last executing test programs:

26.073851929s ago: executing program 1 (id=780):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fb00000700fb"], 0x830200)

26.072806333s ago: executing program 1 (id=783):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000008500)={0x0, 0x0, r3})
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xd, 0x5, 0x1, 0x9c9b, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5, 0x40})
ioctl$TCSBRK(r0, 0x5409, 0x100)

25.983910558s ago: executing program 1 (id=788):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x452, <r0=>0xffffffffffffffff, 0x1})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x3fcf, 0x1, 0x4, 0x5}, 0x10)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0xf0b6, 0x1, 0x4, 0x100000, 0x6, {0x77359400}, {0x4, 0xc, 0x8, 0x2, 0x9, 0x6, "de00f55b"}, 0x3, 0x4, {<r1=>0xffffffffffffffff}, 0x400, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x98200, 0x0)
ioctl$RFKILL_IOC_MAX_SIZE(r4, 0x2, &(0x7f0000000180)=0x7)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, <r6=>0x0}, &(0x7f0000000240)=0xc)
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000300))
write$FUSE_ENTRY(r5, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x3, 0x3, 0x4, 0x1ff, 0x8, 0x80000001, {0x5, 0x1, 0x1dcc, 0x8, 0x4, 0xb9, 0x233, 0x0, 0x9, 0x8000, 0x101, r6, r7, 0x0, 0x80}}}, 0x90)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000400))
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000440)=0x1)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000480)=[r4, r5, r0, r2, r5], 0x5)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000004c0))
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000500)={0x100, 0x23fd0a15, 0x4, 0x81, 0x80000001})
r8 = accept$nfc_llcp(r3, &(0x7f0000000540), &(0x7f00000005c0)=0x60)
ppoll(&(0x7f0000000600)=[{r1, 0x818e}, {r4, 0x4100}, {r5, 0x8010}, {r2, 0x402}, {r8, 0x4010}, {r0, 0x10}], 0x6, &(0x7f0000000640), &(0x7f0000000680)={[0xffffffffffff0000]}, 0x8)
r9 = socket$phonet(0x23, 0x2, 0x1)
ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3)
write$P9_RWRITE(r3, &(0x7f00000006c0)={0xb, 0x77, 0x2, 0x6}, 0xb)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000700)={<r10=>0x0, ""/256, 0x0, <r11=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000900)={{r5}, r12, 0x10, @unused=[0x2, 0x100000000, 0x9, 0x3], @subvolid=0x3})
r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x810, r3, 0x8000000)
r14 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x810, r3, 0x10000000)
r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r13, r14, &(0x7f0000001900)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd=r1, 0x5, 0x7, 0x5, 0x4, 0x1, {0x0, r15}})
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001940)={{<r16=>r10, 0x6, 0x10, 0x5, 0xd87, 0x200, 0x8, 0xd, 0x1, 0x101, 0x3, 0xfff, 0x336, 0x0, 0x9}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000002940)={r11, r16, "cf69c987a683d75d7e7d5dd5006bf3befdbbd2e5fd68b0db527b909fead868afe9d23756490dfbccfe63c84e9f773d9c816c6540617aa34a94181b8eaa66d0dd654811bdda8544bee8181db575248bc046c9b30832c3acd46bd19de8e31de53a170fd3dd143b73db5ece89dd9f24504146b26a163e61668ae654dfdf75906d0a203c7d05191ef9336c1ec19f51c74866f91a1a1392595b4828a609557812e1cb9ffc5d576f3bb129feb753b45d538b30024e4c463a51f759509abb9574e290f248293ec578e0dcf726495df11eeee037f8dfa47d0b93534fd097eb29d5b998b5736234dd1b54a42e65970310f3cdff6d8b69e21b6ad024ef72ce33845a0cbafc", "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"})
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000003940), &(0x7f0000003980)=0x4)
mknod(&(0x7f00000039c0)='./file0\x00', 0x800, 0x9)

25.929299987s ago: executing program 1 (id=791):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001bc0)=@delchain={0x800, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x7cc, 0x2, [@TCA_MATCHALL_ACT={0x7c8, 0x2, [@m_mirred={0x118, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0xb, 0x6, 0x9, 0x100}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x10000000, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0xffa, 0x20000000, 0x9, 0xffffffff}, 0x1}}]}, {0x8a, 0x6, "0452feeb279b853518fc10fabcbd1df376e3b86c8e49bdeb7037b31e974bd9c33eb5ee6611c3dd8263370390502e05ccc045aea42a2356fe99f08502284a9897593ea5cf980c1795d07ea9d7ce3eab8a1f8cdfdc6a33fc57e88cc8e2adef39ff96881cfd50fc7c6d1cb7ed113831c62a33bd4983844077a74ce51cf418e76f6101d472a62d56"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x114, 0x9, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x3, 0xffffffffffffffff, 0xfffeffff, 0x9}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'CT\x00'}]}, {0xbd, 0x6, "06c87e5149a90411e031452a9b439be19dab1731a01434b176b3b660fa8712ae17167dc165ab2ae7bd39c12a268ab2032d13bce18979e94e9a3749a459698220410756ee7cb2cd9819d57a30950f40f9d235a42a80d6cb27c621e0c5590c1660e94ac0e3317664c50b674f635302f6f5232f8462ede976c3f72d0a9875d450152af7697724f334ff8627090e11f6b7928a19f9238810e076efd515faf49691ae6c139b533a9fb9f48d931d198113842f9632ef0bb6b2882c57"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xf8, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x4, 0x0, 0x6, 0xb}, 0x8410}}]}, {0xa9, 0x6, "2cfe7c8ed69427bc46c747dfc59dbc6c207e8a289086ce5d0cfdddd196056119385b7c6cf3ac9acdf0e0890a357f597421975f909c942a8fd0ea0782f194eca0c29b7745aa406dbebda1e94be7996465a9549a69a7ee99321b525aa4c3c18eedca5d653b8bef872c0e20407f1fab066a39dbe57627be923b8562aa880e6fccf83e3b157020d5d33af6c11d8974b716ad373584b92418ed90475d989d7c8537504dcb39ecb1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_mpls={0x120, 0x18, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x5, 0x10000000, 0x8, 0x7f}, 0x3}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc3a35}]}, {0xbd, 0x6, "58fcd29b1c2dc9c53a68162520f3d8e19d6ac34dcf7cd59a321c15abe40a4f30584f3c512bf6a5ccd208c5128845220a69d5d38a601b4adb1960b595f1b99db1489814c050eea84c268c878cc53ef2b53fca01c9f909f9a0a182803ee0aadfd342db50263adc08e5ceb86cab7f60cea6709aeb9d6040deddce17faddc53b78d6da0740c914e04a43b89d2f8deea8834e498478c9b050b85540557c31a879ed4bba70a498fa34debf7364e280f275863b6bbec9e8629b315a05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x94, 0x1e, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0x0, 0x20000000, 0x9, 0x2000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb92}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x20000000, 0x4, 0x100}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xd, 0x6, "e395c9d53749527d1b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x74, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x1, 0x5, 0xffff03ee, 0x800}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x8, 0x4}, 0x79}}]}, {0xe, 0x6, "32dae0f68eea497e9937"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xb0, 0x12, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xa, 0x1, 0x7}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7ff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x10, 0x7, 0x3, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x3a, 0x6, "61f34fd34558865c0ef788611ae446ee81a0bfe8e7ff735c6a10b62d3df6fcf233eff4a028ab9df96f2b145c6f53fda16e575c74b164"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x174, 0xd, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0x6, 0x101, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x33, 0x20000000, 0x6, 0x8ab}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x2, 0x81, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0xf5, 0x6, 0x2, 0x7fffffff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x1000, 0xffffffffffffffff, 0x9, 0xf9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7194, 0x1, 0xfff, 0x81}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe6, 0x4, 0x0, 0x1ca444b5, 0xefd}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xb2, 0xffffffffdffffffa, 0x162, 0x822d}, 0x2}}]}, {0x45, 0x6, "9c6ad136b20e259caa717ce7446cd215aec4885a248913a308464d55cf765afd1508546941e08b3a5620a795d797c0aa6e53735fb90869d8f002c8e2a44d9c565b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x54, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x20000002, 0xc, 0x2}, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x2c}}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x800}, 0x1, 0x0, 0x0, 0x4000}, 0xc050)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl(r0, 0x2, &(0x7f00000002c0)="f44a423961a283e9ee41926ebc6363366218260c18513db1cbaaffd11c16e7ee400c359ce20c2ff275e6a21e05cac08cc3dafc19db6ab3f368376d15f2dbe2973af002da0dd7e21bab958d8df78bd0954ecafab03028845f20b3b81b6b0fb4fd67d120d07379aecb6e7c1c67dca6518b7665a529ab3c9f4c3f8c2960bdce3136f436bb494d61c46dd5ee0ef8cac1a0ec8383469f02286717c09e6fee25aa")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x10}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)

25.709534789s ago: executing program 1 (id=801):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)
r2 = socket(0x10, 0xa, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001010000feff00000100014841ad740000858460cbe23cb3ceacd8000000cc00000095000000ffffffc1"], &(0x7f00000014c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x64}, 0x94)
write$binfmt_elf32(r5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/1795], 0x703)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r6=>0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r7 = userfaultfd(0x801)
r8 = getpid()
process_vm_readv(r8, &(0x7f00000002c0), 0x0, &(0x7f0000008640)=[{&(0x7f0000000440)=""/98, 0x62}], 0x1, 0x0)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f000070a000/0x2000)=nil, 0x2000, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008"], 0x7c}}, 0x84)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x14, 0x0, r3, 0x0, &(0x7f0000000640)="bb344f22cd65ec08ad299536b1ddc6465e2ee2c8a1d006589f2b5d98499d7986a702fb0d11830af7a511889bbc3696377d67ee0081e98fe9884dff9ebb3b5abfd1e609d07324337b48921e094a0fc3c78673dd2b551ddaf1b164562cd3263c2007b28414fa21458be3b02c8f142d3523aca6cf0611fc25c8b133162c5ed9891a19a11b122f40f58785d31ed158a50c5dca8d9a56d83596a4b675a907dc3f4417d784e25fd18da923d8206fd04d0f8103035c2958b6339cffe5fa10ca9f70b85146c615b4", 0xc4, 0x40000, 0x1})
mount$9p_fd(0x0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x302cc4, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}, {@version_u}, {@fscache}, {@directio}], [{@fsmagic}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x10}}]}})
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)

25.707998708s ago: executing program 1 (id=804):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @local, 0x761}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private0, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x71}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000891}, 0x4000000)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x35}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x454c}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5f2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x2000840)
r2 = open$dir(&(0x7f0000000480)='./file0\x00', 0x185000, 0x64)
linkat(r2, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1200)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=<r3=>0x0)
ptrace$getsig(0x4202, r3, 0x3, &(0x7f0000000580))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb0, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x10, r0, 0x0)
syz_io_uring_setup(0x7ca1, &(0x7f00000007c0)={0x0, 0x88bd, 0x200, 0x2, 0x125}, &(0x7f0000000840), &(0x7f0000000880)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000008c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r7}})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000900)={<r9=>0x0, 0xf4, "9e77dbf30dd18701b90d69f6193fcc3a4161603b5ac1895ae4df436397000300f2bfa5e1265b191854787884933cdd64f8a1aa75aaa96420466b9efa0389da37708adc9c76a86b2c227ecc97b5ca8a096bf55b257543888c312dfd93cade47e8e77065ba2f776c33eee23f124387d6c935ee3dbeebc86c4a68507c3369276d471fe5e6b44b315beb8e2137e9b615ac8858f048f5906f76f24b844dca15dfb9f78bd62985d4539bfdae54374b24359003a6902b61f08093a68fa8ec9e9f7bf3fdddcc3c40b531f1782c7d5534ec5f497c64bcfccbd898009bb40f50139fef7b591e4ac95f7afec3836643e39253d36556248ef792"}, &(0x7f0000000a00)=0xfc)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000a40)=@sack_info={r9, 0x3ff, 0x10001}, 0xc)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa8, r10, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000c40)={r9, 0x0, 0x10, 0x53, 0x58e, 0x1}, &(0x7f0000000c80)=0x14)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000d00), 0x131002, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000d40))
ptrace$peeksig(0x4209, r3, &(0x7f0000000d80)={0x9, 0x0, 0x7}, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}])
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001140)={'pim6reg1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), r12)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)

24.058877025s ago: executing program 0 (id=839):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00'})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x42, &(0x7f0000000100)=<r5=>0x0)
io_submit(r5, 0x0, &(0x7f0000000580))
sendmmsg$alg(r4, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) (async)
syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000300), &(0x7f0000000280)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00'}) (async)
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async)
accept4$alg(r0, 0x0, 0x0, 0x0) (async)
io_setup(0x42, &(0x7f0000000100)) (async)
io_submit(r5, 0x0, &(0x7f0000000580)) (async)
sendmmsg$alg(r4, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0) (async)

23.890355805s ago: executing program 0 (id=840):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000113a000000000000000000001b86dccd4c6485b44dc7c5691900000000725321e51c5f"])
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x840000000002, 0x3, 0x100)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r6=>0x0})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000180)={r8, 0x8, 0xd, 0x6}, 0x10)
sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140))

23.757931028s ago: executing program 0 (id=841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000015}, 0x8805)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r3=>r0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)

23.75745931s ago: executing program 0 (id=842):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600bd7400010000000f000000080031000200000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x810440, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000100)='./file0\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000400000000000000000000000000000000000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="000000f7010000000000140000004500003014000000000190780a010100ac1414aa040090780000140045000000000000000008000006ffffff7f000001"], 0x3e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x10008000)
setresgid(0xee00, 0xee01, 0x0)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000003a000000073943990000007600000000663469c4f9794db6748c39a1a0bde80e0f594883cf8c57a3d31dc0ef3a4c027d9be347a94e06a84abf5ef5f70b76006256338dc03c9931cdffc76f7200458cbaf256"])
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000040000701feffffff0000000001780000040042800c00018006000600800a0000140002800d001480040005"], 0x38}, 0x1, 0x0, 0x0, 0x488d5}, 0xc000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0)

23.647582111s ago: executing program 0 (id=843):
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x34, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x20, 0xf2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x34}], 0x1, 0x0, 0x0, 0x1}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) (async)
readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c0002800600", @ANYRES32=0x0, @ANYBLOB="a6acaa508ad42e0873affbf219a54d312cefc96b57fef1001917faffffffffffffffca2b6cc45806829a5d55cb60bdde385402d40d140547e66baf5cd38c107ba026bffc65bc14116233d235cfc1404aad728fe57873dcfa835a92fa14000647f4b7da"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',rootmo'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
signalfd(r4, &(0x7f0000000280)={[0x2]}, 0x8) (async)
signalfd(r4, &(0x7f0000000280)={[0x2]}, 0x8)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
accept4(r3, 0x0, 0x0, 0x800) (async)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=@ipmr_newroute={0x128, 0x18, 0x2, 0x70bd29, 0x25dfdbfc, {0x80, 0x10, 0x20, 0x8, 0x0, 0x4, 0xfe, 0x3, 0x1b00}, [@RTA_FLOW={0x8, 0xb, 0xfffffffb}, @RTA_METRICS={0xc7, 0x8, 0x0, 0x1, "90fc2e611a1c93171db237f08d57d09b16020dd3a8cccd4f3b942021ed020cfa451dcb05aebb54b55d36c9d60ab68bdf1f596ab5023319d708b11e3224491b79d88532b67b4d40bccda8bb777f4fb2b3397391244f2482888bc1dd7c839ecd8b0d588668a52d92e37801a51e8ca39042322201ce95d776520391bd5cb2e1c3bd825faa1c507737aae532c3d2ba967c786b414dfff7ef73e1fb856a0c4b8b74b8862e98c12314d60c24f5ff4f4a416fd560ade5446a67d1215f4d7f72366388c3875f1a"}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_TABLE={0x8, 0xf, 0xae93}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x24, 0x6, r7}}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_MARK={0x8, 0x10, 0x4}, @RTA_UID={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x40850}, 0x4000)

23.259255603s ago: executing program 0 (id=844):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x90)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586f, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}]}}]}, 0xa4}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40040)

23.233006761s ago: executing program 32 (id=844):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x90)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586f, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}]}}]}, 0xa4}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40040)

12.420395912s ago: executing program 2 (id=1000):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b"])
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x184, r3, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x63}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_IE={0x13c, 0x2a, [@random_vendor={0xdd, 0x9e, "cdfcadc91cfe7333773d8de7ed7246262bbe37808b4a61297d92bef71b8830312af44825a9ea4da9f18019bd8703349c720a2165f983fa2434f10fcf5f175fc6f904db4251342bbb6e5c097f78f2bb958c28123a5f24cebcba9054e38530c02094390282fc204563bb63902cff9e45d9e4e4bc46312fa0b1e6317c747de487311f696aa47b8224e59df7084d4e2d02afabb74138f3f826bcd79dc3dc4011"}, @fast_bss_trans={0x37, 0x8e, {0x9e, 0x3, "5b3662a752e9d927badbe2df2044b8ca", "ea37c93860a51835ab75cdf11134aaf53d23b1d577060b9b23369f262cddb55b", "2338e10c1e2a08774f16bb050b7b98ec3befb9048898a1d8f69ec66e5f68dafc", [{0x1, 0x6, "588c773f5e5b"}, {0x2, 0x28, "95eb35a0cee987b8d0f1646ad3fa7510e308bea799e34b13bccf3f24f9a95f779a176b21d02f3f41"}, {0x4, 0x8, "6a3108c06f307173"}]}}, @cf={0x4, 0x6, {0x0, 0x8d, 0x9, 0x7}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa99bf5e17e20974f}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x41)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x5, 0x401, 0xe5, 0x2}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r9, 0xc06855c8, &(0x7f0000000280)={0xe, 0x4e36, {0x54, 0xfff7, 0x92, {0x8, 0x1000}, {0x5, 0xe}, @ramp={0xff, 0x0, {0xb, 0xe, 0x648c, 0x4}}}, {0x57, 0x4, 0x2, {0x5, 0x5000}, {0x6, 0x95c}, @cond=[{0xa90, 0x40, 0x0, 0xffff, 0xfff2, 0xc}, {0x2, 0x200, 0xec, 0x3ff, 0xc8c1, 0x200}]}})
setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
recvmsg(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40002002)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e24, @empty=0xe0000000}}, {{0x2, 0x4e25, @private=0xa010100}}}, 0x108)
setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000280)={@multicast1=0xe0000000, @loopback, 0x1, 0x1, [@multicast1]}, 0x14)
r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
write$dsp(r12, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

10.166242294s ago: executing program 33 (id=804):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @local, 0x761}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private0, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x71}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000891}, 0x4000000)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x35}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x454c}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5f2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x2000840)
r2 = open$dir(&(0x7f0000000480)='./file0\x00', 0x185000, 0x64)
linkat(r2, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1200)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=<r3=>0x0)
ptrace$getsig(0x4202, r3, 0x3, &(0x7f0000000580))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb0, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x10, r0, 0x0)
syz_io_uring_setup(0x7ca1, &(0x7f00000007c0)={0x0, 0x88bd, 0x200, 0x2, 0x125}, &(0x7f0000000840), &(0x7f0000000880)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000008c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r7}})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000900)={<r9=>0x0, 0xf4, "9e77dbf30dd18701b90d69f6193fcc3a4161603b5ac1895ae4df436397000300f2bfa5e1265b191854787884933cdd64f8a1aa75aaa96420466b9efa0389da37708adc9c76a86b2c227ecc97b5ca8a096bf55b257543888c312dfd93cade47e8e77065ba2f776c33eee23f124387d6c935ee3dbeebc86c4a68507c3369276d471fe5e6b44b315beb8e2137e9b615ac8858f048f5906f76f24b844dca15dfb9f78bd62985d4539bfdae54374b24359003a6902b61f08093a68fa8ec9e9f7bf3fdddcc3c40b531f1782c7d5534ec5f497c64bcfccbd898009bb40f50139fef7b591e4ac95f7afec3836643e39253d36556248ef792"}, &(0x7f0000000a00)=0xfc)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000a40)=@sack_info={r9, 0x3ff, 0x10001}, 0xc)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa8, r10, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000c40)={r9, 0x0, 0x10, 0x53, 0x58e, 0x1}, &(0x7f0000000c80)=0x14)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000d00), 0x131002, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000d40))
ptrace$peeksig(0x4209, r3, &(0x7f0000000d80)={0x9, 0x0, 0x7}, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}])
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001140)={'pim6reg1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), r12)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)

9.920407432s ago: executing program 2 (id=1040):
r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xe31d, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='debug', &(0x7f0000000100)='noblock_validity', 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000100)={0x5})
r7 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCSETS(r7, 0x80047456, 0x0)
listen(r5, 0x3)
accept4$bt_l2cap(r5, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x8})
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000000d0100000500000010ddca7eeae4aeae71010000060000006b872607daa92d02ec12af5f5bcd25246f14c45551cb1e907f78b45ff40f6d1563c2f3d67e45be3e83de5ca7135f4b30e3f6d64558ee8874138533d301ae624f1905e464867e35cbf141670c8e43a06a47d769cd8ce7f757dc61d53edf1c776fa83a3bff00eeb22e6261913946d008bcd7cf89852ce8f699222dfe0360ab9a6c60fdf14673"], 0x20}})
io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0)

9.64014227s ago: executing program 2 (id=1046):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x7}}, './file0\x00'})
openat(r2, &(0x7f00000002c0)='./file0\x00', 0x519381, 0xa)
tkill(r1, 0x1b)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe80, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x2}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x101801)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f00000000c0)=0x24)

8.760584697s ago: executing program 2 (id=1052):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
unshare(0x8020200)
acct(&(0x7f0000000200)='./file0\x00')
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
unshare(0xc020600)

8.680483177s ago: executing program 2 (id=1053):
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff6900000000000100000018009b3900000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0)
syz_open_dev$loop(&(0x7f0000000040), 0x38ab, 0x22c1)
r1 = getpid()
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r2 = syz_pidfd_open(r1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000300)=r3}, 0x20)
setns(r2, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f0000000540)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1, 0x3a, '[', 0x3a, '-@', 0x3a, './file0', 0x3a, [0x4f, 0x9976defa49bbb28]}, 0x2c)
fcntl$lock(r0, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x200000, 0x4, r1})

8.581175121s ago: executing program 2 (id=1054):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x8a05f664f2838e9, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x80ff7000)

1.967982158s ago: executing program 4 (id=1120):
r0 = socket$alg(0x26, 0x5, 0x0)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0xffffffffffffffff, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
fdatasync(r1)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001440)={0x5, &(0x7f0000001380)=[{0x3, 0x2d, &(0x7f00000000c0)="4febf8201a27433538f7e7581c4dd877f48538ca34895cad1f53a7d267efe1a6a4ca142efe80968c69adcbf88c"}, {0x8, 0x1000, &(0x7f0000000300)="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", 0x1, 0x9e56f4d65d8ac164}, {0x1000, 0xd, &(0x7f0000000100)="952e084c539ce414aee604c324", 0x1, 0x1}, {0x81, 0x96, &(0x7f0000001480)="b7e731f4a77a2b53c9b9731344a3c63b51ea7a1fb2748403540dcfed2f4d4dad894cdd7c9236cf021dfedf7d498f5abb224f2ae4314bf7c5b160db2f2316a63a94197ba0ec96e2298cf4016734c908c122ab1210ab9d1d58d81afa668e0c21de69f5e3a88db77ee99b1a18322ac2f982eb7a8bcccc0642097b360dd56792936e2079d3699ee491e390956e4613ed16543440fe816e8a", 0x1}, {0x4, 0x4c, &(0x7f0000001300)="0121220c3edcd134a919c684032fd16ee61a158ce22731173c974946b1d005c2cf07f5f62d0055fa0d28682e6bd3e9769f6f4411dc20c994d971c8ebce85b6670630d28cf5f0b5102c27a35c", 0x1}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x44000, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r6)
socket$kcm(0xa, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
recvmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r8}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000180)}, 0x20)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000200)={r2}, 0x1)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000043000900ffff250200000004001f000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="b600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000400"/28], 0x50)

1.159893388s ago: executing program 3 (id=1127):
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
stat(&(0x7f0000000480)='./file0\x00', 0x0) (async)
stat(&(0x7f0000000480)='./file0\x00', 0x0)

1.100148634s ago: executing program 3 (id=1128):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0xca000, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001780), 0xffffffffffffffff) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2) (async)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000003000000000088a8000081"], 0xe5) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001900)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x20)
ioctl$COMEDI_POLL(r0, 0x640f)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

1.099627415s ago: executing program 4 (id=1129):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa0)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x1000000, &(0x7f0000000100)={[{@clone_children}]})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000dc0)=@newtaction={0x1a8, 0x30, 0x300, 0x0, 0x0, {}, [{0x194, 0x1, [@m_ct={0xc4, 0x18, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_LABELS_MASK={0x14, 0x8, "67afc83ea65294604b58a7547eab2881"}, @TCA_CT_ACTION={0x6, 0x3, 0x2a}, @TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_LABELS={0x14, 0x7, "1d7a4973d64529dabebd5360ce2f3599"}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0xf, 0x3, 0x5, 0x40100000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}]}, {0x2c, 0x6, "b8865e8494542243ce63aceb8a34a1f8534bc1312bf9a831285fd770b285c3c3f167fec46335f48b"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xcc, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}, @multicast2, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa9, 0x3, 0x6, 0x8, 0xfffffff2}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0x2, 0x70b5, 0x4}, @remote, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x4, 0x800, 0xc}, @local, @dev={0xac, 0x14, 0x14, 0x38}, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1a8}}, 0x4004010)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='[:::/', 0x0)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000640)={0x1, 0x7, 0x7fffffff, 0x748, 0x1, 0x2})
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r6, 0x1, 0x2c, 0x0, &(0x7f00000004c0))
r7 = dup(r5)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r9, 0x0)
ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e7, 0x4})
sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mkdirat(r7, &(0x7f00000005c0)='./file0\x00', 0x129)

930.061056ms ago: executing program 4 (id=1133):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r1], 0x1, 0x80000})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000000000000000000000000000001f6e3fe68b0b4c2a1f6c1a8e370c9214329607cf840070a76729608c102f42544c1a39a189bddca60e526eb3a54925d445504155d946a0c7952ee061f5fe94a6130509ba485d9ca26b7b879df293df8eebf1afd976d7ee5b4414a1053a19bc639adc5d5b228edd99a6c72e6fe83d521f54292987149c8e018d7243d4b7333c61cf2e6475632b279a57e67285e24d0bde865d40a992eed37a4d62e8b4e1d3918acf6cf75d5866a3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000003fd31340e92c4bb8"], 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x8}}, 0x48}, 0x300}, 0x4000081)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)={[{@size={'size', 0x3d, [0x25]}}]})

870.246844ms ago: executing program 4 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x8, 0x8, 0x404b2}, 0x50) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

865.668551ms ago: executing program 3 (id=1136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x0, 0x9fc, 0x0, 0x0, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x81}, {0x4, 0x4, 0x0, '\x00', 0xc}, {0x0, 0x5, 0xff, '\x00', 0x11}, {0x2, 0x10, 0x1, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0xe, 0x7, '\x00', 0x4e}, {0x3, 0x6, 0x6, '\x00', 0x1}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0xd, 0x1, 0x1, '\x00', 0x2}, {0x7f, 0x9, 0xff, '\x00', 0x9d}, {0x6, 0x1, 0x2, '\x00', 0x7f}, {0x5, 0x6, 0x3b, '\x00', 0x2}, {0x7, 0x10, 0xc, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x7, '\x00', 0xc}, {0x4, 0x0, 0x2, '\x00', 0x42}, {0xf2, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x7}, {0x2, 0x8, 0x99, '\x00', 0x83}, {0x6, 0x46, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}})
r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000000))
syslog(0x4, &(0x7f00000037c0)=""/187, 0xbb)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)

865.288828ms ago: executing program 4 (id=1137):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

770.155202ms ago: executing program 4 (id=1138):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'nr0\x00', {0x4}, 0x7})
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x60180, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x8004510a, &(0x7f00000003c0))
getsockopt$inet6_int(r3, 0x29, 0xb, 0x0, &(0x7f0000000240))
sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400005}, 0x1c)

668.253963ms ago: executing program 3 (id=1139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x0)
ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000180)={0x10, 0x3ff, 0x40, 0x4, 0x8, 0x0, 0x6f}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0xbd2, 0x4)
write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
r7 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x194, r1, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_IE={0x62, 0x2a, [@perr={0x84, 0x5c, {0x3, 0x6, [{{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x24}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0xb}, {{}, @broadcast, 0x122, @void, 0x2e}, {{}, @broadcast, 0x8, @void, 0x1d}, {{}, @broadcast, 0x2d, @void, 0x23}, {{}, @device_a, 0x42, @void, 0x32}]}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}, @NL80211_ATTR_IE={0xc6, 0x2a, [@peer_mgmt={0x75, 0x14, {0x1, 0x6, @void, @void, @val="53fc9efcfd9f89097a8625c5180cee10"}}, @erp={0x2a, 0x1, {0x1}}, @random_vendor={0xdd, 0xa4, "d9e4912f99ad1921544ebc9dc748f381bc2b98c3947bab73a1f44e15be4105015abe18abde9b82e070d0c8debcffa57a9d3989927671fc819f3fd413b7b3ff43a5a612eadd9e205ba1fb2172ab508a07cf43420fbe23c38c1cf7c38dbfc45a311639ea012a6d9bf2cded276a65181f37c40e841d28d771f70642190aef448181b351dced4d87ca6ffdd80c71d9c674ff12a34921ecb8b782af60484b3fff1a938b2d77ef"}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7fffffff}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7e}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000810}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000800)={0x5, &(0x7f00000005c0)=[{0xfffe, 0x5, 0x6, 0x7}, {0x81, 0x2, 0x3, 0x9}, {0x80, 0x0, 0x1}, {0x1, 0x4, 0x9, 0x7}, {0x2, 0x80, 0x9, 0xc0}]})
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="240b0b00c9008c7dd8c0bd9211db6d8fc00c020000200000003ce3f32e8f36d63a9dbde603667530fdf1bf98ef1622a03b6558490cff68037cbad20b4cdde455d34b6bd272b32c6465d74522c0595a001dae27a97c84b36679172db5c9982a08a20d1efde64ffbcfc53b4a8e94e38d9e31701f81279637da1bbc9e80cd4a1d33324dd6092c8b4874a0dce86ea69f7401f8be809d106179b47dcd340f145e4cd9b98376a69d8dacb926534f43cf8767d0840acb57119d0362513c"], 0xe)
sched_setaffinity(0x0, 0x0, 0x0)
syz_io_uring_setup(0xb, 0x0, 0x0, &(0x7f00000000c0))
openat(r7, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]})
r8 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r8, &(0x7f0000000200)='./file1\x00', 0x40, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061197800000000009500000000000000597e99cc24c3dda7a1b4f3c1460d6809b5c498b103bfec7f1b04c4552e5dcf1a88d48cb9a96709e3699a573a08a2bbba244fe9a0d1cd912add84c74c8c809f93bc9e6317fb5b91d71c388c4f97beee95fc45f2d18d7ae547589a4cc0cb0e9abb1bc74e6604d9600f3f02fdc8dd524b5ddedecd1435fda5d0ac67964eae662f6ca44cba2e83757fdf6330a203f2a312a33ffc2a086553cfcf"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90)

666.654845ms ago: executing program 5 (id=1141):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x20841, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007e090a000200aaaaaaaaaa1c00003ecbcfff91f6c7bbb7dc54d20878cfca88e527e10e84ca3d7617f7ac898311a35ab4bbcd484a30001fec"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007e090a000200aaaaaaaaaa1c00003ecbcfff91f6c7bbb7dc54d20878cfca88e527e10e84ca3d7617f7ac898311a35ab4bbcd484a30001fec"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x1, 0x80000004, 0x10080, 0x5, 0x8, 0xcc7, 0xfff, 0x0, 0xffffffff, 0x100, 0x401, 0x1, 0x1, 0x1, 0x0, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xffdffffb, 0x0, 0x307, 0x2, 0xe69, 0x2003c, 0x4, 0x106, 0x8000000]}) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x1, 0x80000004, 0x10080, 0x5, 0x8, 0xcc7, 0xfff, 0x0, 0xffffffff, 0x100, 0x401, 0x1, 0x1, 0x1, 0x0, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xffdffffb, 0x0, 0x307, 0x2, 0xe69, 0x2003c, 0x4, 0x106, 0x8000000]})
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
umount2(0x0, 0x1)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)

666.397427ms ago: executing program 3 (id=1142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="2ef36644f7e62e3e672e450f078f29d095abaa9600008f0878c2b53ac73d5600ef66bafc0c6d8f297812cf66ba410066ef4880100000000000000f23d00f21f8351000000866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7c}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x3, 0xec, 0x401, 0x7, 0xb03c, 0x4, 0x8000000000000001, 0x80000001, 0x81, 0x201, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

600.027255ms ago: executing program 5 (id=1143):
prctl$PR_SET_TSC(0x1a, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x80000000000000a, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0xe4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3a5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400d1}, 0x4000010)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff000000000700400008000300", @ANYRES32=r4, @ANYBLOB="0c009900070000002c000000140004006e69637666300000000000000000000008000500060000000c0017"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000440)={0x4, {{0xa, 0x4e23, 0x9, @mcast1, 0x2d}}, {{0xa, 0x4e24, 0xb8, @mcast1, 0x10001}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xffffffff, @empty}}}, 0x108)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x40)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r8, 0x1, 0x400000, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
select(0x40, &(0x7f0000000080)={0x2, 0x2, 0x823, 0x1f, 0x5, 0x2, 0x4, 0x80000000}, 0x0, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x0, 0x60, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000080))
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000201c1cd6634ff2ee100040c0001632df236120f283f69e67d4b7ab68006"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000090)

458.607711ms ago: executing program 3 (id=1144):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x498})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xfce1)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r6, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x7)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000000c0)={0xffffffd9, 0x103, 0x0, 0x7, 0x3, "03f03f0900000000000000000007000000fbff", 0x2, 0x1ff})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x9)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x9, 0x6, [{0xd}, {0x3, 0x8000}, {0xa64a88ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x6, 0xff, 0x1, 0x1, 0x5}}, 0x56a})

408.526622ms ago: executing program 5 (id=1145):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x80041, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001400)={0x0, 0x1, @start={0x0, 0x1, "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", "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"}, [0x8, 0xfff, 0x1, 0x3, 0x990, 0xf7, 0x400, 0x9, 0x0, 0x8, 0x7, 0x80000000, 0x101, 0x101, 0x100000000, 0x8, 0x7fff, 0x4, 0x6618, 0x7fff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x7, 0x8000000000000001, 0x5, 0x401, 0x3, 0x2, 0x6, 0x7, 0x4b, 0x1, 0x4, 0x9, 0x7fff, 0x8000000000000003, 0x1000000000, 0x8, 0x2f, 0x80, 0x77, 0x7, 0x8, 0x5, 0x8000000000000003, 0x400, 0x6, 0x3, 0x1, 0x4, 0xf33, 0x0, 0x800, 0xf, 0x2, 0x52, 0x3, 0x6, 0x7, 0x8000000000000000, 0x30c]})
r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r10], 0x24}], 0x1}, 0x0)
connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @multicast1}, 0x4, 0x0, 0x2}}, 0x2e)
getsockname(r5, 0x0, &(0x7f0000000180))
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a2, 0xc})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0)

200.272929ms ago: executing program 5 (id=1146):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x20008000)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

150.240969ms ago: executing program 5 (id=1147):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x18}, 0xc)
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
userfaultfd(0x80001) (async)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$xdp(0x2c, 0x3, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x1}) (async)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x8, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x79c8}}], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x2a}, 0x95)

0s ago: executing program 5 (id=1148):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc0, 0x11cfa, 0x0, 0x8000008, 0x2, 0x4, 0x1, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x4, 0xff})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0)
sendfile(r5, r5, 0x0, 0x4)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x4, 0x0, 0x0, 0x7b, &(0x7f0000000280)="0d4f83f91cebb57a8c2b89ecf9ac448dc6b01b0b07e2571d6be70ba8f0cd14602061350b5354d6833eb577885c6536a7e9b3580cb060ae80faf01aabf585654585ba843352267b3f707402756f50878ed976adaf95af89d200b2c518db07a806094f5eac33ec0c315e72710915128023ab96aeae32277ffeebe9da", 0x483})
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000010c0))
r6 = socket$caif_stream(0x25, 0x1, 0x1)
write(r6, &(0x7f0000003d80)="ea7b65", 0x3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

kernel console output (not intermixed with test programs):

tributes in process `syz.3.417'.
[   80.421340][ T7340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.417'.
[   80.425289][ T7340] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[   80.492992][ T7340] IPVS: set_ctl: invalid protocol: 94 172.30.0.4:20002
[   80.614112][ T7350] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[   80.713402][ T7367] syz2: rxe_newlink: already configured on lo
[   80.867357][ T7382] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[   80.881017][ T7354] lo speed is unknown, defaulting to 1000
[   80.910857][  T840] usb 8-1: new low-speed USB device number 8 using dummy_hcd
[   81.050254][  T840] usb 8-1: device descriptor read/64, error -71
[   81.097380][ T7402] x_tables: duplicate underflow at hook 1
[   81.106951][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'.
[   81.111811][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'.
[   81.119223][ T7402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=7402 comm=syz.2.438
[   81.136143][ T7404] bridge2: the hash_elasticity option has been deprecated and is always 16
[   81.215491][ T7411] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[   81.309095][  T840] usb 8-1: new low-speed USB device number 9 using dummy_hcd
[   81.450631][  T840] usb 8-1: device descriptor read/64, error -71
[   81.493956][   T10] cfg80211: failed to load regulatory.db
[   81.532260][ T7422] mmap: syz.2.442 (7422) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   81.571420][  T840] usb usb8-port1: attempt power cycle
[   81.769608][ T7429] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   81.775944][ T7429] SELinux: failed to load policy
[   81.940621][  T840] usb 8-1: new low-speed USB device number 10 using dummy_hcd
[   81.969812][ T7446] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[   81.971145][  T840] usb 8-1: device descriptor read/8, error -71
[   82.020354][   T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   82.170243][   T29] usb 5-1: Using ep0 maxpacket: 16
[   82.173221][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   82.178065][   T29] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[   82.181095][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.183595][   T29] usb 5-1: Product: syz
[   82.184940][   T29] usb 5-1: Manufacturer: syz
[   82.186421][   T29] usb 5-1: SerialNumber: syz
[   82.189274][   T29] usb 5-1: config 0 descriptor??
[   82.192120][   T29] hub 5-1:0.0: bad descriptor, ignoring hub
[   82.194010][   T29] hub 5-1:0.0: probe with driver hub failed with error -5
[   82.197630][   T29] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input8
[   82.231873][  T840] usb 8-1: new low-speed USB device number 11 using dummy_hcd
[   82.260964][  T840] usb 8-1: device descriptor read/8, error -71
[   82.370462][  T840] usb usb8-port1: unable to enumerate USB device
[   82.560613][  T840] usb 5-1: USB disconnect, device number 13
[   82.951793][   T40] kauditd_printk_skb: 21 callbacks suppressed
[   82.951807][   T40] audit: type=1400 audit(1761823555.688:487): avc:  denied  { ioctl } for  pid=7465 comm="syz.2.459" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   82.986550][ T5293] Bluetooth: hci0: unexpected event for opcode 0x080d
[   82.998670][ T7472] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[   83.039682][ T7476] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82
[   83.239809][   T40] audit: type=1400 audit(1761823555.968:488): avc:  denied  { mount } for  pid=7493 comm="syz.1.467" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   83.246898][   T40] audit: type=1400 audit(1761823555.968:489): avc:  denied  { remount } for  pid=7493 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   83.265386][   T40] audit: type=1400 audit(1761823555.998:490): avc:  denied  { unmount } for  pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   83.283900][ T7489] lo speed is unknown, defaulting to 1000
[   83.408618][ T7505] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[   83.485761][ T7514] netlink: 'syz.0.477': attribute type 1 has an invalid length.
[   83.608992][   T40] audit: type=1400 audit(1761823556.338:491): avc:  denied  { setopt } for  pid=7525 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   83.725519][ T7538] FAULT_INJECTION: forcing a failure.
[   83.725519][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   83.729981][ T7538] CPU: 3 UID: 0 PID: 7538 Comm: syz.1.485 Not tainted syzkaller #0 PREEMPT(full) 
[   83.729996][ T7538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   83.730003][ T7538] Call Trace:
[   83.730015][ T7538]  <TASK>
[   83.730020][ T7538]  dump_stack_lvl+0x16c/0x1f0
[   83.730050][ T7538]  should_fail_ex+0x512/0x640
[   83.730070][ T7538]  _copy_from_user+0x2e/0xd0
[   83.730084][ T7538]  do_handle_open+0xee/0xc90
[   83.730097][ T7538]  ? __pfx_do_handle_open+0x10/0x10
[   83.730109][ T7538]  ? ksys_write+0x1ac/0x250
[   83.730124][ T7538]  ? do_syscall_64+0xcd/0xfa0
[   83.730138][ T7538]  do_syscall_64+0xcd/0xfa0
[   83.730166][ T7538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.730177][ T7538] RIP: 0033:0x7fc96cb8efc9
[   83.730186][ T7538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.730199][ T7538] RSP: 002b:00007fc96d9b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[   83.730214][ T7538] RAX: ffffffffffffffda RBX: 00007fc96cde5fa0 RCX: 00007fc96cb8efc9
[   83.730224][ T7538] RDX: 0000000000830200 RSI: 0000200000000280 RDI: 0000000000000003
[   83.730233][ T7538] RBP: 00007fc96d9b8090 R08: 0000000000000000 R09: 0000000000000000
[   83.730242][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.730251][ T7538] R13: 00007fc96cde6038 R14: 00007fc96cde5fa0 R15: 00007fff3555e538
[   83.730265][ T7538]  </TASK>
[   83.812682][ T7545] netlink: 'syz.3.487': attribute type 1 has an invalid length.
[   83.867599][ T7548] virtio-fs: tag </dev/loop1> not found
[   83.894789][ T7545] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.898019][ T7551] bond1: up delay (36008) is not a multiple of miimon (100), value rounded to 36000 ms
[   83.905119][ T7551] bond1: entered allmulticast mode
[   83.936582][ T7555] netlink: 'syz.0.491': attribute type 29 has an invalid length.
[   83.939007][ T7555] netlink: 'syz.0.491': attribute type 3 has an invalid length.
[   83.940771][ T7556] netlink: 'syz.0.491': attribute type 29 has an invalid length.
[   83.943748][ T7556] netlink: 'syz.0.491': attribute type 3 has an invalid length.
[   83.944637][ T7555] __nla_validate_parse: 69 callbacks suppressed
[   83.944648][ T7555] netlink: 76 bytes leftover after parsing attributes in process `syz.0.491'.
[   83.946231][ T7556] netlink: 76 bytes leftover after parsing attributes in process `syz.0.491'.
[   84.056442][   T40] audit: type=1400 audit(1761823556.788:492): avc:  denied  { getopt } for  pid=7560 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   84.150326][ T6013] usb 8-1: new low-speed USB device number 12 using dummy_hcd
[   84.240273][   T54] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[   84.246443][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   84.249513][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'.
[   84.269394][ T7575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.301864][ T6013] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[   84.304725][ T6013] usb 8-1: config 0 has no interface number 0
[   84.306677][ T6013] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   84.310077][ T6013] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   84.318128][ T6013] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   84.322136][ T6013] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   84.325634][ T6013] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[   84.328995][ T6013] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   84.333115][ T6013] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   84.335949][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.336468][ T7575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.339597][ T6013] usb 8-1: config 0 descriptor??
[   84.343934][ T7545] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   84.346318][ T7545] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   84.350761][ T6013] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   84.380277][   T54] usb 5-1: device descriptor read/64, error -71
[   84.396620][ T7578] FAULT_INJECTION: forcing a failure.
[   84.396620][ T7578] name failslab, interval 1, probability 0, space 0, times 1
[   84.400754][ T7578] CPU: 3 UID: 0 PID: 7578 Comm: syz.1.498 Not tainted syzkaller #0 PREEMPT(full) 
[   84.400768][ T7578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   84.400774][ T7578] Call Trace:
[   84.400777][ T7578]  <TASK>
[   84.400781][ T7578]  dump_stack_lvl+0x16c/0x1f0
[   84.400799][ T7578]  should_fail_ex+0x512/0x640
[   84.400811][ T7578]  ? __kmalloc_noprof+0xca/0x880
[   84.400827][ T7578]  should_failslab+0xc2/0x120
[   84.400839][ T7578]  __kmalloc_noprof+0xdd/0x880
[   84.400852][ T7578]  ? do_handle_open+0x564/0xc90
[   84.400865][ T7578]  ? do_handle_open+0x564/0xc90
[   84.400875][ T7578]  do_handle_open+0x564/0xc90
[   84.400886][ T7578]  ? __pfx_do_handle_open+0x10/0x10
[   84.400898][ T7578]  ? ksys_write+0x1ac/0x250
[   84.400912][ T7578]  ? do_syscall_64+0xcd/0xfa0
[   84.400926][ T7578]  do_syscall_64+0xcd/0xfa0
[   84.400941][ T7578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.400951][ T7578] RIP: 0033:0x7fc96cb8efc9
[   84.400960][ T7578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.400969][ T7578] RSP: 002b:00007fc96d9b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[   84.400979][ T7578] RAX: ffffffffffffffda RBX: 00007fc96cde5fa0 RCX: 00007fc96cb8efc9
[   84.400985][ T7578] RDX: 0000000000830200 RSI: 0000200000000280 RDI: 0000000000000003
[   84.400991][ T7578] RBP: 00007fc96d9b8090 R08: 0000000000000000 R09: 0000000000000000
[   84.400996][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.401002][ T7578] R13: 00007fc96cde6038 R14: 00007fc96cde5fa0 R15: 00007fff3555e538
[   84.401015][ T7578]  </TASK>
[   84.402169][ T7575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.529569][ T7575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.557300][ T5993] usb 8-1: USB disconnect, device number 12
[   84.560861][ T5993] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[   84.620368][   T54] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[   84.655202][   T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.666692][   T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.679230][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'.
[   84.684515][   T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.685466][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[   84.702205][   T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.760321][   T54] usb 5-1: device descriptor read/64, error -71
[   84.872107][   T54] usb usb5-port1: attempt power cycle
[   85.004671][ T7608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7608 comm=syz.2.505
[   85.122746][ T7614] FAULT_INJECTION: forcing a failure.
[   85.122746][ T7614] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.126911][ T7614] CPU: 2 UID: 0 PID: 7614 Comm: syz.3.508 Not tainted syzkaller #0 PREEMPT(full) 
[   85.126924][ T7614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   85.126930][ T7614] Call Trace:
[   85.126934][ T7614]  <TASK>
[   85.126938][ T7614]  dump_stack_lvl+0x16c/0x1f0
[   85.126957][ T7614]  should_fail_ex+0x512/0x640
[   85.126971][ T7614]  _copy_from_user+0x2e/0xd0
[   85.126984][ T7614]  do_handle_open+0x5e9/0xc90
[   85.126997][ T7614]  ? __pfx_do_handle_open+0x10/0x10
[   85.127009][ T7614]  ? ksys_write+0x1ac/0x250
[   85.127024][ T7614]  ? do_syscall_64+0xcd/0xfa0
[   85.127038][ T7614]  do_syscall_64+0xcd/0xfa0
[   85.127053][ T7614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.127064][ T7614] RIP: 0033:0x7f7ec078efc9
[   85.127072][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.127082][ T7614] RSP: 002b:00007f7ec1684038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[   85.127092][ T7614] RAX: ffffffffffffffda RBX: 00007f7ec09e5fa0 RCX: 00007f7ec078efc9
[   85.127098][ T7614] RDX: 0000000000830200 RSI: 0000200000000280 RDI: 0000000000000003
[   85.127104][ T7614] RBP: 00007f7ec1684090 R08: 0000000000000000 R09: 0000000000000000
[   85.127109][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.127115][ T7614] R13: 00007f7ec09e6038 R14: 00007f7ec09e5fa0 R15: 00007ffe5b60fe88
[   85.127128][ T7614]  </TASK>
[   85.177392][    C2] vkms_vblank_simulate: vblank timer overrun
[   85.210673][   T40] audit: type=1400 audit(1761823557.948:493): avc:  denied  { read write } for  pid=7615 comm="syz.3.509" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   85.218144][   T40] audit: type=1400 audit(1761823557.948:494): avc:  denied  { open } for  pid=7615 comm="syz.3.509" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   85.240359][   T54] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[   85.270666][   T54] usb 5-1: device descriptor read/8, error -71
[   85.510330][   T54] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[   85.530961][   T54] usb 5-1: device descriptor read/8, error -71
[   85.640619][   T54] usb usb5-port1: unable to enumerate USB device
[   85.720379][ T6079] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   85.880423][ T6079] usb 6-1: Using ep0 maxpacket: 32
[   85.884232][ T6079] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   85.887424][ T6079] usb 6-1: config 0 has no interface number 0
[   85.891975][ T6079] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[   85.895601][ T6079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.898340][ T6079] usb 6-1: Product: syz
[   85.900038][ T6079] usb 6-1: Manufacturer: syz
[   85.902050][ T6079] usb 6-1: SerialNumber: syz
[   85.907341][ T6079] usb 6-1: config 0 descriptor??
[   85.911946][ T7624] mkiss: ax0: crc mode is auto.
[   85.914469][ T6079] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[   85.917583][ T6079] usb 6-1: selecting invalid altsetting 1
[   85.919778][ T6079] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[   85.926731][ T6079] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   85.931338][ T6079] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[   85.935010][ T6079] usb 6-1: media controller created
[   85.950057][ T6079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   86.107978][   T40] audit: type=1400 audit(1761823558.838:495): avc:  denied  { read } for  pid=7638 comm="syz.2.516" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   86.116949][   T40] audit: type=1400 audit(1761823558.848:496): avc:  denied  { ioctl } for  pid=7638 comm="syz.2.516" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   86.176384][ T7643] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[   86.207866][ T7646] usb usb8: usbfs: process 7646 (syz.3.518) did not claim interface 0 before use
[   86.212404][ T7648] FAULT_INJECTION: forcing a failure.
[   86.212404][ T7648] name failslab, interval 1, probability 0, space 0, times 0
[   86.212979][ T7646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.216734][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(full) 
[   86.216748][ T7648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   86.216755][ T7648] Call Trace:
[   86.216759][ T7648]  <TASK>
[   86.216763][ T7648]  dump_stack_lvl+0x16c/0x1f0
[   86.216781][ T7648]  should_fail_ex+0x512/0x640
[   86.216794][ T7648]  ? __kmalloc_noprof+0xca/0x880
[   86.216810][ T7648]  should_failslab+0xc2/0x120
[   86.216822][ T7648]  __kmalloc_noprof+0xdd/0x880
[   86.216836][ T7648]  ? ovl_fh_to_dentry+0x718/0xa70
[   86.216854][ T7648]  ? ovl_fh_to_dentry+0x718/0xa70
[   86.216868][ T7648]  ? find_held_lock+0x2b/0x80
[   86.216880][ T7648]  ovl_fh_to_dentry+0x718/0xa70
[   86.216896][ T7648]  ? kasan_save_stack+0x42/0x60
[   86.216907][ T7648]  ? __pfx_ovl_fh_to_dentry+0x10/0x10
[   86.216927][ T7648]  ? do_handle_open+0x564/0xc90
[   86.216943][ T7648]  ? do_syscall_64+0xcd/0xfa0
[   86.216963][ T7648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.216988][ T7648]  exportfs_decode_fh_raw+0x167/0x7d0
[   86.217008][ T7648]  ? __pfx_vfs_dentry_acceptable+0x10/0x10
[   86.217027][ T7648]  ? __pfx_ovl_fh_to_dentry+0x10/0x10
[   86.217049][ T7648]  ? __pfx_exportfs_decode_fh_raw+0x10/0x10
[   86.217098][ T7648]  do_handle_open+0x702/0xc90
[   86.217115][ T7648]  ? __pfx_do_handle_open+0x10/0x10
[   86.217136][ T7648]  ? ksys_write+0x1ac/0x250
[   86.217163][ T7648]  ? do_syscall_64+0xcd/0xfa0
[   86.217183][ T7648]  do_syscall_64+0xcd/0xfa0
[   86.217207][ T7648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.217222][ T7648] RIP: 0033:0x7fe94958efc9
[   86.217234][ T7648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.217248][ T7648] RSP: 002b:00007fe94a433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[   86.217262][ T7648] RAX: ffffffffffffffda RBX: 00007fe9497e5fa0 RCX: 00007fe94958efc9
[   86.217273][ T7648] RDX: 0000000000830200 RSI: 0000200000000280 RDI: 0000000000000003
[   86.217282][ T7648] RBP: 00007fe94a433090 R08: 0000000000000000 R09: 0000000000000000
[   86.217291][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.217300][ T7648] R13: 00007fe9497e6038 R14: 00007fe9497e5fa0 R15: 00007ffe08ad56e8
[   86.217322][ T7648]  </TASK>
[   86.217329][ T7648] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-12)
[   86.326665][ T7646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.002488][ T6079] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[   87.005057][ T6079] zl10353_read_register: readreg error (reg=127, ret==-110)
[   87.005123][ T7622] usb 6-1: dvb_usb_ce6230: I2C read not implemented
[   87.026311][ T6079] usb 6-1: USB disconnect, device number 7
[   87.140949][ T7663] lo speed is unknown, defaulting to 1000
[   87.328379][ T7677] overlayfs: failed to resolve './file0': -2
[   87.335511][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'.
[   87.777623][ T7687] FAULT_INJECTION: forcing a failure.
[   87.777623][ T7687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   87.781903][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz.2.529 Not tainted syzkaller #0 PREEMPT(full) 
[   87.781918][ T7687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   87.781925][ T7687] Call Trace:
[   87.781929][ T7687]  <TASK>
[   87.781933][ T7687]  dump_stack_lvl+0x16c/0x1f0
[   87.781951][ T7687]  should_fail_ex+0x512/0x640
[   87.781966][ T7687]  _copy_to_user+0x32/0xd0
[   87.781980][ T7687]  simple_read_from_buffer+0xcb/0x170
[   87.781998][ T7687]  proc_fail_nth_read+0x197/0x240
[   87.782011][ T7687]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   87.782023][ T7687]  ? rw_verify_area+0xcf/0x6c0
[   87.782038][ T7687]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   87.782049][ T7687]  vfs_read+0x1e4/0xcf0
[   87.782060][ T7687]  ? __pfx___mutex_lock+0x10/0x10
[   87.782070][ T7687]  ? __pfx_vfs_read+0x10/0x10
[   87.782083][ T7687]  ? __fget_files+0x20e/0x3c0
[   87.782097][ T7687]  ksys_read+0x12a/0x250
[   87.782106][ T7687]  ? __pfx_ksys_read+0x10/0x10
[   87.782119][ T7687]  do_syscall_64+0xcd/0xfa0
[   87.782135][ T7687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.782146][ T7687] RIP: 0033:0x7fe94958d9dc
[   87.782155][ T7687] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   87.782165][ T7687] RSP: 002b:00007fe94a433030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   87.782175][ T7687] RAX: ffffffffffffffda RBX: 00007fe9497e5fa0 RCX: 00007fe94958d9dc
[   87.782181][ T7687] RDX: 000000000000000f RSI: 00007fe94a4330a0 RDI: 0000000000000004
[   87.782187][ T7687] RBP: 00007fe94a433090 R08: 0000000000000000 R09: 0000000000000000
[   87.782193][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.782199][ T7687] R13: 00007fe9497e6038 R14: 00007fe9497e5fa0 R15: 00007ffe08ad56e8
[   87.782212][ T7687]  </TASK>
[   87.783178][ T7689] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[   87.907861][ T7697] delete_channel: no stack
[   88.020328][   T54] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   88.031976][ T7713] netlink: 452 bytes leftover after parsing attributes in process `syz.1.535'.
[   88.131903][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'.
[   88.170840][   T54] usb 5-1: Using ep0 maxpacket: 16
[   88.175729][   T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   88.176465][ T7719] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.183345][ T7719] SELinux: failed to load policy
[   88.184585][   T54] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[   88.189061][   T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.192568][   T54] usb 5-1: Product: syz
[   88.194415][   T54] usb 5-1: Manufacturer: syz
[   88.196343][   T54] usb 5-1: SerialNumber: syz
[   88.200455][   T40] kauditd_printk_skb: 6 callbacks suppressed
[   88.200465][   T40] audit: type=1326 audit(1761823560.928:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.539" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc96cb8efc9 code=0x0
[   88.204062][   T54] usb 5-1: config 0 descriptor??
[   88.218657][   T54] hub 5-1:0.0: bad descriptor, ignoring hub
[   88.221769][   T54] hub 5-1:0.0: probe with driver hub failed with error -5
[   88.227795][   T54] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9
[   88.236940][ T7724] IPVS: Unknown mcast interface: nicvf0
[   88.354816][ T7738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7738 comm=syz.2.544
[   88.421550][ T7691] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[   88.449576][   T40] audit: type=1400 audit(1761823561.178:504): avc:  denied  { create } for  pid=7739 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   88.451538][ T7740] netlink: 'syz.2.545': attribute type 30 has an invalid length.
[   88.457061][   T40] audit: type=1400 audit(1761823561.178:505): avc:  denied  { getopt } for  pid=7739 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   88.457817][ T7691] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   88.476752][ T7740] bond1: option arp_missed_max: invalid value (0)
[   88.479502][ T7740] bond1: option arp_missed_max: allowed values 1 - 255
[   88.485318][ T7740] bond1 (unregistering): Released all slaves
[   88.504935][ T7746] 9p: Unknown uid 00000000004294967295
[   88.524155][ T7691] veth5: entered promiscuous mode
[   88.639211][   T40] audit: type=1400 audit(1761823561.368:506): avc:  denied  { read } for  pid=7748 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   88.717542][   T40] audit: type=1400 audit(1761823561.448:507): avc:  denied  { append } for  pid=7753 comm="syz.2.547" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   88.840989][   T29] usb 5-1: USB disconnect, device number 18
[   88.909972][ T5933] Bluetooth: hci3: unexpected event for opcode 0x0c1b
[   88.912119][ T7761] binder: Bad value for 'max'
[   89.026810][ T7763] netlink: 750 bytes leftover after parsing attributes in process `syz.2.551'.
[   89.042890][   T40] audit: type=1400 audit(1761823561.778:508): avc:  denied  { append } for  pid=7766 comm="syz.1.552" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   89.043200][ T7767] program syz.1.552 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.185036][   T40] audit: type=1400 audit(1761823561.918:509): avc:  denied  { ioctl } for  pid=7768 comm="syz.1.553" path="socket:[18992]" dev="sockfs" ino=18992 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   89.273003][ T7776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.555'.
[   89.446937][ T5933] Bluetooth: hci3: unexpected event for opcode 0x2040
[   89.482677][ T7784] netlink: 'syz.2.558': attribute type 1 has an invalid length.
[   89.485073][ T7784] netlink: 'syz.2.558': attribute type 3 has an invalid length.
[   89.487391][ T7784] netlink: 172 bytes leftover after parsing attributes in process `syz.2.558'.
[   89.490100][ T7784] NCSI netlink: No device for ifindex 813332851
[   89.514354][ T7787] netlink: 'syz.2.560': attribute type 10 has an invalid length.
[   89.526903][ T7787] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.734054][ T5933] Bluetooth: Unknown BR/EDR signaling command 0x0c
[   89.737014][ T5933] Bluetooth: Wrong link type (-22)
[   89.739178][ T5933] Bluetooth: Unknown BR/EDR signaling command 0x0e
[   89.742126][ T5933] Bluetooth: Wrong link type (-22)
[   89.759633][ T7805] Illegal XDP return value 3745320711 on prog  (id 58) dev syz_tun, expect packet loss!
[   89.764362][   T40] audit: type=1804 audit(1761823562.498:510): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.565" name="/newroot/168/file0" dev="tmpfs" ino=1045 res=1 errno=0
[   89.772933][   T40] audit: type=1804 audit(1761823562.498:511): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.565" name="/newroot/168/file0" dev="tmpfs" ino=1045 res=1 errno=0
[   89.796713][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.842478][ T5933] Bluetooth: hci1: Received unexpected HCI Event 0x00
[   89.999913][ T7826] binder: BINDER_SET_CONTEXT_MGR already set
[   90.002619][ T7826] binder: 7819:7826 ioctl 4018620d 2000000001c0 returned -16
[   90.038120][   T40] audit: type=1400 audit(1761823562.768:512): avc:  denied  { bind } for  pid=7830 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   90.123034][ T7837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7837 comm=syz.2.574
[   90.730857][ T7813] 9pnet_fd: p9_fd_create_tcp (7813): problem connecting socket to 127.0.0.1
[   90.750354][  T840] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   90.900245][  T840] usb 6-1: Using ep0 maxpacket: 8
[   90.903295][  T840] usb 6-1: config 0 interface 0 has no altsetting 0
[   90.905831][  T840] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   90.909183][  T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.913570][  T840] usb 6-1: config 0 descriptor??
[   90.969196][   T29] IPVS: starting estimator thread 0...
[   91.060298][ T7853] IPVS: using max 23 ests per chain, 55200 per kthread
[   91.203484][ T7884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=7884 comm=syz.2.589
[   91.276278][ T7889] ALSA: seq fatal error: cannot create timer (-22)
[   91.320642][  T840] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[   91.321950][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'.
[   91.329665][ T7896] tipc: Enabled bearer <udp:syz2>, priority 10
[   91.396344][ T7904] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   91.563237][  T840] usb 6-1: USB disconnect, device number 8
[   91.668322][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'.
[   91.671530][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'.
[   91.737526][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[   91.740543][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'.
[   91.743281][ T7926] netlink: 'syz.2.606': attribute type 19 has an invalid length.
[   91.747533][ T7926] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:19969
[   91.786874][ T7928] netlink: 'syz.0.605': attribute type 1 has an invalid length.
[   91.790119][ T7928] netlink: 228 bytes leftover after parsing attributes in process `syz.0.605'.
[   91.795860][ T7931] netlink: 'syz.0.605': attribute type 1 has an invalid length.
[   91.798971][ T7931] netlink: 228 bytes leftover after parsing attributes in process `syz.0.605'.
[   91.822404][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.920448][ T7944] program syz.2.611 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.107697][ T7961] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[   92.297376][ T7987] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.322481][ T7987] 0·: renamed from hsr0
[   92.325569][ T7987] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.328697][ T7987] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.332009][ T6079] tipc: Node number set to 4278255617
[   92.334817][ T7987] 0·: entered allmulticast mode
[   92.336990][ T7987] hsr_slave_0: entered allmulticast mode
[   92.339347][ T7987] hsr_slave_1: entered allmulticast mode
[   92.343905][ T7987] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[   92.377688][ T7991] pim6reg0: tun_chr_ioctl cmd 1074025677
[   92.380029][ T7991] pim6reg0: linktype set to 769
[   93.912419][ T1156] Bluetooth: Error in BCSP hdr checksum
[   93.913470][   T40] kauditd_printk_skb: 7 callbacks suppressed
[   93.913484][   T40] audit: type=1400 audit(1761823566.648:520): avc:  denied  { mount } for  pid=8018 comm="syz.1.633" name="/" dev="autofs" ino=22090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   93.968062][ T8025] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[   94.148165][ T8041] netlink: 'syz.2.639': attribute type 2 has an invalid length.
[   94.175162][ T8041] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[   94.180647][ T8041] bond1 (unregistering): Released all slaves
[   94.420817][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.571887][ T1156] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.571896][ T8045] netlink: 'syz.0.640': attribute type 30 has an invalid length.
[   94.576824][ T1156] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.595781][ T1156] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.598425][ T1156] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.776025][   T46] Bluetooth: Error in BCSP hdr checksum
[   95.090966][   T40] audit: type=1400 audit(1761823567.828:521): avc:  denied  { bind } for  pid=8067 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   95.098026][   T40] audit: type=1400 audit(1761823567.828:522): avc:  denied  { listen } for  pid=8067 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   95.104595][   T40] audit: type=1400 audit(1761823567.838:523): avc:  denied  { accept } for  pid=8067 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   95.202285][ T8070] __nla_validate_parse: 1 callbacks suppressed
[   95.202300][ T8070] netlink: 64 bytes leftover after parsing attributes in process `syz.0.646'.
[   95.236902][ T8072] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22)
[   95.350808][   T54] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[   95.450355][ T8076] nbd0: detected capacity change from 0 to 63
[   95.455226][ T8077] block nbd0: NBD_DISCONNECT
[   95.456987][ T8077] block nbd0: Disconnected due to user request.
[   95.459830][ T8077] block nbd0: shutting down sockets
[   95.463283][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.466332][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[   95.468921][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.471918][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[   95.474561][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.477503][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[   95.480214][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.483281][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[   95.486000][ T6595] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.489979][ T6595] Buffer I/O error on dev nbd0, logical block 0, async page read
[   95.493817][ T6595] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.497328][ T6595] Buffer I/O error on dev nbd0, logical block 1, async page read
[   95.500862][ T6595] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.506406][ T6595] Buffer I/O error on dev nbd0, logical block 2, async page read
[   95.506856][ T8080] loop6: detected capacity change from 0 to 7
[   95.508968][ T6595] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.511485][   T54] usb 8-1: config index 0 descriptor too short (expected 30226, got 18)
[   95.511503][   T54] usb 8-1: config 99 has too many interfaces: 105, using maximum allowed: 32
[   95.511515][   T54] usb 8-1: config 99 has an invalid descriptor of length 121, skipping remainder of the config
[   95.511527][   T54] usb 8-1: config 99 has 0 interfaces, different from the descriptor's value: 105
[   95.514210][   T54] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[   95.515187][ T8080] Dev loop6: unable to read RDB block 7
[   95.515283][ T8080]  loop6: unable to read partition table
[   95.515441][ T8080] loop6: partition table beyond EOD, truncated
[   95.515468][ T8080] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[   95.515889][ T6595] Buffer I/O error on dev nbd0, logical block 3, async page read
[   95.519237][   T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.522001][ T6595] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.525354][   T54] usb 8-1: Product: syz
[   95.528438][ T6595] Buffer I/O error on dev nbd0, logical block 0, async page read
[   95.532150][   T54] usb 8-1: Manufacturer: syz
[   95.534914][ T6595] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.536061][   T54] usb 8-1: SerialNumber: syz
[   95.538465][ T6595] Buffer I/O error on dev nbd0, logical block 1, async page read
[   95.571375][ T6595] ldm_validate_partition_table(): Disk read failed.
[   95.575871][ T6595] Dev nbd0: unable to read RDB block 0
[   95.579783][ T6595]  nbd0: unable to read partition table
[   95.587619][ T6595] ldm_validate_partition_table(): Disk read failed.
[   95.590866][ T6595] Dev nbd0: unable to read RDB block 0
[   95.593893][ T6595]  nbd0: unable to read partition table
[   95.960385][ T5931] Bluetooth: hci4: command 0x1003 tx timeout
[   95.960433][ T5933] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   96.008761][   T40] audit: type=1400 audit(1761823568.738:524): avc:  denied  { unmount } for  pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   96.059594][ T8094] SELinux:  policydb version -1683167080 does not match my version range 15-35
[   96.067080][ T8094] SELinux: failed to load policy
[   96.111921][ T8098] overlayfs: failed to decode file handle (len=6, type=5627, flags=0, err=-22)
[   96.152861][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.658'.
[   96.161499][   T54] usb 8-1: USB disconnect, device number 13
[   96.212769][   T40] audit: type=1400 audit(1761823568.948:525): avc:  denied  { write } for  pid=8108 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   96.219137][   T40] audit: type=1400 audit(1761823568.948:526): avc:  denied  { nlmsg_write } for  pid=8108 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   96.244251][ T8109] bond3: Removing last arp target with arp_interval on
[   96.294025][ T8120] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[   96.301931][ T8123] overlayfs: missing 'workdir'
[   96.516901][ T8132] netlink: 68 bytes leftover after parsing attributes in process `syz.0.668'.
[   96.818969][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'.
[   96.825735][ T8148] overlayfs: failed to resolve './file0': -2
[   96.840310][ T5939] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   96.946750][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.675'.
[   97.024440][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.677'.
[   97.028685][   T40] audit: type=1400 audit(1761823569.758:527): avc:  denied  { bind } for  pid=8157 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   97.121724][   T40] audit: type=1400 audit(1761823569.858:528): avc:  denied  { write } for  pid=8162 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   97.129560][   T40] audit: type=1400 audit(1761823569.858:529): avc:  denied  { ioctl } for  pid=8162 comm="syz.2.679" path="socket:[21432]" dev="sockfs" ino=21432 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   97.769271][ T8180] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   97.772385][ T8180] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   97.776599][ T8180] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   97.895464][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'.
[   98.041191][ T8194] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.688'.
[   98.105174][ T8187] usb 1-1: USB disconnect, device number 2
[   98.128184][ T8200] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   98.130114][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   98.133157][ T8200] vhci_hcd vhci_hcd.0: Device attached
[   98.134928][ T8202] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9)
[   98.137543][ T8202] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   98.143198][ T8202] vhci_hcd vhci_hcd.0: Device attached
[   98.145719][ T8205] vhci_hcd: connection closed
[   98.146892][ T8203] vhci_hcd: connection closed
[   98.147258][   T46] vhci_hcd: stop threads
[   98.152230][   T46] vhci_hcd: release socket
[   98.153594][   T46] vhci_hcd: disconnect device
[   98.155341][   T46] vhci_hcd: stop threads
[   98.156659][   T46] vhci_hcd: release socket
[   98.158059][   T46] vhci_hcd: disconnect device
[   98.376934][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.699'.
[   98.411104][ T8236] ipt_rpfilter: unknown options
[   98.421347][ T8236] 8021q: VLANs not supported on vxcan1
[   98.432614][ T8229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.698'.
[   98.452394][ T8239] binder: 8238:8239 ioctl c018620c 2000000071c0 returned -22
[   99.009262][ T8276] lo speed is unknown, defaulting to 1000
[   99.210309][ T6079] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[   99.373232][ T6079] usb 5-1: config 0 has no interfaces?
[   99.377469][ T6079] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   99.381623][ T6079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.385116][ T6079] usb 5-1: Product: syz
[   99.386919][ T6079] usb 5-1: Manufacturer: syz
[   99.388928][ T6079] usb 5-1: SerialNumber: syz
[   99.393440][ T6079] usb 5-1: config 0 descriptor??
[   99.591669][ T8297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8297 comm=syz.1.718
[   99.607997][ T6012] usb 5-1: USB disconnect, device number 19
[  100.005504][ T8310] xt_CT: No such helper "snmp_trap"
[  100.009086][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  100.009100][   T40] audit: type=1400 audit(1761823572.738:534): avc:  denied  { remount } for  pid=8306 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  100.171903][ T8316] nvme_fabrics: missing parameter 'transport=%s'
[  100.173986][ T8316] nvme_fabrics: missing parameter 'nqn=%s'
[  100.279259][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.284033][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.288041][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.292814][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.296910][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.301897][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.306148][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.310983][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.315040][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.319111][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.323371][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.327534][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.328785][ T5939] Bluetooth: hci1: Malformed LE Event: 0x0b
[  100.331947][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.337054][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.340479][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.343599][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.346733][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.349818][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.353240][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.356522][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.359943][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.363204][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.366531][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.369729][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.373051][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.376311][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.379582][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.383471][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.387653][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.391902][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.395509][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.398701][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.402392][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.406183][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.409558][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.413033][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.416314][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.419625][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.423272][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.426646][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.429833][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.433221][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.436418][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.440042][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.444276][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.447858][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.451635][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.454892][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.458286][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.462032][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.465450][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.468682][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.471911][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.474966][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.478066][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.481218][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.484425][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.487522][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.490705][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.493864][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.496909][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.500030][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.503190][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.506309][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.509401][ T8331] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.656236][ T8353] block nbd0: NBD_DISCONNECT
[  100.657875][ T8353] block nbd0: Disconnected due to user request.
[  100.659870][ T8353] block nbd0: shutting down sockets
[  100.663497][ T8353] netlink: 'syz.0.734': attribute type 1 has an invalid length.
[  100.664962][   T40] audit: type=1400 audit(1761823573.398:535): avc:  denied  { nlmsg_read } for  pid=8355 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  100.675409][ T8356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8356 comm=syz.1.735
[  100.678989][ T8353] gretap1: entered promiscuous mode
[  100.683008][ T8360] __nla_validate_parse: 1 callbacks suppressed
[  100.683017][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'.
[  100.683074][ T8353] bond5: (slave gretap1): making interface the new active one
[  100.685241][ T8360] netlink: 92 bytes leftover after parsing attributes in process `syz.2.736'.
[  100.688402][ T8353] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  100.851004][ T8379] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  100.881767][ T8381] syz.1.744: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  100.888713][ T8381] CPU: 1 UID: 0 PID: 8381 Comm: syz.1.744 Not tainted syzkaller #0 PREEMPT(full) 
[  100.888738][ T8381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  100.888749][ T8381] Call Trace:
[  100.888765][ T8381]  <TASK>
[  100.888774][ T8381]  dump_stack_lvl+0x16c/0x1f0
[  100.888819][ T8381]  warn_alloc+0x248/0x3a0
[  100.888850][ T8381]  ? __pfx_warn_alloc+0x10/0x10
[  100.888874][ T8381]  ? lockdep_hardirqs_on+0x7c/0x110
[  100.888906][ T8381]  ? kasan_save_stack+0x42/0x60
[  100.888921][ T8381]  ? kasan_save_stack+0x33/0x60
[  100.888935][ T8381]  ? kasan_save_track+0x14/0x30
[  100.888950][ T8381]  ? vb2_vmalloc_alloc+0xf9/0x3f0
[  100.888971][ T8381]  ? __vb2_queue_alloc+0x8c9/0x1280
[  100.888989][ T8381]  ? vb2_core_create_bufs+0x559/0xab0
[  100.889013][ T8381]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  100.889034][ T8381]  __vmalloc_node_range_noprof+0xfbc/0x1480
[  100.889065][ T8381]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  100.889093][ T8381]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  100.889124][ T8381]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  100.889146][ T8381]  vmalloc_user_noprof+0x9e/0xe0
[  100.889168][ T8381]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  100.889190][ T8381]  vb2_vmalloc_alloc+0x135/0x3f0
[  100.889220][ T8381]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  100.889243][ T8381]  __vb2_queue_alloc+0x8c9/0x1280
[  100.889278][ T8381]  vb2_core_create_bufs+0x559/0xab0
[  100.889302][ T8381]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[  100.889329][ T8381]  ? __mutex_trylock_common+0xe9/0x250
[  100.889350][ T8381]  vb2_create_bufs+0x5e8/0x840
[  100.889373][ T8381]  ? __pfx_vb2_create_bufs+0x10/0x10
[  100.889389][ T8381]  ? __mutex_lock+0x1c5/0x1060
[  100.889406][ T8381]  ? v4l_sanitize_colorspace+0x213/0x400
[  100.889440][ T8381]  vb2_ioctl_create_bufs+0x244/0x3e0
[  100.889459][ T8381]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  100.889483][ T8381]  vidioc_create_bufs+0x7d/0xf0
[  100.889510][ T8381]  v4l_create_bufs+0x151/0x260
[  100.889532][ T8381]  __video_do_ioctl+0xb77/0xf00
[  100.889562][ T8381]  ? __might_fault+0xe3/0x190
[  100.889587][ T8381]  ? __pfx___video_do_ioctl+0x10/0x10
[  100.889622][ T8381]  video_usercopy+0x4d0/0x1720
[  100.889648][ T8381]  ? __pfx___video_do_ioctl+0x10/0x10
[  100.889672][ T8381]  ? selinux_kernel_read_file+0x80/0x130
[  100.889704][ T8381]  ? __pfx_video_usercopy+0x10/0x10
[  100.889748][ T8381]  v4l2_ioctl+0x1bd/0x250
[  100.889770][ T8381]  ? __pfx_v4l2_ioctl+0x10/0x10
[  100.889793][ T8381]  __x64_sys_ioctl+0x18e/0x210
[  100.889820][ T8381]  do_syscall_64+0xcd/0xfa0
[  100.889849][ T8381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.889868][ T8381] RIP: 0033:0x7fc96cb8efc9
[  100.889884][ T8381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.889899][ T8381] RSP: 002b:00007fc96d9b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.889916][ T8381] RAX: ffffffffffffffda RBX: 00007fc96cde5fa0 RCX: 00007fc96cb8efc9
[  100.889926][ T8381] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000003
[  100.889937][ T8381] RBP: 00007fc96cc11f91 R08: 0000000000000000 R09: 0000000000000000
[  100.889946][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.889955][ T8381] R13: 00007fc96cde6038 R14: 00007fc96cde5fa0 R15: 00007fff3555e538
[  100.889978][ T8381]  </TASK>
[  100.889985][ T8381] Mem-Info:
[  101.017345][ T8381] active_anon:27477 inactive_anon:2102 isolated_anon:0
[  101.017345][ T8381]  active_file:2820 inactive_file:48314 isolated_file:0
[  101.017345][ T8381]  unevictable:1768 dirty:251 writeback:0
[  101.017345][ T8381]  slab_reclaimable:9554 slab_unreclaimable:73578
[  101.017345][ T8381]  mapped:26556 shmem:21672 pagetables:1440
[  101.017345][ T8381]  sec_pagetables:305 bounce:0
[  101.017345][ T8381]  kernel_misc_reclaimable:0
[  101.017345][ T8381]  free:428657 free_pcp:25918 free_cma:0
[  101.037955][ T8381] Node 0 active_anon:107484kB inactive_anon:8408kB active_file:11280kB inactive_file:193052kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:106224kB dirty:1004kB writeback:0kB shmem:80852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13616kB pagetables:5588kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB
[  101.053894][ T8381] Node 1 active_anon:2300kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:5836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.053973][ T8381] Node 0 DMA free:15104kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB
[  101.054031][ T8381] lowmem_reserve[]: 0 1239 1239 1239 1239
[  101.054071][ T8381] Node 0 DMA32 free:116312kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106740kB inactive_anon:8408kB active_file:11280kB inactive_file:193052kB unevictable:3536kB writepending:1004kB zspages:0kB present:2080628kB managed:1269500kB mlocked:0kB bounce:0kB free_pcp:75000kB local_pcp:28276kB free_cma:0kB
[  101.054125][ T8381] lowmem_reserve[]: 0 0 0 0 0
[  101.054159][ T8381] Node 1 Normal free:1583212kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2300kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:29972kB local_pcp:4856kB free_cma:0kB
[  101.054209][ T8381] lowmem_reserve[]: 0 0 0 0 0
[  101.054242][ T8381] Node 0 DMA: 12*4kB (UM) 10*8kB (UM) 8*16kB (UM) 8*32kB (U) 8*64kB (U) 8*128kB (UM) 5*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (U) 0*4096kB = 15104kB
[  101.054413][ T8381] Node 0 DMA32: 432*4kB (UME) 757*8kB (UME) 506*16kB (UME) 540*32kB (UME) 233*64kB (UME) 84*128kB (UME) 62*256kB (UME) 51*512kB (UME) 9*1024kB (M) 3*2048kB (M) 0*4096kB = 116168kB
[  101.054566][ T8381] Node 1 Normal: 1*4kB (M) 5*8kB (UME) 8*16kB (UE) 96*32kB (UME) 27*64kB (UME) 18*128kB (UME) 6*256kB (UM) 7*512kB (UM) 6*1024kB (U) 6*2048kB (UME) 379*4096kB (UM) = 1583212kB
[  101.054725][ T8381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  101.054739][ T8381] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.054753][ T8381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  101.054766][ T8381] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.054778][ T8381] 72802 total pagecache pages
[  101.054785][ T8381] 0 pages in swap cache
[  101.054791][ T8381] Free swap  = 124996kB
[  101.054797][ T8381] Total swap = 124996kB
[  101.054805][ T8381] 1048443 pages RAM
[  101.054811][ T8381] 0 pages HighMem/MovableOnly
[  101.054818][ T8381] 281755 pages reserved
[  101.054825][ T8381] 0 pages cma reserved
[  101.217522][ T8400] overlayfs: missing 'lowerdir'
[  101.224409][ T8400] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  101.227980][ T8400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.245567][ T8402] exFAT-fs (nbd0): unable to read boot sector
[  101.248294][ T8402] exFAT-fs (nbd0): failed to read boot sector
[  101.251667][ T8402] exFAT-fs (nbd0): failed to recognize exfat type
[  101.260238][   T40] audit: type=1400 audit(1761823573.988:536): avc:  denied  { map } for  pid=8403 comm="syz.2.753" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  101.269179][   T40] audit: type=1400 audit(1761823573.988:537): avc:  denied  { execute } for  pid=8403 comm="syz.2.753" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  101.280011][   T40] audit: type=1400 audit(1761823573.998:538): avc:  denied  { map } for  pid=8394 comm="syz.3.749" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  101.524431][ T8434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  101.543798][ T8434] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  101.649795][   T40] audit: type=1400 audit(1761823574.378:539): avc:  denied  { listen } for  pid=8442 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  101.656290][   T40] audit: type=1400 audit(1761823574.378:540): avc:  denied  { listen } for  pid=8442 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  101.697296][   T40] audit: type=1400 audit(1761823574.428:541): avc:  denied  { create } for  pid=8447 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  101.705622][   T40] audit: type=1400 audit(1761823574.438:542): avc:  denied  { ioctl } for  pid=8447 comm="syz.2.766" path="socket:[23233]" dev="sockfs" ino=23233 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  101.715513][   T40] audit: type=1400 audit(1761823574.438:543): avc:  denied  { ioctl } for  pid=8447 comm="syz.2.766" path="socket:[25623]" dev="sockfs" ino=25623 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  101.829299][ T8462] futex_wake_op: syz.2.771 tries to shift op by -1; fix this program
[  101.950650][ T8472] QAT: Invalid ioctl -2144835806
[  101.955544][ T8473] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  102.069096][ T8489] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0
[  102.093514][ T8492] netlink: 'syz.2.782': attribute type 1 has an invalid length.
[  102.096917][ T8492] netlink: 'syz.2.782': attribute type 2 has an invalid length.
[  102.183039][ T8503] netlink: 'syz.3.787': attribute type 1 has an invalid length.
[  102.186327][ T8503] netlink: 'syz.3.787': attribute type 4 has an invalid length.
[  102.190038][ T8503] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.787'.
[  102.228283][ T8518] netlink: 9 bytes leftover after parsing attributes in process `syz.1.791'.
[  102.235909][ T8509] netlink: 'syz.2.786': attribute type 1 has an invalid length.
[  102.238693][ T8518] gretap0: entered promiscuous mode
[  102.353338][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'.
[  102.356148][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'.
[  102.365623][   T74] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.365677][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'.
[  102.368983][   T74] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.374655][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'.
[  102.375953][   T74] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.381748][   T74] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.439608][ T8551] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  102.631123][ T1126] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  102.635199][ T1126] sr 2:0:0:0: [sr0] tag#11 Sense Key : Illegal Request [current] 
[  102.638247][ T1126] sr 2:0:0:0: [sr0] tag#11 Add. Sense: Invalid command operation code
[  102.641525][ T1126] sr 2:0:0:0: [sr0] tag#11 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00
[  102.644440][ T1126] blk_print_req_error: 138 callbacks suppressed
[  102.644451][ T1126] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  102.651397][ T6012] usb 8-1: new low-speed USB device number 14 using dummy_hcd
[  102.654490][ T1126] buffer_io_error: 138 callbacks suppressed
[  102.654501][ T1126] Buffer I/O error on dev sr0, logical block 0, lost async page write
[  102.692016][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'.
[  102.733253][ T8577] netlink: 'syz.0.811': attribute type 83 has an invalid length.
[  102.803416][ T6012] usb 8-1: device descriptor read/64, error -71
[  103.003772][ T8588] lo speed is unknown, defaulting to 1000
[  103.050240][ T6012] usb 8-1: new low-speed USB device number 15 using dummy_hcd
[  103.193269][ T6012] usb 8-1: device descriptor read/64, error -71
[  103.202157][ T8619] netlink: 108 bytes leftover after parsing attributes in process `syz.2.827'.
[  103.264730][ T8624] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  103.300479][ T6012] usb usb8-port1: attempt power cycle
[  103.504746][ T8640] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  103.598290][ T8640] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.601824][ T8640] 8021q: adding VLAN 0 to HW filter on device team0
[  103.605215][ T8640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.650657][ T6012] usb 8-1: new low-speed USB device number 16 using dummy_hcd
[  103.675088][ T6012] usb 8-1: device descriptor read/8, error -71
[  103.710501][ T8644] ref_ctr increment failed for inode: 0x672 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888034f78ac0
[  103.910293][ T6012] usb 8-1: new low-speed USB device number 17 using dummy_hcd
[  103.930959][ T6012] usb 8-1: device descriptor read/8, error -71
[  103.933411][ T8653] bridge_slave_0: left allmulticast mode
[  103.935430][ T8653] bridge_slave_0: left promiscuous mode
[  103.937422][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.942347][ T8653] bridge_slave_1: left allmulticast mode
[  103.944107][ T8653] bridge_slave_1: left promiscuous mode
[  103.945877][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.950479][ T8653] bond0: (slave bond_slave_0): Releasing backup interface
[  103.953699][ T8653] bond0: (slave bond_slave_1): Releasing backup interface
[  103.957024][ T8653] team0: Port device team_slave_0 removed
[  103.959825][ T8653] team0: Port device team_slave_1 removed
[  103.962369][ T8653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  103.976051][ T8653] team0: Mode changed to "loadbalance"
[  103.982748][ T8653] vlan0: entered promiscuous mode
[  103.988123][ T8653] tipc: Enabled bearer <eth:team0>, priority 0
[  104.040703][ T6012] usb usb8-port1: unable to enumerate USB device
[  104.044653][ T8658] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61)
[  104.433342][ T8673] syzkaller1: entered promiscuous mode
[  104.435084][ T8673] syzkaller1: entered allmulticast mode
[  104.455930][ T8673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.985572][ T8679] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61)
[  105.058096][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.061685][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  105.061694][   T40] audit: type=1400 audit(1761823577.798:555): avc:  denied  { read } for  pid=8682 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  105.062617][ T5933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.063855][   T40] audit: type=1400 audit(1761823577.798:556): avc:  denied  { module_request } for  pid=8682 comm="syz.2.849" kmod="fs-/dev/sg0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  105.063864][ T8684] virtio-fs: tag </dev/sg0> not found
[  105.071588][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.074324][   T40] audit: type=1400 audit(1761823577.808:557): avc:  denied  { write } for  pid=8682 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  105.079760][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.091913][ T5933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.180081][ T8683] lo speed is unknown, defaulting to 1000
[  105.190518][ T8697] overlayfs: statfs failed on './file0'
[  105.342581][ T8702] erofs (device nbd2): cannot find valid erofs superblock
[  105.343450][ T8683] chnl_net:caif_netlink_parms(): no params data found
[  105.352110][ T8702] fuse: blksize only supported for fuseblk
[  105.427052][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.429427][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.432404][ T8683] bridge_slave_0: entered allmulticast mode
[  105.435721][ T8683] bridge_slave_0: entered promiscuous mode
[  105.438896][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.441435][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.443801][ T8683] bridge_slave_1: entered allmulticast mode
[  105.444652][ T8710] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  105.446459][ T8683] bridge_slave_1: entered promiscuous mode
[  105.466414][ T8712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.510613][ T8683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.517455][ T8683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.545179][ T8720] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  105.548333][   T40] audit: type=1400 audit(1761823578.278:558): avc:  denied  { read } for  pid=8719 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  105.577869][   T40] audit: type=1400 audit(1761823578.308:559): avc:  denied  { write } for  pid=8714 comm="syz.3.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  105.585530][   T40] audit: type=1400 audit(1761823578.308:560): avc:  denied  { write } for  pid=8714 comm="syz.3.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  105.593426][   T40] audit: type=1400 audit(1761823578.318:561): avc:  denied  { prog_load } for  pid=8719 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  105.595833][ T8683] team0: Port device team_slave_0 added
[  105.601391][   T40] audit: type=1400 audit(1761823578.318:562): avc:  denied  { bpf } for  pid=8719 comm="syz.2.858" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  105.604937][ T8683] team0: Port device team_slave_1 added
[  105.611147][   T40] audit: type=1400 audit(1761823578.318:563): avc:  denied  { perfmon } for  pid=8719 comm="syz.2.858" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  105.620954][   T40] audit: type=1400 audit(1761823578.318:564): avc:  denied  { create } for  pid=8719 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  105.651632][ T8683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.653920][ T8683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.663003][ T8683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.668483][ T8683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.670924][ T8683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.679044][ T8683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.727182][ T8683] hsr_slave_0: entered promiscuous mode
[  105.729414][ T8683] hsr_slave_1: entered promiscuous mode
[  105.732424][ T8683] debugfs: 'hsr0' already exists in 'hsr'
[  105.734351][ T8683] Cannot create hsr debugfs directory
[  105.848484][ T8732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  105.889261][ T8683] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.894170][ T8683] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.898153][ T8683] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.902954][ T8683] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.934916][ T8744] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  105.939291][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.957687][ T8683] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.966756][ T8683] 8021q: adding VLAN 0 to HW filter on device team0
[  105.981285][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.983691][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.987166][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.989482][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.109535][ T8683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.192270][ T8770] __nla_validate_parse: 4 callbacks suppressed
[  106.192280][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'.
[  106.197152][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'.
[  106.239793][ T8683] veth0_vlan: entered promiscuous mode
[  106.245220][ T8683] veth1_vlan: entered promiscuous mode
[  106.261732][ T8683] veth0_macvtap: entered promiscuous mode
[  106.265588][ T8683] veth1_macvtap: entered promiscuous mode
[  106.276738][ T8683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.284319][ T8683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.290761][   T74] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.295315][   T74] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.299021][   T74] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.303277][   T74] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.339530][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.342782][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.356752][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.359327][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.405829][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'.
[  106.406764][ T5933] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  106.425304][ T8785] loop0: detected capacity change from 0 to 7
[  106.437299][ T8785] Dev loop0: unable to read RDB block 7
[  106.439631][ T8785]  loop0: unable to read partition table
[  106.443313][ T8785] loop0: partition table beyond EOD, truncated
[  106.446092][ T8785] loop_reread_partitions: partition scan of loop0 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  106.495951][ T8795] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  107.068342][ T8809] hpfs: Bad magic ... probably not HPFS
[  107.160725][ T5933] Bluetooth: hci1: command tx timeout
[  107.170730][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.174644][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.217089][ T8818] tty tty25: ldisc open failed (-12), clearing slot 24
[  107.275041][ T8827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8827 comm=syz.2.882
[  107.347339][ T8829] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  107.390530][ T6802] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  107.409136][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.885'.
[  107.799182][ T8850] fuse: Bad value for 'user_id'
[  107.801212][ T8850] fuse: Bad value for 'user_id'
[  107.861453][ T8809] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  107.874264][ T8853] netlink: 'syz.2.891': attribute type 1 has an invalid length.
[  107.904997][ T8856] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  107.909112][ T8856] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock
[  107.912114][ T8856] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  107.914684][ T8856] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock
[  108.027770][ T8868] batadv_slave_1: entered promiscuous mode
[  108.803407][ T8862] batadv_slave_1: left promiscuous mode
[  108.876772][ T8879] binder: BC_ATTEMPT_ACQUIRE not supported
[  108.878720][ T8879] binder: 8878:8879 ioctl c0306201 200000000300 returned -22
[  109.162455][ T5933] Bluetooth: hci0: command 0x0406 tx timeout
[  109.241039][ T5933] Bluetooth: hci1: command tx timeout
[  109.273831][ T8920] netlink: 'syz.2.912': attribute type 29 has an invalid length.
[  109.276424][ T8920] netlink: 'syz.2.912': attribute type 3 has an invalid length.
[  109.279347][ T8920] netlink: 76 bytes leftover after parsing attributes in process `syz.2.912'.
[  109.707571][ T8962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45073 sclass=netlink_route_socket pid=8962 comm=syz.2.922
[  109.739510][ T8964] geneve2: entered promiscuous mode
[  109.741741][ T8964] geneve2: entered allmulticast mode
[  109.786402][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.923'.
[  109.866062][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.925'.
[  109.869899][ T8969] netlink: 'syz.2.925': attribute type 7 has an invalid length.
[  109.873195][ T8969] netlink: 'syz.2.925': attribute type 8 has an invalid length.
[  109.876627][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'.
[  109.886511][ T8969] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  109.929656][ T8974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8974 comm=syz.2.927
[  109.936589][ T8972] SELinux: failed to load policy
[  109.936647][ T8974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8974 comm=syz.2.927
[  109.995580][ T8977] syzkaller1: entered promiscuous mode
[  109.997951][ T8977] syzkaller1: entered allmulticast mode
[  110.010002][ T8977] netlink: 'syz.2.928': attribute type 11 has an invalid length.
[  110.181498][ T6079] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  110.204900][   T40] kauditd_printk_skb: 179 callbacks suppressed
[  110.204911][   T40] audit: type=1400 audit(1761823582.938:744): avc:  denied  { create } for  pid=8983 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  110.213493][   T40] audit: type=1400 audit(1761823582.938:745): avc:  denied  { write } for  pid=8983 comm="syz.4.931" path="socket:[27237]" dev="sockfs" ino=27237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  110.221522][   T40] audit: type=1400 audit(1761823582.948:746): avc:  denied  { create } for  pid=8985 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  110.227488][   T40] audit: type=1400 audit(1761823582.948:747): avc:  denied  { read } for  pid=8985 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  110.245912][   T40] audit: type=1400 audit(1761823582.978:748): avc:  denied  { ioctl } for  pid=8988 comm="syz.2.934" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29757 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  110.320091][ T9000] overlayfs: failed to resolve './file1': -2
[  110.324802][   T40] audit: type=1400 audit(1761823583.058:749): avc:  denied  { append } for  pid=8997 comm="syz.2.936" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  110.342306][ T6079] usb 8-1: Using ep0 maxpacket: 16
[  110.346553][ T6079] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  110.350635][ T6079] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  110.355545][ T6079] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 25204, setting to 1024
[  110.360139][ T6079] usb 8-1: config 0 interface 0 has no altsetting 0
[  110.364711][ T6079] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  110.368123][ T6079] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.371565][ T6079] usb 8-1: Product: syz
[  110.373350][ T6079] usb 8-1: Manufacturer: syz
[  110.375257][ T6079] usb 8-1: SerialNumber: syz
[  110.379783][ T6079] usb 8-1: config 0 descriptor??
[  110.451412][ T5933] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  110.454543][ T5933] Bluetooth: hci2: Injecting HCI hardware error event
[  110.458035][ T5933] Bluetooth: hci2: hardware error 0x00
[  110.560270][ T6802] usb 9-1: device descriptor read/64, error -71
[  110.588911][ T6079] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12
[  110.592947][   T40] audit: type=1400 audit(1761823583.328:750): avc:  denied  { read } for  pid=5327 comm="acpid" name="mouse1" dev="devtmpfs" ino=3025 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.601393][   T40] audit: type=1400 audit(1761823583.328:751): avc:  denied  { open } for  pid=5327 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3025 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.609689][   T40] audit: type=1400 audit(1761823583.328:752): avc:  denied  { ioctl } for  pid=5327 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3025 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.791360][   T40] audit: type=1400 audit(1761823583.528:753): avc:  denied  { write } for  pid=8971 comm="syz.3.926" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  110.799687][    T9] usb 8-1: USB disconnect, device number 18
[  110.820280][ T6802] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  110.972401][ T6802] usb 9-1: config index 0 descriptor too short (expected 45, got 36)
[  110.975716][ T6802] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  110.979339][ T6802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  110.982841][ T6802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  110.986279][ T6802] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  110.990313][ T6802] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  110.993319][ T6802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.997464][ T6802] usb 9-1: config 0 descriptor??
[  110.999564][ T8991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  111.218354][ T6802] usbhid 9-1:0.0: can't add hid device: -71
[  111.228303][ T6802] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  111.243897][ T6802] usb 9-1: USB disconnect, device number 3
[  111.331169][ T5939] Bluetooth: hci1: command tx timeout
[  111.339377][ T9015] cgroup: Unknown subsys name 'permit_directio'
[  111.377759][ T9018] ipt_REJECT: TCP_RESET invalid for non-tcp
[  111.707815][ T9050] netlink: 224 bytes leftover after parsing attributes in process `syz.4.952'.
[  111.711823][ T9050] IPv6: Can't replace route, no match found
[  111.821145][ T6019] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  111.981769][ T6019] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.985025][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  111.987807][ T6019] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  111.991227][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.994992][ T6019] usb 7-1: config 0 descriptor??
[  111.998429][ T6019] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  112.000881][ T6019] dvb-usb: bulk message failed: -22 (3/0)
[  112.006877][ T6019] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  112.010711][ T6019] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  112.012986][ T6019] usb 7-1: media controller created
[  112.015779][ T6019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  112.023693][ T6019] dvb-usb: bulk message failed: -22 (6/0)
[  112.026474][ T6019] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  112.031263][ T6019] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input13
[  112.037861][ T6019] dvb-usb: schedule remote query interval to 150 msecs.
[  112.040006][ T6019] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  112.091691][ T9065] 9pnet_virtio: no channels available for device 127.0.0.1
[  112.202348][ T6019] dvb-usb: bulk message failed: -22 (1/0)
[  112.205018][ T6019] dvb-usb: error while querying for an remote control event.
[  112.323897][ T9074] xfrm0 speed is unknown, defaulting to 1000
[  112.326606][ T9074] xfrm0 speed is unknown, defaulting to 1000
[  112.330474][ T9074] xfrm0 speed is unknown, defaulting to 1000
[  112.337427][ T9074] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  112.350137][ T9074] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  112.360305][ T6019] dvb-usb: bulk message failed: -22 (1/0)
[  112.362320][ T6019] dvb-usb: error while querying for an remote control event.
[  112.371807][ T9074] xfrm0 speed is unknown, defaulting to 1000
[  112.375964][ T9074] xfrm0 speed is unknown, defaulting to 1000
[  112.379730][ T9074] xfrm0 speed is unknown, defaulting to 1000
[  112.383858][ T9074] xfrm0 speed is unknown, defaulting to 1000
[  112.387630][ T9074] xfrm0 speed is unknown, defaulting to 1000
[  112.519002][ T9083] netlink: 52 bytes leftover after parsing attributes in process `syz.4.962'.
[  112.520431][ T5933] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  112.523229][ T9085] netlink: 52 bytes leftover after parsing attributes in process `syz.4.962'.
[  112.525300][ T6019] dvb-usb: bulk message failed: -22 (1/0)
[  112.532686][ T6019] dvb-usb: error while querying for an remote control event.
[  112.690286][ T1337] dvb-usb: bulk message failed: -22 (1/0)
[  112.692193][ T1337] dvb-usb: error while querying for an remote control event.
[  112.851457][ T1337] dvb-usb: bulk message failed: -22 (1/0)
[  112.853469][ T1337] dvb-usb: error while querying for an remote control event.
[  112.880267][ T6802] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[  113.010279][ T1337] dvb-usb: bulk message failed: -22 (1/0)
[  113.012750][ T1337] dvb-usb: error while querying for an remote control event.
[  113.042006][ T6802] usb 9-1: config index 0 descriptor too short (expected 1307, got 27)
[  113.045593][ T6802] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[  113.049082][ T6802] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[  113.052326][ T6802] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  113.056546][ T6802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  113.059652][ T6802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  113.062914][ T6802] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  113.069720][ T6802] usb 9-1: string descriptor 0 read error: -22
[  113.071902][ T6802] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  113.074744][ T6802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.078645][ T6802] usb 9-1: config 0 descriptor??
[  113.081814][ T6802] hub 9-1:0.0: bad descriptor, ignoring hub
[  113.083703][ T6802] hub 9-1:0.0: probe with driver hub failed with error -5
[  113.090296][ T6802] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input14
[  113.170324][ T1337] dvb-usb: bulk message failed: -22 (1/0)
[  113.172229][ T1337] dvb-usb: error while querying for an remote control event.
[  113.282836][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.285726][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.290537][   T34] usb 9-1: USB disconnect, device number 4
[  113.330340][ T1337] dvb-usb: bulk message failed: -22 (1/0)
[  113.332172][ T1337] dvb-usb: error while querying for an remote control event.
[  113.491283][ T1337] dvb-usb: bulk message failed: -22 (1/0)
[  113.493678][ T1337] dvb-usb: error while querying for an remote control event.
[  113.650422][ T1337] dvb-usb: bulk message failed: -22 (1/0)
[  113.652868][ T1337] dvb-usb: error while querying for an remote control event.
[  113.811009][ T1337] dvb-usb: bulk message failed: -22 (1/0)
[  113.813267][ T1337] dvb-usb: error while querying for an remote control event.
[  113.980283][ T6019] dvb-usb: bulk message failed: -22 (1/0)
[  113.980655][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.970'.
[  113.982500][ T6019] dvb-usb: error while querying for an remote control event.
[  114.106854][ T9119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=9119 comm=syz.4.971
[  114.140476][ T6019] dvb-usb: bulk message failed: -22 (1/0)
[  114.142724][ T6019] dvb-usb: error while querying for an remote control event.
[  114.150338][ T9124] netlink: 248 bytes leftover after parsing attributes in process `syz.4.972'.
[  114.194006][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'.
[  114.201319][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'.
[  114.300282][ T6019] dvb-usb: bulk message failed: -22 (1/0)
[  114.302153][ T6019] dvb-usb: error while querying for an remote control event.
[  114.460376][ T6019] dvb-usb: bulk message failed: -22 (1/0)
[  114.462816][ T6019] dvb-usb: error while querying for an remote control event.
[  114.579379][ T6079] usb 7-1: USB disconnect, device number 16
[  114.594870][ T6079] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  114.596440][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  114.657291][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'.
[  115.031248][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[  115.273583][ T9204] mkiss: ax0: crc mode is auto.
[  115.279407][   T40] kauditd_printk_skb: 60 callbacks suppressed
[  115.279421][   T40] audit: type=1400 audit(1761823588.008:814): avc:  denied  { read } for  pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  115.298597][ T9204] netlink: 'syz.3.994': attribute type 1 has an invalid length.
[  115.300509][ T9206] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  115.444862][ T9204] veth5: entered promiscuous mode
[  115.462586][ T9207] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  115.468283][ T9207] bond2 (unregistering): Released all slaves
[  115.474136][   T40] audit: type=1400 audit(1761823588.208:815): avc:  denied  { write } for  pid=9212 comm="syz.2.997" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  115.475324][ T9213] syz.2.997: calling unsupported SCSI_IOCTL_SEND_COMMAND
[  115.489372][   T40] audit: type=1400 audit(1761823588.218:816): avc:  denied  { setattr } for  pid=9212 comm="syz.2.997" name="NETLINK" dev="sockfs" ino=28089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  115.498349][   T40] audit: type=1400 audit(1761823588.228:817): avc:  denied  { setattr } for  pid=9212 comm="syz.2.997" name="SCTP" dev="sockfs" ino=28092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  115.676635][ T6802] IPVS: starting estimator thread 0...
[  115.730070][   T40] audit: type=1400 audit(1761823588.458:818): avc:  denied  { ioctl } for  pid=9226 comm="syz.2.1000" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  115.740256][   T40] audit: type=1400 audit(1761823588.468:819): avc:  denied  { read } for  pid=9226 comm="syz.2.1000" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  115.766611][ T9229] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  115.770955][ T9224] IPVS: using max 45 ests per chain, 108000 per kthread
[  115.855332][ T9231] fuse: Bad value for 'fd'
[  115.859164][ T9231] netlink: 'syz.4.1002': attribute type 10 has an invalid length.
[  115.866524][ T9231] team0: Cannot enslave team device to itself
[  115.871500][   T40] audit: type=1400 audit(1761823588.608:820): avc:  denied  { append } for  pid=9230 comm="syz.4.1002" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  115.961347][ T9235] netlink: 'syz.4.1004': attribute type 1 has an invalid length.
[  115.964281][ T9235] netlink: 'syz.4.1004': attribute type 3 has an invalid length.
[  115.966990][ T9235] NCSI netlink: No device for ifindex 813332851
[  115.986233][ T9235] xfrm1: entered promiscuous mode
[  115.987857][ T9235] xfrm1: entered allmulticast mode
[  115.989772][ T9235] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address
[  115.993788][ T9235] bond1: (slave xfrm1): Error -95 calling set_mac_address
[  116.200843][ T9247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  116.212387][   T40] audit: type=1400 audit(1761823588.948:821): avc:  denied  { bind } for  pid=9249 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  116.221125][   T40] audit: type=1400 audit(1761823588.948:822): avc:  denied  { listen } for  pid=9249 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  116.229469][   T40] audit: type=1400 audit(1761823588.948:823): avc:  denied  { connect } for  pid=9249 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  116.393996][ T9265] pim6reg1: entered promiscuous mode
[  116.395729][ T9265] pim6reg1: entered allmulticast mode
[  116.798029][ T9288] vlan2: entered promiscuous mode
[  116.800327][ T9288] bridge0: entered promiscuous mode
[  116.803508][ T9296] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22
[  116.896929][ T9302] __nla_validate_parse: 4 callbacks suppressed
[  116.896939][ T9302] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1027'.
[  117.072390][ T9312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9312 comm=syz.4.1030
[  117.072393][ T9311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9311 comm=syz.4.1030
[  117.141601][ T9317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=9317 comm=syz.4.1032
[  117.148207][ T9317] netlink: 'syz.4.1032': attribute type 13 has an invalid length.
[  117.166862][ T9317] gretap0: refused to change device tx_queue_len
[  117.169350][ T9317] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  117.179460][ T9317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9317 comm=syz.4.1032
[  117.353199][ T9325] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1035'.
[  118.235411][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  118.241497][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  118.246130][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  118.251846][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  118.255718][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  118.331126][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.334481][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.418808][ T9336] lo speed is unknown, defaulting to 1000
[  118.518458][ T9336] xfrm0 speed is unknown, defaulting to 1000
[  118.638061][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.642856][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.653872][ T9367] netlink: 'syz.4.1045': attribute type 1 has an invalid length.
[  118.674569][ T9367] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.682049][ T9336] chnl_net:caif_netlink_parms(): no params data found
[  118.683139][ T9367] netlink: 'syz.4.1045': attribute type 1 has an invalid length.
[  118.714217][ T9367] bond3 (unregistering): Released all slaves
[  118.758644][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.763357][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.825808][ T9375] random: crng reseeded on system resumption
[  118.846989][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.851797][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.855341][ T9336] bridge_slave_0: entered allmulticast mode
[  118.858880][ T9336] bridge_slave_0: entered promiscuous mode
[  118.871638][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.875780][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.884269][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.887313][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.891350][ T9336] bridge_slave_1: entered allmulticast mode
[  118.894977][ T9336] bridge_slave_1: entered promiscuous mode
[  118.952579][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.961297][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.029767][ T9336] team0: Port device team_slave_0 added
[  119.034779][ T9336] team0: Port device team_slave_1 added
[  119.143643][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.146142][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.156069][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.166020][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.168257][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.176594][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.180620][ T9384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.237318][ T1156] bridge_slave_1: left allmulticast mode
[  119.239403][ T1156] bridge_slave_1: left promiscuous mode
[  119.244536][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.249605][ T1156] bridge_slave_0: left allmulticast mode
[  119.252128][ T1156] bridge_slave_0: left promiscuous mode
[  119.254153][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.296517][ T1156] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  119.373576][ T1156] bond2 (unregistering): (slave geneve3): Releasing active interface
[  119.428140][ T6802] Process accounting resumed
[  119.468458][ T9403] trusted_key: encrypted_key: master key parameter is missing
[  119.593562][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.597943][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.602212][ T1156] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  119.605471][ T1156] veth1_vlan: left allmulticast mode
[  119.608703][ T1156] bond0 (unregistering): Released all slaves
[  119.682380][ T1156] bond1 (unregistering): Released all slaves
[  119.745125][ T1156] bond2 (unregistering): Released all slaves
[  119.755210][ T9336] hsr_slave_0: entered promiscuous mode
[  119.757909][ T9336] hsr_slave_1: entered promiscuous mode
[  119.760001][ T9336] debugfs: 'hsr0' already exists in 'hsr'
[  119.762012][ T9336] Cannot create hsr debugfs directory
[  119.897230][ T9409] netlink: 'syz.4.1056': attribute type 2 has an invalid length.
[  119.901119][ T9409] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1056'.
[  119.933540][ T9409] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  119.945911][ T9336] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  119.951640][ T9336] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  119.957453][ T9336] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  119.976723][ T9336] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  120.034581][ T9418] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  120.038493][ T9418] block device autoloading is deprecated and will be removed.
[  120.053877][ T9418] macvtap1: entered allmulticast mode
[  120.056162][ T9418] veth0_macvtap: entered allmulticast mode
[  120.079723][ T9428] comedi: valid board names for 8255 driver are:
[  120.083627][ T9428]  8255
[  120.085118][ T9428] comedi: valid board names for vmk80xx driver are:
[  120.087303][ T9428]  vmk80xx
[  120.088335][ T9428] comedi: valid board names for usbduxsigma driver are:
[  120.090555][ T9428]  usbduxsigma
[  120.091650][ T9428] comedi: valid board names for usbduxfast driver are:
[  120.093933][ T9428]  usbduxfast
[  120.095005][ T9428] comedi: valid board names for usbdux driver are:
[  120.097023][ T9428]  usbdux
[  120.098043][ T9428] comedi: valid board names for ni6501 driver are:
[  120.102596][ T9428]  ni6501
[  120.104084][ T9428] comedi: valid board names for dt9812 driver are:
[  120.106775][ T9428]  dt9812
[  120.108040][ T9428] comedi: valid board names for ni_labpc_cs driver are:
[  120.111761][ T9428]  ni_labpc_cs
[  120.112946][ T9428] comedi: valid board names for ni_daq_700 driver are:
[  120.115186][ T9428]  ni_daq_700
[  120.116281][ T9428] comedi: valid board names for labpc_pci driver are:
[  120.120063][ T9428]  labpc_pci
[  120.122428][ T9428] comedi: valid board names for adl_pci9118 driver are:
[  120.124639][ T9428]  pci9118dg
[  120.125690][ T9428]  pci9118hg
[  120.126740][ T9428]  pci9118hr
[  120.127448][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.127819][ T9428] comedi: valid board names for 8255_pci driver are:
[  120.131627][ T9430] io-wq is not configured for unbound workers
[  120.133770][ T9428]  8255_pci
[  120.137740][ T9428] comedi: valid board names for s526 driver are:
[  120.141232][ T9428]  s526
[  120.143495][ T9428] comedi: valid board names for multiq3 driver are:
[  120.146723][ T9336] 8021q: adding VLAN 0 to HW filter on device team0
[  120.146864][ T9428]  multiq3
[  120.153115][ T9428] comedi: valid board names for pcmuio driver are:
[  120.155846][ T9428]  pcmuio48
[  120.157238][ T9428]  pcmuio96
[  120.158587][ T9428] comedi: valid board names for pcmmio driver are:
[  120.162300][ T9428]  pcmmio
[  120.163585][ T9428] comedi: valid board names for pcmda12 driver are:
[  120.166363][ T9428]  pcmda12
[  120.167698][ T9428] comedi: valid board names for pcmad driver are:
[  120.175369][ T9428]  pcmad12
[  120.176479][ T9428]  pcmad16
[  120.176502][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.177477][ T9428] comedi: valid board names for ni_labpc driver are:
[  120.180341][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.186742][ T9428]  lab-pc-1200
[  120.187941][ T9428]  lab-pc-1200ai
[  120.189100][ T9428]  lab-pc+
[  120.189803][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.190110][ T9428] comedi: valid board names for atmio16 driver are:
[  120.190118][ T9428]  atmio16
[  120.193139][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.195195][ T9428]  atmio16d
[  120.195204][ T9428] comedi: valid board names for ni_at_ao driver are:
[  120.206375][ T9428]  at-ao-6
[  120.207840][ T9428]  at-ao-10
[  120.209308][ T9428] comedi: valid board names for ni_at_a2150 driver are:
[  120.212286][ T9428]  ni_at_a2150
[  120.213570][ T9428] comedi: valid board names for adq12b driver are:
[  120.216107][ T9428]  adq12b
[  120.217176][ T9428] comedi: valid board names for mpc624 driver are:
[  120.219516][ T9428]  mpc624
[  120.221672][ T9428] comedi: valid board names for c6xdigio driver are:
[  120.224559][ T9428]  c6xdigio
[  120.238467][ T9428] comedi: valid board names for aio_iiro_16 driver are:
[  120.243425][ T9428]  aio_iiro_16
[  120.244897][ T9428] comedi: valid board names for aio_aio12_8 driver are:
[  120.247388][ T9428]  aio_aio12_8
[  120.248587][ T9428]  aio_ai12_8
[  120.249663][ T9428]  aio_ao12_4
[  120.250963][ T9428] comedi: valid board names for fl512 driver are:
[  120.253184][ T9428]  fl512
[  120.254123][ T9428] comedi: valid board names for dmm32at driver are:
[  120.257890][ T9428]  dmm32at
[  120.267205][ T9428] comedi: valid board names for dt282x driver are:
[  120.269672][ T9428]  dt2821
[  120.280379][ T5939] Bluetooth: hci4: command tx timeout
[  120.286189][ T9428]  dt2821-f
[  120.287359][ T9428]  dt2821-g
[  120.288442][ T9428]  dt2823
[  120.289415][ T9428]  dt2824-pgh
[  120.292986][ T9428]  dt2824-pgl
[  120.294088][ T9428]  dt2825
[  120.295045][ T9428]  dt2827
[  120.296010][ T9428]  dt2828
[  120.297095][ T9428]  dt2829
[  120.298137][ T9428]  dt21-ez
[  120.299161][ T9428]  dt23-ez
[  120.301079][ T9428]  dt24-ez
[  120.302100][ T9428]  dt24-ez-pgl
[  120.303318][ T9428] comedi: valid board names for dt2817 driver are:
[  120.308611][ T9428]  dt2817
[  120.309704][ T9428] comedi: valid board names for dt2815 driver are:
[  120.312537][ T9428]  dt2815
[  120.313698][ T9428] comedi: valid board names for dt2814 driver are:
[  120.316829][ T9428]  dt2814
[  120.319640][   T40] kauditd_printk_skb: 113 callbacks suppressed
[  120.319656][   T40] audit: type=1400 audit(1761823593.038:937): avc:  denied  { create } for  pid=9444 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  120.319699][   T40] audit: type=1400 audit(1761823593.038:938): avc:  denied  { ioctl } for  pid=9444 comm="syz.4.1062" path="socket:[29586]" dev="sockfs" ino=29586 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  120.341666][ T9428] comedi: valid board names for dt2811 driver are:
[  120.343936][ T9428]  dt2811-pgh
[  120.345066][ T9428]  dt2811-pgl
[  120.346176][ T9428] comedi: valid board names for dt2801 driver are:
[  120.347511][   T40] audit: type=1400 audit(1761823593.078:939): avc:  denied  { create } for  pid=9427 comm="syz.3.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  120.348236][ T9428]  dt2801
[  120.348243][ T9428] comedi: valid board names for das6402 driver are:
[  120.348248][ T9428]  das6402-12
[  120.354703][ T9336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.358182][   T40] audit: type=1400 audit(1761823593.078:940): avc:  denied  { setopt } for  pid=9427 comm="syz.3.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  120.364518][ T9428]  das6402-16
[  120.371625][ T9428] comedi: valid board names for das1800 driver are:
[  120.374120][ T9428]  das-1701st
[  120.375516][ T9428]  das-1701st-da
[  120.376704][ T9428]  das-1702st
[  120.378028][ T9428]  das-1702st-da
[  120.378029][   T40] audit: type=1400 audit(1761823593.108:941): avc:  denied  { write } for  pid=9452 comm="syz.4.1063" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  120.379330][ T9428]  das-1702hr
[  120.389957][ T9428]  das-1702hr-da
[  120.391395][ T9428]  das-1701ao
[  120.392582][ T9428]  das-1702ao
[  120.393677][ T9428]  das-1801st
[  120.394768][ T9428]  das-1801st-da
[  120.395937][ T9428]  das-1802st
[  120.397080][ T9428]  das-1802st-da
[  120.398233][ T9428]  das-1802hr
[  120.399316][ T9428]  das-1802hr-da
[  120.400609][ T9428]  das-1801hc
[  120.401853][ T9428]  das-1802hc
[  120.402981][ T9428]  das-1801ao
[  120.404058][ T9428]  das-1802ao
[  120.405186][ T9428] comedi: valid board names for das800 driver are:
[  120.407210][ T9428]  das-800
[  120.408216][ T9428]  cio-das800
[  120.409281][ T9428]  das-801
[  120.413014][ T9428]  cio-das801
[  120.414087][ T9428]  das-802
[  120.415065][ T9428]  cio-das802
[  120.416144][ T9428]  cio-das802/16
[  120.417722][ T9428] comedi: valid board names for isa-das08 driver are:
[  120.419848][ T9428]  isa-das08
[  120.421310][ T9428]  das08-pgm
[  120.422391][ T9428]  das08-pgh
[  120.423428][ T9428]  das08-pgl
[  120.424605][ T9428]  das08-aoh
[  120.425646][ T9428]  das08-aol
[  120.426692][ T9428]  das08-aom
[  120.427761][ T9428]  das08/jr-ao
[  120.428867][ T9428]  das08jr-16-ao
[  120.430000][ T9428]  pc104-das08
[  120.431458][ T9428]  das08jr/16
[  120.432560][ T9428] comedi: valid board names for das16m1 driver are:
[  120.434613][ T9428]  das16m1
[  120.435593][ T9428] comedi: valid board names for dac02 driver are:
[  120.437588][ T9428]  dac02
[  120.438498][ T9428] comedi: valid board names for rti802 driver are:
[  120.441857][ T9428]  rti802
[  120.442828][ T9428] comedi: valid board names for rti800 driver are:
[  120.444911][ T9428]  rti800
[  120.445882][ T9428]  rti815
[  120.446819][ T9428] comedi: valid board names for pcm3724 driver are:
[  120.448874][ T9428]  pcm3724
[  120.449854][ T9428] comedi: valid board names for pcl818 driver are:
[  120.452640][ T9428]  pcl818l
[  120.453672][ T9428]  pcl818h
[  120.454667][ T9428]  pcl818hd
[  120.455687][ T9428]  pcl818hg
[  120.456729][ T9428]  pcl818
[  120.457721][ T9428]  pcl718
[  120.458938][ T9428]  pcm3718
[  120.461066][ T9428] comedi: valid board names for pcl816 driver are:
[  120.463429][ T9428]  pcl816
[  120.464411][ T9428]  pcl814b
[  120.465412][ T9428] comedi: valid board names for pcl812 driver are:
[  120.467430][ T9428]  pcl812
[  120.468400][ T9428]  pcl812pg
[  120.469424][ T9428]  acl8112pg
[  120.470951][ T9428]  acl8112dg
[  120.472024][ T9428]  acl8112hg
[  120.473072][ T9428]  a821pgl
[  120.473150][ T1156] hsr_slave_0: left promiscuous mode
[  120.474054][ T9428]  a821pglnda
[  120.474063][ T9428]  a821pgh
[  120.474066][ T9428]  a822pgl
[  120.474070][ T9428]  a822pgh
[  120.474073][ T9428]  a823pgl
[  120.474077][ T9428]  a823pgh
[  120.474080][ T9428]  pcl813
[  120.474083][ T9428]  pcl813b
[  120.474087][ T9428]  acl8113
[  120.474091][ T9428]  iso813
[  120.474094][ T9428]  acl8216
[  120.474097][ T9428]  a826pg
[  120.474101][ T9428] comedi: valid board names for pcl730 driver are:
[  120.474106][ T9428]  pcl730
[  120.490774][ T1156] hsr_slave_1: left promiscuous mode
[  120.490780][ T9428]  iso730
[  120.490787][ T9428]  acl7130
[  120.490791][ T9428]  pcm3730
[  120.493135][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.493419][ T9428]  pcl725
[  120.498640][ T9428]  p8r8dio
[  120.499500][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.499631][ T9428]  acl7225b
[  120.499637][ T9428]  p16r16dio
[  120.499641][ T9428]  pcl733
[  120.505800][ T9428]  pcl734
[  120.506819][ T9428]  opmm-1616-xt
[  120.507955][ T9428]  pearl-mm-p
[  120.509034][ T9428]  ir104-pbf
[  120.510095][ T9428] comedi: valid board names for pcl726 driver are:
[  120.512255][ T9428]  pcl726
[  120.513263][ T9428]  pcl727
[  120.514211][ T9428]  pcl728
[  120.515152][ T9428]  acl6126
[  120.516154][ T9428]  acl6128
[  120.517146][ T9428] comedi: valid board names for pcl724 driver are:
[  120.519174][ T9428]  pcl724
[  120.520124][ T9428]  pcl722
[  120.522016][ T9428]  pcl731
[  120.522991][ T9428]  acl7122
[  120.524095][ T9428]  acl7124
[  120.525109][ T9428]  pet48dio
[  120.526121][ T9428]  pcmio48
[  120.527104][ T9428]  onyx-mm-dio
[  120.528218][ T9428] comedi: valid board names for pcl711 driver are:
[  120.530741][ T9428]  pcl711
[  120.531697][ T9428]  pcl711b
[  120.532722][ T9428]  acl8112hg
[  120.533770][ T9428]  acl8112dg
[  120.534827][ T9428] comedi: valid board names for amplc_pc263 driver are:
[  120.537022][ T9428]  pc263
[  120.537973][ T9428] comedi: valid board names for amplc_pc236 driver are:
[  120.540274][ T9428]  pc36at
[  120.541665][ T9428] comedi: valid board names for amplc_dio200 driver are:
[  120.543883][ T9428]  pc212e
[  120.544847][ T9428]  pc214e
[  120.545795][ T9428]  pc215e
[  120.546730][ T9428]  pc218e
[  120.547665][ T9428]  pc272e
[  120.548620][ T9428] comedi: valid board names for comedi_parport driver are:
[  120.551251][ T9428]  comedi_parport
[  120.552451][ T9428] comedi: valid board names for comedi_test driver are:
[  120.554662][ T9428]  comedi_test
[  120.555750][ T9428] comedi: valid board names for comedi_bond driver are:
[  120.557919][ T9428]  comedi_bond
[  121.172161][ T1156] team0 (unregistering): Port device team_slave_1 removed
[  121.237726][ T1156] team0 (unregistering): Port device team_slave_0 removed
[  121.389479][   T46] smc: removing ib device syz0
[  121.714652][   T60] smc: removing ib device syz2
[  121.733679][ T9466] 8021q: VLANs not supported on ip_vti0
[  121.790130][   T40] audit: type=1400 audit(1761823594.518:942): avc:  denied  { ioctl } for  pid=9472 comm="syz.3.1065" path="socket:[29614]" dev="sockfs" ino=29614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  121.819139][ T9336] veth0_vlan: entered promiscuous mode
[  121.828217][ T9336] veth1_vlan: entered promiscuous mode
[  121.878089][ T9336] veth0_macvtap: entered promiscuous mode
[  121.888121][ T9336] veth1_macvtap: entered promiscuous mode
[  121.899088][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.903962][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.911344][ T1146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.917346][   T40] audit: type=1400 audit(1761823594.648:943): avc:  denied  { read write } for  pid=9484 comm="syz.4.1069" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  121.917866][ T1146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.932143][   T40] audit: type=1400 audit(1761823594.648:944): avc:  denied  { open } for  pid=9484 comm="syz.4.1069" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  121.934239][ T1146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.945754][ T1146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.985586][   T40] audit: type=1400 audit(1761823594.718:945): avc:  denied  { create } for  pid=9486 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  121.993650][   T40] audit: type=1400 audit(1761823594.718:946): avc:  denied  { setopt } for  pid=9486 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  122.041688][ T9489] vcan0: entered allmulticast mode
[  122.065590][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.068979][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.123971][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.125385][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1071'.
[  122.126508][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.130063][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'.
[  122.370817][ T5939] Bluetooth: hci4: command tx timeout
[  122.527387][ T9516] netlink: 'syz.5.1078': attribute type 29 has an invalid length.
[  122.530323][ T9516] netlink: 'syz.5.1078': attribute type 3 has an invalid length.
[  122.532906][ T9516] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1078'.
[  122.743410][ T9533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1084'.
[  122.747175][ T9534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1084'.
[  122.800294][ T6079] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  122.828763][ T9543] syzkaller1: entered promiscuous mode
[  122.831289][ T9543] syzkaller1: entered allmulticast mode
[  122.970391][ T6079] usb 9-1: Using ep0 maxpacket: 8
[  122.973548][ T6079] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  122.976945][ T6079] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  122.982336][ T6079] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  122.985939][ T6079] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.991314][ T6079] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  122.994537][ T6079] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.995400][ T9554] netem: change failed
[  123.118620][ T9571] netlink: 'syz.5.1093': attribute type 1 has an invalid length.
[  123.121336][ T9571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.123617][ T9571] IPv6: NLM_F_CREATE should be set when creating new route
[  123.125971][ T9571] IPv6: NLM_F_CREATE should be set when creating new route
[  123.129050][ T9569] xt_TPROXY: Can be used only with -p tcp or -p udp
[  123.181188][ T9581] SELinux:  policydb version -2087706360 does not match my version range 15-35
[  123.183823][ T9580] xfrm0 speed is unknown, defaulting to 1000
[  123.184527][ T9581] SELinux: failed to load policy
[  123.204268][ T6079] usb 9-1: GET_CAPABILITIES returned 0
[  123.206570][ T6079] usbtmc 9-1:16.0: can't read capabilities
[  123.248672][ T9580] netlink: 'syz.5.1095': attribute type 4 has an invalid length.
[  123.251993][ T9580] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1095'.
[  123.264402][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1098'.
[  123.294547][ T9588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29460 sclass=netlink_tcpdiag_socket pid=9588 comm=syz.5.1099
[  123.412711][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  123.500671][   T54] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[  123.590228][ T6079] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  123.630640][   T54] usb 8-1: device descriptor read/64, error -71
[  123.750418][ T6079] usb 10-1: Using ep0 maxpacket: 8
[  123.753292][ T6079] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.756528][ T6079] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  123.759367][ T6079] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.763059][ T6079] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.766108][ T6079] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  123.768934][ T6079] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.778763][ T6079] hub 10-1:1.0: bad descriptor, ignoring hub
[  123.780817][ T6079] hub 10-1:1.0: probe with driver hub failed with error -5
[  123.783584][ T6079] cdc_wdm 10-1:1.0: skipping garbage
[  123.785267][ T6079] cdc_wdm 10-1:1.0: skipping garbage
[  123.788585][ T6079] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device
[  123.790585][ T6079] cdc_wdm 10-1:1.0: Unknown control protocol
[  123.871675][   T54] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[  124.000945][   T54] usb 8-1: device descriptor read/64, error -71
[  124.080412][ T6019] usb 10-1: USB disconnect, device number 2
[  124.111413][   T54] usb usb8-port1: attempt power cycle
[  124.441164][ T5933] Bluetooth: hci4: command tx timeout
[  124.450944][   T54] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[  124.471949][   T54] usb 8-1: device descriptor read/8, error -71
[  124.730816][   T54] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[  124.751802][   T54] usb 8-1: device descriptor read/8, error -71
[  124.870750][   T54] usb usb8-port1: unable to enumerate USB device
[  125.490446][ T5939] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  125.491147][ T5933] Bluetooth: hci0: command 0x1003 tx timeout
[  125.516408][   T54] usb 9-1: USB disconnect, device number 5
[  126.088312][   T40] kauditd_printk_skb: 124 callbacks suppressed
[  126.088323][   T40] audit: type=1400 audit(1761823598.818:1071): avc:  denied  { read } for  pid=9650 comm="syz.5.1117" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  126.091688][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'.
[  126.098196][   T40] audit: type=1400 audit(1761823598.818:1072): avc:  denied  { open } for  pid=9650 comm="syz.5.1117" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  126.110874][   T40] audit: type=1400 audit(1761823598.818:1073): avc:  denied  { ioctl } for  pid=9650 comm="syz.5.1117" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  126.116530][ T9651] binder_alloc: 9650: binder_alloc_buf, no vma
[  126.121283][   T40] audit: type=1400 audit(1761823598.818:1074): avc:  denied  { set_context_mgr } for  pid=9650 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  126.121313][   T40] audit: type=1400 audit(1761823598.838:1075): avc:  denied  { create } for  pid=9647 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  126.121342][   T40] audit: type=1400 audit(1761823598.838:1076): avc:  denied  { ioctl } for  pid=9647 comm="syz.4.1116" path="socket:[33900]" dev="sockfs" ino=33900 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  126.121368][   T40] audit: type=1400 audit(1761823598.838:1077): avc:  denied  { connect } for  pid=9647 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  126.121392][   T40] audit: type=1400 audit(1761823598.848:1078): avc:  denied  { call } for  pid=9650 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  126.194127][   T40] audit: type=1400 audit(1761823598.928:1079): avc:  denied  { create } for  pid=9655 comm="syz.5.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  126.225619][   T40] audit: type=1400 audit(1761823598.958:1080): avc:  denied  { read } for  pid=9660 comm="syz.4.1120" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  126.235982][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'.
[  126.285048][ T9664] netlink: 'syz.4.1120': attribute type 39 has an invalid length.
[  126.531065][ T5939] Bluetooth: hci4: command tx timeout
[  127.067937][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1126'.
[  127.177635][ T9694] veth0_to_bond: entered allmulticast mode
[  127.182450][ T9694] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1131'.
[  127.438119][ T9703] could not allocate digest TFM handle cryptd(blake2b-160)
[  127.511064][ T9731] comedi comedi0: dt2814: I/O port conflict (0x1,2)
[  127.513211][ T9732] comedi comedi0: dt2814: I/O port conflict (0x1,2)
[  127.541823][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'.
[  127.752777][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'.
[  127.949802][ T9746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9746 comm=syz.5.1146
[  127.957365][ T9746] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  127.962490][ T9746] overlayfs: overlapping lowerdir path
[  128.214950][ T1337] ------------[ cut here ]------------
[  128.217553][ T1337] workqueue: cannot queue hci_conn_timeout on wq hci3
[  128.219731][ T1337] WARNING: CPU: 1 PID: 1337 at kernel/workqueue.c:2257 __queue_work+0xd03/0x1160
[  128.222731][ T1337] Modules linked in:
[  128.224673][ T1337] CPU: 1 UID: 0 PID: 1337 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[  128.229537][ T1337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  128.233181][ T1337] Workqueue: events l2cap_chan_timeout
[  128.235256][ T1337] RIP: 0010:__queue_work+0xd03/0x1160
[  128.237050][ T1337] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 1e 15 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 4f e3 38 00 90 0f 0b 90 e9 b4 f5 ff
[  128.245033][ T1337] RSP: 0018:ffffc90006aafa38 EFLAGS: 00010086
[  128.247057][ T1337] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3ee8
[  128.249623][ T1337] RDX: ffff888029768000 RSI: ffffffff817b3ef5 RDI: 0000000000000001
[  128.252129][ T1337] RBP: ffff88805636c948 R08: 0000000000000001 R09: 0000000000000000
[  128.254645][ T1337] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  128.257119][ T1337] R13: ffff888024f63000 R14: ffff88805636c990 R15: ffff888024f63178
[  128.260049][ T1337] FS:  0000000000000000(0000) GS:ffff8880d6b0a000(0000) knlGS:0000000000000000
[  128.263723][ T1337] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.266547][ T1337] CR2: 000000110c249e11 CR3: 0000000050e1e000 CR4: 0000000000352ef0
[  128.269440][ T1337] Call Trace:
[  128.270519][ T1337]  <TASK>
[  128.271470][ T1337]  ? __cancel_work+0x2c8/0x370
[  128.273227][ T1337]  ? clear_pending_if_disabled+0xa8/0x210
[  128.275023][ T1337]  ? __pfx_clear_pending_if_disabled+0x10/0x10
[  128.276976][ T1337]  __queue_delayed_work+0x35b/0x460
[  128.278620][ T1337]  queue_delayed_work_on+0x1b5/0x200
[  128.280298][ T1337]  l2cap_chan_del+0x5a0/0x8f0
[  128.281806][ T1337]  l2cap_chan_close+0xfe/0xa30
[  128.283431][ T1337]  ? __pfx_l2cap_chan_close+0x10/0x10
[  128.285627][ T1337]  ? lock_acquire+0x62/0x350
[  128.287555][ T1337]  l2cap_chan_timeout+0x196/0x310
[  128.289534][ T1337]  process_one_work+0x9cf/0x1b70
[  128.291138][ T1337]  ? __pfx_process_one_work+0x10/0x10
[  128.293131][ T1337]  ? assign_work+0x1a0/0x250
[  128.294591][ T1337]  worker_thread+0x6c8/0xf10
[  128.296076][ T1337]  ? __kthread_parkme+0x19e/0x250
[  128.297682][ T1337]  ? __pfx_worker_thread+0x10/0x10
[  128.299299][ T1337]  kthread+0x3c5/0x780
[  128.300607][ T1337]  ? __pfx_kthread+0x10/0x10
[  128.302080][ T1337]  ? rcu_is_watching+0x12/0xc0
[  128.304119][ T1337]  ? __pfx_kthread+0x10/0x10
[  128.306067][ T1337]  ret_from_fork+0x675/0x7d0
[  128.308024][ T1337]  ? __pfx_kthread+0x10/0x10
[  128.310004][ T1337]  ret_from_fork_asm+0x1a/0x30
[  128.312076][ T1337]  </TASK>
[  128.313281][ T1337] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  128.316321][ T1337] CPU: 1 UID: 0 PID: 1337 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[  128.320292][ T1337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  128.323923][ T1337] Workqueue: events l2cap_chan_timeout
[  128.325653][ T1337] Call Trace:
[  128.326719][ T1337]  <TASK>
[  128.327962][ T1337]  dump_stack_lvl+0x3d/0x1f0
[  128.329977][ T1337]  vpanic+0x640/0x6f0
[  128.331696][ T1337]  ? __queue_work+0xd03/0x1160
[  128.333409][ T1337]  panic+0xca/0xd0
[  128.334627][ T1337]  ? __pfx_panic+0x10/0x10
[  128.336079][ T1337]  ? check_panic_on_warn+0x1f/0xb0
[  128.337712][ T1337]  check_panic_on_warn+0xab/0xb0
[  128.339535][ T1337]  __warn+0xf6/0x3c0
[  128.341225][ T1337]  ? __queue_work+0xd03/0x1160
[  128.343294][ T1337]  report_bug+0x3c3/0x580
[  128.345139][ T1337]  ? __queue_work+0xd03/0x1160
[  128.347224][ T1337]  handle_bug+0x184/0x210
[  128.349137][ T1337]  exc_invalid_op+0x17/0x50
[  128.350593][ T1337]  asm_exc_invalid_op+0x1a/0x20
[  128.352175][ T1337] RIP: 0010:__queue_work+0xd03/0x1160
[  128.354059][ T1337] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 1e 15 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 4f e3 38 00 90 0f 0b 90 e9 b4 f5 ff
[  128.360443][ T1337] RSP: 0018:ffffc90006aafa38 EFLAGS: 00010086
[  128.362972][ T1337] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3ee8
[  128.366272][ T1337] RDX: ffff888029768000 RSI: ffffffff817b3ef5 RDI: 0000000000000001
[  128.368922][ T1337] RBP: ffff88805636c948 R08: 0000000000000001 R09: 0000000000000000
[  128.371395][ T1337] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  128.374462][ T1337] R13: ffff888024f63000 R14: ffff88805636c990 R15: ffff888024f63178
[  128.377661][ T1337]  ? __warn_printk+0x198/0x350
[  128.379550][ T1337]  ? __warn_printk+0x1a5/0x350
[  128.381540][ T1337]  ? __queue_work+0xd02/0x1160
[  128.383417][ T1337]  ? __cancel_work+0x2c8/0x370
[  128.385390][ T1337]  ? clear_pending_if_disabled+0xa8/0x210
[  128.387711][ T1337]  ? __pfx_clear_pending_if_disabled+0x10/0x10
[  128.389933][ T1337]  __queue_delayed_work+0x35b/0x460
[  128.391579][ T1337]  queue_delayed_work_on+0x1b5/0x200
[  128.393317][ T1337]  l2cap_chan_del+0x5a0/0x8f0
[  128.394816][ T1337]  l2cap_chan_close+0xfe/0xa30
[  128.396354][ T1337]  ? __pfx_l2cap_chan_close+0x10/0x10
[  128.398334][ T1337]  ? lock_acquire+0x62/0x350
[  128.400255][ T1337]  l2cap_chan_timeout+0x196/0x310
[  128.402330][ T1337]  process_one_work+0x9cf/0x1b70
[  128.404463][ T1337]  ? __pfx_process_one_work+0x10/0x10
[  128.406607][ T1337]  ? assign_work+0x1a0/0x250
[  128.408503][ T1337]  worker_thread+0x6c8/0xf10
[  128.410417][ T1337]  ? __kthread_parkme+0x19e/0x250
[  128.412504][ T1337]  ? __pfx_worker_thread+0x10/0x10
[  128.414573][ T1337]  kthread+0x3c5/0x780
[  128.416115][ T1337]  ? __pfx_kthread+0x10/0x10
[  128.417650][ T1337]  ? rcu_is_watching+0x12/0xc0
[  128.419214][ T1337]  ? __pfx_kthread+0x10/0x10
[  128.420697][ T1337]  ret_from_fork+0x675/0x7d0
[  128.422185][ T1337]  ? __pfx_kthread+0x10/0x10
[  128.423891][ T1337]  ret_from_fork_asm+0x1a/0x30
[  128.425530][ T1337]  </TASK>
[  128.427567][ T1337] Kernel Offset: disabled
[  128.429414][ T1337] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:26:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000004 RBX=0000000000000003 RCX=ffffffff95a99678 RDX=0000000000000005
RSI=0000000000000003 RDI=ffff8880244254a8 RBP=ffff888024424900 RSP=ffffc90005bd73c8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000078 R11=0000000000000001
R12=ffff888024425430 R13=ffff8880244254a8 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff8198c91a RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055558bc1e808 CR3=00000000511a6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003072 656c6c616b7a7973
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb493c12fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb493c12fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb493c12fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb493c12ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb493c1307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb493c1315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 456585f5ab1af0fa 80ae60b00c58b3e9 a736655c8877b53e 83d654530b356120
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dae9ebfe7f2732ae ae96ab2380121509 71725e310cec0004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5b200d289af95af ad76d98e87506f75 0274703f7b265233 84ba85456585f5ab
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85295455 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc90006aaf3a0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=000000000000006d R14=ffffffff9add6700 R15=ffffffff852953f0
RIP=ffffffff8529547f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6b0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c249e11 CR3=0000000050e1e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5b610210 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec0812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec0812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec0812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec0812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec081307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec081315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000135ebb RBX=0000000000000002 RCX=ffffffff8b6052a9 RDX=0000000000000000
RSI=ffffffff8da2a287 RDI=ffffffff8bf06e40 RBP=ffffed1003bd2920 RSP=ffffc90000187de8
R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001
R12=0000000000000002 R13=ffff88801de94900 R14=ffffffff9081f6d0 R15=0000000000000000
RIP=ffffffff8b603d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6c0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c33af02 CR3=0000000058cfd000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec0812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec0812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec0812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec0812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec081307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec081315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 090008aa1414ac00 0200080018000000 0900080000000600 090008ffffffff00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec151d100 00007f7ec09b7460 00007f7ec09b0004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ec09b74b8 00007f7ec09b74b0 00007f7ec09b74a8 00007f7ec09b74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88806a73b580 RCX=ffffffff81b11623 RDX=ffff88801da84900
RSI=ffffffff81b115fd RDI=0000000000000005 RBP=ffffc90000157cf8 RSP=ffffc90000157ba0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e5e
R12=1ffff9200002af7c R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4e76b1
RIP=ffffffff81b115ff RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6d0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055558bc395c8 CR3=000000003ae1f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fe80ff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056198d4b0970 000056198d4b0970
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffd4fd9a7d0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0330df1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0330df1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e754f4645425d05 1a474f475a054149
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 454648051a041a4f 494b5a594f474b44
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffd4fd9a7d0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000