last executing test programs:

6m13.942353634s ago: executing program 32 (id=895):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$inet(r0, &(0x7f0000002940), 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x20000043, &(0x7f0000000080)={0xa, 0x3, 0x1, @local}, 0x1c)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x14}], 0x1, 0x0, 0x0, 0x8088}, 0x20040004)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f00000001c0)=""/49, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340))
r7 = dup(r4)
syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd607f00ef00042f0000000000000000000000000000000000ff020000000000000000000890789d7da2"], 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7})
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r9, &(0x7f0000001440)=""/126, 0x7e, 0x41)
ioctl$BSG_EMULATED_HOST(r9, 0x2203, &(0x7f0000000200))
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x8, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

6m9.978129519s ago: executing program 33 (id=959):
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x14, 0xb5, &(0x7f0000000040)="88cb9c5ebb4afe9dab12b3d760ab1c0e0b56319a90b8937affeb4687c4874e040ccfdcbb84dcee66f77c4439439b04e92b2bb3bed795ffbfe455c0b9a7737d9cebd9cd8aceb7798dfab1276fab392eb7ce3f0e62b3063fcb30f776f685d8644ce4520f5c72c0f5adfdf44b3a6bf3067c4ef2d84d232eaef0e260d366033593d8095d731ca41765e0d3affe256e1c6ab9fc473cf257f88e0aef2f9674658ae9702056697a967d3c5ad687632b8bf7721facec752b53"})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpgid(0xffffffffffffffff)
sendmsg$nl_netfilter(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c0, 0xa, 0x8, 0x301, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x1}, [@generic="e90e562881350a6efa45481fddaf1e5bcff64f8a6ff063a9c7b5800d0d3addeda5cac391f73cfcad978c9895b8010fbd48735be6c26963b4bc1e011293299ac2a7a3e19c76f87e7624367643", @typed={0xc6, 0xc, 0x0, 0x0, @binary="dde9b4843365f068d6fc1dbbae91e4f47abbaa30aff1642d14080850752c6b89a892343655695b14af434d3a8a894c7276e34a83986da830d64256a2d03ceeb67ee47bd497ca14ae53d1020edf9bb18a8e4a2a5dc575adff9a9985b7533f336311cf8e896b07b3909ad5852d9983387c2ae01fdc22812416563d2d240c6bf9956bc47c41a11e4f1f1f618c2460273ae77ab6665d69fd195a37da579f67b6f9bffc794864f0290dc41c4620b7272deae693362f07798d955c39db9cbff43ba8641d81"}, @typed={0x8, 0x49, 0x0, 0x0, @pid=r2}, @generic, @typed={0x90, 0xb4, 0x0, 0x0, @binary="f35f921763b7d18b11c3742cf8207f2ed7044e77a18f38b044921a0689592769c094ec284c76b44960a04171469a708cd54f2991d03a027f317eb4fd3309cf8de43fdb23e8cee2d6d03b3f9587c86e1be239496da1332f8abd00355981fe60100e1c5d36a0deee90b5034e9854bdb685084dabcba80085cf03c21259000ff70b45ac003d27ae4c3a828fe856"}, @generic]}, 0x1c0}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000003c0)={0x2, 0x0, [{0x2, 0x5, 0x0, 0x0, @sint={0x5, 0x100}}, {0x8001, 0x1, 0x0, 0x0, @adapter={0xffffffff, 0x2, 0x5, 0xffe00000, 0xf776}}]})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000440)={0x8cd3, 0x8})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x49cf}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xca}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000700), 0x111, 0x9}}, 0x20)
unshare(0x10000)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
write$UHID_DESTROY(r0, &(0x7f0000000800), 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
fremovexattr(r4, &(0x7f0000000840)=@known='user.incfs.id\x00')
syz_clone3(&(0x7f0000000ac0)={0x42000100, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900), {0x3b}, &(0x7f0000000940)=""/133, 0x85, &(0x7f0000000a00)=""/115, &(0x7f0000000a80)=[r2], 0x1, {r0}}, 0x58)
recvfrom$unix(r1, &(0x7f0000000b40)=""/50, 0x32, 0x40, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'syztnl2\x00', <r5=>0x0, 0x29, 0x6, 0x1, 0xd6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x10, 0x8000, 0x8, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000d00)={'team0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6gre0\x00', <r7=>0x0, 0x29, 0x7, 0x2, 0xb, 0x21, @dev={0xfe, 0x80, '\x00', 0x39}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x5, 0x6}})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000e00)=<r8=>0x0, &(0x7f0000000e40)=0x4)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000e80)=<r9=>0x0, &(0x7f0000000ec0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000f00)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'syztnl1\x00', <r11=>0x0, 0x7808, 0x700, 0x8, 0x4, {{0x17, 0x4, 0x1, 0x34, 0x5c, 0x67, 0x0, 0xb, 0x29, 0x0, @broadcast, @multicast1, {[@generic={0x7, 0x2}, @rr={0x7, 0x17, 0x2e, [@multicast1, @private=0xa010101, @empty, @empty, @multicast2]}, @end, @cipso={0x86, 0x21, 0x3, [{0x5, 0x9, "50ab0709abcef2"}, {0x1, 0x4, 'Nx'}, {0x2, 0xe, "c482c038254e3c3ac7b5710a"}]}, @timestamp_addr={0x44, 0xc, 0xa6, 0x1, 0xf, [{@local, 0x81}]}]}}}}})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001000)={<r12=>0x0, @dev, @multicast2}, &(0x7f0000001040)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001400)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001080)={0x340, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0xc, 0x18}, {0x401, 0x3, 0xe2}, {0x9, 0x0, 0xd, 0x6}, {0x0, 0x0, 0x3, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x18, 0x10, 0xea, 0xffffffff}, {0x7, 0x95, 0x3, 0x8}, {0xff4, 0xc, 0xd, 0x6000}, {0x1, 0x1, 0x0, 0x9}, {0x8, 0x3, 0x0, 0x4}]}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x4000004}, 0x8010)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={r0, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0], 0x0, 0xdf, &(0x7f0000001500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0x37, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10)

5m59.944316852s ago: executing program 34 (id=1149):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7, 0x1c, "fafd8317e5a11400001a8dbe43ea6a4996e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab61c9e6d680f985891a7beda9b79098c8b534464c5100dd8e0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a0b2f7b6aa54cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8cc85ba139c01802c4dae4162e43ac61b7ad33", [0x800000000005, 0x8000]}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x1, 0x2, 0xfd, 0x7, 0x4, 0x200}, 0x20) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async)
r4 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0xa, 0x8, 0x0, 0x8001, 0xc, 0xd7, 0x10, 0xfc, 0xc9, 0xe3, 0xc5, 0x0, 0xff, 0x5, 0x7f, 0x79, 0x7, 0x3, '\x00', 0x92, 0x84}) (async, rerun: 64)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) (rerun: 64)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5m16.180101199s ago: executing program 35 (id=1604):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x109801, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff0a000e001c165d"], 0x34}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xcf4, 0x8}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb18972e68124b31e276ec89e5"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "1c6ba3e06816981a"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "705a12643c"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b8d3997710"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "877eac9c61"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000)

5m9.661560167s ago: executing program 36 (id=1836):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x2)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xdb)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x9, 0x6, 0x4801, 0x2, 0x3df, 0x42, 0xfffffff4, 0xbfffbffa, 0xfffffffd, 0xe, 0xfffffffd, 0xffffffff, 0x1, 0x600, 0x5, 0x7, 0x6, 0x3, 0xfffffffd, 0x3, 0x80000, 0xf, 0x8}})
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103})
timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
fanotify_init(0x20, 0x800)
r5 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0)
getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078)
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000003c0)={0xa, 0x101, 0x0, {0x80200004, 0x1, 0x2, 0x100}})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0)
ioctl$CDROMSTOP(r6, 0x5307)
r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)=0x14)
connect$llc(r2, &(0x7f0000000540)={0x1a, 0x300, 0xb3, 0x1, 0x6, 0xfc, @local}, 0x10)
close(r7)

5m6.344223695s ago: executing program 37 (id=1873):
lsm_get_self_attr(0x68, 0x0, &(0x7f0000001200), 0x0) (async)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4018044) (async, rerun: 32)
lsm_get_self_attr(0x68, &(0x7f0000000240)={0x0, 0x0, 0xcd, 0xad, ""/173}, &(0x7f0000000040)=0xcd, 0x0) (rerun: 32)

3m57.527899006s ago: executing program 38 (id=2790):
r0 = socket(0x22, 0x803, 0x3)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000000c0)="4d0100000000000000ffffffffffffffff5f3d03", 0x14, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @local}, 0x14)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042)
read$FUSE(r4, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000140))
write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x6, 0x3}}, 0x29)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x16, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')
pread64(r5, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36)
ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000000)=@default)

2m50.042619335s ago: executing program 39 (id=4119):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, <r3=>0x0}, &(0x7f0000000340)=0xc)
r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, r3, r4)
r5 = socket$kcm(0x2, 0x2, 0x73)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r6, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0xfffffffffffffde8)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)

2m23.74210566s ago: executing program 40 (id=4271):
r0 = socket(0xa, 0x3, 0xff)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x58000000, @mcast2, 0x8}, 0x1c)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000001c0)='./file1\x00', 0x60)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f0000000100)=0xc)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000000c0)={0x2, @sdr={0x38415261, 0xe}})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@uuid_null}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@fsname={'fsname', 0x3d, 'workdir'}}, {@uid_gt={'uid>', r2}}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r2}}, {@measure}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, 'upperdir'}}, {@audit}, {@uid_lt={'uid<', r2}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mknodat$null(r1, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
sync()

2m3.060237352s ago: executing program 2 (id=4744):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x8, 0x40, 0x204, 0x300}})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8558, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}, 0x1c) (async)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)=ANY=[], 0x9)

2m3.053082845s ago: executing program 2 (id=4746):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)

2m2.960893077s ago: executing program 2 (id=4749):
mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2000, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f00001d1a00)=[{0x8000001, 0x0, 0x0, 0x0, 0x6}]})
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x1}, {0x79, @none}}}}, 0xd)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[])
ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)

2m2.910742413s ago: executing program 2 (id=4752):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300003300003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

2m2.778289562s ago: executing program 2 (id=4755):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x80800}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x80800, 0x0, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020001ffe420370000000c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="d4fa0c511aad03aa5ed217677bc41c027d5bdcfb3a9c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b85a14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844ed7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626cf50d4563848b34deeaf2aa76c6ef7b13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a0267f3bf8efa11287d2f407edddb6205093ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777e1319d94b129be71a1637c7f874f6dca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c119e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2a86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc26476c256459e2c2ed94b8461b56ff944edc1a8cd93d0258fcc2f094615", 0x407}], 0x2}, 0x10009004) (async)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020001ffe420370000000c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10009004)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x24048880) (async)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x24048880)
write(r6, &(0x7f0000000340)="1c00000003000000140000003b0c2aaa56160931d4d4d094ad6b071144a3d0a13e1f4780ec00b20f78d00dadaaf5448dae0fba81f85fcc3bdeedca689ec9be940292dc6da57c394de96211560f0a75299cfaf288e88bc83d553491f66e7cc78c1f8928c8007165f154d6756b5325e0faec5784a4ade4f585d07d517158511f1bc0073bb8b27f7817e44625c1480d1a837d6261146552cee815a8ebba5f9e103d6815b4a6ba7e2ddb7981ba3596e48207fd435182b185c7b3ae6cee7b6fe10807aa4e6316", 0xc4)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080)
syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x2000, 0x4, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140))
socket$packet(0x11, 0x3, 0x300) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00'})
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000140)={0x70, 0xc3, 0x40000}, 0x20)
fcntl$notify(r4, 0x402, 0x80000010) (async)
fcntl$notify(r4, 0x402, 0x80000010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @timestamp, @sack_perm, @timestamp, @window={0x3, 0x7, 0x1}], 0x5)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)

2m2.628838935s ago: executing program 2 (id=4758):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0'])
r1 = open$dir(&(0x7f0000000040)='./file1\x00', 0x4000, 0x14)
r2 = openat(r1, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x3, 0xfffffffe}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
sync()
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000eec9851a735824efa75947464744dfd693fcf9aede6b6e3f0b000000000000000000", @ANYRES16=r7, @ANYBLOB="200027bd7000fbdbdf251200000008000600050000000800070003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044042}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000200)={0x7, 'syzkaller1\x00', {0x3}, 0x4})

1m46.923512635s ago: executing program 41 (id=4758):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0'])
r1 = open$dir(&(0x7f0000000040)='./file1\x00', 0x4000, 0x14)
r2 = openat(r1, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x3, 0xfffffffe}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
sync()
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000eec9851a735824efa75947464744dfd693fcf9aede6b6e3f0b000000000000000000", @ANYRES16=r7, @ANYBLOB="200027bd7000fbdbdf251200000008000600050000000800070003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044042}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000200)={0x7, 'syzkaller1\x00', {0x3}, 0x4})

1m21.889840431s ago: executing program 5 (id=5249):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x7000000)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd})
pipe2$watch_queue(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x2, 0x3, 0x5)
sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x5e)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8000000, 0x9}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff008001fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="8b04040000000000140012800b0001006272696467650000040002800800040009000000"], 0x3c}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r9)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_WOWLAN(r9, &(0x7f00000055c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001440)=ANY=[@ANYRESHEX=r7, @ANYRES16=r11, @ANYRESHEX=r9, @ANYRES32=r4, @ANYBLOB="0c00999e1853b9bf85cb215b", @ANYBLOB="b70efff0ae24ec2cb9a824f2c411d6cdcc6fc51b60d5ac728bef33d4de4d27aa0bf72359a399c65c0f1a6774ede91eac4e0ac2bbdba661215df72f6fbadbac978a5888c407a713902c8084b8b6b04f120d8de7bd1a97b7cb519034297db2b109118af4899b2347ea2f4c9c693082ac723dc984e0754fd178686b82d331bf5be71b3ac7c30c8ed2553f305a3a1d1c121a436e1baaf19fcd78e983663e7eadb758d79197229f9788028b444af1092dc1deeebf93898949d1442679f2f4b1b51eeb2b8e3d2d88a5a0885e5d9a703557fbbe68b17673ef9ad383a5be77e4de9850a1253f84e8"], 0x28}, 0x1, 0x0, 0x0, 0x8009}, 0x8000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan1\x00'})
timer_create(0x8, 0x0, &(0x7f0000000080))
sendmsg$NL80211_CMD_LEAVE_OCB(r12, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c3b9550aa5509ba586103d4be2379", @ANYRES16=r13, @ANYBLOB="110425bd7000fbdbdf256d00000008000300", @ANYRES64=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x1000004, 0x1, 0x1c0000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRES64=r13, @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRESHEX=r8, @ANYRES8=r13], 0x68}, 0x1, 0x0, 0x0, 0xc010}, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="94000000000105000000000000000000020000004404018014000180080001000000000008000200e00000012c00018014000300ff01000000000000000000000000000114000400fc010000000000000000000000000001240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000001000068008000200ac14140004000380"], 0x94}}, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010900000100000000017c00000400fc800cf70180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1m21.84060717s ago: executing program 5 (id=5250):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x15, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240448d4}, 0x200088c0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, <r3=>0xffffffffffffffff})
poll(&(0x7f0000000080)=[{r0, 0x401}, {r2, 0x9418}, {r0, 0x200}, {r3, 0xa1}, {r0, 0xe00d}, {r2}, {r2, 0x400}, {r2, 0x6100}, {r0, 0x4b}], 0x9, 0x7)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r4, &(0x7f00000000c0), 0x10) (async)
sendto$l2tp(r4, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) (async)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0) (async)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2)

1m21.840172037s ago: executing program 5 (id=5251):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd030000000000302c000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

1m21.650321383s ago: executing program 5 (id=5252):
setfsgid(0xee00) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000480))
setresgid(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x17, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x98}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0x1, 0x0, 0x2, 0xc, 0x4}, @ldst={0x1, 0x0, 0x1, 0x6, 0x5, 0xffffffffffffffd0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)

1m21.570598466s ago: executing program 5 (id=5253):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) (rerun: 32)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x89, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) (async)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) (async, rerun: 32)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10004}]}, 0x10) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1})
io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400000000003f00f861506a0000000000", @ANYRES32=0x0, @ANYBLOB="08000200e09e01001c00128009000100626f6e64000000000c0002800800130002000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x0)

1m21.470526721s ago: executing program 5 (id=5254):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000e00)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040000000000180012800b000100697036677265000008000a8004001200"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) (async, rerun: 32)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04001120"], 0x7) (rerun: 32)
syz_emit_vhci(&(0x7f0000000c40)=ANY=[@ANYBLOB="03c8004f13e99c744225fcc7a9d623a609549c831c48eac849b06996b4260be303be1582b29c348670ae10bd11f0abfb55f1c60a91ac9c07a616684530d2fd523990ca00"/83], 0x53) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x8, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) (async, rerun: 32)
r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000000d80)='syzkaller\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async, rerun: 64)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64)
ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f0000000240)={0x0, 0x8, 0x7, '\x00', &(0x7f0000000200)=0x7f})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x5}, {0xffff, 0xffff}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
accept$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000d00)=0x1c) (async)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000d40)=ANY=[@ANYRES32], 0x48)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="98070000", @ANYRES16=r8, @ANYBLOB="0001289d7000ffdbdf25390000e407000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x798}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x41)

1m20.839894982s ago: executing program 3 (id=5272):
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]})
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp_addr={0x44, 0x14, 0x3d, 0x1, 0x3, [{@remote, 0x3}, {@private=0xa010101, 0x400}]}, @rr={0x7, 0x17, 0xbc, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @private=0xa010102]}]}}}}}}, 0x0)

1m20.839021231s ago: executing program 3 (id=5274):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x1}, {0x79, @none}}}}, 0xd)
syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00034001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200b9d525a42f084c009037741bb289923ca075075539ac256d05d3b7f7e70ab92ade1fbb59252f4b5575428a79f0b73c981f95b0474fa9d2463a88f32198959da3d45fbe6a09d23e686bed080135132b67529de092b0843693cf8bdc6fb2e57c86c9e23f739105c2d05c55d7fd0d94478b7a96c0d7731f5b1cdba80be16242c5790867ea76fafc21bb9c1414bb6a27ce51f8d0cda3f8159daa8fedc9767246f9cad47e0160a9a6bdc136e060f747659266cc6779a8629f8353993d6b6c7d8c5d2388372497901334"], 0x0)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

1m20.780444271s ago: executing program 3 (id=5275):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd030000000000303b000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

1m20.72078747s ago: executing program 3 (id=5276):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000380)={'virt_wifi0\x00'})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r2, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0xfffffffffffffffa, 0x3fff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000002200001800128008000100677265000c000280080004000e0000002ef1c3609fed2c512e8c14bb4ee14baacbfa2c80a2f298def9bfb9efd995f4bc4960c2aac70dff9cca393a8687b825bf00fcfe40993519ab30aeaa936360a6fb30eeafb334227de8c8ab55c5ed15947563d716ec35fe261dcd4627e8266aeca7a90060362f7f157d7387a55706a602179d6237870268a0adb9962010c65b933203e01429f5b48dc287571c355ed2754014c07e8a64082b93"], 0x38}}, 0x0)

1m20.720443685s ago: executing program 3 (id=5278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x0, 0xcf21, 0x0, 0x8}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1m20.619450617s ago: executing program 3 (id=5279):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000240), 0x47ffffa, 0x382c43) (async)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x47ffffa, 0x382c43)
syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x553c00) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x553c00)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1c, "339f020bbe82b298000000000101000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50038ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @remote, 0x34e, 0x0, 0x83, 0x100, 0x4, 0x2930310})
r4 = dup(r0)
fsopen(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x12}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB, @ANYBLOB], 0x44}}, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x800, 0x8)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fcntl$getflags(r10, 0x1)
read$char_usb(r9, &(0x7f0000000040)=""/236, 0xec)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
sync()

1m6.453854241s ago: executing program 42 (id=5254):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000e00)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040000000000180012800b000100697036677265000008000a8004001200"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) (async, rerun: 32)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04001120"], 0x7) (rerun: 32)
syz_emit_vhci(&(0x7f0000000c40)=ANY=[@ANYBLOB="03c8004f13e99c744225fcc7a9d623a609549c831c48eac849b06996b4260be303be1582b29c348670ae10bd11f0abfb55f1c60a91ac9c07a616684530d2fd523990ca00"/83], 0x53) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x8, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) (async, rerun: 32)
r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000000d80)='syzkaller\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async, rerun: 64)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64)
ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f0000000240)={0x0, 0x8, 0x7, '\x00', &(0x7f0000000200)=0x7f})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x5}, {0xffff, 0xffff}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
accept$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000d00)=0x1c) (async)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000d40)=ANY=[@ANYRES32], 0x48)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="98070000", @ANYRES16=r8, @ANYBLOB="0001289d7000ffdbdf25390000e407000300", @ANYRES32=0x0, @ANYBLOB="0c009900000060002100000098025a801800028014000500001002000300090009001e6c07000300d00000800a000100096c0b12480b00001400050001000c0007003ebe0080090004000010050006000100000045000200444206383241534d1f483109224210242034084c120d342726540e2a1d304350341914573626245127524222084035072622083f252249460a0514441b1651384200000005000600020000001400030010000100cb010200000001000300000014000500a9e3081000040101f8000300c0dd02001a0001001b36120b046c0b160560646c1603301b04040c040b24000005000400010000000500070001000000200000800500040000000000140003000000000a03000100000200004800650108000180040001007400008005000400010000002e000200512130201023274ae5501e1c363c392a1c183b51063e501f453f3b47391004352c1c1918314a3934541f0000050006000000000005000400010000000500070001000000050006000200000009000200340c1d48030000000b0002002e2e080d5029190028000380050007000200000005000400020000001400030006000800060008008100ff7f010003003c0000800500020018000000110001000c6c0b0912601b300b1b242412000000140003008000f9ff4401050040000d0001010e00050006000000000060000180050006000100000027000200390951510148100d561e1a344008113c4718063049100c300e1d1d381b0b09341a2b5700140005000900fcff810000007f00080047c608000500040000000000050006000200000005000600020000004c000280050006000200000014000500e8010d0001000700df002be000000700050007000000000014000500080002000b00010006000900abaf08000d00020004114a18444f55432000000030015a807c000080140005000600f30e07000900ff07ff070000010014000300090001000300100009004000a20081001400030003000400090004000500001c490009003a0002003a305114ad0a0f101513351f1e073815042e203b5354103f14530e00102019084d55080e361b533d3a1244243b05543703302b3400520000b00002804e0002001c16542542293f00541f57361156192e030c4b18520a574240544c56540d5056471b44302d3d00082210203a273a403941181e51161b3e2e492317454410231e3848182039392323320b0000240002002c4a490518010a2a4b103954104644574c3d124c3c2e204c031000024e29222405000600010000001a0001000d3636241b1b242409000c36160609601b6c040b0c0900001400050003000800080004001000080004000000b4005a800c000280050007000100000024000380050007000100000005000400000000000500060000000000050006000200000080000080050006000100000014000300ff0704002a990400050003001c020400140003000800050001800500ffffdc00c6090600140003000b0008000200f7ff0100f9ff0200cc02300002003053573837524e400d02383d2c3d30082d00011f223145041f10053b1d39071f20314e202b2f1d383454002d0500040000000000f4025a807000038046000200562e39014206303b2533182956201e371348324d202f5431203b2939554730492908262f2f50410f2d2039242219170021044006100a271a4656413b4a31253d412c00000500040000000000050004000100000014000300dd4c080005000900ffff9969070084099c00038014000300ff030500f10006001d5b08004000050014000300faff430a060005000008ff00000100100500040001000000140005000100c8f40200010003000b005800030005000600020000004a000200091130543c500115171d0904115645452f56421a10471e184911502c450b164239391b3a390a31481810410a3f34190e223128534f0e132a181a3b01312a2d164b31501c530f00001800038013000100006c0524050218020616064860066c003400018014000500f9ff0a000101090003000300090006000500070002000000140003000a0001010100ff015a00a1f3010401046000018005000700010000001400030007000100d80e0300f01601010400001026000200040455424b202c4b3a1c4e0d0e0111305250343f0d4d051a000b0330574e0d0a134500001500020010372016221c06503225410b2505451b220000008000018005000700010000001400050002005400c18207007f000200a1000900060001000005000014000300fdffa60d0400090000000700ff0301800500040002000000050006000100000005000600000000001400050011718b370500dba002000000090006001000010000031b480960030305020b000500040000000000a4000180140003007600018008000500e2c7020000000200400002003236074f06044c1b413e2922483e0a420010092d1230143938042610103408545539402f0009144041292033541e063e4c0f514f542d13350f0f384d050007000200000005000600000000000500040000000000320002004715101b0f2c21502f403635501049412234063e44074a525123480049431d3f102f171a0e4c0a2009143e46380d00001400018005000400010000000500040001000000"], 0x798}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x41)

1m5.194463647s ago: executing program 43 (id=5279):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000240), 0x47ffffa, 0x382c43) (async)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x47ffffa, 0x382c43)
syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x553c00) (async)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x553c00)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1c, "339f020bbe82b298000000000101000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50038ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @remote, 0x34e, 0x0, 0x83, 0x100, 0x4, 0x2930310})
r4 = dup(r0)
fsopen(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x12}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB, @ANYBLOB], 0x44}}, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x800, 0x8)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fcntl$getflags(r10, 0x1)
read$char_usb(r9, &(0x7f0000000040)=""/236, 0xec)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
sync()

1m4.472203058s ago: executing program 4 (id=5445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000bddde3bc2d413437000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001d0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1m4.40984281s ago: executing program 4 (id=5446):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000009060108000000000000ac16f60000030000040900020073797a310000000005000100070000002c000780060004ff0200000005000700ff0000000c00184000000000000000080c00028008000140e0"], 0x54}, 0x1, 0x0, 0x0, 0x14004891}, 0x80)

1m4.340352329s ago: executing program 4 (id=5447):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000002c60ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

1m4.128594942s ago: executing program 4 (id=5449):
r0 = fsopen(&(0x7f0000000040)='dax\x00', 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xf295, 0x1, 0x5, 0xffffffff00000000, 0x21ee, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={<r3=>r2})
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={<r5=>r4})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', <r7=>0x0})
bind$xdp(r5, &(0x7f00000005c0)={0x2d, 0x0, r7, 0xc}, 0x10)
bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
close(r2)
r8 = syz_open_procfs(r1, &(0x7f0000000240)='net/vlan/config\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x40305839, 0x0)
r9 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000001c0)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_io_uring_setup(0x544, &(0x7f0000000400)={0x0, 0xd146, 0x1000, 0xe, 0x288}, &(0x7f0000000180)=<r12=>0x0, &(0x7f0000000200)=<r13=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r11, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='+'], 0x30}, 0x0, 0x0, 0x1})
io_uring_enter(r8, 0x3516, 0x0, 0x4, 0x0, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000700)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000040000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r15, &(0x7f0000000180)=ANY=[], 0xff2e)

1m0.175799596s ago: executing program 4 (id=5459):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396a", 0x17}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695e85000000a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="b5c60e243f75ecf0", 0x8}], 0x1}}], 0x2, 0x8008801)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0)
close(0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
fstat(r1, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

59.259972241s ago: executing program 4 (id=5464):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x684201, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0xff, {{0xa, 0x4e23, 0x3, @mcast1, 0x101}}, {{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @usage, <r2=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000580)={r2, 0x10001, 0x7fff, 0x1})
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000980)=0x1, 0x4)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0), 0x802, 0x0)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x81)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c011}, 0x800)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c000)
fcntl$getflags(r1, 0xb)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x84000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000011c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000000dc0)={0x3a0, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xfc, 0x8, "d3e065dca20e431fb7e4f27c02dfec03b26b4097cb821b3b64c5a9c3be21611de6bb556f49574b9f1630b329671ba3643a7122d99a72a247ae9129f0886a92c5163200e9f8b20ef3f233f7bc8f7aeafe9ac17527b0bda3132a2bb1dda12ae7d3df05459a6f49c5dfac50f6bcce6c7be18c3d075772d2e9c11ee0062d3b3b0085bdf31bdefc0a9f028d2495d9aef99c9692a84df2bd8021ac66395be3ab5cfa00adae498f4f85c65bbdb58fe6a7ec672eacad884670740ab9b5c0960c6704af4660030ee966edc1bb2659a11fb0ebdbeeb5a1d4060a4e3d514519dc3ff0b9d6642e539e90e279ac3109e3ed013d581036096ac586bf6238c3"}, @NFTA_OBJ_USERDATA={0xf1, 0x8, "635201a425960e46446d75c67000b5481abd6a355f0d46dad74b43976aa89d224f9ea6c459e6767d02fd38ff28079d39c00b1bda11a407f4605affd0f3b2134d0bddbf89b4c1b97962ed43ffb7cef1cf209d3941a92e733a2ebd8d149034327cb01c2db01788100612a39973eae200d8ad90d2e4b44f1745129534d268d2f26d5ab20a6ee56ba12bb021148259c48881aab21e0a239ad958b74aaba734476c6f3724492cd9073888ddaacdb3f381616920a8f86c3a9affa44cbc4d6919b3c57cd4cce567355955c9010830d37c2031663f6e35e64f98a5f1ed7f0426f155eec95ef03dd2adbd816de8d8759a31"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xe7, 0x8, "724adec224cabe22e4afd69213c9f606d48159d7c7ccf30dbf4a9d61182fdc38a6f8adb7e77b93fd4248e82801c9a7a84ac4fc5da23f594eabb2bc5efa1675cdc197423e41bccdcd32975efe54b07ebc67617859bd22ec481827f26a9cfc0666d418a3010215e3b77193f213b009176f21352f1c5dc57c99a34c6bd84d5c320b441ebe69e6422d0c9ab75c42495d3a847656a8cbd4e309580de8d9414b040ac4564d98dcb20703d6a8cd4bea426737af326a0af99a71dc96ab4bb2095cab541d68354926ed92db8460df519db30937852ea60811d43dd9074317e7e10f5d0fb721b623"}, @NFTA_OBJ_USERDATA={0xa5, 0x8, "7e1215ddd4eaf1845c063e308f2ddf2dd4213459468d83cd4843eb9d29cbfd8113c7a624f226e8a1f78c4a6b3a322c9e6497292030fbb61be15de5b033e0cf7b70f70338dfc81494ad4f8cee85e13b948e010440ba617faef24ffc3221d3fadcbb9f4bfc53ceddf7a1ad04c77c2f06f60d38fef35605becbb379fde2b8fb8f5c9567300dfdbbafefd50e3761222a9148de36aa1ab2b49270d4d5e0b7abf217a64a"}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x8010}, 0x4011)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404084c}, 0x20000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0)
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0xb0, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xd, 0x2000}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x2]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x338}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6a8}, @NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000011)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffa, 0x200}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000811}, 0xc0)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001640), r8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r0, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001680)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000001740)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001800)}}, 0x10)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x84, r10, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x12}}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001ac0)={<r12=>0x0, 0x4, 0xfffffc01, 0x40, 0x5, 0x3, 0x8, 0x1, {0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x2, 0x81, 0xfffffffa, 0xffff, 0x2}}, &(0x7f0000001b80)=0xb0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001bc0)={r12, 0xfffff5a4}, &(0x7f0000001c00)=0x8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001d00)={'ip6gre0\x00', &(0x7f0000001c80)={'syztnl0\x00', <r13=>r11, 0x29, 0xd5, 0x0, 0x1, 0x15, @remote, @rand_addr=' \x01\x00', 0x1e, 0x40, 0x944, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001d40)={'vcan0\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001fc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001d80)={0x1dc, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40040c1}, 0x4000000)

44.252203841s ago: executing program 44 (id=5464):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x684201, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0xff, {{0xa, 0x4e23, 0x3, @mcast1, 0x101}}, {{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @usage, <r2=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000580)={r2, 0x10001, 0x7fff, 0x1})
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000980)=0x1, 0x4)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0), 0x802, 0x0)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x81)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c011}, 0x800)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c000)
fcntl$getflags(r1, 0xb)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x84000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000011c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000000dc0)={0x3a0, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xfc, 0x8, "d3e065dca20e431fb7e4f27c02dfec03b26b4097cb821b3b64c5a9c3be21611de6bb556f49574b9f1630b329671ba3643a7122d99a72a247ae9129f0886a92c5163200e9f8b20ef3f233f7bc8f7aeafe9ac17527b0bda3132a2bb1dda12ae7d3df05459a6f49c5dfac50f6bcce6c7be18c3d075772d2e9c11ee0062d3b3b0085bdf31bdefc0a9f028d2495d9aef99c9692a84df2bd8021ac66395be3ab5cfa00adae498f4f85c65bbdb58fe6a7ec672eacad884670740ab9b5c0960c6704af4660030ee966edc1bb2659a11fb0ebdbeeb5a1d4060a4e3d514519dc3ff0b9d6642e539e90e279ac3109e3ed013d581036096ac586bf6238c3"}, @NFTA_OBJ_USERDATA={0xf1, 0x8, "635201a425960e46446d75c67000b5481abd6a355f0d46dad74b43976aa89d224f9ea6c459e6767d02fd38ff28079d39c00b1bda11a407f4605affd0f3b2134d0bddbf89b4c1b97962ed43ffb7cef1cf209d3941a92e733a2ebd8d149034327cb01c2db01788100612a39973eae200d8ad90d2e4b44f1745129534d268d2f26d5ab20a6ee56ba12bb021148259c48881aab21e0a239ad958b74aaba734476c6f3724492cd9073888ddaacdb3f381616920a8f86c3a9affa44cbc4d6919b3c57cd4cce567355955c9010830d37c2031663f6e35e64f98a5f1ed7f0426f155eec95ef03dd2adbd816de8d8759a31"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xe7, 0x8, "724adec224cabe22e4afd69213c9f606d48159d7c7ccf30dbf4a9d61182fdc38a6f8adb7e77b93fd4248e82801c9a7a84ac4fc5da23f594eabb2bc5efa1675cdc197423e41bccdcd32975efe54b07ebc67617859bd22ec481827f26a9cfc0666d418a3010215e3b77193f213b009176f21352f1c5dc57c99a34c6bd84d5c320b441ebe69e6422d0c9ab75c42495d3a847656a8cbd4e309580de8d9414b040ac4564d98dcb20703d6a8cd4bea426737af326a0af99a71dc96ab4bb2095cab541d68354926ed92db8460df519db30937852ea60811d43dd9074317e7e10f5d0fb721b623"}, @NFTA_OBJ_USERDATA={0xa5, 0x8, "7e1215ddd4eaf1845c063e308f2ddf2dd4213459468d83cd4843eb9d29cbfd8113c7a624f226e8a1f78c4a6b3a322c9e6497292030fbb61be15de5b033e0cf7b70f70338dfc81494ad4f8cee85e13b948e010440ba617faef24ffc3221d3fadcbb9f4bfc53ceddf7a1ad04c77c2f06f60d38fef35605becbb379fde2b8fb8f5c9567300dfdbbafefd50e3761222a9148de36aa1ab2b49270d4d5e0b7abf217a64a"}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x8010}, 0x4011)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404084c}, 0x20000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0)
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0xb0, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xd, 0x2000}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x2]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x338}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6a8}, @NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000011)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffa, 0x200}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000811}, 0xc0)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001640), r8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r0, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001680)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000001740)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001800)}}, 0x10)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x84, r10, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x12}}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001ac0)={<r12=>0x0, 0x4, 0xfffffc01, 0x40, 0x5, 0x3, 0x8, 0x1, {0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x2, 0x81, 0xfffffffa, 0xffff, 0x2}}, &(0x7f0000001b80)=0xb0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001bc0)={r12, 0xfffff5a4}, &(0x7f0000001c00)=0x8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001d00)={'ip6gre0\x00', &(0x7f0000001c80)={'syztnl0\x00', <r13=>r11, 0x29, 0xd5, 0x0, 0x1, 0x15, @remote, @rand_addr=' \x01\x00', 0x1e, 0x40, 0x944, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001d40)={'vcan0\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001fc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001d80)={0x1dc, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40040c1}, 0x4000000)

41.83985173s ago: executing program 8 (id=5709):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e20, @loopback}], 0x2c)
r2 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x201, 0x0, 0x0, 0x3}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r5}})
setreuid(0x0, 0x0)
io_uring_enter(r2, 0x4536, 0x6aaf, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB="03ce91b3e17569281d1a6fb8b3c5687a25091b2dc22eabbce9a614f26d776144b42db650e56721a7d139547d365ab53c791513ee3c1e5606cf62f4df6759b530c8d91bf56ff770b5b7ecc88e1070860307020723ca3c88331500bddffc3d8d5b17b1601042e4b55ff9ea675a787e3d034e522377ed7c5d3c7899661c9a12f8d205f1091383d87a73c2686498c883ce67e8846981bd6df728c4175a59f15fe473a1f0373a343f8af78d5b39ba482041d85f3c3e4aca389f3f654babd84de527ea47ee124a748860e27df94a4912d96bcccb15c32e8af0afd93a92a6ca4384831239d6e7021a7b7479b5a44f284f99471bdc1686fd37d32c1674839c92346f", @ANYRES32, @ANYBLOB="00000000f1ffffffffffffff00000000003e00000000000000000001"], 0x48)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r11, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
mmap(&(0x7f0000649000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, r11, 0x83531000)
write$bt_hci(r12, &(0x7f0000000040)=ANY=[], 0x6)
sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

41.756277027s ago: executing program 8 (id=5711):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000000)='usrquota')
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10)
setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000140)={@loopback, @multicast1, @broadcast}, 0xc)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0xd, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x81}}, 0x4008000)

41.568367002s ago: executing program 8 (id=5713):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x4008000)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="06ac0100", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @local, @remote}}}}, 0x0)

41.455288799s ago: executing program 8 (id=5719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r3, 0x111, 0x2, 0x0, &(0x7f0000000080)) (async, rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
write$tun(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="0000001affffffffffffaaaaaaaaaa3e8100220086dd"], 0x46) (rerun: 32)

41.249468636s ago: executing program 8 (id=5721):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd<a\xbe\xbeZ\r\xce\x9f\x835W\x87\xea\xe4e\xbdD\xc7\xb2', 0x40, 0x1a2, 0x0)
mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
dup3(r1, r0, 0x0) (async)
dup3(r1, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x80000) (async)
dup3(r0, r1, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080))
setuid(0xee00) (async)
setuid(0xee00)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000280)=@ethtool_rxfh={0x47, 0x9, 0x6c4, 0x8, 0x7, '+/E', 0x7f}})
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x810c5a, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=virtio,posixacl']) (async)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x810c5a, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=virtio,posixacl'])

41.094244976s ago: executing program 8 (id=5723):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x11, 0xa, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
sync()
getrandom(&(0x7f0000000040)=""/8, 0x8, 0x2)
sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fff}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000000)="bff9b293bd523720236813772bec09339bb3cd232cf6fcc01f2c607671b1397985cd9b3d89b0d167400eb2c89c9e5832fd7f9542", 0x34}, {&(0x7f0000000300)="5a046d834a47432be5c0894ae14e664bf3f455a407b0bfd1b598ce200a21cac21bdafd819ac2c50cc4348026f4c9f292165f47b00165bea8799a066c26bc38ed1c30884f31c778a240a4faf3b95be4591fa2c8aeef3da98b0661fac4015359f155144ada8f3dd90c891ab0bd55d16639e382db5bafbef96d96c56bd328ab0209a670cb9919fd486b0ad4cdcb8f0127a0c6b3e66bbf660945805340a034ec1d6a2df9", 0xa2}, {&(0x7f00000000c0)="d62c2474d9b67261109bc44f136a0698526e6ff539f48ea04a9f90065ce96a18263a00f492af70861911ea0d308742bbb7e389e1e4", 0x35}, {&(0x7f00000003c0)="5a6d9208dc10929cbae1c99a4a5bebbc94db167dd4247cfaf60fe24d5deaf9e92be4cfc41bba77f45e0121255ced5aa52d8f037125d0530f66fbb4521fdbaefaa955e6cddcf24b130ff5dfd7ce", 0x4d}, {&(0x7f0000000440)="2e8ca1edb7fc4009a85cb0158a27a288ccd1ebd3db53791bc67e4fcb04549bdd193c571a393d03ae31c7e288e5a11d0eb2fcd1a42cd4cbec00728954da8cd0f84d5a84ab01aefb485296cfd47f162a0f058c85e3c73b59df3e1954c681389dbf26af08542ae3447e90cd27c213f99807056f1381004fab86a37008dffc76caa694601a6338298fc49d5d1510f2cd8161e71993e46c48ee023cfe6aca78", 0x9d}, {&(0x7f0000000540)="f32c72dab69c641d534951163fb5fe524712653f1baf845f10535b21656b0cd6cba6dc553dec98ce80c70625e1ab78aad2acdc30c82138333ef21c3b01c6c6c2a13ac4949a6c7f7d4e6f5deaae75b06d40939181792e485fca4f30744bd16e6c4de1760a36ef6976ff18287b8b9ce436942a4cc11a1773b2bae1d535e226652c399d392ce28e1b15b91eb14c4a9996402cbc975b87bc874bf15caca21230836b75fef0c6fad1db7babd1282122fa97f2c210755ea88249bd0e5e5a0454a60af30198a3e42b783cbf9de793eecded5f59f714cb38dd79140bf7330dccbc07b2f3eb5e8fb549ae3ee9302f", 0xea}, {&(0x7f0000000640)="c1781d0085b52ead12b9cc9da9e72fc0b02353c721fd15bfc8f8adfca99430354bb40becfdd2e3a650b56166bf5325e40a440079e8d81925876eeb6956d4ae6206a0f9f435d4d5bdcc216ffba43ce0dc540d894596fcf09bceb98aa2aee8562f906611623240217e0585a5b74f64f0991ffcca7f2aa0c208bbe90042533014c5d71fc9d9e0e9521bc98c2458c8b372d677587911aaa821e5961269c19d2f3320db0f9010096254e759827a17db430d3aa53fc4cf302ebc2bdbcbee46a6aecb7ec02b2cc05bcbccb845e4ea708ba9f7e32c98c57e64fd2c5be98b", 0xda}, {&(0x7f0000000740)="74e52bf72ed7c5ed6b7e37a493033eedb2974369cb78964e2e0575e12745d2d9bcf36dd91564f0bd03bb8a159a3f5bb98352f5abbac6778431b7dda95b0b636d7e6646eabf29df4d05c55019a737c750701669d30adabaf452fdc6ebcf452f8e81671e7c1249708d69d868d10e125c7136d0252cac345a0e990cff4d90becd10b52fae5eb5f5a3d87b683989d0f6890d7860e2907a5a3dd50df7bde222d9ee0965a4a6987243dde469bc718d1bfa549d759680d1adea70b536263eb4970d", 0xbe}, {&(0x7f0000000800)="951e4f212a25eeda70421dc9505cded831f9e79eb1cad59dfcc166d7d1ea74c5f282eb137f5761b1a7ea743a963e771afa9dec2c780e366602bc22bce40399073493c7632cefcb251844ce9b46d3f0f4570c90236775fe1a4d0d53ba4d21ef3afd31daa9f8352da9b6c1fd2c18a27e7cce24f0458a62e084fe8c6590461084daa64d8d9e7cd6ede2da3a2766696abe71d30d50dec0c18231303d8dd8441e5a3f3e04c82c01ef862c3076dbf6c6783c5a3e6ed170fea8ff43b387a7ba3e41d3db11929d4aacba0f3c471eb8192e68b43f76dfd1b17d16a0ed3a303236cca01d3daeac969c66580fb8b34773448999", 0xee}], 0x9, &(0x7f0000001300)=[{0x98, 0x112, 0xbf, "51284cd79c21cba220448bf4f3602492b2283fcbe92bd866c121df753efca86cfe443508c15ff801e30bf61c02470b8f204e655f127eb592aaf823ba63d4747cea6e8bdfd1bcb50659f88981cc494614adb60cddacec4175d698ec0aae56385de4032314331c203470d75301a78fcdd12865fc74a3719e792863e9d5918dec73be514afa8e"}, {0x60, 0x10c, 0x8, "01d2ba7bbdd3e5521de1d41a3ec3c6198028dea49ccb3b28a4ae2d0169d5d0901632d1f183a7cf41c2501d8ba2119e20c9a03430c718843561bbacbbcdc822e616f7c525d1bd4c64c231ecc71af079c3"}, {0xe0, 0x88, 0x8, "1b653d53d869fe1d1134a681b671575bab0c7f9e16b973171ba94ec6c1340979958f666052f2d4f688f97204495625b0ba508a41841ef1a26857ed299e207b3e3c8a18ff0ff3317977a517983cba35d7f003b3ff2521f99985f30bf784c2927713b595477ecfc81a60050cb17fa725bb8f1fc736635632739b4b2a2dcd176663b1082e2778a6943cbc341cfbd1cdeb090ed415677f61b746ee577f5fb6f1f6dada0bd449cb242aead94be7e7bbc82b3d4d316a5fff55549bd9ef0f85371142e806ec5e0c5f0ced701c36"}, {0x18, 0x116, 0x58ec0456, "6cce235d50"}, {0x1010, 0xce03e1768db2c2fa, 0xb, "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"}], 0x1200}, 0x4080)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x24044094)
fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, &(0x7f0000005580)={&(0x7f0000000580)={0x28, r8, 0xdf87d043aaba5827, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8009}, 0x8000)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x802)
connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
write$binfmt_script(r10, &(0x7f0000000200), 0xfffffd9d)
close(0x3)

31.308769504s ago: executing program 7 (id=5856):
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x1b, ""/27})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff04, 0x0)

31.238373754s ago: executing program 7 (id=5859):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setreuid(0xee00, 0x0)
r2 = getuid()
setreuid(0xee00, r2)
r3 = syz_usbip_server_init(0x1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0)
write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00000003"], 0x35)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x11})
write(r4, &(0x7f0000000200)="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", 0x1000)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000001400)={[0x8080000, 0x4, 0x2000, 0x1], 0x5, 0x4})

30.619686232s ago: executing program 7 (id=5867):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0xb, 0x8, 0x101, 0x1, 0x8, 0x81, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x6, 0x1, 0xeb]})
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000100))
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f00000001c0)={r4})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000040)={r4})

30.557904417s ago: executing program 7 (id=5868):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "3a8e080800b3020000000010000f0000000100", 0x3234564e})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "d0c75af053a80f7222a104ab18b5cbaf"}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x200100, 0x0)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r11=>r6, 0x29, 0xe3, 0x2, 0x7, 0x4, @mcast2, @empty, 0x8000, 0x20, 0xcc9, 0xfffffffd}})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r14, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0)
sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x9a8, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xffff, 0x4, 0x7, 0x3}, {0x8, 0x2, 0x9, 0xfffffffc}, {0x101, 0x2, 0x81, 0x400}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r6}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x236f}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xa00, 0x5, 0xf, 0xfffffe01}, {0x80, 0x38, 0x4, 0x8000}, {0xa8b4, 0x60, 0xf2, 0x7dd6}, {0x20, 0x6, 0x7, 0xb51f}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r12}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8, 0x7, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x4000}, 0x4008001)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
r15 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r15, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='[:::/', 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xb}, {0x0, 0xa}, {0xfff1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x400}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3436}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x3ff}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r16 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r16, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r16, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)

30.429388876s ago: executing program 7 (id=5871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x5, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={<r6=>0x0}, &(0x7f0000000580)=0xc)
sendmsg$nl_generic(r1, &(0x7f0000001a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f00000005c0)={0x13e8, 0x15, 0xb06, 0x70bd2b, 0x25dfdbfc, {0xf}, [@nested={0x1df, 0x94, 0x0, 0x1, [@typed={0xc, 0x128, 0x0, 0x0, @u64}, @generic="d1945834e9f225d337851a8ef519486bd6977f97ab8abbd8e5e7ec0f47a855b63d82d3f94e95a5181be624897e13ae96c586791c7ba345bba6d39bafba411c9bec7b9ebdd07aeaca37775c2fc0a2fa8cd23368424a89891cb91d8f6d7c92e49afcbbc5486e533848615851d4fe4c78f2aaf75ca5098d7c9a7eb7f7e1cc68ad5f0b6117db94ef941b7e83820d202e6bab062b3e3e73bfad8be7a746f8699a40c002362e2044170c2c27d58e94eca342188360cd2ebb0e0b8c1f72509dbc2c9e3c0961afd5c23401cdc540f7aa99a6cb8526068abb634d5873c8655bfd7e22f8f094", @generic="8ab491e0b246f115fddecac26bb6491ac2a5de940d2a3a7e76bf4de1f3bc28bfb49ae62550b998f811f6b76b1aef1e47fdd731173dba03bdc9fd4670a4df66c95b3985ec03d6634ccd32061a7ad9efacbcd31fa0f370bc68c19b6835891d968d9ed0d35a09d3a28839d2bd11967c96cbfe9cc65e00ffe2046137450b5f418154cf5874d81f18539d85ce8ec7c5e042829ffa6fc1845bdead7c3ba2379152b95cc1f0e896a41137b1a85f829ac9f5860cf478c8287aec8cb337eca6be1d7ff3ecee48944e5cac6b824c397514e0d432a63c8e3dd9d43df408fd9f29e3cebbd30b2247035b0c5d", @typed={0x8, 0x21, 0x0, 0x0, @u32=0xa0}]}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0x1}, @nested={0x10, 0x113, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xa6}]}, @generic="41e4f5ec8c15b6dde81a0f4993b0f6305239cb8b12d44b30f2d4bf593c24302bbf7aea01b129a53a05beb5fb5e2669250e4c9f45ce272b19cdf2b38fa6eeb07fbe2370fee41b8ed71eaaa31ca3ded82ddf8b3159c00c279b45db85cb4998da901744138ba7a8e55cc02ad168be0b6e340007ab8e6940c0f1f2c5fb6e1567b35786de42009fd61c4c55327878f286c13e7578644d6cec19e71531d371cfa51ca0fa74d79e312611f2557691d3db2a61dd989ee18213033e", @nested={0x10d4, 0xc, 0x0, 0x1, [@typed={0xc, 0x2f, 0x0, 0x0, @u64=0x7ff}, @generic="9b6b477726e17ce1fad51d3bc9ef7562f093ec58302a12391b0b4d1b3406ff4e026893f2bfc613c725dde2ab40a73c5dea83b5b181bd6762df60d643059957bd52e7123500e00aa466d69680e4e3197ed103ea480ebd962a10863ff2d09d0ef72ceba71cfa529fa9b787e51ebff471f0ff67203d0f855ece7ec535ad57ef3aadb8e7d857d5641a48fb09a83466647735302358f5cd4cf5ffa43944966336e507fb6310a7f728605b8655980d04d361b5", @generic="fac4b0d791ebab33b1f34c3d42ff81db7e849b3dd7ba74da9197e9518466c0899fb5a3f899521127bb9b69365bf910d38e2ef8ad2325958723cd813586934bb5e72acc5f1c76fa79ef51ce1f1d4413515fde1c876ba39e0789ff27bdab5c06ee94b09bf65cb52c7b5aca07c94aa0e49ce9f75a0de1f5ee17706238610bac0148abe535d869e76af545321aaa5878bcc914539f3c44bf23339707ce8d7c0d6073b4f1dea4b1a15c8879c91ffe1fd53d90d142c478d44970ac3965ff2d25ed617fcff3b816ceb6a0928b8d579ffdfb1842111f4c5e34e95f7c77914cdcc6c36fc5c171e4adadf8f23afa6d32ef890a7b544bca8ca53223d56404104d389630a09e1665ad23bf82f07aa759a41930dd8d2696ec783f7d7f9b2bf2d5644a215d8d59f92828b7e0b692a1ba1cc84311908e5ccf7b3a6e42312ca13f00aef4dd03de6d94b9ff616c2f94c9882b790f9ec6543ca7ad253b75842951ffce94cebff46160a79157957af165dc7c0164752a9776ed03c5840cc502d2cc75cfa2a5fb70b2d6f25f892de90b57cbaf0e44ba750febcd917138b54bd7e243fb3cd47231f7a1af3fdda2c3e75f59dbc606567f28e754d799966dbf9e86bf9852693f82eeb3c196c1fb55fe93e0968ce040644e308d81543f9507803bac994bd332c9b58a80b1c9c3cf87af3d95bfa28111e90a2eaed6a4c5a27c8813848f731ede87b0c18cf4c4620960b7b5b963c835a21f456481d7bd98690556db46670e3a9ccb951998fdcb361c4a46be42b54983e21012020936e42e5e4371b2ea5ec6081e93fe7335e984291b713a137c76c20576e5b5f040148664bc195be7c1c7a2ce5c8d2f72ab8f4e015884b72621b8db444c0cd7cd40cfdfe542cf2f4feeccf7736652e9dbea2116a3a6be1d5fd7298e67df05fd9f0b434005eb0dad537e937a993143cb4ec0c4d3f85ed0542b4651d295ca5cf1b74548018d5b650d678666e3dbedc302dc2fd5e888348cca75ca01196259338922d250ab8e1b0936f382f706ef18a270fa31d62d39746d7167a6a1de7deddd222e474ac51d630ccb6e61c956aa509f66178f218a95a4462d2a700d093c3edca786fe1dc5062781350026659d2d34cf4433c600a6b05180d30c7cd9f39b923bc89031da0fea827b7e2f1dbf2ddbcfbed6d572cff756120bf16aa52459343a0e1d08ee8a354eb6c1a45ee8e07ad353ae7be691de2beb11e0d8ddd73b6ffb7376bd0d00d2263b79970137c24caab1a9962d345b9ac9070df9b0e5e28f86133ca9647a6a46f091de14014f8b79698e15d4e2017e79d7f9044c79dce7481ca61340e291a2fd6c801e9946d9559751a029981be518a5f093e5f0dfffcd62e2e44062ee9a531cd9ae0c4051cc479677e904ff2ef9d5a9420a1749f2424a4da71534d2177fe5ff689e7229b9484aea9c1a52600e19cff689a3bf26f42ac83d8f5c00d0c84e6c66ba200363e4b3ea0860737bc1ca5a4895dfc05c26151596b245dd9183ffd2b41a3f3cb7d2bc80a5c8ac266547c64842fb9dde7232b914efbf413fc5daed84ab16949ad39b1f75f9184337bcebcfaafcb2ed3eaf6d765dc1b0161cf29813fdbe4e7794f068bc1e45e6760bc70890560acb094285c05544ed0bcf8cc1bb99376b3fc8274a7fac9a43a997a5a73a1d9a64ef700c0318277dc54e7edf73cbc4231504dd941360333aa48a17783342b38e21f1ffc404d5bf679130dc9dac00665cb5f78a32621440cdcbc4d54937293ed8bb69c07f6d2aa029f5d5fe57ee029f3a3c15ae2d18c59c71d6c5e7d859ff21d843b8f7c66fc755ff991c7f677744175362d084e408cc8e7a90ab187d2003acf72455efeeaccdd8afb5046bb9a604e39daaf323fbca921a970c9ca25e7f017d31a8e254b4a9283a622184459a0388750d92071801eb3da01add456a92de2bf17ca536ac39e000c58f83035482136371cec8c2b914c0e46d9dc25edd4bec37ccd9fd65fec915c47439f8388108478f98c2301ab58cbd04f072031ae79f4b97910b066396db333be951bf9dddd2b3c5420b24993e27cda7770f5e4022d28defb2550241f0ef75ec3d0a7613858aeff14fb361472c785b060c82b43be18533da35c2f67eff982b12f9225d52d812f39ba4a91facfb9e946e792ba25f64132bd1031db3140fb37991a184b9f26bfa193c91c4d6b039165fb5a0aa96eabda900922a30f9526369d5e7cc5bdc738f58e00e9d0014fd03fb2ffe9920462ded70b9d5feb947edfe3b44bcd564e5b4b2d631978163311181c7de6270844dbe9f98fb12a144041caad727df6868586da26a62a7795ee36056b09cc5b4af98e376d043debeb963a783153ad5fa0450083c6fceec0a81f43da1b69bd1451a01a45fe74f0dd8dabdcef927be7718df324559ac79381c3d229bfd697652b1e26903d499bd826f3fbe11d8ed95440438c0745c146ba1ec70a479d5e157320b82f0ec1e4c927f475a7e6a89b239b14afa8e83c8a240cd12a002bea64917d8ad3dcbf5f77f4c1036089890b8ffb7bbec3f7a213ed7dfeff4192291a92213adcc460ed06b9e3dcccbb2b5d5743deb1f1d31db72886aaa66eee0288484c67e15b5981fb2bdc6821fe7586ad47c7026cf288ff64484db7258103acef51b1600e12eab2acc8c0bd55270c41c28d7f08e33610aa1cc2516dd136603158800b2a4b659f91370eac36d0f9e9eb3d24e037e75756ab4049c1dd5277c68ad86a24da8556c06a1f266bb704c1eb36348f24aded534669f473f636fc41a6be2d5cfe4655f91f6259cd738d86bb5c273cfd4de6a3ce234e6be85e8fd2f503702782698d203e1c7979dbf494b377aead5a242eba6cc6b03bb72f565dc2b41777534f747b729244e147523133ad2d818039899d98500296ddaa8c7ab448f1c5aa2d7b785a62ecb4a7f9cf3ccc69245f75a12811e0e51b74259945b5a908d7f2cf9e24ed043f8a1d16dbdf8bb45e029e45f271cb0d9783712eaf7c4b06227c80704657210dfa0fbcaee5a58b0ad7675c44fdea994a8a166e89e96c7a54766164675553e36a62edef8f55f7626a807435f5579f2d69a7012356da3c9cad20b0fb29bb7ce7e021796bb97a17455f2d3e0c356acc1e70a7db952ba53c99753f1af4fc4e410d0ac4f5a81253edf3b7511091e878dadf7c3cec8e963c80739df52c99922ca7f70a31eec7a175c8fc9c7bbe9b4de858e616dcc0731d0d30d8e3555b86e287758debcebe76da81a5a4472b505ff456e5cb5bed00957946e229c4c570ffab301010f2b36e39370af42852eb4cfdb6c7ac44cc9ab668cbfdcb15e6db302e97030f4d95119d3a82f78e1eddad7e8fd97839587828ef22f553660398857812ba30570348887b50207e27711c198306197bd6529cccbdf76eb2d32389fa2909855f800bd4274e875b8093505711219cc1ce9932a55c360ba6a7dca218c97e86be3da3f70eb4f0832e82a6a4beab96379861828f54e2aa78cff1c7de7ae030eafb971c3c2c93828e41f475e9fe9c3b6cc789bd59e030e5afc4e4b55bd4edc141ea7883f51ad1cc7db5a4e8b75487ef07d6c71cefde61989a07fb47a64f04324973b81d336b6dad3a824368f7dda54091cb71ac137b4f15287b4e77dca098d21e8d41452c21550c62ef46ba6fa08021983c988df6b4c0d6ac952f69840b57eebd1539313974fab73fe2a7f25fc96e89dd88cb31b9aa6bc1c8f1b24debe181c4f5d328ecb4db0a6dd07a5784a9b0b617084c33cdef535b2f490abcf8dbca1ddf3d2384f430b5898165e12dff9f9cae599eaabd7170f0efab7410a1464c592f13f12ae6ab9d723f794ce7863390f01b67b4793008a19e92361f32aaddbcc73b2c068dff92907954af596e758cc2a5e24c75d8d62066b642f20c67ae6eca506000a2c21b7d27bcde2064f5cc471fdc5913b6a98995fdac2bf52347f23195d8057308b343af0d0157cd42141f40a6d37d0067a43fd69ddb3702c8efbedcee26f89a3cd00c7ea6e860e7277c59422f3db13aca875820c1590dd3a2af6fca5864cd19c3c4d48f9838a38888126e1bf60fb9e33ca57e1f5806357dd43d1370d5b524e56c550e592d8858d29c4a9766951731e1b94cb8e448a1dbafe7175c71597f21b5b2386c54c0a2c19456440ee55bb7070b9604dfd9c0cb7be24d53bc33e67accdcf0a1b9fb06829e2a2e6baeb013e9d7aefd69644f23c651627e904d99cc26782e11e4c033513a09e2669d5a1bf9c65a31458254423f6d375c0e1c419906ccceebc1d568e1f48e04ca5d9d0b0eb5eb81fcc2615b4e1283f2e9d71cd26e5fe95adfd1f44d80a4a29caf23b5fea6f0317e4d0b7a45c2f3efbbd09d43dbfdbb8704680bfec06bf3215dc554cd55a8db8a526551b68d666ee7de00bc0c31a5171cff0325331b5d3b93257b994788271ed043c4f08ad1b46df9c13d80836a046afa320356e4b2a18ab5b3600017a61b4e7b05b6a0edf111c46c9d715deac274073de9406f0a91e5059dae4e8f2dc1cc21d990b9e25ab6530981896e2985bd92e0a3a5b420cf36194ecb82abd4e5561c0d44f49a65bbe363956254671be0b98aa195aecd821656191a3e2431dcc624e74a723d707a45b2bf96ac5942fd239625e607a58764ca8684f7b8ee9d3d2c0be125a5166d967f46d9d2e42978dafed34757e50f7327b91cf8b051fd4fc15d40736e7b411f49020cff1f36e8bbd1ce83ab6e2b5d84dafb1cd64c588f054f02c0ae93adc38a30d22f372236136a3d033c20093b8b05277d23a5133d084306785351816030b5acaed908f9579848c38b891dff24535c883429eec5b5c71351afc400d7e80aa9b796bb407cb1c88c5fcef4943247153296bd6ca80a3553b4fda72cf1b1c868b3d7b72b534e036150fdfee82a20fef3647ec6ea4e9bbd1a11809791a392aa86d2699eee8e1f843956d8f8662bd1322a60ff641500fbfe44f0b1b3475e91d387681a3afa9ebaf5de1b4939477e567c27ffb8d69a73626840bf970c08e1eced133b8c34a4475063ab3bf0f96fe25bf272170f407a5d5c610e57d489bee7313f83fcec8bf830bf11c46be00ee71c99d699630409456e2929294f593bea7d71c86c93073f4d4c3383a48d2180abd77b6289955f99c423b526f070f73801e21b8b285d6682bb46291616ef6fe8d6b33aec3002b9ea2f7dbb9606bbfec222894f7d716ed6ce072dce818654572d9d7f97ec4006a87802be71da871d49a567c01e94bc76f91413cb8fd8460fc12f5c441eb0cb9de6f30466f6638efaa8761606fa74c3e3ef507b48485cfaaa94ea9bfc9dd4adedc71c307943d2f4397e8f03b4a6d6f8db5ef075e96d896fa2db74275e8c8b23e662bc20002c69345d391b056947f7360a4a7f39a404fbc66a35449ef98592a1340ac24de302e30f702157056d37509ce7c2e2b41fcfb0c81a489e04508ceffd060332a5026ee343a13204f6318ed74713a8b6c8ec0a727c2662ef61c085175fc16d8dc435052210e1b92d61d17c81d02004a6739707ee9fdb6fda8f69d71b0e5006737b7ba82655e83cb05c353e8bfb8914b6e94eb49451e88a826d90b4acf24c69e3a453865d96d56727dc312d5b6680e8d7af24e49534b41075d570fba999e3e41cc93708981b5c882480edb44f66683ccffc0dbe9ebc52863194153b5dc14c28093f410e1f604c4a58fb73e4a88e5574826cad3b0c5f43f8631345fbbc098f98bb98701ec14e6d49f875e916f53f0b9d9e1f6e139dca225c213536684b5ba4c134bdc5611f0d46f1c6f831941c651ad2e9406d7", @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x4d, 0x138, 0x0, 0x1, [@typed={0x14, 0x11b, 0x0, 0x0, @ipv6=@local}, @generic="cadb6c6fffa433a2b445b2213227bd14ebda842ec0601d524a8a06e11db191fcdc3fe98df708f03d008064674551eb1b0996b07eae"]}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x20040011}, 0x3b33fa26843ae943)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0x81, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x0, 0x5})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r9, 0x940, 0x22265}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x2}}]}]}}}]}, 0x44}}, 0x8004)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000080)={0x8})
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x8}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0xea9}, [@alu={0x4, 0x1, 0x1, 0x0, 0x0, 0x100, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x8b, &(0x7f0000000280)=""/139, 0x40f00, 0x2, '\x00', r9, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x2, 0x6, 0xc}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r12], &(0x7f00000003c0)=[{0x3, 0x4, 0x0, 0xb}, {0x2, 0x5, 0x0, 0x1}], 0x10, 0x7}, 0x94)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f00000003c0)=ANY=[])

30.327992998s ago: executing program 7 (id=5874):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESHEX])
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r2=>0x0, <r3=>0x0}, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x6, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000040)=""/5)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10000, 0x4)
execveat(r5, &(0x7f0000000140)='./file1\x00', &(0x7f0000000440)={[&(0x7f0000000180)='hugetlbfs\x00', &(0x7f00000001c0)='hugetlbfs\x00', &(0x7f0000000280)='hugetlbfs\x00', &(0x7f00000002c0)='\x00', &(0x7f00000003c0)='hugetlbfs\x00', &(0x7f0000000400)='/\':(\x00']}, &(0x7f00000005c0)={[&(0x7f0000000480)='hugetlbfs\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='+\'}\'/\xb2\x00', &(0x7f0000000540)='-\x00', &(0x7f0000000580)=':#\'\x00']}, 0x800)
mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x100001, &(0x7f0000000400))

25.372459909s ago: executing program 45 (id=5723):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x11, 0xa, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
sync()
getrandom(&(0x7f0000000040)=""/8, 0x8, 0x2)
sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fff}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000000)="bff9b293bd523720236813772bec09339bb3cd232cf6fcc01f2c607671b1397985cd9b3d89b0d167400eb2c89c9e5832fd7f9542", 0x34}, {&(0x7f0000000300)="5a046d834a47432be5c0894ae14e664bf3f455a407b0bfd1b598ce200a21cac21bdafd819ac2c50cc4348026f4c9f292165f47b00165bea8799a066c26bc38ed1c30884f31c778a240a4faf3b95be4591fa2c8aeef3da98b0661fac4015359f155144ada8f3dd90c891ab0bd55d16639e382db5bafbef96d96c56bd328ab0209a670cb9919fd486b0ad4cdcb8f0127a0c6b3e66bbf660945805340a034ec1d6a2df9", 0xa2}, {&(0x7f00000000c0)="d62c2474d9b67261109bc44f136a0698526e6ff539f48ea04a9f90065ce96a18263a00f492af70861911ea0d308742bbb7e389e1e4", 0x35}, {&(0x7f00000003c0)="5a6d9208dc10929cbae1c99a4a5bebbc94db167dd4247cfaf60fe24d5deaf9e92be4cfc41bba77f45e0121255ced5aa52d8f037125d0530f66fbb4521fdbaefaa955e6cddcf24b130ff5dfd7ce", 0x4d}, {&(0x7f0000000440)="2e8ca1edb7fc4009a85cb0158a27a288ccd1ebd3db53791bc67e4fcb04549bdd193c571a393d03ae31c7e288e5a11d0eb2fcd1a42cd4cbec00728954da8cd0f84d5a84ab01aefb485296cfd47f162a0f058c85e3c73b59df3e1954c681389dbf26af08542ae3447e90cd27c213f99807056f1381004fab86a37008dffc76caa694601a6338298fc49d5d1510f2cd8161e71993e46c48ee023cfe6aca78", 0x9d}, {&(0x7f0000000540)="f32c72dab69c641d534951163fb5fe524712653f1baf845f10535b21656b0cd6cba6dc553dec98ce80c70625e1ab78aad2acdc30c82138333ef21c3b01c6c6c2a13ac4949a6c7f7d4e6f5deaae75b06d40939181792e485fca4f30744bd16e6c4de1760a36ef6976ff18287b8b9ce436942a4cc11a1773b2bae1d535e226652c399d392ce28e1b15b91eb14c4a9996402cbc975b87bc874bf15caca21230836b75fef0c6fad1db7babd1282122fa97f2c210755ea88249bd0e5e5a0454a60af30198a3e42b783cbf9de793eecded5f59f714cb38dd79140bf7330dccbc07b2f3eb5e8fb549ae3ee9302f", 0xea}, {&(0x7f0000000640)="c1781d0085b52ead12b9cc9da9e72fc0b02353c721fd15bfc8f8adfca99430354bb40becfdd2e3a650b56166bf5325e40a440079e8d81925876eeb6956d4ae6206a0f9f435d4d5bdcc216ffba43ce0dc540d894596fcf09bceb98aa2aee8562f906611623240217e0585a5b74f64f0991ffcca7f2aa0c208bbe90042533014c5d71fc9d9e0e9521bc98c2458c8b372d677587911aaa821e5961269c19d2f3320db0f9010096254e759827a17db430d3aa53fc4cf302ebc2bdbcbee46a6aecb7ec02b2cc05bcbccb845e4ea708ba9f7e32c98c57e64fd2c5be98b", 0xda}, {&(0x7f0000000740)="74e52bf72ed7c5ed6b7e37a493033eedb2974369cb78964e2e0575e12745d2d9bcf36dd91564f0bd03bb8a159a3f5bb98352f5abbac6778431b7dda95b0b636d7e6646eabf29df4d05c55019a737c750701669d30adabaf452fdc6ebcf452f8e81671e7c1249708d69d868d10e125c7136d0252cac345a0e990cff4d90becd10b52fae5eb5f5a3d87b683989d0f6890d7860e2907a5a3dd50df7bde222d9ee0965a4a6987243dde469bc718d1bfa549d759680d1adea70b536263eb4970d", 0xbe}, {&(0x7f0000000800)="951e4f212a25eeda70421dc9505cded831f9e79eb1cad59dfcc166d7d1ea74c5f282eb137f5761b1a7ea743a963e771afa9dec2c780e366602bc22bce40399073493c7632cefcb251844ce9b46d3f0f4570c90236775fe1a4d0d53ba4d21ef3afd31daa9f8352da9b6c1fd2c18a27e7cce24f0458a62e084fe8c6590461084daa64d8d9e7cd6ede2da3a2766696abe71d30d50dec0c18231303d8dd8441e5a3f3e04c82c01ef862c3076dbf6c6783c5a3e6ed170fea8ff43b387a7ba3e41d3db11929d4aacba0f3c471eb8192e68b43f76dfd1b17d16a0ed3a303236cca01d3daeac969c66580fb8b34773448999", 0xee}], 0x9, &(0x7f0000001300)=[{0x98, 0x112, 0xbf, "51284cd79c21cba220448bf4f3602492b2283fcbe92bd866c121df753efca86cfe443508c15ff801e30bf61c02470b8f204e655f127eb592aaf823ba63d4747cea6e8bdfd1bcb50659f88981cc494614adb60cddacec4175d698ec0aae56385de4032314331c203470d75301a78fcdd12865fc74a3719e792863e9d5918dec73be514afa8e"}, {0x60, 0x10c, 0x8, "01d2ba7bbdd3e5521de1d41a3ec3c6198028dea49ccb3b28a4ae2d0169d5d0901632d1f183a7cf41c2501d8ba2119e20c9a03430c718843561bbacbbcdc822e616f7c525d1bd4c64c231ecc71af079c3"}, {0xe0, 0x88, 0x8, "1b653d53d869fe1d1134a681b671575bab0c7f9e16b973171ba94ec6c1340979958f666052f2d4f688f97204495625b0ba508a41841ef1a26857ed299e207b3e3c8a18ff0ff3317977a517983cba35d7f003b3ff2521f99985f30bf784c2927713b595477ecfc81a60050cb17fa725bb8f1fc736635632739b4b2a2dcd176663b1082e2778a6943cbc341cfbd1cdeb090ed415677f61b746ee577f5fb6f1f6dada0bd449cb242aead94be7e7bbc82b3d4d316a5fff55549bd9ef0f85371142e806ec5e0c5f0ced701c36"}, {0x18, 0x116, 0x58ec0456, "6cce235d50"}, {0x1010, 0xce03e1768db2c2fa, 0xb, "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"}], 0x1200}, 0x4080)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x24044094)
fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, &(0x7f0000005580)={&(0x7f0000000580)={0x28, r8, 0xdf87d043aaba5827, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8009}, 0x8000)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x802)
connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
write$binfmt_script(r10, &(0x7f0000000200), 0xfffffd9d)
close(0x3)

15.207764524s ago: executing program 46 (id=5874):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESHEX])
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r2=>0x0, <r3=>0x0}, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x6, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000040)=""/5)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10000, 0x4)
execveat(r5, &(0x7f0000000140)='./file1\x00', &(0x7f0000000440)={[&(0x7f0000000180)='hugetlbfs\x00', &(0x7f00000001c0)='hugetlbfs\x00', &(0x7f0000000280)='hugetlbfs\x00', &(0x7f00000002c0)='\x00', &(0x7f00000003c0)='hugetlbfs\x00', &(0x7f0000000400)='/\':(\x00']}, &(0x7f00000005c0)={[&(0x7f0000000480)='hugetlbfs\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='+\'}\'/\xb2\x00', &(0x7f0000000540)='-\x00', &(0x7f0000000580)=':#\'\x00']}, 0x800)
mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x100001, &(0x7f0000000400))

9.91814005s ago: executing program 1 (id=6050):
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b717"], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0xffff, 0x1, 0x3, 0x0, r3}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x2, 0x7, 0x1d, 0x3, 0x82, 0x1, 0x7}, 0x9c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfffffffffffffffd})

9.36849241s ago: executing program 9 (id=6055):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000002c00000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

1.688260607s ago: executing program 1 (id=6064):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)=ANY=[@ANYBLOB="180000001600010a003487b93a9e89f5000080fedbdf2515"], 0x18}}, 0x0)

1.685829529s ago: executing program 1 (id=6066):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
unshare(0x22020600)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040))
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x19, 0x4, 0x8, 0x2}, 0x50)
socket$phonet(0x23, 0x2, 0x1)
close_range(r4, 0xffffffffffffffff, 0x2)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0x8}, {0xffe0}}}, 0x24}}, 0x0)
r6 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4)
fallocate(r6, 0x3, 0x3, 0xffffffff)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0)

1.631685468s ago: executing program 9 (id=6070):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x20000010) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000c6940)={0x72, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x2, "b2cddbf23fa8f2"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000c7940)={0x0, ""/256, 0x0, <r5=>0x0}) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c7b40)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0xc, "39156eb3b9e6ec"}) (rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000002280)={0x0, ""/256, <r8=>0x0, <r9=>0x0}) (rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000000280)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x9, "3a6f3da3979bc9"}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000c8b40)={{<r10=>0x0, 0x0, 0x3, 0x4, 0x9, 0x6, 0x1, 0x401, 0x2, 0x400, 0x84da, 0x7, 0x7fffffffffffffff, 0xb, 0x8}, 0x18, [0x0, 0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c8c00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}], 0x0, "aa31bb4ce83991"}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000c9c00)={{<r12=>0x0, 0x7ff, 0xffffffffffffffff, 0xe76b, 0x8, 0x0, 0xb, 0x2, 0x10000, 0x7ff, 0x4, 0x8, 0x2, 0x5, 0x3ff}}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000cac00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}], 0x8, "02062673779b38"})
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f0000002280)={0x0, ""/256, <r16=>0x0, <r17=>0x0}) (rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r15, 0xd000943d, &(0x7f0000000280)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x9, "3a6f3da3979bc9"}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000cbc00)={{<r18=>0x0, 0x9, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x3ff, 0x3, 0xa980, 0x800, 0xffffffff, 0x7, 0x94, 0x7}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000ccc00)={0x0, ""/256, 0x0, <r19=>0x0}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000cce00)={0x0, ""/256, 0x0, <r20=>0x0}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000cd000)={{<r21=>0x0, 0x5, 0xfffffffffffffff9, 0x63f6, 0x3, 0x279, 0xe, 0x96f, 0x3ff, 0x0, 0x2b, 0x9, 0x0, 0x81, 0x7fffffff}}) (async, rerun: 64)
r22 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r22, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r22, 0x81f8943c, &(0x7f0000002280)={0x0, ""/256, <r23=>0x0, <r24=>0x0}) (rerun: 32)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r22, 0xd000943d, &(0x7f0000000280)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}], 0x9, "3a6f3da3979bc9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000ce000)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {r6}, {0x0, r9}, {r10, r11}, {r12, r14}, {0x0, r17}, {r18, r19}, {0x0, r20}, {r21, r24}], 0x46, "437301ac351bce"}) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x62, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) (rerun: 64)

1.618206904s ago: executing program 1 (id=6071):
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=<r0=>0x0, &(0x7f00000002c0)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1})
syz_io_uring_setup(0x6196, &(0x7f00000000c0)={0x0, 0x4d7f, 0x4, 0x3, 0x13}, &(0x7f0000000000), &(0x7f0000000140)=<r2=>0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r3, 0x7, 0x0, 0x5, 0x4083fc05fee42ccf, 0x1, {0x0, r4}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0x0, 0xf000, 0x1})
close_range(r5, 0xffffffffffffffff, 0x0)

1.509618955s ago: executing program 9 (id=6074):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvfrom$packet(r2, 0x0, 0x0, 0x40010122, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
r5 = socket$caif_stream(0x25, 0x1, 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'veth0\x00', {0x5}, 0xfffb})
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000040)={0x23, 0x6, 0x400})
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d000400"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.44898782s ago: executing program 1 (id=6075):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r0}, 0x18)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000180)='\x88\x9a.\xaa\x8c\b\x99\xe5 \x19\xa6\x1c}g\xf5)P\x86\f\xba\xff\x8fS0\xd0/\xa2\x16\xc1?5\x9f&!\xfe?\xbe\x03\\\x94s\xf5\x1f\xaa\xd9\xfd2\xbc5y\x18#Qu\x85\xee-\xc0\xac\xa8\x93\x0eXds\xf3\xf6\x84\xca\"\xb8\x06\x8bM\xd4\xc5\x8c\xe1\x86\'@\x9f\x8f\xce\x85\xdf\xbb\xa2\x04Z\xbc:;\x00B\x85U\xf6\x9d\x9e_\x9f_\x9dD\t\xa6\xf6\xa9\xb2e\x92\xd0g\xb3\x01\xb77\x8eC}\x1d\x92\xa0\x85)\x0f\x1d\x7f\xd6\xd7\x0f\x8d\xea']})

1.448779296s ago: executing program 9 (id=6076):
prctl$PR_CAPBSET_READ(0x59616d61, 0xdaffffffffffffff)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b717"], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000280)='map_files\x00')
getdents64(r2, &(0x7f0000000140)=""/162, 0xa2)

1.446317752s ago: executing program 1 (id=6078):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x8c}}, 0x40048d1)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x40025b0c, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r5, r4, 0x26}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xd, &(0x7f0000000140)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}})

1.136353642s ago: executing program 6 (id=6085):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[], 0xa8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@mmap}], [{@dont_hash}]}})
pipe2$9p(&(0x7f0000000240), 0x0) (async)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async)
dup(r1) (async)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) (async)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) (async)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[], 0xa8) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@mmap}], [{@dont_hash}]}}) (async)

1.058202982s ago: executing program 0 (id=6087):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x400000000000000})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000900)={[{@metacopy_on}, {@userxattr}]})

1.057460607s ago: executing program 6 (id=6088):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "3a8e080800b3020000000010000f0000000100", 0x3234564e})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "d0c75af053a80f7222a104ab18b5cbaf"}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x200100, 0x0)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r11=>r6, 0x29, 0xe3, 0x2, 0x7, 0x4, @mcast2, @empty, 0x8000, 0x20, 0xcc9, 0xfffffffd}})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r14, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0)
sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x9a8, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xffff, 0x4, 0x7, 0x3}, {0x8, 0x2, 0x9, 0xfffffffc}, {0x101, 0x2, 0x81, 0x400}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r6}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x236f}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xa00, 0x5, 0xf, 0xfffffe01}, {0x80, 0x38, 0x4, 0x8000}, {0xa8b4, 0x60, 0xf2, 0x7dd6}, {0x20, 0x6, 0x7, 0xb51f}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r12}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8, 0x7, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x4000}, 0x4008001)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
r15 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r15, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='[:::/', 0x0)
r16 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r16, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r16, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)

1.052469917s ago: executing program 0 (id=6089):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffffffffff00ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8e79f035216f6e94)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

220.212414ms ago: executing program 9 (id=6090):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000003b00000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

148.763583ms ago: executing program 0 (id=6091):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) (async)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f00000005c0)=""/80, 0x50}, {&(0x7f0000000640)=""/110, 0x6e}], 0x4}, 0x40000000) (async, rerun: 32)
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
rmdir(&(0x7f0000000440)='./file0\x00') (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)

146.305265ms ago: executing program 6 (id=6092):
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0}) (async, rerun: 64)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/210, &(0x7f0000000140)=0xd2) (async, rerun: 64)
bind$isdn(r1, &(0x7f0000000380)={0x22, 0x9, 0xd5, 0x8, 0x6}, 0x6) (async)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async, rerun: 64)
ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000280)) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

133.459834ms ago: executing program 0 (id=6093):
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0xfffffffffffffffe, &(0x7f0000000000))
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

133.00436ms ago: executing program 9 (id=6094):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0)
fchdir(r3) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time_for_children\x00')
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x189, 0x0, 0x0})
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000000140)={0xc1, 0x0, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

132.768846ms ago: executing program 6 (id=6095):
setuid(0xee01)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001)
r2 = getpgid(0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2})
sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000540)={0x0, 0xffffffffffffff4d, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r4, 0x72b, 0x0, 0x25dfdbfd}, 0x14}}, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x20400)
r7 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x109200)
ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000380))
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f00000000c0)={0x0, 0xc})
setuid(0xee01) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) (async)
getpgid(0x0) (async)
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) (async)
sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) (async)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000540)={0x0, 0xffffffffffffff4d, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r4, 0x72b, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) (async)
syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x20400) (async)
syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x109200) (async)
ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000380)) (async)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f00000000c0)={0x0, 0xc}) (async)

131.755964ms ago: executing program 0 (id=6096):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x3c}}, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0) (async)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84442, 0x0) (async)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x340002, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x1]}})
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = dup(r3)
write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async)
sync() (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = dup(r10)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r13, 0x1, 0x70bd22, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}}, 0x200444d4) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)

79.881504ms ago: executing program 6 (id=6097):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r0, 0x0, &(0x7f00000000c0))
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x1, {0x1, @pix_mp={0xcf6, 0x1c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xfffffffd}, {0x6, 0x5}, {0x9, 0x8}, {0x8, 0x10000}], 0x7f, 0x5, 0x2, 0x1}}, 0x7f})
futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000003c0)={0x3, 0x6, 0x2, {0x1, @pix_mp={0x131c, 0x9, 0x20363159, 0x2, 0x0, [{0x2776463d, 0x7}, {0x0, 0x7f}, {0xffffffff, 0xffff}, {0x1, 0x42}, {0x7, 0x310cb2b8}, {0x7fffffff, 0x7c}, {0x614, 0xfffffffc}, {0x81, 0x6}], 0xa0, 0x7f, 0x2, 0x2, 0x7}}, 0x8})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

79.379449ms ago: executing program 0 (id=6098):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"])
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x490800, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff52)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x30)

0s ago: executing program 6 (id=6099):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7})
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)) (async)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mremap(&(0x7f0000e40000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)
ioctl$TUNSETOWNER(r4, 0x400454cc, r5) (async)
ioctl$TUNSETOWNER(r4, 0x400454cc, r5)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xed, 0x4000000000, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

] audit: type=1400 audit(2000000312.829:30494): avc:  denied  { unmount } for  pid=19706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  389.756679][ T6361] usb 11-1: new high-speed USB device number 34 using dummy_hcd
[  389.884803][T23507] openvswitch: netlink: Key 3 has unexpected len 2 expected 4
[  389.906691][ T6361] usb 11-1: Using ep0 maxpacket: 8
[  389.912282][ T6361] usb 11-1: config 0 has no interfaces?
[  389.916059][ T6361] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  389.919433][ T6361] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.920792][T23510] lo speed is unknown, defaulting to 1000
[  389.922055][ T6361] usb 11-1: Product: syz
[  389.925456][ T6361] usb 11-1: Manufacturer: syz
[  389.927365][ T6361] usb 11-1: SerialNumber: syz
[  389.930386][ T6361] usb 11-1: config 0 descriptor??
[  389.968580][T23511] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5314'.
[  389.976088][T23511] Bluetooth: MGMT ver 1.23
[  389.981183][T23511] CIFS mount error: No usable UNC path provided in device string!
[  389.981183][T23511] 
[  389.984521][T23511] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  389.990609][ T5972] Bluetooth: hci2: unexpected event for opcode 0x042c
[  390.150870][ T6361] usb 11-1: USB disconnect, device number 34
[  390.500864][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5319'.
[  390.505790][T23525] IPv6: sit4: Disabled Multicast RS
[  390.508369][T23525] sit4: entered allmulticast mode
[  390.559858][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  390.739597][T23541] netlink: 432 bytes leftover after parsing attributes in process `syz.4.5324'.
[  391.027008][T23554] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2
[  391.030804][T23554] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0
[  391.069894][T23556] netlink: 'syz.4.5332': attribute type 64 has an invalid length.
[  391.072210][T23556] netlink: 'syz.4.5332': attribute type 4 has an invalid length.
[  391.074405][T23556] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5332'.
[  391.079894][T23557] __vm_enough_memory: pid: 23557, comm: syz.6.5330, bytes: 21200284393472 not enough memory for the allocation
[  391.132515][   T40] audit: type=1800 audit(2000000314.419:30495): pid=23559 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5333" name="bus" dev="overlay" ino=1962 res=0 errno=0
[  391.598469][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  392.071098][T23572] netlink: 'syz.6.5338': attribute type 1 has an invalid length.
[  392.073569][T23572] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5338'.
[  392.321842][T23591] kernel profiling enabled (shift: 63)
[  392.323639][T23591] profiling shift: 63 too large
[  392.488755][T23600] tipc: Started in network mode
[  392.490420][T23600] tipc: Node identity b6c4855418e9, cluster identity 4711
[  392.492709][T23600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.532251][T23600] syzkaller0: entered promiscuous mode
[  392.534605][T23600] syzkaller0: entered allmulticast mode
[  392.539584][T23600] tipc: Resetting bearer <eth:syzkaller0>
[  392.558972][T23599] tipc: Resetting bearer <eth:syzkaller0>
[  392.640135][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  393.536671][    T9] tipc: Node number set to 2922218836
[  393.678650][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  394.692468][T23599] tipc: Disabling bearer <eth:syzkaller0>
[  394.707647][T23603] netlink: 'syz.4.5349': attribute type 4 has an invalid length.
[  394.720110][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  394.743221][T23605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5350'.
[  394.746094][T23605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5350'.
[  394.798781][T23610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23610 comm=syz.6.5351
[  394.803351][T23610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5351'.
[  395.732866][T23626] openvswitch: netlink: Message has 24 unknown bytes.
[  395.735522][T23626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.759481][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  395.793333][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5359'.
[  396.044588][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'.
[  396.049585][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'.
[  396.050810][T23645] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5364'.
[  396.052832][T23643] netlink: 'syz.4.5365': attribute type 11 has an invalid length.
[  396.061861][T23644] netlink: 'syz.4.5365': attribute type 11 has an invalid length.
[  396.065314][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5365'.
[  396.071741][T23643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5365'.
[  396.076780][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'.
[  396.080315][T23644] netlink: 'syz.4.5365': attribute type 11 has an invalid length.
[  396.084181][T23643] netlink: 'syz.4.5365': attribute type 11 has an invalid length.
[  396.329690][ T1186] block nbd2: Possible stuck request ffff888027d67000: control (read@0,4096B). Runtime 90 seconds
[  396.354380][T23667] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  396.360780][T23667] qnx6: wrong signature (magic) in superblock #1.
[  396.362815][T23667] qnx6: unable to read the first superblock
[  396.406122][T23669] libceph: resolve '40' (ret=-3): failed
[  396.451373][T23673] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  396.502160][T23676] netlink: 'syz.6.5378': attribute type 9 has an invalid length.
[  396.797618][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  397.436671][T23709] block nbd6: NBD_DISCONNECT
[  397.747987][T23730] tmpfs: User quota block hardlimit too large.
[  397.754194][T23731] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  397.837093][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  398.796139][T23747] program syz.6.5398 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  398.876636][    C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  398.879065][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  398.954814][T23749] dvmrp1: entered allmulticast mode
[  399.275051][T23764] io-wq is not configured for unbound workers
[  399.276810][ T9919] usb 11-1: new high-speed USB device number 35 using dummy_hcd
[  399.429463][ T9919] usb 11-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  399.433283][ T9919] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.440072][ T9919] usb 11-1: config 0 descriptor??
[  399.647253][ T9919] usbhid 11-1:0.0: can't add hid device: -71
[  399.649268][ T9919] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  399.653859][ T9919] usb 11-1: USB disconnect, device number 35
[  399.917915][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  400.201979][T23771] ubi31: attaching mtd0
[  400.205085][T23771] ubi31: scanning is finished
[  400.208733][T23771] ubi31: empty MTD device detected
[  400.364916][T23774] veth0_to_team: entered promiscuous mode
[  400.425361][T23771] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  400.436910][T23771] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  400.442652][T23771] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  400.450530][T23771] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  400.455182][T23771] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  400.460670][T23771] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  400.465709][T23771] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 977757197
[  400.473365][T23771] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  400.481591][T23785] ubi31: background thread "ubi_bgt31d" started, PID 23785
[  400.594238][   T40] audit: type=1400 audit(2000000323.879:30496): avc:  denied  { read } for  pid=23790 comm="syz.4.5413" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  400.606511][   T40] audit: type=1400 audit(2000000323.879:30497): avc:  denied  { open } for  pid=23790 comm="syz.4.5413" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  400.614407][   T40] audit: type=1400 audit(2000000323.879:30498): avc:  denied  { ioctl } for  pid=23790 comm="syz.4.5413" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  400.697118][   T40] audit: type=1400 audit(2000000323.989:30499): avc:  denied  { create } for  pid=23793 comm="syz.4.5414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  400.959226][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  401.053950][T23824] netlink: 'syz.6.5423': attribute type 10 has an invalid length.
[  401.060862][T23824] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  401.221166][   T40] audit: type=1400 audit(2000000324.509:30500): avc:  denied  { read write } for  pid=23833 comm="syz.4.5426" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  401.233315][   T40] audit: type=1400 audit(2000000324.509:30501): avc:  denied  { open } for  pid=23833 comm="syz.4.5426" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  401.297277][T23836] netlink: 'syz.4.5427': attribute type 2 has an invalid length.
[  401.299889][T23836] netlink: 'syz.4.5427': attribute type 2 has an invalid length.
[  401.535395][   T40] audit: type=1400 audit(2000000324.809:30502): avc:  denied  { read } for  pid=23849 comm="syz.6.5431" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  401.548153][   T40] audit: type=1400 audit(2000000324.809:30503): avc:  denied  { open } for  pid=23849 comm="syz.6.5431" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  401.558760][   T40] audit: type=1400 audit(2000000324.809:30504): avc:  denied  { ioctl } for  pid=23849 comm="syz.6.5431" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  401.581900][   T40] audit: type=1400 audit(2000000324.839:30505): avc:  denied  { read write } for  pid=23851 comm="syz.4.5432" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  401.636044][ T5325] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  401.641244][ T5325] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  401.644427][ T5325] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  401.649685][ T5325] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  401.652765][ T5325] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  401.674784][T23856] lo speed is unknown, defaulting to 1000
[  401.694313][T23861] netlink: 'syz.4.5434': attribute type 1 has an invalid length.
[  401.697085][T23861] __nla_validate_parse: 12 callbacks suppressed
[  401.697096][T23861] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5434'.
[  401.808037][ T6786] libceph: connect (1)[c::]:6789 error -101
[  401.810094][ T6786] libceph: mon0 (1)[c::]:6789 connect error
[  401.909913][ T8639] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.978257][T23856] chnl_net:caif_netlink_parms(): no params data found
[  401.997606][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  402.041110][ T8639] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.066982][ T6786] libceph: connect (1)[c::]:6789 error -101
[  402.069085][ T6786] libceph: mon0 (1)[c::]:6789 connect error
[  402.149163][ T8639] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.159264][T23856] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.162142][T23856] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.165191][T23856] bridge_slave_0: entered allmulticast mode
[  402.168732][T23856] bridge_slave_0: entered promiscuous mode
[  402.172370][T23856] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.175230][T23856] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.178906][T23856] bridge_slave_1: entered allmulticast mode
[  402.182205][T23856] bridge_slave_1: entered promiscuous mode
[  402.260760][ T8639] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.269031][T23856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.274105][T23856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.316958][T23856] team0: Port device team_slave_0 added
[  402.321231][T23856] team0: Port device team_slave_1 added
[  402.360350][T23856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.362585][T23856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.370731][T23856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.375106][T23856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.377350][T23856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.385250][T23856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.469032][T23856] hsr_slave_0: entered promiscuous mode
[  402.471512][T23856] hsr_slave_1: entered promiscuous mode
[  402.473673][T23856] debugfs: 'hsr0' already exists in 'hsr'
[  402.475513][T23856] Cannot create hsr debugfs directory
[  402.478712][ T8639] bridge_slave_1: left allmulticast mode
[  402.480525][ T8639] bridge_slave_1: left promiscuous mode
[  402.482459][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.491874][ T8639] bridge_slave_0: left allmulticast mode
[  402.493751][ T8639] bridge_slave_0: left promiscuous mode
[  402.495636][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.580563][ T6786] libceph: connect (1)[c::]:6789 error -101
[  402.582672][ T6786] libceph: mon0 (1)[c::]:6789 connect error
[  402.634661][T23866] ceph: No mds server is up or the cluster is laggy
[  402.848597][ T5972] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  402.852956][ T5972] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  402.859950][ T5972] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  402.864788][ T5972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  402.868004][ T5972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  402.902794][T23895] netlink: 'syz.4.5440': attribute type 10 has an invalid length.
[  403.036679][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  403.074915][ T8639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.087190][ T8639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  403.095299][ T8639] bond0 (unregistering): Released all slaves
[  403.252305][ T8639] bond1 (unregistering): Released all slaves
[  403.370885][T23895] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  403.373620][ T8639] : left promiscuous mode
[  403.413982][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5445'.
[  403.420970][T23898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5445'.
[  403.447838][T23892] lo speed is unknown, defaulting to 1000
[  403.472948][T23900] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5446'.
[  403.686618][ T5972] Bluetooth: hci5: command tx timeout
[  403.697848][T23905] netlink: 'syz.6.5448': attribute type 10 has an invalid length.
[  403.898709][ T8639] hsr_slave_0: left promiscuous mode
[  403.902404][ T8639] hsr_slave_1: left promiscuous mode
[  403.905052][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.908286][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.915001][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.918236][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.954805][ T8639] veth1_macvtap: left promiscuous mode
[  403.956703][ T8639] veth0_macvtap: left promiscuous mode
[  403.958508][ T8639] veth1_vlan: left promiscuous mode
[  403.960271][ T8639] veth0_vlan: left promiscuous mode
[  404.077211][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  404.575402][T23918] comedi comedi3: comedi_config --init_data is deprecated
[  404.881821][ T5972] Bluetooth: hci6: command tx timeout
[  405.119721][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  405.201358][ T8639] team0 (unregistering): Port device team_slave_1 removed
[  405.334578][ T8639] team0 (unregistering): Port device team_slave_0 removed
[  405.756609][ T5972] Bluetooth: hci5: command tx timeout
[  406.158732][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  406.432822][T23892] chnl_net:caif_netlink_parms(): no params data found
[  406.532200][T23892] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.534661][T23892] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.537232][T23892] bridge_slave_0: entered allmulticast mode
[  406.539950][T23892] bridge_slave_0: entered promiscuous mode
[  406.543162][T23892] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.545507][T23892] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.548313][T23892] bridge_slave_1: entered allmulticast mode
[  406.550989][T23892] bridge_slave_1: entered promiscuous mode
[  406.606748][T23892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.612598][T23892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.694410][T23892] team0: Port device team_slave_0 added
[  406.708850][T23892] team0: Port device team_slave_1 added
[  406.765727][T23892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.768605][T23892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.776869][T23892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.781265][T23856] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  406.789339][T23892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.791896][T23892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.801274][T23892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.804847][T23856] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  406.816676][T23856] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  406.821778][T23856] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  406.879236][T23892] hsr_slave_0: entered promiscuous mode
[  406.881591][T23892] hsr_slave_1: entered promiscuous mode
[  406.883777][T23892] debugfs: 'hsr0' already exists in 'hsr'
[  406.885572][T23892] Cannot create hsr debugfs directory
[  406.956719][ T5972] Bluetooth: hci6: command tx timeout
[  407.023531][T23892] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.028796][T23892] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.057369][T23856] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.104267][T23892] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.107531][T23892] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.116573][T23856] 8021q: adding VLAN 0 to HW filter on device team0
[  407.121895][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.124316][ T8905] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.130591][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.132884][ T8893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.184987][T23892] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.191652][T23892] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.197394][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  407.249883][T23856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.272278][T23892] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.275355][T23892] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.410386][T23892] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  407.416858][T23892] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  407.424925][T23892] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  407.434844][T23892] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  407.444974][T23856] veth0_vlan: entered promiscuous mode
[  407.455370][T23856] veth1_vlan: entered promiscuous mode
[  407.485809][T23856] veth0_macvtap: entered promiscuous mode
[  407.491010][T23856] veth1_macvtap: entered promiscuous mode
[  407.495774][T23892] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.509333][T23856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.513820][T23892] 8021q: adding VLAN 0 to HW filter on device team0
[  407.521942][T23856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.525671][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.527989][ T8639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.537056][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.539341][ T9462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.542436][ T8905] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.546254][ T8905] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.549802][ T8905] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.555376][ T8905] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.626682][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.629636][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.651602][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.654101][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.736034][T23892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.737975][T23954] netlink: 'syz.6.5460': attribute type 9 has an invalid length.
[  407.740665][T23954] netlink: 'syz.6.5460': attribute type 6 has an invalid length.
[  407.764294][T23892] veth0_vlan: entered promiscuous mode
[  407.770072][T23892] veth1_vlan: entered promiscuous mode
[  407.784767][T23892] veth0_macvtap: entered promiscuous mode
[  407.788808][T23892] veth1_macvtap: entered promiscuous mode
[  407.800903][T23892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.810843][T23892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.817182][ T8905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.820501][ T8905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.823297][ T8905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.826085][ T8905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.836903][ T5972] Bluetooth: hci5: command tx timeout
[  407.839005][   T40] kauditd_printk_skb: 16 callbacks suppressed
[  407.839015][   T40] audit: type=1804 audit(2000000331.129:30522): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.5453" name="/newroot/399/file0" dev="tmpfs" ino=2147 res=1 errno=0
[  407.840022][T23959] netlink: 'syz.6.5453': attribute type 7 has an invalid length.
[  407.850584][T23959] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5453'.
[  407.850619][   T40] audit: type=1800 audit(2000000331.129:30523): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5453" name="file0" dev="tmpfs" ino=2147 res=0 errno=0
[  407.930911][ T9462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.933611][ T9462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.934921][T23961] netlink: 'syz.7.5452': attribute type 10 has an invalid length.
[  407.954837][T23961] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  407.963332][ T8905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.965906][ T8905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.007425][T23967] trusted_key: encrypted_key: insufficient parameters specified
[  408.149769][T23977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1231318254 (2462636508 ns) > initial count (77824 ns). Using initial count to start timer.
[  408.159643][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5458'.
[  408.164894][T23972] gretap1: left promiscuous mode
[  408.167403][T23972] bridge0: port 3(gretap1) entered disabled state
[  408.197986][T23972] bridge_slave_1: left allmulticast mode
[  408.199783][T23972] bridge_slave_1: left promiscuous mode
[  408.201677][T23972] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.238577][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  408.241779][T23972] bridge_slave_0: left allmulticast mode
[  408.251684][T23972] bridge_slave_0: left promiscuous mode
[  408.252011][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5461'.
[  408.258630][T23972] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.721116][T23984] netlink: 172 bytes leftover after parsing attributes in process `syz.7.5463'.
[  408.917631][   T40] audit: type=1400 audit(2000000332.209:30524): avc:  denied  { read } for  pid=23990 comm="syz.7.5466" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  408.940538][   T40] audit: type=1400 audit(2000000332.209:30525): avc:  denied  { open } for  pid=23990 comm="syz.7.5466" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  408.954018][   T40] audit: type=1400 audit(2000000332.209:30526): avc:  denied  { ioctl } for  pid=23990 comm="syz.7.5466" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xaee2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  408.991710][   T40] audit: type=1400 audit(2000000332.219:30527): avc:  denied  { map } for  pid=23990 comm="syz.7.5466" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  409.011691][   T40] audit: type=1400 audit(2000000332.219:30528): avc:  denied  { execute } for  pid=23990 comm="syz.7.5466" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  409.026498][   T40] audit: type=1400 audit(2000000332.269:30529): avc:  denied  { node_bind } for  pid=23993 comm="syz.6.5467" saddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  409.029735][T23995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=23995 comm=syz.6.5467
[  409.036861][ T5972] Bluetooth: hci6: command tx timeout
[  409.098939][   T40] audit: type=1326 audit(2000000332.389:30530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23998 comm="syz.6.5469" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc28a18ebe9 code=0x0
[  409.280510][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  409.918183][ T5972] Bluetooth: hci5: command tx timeout
[  409.965907][   T40] audit: type=1400 audit(2000000333.249:30531): avc:  denied  { mac_admin } for  pid=24014 comm="syz.7.5474" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  410.050193][T20725] IPVS: starting estimator thread 0...
[  410.052655][T24019] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  410.056874][T24019] netlink: 'syz.7.5476': attribute type 2 has an invalid length.
[  410.136642][T24020] IPVS: using max 42 ests per chain, 100800 per kthread
[  410.319111][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  410.556265][T24033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5481'.
[  410.560312][T24033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24033 comm=syz.0.5481
[  410.565041][T24033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5481'.
[  410.568651][T24033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5481'.
[  410.578593][T24033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5481'.
[  410.578620][ T8639] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  410.581410][T24033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5481'.
[  410.591531][ T8639] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  410.596145][ T8639] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  410.602207][ T8639] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  410.652717][T24035] netlink: 'syz.0.5482': attribute type 1 has an invalid length.
[  410.668584][T24035] 8021q: adding VLAN 0 to HW filter on device bond1
[  411.017855][T24038] netlink: 6 bytes leftover after parsing attributes in process `syz.7.5483'.
[  411.126728][ T5972] Bluetooth: hci6: command tx timeout
[  411.357779][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  411.420604][T24048] loop7: detected capacity change from 0 to 7
[  411.423497][    C3] blk_print_req_error: 11 callbacks suppressed
[  411.423507][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.428533][    C3] buffer_io_error: 10 callbacks suppressed
[  411.428542][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.432942][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.436140][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.439126][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.441943][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.444591][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.447413][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.450052][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.452842][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.455472][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.458443][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.462715][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.465671][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.466574][T20725] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  411.468662][T24048] ldm_validate_partition_table(): Disk read failed.
[  411.472943][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.475795][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.478548][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.481413][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.483980][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.486904][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  411.489611][T24048] Dev loop7: unable to read RDB block 0
[  411.491863][T24048]  loop7: unable to read partition table
[  411.493724][T24048] loop7: partition table beyond EOD, truncated
[  411.497636][T24048] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…0ýÞý©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  411.618437][T20725] usb 12-1: too many configurations: 9, using maximum allowed: 8
[  411.636356][T20725] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.641253][T20725] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.645722][T20725] usb 12-1: config 0 interface 0 has no altsetting 0
[  411.650574][T20725] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.654810][T20725] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.663360][T20725] usb 12-1: config 0 interface 0 has no altsetting 0
[  411.667729][T20725] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.671763][T20725] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.676400][T20725] usb 12-1: config 0 interface 0 has no altsetting 0
[  411.685120][T20725] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.689217][T20725] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.694090][T20725] usb 12-1: config 0 interface 0 has no altsetting 0
[  411.704887][T20725] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.709045][T20725] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.713039][T20725] usb 12-1: config 0 interface 0 has no altsetting 0
[  411.716070][T20725] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.719202][T20725] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.722697][T20725] usb 12-1: config 0 interface 0 has no altsetting 0
[  411.726218][T20725] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.729502][T20725] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.732917][T20725] usb 12-1: config 0 interface 0 has no altsetting 0
[  411.735942][T20725] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9
[  411.739045][T20725] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  411.742478][T20725] usb 12-1: config 0 interface 0 has no altsetting 0
[  411.746394][T20725] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  411.749621][T20725] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  411.752284][T20725] usb 12-1: Product: syz
[  411.753656][T20725] usb 12-1: Manufacturer: syz
[  411.755174][T20725] usb 12-1: SerialNumber: syz
[  411.760559][T20725] usb 12-1: config 0 descriptor??
[  411.764868][T20725] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0
[  411.777099][ T5375] ldm_validate_partition_table(): Disk read failed.
[  411.779748][ T5375] Dev loop7: unable to read RDB block 0
[  411.781963][ T5375]  loop7: unable to read partition table
[  411.783923][ T5375] loop7: partition table beyond EOD, truncated
[  412.165732][    T9] usb 12-1: USB disconnect, device number 2
[  412.171213][    T9] yurex 12-1:0.0: USB YUREX #0 now disconnected
[  412.368051][T24070] can0: slcan on ttyS3.
[  412.371899][T24042] program syz.7.5485 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  412.400749][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  412.508554][T24070] can0 (unregistered): slcan off ttyS3.
[  412.691364][T24082] blktrace: Concurrent blktraces are not allowed on loop12
[  413.302741][T24119] ptrace attach of "/syz-executor exec"[23892] was attempted by ""[24119]
[  413.403603][T24128] gretap1: entered allmulticast mode
[  413.409400][T24128] bridge0: port 3(gretap1) entered blocking state
[  413.413790][T24128] bridge0: port 3(gretap1) entered disabled state
[  413.417728][T24128] gretap1: entered promiscuous mode
[  413.419829][T24128] bridge0: port 3(gretap1) entered blocking state
[  413.421922][T24128] bridge0: port 3(gretap1) entered forwarding state
[  413.438449][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  413.529994][T24135] comedi comedi3: comedi_config --init_data is deprecated
[  413.566308][T24137] IPv6: NLM_F_REPLACE set, but no existing node found!
[  413.577297][T24137] __nla_validate_parse: 1 callbacks suppressed
[  413.577308][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5516'.
[  413.582149][T24137] nbd: illegal input index 1879048192
[  413.637162][T24139] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  413.977919][T24159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5524'.
[  414.175026][ T6002] libceph: connect (1)[c::]:6789 error -101
[  414.178092][ T6002] libceph: mon0 (1)[c::]:6789 connect error
[  414.292701][T24176] kernel read not supported for file /policy (pid: 24176 comm: syz.6.5527)
[  414.295728][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  414.295738][   T40] audit: type=1400 audit(2000000337.579:30538): avc:  denied  { module_load } for  pid=24168 comm="syz.6.5527" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[  414.392252][T24178] kvm_pr_unimpl_wrmsr: 17 callbacks suppressed
[  414.392263][T24178] kvm: kvm [24168]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xe6000000000000
[  414.446772][ T6002] libceph: connect (1)[c::]:6789 error -101
[  414.450178][ T6002] libceph: mon0 (1)[c::]:6789 connect error
[  414.477068][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  414.885166][   T40] audit: type=1400 audit(2000000338.169:30539): avc:  denied  { read append } for  pid=24187 comm="syz.0.5532" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  414.897137][   T40] audit: type=1400 audit(2000000338.169:30540): avc:  denied  { open } for  pid=24187 comm="syz.0.5532" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  414.966912][ T6002] libceph: connect (1)[c::]:6789 error -101
[  414.969026][ T6002] libceph: mon0 (1)[c::]:6789 connect error
[  415.519699][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  415.707207][T24188] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  415.709566][T24188] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  415.711628][T24188] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  415.713635][T24188] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  415.715572][T24188] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  415.728085][T24188] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  415.740032][T24188] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  415.742096][T24188] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  415.758738][T24188] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  415.766285][T24188] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  415.769241][T24188] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  415.786014][T24188] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  415.856867][   T40] audit: type=1400 audit(2000000339.149:30541): avc:  denied  { ioctl } for  pid=24195 comm="syz.7.5534" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  415.877981][T24196] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5534'.
[  415.918526][T24169] ceph: No mds server is up or the cluster is laggy
[  416.033188][T24209] bio_check_eod: 4 callbacks suppressed
[  416.033200][T24209] syz.7.5539: attempt to access beyond end of device
[  416.033200][T24209] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  416.063795][T24209] efs: cannot read volume header
[  416.068168][   T40] audit: type=1400 audit(2000000339.359:30542): avc:  denied  { shutdown } for  pid=24211 comm="syz.0.5541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  416.077702][   T40] audit: type=1400 audit(2000000339.359:30543): avc:  denied  { getopt } for  pid=24211 comm="syz.0.5541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  416.126538][T24221] misc userio: Begin command sent, but we're already running
[  416.182066][T24226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  416.427537][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5545'.
[  416.437573][T24229] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.559512][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  416.851107][T24240] ntfs3(nbd6): try to read out of volume at offset 0x0
[  416.949833][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5551'.
[  416.952671][T24252] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5551'.
[  417.014757][T24258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5553'.
[  417.030915][T24260] FAULT_INJECTION: forcing a failure.
[  417.030915][T24260] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.035365][T24260] CPU: 0 UID: 0 PID: 24260 Comm: syz.7.5552 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  417.035382][T24260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  417.035390][T24260] Call Trace:
[  417.035395][T24260]  <TASK>
[  417.035400][T24260]  dump_stack_lvl+0x16c/0x1f0
[  417.035435][T24260]  should_fail_ex+0x512/0x640
[  417.035455][T24260]  _copy_from_user+0x2e/0xd0
[  417.035470][T24260]  copy_msghdr_from_user+0x98/0x160
[  417.035483][T24260]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  417.035502][T24260]  ___sys_sendmsg+0xfe/0x1d0
[  417.035514][T24260]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.035538][T24260]  ? __mutex_unlock_slowpath+0x100/0x800
[  417.035559][T24260]  __sys_sendmsg+0x16d/0x220
[  417.035571][T24260]  ? __pfx___sys_sendmsg+0x10/0x10
[  417.035592][T24260]  do_syscall_64+0xcd/0x4c0
[  417.035605][T24260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.035617][T24260] RIP: 0033:0x7f3cfbd8ebe9
[  417.035628][T24260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.035638][T24260] RSP: 002b:00007f3cfcba8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.035650][T24260] RAX: ffffffffffffffda RBX: 00007f3cfbfb5fa0 RCX: 00007f3cfbd8ebe9
[  417.035657][T24260] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  417.035664][T24260] RBP: 00007f3cfcba8090 R08: 0000000000000000 R09: 0000000000000000
[  417.035671][T24260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.035677][T24260] R13: 00007f3cfbfb6038 R14: 00007f3cfbfb5fa0 R15: 00007ffd0038ba58
[  417.035697][T24260]  </TASK>
[  417.159158][   T40] audit: type=1400 audit(2000000340.439:30544): avc:  denied  { setattr } for  pid=24266 comm="syz.0.5558" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  417.168439][T24268] QAT: Invalid ioctl -2144835806
[  417.276752][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout
[  417.600262][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  417.756750][ T5972] Bluetooth: hci5: command 0x0c1a tx timeout
[  417.759431][ T5972] Bluetooth: hci4: command 0x0c1a tx timeout
[  417.759488][ T5325] Bluetooth: hci2: command 0x0c1a tx timeout
[  417.761699][ T5972] Bluetooth: hci1: command 0x0405 tx timeout
[  417.836554][ T5972] Bluetooth: hci6: command 0x0c1a tx timeout
[  417.930295][T24298] FAULT_INJECTION: forcing a failure.
[  417.930295][T24298] name failslab, interval 1, probability 0, space 0, times 0
[  417.935642][T24298] CPU: 3 UID: 0 PID: 24298 Comm: syz.6.5567 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  417.935668][T24298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  417.935679][T24298] Call Trace:
[  417.935685][T24298]  <TASK>
[  417.935693][T24298]  dump_stack_lvl+0x16c/0x1f0
[  417.935715][T24298]  should_fail_ex+0x512/0x640
[  417.935736][T24298]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  417.935758][T24298]  should_failslab+0xc2/0x120
[  417.935779][T24298]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  417.935798][T24298]  ? __alloc_skb+0x2b2/0x380
[  417.935831][T24298]  __alloc_skb+0x2b2/0x380
[  417.935858][T24298]  ? __pfx___alloc_skb+0x10/0x10
[  417.935888][T24298]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  417.935913][T24298]  netlink_alloc_large_skb+0x69/0x130
[  417.935935][T24298]  netlink_sendmsg+0x6a1/0xdd0
[  417.935960][T24298]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.935991][T24298]  ____sys_sendmsg+0xa95/0xc70
[  417.936016][T24298]  ? copy_msghdr_from_user+0x10a/0x160
[  417.936034][T24298]  ? __pfx_____sys_sendmsg+0x10/0x10
[  417.936070][T24298]  ___sys_sendmsg+0x134/0x1d0
[  417.936091][T24298]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.936134][T24298]  ? __mutex_unlock_slowpath+0x100/0x800
[  417.936163][T24298]  __sys_sendmsg+0x16d/0x220
[  417.936182][T24298]  ? __pfx___sys_sendmsg+0x10/0x10
[  417.936219][T24298]  do_syscall_64+0xcd/0x4c0
[  417.936242][T24298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.936260][T24298] RIP: 0033:0x7fc28a18ebe9
[  417.936276][T24298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.936293][T24298] RSP: 002b:00007fc28b0aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.936311][T24298] RAX: ffffffffffffffda RBX: 00007fc28a3b5fa0 RCX: 00007fc28a18ebe9
[  417.936323][T24298] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  417.936334][T24298] RBP: 00007fc28b0aa090 R08: 0000000000000000 R09: 0000000000000000
[  417.936346][T24298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.936356][T24298] R13: 00007fc28a3b6038 R14: 00007fc28a3b5fa0 R15: 00007ffcfe171d48
[  417.936383][T24298]  </TASK>
[  418.084739][   T40] audit: type=1326 audit(2000000341.369:30545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.6.5570" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc28a18ebe9 code=0x0
[  418.142888][   T40] audit: type=1400 audit(2000000341.429:30546): avc:  denied  { bind } for  pid=24312 comm="syz.6.5572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  418.199505][T24317] 8021q: VLANs not supported on gre0
[  418.636618][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  418.647502][T24340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5583'.
[  418.673115][T24342] FAULT_INJECTION: forcing a failure.
[  418.673115][T24342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.677179][T24342] CPU: 2 UID: 0 PID: 24342 Comm: syz.6.5585 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  418.677195][T24342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  418.677203][T24342] Call Trace:
[  418.677207][T24342]  <TASK>
[  418.677212][T24342]  dump_stack_lvl+0x16c/0x1f0
[  418.677228][T24342]  should_fail_ex+0x512/0x640
[  418.677243][T24342]  _copy_from_iter+0x29f/0x16f0
[  418.677260][T24342]  ? __alloc_skb+0x200/0x380
[  418.677279][T24342]  ? __pfx__copy_from_iter+0x10/0x10
[  418.677295][T24342]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  418.677312][T24342]  netlink_sendmsg+0x829/0xdd0
[  418.677328][T24342]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.677346][T24342]  ____sys_sendmsg+0xa95/0xc70
[  418.677361][T24342]  ? copy_msghdr_from_user+0x10a/0x160
[  418.677373][T24342]  ? __pfx_____sys_sendmsg+0x10/0x10
[  418.677394][T24342]  ___sys_sendmsg+0x134/0x1d0
[  418.677411][T24342]  ? __pfx____sys_sendmsg+0x10/0x10
[  418.677436][T24342]  ? __mutex_unlock_slowpath+0x100/0x800
[  418.677453][T24342]  __sys_sendmsg+0x16d/0x220
[  418.677465][T24342]  ? __pfx___sys_sendmsg+0x10/0x10
[  418.677486][T24342]  do_syscall_64+0xcd/0x4c0
[  418.677499][T24342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.677513][T24342] RIP: 0033:0x7fc28a18ebe9
[  418.677523][T24342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.677535][T24342] RSP: 002b:00007fc28b0aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.677546][T24342] RAX: ffffffffffffffda RBX: 00007fc28a3b5fa0 RCX: 00007fc28a18ebe9
[  418.677553][T24342] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  418.677560][T24342] RBP: 00007fc28b0aa090 R08: 0000000000000000 R09: 0000000000000000
[  418.677567][T24342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.677573][T24342] R13: 00007fc28a3b6038 R14: 00007fc28a3b5fa0 R15: 00007ffcfe171d48
[  418.677589][T24342]  </TASK>
[  418.826641][ T9919] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  418.852986][T24346] could not allocate digest TFM handle cryptd(blake2b-160)
[  418.907628][T24356] binder: 24355:24356 ioctl c0189371 200000000a00 returned -22
[  418.998139][ T9919] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.001870][ T9919] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.005075][ T9919] usb 12-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  419.009044][ T9919] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.011893][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5593'.
[  419.012803][ T9919] usb 12-1: config 0 descriptor??
[  419.162062][T24372] macsec1: entered promiscuous mode
[  419.163869][T24372] macsec1: entered allmulticast mode
[  419.216478][   T40] audit: type=1400 audit(2000000342.499:30547): avc:  denied  { map } for  pid=24369 comm="syz.0.5595" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  419.438273][ T9919] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0
[  419.440996][ T9919] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0
[  419.451559][ T9919] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0D8C:0022.0013/input/input38
[  419.469640][ T9919] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0
[  419.635800][ T9919] usb 12-1: USB disconnect, device number 3
[  419.676572][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  419.734617][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5602'.
[  419.744278][T24401] netlink: 'syz.6.5602': attribute type 30 has an invalid length.
[  419.837063][ T5972] Bluetooth: hci4: command 0x0c1a tx timeout
[  419.838475][ T5970] Bluetooth: hci5: command 0x0c1a tx timeout
[  419.916695][ T5972] Bluetooth: hci6: command 0x0c1a tx timeout
[  420.006216][T24408] netlink: 'syz.6.5604': attribute type 21 has an invalid length.
[  420.009468][T24408] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5604'.
[  420.133686][T24413] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  420.179091][T24416] FAULT_INJECTION: forcing a failure.
[  420.179091][T24416] name failslab, interval 1, probability 0, space 0, times 0
[  420.183678][T24416] CPU: 3 UID: 0 PID: 24416 Comm: syz.7.5606 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  420.183696][T24416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  420.183704][T24416] Call Trace:
[  420.183709][T24416]  <TASK>
[  420.183715][T24416]  dump_stack_lvl+0x16c/0x1f0
[  420.183731][T24416]  should_fail_ex+0x512/0x640
[  420.183746][T24416]  ? __kmalloc_noprof+0xbf/0x510
[  420.183759][T24416]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  420.183843][T24416]  should_failslab+0xc2/0x120
[  420.183859][T24416]  __kmalloc_noprof+0xd2/0x510
[  420.183875][T24416]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  420.183895][T24416]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  420.183912][T24416]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  420.183933][T24416]  ? bpf_lsm_capable+0x9/0x10
[  420.183950][T24416]  ? security_capable+0x7e/0x260
[  420.183965][T24416]  ? ns_capable+0xd7/0x110
[  420.183981][T24416]  genl_rcv_msg+0x55c/0x800
[  420.183999][T24416]  ? __pfx_genl_rcv_msg+0x10/0x10
[  420.184014][T24416]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  420.184032][T24416]  ? __pfx_nl80211_connect+0x10/0x10
[  420.184047][T24416]  ? __pfx_nl80211_post_doit+0x10/0x10
[  420.184067][T24416]  netlink_rcv_skb+0x155/0x420
[  420.184080][T24416]  ? __pfx_genl_rcv_msg+0x10/0x10
[  420.184096][T24416]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  420.184116][T24416]  ? netlink_deliver_tap+0x1ae/0xd30
[  420.184131][T24416]  genl_rcv+0x28/0x40
[  420.184145][T24416]  netlink_unicast+0x5aa/0x870
[  420.184160][T24416]  ? __pfx_netlink_unicast+0x10/0x10
[  420.184174][T24416]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  420.184191][T24416]  netlink_sendmsg+0x8d1/0xdd0
[  420.184207][T24416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  420.184227][T24416]  ____sys_sendmsg+0xa95/0xc70
[  420.184244][T24416]  ? copy_msghdr_from_user+0x10a/0x160
[  420.184256][T24416]  ? __pfx_____sys_sendmsg+0x10/0x10
[  420.184291][T24416]  ___sys_sendmsg+0x134/0x1d0
[  420.184307][T24416]  ? __pfx____sys_sendmsg+0x10/0x10
[  420.184334][T24416]  ? __mutex_unlock_slowpath+0x100/0x800
[  420.184352][T24416]  __sys_sendmsg+0x16d/0x220
[  420.184365][T24416]  ? __pfx___sys_sendmsg+0x10/0x10
[  420.184388][T24416]  do_syscall_64+0xcd/0x4c0
[  420.184402][T24416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.184415][T24416] RIP: 0033:0x7f3cfbd8ebe9
[  420.184425][T24416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  420.184443][T24416] RSP: 002b:00007f3cfcba8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  420.184456][T24416] RAX: ffffffffffffffda RBX: 00007f3cfbfb5fa0 RCX: 00007f3cfbd8ebe9
[  420.184463][T24416] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  420.184471][T24416] RBP: 00007f3cfcba8090 R08: 0000000000000000 R09: 0000000000000000
[  420.184478][T24416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.184485][T24416] R13: 00007f3cfbfb6038 R14: 00007f3cfbfb5fa0 R15: 00007ffd0038ba58
[  420.184502][T24416]  </TASK>
[  420.285365][    C3] vkms_vblank_simulate: vblank timer overrun
[  420.339969][T24412] kvm: user requested TSC rate below hardware speed
[  420.440107][T24428] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  420.493926][T24432] 9pnet_fd: Insufficient options for proto=fd
[  420.654619][T24441] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  420.684886][T24443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5617'.
[  420.716570][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  420.721118][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  420.721129][   T40] audit: type=1400 audit(2000000344.009:30549): avc:  denied  { listen } for  pid=24442 comm="syz.6.5617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  420.721813][T24443] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5617'.
[  420.796052][T24450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'.
[  420.801662][T24450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'.
[  421.001814][T24478] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5629'.
[  421.004767][T24478] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5629'.
[  421.007888][T24478] netlink: 'syz.6.5629': attribute type 5 has an invalid length.
[  421.675187][T24503] netlink: 'syz.0.5637': attribute type 29 has an invalid length.
[  421.708728][T24509] fuse: Bad value for 'group_id'
[  421.710337][T24509] fuse: Bad value for 'group_id'
[  421.756587][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  421.810979][T24519] overlayfs: upper fs does not support tmpfile.
[  421.811632][   T40] audit: type=1400 audit(2000000345.099:30550): avc:  denied  { mounton } for  pid=24518 comm="syz.0.5642" path="/bus" dev="bpf" ino=129533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  421.864325][T24531] vivid-001: disconnect
[  421.869701][T24530] vivid-001: reconnect
[  421.914431][T24537] netlink: 'syz.6.5649': attribute type 2 has an invalid length.
[  421.928397][ T5972] Bluetooth: hci4: command 0x0c1a tx timeout
[  421.931192][ T5972] Bluetooth: hci5: command 0x0c1a tx timeout
[  421.965241][T24543] comedi comedi4: bad chanlist[0]=0x00000543 chan=1347 range length=2
[  421.969566][T24543] netlink: 'syz.0.5651': attribute type 3 has an invalid length.
[  421.972082][T24543] nbd: must specify at least one socket
[  421.997586][ T5972] Bluetooth: hci6: command 0x0c1a tx timeout
[  422.047001][T24556] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  422.697858][T24561] bridge0: entered allmulticast mode
[  422.796656][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  422.800112][T24568] kvm: user requested TSC rate below hardware speed
[  422.804022][T24566] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer.
[  422.902927][T24572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.991816][T24572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.286940][T24599] netlink: 'syz.6.5669': attribute type 4 has an invalid length.
[  423.290114][T24599] netlink: 'syz.6.5669': attribute type 4 has an invalid length.
[  423.292777][T24599] netlink: 'syz.6.5669': attribute type 4 has an invalid length.
[  423.295662][T24599] netlink: 'syz.6.5669': attribute type 4 has an invalid length.
[  423.601477][T24629] Bluetooth: hci7: Frame reassembly failed (-84)
[  423.757531][T24632] 8021q: adding VLAN 0 to HW filter on device bond3
[  423.763713][T24632] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  423.812801][ T5325] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  423.818602][ T5325] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  423.834369][ T5325] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  423.836610][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  423.839995][ T5325] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  423.853993][ T5325] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  423.906261][T24636] lo speed is unknown, defaulting to 1000
[  423.991444][T24648] __nla_validate_parse: 6 callbacks suppressed
[  423.991457][T24648] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5684'.
[  424.028104][T24648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5684'.
[  424.036365][T24648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24648 comm=syz.6.5684
[  424.068880][T24651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5685'.
[  424.079358][T24651] xfrm1: entered promiscuous mode
[  424.081035][T24651] xfrm1: entered allmulticast mode
[  424.108428][T24656] xt_limit: Overflow, try lower: 271964/0
[  424.259498][T24636] chnl_net:caif_netlink_parms(): no params data found
[  424.363203][T24636] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.365691][T24636] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.368462][T24636] bridge_slave_0: entered allmulticast mode
[  424.371151][T24636] bridge_slave_0: entered promiscuous mode
[  424.374286][T24636] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.377063][T24636] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.379502][T24636] bridge_slave_1: entered allmulticast mode
[  424.382674][T24636] bridge_slave_1: entered promiscuous mode
[  424.453066][T24636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.459952][T24636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.508875][T24679] openvswitch: netlink: Flow key attribute not present in set flow.
[  424.511890][T24636] team0: Port device team_slave_0 added
[  424.515794][T24636] team0: Port device team_slave_1 added
[  424.557613][T24636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.559934][T24636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.569384][T24636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.573765][T24636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.575944][T24636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.585029][T24636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.634270][T24636] hsr_slave_0: entered promiscuous mode
[  424.637605][T24636] hsr_slave_1: entered promiscuous mode
[  424.639844][T24636] debugfs: 'hsr0' already exists in 'hsr'
[  424.641666][T24636] Cannot create hsr debugfs directory
[  424.774800][T24636] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.878067][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  424.892592][T24636] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.997881][T24636] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.072579][T24636] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.203626][T24636] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  425.211919][T24636] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  425.220283][T24636] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  425.227674][T24636] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  425.276348][T24636] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.286958][T24636] 8021q: adding VLAN 0 to HW filter on device team0
[  425.292347][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.294809][ T8639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.304301][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.306639][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.424777][T24636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.473877][T24704] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  425.476654][T24704] overlayfs: missing 'lowerdir'
[  425.659570][T24636] veth0_vlan: entered promiscuous mode
[  425.665117][T24636] veth1_vlan: entered promiscuous mode
[  425.676613][ T5970] Bluetooth: hci7: command 0xfc11 tx timeout
[  425.677048][ T5972] Bluetooth: hci7: Entering manufacturer mode failed (-110)
[  425.685513][T24636] veth0_macvtap: entered promiscuous mode
[  425.699240][T24636] veth1_macvtap: entered promiscuous mode
[  425.719637][T24636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.726235][T24636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.738715][ T1172] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.741576][ T1172] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.744274][ T1172] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.752199][ T1172] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.821872][ T8893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.824648][ T8893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.844400][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.847625][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.894540][   T40] audit: type=1400 audit(2000000349.179:30551): avc:  denied  { map } for  pid=24727 comm="syz.8.5679" path="/dev/ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  425.903923][   T40] audit: type=1400 audit(2000000349.179:30552): avc:  denied  { execute } for  pid=24727 comm="syz.8.5679" path="/dev/ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  425.916637][ T5972] Bluetooth: hci8: command tx timeout
[  425.916887][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  425.952080][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5708'.
[  425.966638][ T6361] usb 12-1: new low-speed USB device number 4 using dummy_hcd
[  425.986879][T24731] efs: device does not support 512 byte blocks
[  425.989076][T24731] device does not support 512 byte blocks
[  425.989076][T24731] 
[  426.074220][T24736] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5709'.
[  426.137110][ T6361] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  426.139525][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  426.142825][ T6361] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  426.149905][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  426.153408][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  426.158279][ T6361] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  426.160830][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  426.164421][ T6361] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  426.169787][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  426.173552][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  426.178173][T24742] /dev/sg0: Can't lookup blockdev
[  426.181151][ T6361] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  426.183952][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  426.188350][ T6361] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  426.192250][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  426.195937][ T6361] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  426.202868][ T6361] usb 12-1: string descriptor 0 read error: -22
[  426.205141][ T6361] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  426.208300][ T6361] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.216348][ T6361] adutux 12-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  426.306217][T24749] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  426.397375][ T1186] block nbd2: Possible stuck request ffff888027d67000: control (read@0,4096B). Runtime 120 seconds
[  426.435952][T24712] delete_channel: no stack
[  426.755858][T24781] loop6: detected capacity change from 0 to 524287999
[  426.960154][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  427.638749][T24812] validate_nla: 29 callbacks suppressed
[  427.638762][T24812] netlink: 'syz.6.5732': attribute type 1 has an invalid length.
[  427.659154][T24812] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  427.663540][T24812] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  427.713940][T24821] gretap3: entered promiscuous mode
[  427.719711][T24821] bond4: (slave gretap3): making interface the new active one
[  427.722323][T24821] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  427.728621][T24821] macvlan2: entered promiscuous mode
[  427.730444][T24821] macvlan2: entered allmulticast mode
[  427.732900][T24821] bond4: entered promiscuous mode
[  427.734994][T24821] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  427.741653][T24821] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  427.753727][T24821] bond4: left promiscuous mode
[  427.792415][T24820] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  427.794989][T24820] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  427.799487][T24820] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  427.801901][T24820] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  427.804596][T24820] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  427.808060][T24820] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  427.810592][T24820] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  427.825216][T24820] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  427.998350][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  428.188225][T24829] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  428.477433][ T6361] usb 12-1: USB disconnect, device number 4
[  428.785759][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5742'.
[  428.892095][T24851] affs: No valid root block on device nullb0
[  429.028641][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5750'.
[  429.039591][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  429.130606][T24883] lo speed is unknown, defaulting to 1000
[  429.200195][T24885] smb3: Unknown parameter 'rdmaaller1'
[  429.836836][ T5972] Bluetooth: hci8: command 0x040f tx timeout
[  429.838942][ T5972] Bluetooth: hci6: command 0x0c1a tx timeout
[  429.840508][ T5970] Bluetooth: hci5: command 0x0c1a tx timeout
[  429.841074][ T5325] Bluetooth: hci4: command 0x0c1a tx timeout
[  429.842940][ T5970] Bluetooth: hci1: command 0x0405 tx timeout
[  429.844874][ T5325] Bluetooth: hci3: command 0x0c1a tx timeout
[  429.953869][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5758'.
[  430.079137][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  430.135275][ T6786] hid-generic 0003:0004:0000.0014: hidraw1: USB HID v0.00 Device [syz0] on syz1
[  430.343280][T24942] netlink: 'syz.0.5769': attribute type 33 has an invalid length.
[  430.345821][T24942] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5769'.
[  430.429928][   T40] audit: type=1400 audit(2000000353.719:30553): avc:  denied  { create } for  pid=24950 comm="syz.7.5773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  430.431385][T24951] loop9: detected capacity change from 0 to 8
[  430.441594][T24951]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  430.443363][T24951] loop9: partition table partially beyond EOD, truncated
[  430.446144][T24951] loop9: p1 size 81768186 extends beyond EOD, truncated
[  430.487312][T24955] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.5775'.
[  430.494817][T19372] udevd[19372]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  430.562375][T24963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5778'.
[  430.612931][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5772'.
[  430.864513][   T40] audit: type=1400 audit(2000000354.149:30554): avc:  denied  { bind } for  pid=24971 comm="syz.7.5780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  430.871213][   T40] audit: type=1400 audit(2000000354.149:30555): avc:  denied  { listen } for  pid=24971 comm="syz.7.5780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  430.878352][   T40] audit: type=1400 audit(2000000354.149:30556): avc:  denied  { accept } for  pid=24971 comm="syz.7.5780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  431.118108][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  431.145205][T24975] pimreg: entered allmulticast mode
[  431.235017][T24978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5782'.
[  431.642198][T24984] 9pnet_fd: p9_fd_create_unix (24984): problem connecting socket: ./file0: -111
[  431.749983][   T40] audit: type=1400 audit(2000000355.039:30557): avc:  denied  { create } for  pid=24991 comm="syz.6.5787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  431.837865][   T40] audit: type=1400 audit(2000000355.129:30558): avc:  denied  { ioctl } for  pid=24998 comm="syz.7.5789" path="socket:[133276]" dev="sockfs" ino=133276 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  431.916871][ T5325] Bluetooth: hci8: command 0x040f tx timeout
[  431.961890][   T40] audit: type=1400 audit(2000000355.249:30559): avc:  denied  { shutdown } for  pid=25008 comm="syz.6.5794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  432.029190][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5795'.
[  432.157072][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  432.810071][T25018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5796'.
[  432.852878][T25021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5797'.
[  432.856830][T25021] netlink: 'syz.7.5797': attribute type 12 has an invalid length.
[  432.924685][   T40] audit: type=1400 audit(2000000356.209:30560): avc:  denied  { read write } for  pid=25020 comm="syz.7.5797" name="vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  432.932631][   T40] audit: type=1400 audit(2000000356.209:30561): avc:  denied  { open } for  pid=25020 comm="syz.7.5797" path="/dev/vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  432.948130][   T40] audit: type=1400 audit(2000000356.209:30562): avc:  denied  { ioctl } for  pid=25020 comm="syz.7.5797" path="/dev/vbi8" dev="devtmpfs" ino=1029 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  433.199725][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  433.891123][T25067] overlayfs: failed to clone upperpath
[  433.997042][ T5325] Bluetooth: hci8: command 0x040f tx timeout
[  434.237705][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  434.382743][T25091] __nla_validate_parse: 4 callbacks suppressed
[  434.382754][T25091] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5813'.
[  434.440264][T25091] IPv6: sit1: Disabled Multicast RS
[  434.442426][T25091] sit1: entered allmulticast mode
[  435.131731][T25109] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5819'.
[  435.280480][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  435.314103][T25123] overlay: Unknown parameter 'audit'
[  435.332691][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  435.334900][T25123] fuse: Bad value for 'rootmode'
[  435.335239][   T40] audit: type=1400 audit(2000000358.619:30563): avc:  denied  { setopt } for  pid=25125 comm="syz.6.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  435.352993][   T40] audit: type=1400 audit(2000000358.619:30564): avc:  denied  { write } for  pid=25125 comm="syz.6.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  435.426009][T25142] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5829'.
[  435.522494][ T5325] Bluetooth: hci5: unexpected event for opcode 0x080d
[  435.640538][T25165] can0: slcan on ptm0.
[  435.695662][   T40] audit: type=1400 audit(2000000358.979:30565): avc:  denied  { append } for  pid=25164 comm="syz.7.5836" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  435.698679][T25167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5837'.
[  435.730065][   T40] audit: type=1400 audit(2000000359.019:30566): avc:  denied  { node_bind } for  pid=25169 comm="syz.6.5838" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  435.822190][T25178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5842'.
[  435.909484][T25183] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  436.077906][ T5325] Bluetooth: hci8: command 0x040f tx timeout
[  436.319717][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  436.517193][T25164] can0 (unregistered): slcan off ptm0.
[  436.544107][T25210] 9pnet_fd: Insufficient options for proto=fd
[  436.742965][T25229] overlayfs: failed to resolve './file0': -2
[  436.954891][   T40] audit: type=1400 audit(2000000360.239:30567): avc:  denied  { name_bind } for  pid=25234 comm="syz.0.5864" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  436.964959][T25235] lo speed is unknown, defaulting to 1000
[  437.356631][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  437.374403][T25252] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  437.378894][T25248] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  437.461360][T25259] netlink: 'syz.7.5871': attribute type 1 has an invalid length.
[  437.581799][   T40] audit: type=1400 audit(2000000360.869:30568): avc:  denied  { execheap } for  pid=25269 comm="syz.6.5876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  437.612177][T25272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25272 comm=syz.6.5877
[  437.961353][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  437.964758][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  437.970479][ T5972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  437.979224][ T5972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  437.981987][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  438.040411][T25282] lo speed is unknown, defaulting to 1000
[  438.049240][   T40] audit: type=1400 audit(2000000361.339:30569): avc:  denied  { getopt } for  pid=25284 comm="syz.0.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  438.166626][ T5325] Bluetooth: hci8: command 0x040f tx timeout
[  438.311558][ T8638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.314944][ T8638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.324537][ T8638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  438.397379][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  438.461397][ T8638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.464638][ T8638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.468161][ T8638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  438.480760][T25282] chnl_net:caif_netlink_parms(): no params data found
[  438.621957][ T8638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.625339][ T8638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.632492][ T8638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  438.642529][T25282] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.644808][T25282] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.647832][T25282] bridge_slave_0: entered allmulticast mode
[  438.650816][T25282] bridge_slave_0: entered promiscuous mode
[  438.654052][T25282] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.656371][T25282] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.659114][T25282] bridge_slave_1: entered allmulticast mode
[  438.661821][T25282] bridge_slave_1: entered promiscuous mode
[  438.700954][T25282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.722934][ T8638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.726172][ T8638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.730040][ T8638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  438.742600][T25282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.781949][T25282] team0: Port device team_slave_0 added
[  438.785333][T25282] team0: Port device team_slave_1 added
[  438.825564][T25282] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.829353][T25282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.837519][T25282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.842083][T25282] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.844278][T25282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.852538][T25282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.927913][T25282] hsr_slave_0: entered promiscuous mode
[  438.930304][T25282] hsr_slave_1: entered promiscuous mode
[  438.932976][T25282] debugfs: 'hsr0' already exists in 'hsr'
[  438.934776][T25282] Cannot create hsr debugfs directory
[  439.351830][ T8638] bond4 (unregistering): (slave gretap3): Releasing active interface
[  439.437601][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  439.460894][ T8638] dvmrp1 (unregistering): left allmulticast mode
[  439.496689][ T8638] bond1 (unregistering): (slave geneve2): Releasing active interface
[  439.840797][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  439.933118][ T8638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.941511][ T8638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.949069][ T8638] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  439.972981][ T8638] bond0 (unregistering): Released all slaves
[  439.981090][ T8638] bond1 (unregistering): Released all slaves
[  439.988309][ T8638] bond2 (unregistering): Released all slaves
[  440.080478][ T5325] Bluetooth: hci2: command tx timeout
[  440.133724][ T8638] bond3 (unregistering): Released all slaves
[  440.140273][ T8638] bond4 (unregistering): Released all slaves
[  440.359734][ T8638] : left promiscuous mode
[  440.446567][   T40] audit: type=1400 audit(2000000363.729:30570): avc:  denied  { ioctl } for  pid=25320 comm="syz.0.5891" path="socket:[132844]" dev="sockfs" ino=132844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  440.478442][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  440.500060][ T8638] tipc: Left network mode
[  440.551758][ T8638] IPVS: stopping master sync thread 20420 ...
[  440.559719][T25325] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.562319][T25325] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.564917][T25325] bridge0: entered allmulticast mode
[  440.567253][ T8638] IPVS: stopping backup sync thread 24556 ...
[  440.649991][T25325] bridge_slave_1: left allmulticast mode
[  440.651865][T25325] bridge_slave_1: left promiscuous mode
[  440.657710][T25325] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.679489][T25325] bridge_slave_0: left allmulticast mode
[  440.681436][T25325] bridge_slave_0: left promiscuous mode
[  440.683372][T25325] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.948931][T25282] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  440.958882][T25282] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  440.969207][T25282] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  440.984104][T25282] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  441.020249][ T8638] hsr_slave_0: left promiscuous mode
[  441.025972][ T8638] hsr_slave_1: left promiscuous mode
[  441.028517][ T8638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.057505][ T8638] veth1_macvtap: left promiscuous mode
[  441.059273][ T8638] veth0_macvtap: left promiscuous mode
[  441.061079][ T8638] veth1_vlan: left promiscuous mode
[  441.062774][ T8638] veth0_vlan: left promiscuous mode
[  441.143588][ T8638] pimreg (unregistering): left allmulticast mode
[  441.417145][T25334] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5893'.
[  441.518051][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  442.141670][ T8638] team0 (unregistering): Port device team_slave_1 removed
[  442.156559][ T5325] Bluetooth: hci2: command tx timeout
[  442.288128][ T8638] team0 (unregistering): Port device team_slave_0 removed
[  442.559360][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  442.660005][ T5972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  442.672747][ T5972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  442.681716][ T5972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  442.687201][ T5972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  442.694627][ T5972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  443.325970][T25340] lo speed is unknown, defaulting to 1000
[  443.353234][T25282] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.379654][T25282] 8021q: adding VLAN 0 to HW filter on device team0
[  443.398373][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.400711][ T8639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.422603][T25347] fuse: Bad value for 'user_id'
[  443.424210][T25347] fuse: Bad value for 'user_id'
[  443.428175][ T8639] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.430431][ T8639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.491722][T25351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5898'.
[  443.517611][T25351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25351 comm=syz.0.5898
[  443.599282][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  443.732012][T25340] chnl_net:caif_netlink_parms(): no params data found
[  443.873311][T25340] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.875693][T25340] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.878838][T25340] bridge_slave_0: entered allmulticast mode
[  443.881575][T25340] bridge_slave_0: entered promiscuous mode
[  443.886836][T25340] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.889579][T25340] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.891928][T25340] bridge_slave_1: entered allmulticast mode
[  443.894584][T25340] bridge_slave_1: entered promiscuous mode
[  443.932963][T25282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.969868][T25340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.974727][T25340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  443.984227][   T40] audit: type=1400 audit(2000000367.269:30571): avc:  denied  { write } for  pid=25368 comm="syz.0.5902" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  444.053481][T25371] netlink: 'syz.0.5903': attribute type 1 has an invalid length.
[  444.057486][T25371] netlink: 'syz.0.5903': attribute type 2 has an invalid length.
[  444.059922][T25371] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.5903'.
[  444.105480][T25340] team0: Port device team_slave_0 added
[  444.112518][T25340] team0: Port device team_slave_1 added
[  444.236712][ T5972] Bluetooth: hci2: command tx timeout
[  444.315881][T25340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.322706][T25340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.332656][T25340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.357378][T25382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5905'.
[  444.362946][T25340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.365665][T25340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.374276][T25340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.429742][T25340] hsr_slave_0: entered promiscuous mode
[  444.432203][T25340] hsr_slave_1: entered promiscuous mode
[  444.434331][T25340] debugfs: 'hsr0' already exists in 'hsr'
[  444.436147][T25340] Cannot create hsr debugfs directory
[  444.559675][T25282] veth0_vlan: entered promiscuous mode
[  444.574689][T25282] veth1_vlan: entered promiscuous mode
[  444.606293][T25391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5908'.
[  444.639290][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  444.694746][T25340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.699508][T25340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.712309][T25282] veth0_macvtap: entered promiscuous mode
[  444.722776][T25394] vlan2: entered promiscuous mode
[  444.724504][T25394] vlan2: entered allmulticast mode
[  444.726115][T25394] hsr_slave_1: entered allmulticast mode
[  444.733912][T25282] veth1_macvtap: entered promiscuous mode
[  444.734104][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5909'.
[  444.797090][ T5972] Bluetooth: hci1: command tx timeout
[  444.964134][T25340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.968296][T25340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.990541][T25282] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.998583][T25282] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.042433][ T1172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.082265][T25340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.085544][T25340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.095324][ T1172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.102903][ T8639] gretap2: left promiscuous mode
[  445.105589][ T8639] bridge0: port 1(gretap2) entered disabled state
[  445.119860][T25400] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5911'.
[  445.197520][T25402] netlink: 'syz.0.5912': attribute type 1 has an invalid length.
[  445.197932][   T40] audit: type=1400 audit(2000000368.489:30572): avc:  denied  { listen } for  pid=25401 comm="syz.0.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  445.350474][ T8639] bond3 (unregistering): (slave gretap1): Releasing active interface
[  445.612913][ T8639] bond1 (unregistering): Released all slaves
[  445.621580][ T8639] bond2 (unregistering): Released all slaves
[  445.631035][ T8639] bond3 (unregistering): Released all slaves
[  445.644286][ T1172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.649160][ T1172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.683103][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  445.691668][T25340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.695055][T25340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.794173][ T8639] tipc: Left network mode
[  445.827657][ T8638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.830138][ T8638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.918271][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.922222][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.972038][   T40] audit: type=1400 audit(2000000369.259:30573): avc:  denied  { name_connect } for  pid=25406 comm="syz.0.5914" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  446.037639][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5915'.
[  446.040972][T25412] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  446.043647][T25412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.116343][T25340] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  446.166183][T25340] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  446.174926][T25417] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5916'.
[  446.184382][T25340] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  446.206552][T25417] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5916'.
[  446.254099][ T8639] hsr_slave_0: left promiscuous mode
[  446.258496][ T8639] hsr_slave_1: left promiscuous mode
[  446.260600][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.262897][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.303351][ T8639] veth1_macvtap: left promiscuous mode
[  446.305172][ T8639] veth0_macvtap: left promiscuous mode
[  446.307510][ T8639] veth1_vlan: left promiscuous mode
[  446.316745][ T5972] Bluetooth: hci2: command tx timeout
[  446.720335][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  446.877453][ T5972] Bluetooth: hci1: command tx timeout
[  447.759705][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  448.500775][T25340] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  448.516548][T25426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.553319][T25435] CUSE: unknown device info ""
[  448.554880][T25435] CUSE: zero length info key specified
[  448.567382][T25436] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  448.581648][   T40] audit: type=1400 audit(2000000371.869:30574): avc:  denied  { setattr } for  pid=25431 comm="syz.6.5919" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1
[  448.690233][T25340] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.726842][T25340] 8021q: adding VLAN 0 to HW filter on device team0
[  448.743641][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.745934][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.767387][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.770051][ T8641] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.791220][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.798543][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  448.799985][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.802593][T25444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5923'.
[  448.818110][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.822598][T25444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5923'.
[  448.831115][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.840473][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.851843][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.863179][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.882745][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.900502][ T8639] IPVS: stop unused estimator thread 0...
[  448.909732][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.924004][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.939182][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.947363][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.954248][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.966188][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.970590][ T5972] Bluetooth: hci1: command tx timeout
[  448.974263][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.976230][T25340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.981920][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.985497][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.989610][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.992841][T25449] overlay: filesystem on ./bus not supported as upperdir
[  448.996749][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.001683][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.002519][T25340] veth0_vlan: entered promiscuous mode
[  449.012672][T25340] veth1_vlan: entered promiscuous mode
[  449.014656][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.027491][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.029464][T25340] veth0_macvtap: entered promiscuous mode
[  449.035811][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.036177][T25340] veth1_macvtap: entered promiscuous mode
[  449.045456][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.048879][T25340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.054261][T25340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.057777][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.062302][ T8638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.062813][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.069239][ T1172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.069747][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.074449][ T1172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.080484][ T1172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.080632][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.089258][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.093118][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.107233][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.128941][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.139844][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.147984][ T8641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.150438][ T8641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.157796][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.170977][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.173072][ T8641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.177261][ T8641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.179448][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.192106][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.198416][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.202051][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.205999][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.213916][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.221365][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.226709][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.232416][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.236281][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.239902][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.244502][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.253485][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.267410][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.270689][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.275725][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.294212][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.301375][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.305308][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.309413][T25468] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  449.320549][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.328686][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.339640][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.355217][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.362737][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.377643][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.382224][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.387826][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.394620][T25449] overlay: filesystem on ./bus not supported as upperdir
[  449.581819][   T40] audit: type=1400 audit(2000000372.869:30575): avc:  denied  { read } for  pid=25489 comm="syz.6.5935" path="socket:[136635]" dev="sockfs" ino=136635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  449.818344][   T40] audit: type=1400 audit(2000000373.109:30576): avc:  denied  { append } for  pid=25503 comm="syz.0.5940" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  449.839850][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  450.316975][T25518] bridge0: entered promiscuous mode
[  450.589643][T25531] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  450.630515][   T40] audit: type=1400 audit(2000000373.919:30577): avc:  denied  { setattr } for  pid=25536 comm="syz.1.5950" name="ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[  450.650718][T25538] pim6reg: entered allmulticast mode
[  450.683875][T25541] nbd: nbd1 already in use
[  450.692962][   T40] audit: type=1400 audit(2000000373.979:30578): avc:  denied  { connect } for  pid=25540 comm="syz.1.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  450.734163][T25545] nftables ruleset with unbound set
[  450.878848][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  450.891569][   T40] audit: type=1326 audit(2000000374.179:30579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25556 comm="syz.6.5956" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52c958ebe9 code=0x0
[  451.036824][ T5972] Bluetooth: hci1: command tx timeout
[  451.461510][   T40] audit: type=1400 audit(2000000374.749:30580): avc:  denied  { append } for  pid=25570 comm="syz.0.5960" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  451.650158][T25578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5961'.
[  451.711377][   T40] audit: type=1400 audit(2000000374.999:30581): avc:  denied  { create } for  pid=25582 comm="syz.0.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  451.717681][   T40] audit: type=1400 audit(2000000374.999:30582): avc:  denied  { write } for  pid=25582 comm="syz.0.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  451.772999][T25587] 9pnet_virtio: no channels available for device syz
[  451.832305][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5964'.
[  451.918966][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  452.747767][T25603] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5970'.
[  452.838483][ T5325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  452.845119][ T5325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  452.850731][ T5325] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  452.870023][ T5325] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  452.876780][   T29] page_pool_release_retry() stalled pool shutdown: id 124, 1 inflight 60 sec
[  452.880178][ T5325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  452.959850][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  453.212215][T25605] lo speed is unknown, defaulting to 1000
[  453.241833][T23974] block nbd7: shutting down sockets
[  453.390503][T25616] lo speed is unknown, defaulting to 1000
[  453.551622][T25605] chnl_net:caif_netlink_parms(): no params data found
[  453.743859][T25605] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.746187][T25605] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.749064][T25605] bridge_slave_0: entered allmulticast mode
[  453.751863][T25605] bridge_slave_0: entered promiscuous mode
[  453.754988][T25605] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.759847][T25605] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.762207][T25605] bridge_slave_1: entered allmulticast mode
[  453.764946][T25605] bridge_slave_1: entered promiscuous mode
[  453.950475][T25605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.996641][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  454.004649][T25605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.059342][T25605] team0: Port device team_slave_0 added
[  454.067641][T25605] team0: Port device team_slave_1 added
[  454.161403][T25666] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  454.164780][T25605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.169419][   T40] audit: type=1400 audit(2000000377.459:30583): avc:  denied  { bind } for  pid=25664 comm="syz.0.5986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  454.169450][T25605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.184735][T25605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.205217][T25605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.207971][T25605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.215864][T25605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.379729][T25605] hsr_slave_0: entered promiscuous mode
[  454.382075][T25605] hsr_slave_1: entered promiscuous mode
[  454.384210][T25605] debugfs: 'hsr0' already exists in 'hsr'
[  454.386021][T25605] Cannot create hsr debugfs directory
[  454.754239][T25605] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.894702][T25605] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.956892][ T5972] Bluetooth: hci7: command tx timeout
[  455.037989][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  455.104716][T25605] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.155894][T25730] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  455.161403][T25733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6003'.
[  455.201229][T25735] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  455.227770][T25605] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.376083][T25605] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  455.387945][T25605] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  455.395122][T25605] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  455.406751][T25605] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  455.459902][T25605] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.474133][T25605] 8021q: adding VLAN 0 to HW filter on device team0
[  455.479457][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.481741][ T8641] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.493403][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.495736][ T8893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.614236][T25760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6012'.
[  455.617678][T25760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.713194][T25760] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.796256][T25770] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6014'.
[  455.803886][T25605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.858450][T25777] syz.0.6015: attempt to access beyond end of device
[  455.858450][T25777] md0: rw=0, sector=64, nr_sectors = 8 limit=0
[  455.862595][T25777] syz.0.6015: attempt to access beyond end of device
[  455.862595][T25777] md0: rw=0, sector=120, nr_sectors = 8 limit=0
[  455.868520][T25777] Mount JFS Failure: -5
[  455.869922][T25777] jfs_mount failed w/return code = -5
[  455.878816][T25777] can0: slcan on ttyS3.
[  455.958294][T25777] can0 (unregistered): slcan off ttyS3.
[  455.968665][T25605] veth0_vlan: entered promiscuous mode
[  455.973704][T25605] veth1_vlan: entered promiscuous mode
[  455.984637][T25782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6016'.
[  456.001622][T25605] veth0_macvtap: entered promiscuous mode
[  456.008430][T25605] veth1_macvtap: entered promiscuous mode
[  456.021114][T25605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.029914][T25605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.038093][ T8893] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.041031][ T8893] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.044710][ T8893] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.051127][ T8893] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.051814][T25789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6018'.
[  456.066637][T25789] bridge_slave_1: left allmulticast mode
[  456.068569][T25789] bridge_slave_1: left promiscuous mode
[  456.070666][T25789] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.077245][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  456.083895][T25789] bridge_slave_0: left allmulticast mode
[  456.085699][T25789] bridge_slave_0: left promiscuous mode
[  456.087872][T25789] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.093935][   T40] audit: type=1400 audit(2000000379.379:30584): avc:  denied  { block_suspend } for  pid=25785 comm="syz.0.6017" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  456.216119][ T9462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.222202][ T9462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.238979][ T8893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.241513][ T8893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.280371][   T40] audit: type=1400 audit(2000000379.569:30585): avc:  denied  { audit_read } for  pid=25794 comm="syz.9.5967" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  456.482168][ T1186] block nbd2: Possible stuck request ffff888027d67000: control (read@0,4096B). Runtime 150 seconds
[  456.626820][T25807] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  457.036663][ T5972] Bluetooth: hci7: command tx timeout
[  457.039769][   T40] audit: type=1326 audit(2000000380.329:30586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.0.6019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1718ebe9 code=0x7fc00000
[  457.112375][T25819] syzkaller1: entered allmulticast mode
[  457.119435][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  457.312692][T25832] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  457.423738][   T40] audit: type=1400 audit(2000000380.709:30587): avc:  denied  { read } for  pid=25839 comm="syz.0.6034" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  457.433880][   T40] audit: type=1400 audit(2000000380.709:30588): avc:  denied  { open } for  pid=25839 comm="syz.0.6034" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  457.447311][   T40] audit: type=1400 audit(2000000380.719:30589): avc:  denied  { ioctl } for  pid=25839 comm="syz.0.6034" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  457.449956][T25842] cgroup: Need name or subsystem set
[  457.460627][T25842] tipc: Failed to remove unknown binding: 66,1,1/0:3414636379/3414636381
[  457.483563][   T40] audit: type=1400 audit(2000000380.769:30590): avc:  denied  { setattr } for  pid=25839 comm="syz.0.6034" name="mixer" dev="devtmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  457.550027][T25845] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6036'.
[  457.574885][T25842] tipc: Failed to remove unknown binding: 66,1,1/0:3414636379/3414636381
[  457.578062][T25842] tipc: Failed to remove unknown binding: 66,1,1/0:3414636379/3414636381
[  457.752274][T25852] netlink: 'syz.1.6039': attribute type 12 has an invalid length.
[  457.883368][T25870] Failed to get privilege flags for destination (handle=0x2:0xd)
[  457.896373][T25873] netlink: 'syz.1.6047': attribute type 6 has an invalid length.
[  457.900754][T25873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6047'.
[  458.118546][T25888] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  458.157529][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  458.216667][ T7630] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  458.329916][T25892] binder_alloc: binder_alloc_mmap_handler: 25891 200000ff9000-200000ffd000 already mapped failed -16
[  458.366679][ T7630] usb 6-1: Using ep0 maxpacket: 32
[  458.370421][ T7630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  458.374041][ T7630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  458.377221][ T7630] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  458.380897][ T7630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  458.384555][ T7630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  458.389811][ T7630] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  458.392746][ T7630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.395615][ T7630] usb 6-1: Product: syz
[  458.398321][ T7630] usb 6-1: Manufacturer: syz
[  458.399832][ T7630] usb 6-1: SerialNumber: syz
[  458.404246][ T7630] usb 6-1: config 0 descriptor??
[  458.408975][ T7630] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input39
[  458.423362][T25896] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6053'.
[  458.614813][T25883] syz_tun: entered allmulticast mode
[  458.620215][T25883] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  458.624252][T25883] mroute: pending queue full, dropping entries
[  458.628038][T25883] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  458.631727][T25883] mroute: pending queue full, dropping entries
[  458.643501][T25882] syz_tun: left allmulticast mode
[  458.646771][ T6786] usb 6-1: USB disconnect, device number 28
[  458.652086][   T40] audit: type=1400 audit(2000000381.939:30591): avc:  denied  { map } for  pid=25902 comm="syz.0.6056" path="socket:[138114]" dev="sockfs" ino=138114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  458.773554][T25917] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  459.116568][ T5972] Bluetooth: hci7: command tx timeout
[  459.191445][   T40] audit: type=1400 audit(2000000382.479:30592): avc:  denied  { ioctl } for  pid=25931 comm="syz.0.6065" path="socket:[139609]" dev="sockfs" ino=139609 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  459.198090][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  459.437369][ T6786] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  459.591190][ T6786] usb 6-1: Using ep0 maxpacket: 8
[  459.594187][ T6786] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  459.600677][ T6786] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  459.603977][ T6786] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  459.608177][ T6786] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  459.612208][ T6786] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  459.615058][ T6786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.823036][ T6786] usb 6-1: GET_CAPABILITIES returned 0
[  459.824813][ T6786] usbtmc 6-1:16.0: can't read capabilities
[  460.236805][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  460.554662][T20725] usb 6-1: USB disconnect, device number 29
[  461.196908][ T5972] Bluetooth: hci7: command tx timeout
[  461.277396][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  462.319056][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  463.358736][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  463.568316][ T5375] udevd[5375]: worker [19968] /devices/virtual/block/nbd2 is taking a long time
[  464.398171][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  465.436732][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  466.279511][T25950] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  466.301846][T25950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  466.307327][T25958] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  466.372813][T25960] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6074'.
[  466.379740][T25960] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.384444][T25960] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.415987][T25964] ptrace attach of "/syz-executor exec"[25605] was attempted by "/syz-executor exec"[25964]
[  466.478608][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  466.660651][ T1025] usb 14-1: new high-speed USB device number 10 using dummy_hcd
[  466.715913][   T40] audit: type=1400 audit(2000000389.999:30593): avc:  denied  { write } for  pid=25983 comm="syz.6.6084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  466.723246][   T29] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  466.803755][T25991] binder: 25990:25991 ioctl c0306201 200000000680 returned -14
[  466.807420][T25991] overlayfs: conflicting options: userxattr,metacopy=on
[  466.820324][ T1025] usb 14-1: Using ep0 maxpacket: 32
[  466.823271][ T1025] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  466.830662][ T1025] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  466.833779][ T1025] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  466.842352][ T1025] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  466.845756][ T1025] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  466.848709][T25997] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  466.855281][ T1025] usb 14-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  466.859466][ T1025] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.862013][ T1025] usb 14-1: Product: syz
[  466.863385][ T1025] usb 14-1: Manufacturer: syz
[  466.864953][ T1025] usb 14-1: SerialNumber: syz
[  466.868287][ T1025] usb 14-1: config 0 descriptor??
[  466.872758][ T1025] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input40
[  466.886714][   T29] usb 6-1: Using ep0 maxpacket: 8
[  466.891706][   T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  466.894742][   T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  466.904075][   T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  466.908290][   T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  466.912423][   T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  466.918469][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.971382][   T40] audit: type=1326 audit(2000000390.259:30594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25996 comm="syz.0.6089" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e1718ebe9 code=0x0
[  467.079069][ T1025] usb 14-1: USB disconnect, device number 10
[  467.165868][   T29] usb 6-1: GET_CAPABILITIES returned 0
[  467.168231][   T29] usbtmc 6-1:16.0: can't read capabilities
[  467.420207][   T29] usb 6-1: USB disconnect, device number 30
[  467.519370][    C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  467.764535][T26027] loop6: detected capacity change from 0 to 524287999
[  467.934024][T26036] ------------[ cut here ]------------
[  467.935799][T26036] WARNING: CPU: 3 PID: 26036 at arch/x86/kvm/x86.c:11551 kvm_arch_vcpu_ioctl_run+0x14df/0x1980
[  467.939307][T26036] Modules linked in:
[  467.941482][T26036] CPU: 3 UID: 0 PID: 26036 Comm: syz.6.6099 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  467.947223][T26036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  467.950791][T26036] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980
[  467.952844][T26036] Code: 0a 00 00 00 00 00 00 e8 0c 6b be 1e 31 ff 89 c5 89 c6 e8 14 ec 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 c2 f0 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 b4 f0 79 00 90 0f 0b 90 e9 b8 ef ff ff
[  467.959199][T26036] RSP: 0018:ffffc900040efc30 EFLAGS: 00010293
[  467.961094][T26036] RAX: 0000000000000000 RBX: ffff88802c502940 RCX: ffffffff814191ff
[  467.963753][T26036] RDX: ffff88804a512440 RSI: ffffffff8141a27e RDI: 0000000000000007
[  467.966264][T26036] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[  467.969577][T26036] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b821000
[  467.972103][T26036] R13: ffff88802c502a18 R14: 0000000000000000 R15: ffff88802c502c74
[  467.974961][T26036] FS:  00007f52ca4576c0(0000) GS:ffff8880d69bc000(0000) knlGS:0000000000000000
[  467.978301][T26036] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  467.980423][T26036] CR2: 000000005200000c CR3: 0000000047e93000 CR4: 0000000000352ef0
[  467.983105][T26036] Call Trace:
[  467.984156][T26036]  <TASK>
[  467.985089][T26036]  kvm_vcpu_ioctl+0x5eb/0x1690
[  467.986847][T26036]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  467.988541][T26036]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  467.990425][T26036]  ? do_vfs_ioctl+0x128/0x14f0
[  467.991994][T26036]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  467.993610][T26036]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  467.995781][T26036]  ? hook_file_ioctl_common+0x145/0x410
[  467.997100][T20725] usb 14-1: new full-speed USB device number 11 using dummy_hcd
[  467.998144][T26036]  ? selinux_file_ioctl+0x180/0x270
[  468.000864][T26042] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  468.001687][T26036]  ? selinux_file_ioctl+0xb4/0x270
[  468.005676][T26036]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  468.007654][T26036]  __x64_sys_ioctl+0x18b/0x210
[  468.009540][T26036]  do_syscall_64+0xcd/0x4c0
[  468.011022][T26036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.012892][T26036] RIP: 0033:0x7f52c958ebe9
[  468.014307][T26036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.020579][T26036] RSP: 002b:00007f52ca457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  468.023317][T26036] RAX: ffffffffffffffda RBX: 00007f52c97b5fa0 RCX: 00007f52c958ebe9
[  468.025872][T26036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  468.028509][T26036] RBP: 00007f52c9611e19 R08: 0000000000000000 R09: 0000000000000000
[  468.031089][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.033631][T26036] R13: 00007f52c97b6038 R14: 00007f52c97b5fa0 R15: 00007fff4fb52248
[  468.036151][T26036]  </TASK>
[  468.037463][T26036] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  468.039847][T26036] CPU: 3 UID: 0 PID: 26036 Comm: syz.6.6099 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) 
[  468.043572][T26036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  468.046981][T26036] Call Trace:
[  468.048072][T26036]  <TASK>
[  468.049025][T26036]  dump_stack_lvl+0x3d/0x1f0
[  468.050503][T26036]  vpanic+0x6e8/0x7a0
[  468.051798][T26036]  ? __pfx_vpanic+0x10/0x10
[  468.053261][T26036]  ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980
[  468.055117][T26036]  panic+0xca/0xd0
[  468.056337][T26036]  ? __pfx_panic+0x10/0x10
[  468.057801][T26036]  ? check_panic_on_warn+0x1f/0xb0
[  468.059439][T26036]  check_panic_on_warn+0xab/0xb0
[  468.061004][T26036]  __warn+0xf6/0x3c0
[  468.062255][T26036]  ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980
[  468.064105][T26036]  report_bug+0x3c3/0x580
[  468.065490][T26036]  ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980
[  468.067371][T26036]  handle_bug+0x184/0x210
[  468.068761][T26036]  exc_invalid_op+0x17/0x50
[  468.070214][T26036]  asm_exc_invalid_op+0x1a/0x20
[  468.071776][T26036] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980
[  468.073796][T26036] Code: 0a 00 00 00 00 00 00 e8 0c 6b be 1e 31 ff 89 c5 89 c6 e8 14 ec 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 c2 f0 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 b4 f0 79 00 90 0f 0b 90 e9 b8 ef ff ff
[  468.079842][T26036] RSP: 0018:ffffc900040efc30 EFLAGS: 00010293
[  468.081766][T26036] RAX: 0000000000000000 RBX: ffff88802c502940 RCX: ffffffff814191ff
[  468.084285][T26036] RDX: ffff88804a512440 RSI: ffffffff8141a27e RDI: 0000000000000007
[  468.086819][T26036] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[  468.089316][T26036] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b821000
[  468.091896][T26036] R13: ffff88802c502a18 R14: 0000000000000000 R15: ffff88802c502c74
[  468.094483][T26036]  ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980
[  468.096337][T26036]  ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980
[  468.098228][T26036]  kvm_vcpu_ioctl+0x5eb/0x1690
[  468.099839][T26036]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  468.101527][T26036]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  468.103447][T26036]  ? do_vfs_ioctl+0x128/0x14f0
[  468.104982][T26036]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  468.106627][T26036]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  468.108825][T26036]  ? hook_file_ioctl_common+0x145/0x410
[  468.110590][T26036]  ? selinux_file_ioctl+0x180/0x270
[  468.112266][T26036]  ? selinux_file_ioctl+0xb4/0x270
[  468.113900][T26036]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  468.115576][T26036]  __x64_sys_ioctl+0x18b/0x210
[  468.117149][T26036]  do_syscall_64+0xcd/0x4c0
[  468.118617][T26036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.120512][T26036] RIP: 0033:0x7f52c958ebe9
[  468.121945][T26036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.128006][T26036] RSP: 002b:00007f52ca457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  468.130630][T26036] RAX: ffffffffffffffda RBX: 00007f52c97b5fa0 RCX: 00007f52c958ebe9
[  468.133147][T26036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  468.135666][T26036] RBP: 00007f52c9611e19 R08: 0000000000000000 R09: 0000000000000000
[  468.138198][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.140699][T26036] R13: 00007f52c97b6038 R14: 00007f52c97b5fa0 R15: 00007fff4fb52248
[  468.143210][T26036]  </TASK>
[  468.144754][T26036] Kernel Offset: disabled
[  468.146133][T26036] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:48:12  Registers:
info registers vcpu 0

CPU#0
RAX=000000000042e979 RBX=0000000000000000 RCX=ffffffff8b936c29 RDX=0000000000000000
RSI=ffffffff8de4f2b5 RDI=ffffffff8c162500 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08
R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000
R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab3890 R15=0000000000000000
RIP=ffffffff8b93578f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66bc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f0e172a1bf0 CR3=0000000038e7d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffff800 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2823540f70 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4aacaea6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4aacaea6 00007fff4aacaeac
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2822812e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2822812e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2822812e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2822812e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2822812ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2822812fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000392e63 64755f796d6d7564
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff8b922d4d RDX=ffff8880320f8000
RSI=000000000000003f RDI=0000000000000001 RBP=ffff88801fe35e40 RSP=ffffc90003dcf6e8
R8 =0000000000000001 R9 =000000000000003f R10=0000000000000006 R11=0000000000000000
R12=00000000ffffffff R13=000000000000009a R14=dffffc0000000000 R15=ffffc90003dcf7f0
RIP=ffffffff81bb8d4b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f4edd354300 ffffffff 00c01300
GS =0000 ffff8880d67bc000 ffffffff 00c01300
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005650d8949f40 CR3=000000002b92d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4fb52756
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4fb52756 00007fff4fb5275c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52c9612e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52c9612e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52c9612e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52c9612e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52c9612ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52c9612fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00001035f8210fd0 230f000000000000 1000b848ef660041 ba66cf1278298f6d
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006c8e5a0ff3 642eec0042ba6624 1c010f0000000006 0004000b000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2444c7ef66000cb8 660cfcba66ef8014 f08eb80cf8ba66f8 230f0800001035f8
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000001 RBX=ffffc9000061fa90 RCX=ffffc90000620001 RDX=0000000000000000
RSI=ffffffff816ae8a4 RDI=ffffffff8e5c11e0 RBP=0000000000000001 RSP=ffffc9000061ee30
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=000000000008704d
R12=ffffc9000061eef8 R13=ffffc9000061eea8 R14=ffffc9000061fa90 R15=ffffc9000061eedc
RIP=ffffffff8197c230 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d68bc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f3672b9ef98 CR3=00000000290a3000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000053d850c4 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fdc7670629569f04 b7c8c91388a3e46c
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b7f3c0dd2e29ff6 736fd2147ff85c2c
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a8001f0cf000254 7256a18f47ec1a5c
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b43d83d31ab6d88 2400000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 12ae502f00000000 0000029c00000001
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de9755627be81a04 b7a909692b49817c
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3144a7f377b2a41f 9e47862ef789c509
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 72d006338185d6a7 83db8fad7b927f59
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8bb05c8d26a5e4f1 2fb062906b99d4a2
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 12ae502f00000000 0000029c00000008
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01094ce21cc6dd77 c06173e3784ea619
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c85c5039ba8c560a 3b0980adb8d20f00
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 797469726f697270
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52ca2ed100 00007f52c9787460 00007f52c9780004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52c97874b8 00007f52c97874b0 00007f52c97874a8 00007f52c97874a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3144a7f377b2a41f 9e47862ef789c509
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001
info registers vcpu 3

CPU#3
RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85640d05 RDI=ffffffff9b10dfa0 RBP=ffffffff9b10df60 RSP=ffffc900040ef5a0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b10df60 R15=ffffffff85640ca0
RIP=ffffffff85640d2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
FS =0000 00007f52ca4576c0 ffffffff 00c09300 DPL=0 DS   [-WA]
GS =0000 ffff8880d69bc000 ffffffff 00c09300 DPL=0 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000005200000c CR3=0000000047e93000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000