0x9, 0x3, 0x200, 0x1000, 0xffff, 0x7, 0x6, 0x5, 0x600000, 0x8000, 0x1000, 0x7, 0x80000000, 0x73, 0xc, 0x1000, 0x8, 0x6, 0x6, 0x3, 0x2, 0x454, 0x1, 0x0, 0x7, 0x2, 0x3, 0x2, 0x8, 0x7f03, 0x0, 0x10000, 0x9, 0x9, 0xe2, 0xfffffffb, 0x7bcd, 0x8, 0xdef, 0x3, 0x0, 0x0, 0x5, 0x6, 0x1d4, 0x80000000, 0x6, 0x3, 0x4, 0xff, 0xe5e, 0x0, 0x8, 0xfff, 0x400, 0xc, 0x0, 0x3, 0x549, 0x5, 0x5, 0xc, 0x7, 0x1, 0x0, 0x1, 0x4, 0x4, 0x7ff, 0x1b800, 0xd4cf, 0x100, 0xe08, 0xff, 0xfa2e, 0x80, 0x545, 0x2, 0xe, 0x8001, 0x7, 0xfffffff2, 0x0, 0x7, 0x4, 0x7, 0x3, 0x4, 0xffff, 0xfffffff8, 0xedef1d6, 0xffff, 0x6, 0x8, 0x3, 0xffffffff, 0x3, 0xfffffffc, 0x8, 0x2, 0xe, 0x8001, 0x40, 0x3, 0x6, 0x4, 0x3, 0x1, 0x1, 0x101, 0x8, 0x7, 0x4, 0x1, 0x4, 0x4, 0xfffffffa, 0x380, 0x4, 0x5, 0xa1e2, 0x3ff, 0xb, 0x5, 0x7b, 0x4, 0x814, 0x80, 0x41f, 0x2, 0xe, 0x4, 0x15, 0x1, 0x1, 0x50, 0x101, 0x4, 0x0, 0x7, 0x6, 0x6, 0x81, 0x101, 0x4, 0xff, 0x1, 0x7, 0x9b, 0x7, 0xfffffffc, 0x4, 0x5, 0xf86d, 0xffffffff, 0x7, 0xfffffff8, 0xffff, 0x6, 0x8, 0x2, 0xff, 0x6, 0x9, 0x5, 0x7, 0x3, 0x9, 0x2, 0x7, 0xfffffffb, 0x7, 0x80000000, 0x10, 0x5, 0x8, 0x9, 0x6, 0x32, 0xfffffc00, 0x3, 0xca7, 0x0, 0x10, 0x101, 0x8, 0x5, 0x1, 0x10001, 0x7f, 0x400, 0x7, 0x700, 0xd36, 0x3, 0x457a, 0x7f, 0x7, 0x1, 0xffff8000, 0x3, 0x9, 0x2, 0x80000001, 0x6, 0xffff, 0xf7b7, 0x8, 0x101, 0x2, 0x7, 0x3ff, 0x5, 0x3, 0x5, 0x4, 0x401, 0x9, 0x7, 0xff, 0x10001, 0xffffff80, 0xfa, 0x8, 0x7, 0x101, 0x401, 0x10, 0xa, 0x8, 0x6, 0x1ff, 0xe, 0x7, 0x0, 0x140, 0x1, 0x80000000, 0x3, 0x9, 0x10001, 0x5, 0x5, 0xfffffff9, 0xa, 0xd, 0x7, 0x4, 0x3, 0x8, 0x1b7ac09c, 0x2, 0x7, 0x4, 0x7, 0xffffffff, 0xf8e, 0x101, 0x8, 0x6, 0x6, 0x4, 0x8, 0xffffffff, 0x7f, 0x7, 0x0, 0x86b5, 0xfffffd71, 0x10, 0x7, 0x10, 0x8, 0xfffffffa, 0xb, 0x7ff, 0x7, 0xc8, 0x1b34, 0x1000, 0x1, 0x100, 0x8, 0x4, 0x0, 0x1ff, 0x4, 0x3, 0x7, 0x8000000, 0x2, 0x3, 0x6, 0xee48, 0x8, 0xfdd9, 0x2, 0x401, 0x9, 0x0, 0x1ac, 0x8, 0x7, 0x8001, 0x8, 0x0, 0x200, 0xf922, 0x10000, 0x0, 0x3, 0x1, 0x34, 0x65, 0x4, 0x9, 0x77, 0x0, 0x9, 0x2, 0x1, 0xfc6, 0x8, 0x6, 0x2, 0x7, 0x9, 0x3, 0x9, 0x80000000, 0x1, 0x7fffffff, 0x5, 0xfffffff7, 0x6, 0x8000, 0xff, 0x1, 0x7, 0x77, 0x1, 0x8000, 0x6, 0x10000, 0x8, 0x8000, 0x8000, 0x5, 0x80, 0x721f, 0x1], 0x3, 0x400, 0x81})
ptrace$getregs(0xc, r2, 0x2, &(0x7f0000001340)=""/165)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000001480)={&(0x7f0000001400)='veth1_to_bridge\x00', &(0x7f0000001440)='/dev/pmem0\x00', 0x686c})
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000891}, 0x8000)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008)
close_range(r1, r1, 0x0)
write$proc_mixer(r1, &(0x7f0000001600)=[{'LINE1', @val={' \'', 'Line Capture'}}, {'IMIX', @void}, {'RECLEV', @void}, {'SPEAKER', @val={' \'', 'Synth Capture'}}], 0x63)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000001680)={0x10201, 0x0, &(0x7f0000ffd000/0x3000)=nil})
ioctl$DVB_DVR_DMX_QUERYBUF(r1, 0xc0186f3d, &(0x7f00000016c0)={0x3, 0x5, 0x10, 0x1553, 0xa, 0x10})
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001700)=@int=0x7, 0x4)
r3 = syz_pidfd_open(r2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001740)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20008080)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001880)={<r5=>0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x8, 0xf5a4}, &(0x7f0000001940)=0x90)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000001980)={r5, 0x4}, 0x8)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000019c0)={0x990, 0xffffffff, 0x6, 0x0, 0x7, "3928656c733862bb7cd2ccb0c704f6ae379fe9", 0x401, 0x3e44})
ioctl$TIOCEXCL(r1, 0x540c)

13.440274431s ago: executing program 5 (id=2741):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000500)={0x28, 0x0, 0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x96, &(0x7f0000000400)="39614e5df8379539c37a8978dbfc1c585c172707f994d4eecb6cbd391870faaebb7a1ef158e11fcff37c97b93a21618682249140b39bea8da46a37a135ec73ee83e6c7aede2bf5c9d24ba40da623b2fb2dc09edf8d6b4da304a831da4035eb4f54d18327f272bae2fb82a5bb3b25e46ebe9f9727b2f48deb66ed3d25f984a8f927cf7df29a4a705eaf40d5abcb4b77d628c8aec1a354"})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000580)={0x20, r1, &(0x7f0000000540)=[{0x0, 0x1}], 0xdeadbeef, 0x8, 0x1})
r2 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43)
mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
r3 = open(&(0x7f00000005c0)='./file1\x00', 0x20000, 0x718bb647156ec2f6)
chdir(&(0x7f0000000000)='./bus\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x50)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39)
linkat(r2, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x1000) (async)
linkat(r2, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d03, 0x0, 0xffffffffffffffff}]}) (async)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d03, 0x0, 0xffffffffffffffff}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50) (async)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50)
syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13.322786798s ago: executing program 5 (id=2742):
r0 = getpid()
syz_pidfd_open(r0, 0x0)
syz_open_procfs(r0, &(0x7f0000000000)='net/connector\x00')

12.971145461s ago: executing program 5 (id=2750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newnexthop={0x18, 0x1a, 0x1}, 0x18}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0x10, "3f7bba999681fe7d4ec3032aeac19261"}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
recvmmsg(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1}, 0x7fff}], 0x2, 0x40000120, 0x0)

12.873360467s ago: executing program 34 (id=2750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newnexthop={0x18, 0x1a, 0x1}, 0x18}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0x10, "3f7bba999681fe7d4ec3032aeac19261"}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
recvmmsg(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1}, 0x7fff}], 0x2, 0x40000120, 0x0)

2.832210428s ago: executing program 2 (id=2873):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, <r2=>0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000480)="0f05c4e1235dc7f2653e0f015a00b8f6ffffff0f23d00f21f835200000020f23f8c4c3690feb62d095aa689d30b99a0300000f3266baf80cb819f5c68eef66bafc0cb009ee0f01df66b8f2000f00d8", 0x4f}], 0x1, 0x1a, 0x0, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) (async)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) (async, rerun: 32)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 32)
ioctl$TCXONC(r11, 0x560b, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x42) (async)
r12 = socket$inet6(0xa, 0x3, 0x2f)
bind$inet6(r12, &(0x7f0000000280)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) (async, rerun: 64)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000780)={0x30, r2, 0x0, 0x0, 0x0, 0x0, 0xec8, 0x0}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f00000017c0)={0x48, 0x3, r13, 0x0, 0x4, 0x1000, &(0x7f00000007c0)="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"})

2.682200376s ago: executing program 2 (id=2874):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

2.681590419s ago: executing program 2 (id=2875):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newlinkprop={0x88, 0x6c, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x24184, 0x400}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x420}, @IFLA_PORT_SELF={0x4c, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_PROFILE={0x7, 0x2, '!/\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cf1d0c4f67001779fe63cc745cb94527"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8ff79fcd5814c7fba92e2b3a702eba97"}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x88}}, 0x20080090) (async)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
lseek(r2, 0x3, 0x0) (async)
getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000)
ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0)
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000012c0)=@riscv64_aia_csr={0x8030000003010003, &(0x7f0000001280)=0x40}) (async)
ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000001300))
getpeername$inet6(r2, &(0x7f00000013c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001400)=0x1c)
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000001440)) (async)
read$msr(r0, &(0x7f0000001480)=""/58, 0x3a) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'wpan4\x00', <r4=>0x0}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) (async, rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0xb4b32e2ecf505e87}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x50, 0x0, 0x9311a3a7ce760a2d, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x2000c801) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001b40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001880)={0x268, r8, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x307}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc71453f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc72}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1f5}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xde}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000844}, 0x10)
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000001b80)=""/135)
ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000001c40)='@\x00') (async, rerun: 32)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001cc0)={0x6, &(0x7f0000001c80)=[{0x6e, 0x71, 0xa, 0x578}, {0xfff, 0x8, 0x0, 0x10}, {0x9a, 0x3, 0x9}, {0x2, 0x2, 0x7, 0x1}, {0x49ce, 0xd, 0x8, 0x4}, {0x0, 0x0, 0x3a, 0x81}]}) (async, rerun: 32)
ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x11)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}]}, @NL802154_ATTR_SEC_KEY={0xd0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "736164f5ccf55aacd11053bdf17ff996c1851701fb598d376866f471adf6b18e"}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7e9c6a56c1e8202d9734f3bc02fefbf0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b935e0d628c1a26c4faa679c9f34d8a57bbe369bde7ca0a414c315eaefe4f78d"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x41}, 0x20008840) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x60, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24040800) (async)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000002080), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x30, r9, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x4000040) (async)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0)

2.612274009s ago: executing program 2 (id=2876):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
pread64(r0, &(0x7f0000000040)=""/203, 0xcb, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94)
r5 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x0, 0x0, 0x34565559}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$XFS_IOC_BULKSTAT(r7, 0x8040587f, &(0x7f00000000c0)={{0x30000000000000, 0x0, 0xffffffff, 0x1, 0x6}, &(0x7f0000000000)=[{}]})
r8 = syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$pagemap(r8, &(0x7f0000000200))
timer_create(0x3, &(0x7f0000000180)={0x0, 0x13, 0x1, @tid=r8}, &(0x7f00000001c0))

1.172203454s ago: executing program 6 (id=2880):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001ec0)={'ip6gre0\x00', &(0x7f0000001e40)={'syztnl0\x00', <r2=>0x0, 0x29, 0x8, 0x0, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x8000, 0xe, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002600)={'gretap0\x00', &(0x7f0000002580)={'gre0\x00', <r3=>0x0, 0x40, 0x8, 0x4ab3, 0x4e6c, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x7c, 0x1, 0x3}]}}}}})
sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x7fffffff, @remote}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="0ebffe3332e92133a64635260123cae617f1d793f733ad1150a8c1366930e148991cfb0bfb7dbb621b35e3e320da05394d472af7c39bf4e0f08437ee7b38dfcc333a3f69cc610bcbbbd641ba5b28", 0x4e}, {&(0x7f0000000180)="6f7641f83c4e1903b2ede936dc0ba813aa8ce5c2c2fb3ec93c16ac7b6e031869840676b0871f1418116ec0c1980912450ba35168a80e1cb65e1a6c79411570262d34bb7fa2d26995c4666c1132fca54a76d98add103ce8b1e652e1ee794ee09283309ea61d284cc82579c7910f3c01b2ffd6f4cbc0d2cef591a7d332e3068c7f254a5e1986fce8400a4c24c4e6cfedc7a7b41456493bca039f971a8a625b72984b926a35900ffc518146ea8730ae5a6296e82367fadcf68d73ceb6430d664b18298573e9bb3a0087d038f410b5360bffe0d7f24a0cda263d424928eb750674f29e55c7a76a57299ad0c7f4", 0xeb}], 0x3}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x2, @remote, 0xfff}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000400)="03143ce948e8d924c75abd97d03b8b66e8965761b98cc09c67326288374f18ccdb6af52096e717e2176a6de222826bfb6dbd0e214101abd5140b219b2b033ecdab835adccb5258b954251bca88c6300e0f559d058436dd00ebff85a78705e871844bd11cdaa4453f24ac7700cb9a1d2e9fb6893ab32c7390106d8e21363f79b5c2c198789537bf6fa6bef5449b4bdbf690c900bc25aa1c9934a7a3f505a59ade", 0xa0}, {&(0x7f00000004c0)="865e57d9054bcef28002b1bee639210e040b9af3c423481891833eedfe53ed71d44677b10133d5a8b67e2864859437556973542f274a2839", 0x38}, {&(0x7f0000000500)="b5b82acf8bd2d5d3e3aa141c95c4", 0xe}], 0x3, &(0x7f0000000580)=[@hopopts={{0x88, 0x29, 0x36, {0x67, 0xd, '\x00', [@generic={0x8, 0x3f, "bc2d263a0bb95ae9e4dd5c5bb578474bd4aa5b7110490ba40ade4c952bc86e3978383f189823bda1e4014e5e9432cdd32ef7a0d804b6c21c1b64b297d9e61e"}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0xf8}, @calipso={0x7, 0x18, {0x2, 0x4, 0x6, 0x1, [0x1e, 0x1000]}}]}}}], 0x88}}, {{&(0x7f0000000640)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000680)="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", 0xff}, {&(0x7f0000000780)="930a2c56eb053cc8cdf9fb9773f02f29fd03fd2b129d0637c818c426a58168553a22976d072fac8cf4d55cde1dbd3cd76e9dbb3dfbb33e2dba9e53f77f2dff04c08165c1155067e8017683f6953ef18e3f2b6d91674cabd06fa6b806d5935a15f636bbb4cc79c766820d0f2d", 0x6c}, {&(0x7f0000000800)="238e075258ddbc3af645eee737328b50fc3410a61ee76ca250fa95dcb4860a3324c9b9a0c5ede89648496ae8b59e313d2eff19ea88505c242dade0ab9ba868fb839f74d7257359c4bc93059dab0ad57ab22e3759621bb49e4c37e7835a7e0505796d13b94662ea8f1455211c13032e3bcf5f2354970ce5d5513b7b6a6a1b142f78449aef7e73d591fc538f665c483a1f4052ed3c96e8c63332ec20cf25f69e99fb05fb64c7ed1181b1890d8f8ca2f4f3ae50100b891acdb0f0e0c7c2d6b3ef494c0589aa7f365d43f5e48106da5598e079192665b3387078bbd01017856a1e1487d53aa118a524c93bc7ce61ad", 0xed}, {&(0x7f0000000900)="9fef65b9d4ba9e29c40eeec53487b84931dc4764451b194aef4b605f324d13a7d456904fda2479666bbc1b36d5", 0x2d}, {&(0x7f0000000940)="10c97d8fbfc760c759dead90cfc91eb995919efb41532522955d5a39d675d5882db12d870d76b193634a5a49d3c9e6bde1c8f346f96ba57c698b39b4eb0d08b59ee778d84e526a7c5f8135ee65291e3987c4ca8d4dad83e9d1c35fdf3f9b7903852f159eddd8907e9966121b0e9056b153750d62564cba247d35bf025590bbac29747afd37da4b193d5a", 0x8a}], 0x5}}, {{&(0x7f0000000a80)={0xa, 0x4e23, 0x92, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000000ac0)="2b0cec4ea4385805ec9babf8c94d17956da9a9f05bdb370f70736a006eade0ba51439501", 0x24}, {&(0x7f0000000b00)="8ba89101908c1ee2ec9635c365d59d26d92aa2ed91cc72c1d5f1ddd3", 0x1c}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="e422411138326dc75f79ebd8bf934842917e472af023dcced049865213346d4ec945ad21b9772230037df2d272a893bd6a4d97a40de8c8789c85d1f93fe46d578d22d7ddaa06ddff9ede35d9346b26dd5df8dbb18cf9a8b2421d8eae87fee5648c7b1a46714c498b5f44c3f36a2e395c748fbce1c95f01181174a10422ccf87ff9d51f3c5594b196c835da597983215de792a813bc722724bc85f8e1c99e74c60c356874eab52061213df6185d", 0xad}, {&(0x7f0000001c00)="93e00704d3472f", 0x7}, {&(0x7f0000001c40)="654f0f08828abcbfc5285050b54721c6681afb7cbe8e5ddab19486f9375d4153bcf53963a891ee6bd40e0aad4c34fb006f3345799410eb1b7281a9f922c74ae7726ac612843a582a39f25a08068b4562f0f0f9f157ec8ad991d79eff615bc374d5cd49660c0d33095a18cf6cdc1123a3a0a72087cadada1723b4ea1559aa39d7c48c640e1b5ef8", 0x87}, {&(0x7f0000001d00)="98cdfc74addbe149a75ac32bcd6abd66c2838ebcbf8c8e916c3782e26300e9997ca63aa65715d394eb49c225a954e02840383c3c4ab6fcfec8d45b005cee9119258bb5c66e34f317c32bde717732db6ccf3b59f406e6fb8d408977b945d98c965ce77fd4743696d80f36c4684f42baa0516c670b28c620203f0fab4b7ce185b3b53309f8d9d9ed8c44a01f629d50a648cf610312762a51509dd9de20c6a881febc0e0cbed1ad8336b13011aa7c2e48080e43df120847", 0xb6}], 0x7, &(0x7f0000001f00)=ANY=[@ANYBLOB="280000000000000029000000390000001602017f00000000fc0200000000000000000000000000001400000000000000290000000b000000000000c105000000400000000000000029000000360000003c0400eeff000000c910ff010000000000000000000000000001010500000000000001000401f801050000000000000014000000000000002900000043000000000000000000000024000000000000002900000032000000fc020000000000000000000000000001", @ANYRES32=r2, @ANYBLOB="000000001400000000000000290000003e0000000400000000000000300000000000000029000000040000008703000000000000c910ff010000000000000000000000000001000100010100140000000000000029000000340000000300000000000000"], 0x120}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002040)="30f96767d5b1218a1890049ac1f203e41dd7f49b50e369892ced9bf8c750ecba8a4f786b20db38c24f13b64b1a6d7add10583d1f1838bd8dfcdc80f8cb475184cbd4bf36c6b26ebc3d71e333c944c98e4dd426f61ddfe4a333be2ea50150fe60586bcf5fc60d26a1f0c0ba50d3ce2039dcbf8d099fb190479353458a8e305c14427103b713740e16d744d65c60f797d2a24a121554f99ef0574d99b61e26dce23df82ee6ffa2641918ea172bda2eb09e50bf8e8e73ebe1ded0b174c900eac987", 0xc0}, {&(0x7f0000002100)="8a9381e0e61af5fa8a0e620b78aeb431c2ad1dbbc3fa46996a98ae9084876d933272a28d0b60b0f90ea1", 0x2a}, {&(0x7f0000002140)}, {&(0x7f0000002180)="ba8a8a6faa2b6cfe61b12d2d89d58dbf5d50d650b5d1090169fa8462cd2c677c4acad59bba07bfcaabf1d6c597cf66991a44a5c491ca642ad7427d4cea825faa78c80e6c52e8dac87dba4f6092a13b37af974a13295c383575ffb243dec4544b787c9f3f051825f0b8a8ffdaa29d84988e45609a84f4a02539cec8701f9f67171bdba893da5623c9b229adbcac7e7cdeefa7ef57d817f5565700b981adb21b50247ebcf60dd3e551942d0e7bcd84d25cbd918342a7fe9b2cacbf6621e841952b5c", 0xc1}, {&(0x7f0000002280)="dca43f215fe7c4fa66a8cfa27f5a922ee46e131edebef931becc52e8c4e815d12b8418159e65ebccf2e2321ac08c906a5a107c69bed747a60e1f5d81192409127e01c540404cd5a12ad341988262760017186a26853a485d6e5c739667ab5f51464e0054ef9fa5e9b0f2e1e190ab750074776034d69ace3eab6027fe25849b1b5f312dcd6a917f06bb91def170c5bba10b54d5de1ac8f97d938ed3bea342e659999b08732d483b7374d82cbb212a9d2a57951dbfb2aaabe3f879921fe972", 0xbe}, {&(0x7f0000002340)="728f98ec8aba82fa6e17d337f6136be2ee0d6fe420a48acc05bb9cf628647c54b597ee229f513d4c81715216d7ed78337eb7191ad9f79cc9a1aac9799d762675652d402efcbec67a5311f4f1692c3daf9d5e8ff52d07fdd62635d94130eadac237b49ead0f1b0e7330d00afc38f62ca86f5a747696fdbd6f3df5476eba2a80c2a8a93387e4b42ae3064e4380bb89232a6819f01a6efc73f1e961d00c6e4454d0c98c34267004cf87a086fe29e88b466c3c488b6352aa1e986524a38fae6638fabb10cbcc842a", 0xc6}, {&(0x7f0000002440)}, {&(0x7f0000002480)="c712a67b0f2b3c6f811048f43852987cfb3465cc7753379048f68353204d300e79939b2aa39d726eb2aa099fdb547786f7c558311760c8b0886f43b35e12ad648e3740b32a9c67db6ad6a4055a19909b45636653bdb78a293380362c083c6a33413b8dd98ceb0cedd5e33002a1cde9ceb6", 0x71}], 0x8, &(0x7f0000002640)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}], 0x40}}], 0x5, 0x400c1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.071822038s ago: executing program 1 (id=2882):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e)

931.894421ms ago: executing program 1 (id=2884):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000010800450000780000000000119078000000000000000000004e2000649078020000000400000000000000cd076631a02c8f6138f7a5ea962a54622a844fc4aabe6b1d148decaa8697fb5968192ec1548eddf4447a240ce9efb0bf9dde7bef23c6dafa021f99a7ef403b4aa9b96a8d5b2c52b20000000000000000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x40000, 0x0, {0x2, 0x0, 0x0, 0x8, 0xfd, 0x1, 0xfe, 0x1, 0x3400}, [@RTA_NH_ID={0x8, 0x16, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
r6 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x1100)
sendmmsg$alg(r6, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000380)="a7945d2aa87e9923217d515cad3cce41e5c066936e328ef7fc9b50f130acc78686a016c186903b0203c2d4b82129f6625f7eb043854955c3e7656c805fc059913d5e8622daf89ed98123901d6720230cd0e91423650d953f564ac994fd04ce78c4b0e92132ed1accc91a3f3c049fcbc6e29dd66c871b5fdcb1816a45d1d96f72934b9ebd4f979fc479ba827193e5950c3c4b5fd2ba77c496dc1f3b9b8f", 0x9d}, {&(0x7f0000000540)="65b86a14e7ea6deff654cc6e681c0dc34259beacf381cf9742e90735317081cc6f776762d3af4003a04ba0c99768c5ae2b98b27ca6412f0e6d561d7e91c714cc43397031a5ba8d07e043a725ce625a7171e31abfbbc342bb91a04caf", 0x5c}, {&(0x7f00000005c0)="feca0076d03d469feeb86a1a2e075a74e4c0af55882e12048a644479fe84", 0x1e}, {&(0x7f00000006c0)="74a873dc5c8a09", 0x7}, {&(0x7f00000007c0)="5b296ea1a11adb17139ed6eb3c5ee3dddc2b9313e136afc720a91f2c1410491288047e34d603cc5ec545c1bb1a784881a6be2a1af6fb58f52ed946cfb141a1d3fe3481687fe23fb45756db2cbd8a867ce39a303173bffa6ab7697b36e292885f570c61bd611bdf148cc3fd8e2867a2b9e77e8c29844e912474603654dc84cf5cbfd668f92af711ce63b579ffd72daaccc8aee656cdaa8beeb6bdc477db223193c3d111db10a4e2506323", 0xaa}, {&(0x7f0000000880)="50e70bd31ef86350101a718ee3f28abc3616e67bfd4ef5f309c93c9ec4843fedb47f787c6d255e65802e8562ef1e62d1ea5406a1408e61c3daa88cb17a45e17d0db9079629936a933b36ded1d0b1f412ad08b15b68728dbcee27218865cb", 0x5e}], 0x6, &(0x7f0000000a00), 0x0, 0xbd9d56ba2beb0fb6}, {0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a40)="12dbd4aa3ac536b47872aa61f6e9738dffb21ed0ecd004dc351ae69bb020d17d9729896ec35bde3bf69add54faf85bdbbcbe889d0bd4c6adddf2c42fe148ef05825575dde6162ec04c5a3404c32693d33daaae3cb3d0f9c9f7f4dfb6ccbb4f9e7a663767bb9b67aa8b33d74f9eaf365538", 0x71}, {&(0x7f0000000ac0)="6ecb9433ce98f1bdda3671eea8faef96a393cba047e909cc4eb21db048615b3ed924538ca49cd994aa814ea4f0800eb3ba6043d70b6a7c67048e708d5c7a43495bb621985551820bdf6a5159c1335086aef22ee3084be7e5893221a8daec325571eef914d45b3bd2b1102e335210ef852985e41d595ad12e925818bfd4e95b7712e1027f032530ec2f875a002897532e1f593fa1aa44df8771e3386e542c9a8f6e7d81c755c421bc6614e83e8e75835c178bbebc464f49edf62404922cedb1b781c8e543806f9862fa4f00d084309be42715877558381b32d082", 0xda}, {&(0x7f0000000bc0)="96f34cc82275129e2986c817a55d429a5e54ce68c7e142dc80f95eeba3", 0x1d}, {&(0x7f0000000c00)="40acf822d514b02c31f2026995aa8f4a677f8ea91f0d3606cdcc72265a19b0a20050cac2601d521d2a843afdc171171bffcbd674bcb6dcecfba83b520c9c2eb87d440b41e2c8e691f2e8099189dc02b2d0da799e373af0f51527eb040962622725e9ca85861fd9b0d1f9ce3b57ddac9690aaf7cd4c102aa8972c4daec2b41084b633b00488d6cc282d79ca92e369333063cc4d02cf1718667f227ee12290233dc75bd86d0d0dbe1a27b204e5d66466f3b71cb9f14067d5cef605b01e29ef91cb3fefc93d949978c4dd78dc578a603b71febe63ab9375edf5dbd70bf0b73d28f10c95671ce87c232f1147a4f9cdf375a7f1412e12ffd7ed84488a7cb28b", 0xfd}, {&(0x7f0000000d00)="b92f409e6da3165dc21ba97ebc20564586ae705401110a4a0a86edfbc571674dd3048b6270cdea28cbfdadba15609c0618dd37e1f0216aad522f47609194afc2c93c7fa76e86aed1ccb175f6a1aa1795efe4ffa7a88c5319694287b8c7df15a8faaa4945336b0989e6d3022176f80a5d17bb8c5d512766c3ba9d47805808250ef2ce831b21d9b4c7812cd7cefd66a5919269ed10485fe236a5947d580270c5ad74ad280324686d6ae98b02e8337c52578d4d0aca9bf01609010c3c36077f3e53260c8da8eb543b3009c9b6c04c5d42a1bbc5194f21b2f3d2960c0b3570493524cc75d044ae13791225c807924ab766bf443ab5c15c", 0xf5}, {&(0x7f0000000e00)="0e98b988313b48a24281b0ac93c72cb2a604f0919bcac1d2781546cc5d2aea65a6af12ce834f4d43f73e2f393944927ae36c813cfc95f597e9b82ba0eae5262244fecd301de07d33fa65a65a5602bf93341a47edbed32f0d1798a54688b1622eca2a9c18b5bda757", 0x68}], 0x6, 0x0, 0x0, 0x20008084}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f00)="6971d75558f95d3b279b0aaee27ded7ba3449147f49b08f1702325dac8433fd2fdc6af6fbd7ee36a2b1f23d59eabcfd92ff0d51fae25073504229587ee4b603e145d8292d4900c4a96a3784058d390e975a1", 0x52}], 0x1, &(0x7f0000000fc0)=[@iv={0x28, 0x117, 0x2, 0x13, "b416cffd1ddadab916fcd35d567779755ce1f8"}, @iv={0xe0, 0x117, 0x2, 0xca, "a126eeda204b619eee9ea37a98f11a789f5bc67af934a3aa2a236ef42d1b1ca8c2cf1aa44e1a137e90ec972effbefb72f013699523b856221a802c9501c24152db65d5efc8de83079d2fbec04b015aeac3ae263a6d52ee5d387a2487022c51d4131d0d14386ae9f79a2493886f742977a5314487071eb0cdd3201bc8e83c573612ea9e0e244a74a959390c022e06b23c09e6c5a3c30bf966718dcaa4fd80b3ebc4373d923cd403130ebdd72db3e8e5c46e0fe55096c18f552c9da133ec615970b1c681cf9261e5b3208e"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7f}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @assoc={0x18, 0x117, 0x4, 0x65f}], 0x1b0, 0x4004001}, {0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001180)="ff352474df1aee7462c27c1201082480b5c9b9a05e6350ef46191d9c07c9316485378cdda676c5827b26e643b3e524a65a564a850f2aea540c4ca45e444f999eec6f176e78c3ce50c6db91748d58a886d4e9b877e764e38cc1d29e98d728385f365981a7efe0e4cb3de112319e437623d0247128d56c35caf025d50a6d5e", 0x7e}, {&(0x7f0000001200)="0f42689de2ed41fe8323933d", 0xc}, {&(0x7f0000001340)="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", 0x1000}], 0x3, &(0x7f0000002380)=[@assoc={0x18, 0x117, 0x4, 0x7ff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x4e, "a2741c5e7124acc9f2380f0112241c519326f0a01654ff161c2d5a7085922661b1a883e26a309b313605d4eda043e68038bfd2ad1d658d8a7c2e283b71bb2c7976e87325af5f8f6e10633dd2a29d"}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x110, 0x4000004}], 0x4, 0x20000004)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
recvfrom$rose(r7, &(0x7f0000000080)=""/123, 0x7b, 0x1, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./bus\x00', 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)

700.520964ms ago: executing program 1 (id=2887):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)={0x14, 0x24, 0x1, 0x70ad26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x12, 0x11, 0x67, 0x3}}], 0x18}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x89, &(0x7f0000000080), &(0x7f0000000140)=0x4)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)

641.389981ms ago: executing program 1 (id=2888):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x4017e, 0x20, 0x100002}, 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000300)='./bus\x00', 0x1c12c2, 0x1df2a23c5997fa5f)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000001c0)={{r3}, 0x3, 0x89, 0x7})
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "110000e6c8000008", "cac9e9877c1600e65e99ffffffffff02", 'LP3F', "f7ffffffff0100"}, 0x28)
setsockopt$inet6_tcp_int(r5, 0x11a, 0x5, 0x0, 0x0)
ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f00000000c0))
write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000020000103000000000000000002000020000000061006000000000200e0000002"], 0x24}, 0x1, 0x0, 0x0, 0x240490d0}, 0x2000c000)

640.831818ms ago: executing program 6 (id=2889):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000118, 0x0, 0x1}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)

472.213682ms ago: executing program 4 (id=2890):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r0 = timerfd_create(0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x8000)

471.551347ms ago: executing program 1 (id=2891):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x1, 0x1, 0x56555958, 0x9, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xf, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a34277310, 0x1}})
syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)
r2 = socket(0x11, 0x2, 0x0)
setsockopt(r2, 0x107, 0x1, &(0x7f0000000040)="260000000300060000071a800100613f", 0x10) (async)
setsockopt(r2, 0x107, 0x1, &(0x7f0000000040)="260000000300060000071a800100613f", 0x10)

469.894231ms ago: executing program 6 (id=2892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000018880)={'bond0\x00', @ifru_names='xfrm0\x00'})
pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="8c78be45a7ed896d671631336094742034d8190a8342030bcb67b01e7241f6904d450c5d8a89cfd882c326ad78dff26c57d0c8115ccc5dab9ee814023803b3c28205ec4ebe774c7a54c75e83f8bd9cb6ec66fdb2a325e2ea0357eb40199bec02e98c743f572bddfc7de05b916e7c37fcb497c5e8be653958c99a01b263fbdf4b8159797a323a1a3bb51e5338527a942f2d9594c5f1aa753d13dbc5f5b82165a3fbda167bb7971802827e0a7655ba1e76073f9fea4c913aa0b2a77c6182189b2aa0652ce1e51aa9c180", 0xc9}, {&(0x7f0000000180)="da2e08edfbe5b502e7dfebff76105f64fcd496", 0x13}, {&(0x7f00000001c0)="ef0399a4ed989e9a5f182a7257d5d46b6eaf1a3d34424d6c04e6939f878d83547cf1e3e0c5124146b0216b", 0x2b}, {&(0x7f0000000200)="a963a597c6026bb9919cb32e49ce973b23b42d25a959309b2d76da798b9b52984227f9eecedc3d039861460b127600e892490739fa96aabdc88bf2a4f8787826d8de464f769c601ddb7172cc5b7fc83e6e2954c8bddf6b5489ea", 0x5a}, {&(0x7f0000000280)="9bddf740f63259d023944d66dbaa8885dcb9899b8dfbaabeaa12dd60a768b556c630d3cb60aad09f428cf20ffffb0ada2db46dfb339886ddb597c82a912f73500d9f606919ada2089fd635dd5bc2cd57459179618b68688b91f440b4f329af9676be8ce45659588d483775005f6d4bdfa44b", 0x72}], 0x5, 0x61, 0x52e, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80)

390.631514ms ago: executing program 6 (id=2893):
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000))
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x3, 0x0, <r0=>0xffffffffffffffff})
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0xc)
r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x18, 0x8, 0x8f7b, 0x7, 0x0, r0, 0x1, '\x00', r2, r0, 0x3, 0x0, 0x5}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xd, 0x8, 0x0, 0x80, 0xffffffffffffffff, 0x10, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x5}, 0x50)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000300)={0x9, 0x1, "91c1c87496fe7e8bf96c95abe0e7220589c9d2b318ce0682dd2704f7ebe4ef20", 0x5, 0x1, 0x2, 0x1d5, 0x1b2e})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000380)={@local, @initdev}, &(0x7f00000003c0)=0xc)
setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000400)=0x2)
r4 = syz_open_dev$media(&(0x7f0000000440), 0x3, 0x200)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000480), &(0x7f00000004c0)=[{}, {{}, {<r5=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000580)={r5})
socket$inet6(0xa, 0x2, 0x4)
socket$inet6(0xa, 0xa, 0x8)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000ac0)={&(0x7f0000000680)={{@my=0x1}, {@my=0x0, 0x4715}, 0x400, "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"}, 0x418, 0x6})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000b00)={<r6=>0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x6746, 0xaa, 0x8, 0xa205, 0x4a, 0x80000001, 0xd}, &(0x7f0000000bc0)=0x9c)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000c00)={0x8, 0x4, 0x7, 0x800, r6}, &(0x7f0000000c40)=0x10)
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000c80)={'ah\x00'}, &(0x7f0000000cc0)=0x1e)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000d00), &(0x7f0000000d40)=0x4)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000d80)=r1)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x10, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e40)='GPL\x00', 0xe5c7, 0x76, &(0x7f0000000e80)=""/118, 0x41000, 0x18, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000f00)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000f40)={0x4, 0x7, 0xa8c3, 0x7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f80)=[{0x1, 0x3, 0x9, 0x6}, {0x4, 0x3, 0xb, 0x9}, {0x1, 0x2, 0xd, 0x3}], 0x10, 0x5}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000001080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x2, 0x44})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f00000010c0)=0x3)
r8 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_STAT_ANY(r8, 0xf, &(0x7f0000001100)=""/41)
syz_emit_ethernet(0x1c2, &(0x7f0000001140)={@empty, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x6, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x5fc}, {0x8fe}, {0x8}], @ipv6=@dccp_packet={0x9, 0x6, "621310", 0x178, 0x21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[@fragment={0x33, 0x0, 0x2e, 0x1, 0x0, 0x1e, 0x64}, @fragment={0x77, 0x0, 0x10, 0x0, 0x0, 0x2, 0x64}, @dstopts={0x16}, @hopopts={0x2c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}]}, @srh={0x6990957e0fe2c8f6, 0xc, 0x4, 0x6, 0xc, 0x28, 0x4, [@mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x62, 0xa, '\x00', [@generic={0x0, 0x50, "a79ae24f816ad0ad5dcbc0e0b6e29eaaafe07e7c5caade599952add20d1b9410587e49cf8233bc808e564696021a5390376dabf90689557d5c05f708f644769f2bba9a551ffa487e3d73456b724764cb"}, @ra={0x5, 0x2, 0x6}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x6, "e14bd6", 0x6, "963f39"}, "193bd9bda9d77cbceb0b2ecbe7111ce543501527c5bd4ce52002a77159f4c2813549857792a1c6dcb272016f05d162e233555c56e13a9b91e6b738d949b5f89bcd668f0bd0e62fa8d37e48bb14b9ef66f14b6feadce4c0a3ddb8a1527ee122bff778d6bafd1cf771e76f515113141de6"}}}}}}}, &(0x7f0000001340)={0x0, 0x2, [0x89, 0x8fc, 0x13f, 0x4a8]})

385.157903ms ago: executing program 4 (id=2894):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x7876, 0x1, 0x1, 0x80000000}]})
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x2d1, 0xfffffffffffffef0, &(0x7f0000000400)="b9ff0303000d698cb89e40f008004000e61d4f601100630277cba4e2c15f44b69e7906ec3cd623b0cacf103e16d47955c5405ab46dd78036e48e76f861ac6ce8d7f1ffc52db0d13ea8c2969b25ed19399f06479416adcb55abf9e09a810b44dacfc039426e5cc7b8b1f423d33c2e1a7752c7ec9f1baa68c4e24b67889b8bfd9cd00a70ddeaa0b846eeacc4f22dbd296e3c07f5948876e65e7c2045dcf2e7cf1dfa72bd516f7087399a291cff9574396daba4f771666ea0ea5fb8aa58e26d00009b", 0x0, 0xf, 0x2000000, 0xe, 0x0, &(0x7f0000000440), &(0x7f0000000140)="f83d48c9db1e974cb73eff7576e602d34ce56b1804436a9c949e04cd8564ad4324153bf8f189e378c8b7b55b0e03ee824c4534e82a1e02277970c3c0deeaf3f4787e7716080967afd6fe1f6f72be07be8af276aa0d45c8e022e78afecce49211d1b6fc3aba9c262941097aa7e2754309489e9b1f24d5693ccb04b575983a09117155e14a47add6e2ddf549eca55e43e0205db66b447965fc743626759fc6", 0x4, 0x0, 0xba17}, 0x28)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000380), &(0x7f00000002c0)=r4}, 0x20)
ioctl$SNDCTL_TMR_STOP(r4, 0x5403)
r6 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041)

310.138353ms ago: executing program 4 (id=2895):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0x7, 0x0, <r1=>0x0}) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9001}, 0x4) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2b, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) (async)
setresuid(0x0, 0xee00, 0x0) (async)
setrlimit(0x40000000000008, &(0x7f0000000000)) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000b33000/0x13000)=nil, 0x13000, 0x1}) (async)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x480, 0x0) (async)
clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000))
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
accept$ax25(r6, 0x0, 0x0) (async)
r7 = getegid()
fchown(r4, r5, r7)

309.52837ms ago: executing program 1 (id=2896):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r1, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffd}]}, 0x54}}, 0x2400c0d0)

251.887848ms ago: executing program 6 (id=2897):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x23, 0x1, 0x3)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0x10000000, 0x80, 0x4401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r6 = accept$netrom(r3, &(0x7f0000000000)={{0x3, @null}, [@netrom, @default, @netrom, @bcast, @remote, @null, @null, @bcast]}, &(0x7f0000000080)=0x48)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001300)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x3, "4e31e8097c0267"})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002400)={r7, 0x7fff})
accept$netrom(r6, &(0x7f00000000c0)={{0x3, @null}, [@default, @null, @rose, @bcast, @netrom, @default, @bcast, @null]}, &(0x7f0000000140)=0xfffffffffffffd85)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0)
keyctl$invalidate(0x15, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', <r9=>0x0, 0x2f, 0x3, 0x5, 0x4f97, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x1, 0x8, 0x37836059}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r9, 0x2f, 0x74, 0x76, 0xd, 0x9, @empty, @loopback, 0x1, 0x700, 0x9, 0x3}})
keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000000f6ff2000007d2018f814304b0fef57760883f4eb99fbace8e8c93865a8ef773a40fe49aa1ad61335818db87e81ca8526455ae93cc916791fe9ac6c424e3a10351e1f6635e5092b7fbc4ff6ff42a54a4ebcaf0b4da162f1be4e1b3f45e0be0cd2a543dda0a069acad328dfc4e80bd5a1663c05666f2d210a70996bb61237fe16d15c47e5d096017f9ef3d1259a9a6741e8559ea450c74e0bf8b9e29a4351e72ccc281a25532d0465949f594d06092272b727a44663d3b7bb849c7502f8c77a5", @ANYRES32=0x0, @ANYBLOB="00000000080002000100000014000100ff010000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x20048000)

251.517722ms ago: executing program 2 (id=2898):
r0 = socket$kcm(0x10, 0x2, 0x10) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000000280))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="42000000212000001c0012800c0001006d6163766c614f549def02800800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e060105000000af"], 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101300, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) (async, rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (rerun: 64)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r4, r3) (async)
modify_ldt$write(0x1, &(0x7f0000000000)={0x3aa, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x6, &(0x7f0000000040)=[{0x2, 0xa, 0x0, 0x7ffc9ffb}, {0xf36d, 0x5, 0x5, 0x2de}, {0x1, 0x0, 0x6}, {0xb, 0x4, 0x3, 0x2}, {0x6, 0x2, 0x4, 0x2}, {0x15, 0x0, 0x2, 0x8}]}) (async)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil)

191.367567ms ago: executing program 4 (id=2899):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@getqdisc={0x28, 0x26, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x10, 0xf}, {0xe}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

112.516087ms ago: executing program 2 (id=2900):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x25dfdbfb, {0xa, 0x17, 0x0, 0xfe, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x7c0}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x7c)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000340)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
timer_getoverrun(r4)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000280), &(0x7f0000000340)=0x30)
r6 = mq_open(&(0x7f0000000080)='/dev/ttyS3\x00', 0x801, 0x40, &(0x7f0000000100)={0x3, 0x8, 0xf, 0xa})
mq_notify(r6, &(0x7f0000000540)={0x0, 0x30, 0x1, @thr={&(0x7f0000000340)="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", &(0x7f0000000440)="fd33f588c96eedd1dde0ce920795f6ab91e4dca65898a498ab54475f2a269e7e15bd4c9f6bb3f3789d9e247e2b56879c9bf6cc2cbaace89888b0d0a1a72bb3e0885171d0e9dfa724524af991e48c230a1e078a20c5eb5c2432f2a8e3b0436b56cdd7cc03e8f5ae671f031f65619e08a8183fb6950a623102621c831fdc894f875e96ef8c876191a3737ff96ee7adff29bccbb0dde09fa65820aea84d8efbaaafcb0d0018df3c8707b4cada8a232312b35c86b44a3d892bee8c359b36d3d563085ee3b52189572b347fb0cf1236a0ab61b727c2b0fe7e6235af04c77df4aa9b085e9fddd5e9b307"}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

52.186153ms ago: executing program 6 (id=2901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002081099f64445e4604e2745ef0000000000000c000400000c0000800000000800010074000000080000002c000580140002800800b84f2cf60a09895201000100000014000280"], 0x80}, 0x1, 0x0, 0x0, 0x8051}, 0xcc80)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYRES64=0x0], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0))
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x400f83, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1000000002140014769e6aef3c3daf45"], 0x10}, 0x1, 0x0, 0x0, 0x4040075}, 0x2005)
r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
ioctl$LOOP_SET_DIRECT_IO(r3, 0xc0401289, 0x6e)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000f00)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'})
sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000040007000080dbb36cb8bb6a29bc99886b5f21f05f7b1b3c0c5936ae704c1d83feb835b585a1372a"], 0x10}}], 0x1, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="cfc39d027f890ed46bb532894b3e4b2720d2f05e142343c75e615ffabdf9afc626c33c589fb5056c13d9cfc8fa8262a90c8b9f04405ba558cef4117042b7d1d857a5ab6928d38f9bf63eff8eb3d5747c82", @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4040093}, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00efff", @ANYRES16=r6, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000013f8000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000300)=0x5a43)
write$dsp(r8, &(0x7f0000000040)='\x00', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r9 = syz_open_procfs(r7, &(0x7f0000000080)='statm\x00')
read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
socket$vsock_stream(0x28, 0x1, 0x0)

50.59547ms ago: executing program 4 (id=2902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000004f0001"], 0x4c}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000004f0001"], 0x4c}}, 0x40000)

0s ago: executing program 4 (id=2903):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff7, 0x90000)
fcntl$setlease(r1, 0x400, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff7, 0x90000) (async)
fcntl$setlease(r1, 0x400, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)

kernel console output (not intermixed with test programs):

7f84a2232c91 R08: 0000000000000020 R09: 0000000000000000
[  239.867374][T13235] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  239.867386][T13235] R13: 00007f84a2416038 R14: 00007f84a2415fa0 R15: 00007ffc86aee8d8
[  239.867413][T13235]  </TASK>
[  240.053657][ T1344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.058486][ T1344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.063451][ T1344] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  240.069127][ T1344] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  240.074250][ T1344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.079705][ T1344] usb 6-1: config 0 descriptor??
[  240.089539][T13253] netlink: 'syz.2.2061': attribute type 4 has an invalid length.
[  240.096112][T13253] netlink: 'syz.2.2061': attribute type 4 has an invalid length.
[  240.216826][   T40] audit: type=1400 audit(1775536289.969:795): avc:  denied  { write } for  pid=13269 comm="syz.2.2065" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  240.272585][   T40] audit: type=1400 audit(1775536290.019:796): avc:  denied  { create } for  pid=13276 comm="syz.5.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  240.284800][   T40] audit: type=1400 audit(1775536290.039:797): avc:  denied  { write } for  pid=13278 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  240.327531][   T40] audit: type=1400 audit(1775536290.079:798): avc:  denied  { append } for  pid=13280 comm="syz.2.2069" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  240.347539][T13286] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2070'.
[  240.361007][T13286] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2070'.
[  240.368205][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2070'.
[  240.498258][ T1344] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  240.608958][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'.
[  240.726556][T13315] netlink: 'syz.5.2081': attribute type 19 has an invalid length.
[  240.737584][ T8878] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  240.737655][T13315] netlink: 'syz.5.2081': attribute type 19 has an invalid length.
[  240.740650][ T8878] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  240.746674][ T8878] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  240.749749][ T8878] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.873070][   T40] audit: type=1400 audit(1775536290.619:799): avc:  denied  { setattr } for  pid=13334 comm="syz.4.2085" name="SCTPv6" dev="sockfs" ino=53285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  241.127227][T13352] tipc: Enabling of bearer <ud#:s> rejected, media not registered
[  241.135725][T13352] overlayfs: failed to clone upperpath
[  241.668122][T13368] netlink: 'syz.4.2097': attribute type 1 has an invalid length.
[  241.687028][T13368] 8021q: adding VLAN 0 to HW filter on device bond6
[  241.695406][T13368] __nla_validate_parse: 2 callbacks suppressed
[  241.695426][T13368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2097'.
[  241.702731][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'.
[  241.719194][T13371] openvswitch: netlink: Message has 4 unknown bytes.
[  241.722126][T13371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.746765][T13368] bond6: (slave gretap3): making interface the new active one
[  241.751731][T13368] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  241.875025][T13378] fuse: Bad value for 'user_id'
[  241.876915][T13378] fuse: Bad value for 'user_id'
[  241.932600][T13379] random: crng reseeded on system resumption
[  241.941059][T13376] MTD: Couldn't look up './bus': -15
[  241.949393][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'.
[  242.484279][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  242.484291][   T40] audit: type=1800 audit(1775536292.239:801): pid=13381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.2100" name="/snd/pcmC0D0p" dev="devtmpfs" ino=1314 res=0 errno=0
[  242.558670][T13387] xt_time: invalid argument - start or stop time greater than 23:59:59
[  242.600637][ T6025] usb 6-1: USB disconnect, device number 21
[  242.814807][T13399] debugfs: 'netdev:wlan1' already exists in 'phy4'
[  242.932219][Tqemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xab000)
13410] loop2: detected capacity change from 0 to 128
[  243.048239][T13429] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  243.054079][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  243.056432][ T1114] ata1: failed to read log page 10h (errno=-5)
[  243.058411][ T1114] ata1.00: NCQ disabled due to excessive errors
[  243.060530][ T1114] ata1.00: exception Emask 0x1 SAct 0x84000 SErr 0x0 action 0x0
[  243.066544][ T1114] ata1.00: irq_stat 0x41000008
[  243.068310][ T1114] ata1.00: failed command: READ FPDMA QUEUED
[  243.070387][ T1114] ata1.00: cmd 60/58:70:ee:1b:01/05:00:00:00:00/40 tag 14 ncq dma 700416 in
[  243.070387][ T1114]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  243.085672][ T1114] ata1.00: status: { DRDY }
[  243.087394][ T1114] ata1.00: error: { ABRT }
[  243.088996][ T1114] ata1.00: failed command: READ FPDMA QUEUED
[  243.091011][ T1114] ata1.00: cmd 60/40:98:06:24:01/05:00:00:00:00/40 tag 19 ncq dma 688128 in
[  243.091011][ T1114]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  243.093682][T13433] fuse: Unknown parameter 'group_idC00000000000000000000'
[  243.097700][ T1114] ata1.00: status: { DRDY }
[  243.102290][ T1114] ata1.00: error: { ABRT }
[  243.105487][ T1114] ata1.00: configured for UDMA/100
[  243.107837][ T1114] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  243.107872][T13433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2117'.
[  243.111912][ T1114] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] 
[  243.115760][   T40] audit: type=1400 audit(1775536292.869:802): avc:  denied  { setopt } for  pid=13416 comm="syz.1.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  243.117527][ T1114] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information
[  243.127493][ T1114] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 1b ee 00 05 58 00
[  243.130428][ T1114] I/O error, dev sda, sector 72686 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2
[  243.135120][ T1114] sd 0:0:0:0: [sda] tag#19 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  243.139403][ T1114] sd 0:0:0:0: [sda] tag#19 Sense Key : Aborted Command [current] 
[  243.142853][ T1114] sd 0:0:0:0: [sda] tag#19 Add. Sense: No additional sense information
[  243.146598][ T1114] sd 0:0:0:0: [sda] tag#19 CDB: Read(10) 28 00 00 01 24 06 00 05 40 00
[  243.150144][ T1114] I/O error, dev sda, sector 74758 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2
[  243.154577][ T1114] ata1: EH complete
[  243.326658][T13436] binder: 13435:13436 ioctl c0306201 2000000003c0 returned -14
[  243.584260][T13462] fuse: Unknown parameter '&S'
[  243.647198][T13469] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  243.652424][T13469] exFAT-fs (nullb0): invalid boot record signature
[  243.654622][T13469] exFAT-fs (nullb0): failed to read boot sector
[  243.656886][T13469] exFAT-fs (nullb0): failed to recognize exfat type
[  243.822424][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2129'.
[  243.836077][T13481] netlink: 'syz.1.2129': attribute type 1 has an invalid length.
[  243.843882][T13481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2129'.
[  243.890870][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2130'.
[  243.915559][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'.
[  243.975462][   T40] audit: type=1400 audit(1775536293.729:803): avc:  denied  { listen } for  pid=13489 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  243.992022][   T40] audit: type=1400 audit(1775536293.729:804): avc:  denied  { accept } for  pid=13489 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  244.006895][T13494] syzkaller0: entered promiscuous mode
[  244.009484][T13494] syzkaller0: entered allmulticast mode
[  244.029463][T13492] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2134'.
[  244.072515][ T5293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.085128][ T5293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.090822][ T5293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.095455][ T5293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.100861][ T5293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.131224][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.140468][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.144840][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.154355][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.161140][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.283523][T13500] wg0 speed is unknown, defaulting to 1000
[  244.304365][T13500] xfrm0 speed is unknown, defaulting to 1000
[  244.398859][T13517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2141'.
[  244.436505][ T8875] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.454658][T13500] chnl_net:caif_netlink_parms(): no params data found
[  244.527960][ T8875] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.563800][T13500] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.565007][ T8876] Bluetooth: (null): Invalid header checksum
[  244.566364][T13500] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.570834][T13500] bridge_slave_0: entered allmulticast mode
[  244.573985][T13500] bridge_slave_0: entered promiscuous mode
[  244.577689][T13500] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.580183][T13500] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.583182][T13500] bridge_slave_1: entered allmulticast mode
[  244.594096][T13500] bridge_slave_1: entered promiscuous mode
[  244.606153][ T8875] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.636355][T13534] comedi comedi3: comedi_config --init_data is deprecated
[  244.638678][T13500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.644954][T13500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.678077][T13500] team0: Port device team_slave_0 added
[  244.694064][T13500] team0: Port device team_slave_1 added
[  244.715974][T13500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.718717][T13500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.727288][T13500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.730259][T13537] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  244.732079][T13500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.738689][T13500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.751673][T13500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.760281][ T8875] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.807590][T13500] hsr_slave_0: entered promiscuous mode
[  244.810623][T13500] hsr_slave_1: entered promiscuous mode
[  244.813924][T13500] debugfs: 'hsr0' already exists in 'hsr'
[  244.815869][T13500] Cannot create hsr debugfs directory
[  244.838299][   T40] audit: type=1400 audit(1775536294.589:805): avc:  denied  { shutdown } for  pid=13540 comm="syz.1.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  244.893409][T13548] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  244.896555][T13548] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  244.941150][T13550] netem: change failed
[  245.072535][T13562] netlink: 'syz.1.2156': attribute type 1 has an invalid length.
[  245.075211][T13562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.108176][ T8875] erspan0: left allmulticast mode
[  245.110719][ T8875] erspan0: left promiscuous mode
[  245.116129][ T8875] bridge4: port 1(erspan0) entered disabled state
[  245.177470][ T8875] bond4 (unregistering): (slave ip6gretap0): Releasing backup interface
[  245.181140][ T8875] bond4 (unregistering): (slave ip6gretap0): the permanent HWaddr of slave - da:55:2d:2e:fd:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  245.214263][ T8875] bond0 (unregistering): (slave ip6gre1): Releasing backup interface
[  245.217055][ T8875] ip6gre1 (unregistering): left promiscuous mode
[  245.300143][ T8875] gretap0 (unregistering): left promiscuous mode
[  245.336951][ T8875] bond6 (unregistering): (slave gretap3): Releasing active interface
[  245.681559][ T7275] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  245.716454][ T8875] bond1 (unregistering): Released all slaves
[  245.732322][ T8875] bond2 (unregistering): Released all slaves
[  245.743787][ T8875] bond3 (unregistering): Released all slaves
[  245.755682][ T8875] bond4 (unregistering): (slave veth5): Releasing backup interface
[  245.793003][ T8875] bond4 (unregistering): Released all slaves
[  245.806012][ T8875] bond5 (unregistering): Released all slaves
[  245.820428][ T8875] smc: removing net device bond0 with user defined pnetid SYZ2
[  245.828577][ T8875] bond0 (unregistering): Released all slaves
[  245.833018][ T7275] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.837043][ T7275] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.839978][ T8875] bond6 (unregistering): Released all slaves
[  245.840310][ T7275] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  245.848123][ T7275] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  245.851482][ T7275] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.863619][ T7275] usb 10-1: config 0 descriptor??
[  245.965772][ T8875] tipc: Left network mode
[  245.974356][T13572] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  246.035992][T13588] Can't find a SQUASHFS superblock on nullb0
[  246.135910][T13600] tipc: Enabled bearer <eth:gre0>, priority 10
[  246.139590][T13600] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  246.251661][ T5941] Bluetooth: hci4: command tx timeout
[  246.273389][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  246.276787][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  246.279579][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  246.292150][ T7275] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd
[  246.295708][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x1
[  246.298834][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x2
[  246.303907][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  246.307697][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  246.311083][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  246.317595][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  246.320442][ T7275] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  246.333420][ T7275] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  246.400842][   T40] audit: type=1800 audit(1775536296.149:806): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2174" name="bus" dev="tmpfs" ino=3009 res=0 errno=0
[  246.543866][ T5981] usb 10-1: USB disconnect, device number 7
[  246.577225][T13500] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  246.582018][T13500] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  246.586590][T13500] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  246.591984][T13500] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  246.666587][T13500] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.677697][T13500] 8021q: adding VLAN 0 to HW filter on device team0
[  246.684891][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.687586][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.696108][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.699242][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.754905][   T40] audit: type=1400 audit(1775536296.509:807): avc:  denied  { execute_no_trans } for  pid=13650 comm="syz.1.2178" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=51963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  246.808840][ T8875] veth0_macvtap: left allmulticast mode
[  246.815443][ T8875] pim6reg (unregistering): left allmulticast mode
[  246.935129][ T8875] team0 (unregistering): Port device team_slave_1 removed
[  246.958299][ T8875] team0 (unregistering): Port device team_slave_0 removed
[  246.964276][T13661] __nla_validate_parse: 7 callbacks suppressed
[  246.964296][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'.
[  247.106876][ T8875] lo (unregistering): left allmulticast mode
[  247.160027][T13668] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2182'.
[  247.164498][T13668] netlink: 'syz.5.2182': attribute type 1 has an invalid length.
[  247.215519][T13500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.274664][   T40] audit: type=1400 audit(1775536306.025:808): avc:  denied  { mounton } for  pid=13675 comm="syz.1.2185" path="/proc/1610/cgroup" dev="proc" ino=51977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  247.413527][T13500] veth0_vlan: entered promiscuous mode
[  247.419676][T13500] veth1_vlan: entered promiscuous mode
[  247.442045][T13500] veth0_macvtap: entered promiscuous mode
[  247.449270][T13500] veth1_macvtap: entered promiscuous mode
[  247.464112][T13500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.464703][   T40] audit: type=1400 audit(1775536306.215:809): avc:  denied  { accept } for  pid=13687 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  247.509183][T13500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.517756][   T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.526934][   T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.529903][   T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.544762][   T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.616958][ T8872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.619584][ T8872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.642458][ T8874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.646080][ T8874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.674128][   T40] audit: type=1400 audit(1775536306.425:810): avc:  denied  { mounton } for  pid=13500 comm="syz-executor" path="/syzkaller.Wqzi1K/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  247.794009][T13701] netlink: 'syz.4.2133': attribute type 5 has an invalid length.
[  247.796722][T13701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2133'.
[  247.821789][   T40] audit: type=1400 audit(1775536306.565:811): avc:  denied  { map } for  pid=13702 comm="syz.2.2190" path="/proc/sys/net/ipv4/vs/drop_entry" dev="proc" ino=54382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1
[  248.321819][ T5941] Bluetooth: hci4: command tx timeout
[  248.360378][   T40] audit: type=1400 audit(1775536307.105:812): avc:  denied  { setopt } for  pid=13724 comm="syz.1.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  248.361968][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'.
[  248.507701][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2200'.
[  248.870320][T13749] vivid-000: =================  START STATUS  =================
[  248.875882][T13749] vivid-000: Test Pattern: 75% Colorbar
[  248.878128][T13749] vivid-000: Fill Percentage of Frame: 4
[  248.880552][T13749] vivid-000: Horizontal Movement: No Movement
[  248.886753][T13749] vivid-000: Vertical Movement: No Movement
[  248.889362][T13749] vivid-000: OSD Text Mode: All
[  248.891686][T13749] vivid-000: Show Border: false
[  248.893832][T13749] vivid-000: Show Square: true
[  248.895970][T13749] vivid-000: Sensor Flipped Horizontally: false
[  248.898659][T13749] vivid-000: Sensor Flipped Vertically: false
[  248.903447][T13749] vivid-000: Insert SAV Code in Image: false
[  248.906367][T13749] vivid-000: Insert EAV Code in Image: false
[  248.909023][T13749] vivid-000: Insert Video Guard Band: true
[  248.911973][T13749] vivid-000: Reduced Framerate: true
[  248.914613][T13749] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0
[  248.917880][T13749] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  248.921226][T13749] vivid-000: Enable Capture Cropping: true
[  248.924290][T13749] vivid-000: Enable Capture Composing: true
[  248.926942][T13749] vivid-000: Enable Capture Scaler: true
[  248.929524][T13749] vivid-000: Timestamp Source: End of Frame
[  248.933079][T13749] vivid-000: Colorspace: sRGB
[  248.935323][T13749] vivid-000: Transfer Function: Default
[  248.937740][T13749] vivid-000: Y'CbCr Encoding: Default
[  248.939940][T13749] vivid-000: HSV Encoding: Hue 0-179
[  248.941845][T13749] vivid-000: Quantization: Default
[  248.943461][T13749] vivid-000: Apply Alpha To Red Only: false
[  248.945514][T13749] vivid-000: Standard Aspect Ratio: 4x3
[  248.947607][T13749] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  248.951127][T13749] vivid-000: DV Timings: 640x480p59 inactive
[  248.954850][T13749] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  248.958012][T13749] vivid-000: Maximum EDID Blocks: 2
[  248.960191][T13749] vivid-000: Limited RGB Range (16-235): false
[  248.963122][T13749] vivid-000: Rx RGB Quantization Range: Automatic
[  248.965429][T13749] vivid-000: Power Present: 0x00000001
[  248.967705][T13749] tpg source WxH: 320x180 (Y'CbCr)
[  248.969416][T13749] tpg field: 1
[  248.970531][T13749] tpg crop: (0,0)/320x180
[  248.972184][T13749] tpg compose: (0,0)/320x180
[  248.973821][T13749] tpg colorspace: 8
[  248.975452][T13749] tpg transfer function: 0/2
[  248.977523][T13749] tpg Y'CbCr encoding: 0/1
[  248.980437][T13749] tpg quantization: 0/2
[  248.982116][T13749] tpg RGB range: 0/2
[  248.983485][T13749] vivid-000: ==================  END STATUS  ==================
[  249.064190][T13765] tmpfs: Bad value for 'mpol'
[  249.074564][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'.
[  249.106767][T13772] netlink: 'syz.2.2210': attribute type 21 has an invalid length.
[  249.110211][T13772] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2210'.
[  249.115469][T13772] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2210'.
[  249.120260][T13772] netlink: 'syz.2.2210': attribute type 21 has an invalid length.
[  249.125013][T13772] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2210'.
[  249.129335][T13772] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2210'.
[  249.509996][T13797] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.538663][T13797] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.545686][T13797] bond1: (slave bond0): making interface the new active one
[  249.548930][T13797] bond1: (slave bond0): Enslaving as an active interface with an up link
[  249.595155][   T40] audit: type=1326 audit(1775536308.345:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.5.2218" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbc519c819 code=0x0
[  250.411419][ T5941] Bluetooth: hci4: command tx timeout
[  252.481609][ T5941] Bluetooth: hci4: command tx timeout
[  252.776777][   T40] audit: type=1400 audit(1775536311.525:814): avc:  denied  { validate_trans } for  pid=13848 comm="syz.2.2231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  253.090644][   T40] audit: type=1400 audit(1775536311.835:815): avc:  denied  { map } for  pid=13878 comm="syz.1.2239" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  253.722344][   T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  253.876393][   T24] usb 9-1: Using ep0 maxpacket: 16
[  253.880446][   T24] usb 9-1: config 1 interface 0 altsetting 70 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  253.883161][T13902] bridge_slave_0: left allmulticast mode
[  253.885643][   T24] usb 9-1: config 1 interface 0 has no altsetting 0
[  253.887730][T13902] bridge_slave_0: left promiscuous mode
[  253.892635][   T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  253.893039][T13902] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.895609][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.905229][   T24] usb 9-1: Product: ㄰㡷㎰怾撪乧艕ﷂ嫊畵ஷ啳듫厒塇༳豟҆Ⳙ䇵ᯱ퓯牮㛯㰯ῌ䅇쯌夘軮쀯Ⱦ넜랳�䬅땚��ꋣ鞙쌩᳸㉵钾픭✙ณ༻�ꈆ幡竦ካ⃠啫Ỻ�⒬޾ᡯ��疀꩖�雯�췊췀ꆎ妕쉋嗂釵쪜�】ﻼﴠ赀蠿頫쩮�ไ�ቆ���ﾚ瘽⢠ᵃ챗᭰빼꯹燑俆₦⣑潲
[  253.908256][T13902] bridge_slave_1: left allmulticast mode
[  253.919070][   T24] usb 9-1: Manufacturer: 輺਄頀訆ᴜ�⣘궯柞猢讛첸≊�敊༔粇�យ梪唜➿㘕瑤蜿幬�頋貵
[  253.920164][T13902] bridge_slave_1: left promiscuous mode
[  253.925304][   T24] usb 9-1: SerialNumber: syz
[  253.929020][T13902] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.944706][T13902] team0: Port device team_slave_0 removed
[  253.948734][T13902] team0: Port device team_slave_1 removed
[  253.951011][T13902] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.954445][T13902] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.958147][T13902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  254.196404][   T40] audit: type=1400 audit(1775536312.945:816): avc:  denied  { bind } for  pid=13914 comm="syz.2.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  254.359902][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.362872][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.366399][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.370422][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.383910][   T24] usbhid 9-1:1.0: can't add hid device: -71
[  254.386193][   T24] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  254.400755][   T24] usb 9-1: USB disconnect, device number 8
[  254.614955][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  254.620495][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  254.626265][ T5293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  254.630340][ T5293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  254.633613][ T5293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  254.675272][T13925] wg0 speed is unknown, defaulting to 1000
[  254.678145][T13925] xfrm0 speed is unknown, defaulting to 1000
[  254.843697][T13925] chnl_net:caif_netlink_parms(): no params data found
[  254.967640][T13925] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.971658][T13925] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.974999][T13925] bridge_slave_0: entered allmulticast mode
[  254.979114][T13925] bridge_slave_0: entered promiscuous mode
[  254.984483][T13925] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.988010][T13925] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.992619][T13925] bridge_slave_1: entered allmulticast mode
[  254.996451][T13925] bridge_slave_1: entered promiscuous mode
[  255.024630][T13925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.030706][T13925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.070178][T13925] team0: Port device team_slave_0 added
[  255.074633][T13925] team0: Port device team_slave_1 added
[  255.089999][T13943] CIFS mount error: No usable UNC path provided in device string!
[  255.089999][T13943] 
[  255.094676][T13943] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  255.098940][T13925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.102213][T13925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  255.113180][T13925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.118359][T13925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.120955][T13925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  255.129929][T13925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.157185][T13925] hsr_slave_0: entered promiscuous mode
[  255.160058][T13925] hsr_slave_1: entered promiscuous mode
[  255.166114][T13925] debugfs: 'hsr0' already exists in 'hsr'
[  255.168688][T13925] Cannot create hsr debugfs directory
[  255.168803][ T7275] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  255.346312][ T7275] usb 9-1: config index 0 descriptor too short (expected 39, got 27)
[  255.349421][ T7275] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.352979][ T7275] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  255.357189][ T7275] usb 9-1: config 0 interface 0 has no altsetting 0
[  255.361552][ T7275] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  255.365162][ T7275] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  255.368144][ T7275] usb 9-1: Product: syz
[  255.382507][ T7275] usb 9-1: Manufacturer: syz
[  255.384211][ T7275] usb 9-1: SerialNumber: syz
[  255.389250][ T7275] usb 9-1: config 0 descriptor??
[  255.395311][ T7275] hub 9-1:0.0: bad descriptor, ignoring hub
[  255.397609][ T7275] hub 9-1:0.0: probe with driver hub failed with error -5
[  255.445542][ T7275] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[  255.499148][T13504] udevd[13504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.589216][ T8878] dvmrp0 (unregistering): left allmulticast mode
[  255.590567][T13955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=630 sclass=netlink_route_socket pid=13955 comm=syz.1.2261
[  255.711801][    T9] usb 9-1: USB disconnect, device number 9
[  256.051556][ T7275] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  256.069533][ T8878] bond3 (unregistering): (slave bridge6): Releasing backup interface
[  256.072558][ T8878] bridge6 (unregistering): left promiscuous mode
[  256.177175][ T8878] bond1 (unregistering): Released all slaves
[  256.191039][ T8878] smc: removing net device bond0 with user defined pnetid SYZ2
[  256.195174][ T8878] bond0 (unregistering): Released all slaves
[  256.210138][ T8878] bond2 (unregistering): Released all slaves
[  256.233336][ T7275] usb 9-1: config index 0 descriptor too short (expected 39, got 27)
[  256.236693][ T8878] bond3 (unregistering): Released all slaves
[  256.241615][ T7275] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.246192][ T7275] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  256.254118][ T8878] bond4 (unregistering): Released all slaves
[  256.261170][ T8878] bond5 (unregistering): Released all slaves
[  256.263308][ T7275] usb 9-1: config 0 interface 0 has no altsetting 0
[  256.267232][ T7275] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  256.270544][ T7275] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  256.273363][ T7275] usb 9-1: Product: syz
[  256.274759][ T7275] usb 9-1: Manufacturer: syz
[  256.276221][ T7275] usb 9-1: SerialNumber: syz
[  256.281700][ T7275] usb 9-1: config 0 descriptor??
[  256.286148][ T7275] hub 9-1:0.0: bad descriptor, ignoring hub
[  256.288408][ T7275] hub 9-1:0.0: probe with driver hub failed with error -5
[  256.315795][ T7275] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[  256.334163][T13504] udevd[13504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  256.511623][T13933] wg0 speed is unknown, defaulting to 1000
[  256.537929][T13970] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  256.730821][ T5941] Bluetooth: hci3: command tx timeout
[  256.772263][ T6000] usb 9-1: USB disconnect, device number 10
[  256.817265][T13985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13985 comm=syz.1.2268
[  256.830758][T13994] sch_tbf: burst 545 is lower than device lo mtu (65550) !
[  256.910066][T14000] netlink: 'syz.5.2270': attribute type 21 has an invalid length.
[  256.932511][T14000] __nla_validate_parse: 6 callbacks suppressed
[  256.932533][T14000] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2270'.
[  257.016772][T13925] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  257.021488][T13925] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  257.033766][T13925] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  257.038700][T13925] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  257.135311][T13925] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.151968][T13925] 8021q: adding VLAN 0 to HW filter on device team0
[  257.158391][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.160774][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.169555][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.172531][ T8874] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.218977][ T6000] IPVS: starting estimator thread 0...
[  257.271948][T14033] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  257.321494][T14029] IPVS: using max 43 ests per chain, 103200 per kthread
[  257.426440][T13925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.499703][T13925] veth0_vlan: entered promiscuous mode
[  257.506066][T13925] veth1_vlan: entered promiscuous mode
[  257.537372][T13925] veth0_macvtap: entered promiscuous mode
[  257.544997][T13925] veth1_macvtap: entered promiscuous mode
[  257.559171][T13925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.575946][T13925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.607321][ T8872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.611814][ T8872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.615637][ T8872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.621256][ T8872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.733414][T14050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2282'.
[  257.774693][ T8872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.777828][ T8872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.819642][ T8876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.823225][   T40] audit: type=1400 audit(1775536572.576:817): avc:  denied  { ioctl } for  pid=14056 comm="syz.1.2285" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  257.826276][ T8876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.834894][   T40] audit: type=1400 audit(1775536572.586:818): avc:  denied  { bind } for  pid=14054 comm="syz.5.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  257.839770][T14057] can0: slcan on ttyS3.
[  257.840857][T14053] netlink: 'syz.4.2283': attribute type 28 has an invalid length.
[  257.910530][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'.
[  257.962881][T14057] can0 (unregistered): slcan off ttyS3.
[  258.063198][   T40] audit: type=1400 audit(1775536572.806:819): avc:  denied  { read } for  pid=14077 comm="syz.4.2287" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  258.067622][T14084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  258.073724][   T40] audit: type=1400 audit(1775536572.806:820): avc:  denied  { open } for  pid=14077 comm="syz.4.2287" path="/25/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  258.077926][T14084] block device autoloading is deprecated and will be removed.
[  258.089846][   T40] audit: type=1400 audit(1775536572.836:821): avc:  denied  { ioctl } for  pid=14077 comm="syz.4.2287" path="/25/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  258.117087][T14093] fuse: Invalid rootmode
[  258.163868][T14096] exfat: Unknown parameter '}+'
[  258.226707][T14100] syzkaller0: create flow: hash 4076267652 index 1
[  258.256740][T14100] syzkaller0: delete flow: hash 4076267652 index 1
[  258.281469][ T6000] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  258.432509][ T6000] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  258.437412][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.449900][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.453924][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.458649][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.462013][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.465944][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.469317][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.472609][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.477862][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.481886][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.486067][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.489900][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.498344][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.506912][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.510781][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.524943][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.527797][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.531188][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.554614][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.557441][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.560909][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.579513][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.582748][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.586611][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0
[  258.590790][ T6000] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  258.593956][ T6000] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  258.596560][ T6000] usb 7-1: Product: syz
[  258.598356][ T6000] usb 7-1: Manufacturer: syz
[  258.599877][ T6000] usb 7-1: SerialNumber: syz
[  258.604005][ T6000] usb 7-1: config 0 descriptor??
[  258.609427][ T6000] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  258.801872][ T5941] Bluetooth: hci3: command tx timeout
[  259.840501][T14127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2300'.
[  259.879778][   T40] audit: type=1400 audit(1775536574.626:822): avc:  denied  { rename } for  pid=14126 comm="syz.5.2300" name="file0" dev="9p" ino=79691983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  259.946305][ T6000] usb 7-1: USB disconnect, device number 16
[  259.951861][ T6000] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  260.135761][T14141] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  260.164298][T14145] syz.1.2306: attempt to access beyond end of device
[  260.164298][T14145] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[  260.169463][T14145] gfs2: error -5 reading superblock
[  260.197050][T14152] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  260.211466][   T40] audit: type=1400 audit(1775536574.956:823): avc:  denied  { create } for  pid=14153 comm="syz.5.2309" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  260.218284][   T40] audit: type=1400 audit(1775536574.956:824): avc:  denied  { associate } for  pid=14153 comm="syz.5.2309" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  260.383660][T14161] xt_hashlimit: size too large, truncated to 1048576
[  260.582438][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2317'.
[  260.725259][   T40] audit: type=1400 audit(1775536575.476:825): avc:  denied  { connect } for  pid=14186 comm="syz.2.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  260.729325][T14187] overlayfs: conflicting options: userxattr,redirect_dir=on
[  260.891642][ T5941] Bluetooth: hci3: command tx timeout
[  260.962920][T14204] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  261.047446][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  261.050250][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  261.300097][   T40] audit: type=1400 audit(1775536576.046:826): avc:  denied  { setattr } for  pid=14222 comm="syz.4.2331" name="tty28" dev="devtmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  261.314746][T14228] syzkaller0: entered promiscuous mode
[  261.317355][T14228] syzkaller0: entered allmulticast mode
[  261.528122][T14237] tipc: Started in network mode
[  261.532619][T14237] tipc: Node identity 4, cluster identity 4711
[  261.535520][T14237] tipc: Node number set to 4
[  262.012781][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.016812][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.018931][T14254] vxfs: can't find superblock.
[  262.021679][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.024130][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.026068][T14254] vxfs: can't find superblock.
[  262.029822][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.038563][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.041203][T14254] vxfs: can't find superblock.
[  262.047281][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.050638][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.053777][T14254] vxfs: can't find superblock.
[  262.057336][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.060026][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.063089][T14254] vxfs: can't find superblock.
[  262.066775][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.069680][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.072438][T14254] vxfs: can't find superblock.
[  262.075605][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.078729][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.082056][T14254] vxfs: can't find superblock.
[  262.085394][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.088336][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.091597][T14254] vxfs: can't find superblock.
[  262.094782][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.097533][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.100035][T14254] vxfs: can't find superblock.
[  262.103702][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.107243][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.110057][T14254] vxfs: can't find superblock.
[  262.113624][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.116328][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.118916][T14254] vxfs: can't find superblock.
[  262.122153][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.125849][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.128940][T14254] vxfs: can't find superblock.
[  262.132196][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.134964][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.137562][T14254] vxfs: can't find superblock.
[  262.140663][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.143764][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.146596][T14254] vxfs: can't find superblock.
[  262.149860][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.152927][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.155539][T14254] vxfs: can't find superblock.
[  262.159449][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.163010][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.165685][T14254] vxfs: can't find superblock.
[  262.168712][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.171591][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.177850][T14254] vxfs: can't find superblock.
[  262.182277][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.184950][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.187459][T14254] vxfs: can't find superblock.
[  262.190601][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.193667][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.198803][T14254] vxfs: can't find superblock.
[  262.202397][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.205278][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.208187][T14254] vxfs: can't find superblock.
[  262.214051][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.216817][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.219406][T14254] vxfs: can't find superblock.
[  262.222973][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.225954][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.228485][T14254] vxfs: can't find superblock.
[  262.231742][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.234980][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.237805][T14254] vxfs: can't find superblock.
[  262.241022][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.244605][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.247143][T14254] vxfs: can't find superblock.
[  262.250262][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.253988][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.256628][T14254] vxfs: can't find superblock.
[  262.259792][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.262764][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.265404][T14254] vxfs: can't find superblock.
[  262.268865][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.272334][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.274973][T14254] vxfs: can't find superblock.
[  262.277783][T14233] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  262.280727][T14233] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  262.281916][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.285873][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.287833][T14254] vxfs: can't find superblock.
[  262.290193][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.292405][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.295083][T14254] vxfs: can't find superblock.
[  262.301281][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.302206][T14233] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  262.304001][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.309882][T14254] vxfs: can't find superblock.
[  262.314123][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.316308][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.318477][T14254] vxfs: can't find superblock.
[  262.320563][T14233] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  262.320835][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.325904][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.327105][T14233] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  262.327839][T14254] vxfs: can't find superblock.
[  262.332988][T14254] vxfs: WRONG superblock magic 00000000 at 1
[  262.333493][T14233] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  262.335160][T14254] vxfs: WRONG superblock magic 00000000 at 8
[  262.340702][T14254] vxfs: can't find superblock.
[  262.701526][T14284] netlink: 'syz.2.2347': attribute type 10 has an invalid length.
[  262.704914][T14284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2347'.
[  262.780212][T14284] team0: Port device geneve0 added
[  262.866289][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  262.872301][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  262.876418][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  262.887059][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  262.893351][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  262.929167][T14296] delete_channel: no stack
[  262.966305][T14294] wg0 speed is unknown, defaulting to 1000
[  263.062573][ T8878] hsr_slave_0: left promiscuous mode
[  263.065240][ T8878] hsr_slave_1: left promiscuous mode
[  263.090592][ T8878] team0 (unregistering): Port device vlan2 removed
[  263.151629][   T50] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  263.303199][   T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.308513][   T50] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  263.314295][   T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.324180][T14325] netlink: 'syz.5.2357': attribute type 322 has an invalid length.
[  263.325804][   T50] usb 9-1: config 0 descriptor??
[  263.491588][T14294] chnl_net:caif_netlink_parms(): no params data found
[  263.539252][   T50] usbhid 9-1:0.0: can't add hid device: -71
[  263.542120][   T50] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  263.546374][   T50] usb 9-1: USB disconnect, device number 11
[  263.574573][T14294] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.577699][T14294] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.580642][T14294] bridge_slave_0: entered allmulticast mode
[  263.584344][T14294] bridge_slave_0: entered promiscuous mode
[  263.588390][T14294] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.592277][T14294] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.595415][T14294] bridge_slave_1: entered allmulticast mode
[  263.598641][T14294] bridge_slave_1: entered promiscuous mode
[  263.601947][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout
[  263.623434][T14294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.629994][T14294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.650201][T14294] team0: Port device team_slave_0 added
[  263.653564][T14294] team0: Port device team_slave_1 added
[  263.680731][T14294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.685049][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.695832][T14294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.703897][T14294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.708059][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.720934][T14294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.781003][T14294] hsr_slave_0: entered promiscuous mode
[  263.783919][T14294] hsr_slave_1: entered promiscuous mode
[  263.786837][T14294] debugfs: 'hsr0' already exists in 'hsr'
[  263.788653][T14294] Cannot create hsr debugfs directory
[  263.795948][T14351] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  263.798332][T14351] overlayfs: failed to set xattr on upper
[  263.800504][T14351] overlayfs: ...falling back to redirect_dir=nofollow.
[  263.803400][T14351] overlayfs: ...falling back to metacopy=off.
[  263.805688][T14351] overlayfs: ...falling back to index=off.
[  263.808583][T14351] overlayfs: ...falling back to uuid=null.
[  263.863119][T14294] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.883973][ T8878] IPVS: stop unused estimator thread 0...
[  263.911908][T14353] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001
[  263.953103][T14294] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.981515][ T7275] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  264.079657][T14294] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.110237][T14358] QAT: Stopping all acceleration devices.
[  264.162658][ T7275] usb 9-1: Using ep0 maxpacket: 32
[  264.167490][ T7275] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.171028][ T7275] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  264.174247][ T7275] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.178865][ T7275] usb 9-1: config 0 descriptor??
[  264.185651][ T7275] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  264.191263][ T7275] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  264.321496][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout
[  264.366214][T14294] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.379947][   T34] wg0 speed is unknown, defaulting to 1000
[  264.382841][   T34] syz2: Port: 1 Link DOWN
[  264.590312][   T24] usb 9-1: USB disconnect, device number 12
[  264.600470][ T8878] tipc: Resetting bearer <eth:gre0>
[  264.602554][   T24] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  264.711557][   T34] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  264.724616][ T8878] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  264.767482][ T8878] bond5 (unregistering): (slave ip6gre1): Releasing backup interface
[  264.774107][ T8878] ip6gre1 (unregistering): left promiscuous mode
[  264.841506][   T34] usb 10-1: device descriptor read/64, error -71
[  264.851598][ T8878] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  264.892516][ T8878] ip6gretap0 (unregistering): left allmulticast mode
[  264.943695][ T8878] tipc: Disabling bearer <eth:gre0>
[  264.961659][ T5941] Bluetooth: hci0: command tx timeout
[  265.111241][   T34] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  265.238589][T14380] IPv6: NLM_F_CREATE should be specified when creating new route
[  265.251662][   T34] usb 10-1: device descriptor read/64, error -71
[  265.278912][ T8878] bond1 (unregistering): Released all slaves
[  265.289626][ T8878] bond2 (unregistering): Released all slaves
[  265.301239][ T8878] bond3 (unregistering): Released all slaves
[  265.310392][ T8878] bond4 (unregistering): Released all slaves
[  265.320774][ T8878] bond5 (unregistering): Released all slaves
[  265.329909][ T8878] bond6 (unregistering): (slave veth3): Releasing active interface
[  265.361913][   T34] usb usb10-port1: attempt power cycle
[  265.368107][ T8878] bond6 (unregistering): Released all slaves
[  265.377968][ T8878] bond7 (unregistering): Released all slaves
[  265.385610][ T8878] bond0 (unregistering): Released all slaves
[  265.401224][ T8878] bond8 (unregistering): Released all slaves
[  265.411177][ T8878] bond9 (unregistering): Released all slaves
[  265.450050][T14388] 9pnet_virtio: no channels available for device ./file0
[  265.459954][T14388] netlink: 'syz.2.2376': attribute type 8 has an invalid length.
[  265.488592][T14294] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  265.493615][T14294] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  265.499746][T14294] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  265.505627][T14294] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  265.530014][T14393] futex_wake_op: syz.2.2376 tries to shift op by -1; fix this program
[  265.581876][ T8878] tipc: Left network mode
[  265.589296][T14294] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.613818][T14294] 8021q: adding VLAN 0 to HW filter on device team0
[  265.620491][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.623826][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.641174][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.643561][ T8875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.681906][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout
[  265.685536][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2379'.
[  265.712627][   T34] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  265.733773][   T34] usb 10-1: device descriptor read/8, error -71
[  265.766260][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'.
[  265.847647][T14294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.974769][T14420] netlink: 'syz.4.2383': attribute type 21 has an invalid length.
[  265.982163][   T34] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  265.985824][T14420] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2383'.
[  265.993727][T14420] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2383'.
[  266.004184][T14420] netlink: 'syz.4.2383': attribute type 21 has an invalid length.
[  266.006355][T14294] veth0_vlan: entered promiscuous mode
[  266.007807][T14420] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2383'.
[  266.015241][T14420] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2383'.
[  266.019474][   T34] usb 10-1: device descriptor read/8, error -71
[  266.023265][T14294] veth1_vlan: entered promiscuous mode
[  266.063997][T14294] veth0_macvtap: entered promiscuous mode
[  266.074488][T14294] veth1_macvtap: entered promiscuous mode
[  266.091752][T14294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.108146][T14294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.122001][   T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.125894][   T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.132173][   T34] usb usb10-port1: unable to enumerate USB device
[  266.345434][   T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.349323][   T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.415674][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout
[  266.458933][T14430] loop6: detected capacity change from 0 to 8
[  266.473349][ T8872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.481285][ T8872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.618372][ T8876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.623216][ T8876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.627437][T14437] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  266.774561][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  266.774621][   T40] audit: type=1400 audit(1775536581.496:833): avc:  denied  { getopt } for  pid=14440 comm="syz.4.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  266.787189][   T40] audit: type=1400 audit(1775536581.496:834): avc:  denied  { ioctl } for  pid=14440 comm="syz.4.2390" path="socket:[59455]" dev="sockfs" ino=59455 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  266.796612][T14450] nfs: Unknown parameter '/selinux/avc/cache_stats'
[  266.836281][ T5941] block nbd1: Receive control failed (result -107)
[  266.843835][T14452] xt_NFQUEUE: number of total queues is 0
[  266.846434][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'.
[  266.884761][ T8878] hsr_slave_0: left promiscuous mode
[  266.887972][ T8878] hsr_slave_1: left promiscuous mode
[  266.896275][ T8878] veth1_macvtap: left promiscuous mode
[  266.898422][ T8878] veth0_macvtap: left promiscuous mode
[  266.900602][ T8878] veth1_vlan: left promiscuous mode
[  266.913724][T13504] block nbd1: shutting down sockets
[  266.953267][ T8878] pimreg9 (unregistering): left allmulticast mode
[  267.041829][ T5941] Bluetooth: hci0: command tx timeout
[  267.248199][T14473] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  267.303818][T14480] binder: 14478:14480 ioctl c0306201 2000000003c0 returned -14
[  267.304182][T14482] fuse: Bad value for 'fd'
[  267.372355][   T40] audit: type=1326 audit(1775536582.126:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.4.2400" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb05d79c819 code=0x0
[  267.419634][T14489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2401'.
[  267.448371][T14489] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2401'.
[  267.459635][T14489] /dev/sg0: Can't lookup blockdev
[  267.584663][T14502] sock: sock_timestamping_bind_phc: sock not bind to device
[  267.624070][T14507] binder: 14506:14507 ioctl c0306201 2000000004c0 returned -14
[  267.627143][T14507] binder_alloc: 14506: binder_alloc_buf, no vma
[  267.687211][T14511] netlink: 'syz.1.2405': attribute type 1 has an invalid length.
[  267.708191][T14514] openvswitch: netlink: Duplicate or invalid key (type 0).
[  267.710959][T14514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.764538][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout
[  267.766551][ T8878] IPVS: stop unused estimator thread 0...
[  267.772298][T14511] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2405'.
[  267.778149][T14511] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2405'.
[  267.876374][   T40] audit: type=1400 audit(1775536582.626:836): avc:  denied  { read } for  pid=14506 comm="syz.5.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  268.106846][T14541] input: syz1 as /devices/virtual/input/input31
[  268.326543][   T40] audit: type=1400 audit(1775536583.076:837): avc:  denied  { getopt } for  pid=14565 comm="syz.1.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  268.347316][T14570] tls_set_device_offload: netdev not found
[  268.395681][   T40] audit: type=1400 audit(1775536583.146:838): avc:  denied  { setcheckreqprot } for  pid=14572 comm="syz.2.2416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  268.412815][T14573] netlink: 'syz.2.2416': attribute type 1 has an invalid length.
[  268.434123][T14573] bond2: entered promiscuous mode
[  268.436662][T14573] 8021q: adding VLAN 0 to HW filter on device bond2
[  268.453265][   T40] audit: type=1400 audit(1775536583.206:839): avc:  denied  { ioctl } for  pid=14578 comm="syz.1.2418" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  268.471522][   T40] audit: type=1400 audit(1775536583.206:840): avc:  denied  { append } for  pid=14578 comm="syz.1.2418" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  268.481641][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout
[  268.487792][T14573] support for the xor transformation has been removed.
[  268.513108][T14573] macvtap1: entered allmulticast mode
[  268.527882][T14573] bond2: (slave bridge1): making interface the new active one
[  268.531282][T14573] bridge1: entered promiscuous mode
[  268.540515][T14573] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  268.593610][T14574] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  268.628756][    C1] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  268.632685][    C1] sd 0:0:0:0: [sda] tag#14 CDB: Test Unit Ready 
[  268.649550][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2423'.
[  268.689274][T14606] x_tables: duplicate underflow at hook 3
[  268.786699][T14617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2430'.
[  268.829127][T14618] netlink: 'syz.5.2429': attribute type 39 has an invalid length.
[  268.981914][ T6025] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  269.111855][ T6025] usb 6-1: device descriptor read/64, error -71
[  269.115317][T14634] netlink: 'syz.5.2437': attribute type 3 has an invalid length.
[  269.121594][ T5941] Bluetooth: hci0: command tx timeout
[  269.351470][ T6025] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  269.409098][T14644] Bluetooth: MGMT ver 1.23
[  269.413243][T14643] fuse: Bad value for 'fd'
[  269.416046][   T40] audit: type=1400 audit(1775536584.166:841): avc:  denied  { read } for  pid=14642 comm="syz.4.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  269.501650][ T6025] usb 6-1: device descriptor read/64, error -71
[  269.621720][ T6025] usb usb6-port1: attempt power cycle
[  269.971462][ T6025] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  269.992263][ T6025] usb 6-1: device descriptor read/8, error -71
[  270.241506][ T6025] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  270.252568][T14658] program syz.5.2443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  270.262173][ T6025] usb 6-1: device descriptor read/8, error -71
[  270.281846][   T40] audit: type=1400 audit(1775536585.026:842): avc:  denied  { mount } for  pid=14663 comm="syz.4.2445" name="/" dev="autofs" ino=61507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  270.377318][ T6025] usb usb6-port1: unable to enumerate USB device
[  270.388445][T14670] netlink: 'syz.5.2447': attribute type 22 has an invalid length.
[  270.391434][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2447'.
[  270.395708][T14670] netlink: 'syz.5.2447': attribute type 22 has an invalid length.
[  270.399261][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2447'.
[  270.453953][T14673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2448'.
[  270.457249][T14673] netlink: 'syz.5.2448': attribute type 7 has an invalid length.
[  270.459910][T14673] netlink: 'syz.5.2448': attribute type 8 has an invalid length.
[  270.463087][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2448'.
[  270.517570][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2450'.
[  270.527697][T14682] MPI: mpi too large (16392 bits)
[  270.532226][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'.
[  270.562020][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout
[  270.706544][T14694] fuse: Bad value for 'fd'
[  270.905295][T14708] : entered promiscuous mode
[  271.202947][ T5941] Bluetooth: hci0: command tx timeout
[  271.464892][T14757] fuse: Bad value for 'fd'
[  271.611126][T14770] CIFS mount error: No usable UNC path provided in device string!
[  271.611126][T14770] 
[  271.616068][T14770] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  271.624130][T14770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=14770 comm=syz.5.2475
[  271.784123][T14776] KVM: debugfs: duplicate directory 14776-4
[  271.784440][T14774] input: syz0 as /devices/virtual/input/input32
[  272.091010][T14785] fuse: Bad value for 'fd'
[  272.518782][T14838] "syz.2.2493" (14838) uses obsolete ecb(arc4) skcipher
[  272.822742][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  272.822755][T14867] __nla_validate_parse: 7 callbacks suppressed
[  272.822766][T14867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2504'.
[  272.822763][   T40] audit: type=1804 audit(1775536587.566:844): pid=14868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2503" name="bus" dev="ramfs" ino=60021 res=1 errno=0
[  272.825595][   T40] audit: type=1804 audit(1775536587.576:845): pid=14868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2503" name="bus" dev="ramfs" ino=60021 res=1 errno=0
[  272.864057][T14870] openvswitch: netlink: Duplicate or invalid key (type 0).
[  272.867720][T14870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.226221][T14891] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  273.234342][T14891] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  273.288320][T14900] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2513'.
[  273.327344][T14905] syzkaller0: entered promiscuous mode
[  273.330452][T14905] syzkaller0: entered allmulticast mode
[  273.346764][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'.
[  273.349771][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'.
[  273.354124][T14907] netlink: 'syz.1.2515': attribute type 20 has an invalid length.
[  273.361081][ T8872] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.364248][ T8872] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.367469][ T8872] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  273.370607][ T8872] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  273.374483][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'.
[  273.378091][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'.
[  273.381284][T14907] netlink: 'syz.1.2515': attribute type 20 has an invalid length.
[  273.409504][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'.
[  273.413716][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'.
[  273.417588][T14907] netlink: 'syz.1.2515': attribute type 20 has an invalid length.
[  273.422662][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'.
[  273.426759][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'.
[  273.430772][T14907] netlink: 'syz.1.2515': attribute type 20 has an invalid length.
[  273.688242][T14919] netlink: 'syz.1.2518': attribute type 4 has an invalid length.
[  273.855408][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout
[  273.861948][ T6019] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  273.864387][ T6019] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  273.919357][T14926] program syz.1.2520 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  273.980333][   T40] audit: type=1400 audit(1775536588.726:846): avc:  denied  { write } for  pid=14925 comm="syz.1.2520" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  273.989589][   T40] audit: type=1400 audit(1775536588.726:847): avc:  denied  { ioctl } for  pid=14925 comm="syz.1.2520" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  274.162701][T14947] netlink: 'syz.1.2526': attribute type 21 has an invalid length.
[  274.971054][T14963] veth1_macvtap: left promiscuous mode
[  274.974387][T14963] macsec0: entered allmulticast mode
[  274.979930][T14963] veth1_macvtap: entered promiscuous mode
[  274.982249][T14963] veth1_macvtap: entered allmulticast mode
[  274.986500][T14963] macsec0: left allmulticast mode
[  274.988604][T14963] veth1_macvtap: left allmulticast mode
[  274.997778][T14963] netlink: 'syz.4.2531': attribute type 10 has an invalid length.
[  275.003318][T14963] team0: Port device dummy0 added
[  275.004359][T14963] netlink: 'syz.4.2531': attribute type 10 has an invalid length.
[  275.013960][T14963] team0: Port device dummy0 removed
[  275.018326][T14963] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  275.025650][T14963] overlayfs: failed lookup in lower (newroot/95, name='file0', err=-40): overlapping layers
[  275.886445][T14999] bridge_slave_0: left allmulticast mode
[  275.888344][T14999] bridge_slave_0: left promiscuous mode
[  275.890282][T14999] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.909143][T14999] bridge_slave_1: left allmulticast mode
[  275.917095][T14999] bridge_slave_1: left promiscuous mode
[  275.920249][T14999] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.936194][T14999] bond0: (slave bond_slave_0): Releasing backup interface
[  275.975224][T14999] bond0: (slave bond_slave_1): Releasing backup interface
[  276.019476][T14999] team0: Port device team_slave_0 removed
[  276.025906][T14999] team0: Port device team_slave_1 removed
[  276.029594][T14999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.033494][T14999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.037196][T14999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.039575][T14999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.044881][T15010] netlink: 'syz.5.2543': attribute type 63 has an invalid length.
[  276.046442][T14999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  276.081636][T15000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  276.104655][T15010] gretap0: entered allmulticast mode
[  276.107640][T15010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  276.171493][ T6019] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  276.173617][ T6019] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  276.176447][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout
[  276.184525][T15026] block nbd0: Unsupported socket: should be TCP or UNIX.
[  276.451530][   T34] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  276.568998][T15032] xt_socket: unknown flags 0xc
[  276.621479][   T34] usb 6-1: Using ep0 maxpacket: 8
[  276.627199][   T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  276.630966][   T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  276.635848][   T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  276.639872][   T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  276.645258][   T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  276.650569][   T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  276.654985][   T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.658664][T15034] Cannot find del_set index 4 as target
[  276.734644][T15038] netlink: ct family unspecified
[  276.883968][   T34] usb 6-1: usb_control_msg returned -32
[  276.886436][   T34] usbtmc 6-1:16.0: can't read capabilities
[  277.285586][T15085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.446992][T15100] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55 sclass=netlink_xfrm_socket pid=15100 comm=syz.4.2569
[  277.493678][   T40] audit: type=1400 audit(1775536592.246:848): avc:  denied  { mounton } for  pid=15090 comm="syz.2.2568" path="/62/file0/file0" dev="9p" ino=79691997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  277.493693][T15091] fuse: Bad value for 'fd'
[  277.583479][T15110] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  277.594408][T15114] usbtmc 6-1:16.0: usb_clear_halt returned -32
[  277.650402][T15114] dvmrp0: entered allmulticast mode
[  277.658754][   T24] usb 6-1: USB disconnect, device number 26
[  277.754079][T15118] openvswitch: netlink: IP tunnel TTL not specified.
[  277.855918][T15124] __nla_validate_parse: 10 callbacks suppressed
[  277.855941][T15124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2576'.
[  278.063282][T15137] bridge0: Device is already in use.
[  278.170753][T15139] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2580'.
[  278.173937][T15139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2580'.
[  278.374883][T15157] netlink: 'syz.1.2587': attribute type 2 has an invalid length.
[  278.386361][T15154] sp0: Synchronizing with TNC
[  278.425411][   T40] audit: type=1326 audit(1775536593.176:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.2.2583" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d939c819 code=0x7ffc0000
[  278.434502][   T40] audit: type=1326 audit(1775536593.176:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.2.2583" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59d935d04e code=0x7ffc0000
[  278.444385][   T40] audit: type=1326 audit(1775536593.176:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.2.2583" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d939c819 code=0x7ffc0000
[  278.452380][   T40] audit: type=1326 audit(1775536593.176:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.2.2583" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59d939c819 code=0x7ffc0000
[  278.461442][   T40] audit: type=1326 audit(1775536593.176:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.2.2583" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d939c819 code=0x7ffc0000
[  278.469625][   T40] audit: type=1326 audit(1775536593.176:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.2.2583" exe="/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f59d939c819 code=0x7ffc0000
[  278.477623][   T40] audit: type=1326 audit(1775536593.176:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.2.2583" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d939c819 code=0x7ffc0000
[  278.493747][   T40] audit: type=1400 audit(1775536593.246:856): avc:  denied  { read } for  pid=15156 comm="syz.1.2587" name="file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  278.503175][T15157] 9p: Unknown uid 00000000004294967295
[  278.509169][   T40] audit: type=1400 audit(1775536593.246:857): avc:  denied  { open } for  pid=15156 comm="syz.1.2587" path="/36/file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  278.511802][T15157] openvswitch: netlink: Key type 121 is out of range max 32
[  278.531660][T15167] tmpfs: Bad value for 'nr_blocks'
[  278.540608][T15171] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  278.561634][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout
[  278.564010][ T6019] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  278.566115][ T6019] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  278.684791][T15180] netlink: set zone limit has 4 unknown bytes
[  278.736267][T15187] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2595'.
[  278.775815][T15190] fuse: Unknown parameter 'r0P\‚Zg÷Ç*1w0000000000e±000040000'
[  278.775816][T15191] fuse: Unknown parameter 'r0P\‚Zg÷Ç*1w0000000000e±000040000'
[  279.012733][T15221] netlink: 'syz.4.2603': attribute type 1 has an invalid length.
[  279.057174][T15222] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  279.101872][T15230] overlay: ./file0 is not a directory
[  279.105895][T15232] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2606'.
[  279.129206][T15222] veth3: entered promiscuous mode
[  279.132550][T15222] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  279.135744][T15232] bond0: entered allmulticast mode
[  279.189197][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'.
[  279.195820][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2608'.
[  279.234690][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'.
[  279.290792][   T40] audit: type=1400 audit(1775536594.036:858): avc:  denied  { bind } for  pid=15262 comm="syz.5.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  279.322229][T15251] input: syz0 as /devices/virtual/input/input34
[  279.348634][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2617'.
[  279.487507][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'.
[  279.574548][T15304] xt_hashlimit: size too large, truncated to 1048576
[  279.763781][T15315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  279.778046][T15322] nfs4: Unknown parameter '
§'
[  279.962229][T15327] 
[  279.985552][T15343] XFS (loop5): SB validate failed with error -5.
[  280.045592][ T1290] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[  280.072802][T15364] Cannot find add_set index 65532 as target
[  280.078609][T15361] netlink: 'syz.4.2641': attribute type 1 has an invalid length.
[  280.087374][T15361] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  280.339987][T15404] Sensor A: =================  START STATUS  =================
[  280.346633][T15404] Sensor A: Test Pattern: 75% Colorbar
[  280.349385][T15404] Sensor A: Show Information: All
[  280.353356][T15404] Sensor A: Vertical Flip: false
[  280.355367][T15404] Sensor A: Horizontal Flip: false
[  280.357376][T15404] Sensor A: Brightness: 128
[  280.358930][T15404] Sensor A: Contrast: 128
[  280.360592][T15404] Sensor A: Hue: 0
[  280.363183][T15404] Sensor A: Saturation: 128
[  280.365452][T15404] Sensor A: ==================  END STATUS  ==================
[  280.475553][T15416] binder: BINDER_SET_CONTEXT_MGR already set
[  280.477960][T15416] binder: 15415:15416 ioctl 4018620d 2000000000c0 returned -16
[  280.481920][T15416] binder: BINDER_SET_CONTEXT_MGR already set
[  280.484131][T15416] binder: 15415:15416 ioctl 4018620d 2000000000c0 returned -16
[  280.484475][T15418] binder: 15415:15418 unknown command 0
[  280.486688][T15416] binder: BINDER_SET_CONTEXT_MGR already set
[  280.491461][T15418] binder: 15415:15418 ioctl c0306201 200000000080 returned -22
[  280.493240][T15416] binder: 15415:15416 ioctl 4018620d 2000000000c0 returned -16
[  280.833439][T15437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.965935][T15446] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 11 out of range (51000000..2150000000)
[  281.058142][T15455] /dev/sr0: Can't lookup blockdev
[  281.090486][ T9809] libceph: connect (1)[c::]:6789 error -101
[  281.096629][ T9809] libceph: mon0 (1)[c::]:6789 connect error
[  281.099843][ T9809] libceph: connect (1)[c::]:6789 error -101
[  281.102270][ T9809] libceph: mon0 (1)[c::]:6789 connect error
[  281.308781][T15482] bpf: Bad value for 'uid'
[  281.364809][ T9809] libceph: connect (1)[c::]:6789 error -101
[  281.367528][ T9809] libceph: mon0 (1)[c::]:6789 connect error
[  281.611477][   T24] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  281.761441][   T24] usb 10-1: Using ep0 maxpacket: 8
[  281.766609][   T24] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.770293][   T24] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.775088][   T24] usb 10-1: config 0 interface 0 has no altsetting 0
[  281.778085][   T24] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  281.781138][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.787805][   T24] usb 10-1: config 0 descriptor??
[  281.871840][ T9809] libceph: connect (1)[c::]:6789 error -101
[  281.873964][ T9809] libceph: mon0 (1)[c::]:6789 connect error
[  281.889401][T15455] ceph: No mds server is up or the cluster is laggy
[  281.943790][T15503] ieee802154 phy0 wpan0: encryption failed: -22
[  282.202481][   T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  282.205445][   T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  282.218503][   T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  282.221460][   T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  282.224649][   T24] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  282.228370][   T24] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  282.327339][T15528] Invalid logical block size (536872960)
[  282.404231][T15536] sctp: Trying to GSO but underlying device doesn't support it.
[  282.406017][ T6025] usb 10-1: USB disconnect, device number 12
[  282.575915][T15546] openvswitch: netlink: Flow actions attr not present in new flow.
[  283.003284][T15565] __nla_validate_parse: 6 callbacks suppressed
[  283.003305][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'.
[  283.250468][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2708'.
[  283.253791][T15583] openvswitch: netlink: nsh attr 8 is out of range max 3
[  283.397397][T15606] netlink: 'syz.5.2710': attribute type 9 has an invalid length.
[  283.400887][T15606] netlink: 'syz.5.2710': attribute type 11 has an invalid length.
[  283.405221][T15606] netlink: 'syz.5.2710': attribute type 12 has an invalid length.
[  283.409014][T15606] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2710'.
[  283.416707][T15597] netlink: 'syz.2.2713': attribute type 4 has an invalid length.
[  283.499191][T15599] block nbd2: shutting down sockets
[  283.712286][T15620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2717'.
[  283.720899][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2717'.
[  283.774176][T15626] 9p: Bad value for 'rfdno'
[  283.833137][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2721'.
[  283.872719][T15635] fuse: Bad value for 'fd'
[  283.873485][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2721'.
[  283.887421][T15628] vlan2: entered allmulticast mode
[  283.889242][T15628] bridge3: entered allmulticast mode
[  283.892691][T15628] bridge3: port 1(erspan0) entered blocking state
[  283.896917][T15628] bridge3: port 1(erspan0) entered disabled state
[  283.899235][T15628] erspan0: entered allmulticast mode
[  283.902666][T15628] erspan0: entered promiscuous mode
[  283.905113][T15628] bridge3: port 1(erspan0) entered blocking state
[  283.907377][T15628] bridge3: port 1(erspan0) entered forwarding state
[  284.031728][ T5981] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  284.067650][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2727'.
[  284.099689][T15643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15643 comm=syz.1.2727
[  284.099702][T15644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15644 comm=syz.1.2727
[  284.153592][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  284.153611][   T40] audit: type=1400 audit(1775536598.906:873): avc:  denied  { watch watch_reads } for  pid=15648 comm="syz.1.2729" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=3118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  284.161858][ T5981] usb 7-1: device descriptor read/64, error -71
[  284.312226][T15661] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  284.322293][T15661] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  284.368703][T15667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15667 comm=syz.1.2736
[  284.421718][ T5981] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  284.467611][   T40] audit: type=1400 audit(1775536599.216:874): avc:  denied  { write } for  pid=15671 comm="syz.5.2737" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  284.536509][   T40] audit: type=1400 audit(1775536599.286:875): avc:  denied  { block_suspend } for  pid=15675 comm="syz.1.2739" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  284.553475][ T5981] usb 7-1: device descriptor read/64, error -71
[  284.570557][T15684] overlayfs: failed to get inode (-116)
[  284.577783][T15683] overlayfs: failed to get inode (-116)
[  284.579852][T15683] overlayfs: failed to get inode (-116)
[  284.582425][T15684] overlayfs: failed to get inode (-116)
[  284.585854][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2741'.
[  284.589506][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2741'.
[  284.597852][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  284.604237][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  284.608705][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  284.613318][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  284.617280][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  284.617875][ T9619] overlayfs: failed to get inode (-116)
[  284.623147][ T9619] overlayfs: failed to get inode (-116)
[  284.625473][ T9619] overlayfs: failed to get inode (-116)
[  284.629527][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  284.629588][ T9619] overlayfs: failed to get inode (-116)
[  284.638762][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  284.646362][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  284.660428][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  284.671062][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  284.671701][ T5981] usb usb7-port1: attempt power cycle
[  284.706615][ T8876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.716526][T15690] random: crng reseeded on system resumption
[  284.835871][ T8876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.846187][T15699] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  284.940454][ T8876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.974027][T15685] chnl_net:caif_netlink_parms(): no params data found
[  285.032145][ T5981] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  285.041309][ T8876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.053203][ T5981] usb 7-1: device descriptor read/8, error -71
[  285.074326][T15685] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.078256][T15685] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.082684][T15685] bridge_slave_0: entered allmulticast mode
[  285.086766][T15685] bridge_slave_0: entered promiscuous mode
[  285.090343][T15685] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.093015][T15685] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.095573][T15685] bridge_slave_1: entered allmulticast mode
[  285.098509][T15685] bridge_slave_1: entered promiscuous mode
[  285.128502][T15685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.153375][T15685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.179351][T15685] team0: Port device team_slave_0 added
[  285.180963][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  285.188669][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  285.191627][T15685] team0: Port device team_slave_1 added
[  285.201668][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  285.205985][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  285.209478][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  285.209737][T15685] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.214915][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.225447][T15685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.231119][T15685] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.240211][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.248878][T15685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.251506][ T7275] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  285.311439][ T5981] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  285.331849][ T5981] usb 7-1: device descriptor read/8, error -71
[  285.354987][T15685] hsr_slave_0: entered promiscuous mode
[  285.357428][T15685] hsr_slave_1: entered promiscuous mode
[  285.407686][ T8876] bridge_slave_1: left allmulticast mode
[  285.410014][ T8876] bridge_slave_1: left promiscuous mode
[  285.414234][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.418663][ T8876] bridge_slave_0: left allmulticast mode
[  285.420480][ T8876] bridge_slave_0: left promiscuous mode
[  285.421743][ T7275] usb 6-1: Using ep0 maxpacket: 16
[  285.423060][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.425632][ T7275] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  285.432269][ T7275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.436765][ T7275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.441519][ T7275] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  285.443961][ T5981] usb usb7-port1: unable to enumerate USB device
[  285.447363][ T7275] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  285.453875][ T7275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.459573][ T7275] usb 6-1: config 0 descriptor??
[  285.609306][ T8876] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  285.612942][ T8876] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 06:39:b9:fe:a3:20 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  285.782948][ T8876] bond1 (unregistering): (slave bond0): Releasing active interface
[  285.815323][ T8876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.853409][ T8876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.878136][ T7275] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.000A/input/input35
[  285.904088][ T8876] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  285.934617][ T8876] bond0 (unregistering): Released all slaves
[  285.944038][ T8876] bond1 (unregistering): Released all slaves
[  285.953630][ T7275] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.000A/input/input36
[  285.976509][ T8876] bond2 (unregistering): (slave veth3): Releasing backup interface
[  285.991195][ T7275] kye 0003:0458:5013.000A: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0
[  286.004719][ T8876] bond2 (unregistering): Released all slaves
[  286.014842][ T8876] bond3 (unregistering): Released all slaves
[  286.107528][T15712] netlink: 'syz.1.2749': attribute type 19 has an invalid length.
[  286.145402][T15717] chnl_net:caif_netlink_parms(): no params data found
[  286.252144][T15717] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.254676][T15717] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.257258][T15717] bridge_slave_0: entered allmulticast mode
[  286.260600][T15717] bridge_slave_0: entered promiscuous mode
[  286.302469][T15717] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.304816][T15717] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.307246][T15717] bridge_slave_1: entered allmulticast mode
[  286.310460][T15717] bridge_slave_1: entered promiscuous mode
[  286.325578][ T5981] usb 6-1: USB disconnect, device number 27
[  286.351171][T15717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.358457][T15717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.414114][ T8876] hsr_slave_0: left promiscuous mode
[  286.416600][ T8876] hsr_slave_1: left promiscuous mode
[  286.418710][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.421026][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.424199][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.426621][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.431031][ T8876] veth1_macvtap: left promiscuous mode
[  286.433774][ T8876] veth0_macvtap: left promiscuous mode
[  286.435705][ T8876] veth1_vlan: left promiscuous mode
[  286.437430][ T8876] veth0_vlan: left promiscuous mode
[  286.605522][ T8876] team0 (unregistering): Port device team_slave_1 removed
[  286.614612][ T8876] team0 (unregistering): Port device team_slave_0 removed
[  286.721508][ T5293] Bluetooth: hci2: command tx timeout
[  286.739955][T15717] team0: Port device team_slave_0 added
[  286.752819][T15717] team0: Port device team_slave_1 added
[  286.777354][T15717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.788380][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.803501][T15717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.809968][T15717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.814185][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.825197][T15717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.904599][T15717] hsr_slave_0: entered promiscuous mode
[  286.908182][T15717] hsr_slave_1: entered promiscuous mode
[  286.911675][T15717] debugfs: 'hsr0' already exists in 'hsr'
[  286.914398][T15717] Cannot create hsr debugfs directory
[  287.071837][   T40] audit: type=1400 audit(1775536601.826:876): avc:  denied  { setopt } for  pid=15744 comm="syz.1.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  287.099445][T15685] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  287.113131][T15685] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  287.129545][T15685] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  287.154645][T15685] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  287.244169][T15717] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  287.292361][ T5293] Bluetooth: hci1: command tx timeout
[  287.302368][   T40] audit: type=1400 audit(1775536602.046:877): avc:  denied  { create } for  pid=15762 comm="syz.1.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  287.305049][T15717] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  287.316627][T15717] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  287.317984][   T40] audit: type=1400 audit(1775536602.046:878): avc:  denied  { setopt } for  pid=15762 comm="syz.1.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  287.326303][   T40] audit: type=1400 audit(1775536602.046:879): avc:  denied  { write } for  pid=15762 comm="syz.1.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  287.331314][ T8876] IPVS: stop unused estimator thread 0...
[  287.343789][T15717] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  287.363140][   T40] audit: type=1400 audit(1775536602.116:880): avc:  denied  { create } for  pid=15717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  287.373998][   T40] audit: type=1400 audit(1775536602.116:881): avc:  denied  { write } for  pid=15717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  287.384714][   T40] audit: type=1400 audit(1775536602.116:882): avc:  denied  { read } for  pid=15717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  287.436764][T15685] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.456918][T15685] 8021q: adding VLAN 0 to HW filter on device team0
[  287.461986][T15717] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.471125][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.473553][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.485453][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.488220][ T8878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.506789][T15717] 8021q: adding VLAN 0 to HW filter on device team0
[  287.516247][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.518712][ T8874] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.527892][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.530254][ T8874] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.786802][ T8876] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  287.790526][ T8876] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.857555][T15788] erspan1: entered allmulticast mode
[  287.903716][ T8876] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  287.907636][ T8876] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.917203][T15797] bond0: (slave bond_slave_1): Releasing backup interface
[  287.983167][ T8876] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  287.987646][ T8876] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.005998][T15797] random: crng reseeded on system resumption
[  288.017291][T15685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.025893][T15717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.088706][ T8876] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.093559][ T8876] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.272236][T15685] veth0_vlan: entered promiscuous mode
[  288.280074][T15717] veth0_vlan: entered promiscuous mode
[  288.305778][T15685] veth1_vlan: entered promiscuous mode
[  288.312721][T15717] veth1_vlan: entered promiscuous mode
[  288.360893][T15845] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  288.374360][T15845] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  288.379312][T15845] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  288.381121][ T8876] erspan0: left allmulticast mode
[  288.386023][ T8876] erspan0: left promiscuous mode
[  288.387998][ T8876] bridge3: port 1(erspan0) entered disabled state
[  288.480592][T15849] openvswitch: netlink: Missing valid actions attribute.
[  288.484378][T15849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.582337][T15852] __nla_validate_parse: 2 callbacks suppressed
[  288.582356][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'.
[  288.631215][ T8876] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  288.801600][ T5293] Bluetooth: hci2: command tx timeout
[  288.978597][ T8876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.044775][ T8876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.063465][ T8876] bond0 (unregistering): Released all slaves
[  289.071019][ T8876] bond1 (unregistering): Released all slaves
[  289.083109][ T8876] bond2 (unregistering): Released all slaves
[  289.094343][ T8876] bond3 (unregistering): Released all slaves
[  289.137246][T15685] veth0_macvtap: entered promiscuous mode
[  289.147669][T15717] veth0_macvtap: entered promiscuous mode
[  289.156752][T15685] veth1_macvtap: entered promiscuous mode
[  289.174575][T15717] veth1_macvtap: entered promiscuous mode
[  289.180725][ T8876] : left promiscuous mode
[  289.250187][T15685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.254158][T15717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.269896][T15685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.274293][T15717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.280720][T15858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.295982][ T8876] tipc: Left network mode
[  289.310993][ T8874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.316307][ T8874] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.319222][ T8874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.327912][ T8874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.331149][ T8874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.356879][ T8874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.360381][ T8874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.371159][ T8874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.372553][ T5293] Bluetooth: hci1: command tx timeout
[  289.480078][ T8874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.485796][ T8874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.497624][ T8878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.500162][ T8878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.571243][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.575340][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.584112][ T8874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.588889][ T8874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.659410][T15880] misc userio: Can't change port type on an already running userio instance
[  289.836542][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  289.836562][   T40] audit: type=1400 audit(1775536604.586:894): avc:  denied  { execute } for  pid=15890 comm="syz.6.2780" path=2F6D656D66643A9D23202864656C6574656429 dev="hugetlbfs" ino=66408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  289.852804][   T40] audit: type=1400 audit(1775536604.596:895): avc:  denied  { read } for  pid=15890 comm="syz.6.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  289.907340][ T8876] hsr_slave_0: left promiscuous mode
[  289.910158][ T8876] hsr_slave_1: left promiscuous mode
[  289.914365][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.916978][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.920479][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.923669][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.940196][ T8876] veth1_macvtap: left promiscuous mode
[  289.942359][ T8876] veth0_macvtap: left promiscuous mode
[  289.944211][ T8876] veth1_vlan: left promiscuous mode
[  289.946253][ T8876] veth0_vlan: left promiscuous mode
[  289.995296][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'.
[  289.995330][   T40] audit: type=1400 audit(1775536604.746:896): avc:  denied  { setopt } for  pid=15899 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  290.013412][   T40] audit: type=1400 audit(1775536604.746:897): avc:  denied  { write } for  pid=15899 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  290.021968][   T40] audit: type=1400 audit(1775536604.746:898): avc:  denied  { bind } for  pid=15899 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  290.057642][   T40] audit: type=1400 audit(1775536604.806:899): avc:  denied  { listen } for  pid=15906 comm="syz.2.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  290.171544][   T40] audit: type=1400 audit(1775536604.916:900): avc:  denied  { map } for  pid=15910 comm="syz.6.2785" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  290.223797][T15913] Bluetooth: MGMT ver 1.23
[  290.256190][T15916] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2786'.
[  290.891644][ T5293] Bluetooth: hci2: command tx timeout
[  290.952688][ T8876] team0 (unregistering): Port device team_slave_1 removed
[  290.960073][ T8876] team0 (unregistering): Port device team_slave_0 removed
[  291.038784][T15901] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  291.111044][T15924] netlink: 'syz.6.2789': attribute type 15 has an invalid length.
[  291.177394][T15920] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2787'.
[  291.343834][T15920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2787'.
[  291.423150][T15949] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  291.451944][ T5293] Bluetooth: hci1: command tx timeout
[  291.600829][ T8876] IPVS: stop unused estimator thread 0...
[  291.769692][   T40] audit: type=1400 audit(1775536606.516:901): avc:  denied  { create } for  pid=15975 comm="syz.6.2803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  291.879726][   T40] audit: type=1400 audit(1775536606.626:902): avc:  denied  { accept } for  pid=15990 comm="syz.6.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  291.910524][T15996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2807'.
[  291.912828][T15997] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  291.913626][T15996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2807'.
[  291.923770][T15996] erspan0: entered promiscuous mode
[  291.927205][T15996] erspan0: left promiscuous mode
[  292.055362][T16003] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  292.224750][T16014] comedi comedi1: ni_at_a2150: I/O port conflict (0x14f23,28)
[  292.416231][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2815'.
[  292.479055][T16027] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22
[  292.487518][T16027] hfs: can't find a HFS filesystem on dev sr0
[  292.523127][T16030] netlink: 'syz.1.2818': attribute type 15 has an invalid length.
[  292.526093][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'.
[  292.533654][T16024] xt_hashlimit: size too large, truncated to 1048576
[  292.537992][T16032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2819'.
[  292.539420][T16030] netlink: 'syz.1.2818': attribute type 15 has an invalid length.
[  292.544764][   T61] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  292.547893][   T61] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  292.550925][   T61] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  292.556356][   T61] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  292.724288][T16041] tun0: tun_chr_ioctl cmd 1074025675
[  292.726202][T16041] tun0: persist disabled
[  292.780698][   T40] audit: type=1400 audit(1775536607.526:903): avc:  denied  { shutdown } for  pid=16040 comm="syz.1.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  292.939416][T16057] IPv6: NLM_F_CREATE should be specified when creating new route
[  292.961500][ T5293] Bluetooth: hci2: command tx timeout
[  293.066509][T16080] binder_alloc: binder_alloc_mmap_handler: 16079 200000389000-20000038b000 already mapped failed -16
[  293.091619][T16082] xt_l2tp: v2 doesn't support IP mode
[  293.242862][T16093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16093 comm=syz.4.2838
[  293.260130][T16091] erofs (device loop1): cannot find valid erofs superblock
[  293.500303][T16104] f2fs: Unknown parameter 'usrquota0000000004'
[  293.531413][ T5293] Bluetooth: hci1: command tx timeout
[  293.630847][T16117] Invalid logical block size (-7)
[  293.741628][ T6019] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  293.833407][T16131] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  293.838243][T16131] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  293.881833][T16135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.911490][ T6019] usb 7-1: Using ep0 maxpacket: 8
[  293.915732][ T6019] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  293.921282][ T6019] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  293.926375][ T6019] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  293.931080][ T6019] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.936952][ T6019] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  293.939993][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.152370][ T6019] usb 7-1: GET_CAPABILITIES returned 0
[  294.154307][ T6019] usbtmc 7-1:16.0: can't read capabilities
[  294.362820][ T4731] usb 7-1: USB disconnect, device number 22
[  294.634531][T16174] bridge_slave_1: left allmulticast mode
[  294.636465][T16174] bridge_slave_1: left promiscuous mode
[  294.638690][T16174] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.645394][T16174] bridge_slave_0: left allmulticast mode
[  294.647353][T16174] bridge_slave_0: left promiscuous mode
[  294.649412][T16174] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.074627][ T8277] libceph: connect (1)[c::]:6789 error -101
[  295.076724][ T8277] libceph: mon0 (1)[c::]:6789 connect error
[  295.125655][T16200] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  295.275714][T16207] __nla_validate_parse: 3 callbacks suppressed
[  295.275775][T16207] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2874'.
[  295.341994][ T4731] libceph: connect (1)[c::]:6789 error -101
[  295.344452][ T4731] libceph: mon0 (1)[c::]:6789 connect error
[  295.352349][ T8277] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  295.531428][ T8277] usb 11-1: Using ep0 maxpacket: 8
[  295.537590][ T8277] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.542477][ T8277] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.551414][ T8277] usb 11-1: config 0 interface 0 has no altsetting 0
[  295.554513][ T8277] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  295.562297][ T8277] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.580824][ T8277] usb 11-1: config 0 descriptor??
[  295.862957][ T7275] libceph: connect (1)[c::]:6789 error -101
[  295.865297][ T7275] libceph: mon0 (1)[c::]:6789 connect error
[  295.901744][T16191] ceph: No mds server is up or the cluster is laggy
[  296.000693][ T8277] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  296.014690][ T8277] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  296.017984][ T8277] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  296.020529][ T8277] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  296.024886][ T8277] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  296.029993][ T8277] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  296.038329][T16219] overlayfs: failed to set uuid (16/file1, err=-1); falling back to uuid=null.
[  296.041657][T16219] overlayfs: failed to verify upper root origin
[  296.048751][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  296.048804][   T40] audit: type=1400 audit(1775536610.796:910): avc:  denied  { accept } for  pid=16218 comm="syz.4.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  296.100414][T16220] netlink: 'syz.4.2878': attribute type 10 has an invalid length.
[  296.203619][  T830] usb 11-1: USB disconnect, device number 2
[  296.902608][T16227] syzkaller0: entered promiscuous mode
[  296.904454][T16227] syzkaller0: entered allmulticast mode
[  297.051187][T16238] binder: 16236:16238 unknown command 0
[  297.055064][T16238] binder: 16236:16238 ioctl c0306201 200000000280 returned -22
[  297.061939][T16238] IPv6: sit1: Disabled Multicast RS
[  297.064193][T16238] sit1: entered allmulticast mode
[  297.288627][   T40] audit: type=1400 audit(1775536612.036:911): avc:  denied  { bind } for  pid=16214 comm="syz.2.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  297.376376][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'.
[  297.379151][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2890'.
[  297.443208][T16257] ip6gretap0: entered promiscuous mode
[  297.445835][T16257] macsec1: entered promiscuous mode
[  297.447843][T16257] macsec1: entered allmulticast mode
[  297.449831][T16257] ip6gretap0: entered allmulticast mode
[  297.489791][T16257] ip6gretap0: left allmulticast mode
[  297.493120][T16257] ip6gretap0: left promiscuous mode
[  297.584941][T16260] veth1_to_team: entered promiscuous mode
[  297.588621][T16259] veth1_to_team: left promiscuous mode
[  297.607460][T13504] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  297.720703][T16287] netlink: 186176 bytes leftover after parsing attributes in process `syz.2.2898'.
[  297.730754][T16287] netlink: 186176 bytes leftover after parsing attributes in process `syz.2.2898'.
[  297.751701][T16287] netlink: 186176 bytes leftover after parsing attributes in process `syz.2.2898'.
[  297.755762][T16287] netlink: 186176 bytes leftover after parsing attributes in process `syz.2.2898'.
[  297.760145][T16287] netlink: 186176 bytes leftover after parsing attributes in process `syz.2.2898'.
[  297.767079][T16287] netlink: 186176 bytes leftover after parsing attributes in process `syz.2.2898'.
[  297.770705][T16287] netlink: 186176 bytes leftover after parsing attributes in process `syz.2.2898'.
[  297.839681][T16289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62976 sclass=netlink_route_socket pid=16289 comm=syz.6.2897
[  297.843659][T13504] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  297.966765][T16297] netlink: 'syz.2.2900': attribute type 10 has an invalid length.
[  297.972379][T16297] veth0_macvtap: left promiscuous mode
[  298.039191][   T40] audit: type=1326 audit(1775536612.786:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.6.2901" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c399c819 code=0x0
[  298.071499][T16280] nbd0: detected capacity change from 0 to 127
[  298.078394][T13504] 
[  298.079229][T13504] ======================================================
[  298.079474][ T5941] block nbd0: Receive control failed (result -32)
[  298.079645][ T5293] block nbd0: Receive control failed (result -32)
[  298.079729][ T5937] block nbd0: Receive control failed (result -32)
[  298.081706][T13504] WARNING: possible circular locking dependency detected
[  298.081716][T13504] syzkaller #0 Tainted: G             L     
[  298.081722][T13504] ------------------------------------------------------
[  298.081726][T13504] udevd/13504 is trying to acquire lock:
[  298.081731][T13504] ffff888021b17a70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080
[  298.100716][T13504] 
[  298.100716][T13504] but task is already holding lock:
[  298.103556][T13504] ffff88805add8180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080
[  298.106626][T13504] 
[  298.106626][T13504] which lock already depends on the new lock.
[  298.106626][T13504] 
[  298.109984][T13504] 
[  298.109984][T13504] the existing dependency chain (in reverse order) is:
[  298.112787][T13504] 
[  298.112787][T13504] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  298.115118][T13504]        __mutex_lock+0x1a2/0x1b90
[  298.116897][T13504]        nbd_queue_rq+0xba/0x1080
[  298.118543][T13504]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  298.120624][T13504]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  298.123494][T13504]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  298.126047][T13504]        blk_mq_run_hw_queue+0x23c/0x670
[  298.127933][T13504]        blk_mq_dispatch_list+0x51d/0x1360
[  298.129841][T13504]        blk_mq_flush_plug_list+0x130/0x600
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  298.131746][T13504]        __blk_flush_plug+0x2c4/0x4b0
[  298.132239][   T40] audit: type=1400 audit(1775536612.856:913): avc:  denied  { write } for  pid=5921 comm="syz-executor" path="pipe:[7175]" dev="pipefs" ino=7175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  298.133754][T13504]        __submit_bio+0x584/0x6c0
[  298.146041][T13504]        submit_bio_noacct_nocheck+0x562/0xc10
[  298.148966][T13504]        submit_bio_noacct+0xd17/0x2010
[  298.150762][T13504]        submit_bh_wbc+0x59c/0x770
[  298.152481][T13504]        block_read_full_folio+0x264/0x8e0
[  298.154390][T13504]        filemap_read_folio+0xfc/0x3b0
[  298.156296][T13504]        do_read_cache_folio+0x2d7/0x6b0
[  298.158794][T13504]        read_part_sector+0xd1/0x370
[  298.160797][T13504]        adfspart_check_ICS+0x93/0x910
[  298.162704][T13504]        bdev_disk_changed+0x7f8/0xc80
[  298.164484][T13504]        blkdev_get_whole+0x187/0x290
[  298.166274][T13504]        bdev_open+0x2c7/0xe40
[  298.167950][T13504]        blkdev_open+0x34e/0x4f0
[  298.169742][T13504]        do_dentry_open+0x6d8/0x1660
[  298.171661][T13504]        vfs_open+0x82/0x3f0
[  298.173621][T13504]        path_openat+0x208c/0x31a0
[  298.175742][T13504]        do_file_open+0x20e/0x430
[  298.177697][T13504]        do_sys_openat2+0x10d/0x1e0
[  298.179456][T13504]        __x64_sys_openat+0x12d/0x210
[  298.181232][T13504]        do_syscall_64+0x106/0xf80
[  298.182945][T13504]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.185186][T13504] 
[  298.185186][T13504] -> #5 (set->srcu){.+.+}-{0:0}:
[  298.188027][T13504]        __synchronize_srcu+0xa2/0x300
[  298.190591][T13504]        blk_mq_quiesce_queue+0x149/0x1c0
[  298.192897][T13504]        elevator_switch+0x17b/0x7e0
[  298.194821][T13504]        elevator_change+0x352/0x530
[  298.197041][T13504]        elevator_set_default+0x29e/0x360
[  298.199791][T13504]        blk_register_queue+0x412/0x590
[  298.201896][T13504]        __add_disk+0x73f/0xe40
[  298.203529][T13504]        add_disk_fwnode+0x118/0x5c0
[  298.205623][T13504]        nbd_dev_add+0x77a/0xb10
[  298.207641][T13504]        nbd_init+0x291/0x2b0
[  298.209686][T13504]        do_one_initcall+0x11d/0x760
[  298.211692][T13504]        kernel_init_freeable+0x6e5/0x7a0
[  298.213632][T13504]        kernel_init+0x1f/0x1e0
[  298.215480][T13504]        ret_from_fork+0x754/0xd80
[  298.217728][T13504]        ret_from_fork_asm+0x1a/0x30
[  298.220015][T13504] 
[  298.220015][T13504] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  298.223162][T13504]        __mutex_lock+0x1a2/0x1b90
[  298.225254][T13504]        elevator_change+0x1bc/0x530
[  298.227359][T13504]        elevator_set_none+0x92/0xf0
[  298.229735][T13504]        blk_mq_update_nr_hw_queues+0x4c1/0x15f0
[  298.232555][T13504]        nbd_start_device+0x1a6/0xbd0
[  298.234788][T13504]        nbd_genl_connect+0xff2/0x1a40
[  298.236726][T13504]        genl_family_rcv_msg_doit+0x214/0x300
[  298.239129][T13504]        genl_rcv_msg+0x560/0x800
[  298.240845][T13504]        netlink_rcv_skb+0x159/0x420
[  298.242587][T13504]        genl_rcv+0x28/0x40
[  298.244069][T13504]        netlink_unicast+0x5aa/0x870
[  298.246036][T13504]        netlink_sendmsg+0x8b0/0xda0
[  298.248201][T13504]        ____sys_sendmsg+0x9e1/0xb70
[  298.250280][T13504]        ___sys_sendmsg+0x190/0x1e0
[  298.252125][T13504]        __sys_sendmsg+0x170/0x220
[  298.253886][T13504]        do_syscall_64+0x106/0xf80
[  298.255570][T13504]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.257966][T13504] 
[  298.257966][T13504] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  298.261121][T13504]        blk_alloc_queue+0x610/0x790
[  298.263161][T13504]        blk_mq_alloc_queue+0x174/0x290
[  298.265292][T13504]        __blk_mq_alloc_disk+0x29/0x120
[  298.267400][T13504]        nbd_dev_add+0x492/0xb10
[  298.269042][T13504]        nbd_init+0x291/0x2b0
[  298.270564][T13504]        do_one_initcall+0x11d/0x760
[  298.272302][T13504]        kernel_init_freeable+0x6e5/0x7a0
[  298.274259][T13504]        kernel_init+0x1f/0x1e0
[  298.276123][T13504]        ret_from_fork+0x754/0xd80
[  298.278099][T13504]        ret_from_fork_asm+0x1a/0x30
[  298.279938][T13504] 
[  298.279938][T13504] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  298.282642][T13504]        fs_reclaim_acquire+0xc4/0x100
[  298.284953][T13504]        kmem_cache_alloc_node_noprof+0x53/0x6f0
[  298.287154][T13504]        __alloc_skb+0x140/0x710
[  298.288841][T13504]        tcp_stream_alloc_skb+0x34/0x660
[  298.290888][T13504]        tcp_sendmsg_locked+0x1396/0x45e0
[  298.293135][T13504]        tcp_sendmsg+0x2e/0x50
[  298.295074][T13504]        inet_sendmsg+0xb9/0x140
[  298.296980][T13504]        sock_write_iter+0x4ea/0x5a0
[  298.298691][T13504]        vfs_write+0x6ac/0x1070
[  298.300254][T13504]        ksys_write+0x1f8/0x250
[  298.301828][T13504]        do_syscall_64+0x106/0xf80
[  298.303501][T13504]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.305540][T13504] 
[  298.305540][T13504] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  298.308168][T13504]        lock_sock_nested+0x41/0xf0
[  298.310117][T13504]        inet_shutdown+0x67/0x410
[  298.312231][T13504]        nbd_mark_nsock_dead+0xae/0x5c0
[  298.314278][T13504]        recv_work+0x5fb/0x8c0
[  298.316185][T13504]        process_one_work+0xa23/0x19a0
[  298.318472][T13504]        worker_thread+0x5ef/0xe50
[  298.320674][T13504]        kthread+0x370/0x450
[  298.322410][T13504]        ret_from_fork+0x754/0xd80
[  298.324393][T13504]        ret_from_fork_asm+0x1a/0x30
[  298.326203][T13504] 
[  298.326203][T13504] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  298.328989][T13504]        __lock_acquire+0x14b8/0x2630
[  298.331645][T13504]        lock_acquire+0x1cf/0x380
[  298.333781][T13504]        __mutex_lock+0x1a2/0x1b90
[  298.335560][T13504]        nbd_queue_rq+0x428/0x1080
[  298.337621][T13504]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  298.339565][T13504]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  298.341748][T13504]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  298.343793][T13504]        blk_mq_run_hw_queue+0x23c/0x670
[  298.346074][T13504]        blk_mq_dispatch_list+0x51d/0x1360
[  298.348204][T13504]        blk_mq_flush_plug_list+0x130/0x600
[  298.350353][T13504]        __blk_flush_plug+0x2c4/0x4b0
[  298.352586][T13504]        __submit_bio+0x584/0x6c0
[  298.354493][T13504]        submit_bio_noacct_nocheck+0x562/0xc10
[  298.356507][T13504]        submit_bio_noacct+0xd17/0x2010
[  298.358311][T13504]        submit_bh_wbc+0x59c/0x770
[  298.359943][T13504]        block_read_full_folio+0x264/0x8e0
[  298.361848][T13504]        filemap_read_folio+0xfc/0x3b0
[  298.363650][T13504]        do_read_cache_folio+0x2d7/0x6b0
[  298.365550][T13504]        read_part_sector+0xd1/0x370
[  298.367706][T13504]        adfspart_check_ICS+0x93/0x910
[  298.369752][T13504]        bdev_disk_changed+0x7f8/0xc80
[  298.371710][T13504]        blkdev_get_whole+0x187/0x290
[  298.373513][T13504]        bdev_open+0x2c7/0xe40
[  298.375042][T13504]        blkdev_open+0x34e/0x4f0
[  298.376709][T13504]        do_dentry_open+0x6d8/0x1660
[  298.378447][T13504]        vfs_open+0x82/0x3f0
[  298.379936][T13504]        path_openat+0x208c/0x31a0
[  298.381659][T13504]        do_file_open+0x20e/0x430
[  298.383401][T13504]        do_sys_openat2+0x10d/0x1e0
[  298.385164][T13504]        __x64_sys_openat+0x12d/0x210
[  298.387012][T13504]        do_syscall_64+0x106/0xf80
[  298.389048][T13504]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.391178][T13504] 
[  298.391178][T13504] other info that might help us debug this:
[  298.391178][T13504] 
[  298.394586][T13504] Chain exists of:
[  298.394586][T13504]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  298.394586][T13504] 
[  298.399631][T13504]  Possible unsafe locking scenario:
[  298.399631][T13504] 
[  298.402443][T13504]        CPU0                    CPU1
[  298.404149][T13504]        ----                    ----
[  298.405853][T13504]   lock(&cmd->lock);
[  298.407269][T13504]                                lock(set->srcu);
[  298.409597][T13504]                                lock(&cmd->lock);
[  298.411955][T13504]   lock(&nsock->tx_lock);
[  298.413493][T13504] 
[  298.413493][T13504]  *** DEADLOCK ***
[  298.413493][T13504] 
[  298.416311][T13504] 3 locks held by udevd/13504:
[  298.417995][T13504]  #0: ffff8880293c4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  298.421236][T13504]  #1: ffff888029129398 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670
[  298.424430][T13504]  #2: ffff88805add8180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080
[  298.427859][T13504] 
[  298.427859][T13504] stack backtrace:
[  298.429956][T13504] CPU: 3 UID: 0 PID: 13504 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  298.429975][T13504] Tainted: [L]=SOFTLOCKUP
[  298.429979][T13504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  298.430036][T13504] Call Trace:
[  298.430043][T13504]  <TASK>
[  298.430049][T13504]  dump_stack_lvl+0x100/0x190
[  298.430073][T13504]  print_circular_bug.cold+0x178/0x1c7
[  298.430094][T13504]  check_noncircular+0x146/0x160
[  298.430114][T13504]  __lock_acquire+0x14b8/0x2630
[  298.430127][T13504]  lock_acquire+0x1cf/0x380
[  298.430137][T13504]  ? nbd_queue_rq+0x428/0x1080
[  298.430149][T13504]  ? __pfx___might_resched+0x10/0x10
[  298.430163][T13504]  __mutex_lock+0x1a2/0x1b90
[  298.430176][T13504]  ? nbd_queue_rq+0x428/0x1080
[  298.430187][T13504]  ? nbd_queue_rq+0x428/0x1080
[  298.430199][T13504]  ? __pfx___mutex_lock+0x10/0x10
[  298.430211][T13504]  ? lock_acquire+0x1cf/0x380
[  298.430222][T13504]  ? nbd_queue_rq+0x428/0x1080
[  298.430233][T13504]  nbd_queue_rq+0x428/0x1080
[  298.430244][T13504]  ? finish_task_switch.isra.0+0x205/0xb80
[  298.430263][T13504]  ? __pfx_nbd_queue_rq+0x10/0x10
[  298.430276][T13504]  blk_mq_dispatch_rq_list+0x422/0x1e70
[  298.430296][T13504]  ? sbitmap_get+0x1d7/0x360
[  298.430312][T13504]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  298.430328][T13504]  ? __blk_mq_alloc_driver_tag+0x27a/0x7a0
[  298.430344][T13504]  __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  298.430360][T13504]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  298.430378][T13504]  blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  298.430393][T13504]  blk_mq_run_hw_queue+0x23c/0x670
[  298.430406][T13504]  ? blk_mq_run_hw_queue+0x22e/0x670
[  298.430419][T13504]  blk_mq_dispatch_list+0x51d/0x1360
[  298.430436][T13504]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  298.430451][T13504]  ? update_io_ticks+0x137/0x2a0
[  298.430465][T13504]  ? __pfx_update_io_ticks+0x10/0x10
[  298.430479][T13504]  blk_mq_flush_plug_list+0x130/0x600
[  298.430495][T13504]  ? trace_block_plug+0x6e/0x240
[  298.430505][T13504]  ? blk_add_rq_to_plug+0x30a/0x540
[  298.430520][T13504]  ? __pfx_wbt_track+0x10/0x10
[  298.430532][T13504]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  298.430548][T13504]  ? blk_mq_submit_bio+0x9aa/0x2bf0
[  298.430564][T13504]  __blk_flush_plug+0x2c4/0x4b0
[  298.430583][T13504]  ? __pfx___blk_flush_plug+0x10/0x10
[  298.430597][T13504]  ? blkdev_open+0x34e/0x4f0
[  298.430611][T13504]  ? do_dentry_open+0x6d8/0x1660
[  298.430622][T13504]  ? vfs_open+0x82/0x3f0
[  298.430634][T13504]  ? path_openat+0x208c/0x31a0
[  298.430647][T13504]  ? do_file_open+0x20e/0x430
[  298.430658][T13504]  ? do_sys_openat2+0x10d/0x1e0
[  298.430671][T13504]  ? __x64_sys_openat+0x12d/0x210
[  298.430685][T13504]  ? do_syscall_64+0x106/0xf80
[  298.430695][T13504]  __submit_bio+0x584/0x6c0
[  298.430709][T13504]  ? __pfx___submit_bio+0x10/0x10
[  298.430722][T13504]  ? find_held_lock+0x2b/0x80
[  298.430738][T13504]  ? __pfx_blk_cgroup_bio_start+0x10/0x10
[  298.430753][T13504]  ? bio_associate_blkg_from_css+0x550/0x13f0
[  298.430768][T13504]  ? submit_bio_noacct_nocheck+0x562/0xc10
[  298.430783][T13504]  submit_bio_noacct_nocheck+0x562/0xc10
[  298.430798][T13504]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  298.430814][T13504]  ? __pfx___might_resched+0x10/0x10
[  298.430827][T13504]  ? bio_alloc_bioset+0x309/0x850
[  298.430838][T13504]  submit_bio_noacct+0xd17/0x2010
[  298.430854][T13504]  submit_bh_wbc+0x59c/0x770
[  298.430870][T13504]  block_read_full_folio+0x264/0x8e0
[  298.430888][T13504]  ? __pfx_blkdev_get_block+0x10/0x10
[  298.430903][T13504]  ? __pfx_blkdev_read_folio+0x10/0x10
[  298.430917][T13504]  filemap_read_folio+0xfc/0x3b0
[  298.430934][T13504]  ? __pfx_filemap_read_folio+0x10/0x10
[  298.430952][T13504]  do_read_cache_folio+0x2d7/0x6b0
[  298.430969][T13504]  ? __pfx_blkdev_read_folio+0x10/0x10
[  298.430984][T13504]  read_part_sector+0xd1/0x370
[  298.430997][T13504]  adfspart_check_ICS+0x93/0x910
[  298.431010][T13504]  ? snprintf+0xc7/0x100
[  298.431074][T13504]  ? __pfx_snprintf+0x10/0x10
[  298.431088][T13504]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  298.431099][T13504]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  298.431113][T13504]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  298.431126][T13504]  bdev_disk_changed+0x7f8/0xc80
[  298.431140][T13504]  ? __pfx_bdev_disk_changed+0x10/0x10
[  298.431153][T13504]  blkdev_get_whole+0x187/0x290
[  298.431166][T13504]  bdev_open+0x2c7/0xe40
[  298.431180][T13504]  blkdev_open+0x34e/0x4f0
[  298.431194][T13504]  do_dentry_open+0x6d8/0x1660
[  298.431204][T13504]  ? __pfx_blkdev_open+0x10/0x10
[  298.431219][T13504]  vfs_open+0x82/0x3f0
[  298.431232][T13504]  path_openat+0x208c/0x31a0
[  298.431245][T13504]  ? __pfx_path_openat+0x10/0x10
[  298.431258][T13504]  do_file_open+0x20e/0x430
[  298.431270][T13504]  ? __pfx_do_file_open+0x10/0x10
[  298.431286][T13504]  ? alloc_fd+0x476/0x790
[  298.431298][T13504]  ? do_getname+0x191/0x390
[  298.431313][T13504]  do_sys_openat2+0x10d/0x1e0
[  298.431327][T13504]  ? __pfx_do_sys_openat2+0x10/0x10
[  298.431340][T13504]  ? __sys_recvmsg+0x18c/0x220
[  298.431357][T13504]  ? __pfx___sys_recvmsg+0x10/0x10
[  298.431372][T13504]  __x64_sys_openat+0x12d/0x210
[  298.431386][T13504]  ? __pfx___x64_sys_openat+0x10/0x10
[  298.431402][T13504]  do_syscall_64+0x106/0xf80
[  298.431411][T13504]  ? clear_bhb_loop+0x40/0x90
[  298.431424][T13504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.431435][T13504] RIP: 0033:0x7f6f5e4a7407
[  298.431446][T13504] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  298.431457][T13504] RSP: 002b:00007ffe94682110 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  298.431469][T13504] RAX: ffffffffffffffda RBX: 00007f6f5ec7b880 RCX: 00007f6f5e4a7407
[  298.431476][T13504] RDX: 00000000000a0800 RSI: 000055c8ce75fac0 RDI: ffffffffffffff9c
[  298.431482][T13504] RBP: 000055c8ce50e2c0 R08: 0000000000000000 R09: 0000000000000000
[  298.431488][T13504] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c8ce750d50
[  298.431494][T13504] R13: 000055c8ce7498d0 R14: 0000000000000000 R15: 000055c8ce750d50
[  298.431503][T13504]  </TASK>
[  298.545834][T13504] block nbd0: Dead connection, failed to find a fallback
[  298.687545][T13504] block nbd0: shutting down sockets
[  298.689851][T13504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.693919][T13504] buffer_io_error: 42 callbacks suppressed
[  298.693998][T13504] Buffer I/O error on dev nbd0, logical block 0, async page read
[  298.700107][T13504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.706374][T13504] Buffer I/O error on dev nbd0, logical block 1, async page read
[  298.708882][T13504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.712016][T13504] Buffer I/O error on dev nbd0, logical block 2, async page read
[  298.714915][T13504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.718565][T13504] Buffer I/O error on dev nbd0, logical block 3, async page read
[  298.721112][T13504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.724532][T13504] Buffer I/O error on dev nbd0, logical block 0, async page read
[  298.727113][T13504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.730391][T13504] Buffer I/O error on dev nbd0, logical block 1, async page read
[  298.733419][T13504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.736456][T13504] Buffer I/O error on dev nbd0, logical block 2, async page read
[  298.738999][T13504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.742611][T13504] Buffer I/O error on dev nbd0, logical block 3, async page read
[  298.745606][T13504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.749177][T13504] Buffer I/O error on dev nbd0, logical block 0, async page read
[  298.752089][T13504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  298.755123][T13504] Buffer I/O error on dev nbd0, logical block 1, async page read
[  298.758163][T13504] ldm_validate_partition_table(): Disk read failed.
[  298.761101][T13504] Dev nbd0: unable to read RDB block 0
[  298.763644][T13504]  nbd0: unable to read partition table
[  298.774275][T13504] ldm_validate_partition_table(): Disk read failed.
[  298.776664][T13504] Dev nbd0: unable to read RDB block 0
[  298.778715][T13504]  nbd0: unable to read partition table
[  299.475376][ T8876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.546070][ T8876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.715764][ T8876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.786646][ T8876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.111551][  T830] SELinux: failure in sel_netif_sid_slow(), invalid network interface (77)
[  300.115540][  T830] SELinux: failure in sel_netif_sid_slow(), invalid network interface (76)
[  300.137207][ T8876] team0: Port device geneve0 removed
[  300.187767][ T8876] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  300.191620][ T8876] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - fa:88:ca:c5:f4:cc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  300.199545][ T8876] bridge1 (unregistering): left promiscuous mode
[  300.202717][ T8876] bond2 (unregistering): (slave bridge2): making interface the new active one
[  300.206458][ T8876] bridge2 (unregistering): entered promiscuous mode
[  300.293347][ T8876] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  300.296974][ T8876] bridge2 (unregistering): left promiscuous mode
[  300.394607][ T8876] bond0 (unregistering): Released all slaves
[  300.401531][ T8876] bond1 (unregistering): Released all slaves
[  300.410546][ T8876] bond2 (unregistering): Released all slaves
[  300.417687][ T8876] bond3 (unregistering): Released all slaves
[  300.424814][ T8876] bond4 (unregistering): Released all slaves
[  300.923789][ T8876] hsr_slave_0: left promiscuous mode
[  300.926420][ T8876] hsr_slave_1: left promiscuous mode
[  300.931974][ T8876] veth1_macvtap: left promiscuous mode
[  300.934287][ T8876] veth1_vlan: left promiscuous mode
[  300.936065][ T8876] veth0_vlan: left promiscuous mode
[  302.146209][ T8876] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.215314][ T8876] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.287515][ T8876] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.375412][ T8876] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.533214][ T8876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.587926][ T8876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.658955][ T8876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.726179][ T8876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.903476][ T8876] bridge_slave_1: left allmulticast mode
[  302.905860][ T8876] bridge_slave_1: left promiscuous mode
[  302.908384][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.912927][ T8876] bridge_slave_0: left allmulticast mode
[  302.915170][ T8876] bridge_slave_0: left promiscuous mode
[  302.917878][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.224763][ T8876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.283807][ T8876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.322528][ T8876] bond0 (unregistering): Released all slaves
[  303.328029][ T8876] bond1 (unregistering): Released all slaves
[  303.360107][ T8876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.403195][ T8876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.443157][ T8876] bond0 (unregistering): Released all slaves
[  304.636649][ T8876] hsr_slave_0: left promiscuous mode
[  304.639440][ T8876] hsr_slave_1: left promiscuous mode
[  304.642256][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.645376][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.648380][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.650748][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.655460][ T8876] hsr_slave_0: left promiscuous mode
[  304.657976][ T8876] hsr_slave_1: left promiscuous mode
[  304.660855][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.663991][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.666794][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.669215][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.676079][ T8876] veth1_macvtap: left promiscuous mode
[  304.678334][ T8876] veth0_macvtap: left promiscuous mode
[  304.680380][ T8876] veth1_vlan: left promiscuous mode
[  304.682844][ T8876] veth0_vlan: left promiscuous mode
[  304.685570][ T8876] veth1_macvtap: left promiscuous mode
[  304.687346][ T8876] veth0_macvtap: left promiscuous mode
[  304.689205][ T8876] veth1_vlan: left promiscuous mode
[  304.690907][ T8876] veth0_vlan: left promiscuous mode
[  304.768410][ T8876] team0 (unregistering): Port device team_slave_1 removed
[  304.789173][ T8876] team0 (unregistering): Port device team_slave_0 removed
[  304.848865][ T8876] team0 (unregistering): Port device team_slave_1 removed
[  304.854499][ T8876] team0 (unregistering): Port device team_slave_0 removed