last executing test programs:

3m29.035603894s ago: executing program 32 (id=107):
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3100f127f87261320e95ff7f000000000000000008000a006898736f85a3bf7e0fd72753ed29eb4a7c780f1a1d2f5d4fa9c8ad6f84b74a1fcf86728686edac6a1b3b7288380e01d3de09ab7bde8e5eb6203d2a4ae2ffd90e13b57619604739437c703024774241", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="0c000b00030000c002000040"], 0x30}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x116090, &(0x7f0000000180)=ANY=[@ANYRES64=r0])
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01008b04e4ed907c261c0100000008000200020000000800010001"], 0x29}, 0x1, 0x0, 0x0, 0x800}, 0x20020000)
r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r5, <r6=>0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x6, 0x1c088fb6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}})
chdir(&(0x7f0000000340)='./file0\x00')
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

3m5.039095853s ago: executing program 33 (id=479):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x6, 0x7fff0006}]})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r2 = openat$selinux_status(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
read(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg(0xffffffffffffffff, 0x0, 0x4044)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x104)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES64], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5)
close_range(r0, 0xffffffffffffffff, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r8, 0x0, 0x33, 0x0, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$USBDEVFS_CONNECTINFO(r10, 0x40085511, &(0x7f0000000340))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x5736e296, 0x5, r3, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, @void, @value, @void, @value}, 0x50)
close_range(r1, r0, 0x0)

2m54.074112919s ago: executing program 34 (id=620):
keyctl$set_timeout(0xf, 0x0, 0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
mmap(&(0x7f0000b2e000/0x4000)=nil, 0x4000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28)
writev(r4, &(0x7f00000016c0)=[{&(0x7f00000006c0)='Xw', 0x2}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28)
recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}, 0x0)
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x22, 0x1, 0x0}, &(0x7f0000000000)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r6=>0x0})
syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r2)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4850}, 0x4000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB='\b\x009\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2, 0xfff1}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010700000000000000002e"], 0x3c}}, 0x0)
syz_usb_connect(0x6, 0x6a, 0x0, 0x0)

2m49.264422954s ago: executing program 5 (id=672):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x74, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x6}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}]}, 0x74}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1a, &(0x7f0000000080)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x4, 0x8, 0x0, 0x1, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0x8, 0x75, &(0x7f0000000200)=""/117, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x3, 0x1, 0x2, 0xb}, {0x0, 0x5, 0x3, 0x2}], 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r5, 0x64e10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24064090}, 0x4004002)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r5, 0x25, 0x6, @void}, 0x10)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)

2m49.18393777s ago: executing program 5 (id=673):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffffc, 0xfffffffd}, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01}, 0x26}}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'syzkaller0\x00', {}, 0xdd})
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="01000000537645df2a29a1"])

2m49.12514991s ago: executing program 5 (id=674):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60000000000000000855a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000432065000000000000000200020000000800010047504c003b30908428ad94b0de93dcd0fa141d7af159aabf631ba3137ff3167903b26e5260ba69726b0869131a040d29babf4f017f8bac52792c24ab9ae0e0a1854129052ec91e3887391f3e4254ecfda17f270903b081ee28964214b6f70dfee4bbcee89de5b96ebdc4439ee001ae9a"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x20)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
pipe2$9p(&(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r9 = dup(r8)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
open(&(0x7f0000000340)='./file0\x00', 0x300, 0x69)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x7ff, 0x7, 0x9, 0xf}}}}]}, 0x48}}, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58)
r10 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newchain={0xd04, 0x64, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0x3, 0x6}, {0xffe4, 0xfff2}}, [@f_rsvp={{0x9}, {0xcd4, 0x2, [@TCA_RSVP_ACT={0xbc, 0x6, [@m_skbmod={0xb8, 0x10, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}]}, {0x7f, 0x6, "a379fc349814a544749677ff76d4654c1d177d9e700e121988765f834650521674a0b68521c9cc9dee100c5c41bfa39d57eead70ba6709fc85f20e123f6a4d9b44f9518d921d7e2ef5257f8eb04657192ee49b736df9ea972d5e7d5fe33c588cafffd8d7f4b6b98bdcf7f4da9cdafe394d871e5ae454a23514158e"}, {0xc, 0x7, {0x0, 0x85abbd9211dea501}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffff313, 0xfffffeff, 0x0, 0xff, 0x4, 0x7, 0x7f, 0x7, 0x7fffffff, 0x3, 0x5, 0x8, 0xba, 0xe6b5, 0x8, 0x5, 0x6, 0x0, 0x6, 0x0, 0x2, 0x4f74, 0x0, 0x9, 0x3, 0x0, 0x7, 0x971, 0x7b3e, 0x1, 0x4, 0x7, 0x1, 0x9, 0x9, 0x100, 0x1, 0x7ea, 0x401, 0x6, 0x1, 0x6, 0x7, 0x100, 0x6a6a, 0x10000, 0x100, 0xf, 0x6, 0x4, 0x2, 0x100, 0x0, 0x5, 0x9, 0xf, 0x3, 0x0, 0x4, 0x4, 0xd3, 0x400, 0x80000001, 0x4, 0x264, 0x4, 0x1, 0x9, 0x3, 0xb1a9, 0x6, 0x3, 0x1, 0x4, 0x6, 0x3, 0x2, 0x3, 0xc19, 0x4aa7, 0x101, 0x3, 0x0, 0xfff, 0xa, 0x5, 0xff, 0x9, 0xfffffffd, 0x7, 0xffffffff, 0x1, 0x9, 0x8000, 0x2, 0x5, 0x6, 0xd4e, 0x10, 0xba4, 0x5, 0xce0d, 0x3, 0x3, 0xff, 0x2, 0x401, 0xfffff000, 0x4, 0x0, 0x8, 0x4, 0x8, 0x401, 0x800, 0x7, 0x7, 0x5, 0x1, 0x3, 0x2, 0x6, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x2, 0x4, 0x6, 0x9, 0x8722, 0x200, 0xb99, 0x8, 0x3, 0x40, 0x200, 0x4, 0x1, 0x77, 0x6, 0x7, 0x7, 0x10001, 0x7, 0x1, 0x5, 0xc8, 0xfb, 0x7, 0x9, 0x60, 0x9b, 0x5, 0x1, 0xc, 0x94, 0x300, 0x1, 0x2, 0x4, 0x4, 0x4, 0xfffffffe, 0xb, 0xb, 0x80000000, 0x1, 0x7, 0x5, 0x4, 0x3, 0x12, 0x1ff, 0x8, 0xffff0001, 0x5, 0x0, 0xa, 0x2, 0x41, 0x9, 0x7, 0x8, 0xff, 0x61, 0x2, 0x7fff, 0xe, 0x1, 0xa, 0x0, 0x0, 0x79, 0x49, 0x4000, 0xffff, 0x8000, 0x8, 0x5, 0x1, 0x8, 0x100, 0x9, 0x8, 0x1, 0x4, 0x7b, 0x2, 0x2, 0x400, 0x5, 0x78c, 0x1, 0x15ae476c, 0x4, 0x5, 0x5, 0x1, 0x2, 0x0, 0x8000, 0x6, 0x9, 0x9, 0x7fffffff, 0x2, 0x7, 0x8bdd, 0x3, 0x0, 0x8, 0x0, 0x6, 0x9, 0xc84, 0x3, 0x2, 0x0, 0x9, 0x2, 0x3ff, 0xfffffffd, 0x6, 0x8, 0x9, 0x0, 0xffff8001, 0x4, 0x9, 0x0, 0x1, 0x9, 0xfffffff6, 0x4]}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1000, 0x3, 0x2c8, 0x3, 0x17efd98b, 0x7, 0x0, 0x8001, 0x81, 0x1, 0x9, 0x9, 0x80000000, 0x7, 0x2, 0x400, 0x10001, 0x2, 0x9, 0xe, 0x0, 0xc, 0x1, 0x100, 0x8, 0x9, 0x0, 0x1, 0x6, 0x2, 0x5, 0x7, 0xbffe, 0x8c1a, 0x3ff, 0x5, 0x9, 0x6, 0x9, 0xd5, 0x9, 0x7, 0x7fffffff, 0x7, 0x0, 0x9, 0x66f, 0x2, 0x7b61dc15, 0x0, 0x4, 0xfffff001, 0x7, 0x4, 0x4, 0x2, 0x40, 0x6, 0x8, 0x1, 0x1, 0x200, 0xfffffffc, 0x7fffffff, 0x4, 0xf, 0x200, 0x5, 0x1, 0x1143, 0x2, 0x0, 0xc89c, 0x9, 0x3, 0x9, 0x5, 0x6, 0x81, 0x80000000, 0x200, 0x4, 0x4, 0xc66b, 0x0, 0x1, 0x0, 0x1, 0x3, 0x80000000, 0x8, 0x3, 0x2, 0x61f, 0x1554c, 0x1, 0xfffffffc, 0xb, 0x0, 0x9, 0x7fffffff, 0x1, 0x3, 0x7, 0xfffffffd, 0xec6, 0x9, 0x7, 0x4, 0x1ff, 0x7, 0x5, 0x7ff, 0x0, 0x6, 0x6, 0x733, 0xe, 0x9, 0x3, 0x0, 0x2d, 0x2, 0x2, 0x4, 0x7fffffff, 0x7ff, 0xffffffd8, 0x6, 0x6, 0xb, 0x1, 0x8, 0x3, 0x6, 0x401, 0x8, 0x6, 0x1, 0x40, 0x80000001, 0x1, 0x8, 0x1000, 0x3, 0xce79, 0x1, 0x9, 0x8, 0x80000001, 0x3, 0x0, 0xc78, 0x5b, 0x0, 0x2, 0x401, 0x8, 0xf81, 0xfff, 0xfff, 0x4c20, 0x8, 0xb, 0x3, 0x0, 0x8, 0x1, 0x5000000, 0xf, 0x3, 0x8aa, 0xffff0000, 0x39, 0x68, 0xc, 0x5, 0x8000, 0x6d, 0x401, 0x81, 0xdb36, 0x3, 0x5, 0x0, 0x9, 0x8, 0x4, 0x3, 0x1000, 0x7, 0xd45, 0xffffffff, 0x8, 0x81, 0x50, 0xaca, 0x3, 0x9, 0x5, 0xfb1, 0x400, 0xb, 0x0, 0x81, 0x400, 0x6, 0x7, 0xfda6, 0x1, 0x3bc81af, 0x5, 0x657, 0xfff, 0x7ff, 0x3, 0xa533, 0xbd, 0x8, 0x27ca, 0x0, 0x1, 0x7c, 0x6, 0x0, 0xc4, 0x0, 0x8, 0xfff, 0x0, 0x80000000, 0xfffffff9, 0x80000001, 0x7fff, 0x8, 0xb5, 0x4, 0xf5e, 0x6, 0x7fffffff, 0x4abb, 0x44, 0x3ff, 0xb, 0x547, 0x10000, 0x3, 0xe42, 0x7fffffff, 0x7, 0xa, 0x1, 0x1, 0x0, 0xfffffffc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x5, 0xffff, 0xf, 0xfff, 0x7, 0xf547, 0x7, 0x7fff, 0x26, 0x0, 0x9, 0x8, 0x8, 0x3, 0x10, 0x8, 0x6, 0xa, 0x0, 0x80000000, 0x6dc, 0x7, 0x0, 0x5, 0xde61, 0x3ff, 0x3, 0x0, 0xaa5, 0x0, 0x9, 0xfff, 0xf58c, 0x7, 0x5, 0x5, 0xe1c6, 0x100, 0x7, 0xfffffff9, 0x4, 0x2, 0x5, 0x1, 0x6, 0x1, 0x7, 0x9, 0x4, 0xc566, 0x6, 0x1, 0x2, 0x9, 0x9, 0x400000, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0xa51, 0x59, 0x7e2991e7, 0x8, 0xa, 0x7, 0x2, 0xf, 0x200, 0x9, 0x10, 0x8, 0x8, 0x0, 0x7, 0xd3ec, 0x10, 0x3, 0x8, 0xdc, 0x2, 0x80, 0xfffffff9, 0xeb6d, 0x2, 0x2, 0x2c664e46, 0xfffffc00, 0x0, 0xe, 0xb, 0x7fff, 0x400, 0x7c, 0x4, 0xc, 0x0, 0x594, 0x26ce, 0x40, 0x5, 0x3, 0x1, 0xa, 0x6, 0x80000000, 0x1, 0x80000001, 0x6, 0xffff, 0x2, 0x1ff, 0x80, 0x10000, 0x5, 0x9, 0x17c40000, 0xfffffff3, 0x0, 0xf, 0x0, 0x100, 0xe, 0x2, 0x5, 0x21, 0xff, 0x4, 0x8, 0x5, 0x6, 0x3, 0x6, 0x800, 0x835d, 0xa, 0x5, 0x7, 0xf, 0x7, 0x4, 0xff, 0x101, 0x5, 0x2, 0xcf91, 0xfff, 0xfffffffe, 0x4, 0xffffff83, 0x10, 0x8, 0xfffffffe, 0x3, 0x7fffffff, 0x0, 0x7, 0x9, 0x7, 0x1, 0x3df, 0x32, 0x5, 0x8001, 0x4, 0x2, 0x8, 0x3, 0xf, 0xfc0, 0x5, 0xf, 0x4, 0x1ff, 0x4, 0x0, 0x7, 0x7, 0x86b8, 0x10, 0x1000, 0x0, 0x4a2c, 0x6, 0x3, 0xff, 0x1, 0x4, 0x79, 0x80000001, 0x9, 0x7fffffff, 0x1, 0x7ff, 0x4, 0x8, 0x7, 0x4, 0x2, 0x5bd, 0x1a2, 0x6, 0x2, 0x9, 0x2, 0xff, 0x554b, 0x3f, 0x7ff, 0x32020926, 0xa10a, 0x80000001, 0x1, 0x6, 0x10000, 0x3, 0x4, 0x200, 0x9, 0x9f, 0x133d, 0x1000, 0x6, 0xa, 0x8, 0x6d99765f, 0x40, 0x7, 0x3, 0x10b, 0x6, 0x8001, 0x7aa5, 0x0, 0x4, 0x2, 0x8, 0x4, 0x4, 0xca, 0x2, 0x8000, 0x6, 0x80, 0x40, 0x7ff, 0xde9, 0x4, 0x8, 0x2a, 0x198c, 0x8, 0xffffff80]}]}]}}]}, 0xd04}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)

2m48.234797693s ago: executing program 5 (id=690):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffe1, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006000600800a0000100004"], 0x34}}, 0x0)

2m48.133321311s ago: executing program 5 (id=691):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000030c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@authinfo={0x12, 0x84, 0x6, {0x6}}], 0x18, 0x5}], 0x1, 0x20040014)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) (async)
sendmmsg$inet_sctp(r0, &(0x7f00000030c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@authinfo={0x12, 0x84, 0x6, {0x6}}], 0x18, 0x5}], 0x1, 0x20040014) (async)

2m48.123094835s ago: executing program 5 (id=694):
r0 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0)
ioctl$I2C_SMBUS(r0, 0x705, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0})
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x29, 0x8, &(0x7f0000000000)={0xb, "99c8e14f09bb2733b6ea34de6919672690016c0a5ec5421f8c4b0e88dba60eb498"}})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x30, 0x22, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0)
accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000)
close(r0)

2m34.655138495s ago: executing program 6 (id=844):
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x104, 0x8, 0x7, 0x1ff], 0x0, 0x0}, 0x50) (async)
capget(0x0, &(0x7f0000000180)={0x0, 0x2}) (async)
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f00000005c0)="ccf3930fff0adc8d30e77b4aab1e9d5c5e214a1efe6cf37d3e57dedc0b490b28b67f9ae2fc0fc70103cdf9a06be23f5c158f9acd6fce8686c7df1e5d4cddc56beeca4da4367583f7f129d172610c8b24b7e867fa5f5194e69e9076eee608129f6fbb66339e4676d59ee31f8064248dac0adec3a9ebc7795ab536f55a81ae5f76fa1fb8a8966702832e9d107329c295118e9211ca8fbf8869d63f2d28c2a08e570d551474e7b0a256064504586083d4b56cadc65f670df2e30c20ead5ac7aa91bf9d69cdbd6441f6c1b0a82660f14d066668ecf04edf58d51544f0c9d8c782ac9bb6c9c5c", 0xe4, 0xfffffffffffffffb) (async)
r1 = add_key$user(&(0x7f0000000580), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000340)="c4886ea635036dc713b1109a5c73ffdc44d1ad0c6eef6d147791ebdd18457344e8b0b43000852da1e4ecdf8f9976cf64f53f67ef6ea6d891160848ffe5d7d253420aad88f19fa41a88fd58e6a699fb3a05f00a0d549ce67ceed9a6c2057e8649514340eab96bd3dbe77d8cddd2748436cb721635ff593fbb", 0xfffffffffffffe73, 0xfffffffffffffffd) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x143000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f0000000100)="670f09b9050100400f320f300fc75da5daa7e600000066ba2100ed0fc72e66b81a008ed0c4c1e161f1640f09", 0x2c}], 0x1, 0x3e, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000080)=0x20009, 0x4)
sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x30, r5, 0x0)
read$watch_queue(r6, &(0x7f0000000480)=""/172, 0xac) (async)
sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x7, &(0x7f0000d3f000/0x2000)=nil) (async)
keyctl$update(0x2, 0x0, &(0x7f0000000700)="454333b7be8f9e393a8930fd5e5c64829e516a2b28d29b680fa4c824049dc68904c6d251766babfeaf3771b353eb3310b470edfea52448c0ed6cca7aadab82b29d1e04a16b81d14782691aad24a4", 0x4e)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) (async)
fcntl$lock(r7, 0x7, &(0x7f00000006c0)={0x1}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000040)={0xffbf}) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2m34.505235172s ago: executing program 6 (id=845):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x80041285, &(0x7f0000001080))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) (async)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x40810)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0}) (async)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000)
writev(r3, 0x0, 0x0) (async, rerun: 64)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) (rerun: 64)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0xa}}, @void, @void}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x38}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5598013e1f5b8c025e87068e25e0799d"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3d}, @NL80211_ATTR_PMKID={0x14, 0x55, "29b662e34f3242618ed88ca47020b741"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x7aebe2bc02563e92) (async, rerun: 32)
r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
ioctl$BLKPG(r8, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x1000, 0xd}}) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1e0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000816, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
truncate(0x0, 0x206b12) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa201f, 0xa3) (async, rerun: 64)
write$cgroup_int(r9, &(0x7f0000000200)=0x3, 0x12) (rerun: 64)

2m34.503887653s ago: executing program 6 (id=847):
r0 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES32=r0, @ANYBLOB="f11c02000a0002"], 0x28}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$inet(0x2, 0x80002, 0x85) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x43028200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3f, 0xa8, @random="5145baad7144704390a9442828a46cc43b519ca24cf6f6a18de7433609474c78ae8ca6c579500d957188e73e782e8399d68f8ddff8cd3c7b7ec616"}]}, 0x64}}, 0x801) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getpeername$tipc(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="dd622551b5538183def4065d0ce6b412e11becdced823726fe1811101511aa5e552f077baa7f5c35ebb5254afe1a07f656006e7dc7f67e", @ANYRES16=r4, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000400010000000500030000000000"], 0x3c}}, 0x0) (async)
recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1, &(0x7f00000000c0)=""/121, 0x79}}, {{0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/111, 0x6f}], 0x2, &(0x7f0000000400)=""/11, 0xb}, 0x6}], 0x2, 0x40000163, &(0x7f0000000340)={0x0, 0x3938700})

2m34.44527633s ago: executing program 6 (id=848):
mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
chdir(&(0x7f0000000080)='./file0\x00') (async)
chdir(&(0x7f0000000080)='./file0\x00')
syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x20000000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
landlock_restrict_self(0xffffffffffffffff, 0x0) (async)
landlock_restrict_self(0xffffffffffffffff, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x202c00, 0x20)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard')

2m34.384705038s ago: executing program 6 (id=850):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000001240)="8f", 0x1, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) (async)
r1 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000380)}, 0x640480fd) (async)
sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000029c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0xfffffffffffffffa)
syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') (async)
syz_fuse_handle_req(r2, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x100000000000, 0xfffffffffffffffa, 0x0, 0x200, 0x38820000, {0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) (async)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x5e5, 0x10100}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) (async)
io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) (async)
io_submit(0x0, 0x4, &(0x7f0000000840)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000340)="287a51b2ef64079da21a3aa4ecaa05915adffa009ba06a6f55023fb6d6686af2bc7b9945", 0x24, 0x9, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0xcf6, r0, &(0x7f0000000480)="7cf0498ac22078ccb9680d408f17e6ac254bda", 0x13, 0xfff, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x1ff, r0, &(0x7f0000000980)="77e1c7c6465635608b86085c37ebb4b44ff05ef3173665dab2f203342cd60cd3bbe60035723172fca9bbbf0087ca6005299588fd6fb946a96d1f6a7b4227ed344b55799cac215c30b43f67c63abb3deb5214f1a5c0cdd26a2a25de0d6ff9761bbe84586c79055ecccbdd69a2c29aa1c4e78880e4c1006ba86b3042a3625db66e149bbdb24b5b63cb1d9ba2d7ff5c464e3d5c02ff78ca0b2bfe295295c391dde1488d2510e85624ca613a518aee4194b88fb0ea0534f016e45f9f2ef4e63a62c408811dacf69b82a9e4d14d129d", 0xcd, 0x8000000000000001, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f0000000a80)="8059f883421eb66baaae18b59f83dcfcf2736427dc766299e970bebe93053c08e8d208bf37555c6e12b039ebae5509a01fca3bb88b66ec5639da43775fbe102c002da4e225364e1b06fd744116a73e9d7e94bee46db56611ea627d84134a9ff8510775930f2deb2ee0c00be15f8039305b5f9a9ca8aed194c8c5c22b4f632d3fc35f749d25e8afc8905b0988b4d52421a9ecada06e9b46cf64e414329e75433c60eb21313d1259ae888c550680e21e885885fd63d818e57f2fe05f9e9d1dbceb4110816526208ef80ee8", 0xca, 0x200, 0x0, 0x1, r8}]) (async)
r9 = socket$igmp(0x2, 0x3, 0x2)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x63) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) (async)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x1}], 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount(&(0x7f00000002c0)=@filename='./file0/../file0/file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ufs\x00', 0x0, 0x0)

2m33.103184209s ago: executing program 35 (id=694):
r0 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0)
ioctl$I2C_SMBUS(r0, 0x705, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0})
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x29, 0x8, &(0x7f0000000000)={0xb, "99c8e14f09bb2733b6ea34de6919672690016c0a5ec5421f8c4b0e88dba60eb498"}})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x30, 0x22, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0)
accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000)
close(r0)

2m32.504871892s ago: executing program 6 (id=862):
r0 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f00000003c0)={[{@pids_localevents}, {@memory_hugetlb_accounting}, {}, {@pids_localevents}, {@favordynmods}, {}], [{@euid_eq}, {@hash}, {@audit}, {@uid_lt}]})

2m32.488922741s ago: executing program 36 (id=862):
r0 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f00000003c0)={[{@pids_localevents}, {@memory_hugetlb_accounting}, {}, {@pids_localevents}, {@favordynmods}, {}], [{@euid_eq}, {@hash}, {@audit}, {@uid_lt}]})

2m19.075014287s ago: executing program 1 (id=1076):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x14, 0x38, &(0x7f0000000000)="d0d50726cdc9f8858971c91ad36a1024ad3b8d6f", &(0x7f0000000080)=""/56, 0x1, 0x0, 0xbc, 0x8, &(0x7f00000000c0)="e3b42bf28a0e24c1bf8d0963c2d0d6f4c11f761474d449978056f92af1a9de26e49f32ace31fb2901539944a9a48174d9ca58de49a586e1a0d1ae85e3d47ee9f430a6437b47210b82742dfb7f4d4a8091b09fa8ae2439bc7719592a5eba0289be67ce1b3f966a76a765f091f360f09151ae1bb5bcadfd1f920d53466a1baafe8c444d6370dd2034f745c4016102cdba77571c511396443f44c03ffaed376167bce98480c2af4a61d4b2406512ffe48419bb16793fade7f114c20161d", &(0x7f0000000180)="b04c2872cdf3581a", 0x6, 0x0, 0xffffffff}, 0x50)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x4, 0x4)
sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

2m19.074815362s ago: executing program 1 (id=1077):
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='sysv\x00', 0x200000, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1000000001144101"], 0x10}}, 0x0)

2m18.994760028s ago: executing program 1 (id=1078):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x2, 0x7, 0x3231564e, 0x1, 0x0, [{0x4, 0xfffffffe}, {0x3, 0xfff}, {0x7, 0x3}, {0x8001, 0x6}, {0x6, 0xaf}, {0x1, 0x7}, {0x10001, 0xfffffff9}, {0x5, 0x6}], 0x3, 0x4, 0x3, 0x3, 0x7}})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0xfffffffffffffe6a)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x8, 0x8e7, 0x2})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffe0}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x4e}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x48602, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300))
pipe2(&(0x7f0000000040), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

2m18.440933657s ago: executing program 1 (id=1089):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6946c9832508c"})
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3253e888feae6cc381ecb4a64085e24c48cf5ae9c5125d58d78ab2b70ec9216b42cf69b0cd34aa9a9b8e32e1841f19a7d38ce8de4d6d24b1a239ccfbb0935e4db5f50c9b8ebdf158eb582b914857522de035110521a268d3fa0888ebd65ab713338b2fa1029851d62af03f2bcf6034cf0287f10c84c967bae32a79fbf90122d41a622c0fa8a0fae4ffa55df5ec7ebb0708dbb6148f2cde6d128018a0efa8598fa29ac80c6642d52c6f6b979e8fe5e1fbe7615ca1bc31f2bc541b3f67f129a490900000004ab65b661139a2d66fbe14888b28fb681b11cd33e07a04cee7fa46193218553971e41d0eaed454f6b4520963c5d21b889764986530174051ddeca7547b3aeb0ed720e20099fbeec90859a9f22b9229f72fb45e62fb2c7048099eb484edac92717591a6467c38af94b14d4bf366d5fb232c24bc8a9d5361dd979a98ff5ea6a331cf27110b4457301454119173622e1ddef43e79842b3dcbce701ec9195770fd820823cd45fe00baa87d3000000000000570d", 0x223}], 0x1)
r1 = socket(0x11, 0x80a, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000080))

2m18.39872485s ago: executing program 1 (id=1090):
openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1cff0000001aba5607a63d1c5e9784d1c8d686f65a92a9d4327178b619eaf906d1d41b7ea1bdc8aaee64846c74784177450ac92b6f7ce9d3d80ba4878efad90eab59806ee2079f31aa36974e9ffe5581a0bc7818c9cbf928ca740dd042a9574e93ddad1921d7ba29813ee8e47a52dd1a4481a21bdcb90c8194fef53fab46a7f55a45c79bf95987b70667c845a36d578c2f313d6541db29887728a18eac0232f429f51ad5"], 0x1c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='binder\x00', 0x1210000, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4)
getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/9, &(0x7f0000000380)=0x9)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$NFT_BATCH(r1, 0x0, 0x800)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005800128009000100766c616e000000004800000000070000000c00010007000000410080000c000100000000000800000006000100406a000006000500c55400000c000200180000001b00000008000a00"/100, @ANYRES32=r5, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

2m18.222120082s ago: executing program 1 (id=1095):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_delete(r1)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
mkdir(&(0x7f0000000040)='./bus\x00', 0x92)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
timer_create(0x2, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000240))
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000640)=[{{&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x4000000)
listen(r3, 0x9)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
rt_sigsuspend(&(0x7f0000002740)={[0x5]}, 0x8)
read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000440)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}}}, &(0x7f0000000540)=0xe8)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000300)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r6}}]}})
mount$fuseblk(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x800, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r5}}, {@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@obj_user={'obj_user', 0x3d, '\xc8'}}, {@fowner_lt={'fowner<', r6}}]}})
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000080)={0x18, 0x7, 0x7f, 0x200})
write$cgroup_int(r7, &(0x7f0000000040)=0x3, 0x12)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c00000014000380100003800c000164fc0001000000000018000180140002007665746830"], 0x40}}, 0x0)

2m7.445124944s ago: executing program 7 (id=1226):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(r0, r1, 0x0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x400180, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x4, 0x101, 0x2, 0x48000, 0x40})
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
sendfile(r3, r2, &(0x7f00000000c0), 0x8001)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x3, 0x2, {0x0, 0x0, 0x4, 0x1, 0x8}, 0x8})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000180)="b626a9a5c53fd718807148f0aff0dba8355f57dbfc54cbfff106b1c15a57ea89ce18a87affe12f", 0x27, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, <r8=>0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000400)={0x0, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000540)={&(0x7f0000000440)="2b785a2c1372fbc4fa88a66ca1d3b9b26fd4aaf2772a48cf80538d4fd095c3b150c2238b3555b483e1d57f17a9326364ad2fac7812fad8b1a1de790b26334613bfeb289ca087115b0b90cd0b6ce1465a61deab90ac17cbba60206aefdddcf396d731b88bd0769bd168d885bc03a7cf442bd8f64d2bdebddbe34e1b165c3a0a908df43fc26c332e3195b440a59b2ed4d684bf88f9176d1ac26ddba8e3007e6e96aa2bbe29357e939f550d98eb248c2e78d26e5feacbe7384391ac28e2b355c591ae31204eae0af0b1ae5c8bc5fb2ea7f548577eff2188365d", 0xd8, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[<r11=>0x0, 0x0, <r12=>0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x99999999})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000800)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}], &(0x7f0000000780)=[<r13=>0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x1, 0x3, 0x8})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[{}, {}], &(0x7f0000000980)=[<r14=>0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000bc0)={&(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[{}], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, <r15=>0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x1, 0x7, 0x4})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000cc0)={&(0x7f0000000c40)=[<r16=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x9, 0x0, 0xc0c0c0c0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000e80)={&(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[{}, {}], &(0x7f0000000e00)=[0x0, 0x0, <r17=>0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0], 0x2, 0x5, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000f80)={0x200, 0x9, &(0x7f0000000580)=[r4, r5, r6, 0x0, r7, r8, 0x0, r9, r10], &(0x7f00000005c0)=[0x63a, 0x20000000, 0x4, 0xfffffffa, 0x8, 0x8000], &(0x7f0000000f00)=[r11, r13, 0x0, 0x0, r14, r15, r16, r17], &(0x7f0000000f40)=[0x5], 0x0, 0x8000000000000001})
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000001100)={&(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[{}, {}, {}, {}, {}, {}], r12, 0x0, '\x00', 0x6, 0x6})
openat$cgroup_devices(r1, &(0x7f0000001140)='devices.deny\x00', 0x2, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000001180)={0x18, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff7})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_SERVICE(r18, 0x0, 0x483, &(0x7f0000001200), &(0x7f0000001280)=0x68)
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000001340)={0x0, 0x0, <r19=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000001380)={&(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x4, r19, 0xe0e0e0e0})

2m7.444409431s ago: executing program 7 (id=1227):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') (rerun: 64)
pwritev(r3, &(0x7f0000000500)=[{&(0x7f00000005c0)="301baa478a3507ff3f6a5248a25fc04d79ef0efc19ca6beba4c031ce3223c394b6ea232afc309ff91c9785b82c620900000000000000a7b3e252c4d89692bbc37f995070d605000000e9ff00000000000000c5ed3b187444ffffff695eee272813d84e54945c62246c84222f6e1a4acf39702f1ac6dec0579277ed5b7482b05f88ab2f21155058bb48c2792a0785bc1f79c3f7204ff8c5e43a1c89c2e6c1bdaaab840eeb8a3de8cc3cd9ca5b2fde9541d906f2dfe7f3f53686c61afef4720f70f2c505ea00", 0xc5}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x100) (async)
syz_socket_connect_nvme_tcp()

2m7.383551059s ago: executing program 7 (id=1228):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trusted: '], 0x32, 0xfffffffffffffffc) (async)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trusted: '], 0x32, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

2m7.311327933s ago: executing program 7 (id=1229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000280)='./file0\x00')
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180)=0x1, 0xb, 0x3) (async)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180)=0x1, 0xb, 0x3)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
pwrite64(r0, &(0x7f0000000340)="505f3d14e584bd62c21873ba9716b8229a8d2646a358c18f155960b9b9de3d67317f542e6734c394bf5f8f6c579ba105df60a841e9e7724a4abbfae67e24dafb096411fe4fcf3c813d62ea20bd9b8b354b15699aecbaf33e49c7816bd9898a11757f67c307e6fae0c035501b121d3102593d5b961c6ed95c5fea8bddc27e9bdf056d2426f276fd87aacb2f9ee9d459fc2d36b792e3f57788021a8902b5b7fc53342826372e98fd11f4efcd522c65bbf5860f4323437028093d5ade39580cc7d87e89cfa58df8abdee74e9c83a23f50eb804540b9abb00d8a2e44fd440cccb7d5c4edd56bea425a20434177d2313b7127a3947513da", 0xf5, 0xefdb)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r1, 0x0)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
accept$phonet_pipe(r2, &(0x7f0000000440), &(0x7f0000000500)=0x10) (async)
accept$phonet_pipe(r2, &(0x7f0000000440), &(0x7f0000000500)=0x10)
write$P9_RREADLINK(r2, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)="e3331cfd74f6da55af073a6e44f5af0d8151f7738a9bc54497")
r3 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0)
ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001800)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}, @typed={0x6, 0x17, 0x0, 0x0, @str='( '}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000040)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000001c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000d00)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x3ec0)

2m7.194982791s ago: executing program 7 (id=1231):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x10, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x1)
read$FUSE(r2, &(0x7f0000001640)={0x2020}, 0x2020)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f00000001c0)={0x0, 0xfffffef4, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400a0}, 0x20000000)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="b9", 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, r7})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m6.903053439s ago: executing program 7 (id=1235):
r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4)
r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff87ff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x18, 0x14, 0x121}, 0x18}}, 0x0)
r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
r5 = shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
shmdt(r5)
shmdt(r5)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = openat$cgroup_pressure(r9, &(0x7f0000001840)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000100)={'full', 0x20, 0x1, 0x20, 0x401}, 0x2f)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000000050001000600000005000100070000000000000073797a30000000000c00078008000640fffffff7050005000200000011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x2)
r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301)
ioctl$USBDEVFS_CONTROL(r12, 0xc0105500, 0x0)

2m6.811004559s ago: executing program 37 (id=1235):
r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4)
r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff87ff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x18, 0x14, 0x121}, 0x18}}, 0x0)
r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
r5 = shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
shmdt(r5)
shmdt(r5)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = openat$cgroup_pressure(r9, &(0x7f0000001840)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000100)={'full', 0x20, 0x1, 0x20, 0x401}, 0x2f)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000000050001000600000005000100070000000000000073797a30000000000c00078008000640fffffff7050005000200000011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x2)
r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301)
ioctl$USBDEVFS_CONTROL(r12, 0xc0105500, 0x0)

2m3.251286481s ago: executing program 38 (id=1095):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_delete(r1)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
mkdir(&(0x7f0000000040)='./bus\x00', 0x92)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
timer_create(0x2, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000240))
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000640)=[{{&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x4000000)
listen(r3, 0x9)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
rt_sigsuspend(&(0x7f0000002740)={[0x5]}, 0x8)
read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000440)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}}}, &(0x7f0000000540)=0xe8)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000300)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r6}}]}})
mount$fuseblk(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x800, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r5}}, {@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@obj_user={'obj_user', 0x3d, '\xc8'}}, {@fowner_lt={'fowner<', r6}}]}})
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000080)={0x18, 0x7, 0x7f, 0x200})
write$cgroup_int(r7, &(0x7f0000000040)=0x3, 0x12)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c00000014000380100003800c000164fc0001000000000018000180140002007665746830"], 0x40}}, 0x0)

1m46.284665999s ago: executing program 2 (id=1466):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x8, @pix_mp={0x6, 0x6, 0x20493859, 0x9, 0xa, [{0x4, 0x2}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x9}, {0x8, 0x100}, {0x7, 0x5}, {0x5, 0x2}, {0xffffffe5, 0x5e0}], 0xa3, 0x6, 0x4, 0x1, 0x2}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
brk(0x8000000000000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @local, 0x0, 0x8, 0x0, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @empty}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000200)={0x8, 0x5, 0x80000001, 0x401, 0x8001, 0xb36, 0x9})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100766c616e00000000340002800600010000000000280003800c0001002b71750e080000000c00010001000000ff0700000c000100010000000e00000008000500", @ANYRES32=r4, @ANYBLOB="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"], 0x6c}}, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x1d)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2e, &(0x7f0000000180)=[{0xc7, 0x1d, 0x5, 0x40}, {0x1, 0xff, 0x1, 0xf0c}, {0xf3, 0x8, 0x4, 0x401}]})

1m46.21441336s ago: executing program 2 (id=1467):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
r2 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffe, 0x3691, 0x0, 0x273})
r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000000c0)={0x2, 0x6, 0xfffffffc, 0x7, 'syz0\x00', 0x27})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8d0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='ceph\x00', 0x208004, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600c0a3500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="36d50a28de1544f36e092fd17706b0f5277b302213ffb03d04c38ccb1b07f4b2cc2577a5a0d2204353e39070a50f91"], 0x0)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r9, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r9, 0xa1, 0x5f}, 0x0, &(0x7f0000000200)="e8a0779ecfada17c54d2cc42b732b1d11b6489456ffa7af2d773183b291b7174978965c24107c311c72e4f08df6d325db017eccad4efe5c696dd6e12e72dff924fe88179f3da70f643236c157635fb3af5031924fd180aff27df889518fc6e36bd7a1996838610730ebfb2ecc1f84b7fe83378414a19e75549bd64f10ab5ef2d5f9537864ed35dae96335100d6ae41a63fde178e6e32e90fe80925925720edf085", &(0x7f0000000140)=""/95)
r10 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000100))
shutdown(r11, 0x0)
ppoll(&(0x7f00000001c0)=[{r10, 0x11}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f00000000c0)={0x20002000})
io_uring_enter(r2, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18)
preadv(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000500)=""/97, 0x61}, {}, {&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/193, 0xc1}], 0x5, 0x0, 0xc)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3})

1m46.002986372s ago: executing program 2 (id=1473):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0xc0000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r5})
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m45.933762382s ago: executing program 2 (id=1475):
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0xa4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYBLOB="eea7f8ae8f0c7a41c2bae19cdc793ab5041a3ecfe9da8540c696f1b205c9af8099ff76c31c2eedbc6e0cea1531fc60e4209f24b0", @ANYBLOB='/\x00'], 0x20)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000007000000ff0000000b00000008a20000", @ANYRES32=r1, @ANYBLOB="03eb4000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000020000000c00000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB=','], 0x20)
setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
write$cgroup_int(r3, &(0x7f0000000100)=0x6, 0x12)
io_setup(0x9, &(0x7f0000000b80)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
r5 = syz_clone(0x40200200, &(0x7f00000005c0)="7b233ba1ca925a06f282485e621f20ee2489ab8afa77d2e24b72a31350f1ec95ade2bfee3f272209bcc6009729af3609a90ff016627a7cb14282114956db181dc3077bbe60235fecf38598a4ebe46b18eba46c72bea7309d755951501d7965d3f7bdef915ba01f5e2c6f0baf9da0848a99b8126e55b33d51860e70351f0111b893a1cfd19260288354022f67aaf5abd85ae8e0f169eaaa48d1938432578f9556ff8c40689ff7eaf44db20ddd4fb6e716651175db0b5e22652a26602ab9f00a586c41519bf2fd449b028b51d02ff0063ce60417fa603826ee5fcfeeadcebebffb806ad440c08567d054c3b1b73a954f301bd22b33f655", 0xf6, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000800)="cb07c4f929403b79bf0c73fe39f17b985d9cfcad78c1bcae99aec7dc7747020af29eb736055bcdb0fa9ecb6e44db13af5c8627a72d8ec0d56f3223858430d928d26c469997a073523797cc5e224c90aeada36732e87b8c985777a256f12382d74925028fece701e0b7f9817e962c7cad552df63efacded2c837fa71c477cc0b1789f80326cea108b52b8fec7e2088ef00ce7395a32d4a4a4fca034b3b3afaddb9969e9c76a90ba01161d")
r6 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000008c0)=<r7=>0x0)
r8 = getpid()
syz_pidfd_open(r8, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x100, 0x32, 0x8, 0x70bd2c, 0x25dfdbfe, {0x19}, [@nested={0x1c, 0xbc, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x7, 0x0, 0x0, @str='lowerdir'}, @nested={0x4, 0xa7}]}, @typed={0x8, 0x82, 0x0, 0x0, @pid=r6}, @nested={0x8, 0x149, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @typed={0xc, 0x144, 0x0, 0x0, @u64=0x7}, @nested={0x45, 0xd4, 0x0, 0x1, [@typed={0xc, 0x91, 0x0, 0x0, @u64=0x8000000000000001}, @typed={0x8, 0x62, 0x0, 0x0, @u32=0x4}, @generic="ac0bc8fe89e2310bd6717f64e52255b78237baaf33", @typed={0x8, 0x142, 0x0, 0x0, @uid=r7}, @generic, @typed={0x8, 0x8e, 0x0, 0x0, @pid=r8}, @nested={0x4, 0xaa}, @nested={0x4, 0x8f}]}, @nested={0xc, 0x78, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x10000}, @nested={0x20, 0xa1, 0x0, 0x1, [@typed={0x5, 0xd5, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x25, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}]}, @generic="0ce2ac0e2433c94f9337195c25404f4a6849af615b28f62f1cef4a7899ecd1b7c0746d7f162f3f0225059f949f000035682f2543d245"]}, 0x100}, 0x1, 0x0, 0x0, 0x20000800}, 0x805)
futimesat(r3, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x0, 0x2710}})
chdir(&(0x7f0000000340)='./file0/../file0\x00')

1m45.684674832s ago: executing program 2 (id=1482):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0xf2, 0xa, 0x6, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x7800, 0x7, 0x4}})

1m45.384681207s ago: executing program 2 (id=1484):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)

1m45.356711107s ago: executing program 39 (id=1484):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)

1m23.000371596s ago: executing program 9 (id=1805):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200))
close(r0) (fail_nth: 14)

1m21.984061706s ago: executing program 9 (id=1812):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090200000000000000000f000000050030000000000008000300", @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001e00010a0000000000000000ac1414aa0000000000050000000000000000000000000000ac1e000100000000"], 0x40}}, 0x0)

1m21.838601797s ago: executing program 9 (id=1814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x200002)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0xfffffffe})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x7ff, 0x1ff, 0x8, 0xa800, r5, 0xe, '\x00', r6, r7, 0x2, 0x2, 0x2, 0x0, @value=r10, @void, @void, @value}, 0x50)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x17, 0x2, r2})

1m21.381474223s ago: executing program 9 (id=1820):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
getpeername(r0, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000340)=0x80) (async)
getpeername(r0, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000340)=0x80)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00')
syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
r3 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = syz_pidfd_open(r3, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0xff0a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES8=r5], 0x8) (async)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES8=r5], 0x8)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r6, &(0x7f0000000380)="54b9d41ad1522576", 0x8, 0x40040, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1001, &(0x7f0000000240)={[{@index_on}, {@metacopy_on}, {@userxattr}, {@uuid_on}, {@metacopy_off}, {@metacopy_off}, {@metacopy_on}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]})
gettid()
flock(r5, 0x2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

1m21.302827663s ago: executing program 9 (id=1822):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64)
sendfile(r0, r0, 0x0, 0xfffffffffffffff9) (async, rerun: 64)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)

1m20.833768668s ago: executing program 9 (id=1829):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0100, 0x0) (async)

1m20.781000967s ago: executing program 40 (id=1829):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0100, 0x0) (async)

53.310891831s ago: executing program 4 (id=1753):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

44.308745998s ago: executing program 4 (id=1753):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

34.079111107s ago: executing program 4 (id=1753):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

25.277286788s ago: executing program 4 (id=1753):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

16.027559171s ago: executing program 4 (id=1753):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

6.751792914s ago: executing program 4 (id=1753):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

4.524697693s ago: executing program 3 (id=2117):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x54}, 0x4000000)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
socket$inet(0x2, 0x3, 0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffd8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040))

3.583588054s ago: executing program 3 (id=2122):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x402603, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0)

3.054082357s ago: executing program 0 (id=2125):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[], 0x53)

3.053920253s ago: executing program 0 (id=2126):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

2.90819786s ago: executing program 8 (id=2128):
r0 = socket$tipc(0x1e, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
sched_setscheduler(0x0, 0x3, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x80042, 0x7, 0x1}, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
sendmsg$tipc(r0, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kvm_unmap_hva_range\x00', r2, 0x0, 0x296f}, 0x18)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa843, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"])
syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0)

2.663953045s ago: executing program 3 (id=2129):
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r0 = socket(0xa, 0x3, 0x3a)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
connect$packet(r0, &(0x7f0000000200)={0x11, 0xf8, 0x0, 0x1, 0xa, 0x6, @multicast}, 0x14)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r4 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000240)='resize', 0x0, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x4)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x3, 0x5, 0x8, 0x0, 0x0, 0xfffffffffffffff9, 0xf96, 0x0, 0x1})

1.89399229s ago: executing program 0 (id=2130):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0xb7d4, 0x1001f0)

1.893825011s ago: executing program 0 (id=2131):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
flock(r2, 0x8)
close(r0)

1.682650741s ago: executing program 0 (id=2132):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020)
read$msr(r0, 0x0, 0x0)

1.609765052s ago: executing program 0 (id=2133):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x46, 0x36, 0x56, 0x8, 0x4b4, 0x8613, 0x958f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x6e, 0xa5}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.605647842s ago: executing program 8 (id=2134):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sync()
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4)
creat(0x0, 0xa)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000140))

1.482210211s ago: executing program 3 (id=2135):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}}, 0x0)

873.802559ms ago: executing program 3 (id=2136):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})
sendmsg$nl_route(r5, 0x0, 0x0)

553.939425ms ago: executing program 8 (id=2137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001d00", @ANYRES32, @ANYBLOB="91bd8a21e0f50cbcac8af65f0e214a6efeadecbd954f47db438f486ad4b2ecdd92ad046ca4a96dd5a67b05076aab10fd29ae281fa4a1b81283ed15c9524a66ce9df87014bf94ba05d437dc18a785c90b90b1af70c5f9c4a9cf309b8115f5ae307314a2361758ffd57142ff01052106fdef4166c7d1dd0d4596fa80628a9b48671917a29765edd9380060fc6fa750f3ce866ebedcaedc196af74bb6801ac08e79d1bc66c973"], 0x28}}, 0x0)

553.749318ms ago: executing program 8 (id=2138):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8001, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x0, 0x56a0, 0x1f}, 0x2c)

413.101501ms ago: executing program 8 (id=2139):
r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000f40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x91\xa0\xcd\fL\xf1<e\a\x05\x00\x00\x00\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg0\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q(\a\x00\x00\x00N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x8a\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x7f/\xca\x19\x9fSI\f\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\xa3\xad\x9d\x00\x9e\xc9q\xfa\xc5%\xf9\x1dH\xc3\xccbi\xd3\x80\xe4_@\xbd\xc4t\xfc\xcd1\x87\xd8\xd8\xa4R\xf8 p\xbeW:\x15WY\x89>\x13{X\x13\xedu\xd5\xa7zL\x87\xd8\xf1\b\xa7\x9d\x03\x05\v\xad\xbd\x90a\xc9t\xd1\\\x10?ZN\xc3\xb9\x18\x0f#\xc0\x89\xa2\xa4\fj\xcfV\xb8j\xe3a\xc6\x81s\x11\xf5+\x0e\xcb\xd5U:tob\x14^\xe6\x18<./\xfb\xe3>\x1c\a\xc4\x04\x15\x1e>\x86.D\xf6\xde\x06\xdb\xa4\x88/\xdc/p\xa2ZC\x9a\xc6\x94\x8fY\xc8,H\xae_0\xf4<\x8e\x88\xcc\x1e\x14\xa2\x90\xe2\x9a\x88\x85\x1f_\x8c\xac\xab\v\xce\x82\x84', &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='{)+}@@!}\x00', &(0x7f0000000600)='d[?\xcbM\xe6\x91q\xe0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000ec0)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='!$].\x00', 0x0, r0)
read(r0, 0x0, 0x0)
close(r0)

412.816624ms ago: executing program 8 (id=2140):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_buf(r3, 0x0, 0x23, 0x0, &(0x7f0000000100))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x6})
fallocate(0xffffffffffffffff, 0x8, 0x400000000000001, 0xb)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='setgroups\x00')

0s ago: executing program 3 (id=2141):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000140))

kernel console output (not intermixed with test programs):

ed BSSID 50:50:50:50:50:50
[  174.995168][T10408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.002907][ T5293] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  175.003072][T13073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=13073 comm=syz.0.1785
[  175.009252][T10461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.012538][T13073] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16
[  175.013109][T10461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.015510][T13073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.021164][T13073] SELinux:  policydb version 0 does not match my version range 15-34
[  175.023879][T13073] SELinux: failed to load policy
[  175.318843][ T5958] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  175.322330][ T5958] Bluetooth: hci3: Injecting HCI hardware error event
[  175.326893][ T5958] Bluetooth: hci3: hardware error 0x00
[  175.405784][T13084] FAULT_INJECTION: forcing a failure.
[  175.405784][T13084] name failslab, interval 1, probability 0, space 0, times 0
[  175.409466][T13084] CPU: 2 UID: 0 PID: 13084 Comm: syz.8.1790 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  175.409480][T13084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  175.409486][T13084] Call Trace:
[  175.409490][T13084]  <TASK>
[  175.409495][T13084]  dump_stack_lvl+0x16c/0x1f0
[  175.409514][T13084]  should_fail_ex+0x50a/0x650
[  175.409531][T13084]  ? fs_reclaim_acquire+0xae/0x150
[  175.409547][T13084]  ? kobject_uevent_env+0x265/0x1870
[  175.409557][T13084]  should_failslab+0xc2/0x120
[  175.409570][T13084]  __kmalloc_cache_noprof+0x68/0x410
[  175.409587][T13084]  ? up_write+0x1b2/0x520
[  175.409606][T13084]  kobject_uevent_env+0x265/0x1870
[  175.409619][T13084]  ? kernfs_put+0x35/0x50
[  175.409629][T13084]  ? sysfs_remove_group+0xc6/0x180
[  175.409648][T13084]  __kobject_del+0x168/0x1f0
[  175.409664][T13084]  kobject_put+0x327/0x5a0
[  175.409680][T13084]  net_rx_queue_update_kobjects+0x478/0x5f0
[  175.409702][T13084]  netdev_unregister_kobject+0x150/0x270
[  175.409720][T13084]  unregister_netdevice_many_notify+0x13aa/0x1f30
[  175.409736][T13084]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  175.409749][T13084]  ? trace_contention_end+0xee/0x140
[  175.409767][T13084]  ? ppp_release+0x167/0x230
[  175.409779][T13084]  ? __fsnotify_parent+0x244/0xb80
[  175.409794][T13084]  ? __pfx_locks_remove_posix+0x10/0x10
[  175.409809][T13084]  ? __pfx___mutex_lock+0x10/0x10
[  175.409826][T13084]  unregister_netdevice_queue+0x307/0x3f0
[  175.409838][T13084]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  175.409848][T13084]  ? __pfx_locks_remove_file+0x10/0x10
[  175.409866][T13084]  ? __pfx_ppp_release+0x10/0x10
[  175.409877][T13084]  ppp_release+0x209/0x230
[  175.409889][T13084]  __fput+0x3ff/0xb70
[  175.409905][T13084]  __fput_sync+0xa1/0xc0
[  175.409918][T13084]  __x64_sys_close+0x86/0x100
[  175.409932][T13084]  do_syscall_64+0xcd/0x250
[  175.409948][T13084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.409962][T13084] RIP: 0033:0x7fd1edd8d169
[  175.409971][T13084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.409981][T13084] RSP: 002b:00007fd1eec70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  175.409991][T13084] RAX: ffffffffffffffda RBX: 00007fd1edfa5fa0 RCX: 00007fd1edd8d169
[  175.409997][T13084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  175.410003][T13084] RBP: 00007fd1eec70090 R08: 0000000000000000 R09: 0000000000000000
[  175.410009][T13084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  175.410014][T13084] R13: 0000000000000000 R14: 00007fd1edfa5fa0 R15: 00007fff7ae0dd28
[  175.410027][T13084]  </TASK>
[  175.546220][T10740] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  175.652581][T10468] bridge_slave_1: left allmulticast mode
[  175.654199][T10468] bridge_slave_1: left promiscuous mode
[  175.655843][T10468] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.658842][T10468] bridge_slave_0: left allmulticast mode
[  175.660433][T10468] bridge_slave_0: left promiscuous mode
[  175.662180][T10468] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.696810][T10740] usb 5-1: Using ep0 maxpacket: 32
[  175.699612][T10740] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  175.701957][T10740] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  175.704409][T10740] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  175.707958][T10740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  175.710676][T10740] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  175.713365][T10740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  175.716761][T10740] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  175.719441][T10740] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  175.722987][T10740] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  175.725468][T10740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.730009][T10740] usb 5-1: config 0 descriptor??
[  175.814182][T10468] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  175.949873][T10740] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  175.954050][T10740] usb 5-1: USB disconnect, device number 13
[  175.960725][T10740] usblp0: removed
[  176.351644][T10468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.355283][T10468] bond0 (unregistering): Released all slaves
[  176.360717][T10468] bond1 (unregistering): Released all slaves
[  176.386277][   T36] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  176.471753][T10468] bond2 (unregistering): Released all slaves
[  176.546231][   T36] usb 5-1: Using ep0 maxpacket: 32
[  176.550114][   T36] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  176.553332][   T36] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  176.555720][   T36] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  176.559250][   T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  176.562917][   T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  176.566707][   T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  176.570536][   T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  176.574350][   T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  176.579448][   T36] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  176.582945][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.588060][   T36] usb 5-1: config 0 descriptor??
[  176.603840][T10468] bond3 (unregistering): Released all slaves
[  176.610503][T10468] bond4 (unregistering): Released all slaves
[  176.751276][T10468] bond5 (unregistering): Released all slaves
[  176.800491][   T36] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  176.983006][T13105] netlink: 'syz.9.1796': attribute type 4 has an invalid length.
[  176.994017][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.005215][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.027265][T10468] mac80211_hwsim hwsim11 wlan0 (unregistering): left allmulticast mode
[  177.157795][T10468] hsr_slave_0: left promiscuous mode
[  177.159798][T10468] 0·: left promiscuous mode
[  177.161474][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.163538][T10468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.166238][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.168938][T10468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.199836][T10468] veth1_macvtap: left promiscuous mode
[  177.201886][T10468] veth1_vlan: left promiscuous mode
[  177.203850][T10468] veth0_vlan: left promiscuous mode
[  177.220524][ T5987] usb 5-1: USB disconnect, device number 14
[  177.229321][ T5987] usblp0: removed
[  177.401948][ T5958] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  177.524384][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.562044][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.565714][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.573990][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.589660][ T5293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  177.592692][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.816085][T13118] xt_TCPMSS: Only works on TCP SYN packets
[  177.864890][T13120] xt_policy: output policy not valid in PREROUTING and INPUT
[  177.989187][T13124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'.
[  178.099279][T13130] overlayfs: workdir and upperdir must be separate subtrees
[  178.205000][T10468] team0 (unregistering): Port device team_slave_1 removed
[  178.332998][T10468] team0 (unregistering): Port device team_slave_0 removed
[  178.971758][T10459] smc: removing ib device syz0
[  179.046532][T13136] nbd: must specify at least one socket
[  179.093280][ T5293] Bluetooth: hci0: unexpected event 0x3b length: 22 > 10
[  179.271305][T13159] batman_adv: batadv0: Adding interface: ip6gretap1
[  179.275165][T13159] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  179.283049][T13159] batman_adv: batadv0: Interface activated: ip6gretap1
[  179.285879][T13163] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1812'.
[  179.372973][T13113] chnl_net:caif_netlink_parms(): no params data found
[  179.380810][T13169] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  179.519306][T13113] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.521422][T13113] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.523468][T13113] bridge_slave_0: entered allmulticast mode
[  179.527884][T13113] bridge_slave_0: entered promiscuous mode
[  179.532137][T13113] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.534242][T13113] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.536612][T13113] bridge_slave_1: entered allmulticast mode
[  179.538947][T13113] bridge_slave_1: entered promiscuous mode
[  179.589792][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.597852][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.600273][T13113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.604459][T10468] IPVS: stop unused estimator thread 0...
[  179.607112][T13113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.607962][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.618222][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.625845][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.635774][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.636603][ T5293] Bluetooth: hci2: command tx timeout
[  179.644169][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.652058][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.655248][T13113] team0: Port device team_slave_0 added
[  179.660533][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.664743][T13113] team0: Port device team_slave_1 added
[  179.670108][T13175] kvm: kvm [13174]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  179.695589][T13113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.697812][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.704782][T13113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.708866][T13113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.710827][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.718331][T13113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.756506][   T41] audit: type=1400 audit(2000000024.279:44974): avc:  denied  { append } for  pid=13182 comm="syz.8.1818" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  179.756801][T10468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.833696][T13113] hsr_slave_0: entered promiscuous mode
[  179.835716][T13113] hsr_slave_1: entered promiscuous mode
[  179.840013][T13113] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.845078][   T41] audit: type=1400 audit(2000000024.359:44975): avc:  denied  { lock } for  pid=13186 comm="syz.9.1820" path="socket:[56469]" dev="sockfs" ino=56469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  179.845420][T13113] Cannot create hsr debugfs directory
[  179.858669][   T41] audit: type=1400 audit(2000000024.379:44976): avc:  denied  { ioctl } for  pid=13191 comm="syz.8.1821" path="socket:[53925]" dev="sockfs" ino=53925 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  179.919401][T10468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.001148][T10468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.105735][T10468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.206432][   T41] audit: type=1400 audit(2000000024.719:44977): avc:  denied  { getattr } for  pid=13209 comm="syz.8.1828" name="/" dev="9p" ino=36831256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  180.210778][T13210] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  180.246801][T10468] bridge_slave_1: left allmulticast mode
[  180.248464][T10468] bridge_slave_1: left promiscuous mode
[  180.250071][T10468] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.262445][T10468] bridge_slave_0: left allmulticast mode
[  180.264086][T10468] bridge_slave_0: left promiscuous mode
[  180.266652][T10468] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.277429][ T1119] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  180.287544][ T1119] sr 2:0:0:0: [sr0] tag#14 Sense Key : Illegal Request [current] 
[  180.290777][ T1119] sr 2:0:0:0: [sr0] tag#14 Add. Sense: Invalid command operation code
[  180.293825][ T1119] sr 2:0:0:0: [sr0] tag#14 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00
[  180.297621][ T1119] blk_print_req_error: 7 callbacks suppressed
[  180.297632][ T1119] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  180.303664][ T1119] buffer_io_error: 4 callbacks suppressed
[  180.303674][ T1119] Buffer I/O error on dev sr0, logical block 0, lost async page write
[  180.641239][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.645384][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.673855][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.681789][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.684991][ T5958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  180.687942][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  180.717300][T10468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.724770][T10468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.728284][T10468] bond0 (unregistering): Released all slaves
[  180.759511][T13215] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  180.893609][T13216] chnl_net:caif_netlink_parms(): no params data found
[  181.034014][T13216] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.047941][T13216] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.050020][T13216] bridge_slave_0: entered allmulticast mode
[  181.053076][T13216] bridge_slave_0: entered promiscuous mode
[  181.055940][T13216] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.059190][T13216] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.061839][T13216] bridge_slave_1: entered allmulticast mode
[  181.064011][T13216] bridge_slave_1: entered promiscuous mode
[  181.070794][   T41] audit: type=1400 audit(2000000025.589:44978): avc:  denied  { read write } for  pid=13219 comm="syz.8.1832" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  181.082596][   T41] audit: type=1400 audit(2000000025.589:44979): avc:  denied  { open } for  pid=13219 comm="syz.8.1832" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  181.094210][T10468] hsr_slave_0: left promiscuous mode
[  181.097178][T10468] hsr_slave_1: left promiscuous mode
[  181.099739][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.102657][T10468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.107879][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.110811][T10468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.154943][T10468] veth1_macvtap: left promiscuous mode
[  181.158189][T10468] veth0_macvtap: left promiscuous mode
[  181.159845][T10468] veth1_vlan: left promiscuous mode
[  181.161329][T10468] veth0_vlan: left promiscuous mode
[  181.726294][ T5293] Bluetooth: hci2: command tx timeout
[  182.129523][T13264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=13264 comm=syz.8.1842
[  182.179559][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1843'.
[  182.182864][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1843'.
[  182.263568][T10468] team0 (unregistering): Port device team_slave_1 removed
[  182.390754][T10468] team0 (unregistering): Port device team_slave_0 removed
[  182.761483][ T5293] Bluetooth: hci3: command tx timeout
[  183.285087][T13268] netlink: 'syz.8.1844': attribute type 4 has an invalid length.
[  183.320781][T13216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.327492][T13216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.391862][T13216] team0: Port device team_slave_0 added
[  183.397717][T13216] team0: Port device team_slave_1 added
[  183.428989][T13216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.431048][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.438587][T13216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.443743][T13216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.445760][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.453864][T13216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.458008][   T41] audit: type=1326 audit(2000000027.969:44980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.1846" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeac38d169 code=0x0
[  183.573850][T13216] hsr_slave_0: entered promiscuous mode
[  183.577143][T13216] hsr_slave_1: entered promiscuous mode
[  183.579816][T13216] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.583604][T13216] Cannot create hsr debugfs directory
[  183.597147][T13113] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  183.614483][T13113] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  183.635916][T13113] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  183.641699][T13113] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  183.796758][ T5293] Bluetooth: hci2: command tx timeout
[  183.876478][T13113] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.949812][T13113] 8021q: adding VLAN 0 to HW filter on device team0
[  183.954854][T10460] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.956993][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.970359][T10472] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.972408][T10472] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.008226][T10468] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.052486][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1851'.
[  184.113884][T10468] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.265611][T10468] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.281173][T13113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.371422][T13216] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  184.374801][T13216] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  184.385975][T13216] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  184.400849][T13216] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  184.420597][T10468] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.470137][T13216] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.494362][T13216] 8021q: adding VLAN 0 to HW filter on device team0
[  184.500293][T10460] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.502406][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.533756][T10454] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.536492][T10454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.605731][T13216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.610041][T13216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.651814][T13113] veth0_vlan: entered promiscuous mode
[  184.663461][T13113] veth1_vlan: entered promiscuous mode
[  184.731246][T13113] veth0_macvtap: entered promiscuous mode
[  184.733779][T10468] erspan0: left allmulticast mode
[  184.735244][T10468] erspan0: left promiscuous mode
[  184.737210][T10468] bridge0: port 3(erspan0) entered disabled state
[  184.740165][T10468] bridge_slave_1: left allmulticast mode
[  184.741824][T10468] bridge_slave_1: left promiscuous mode
[  184.743498][T10468] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.753425][T10468] bridge_slave_0: left allmulticast mode
[  184.755118][T10468] bridge_slave_0: left promiscuous mode
[  184.757147][T10468] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.761007][T10468] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  184.836499][ T5293] Bluetooth: hci3: command tx timeout
[  184.844219][T10468] batman_adv: batadv0: Removing interface: ip6gretap1
[  184.946234][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  185.242822][T10468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.251780][T10468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.257018][T10468] bond0 (unregistering): Released all slaves
[  185.277904][T13113] veth1_macvtap: entered promiscuous mode
[  185.288967][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.291824][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.294477][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.297743][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.300384][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.303208][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.306556][T13113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.313111][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.316890][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.320065][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.323535][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.326837][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.330093][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.346266][T13113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.350476][T13113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.353310][T13113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.356858][T13113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.359596][T13113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.375516][T13216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.378469][T10468] IPVS: stopping backup sync thread 12355 ...
[  185.436284][T10455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.437179][T13216] veth0_vlan: entered promiscuous mode
[  185.439238][T10455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.447910][T13216] veth1_vlan: entered promiscuous mode
[  185.471220][T13216] veth0_macvtap: entered promiscuous mode
[  185.473088][T10472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.475402][T10472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.485257][T13216] veth1_macvtap: entered promiscuous mode
[  185.499757][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.502833][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.505586][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.509079][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.511823][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.514755][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.517658][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.520540][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.524116][T13216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.528307][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.529171][   T36] usb 13-1: new high-speed USB device number 7 using dummy_hcd
[  185.532587][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.532600][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.541508][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.544202][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.547433][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.550445][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.553328][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.557999][T13216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.577208][T13216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.579876][T13216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.582340][T13216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.584702][T13216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.657538][T10468] hsr_slave_0: left promiscuous mode
[  185.663091][T10468] hsr_slave_1: left promiscuous mode
[  185.665018][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.667578][T10468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.670105][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.672189][T10468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.687127][   T36] usb 13-1: Using ep0 maxpacket: 32
[  185.693046][   T36] usb 13-1: string descriptor 0 read error: -22
[  185.694964][   T36] usb 13-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf
[  185.697876][   T36] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.702102][   T36] usb 13-1: config 0 descriptor??
[  185.707294][T10468] veth1_macvtap: left promiscuous mode
[  185.708896][T10468] veth0_macvtap: left promiscuous mode
[  185.710473][T10468] veth1_vlan: left promiscuous mode
[  185.711974][T10468] veth0_vlan: left promiscuous mode
[  186.030927][    T9] usb 13-1: USB disconnect, device number 7
[  186.118659][T13328] netlink: 'syz.0.1857': attribute type 10 has an invalid length.
[  186.121528][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1857'.
[  186.926441][ T5293] Bluetooth: hci3: command tx timeout
[  186.952249][T10468] team0 (unregistering): Port device team_slave_1 removed
[  187.060902][T10468] team0 (unregistering): Port device team_slave_0 removed
[  187.225968][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.247457][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.260690][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.269993][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.282834][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  187.286411][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.818435][T13328] batadv0: entered promiscuous mode
[  187.820514][T13328] batadv0: entered allmulticast mode
[  187.823113][T13328] bridge0: port 2(batadv0) entered blocking state
[  187.825703][T13328] bridge0: port 2(batadv0) entered disabled state
[  187.829816][T13328] bridge0: port 2(batadv0) entered blocking state
[  187.832333][T13328] bridge0: port 2(batadv0) entered forwarding state
[  187.867180][T10460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.869392][T10460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.925603][T10454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.932616][T10454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.084704][T10460] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  188.088738][T10460] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  188.098543][T13330] chnl_net:caif_netlink_parms(): no params data found
[  188.216706][T13330] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.219909][T13330] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.222810][T13330] bridge_slave_0: entered allmulticast mode
[  188.226325][T13330] bridge_slave_0: entered promiscuous mode
[  188.230593][T13330] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.233697][T13330] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.237079][T13330] bridge_slave_1: entered allmulticast mode
[  188.240816][T13330] bridge_slave_1: entered promiscuous mode
[  188.277056][T13330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.283673][T13330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.326880][T13330] team0: Port device team_slave_0 added
[  188.331177][T13330] team0: Port device team_slave_1 added
[  188.357383][T13330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.360143][T13330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.371335][T13330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.381064][T13330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.383580][T13330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.391059][T13330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.723826][T13330] hsr_slave_0: entered promiscuous mode
[  188.726749][T13330] hsr_slave_1: entered promiscuous mode
[  188.729223][T13330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.733592][T13330] Cannot create hsr debugfs directory
[  188.793047][T13359] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1863'.
[  189.163204][T13364] vlan2: entered promiscuous mode
[  189.165728][T13364] bond0: entered promiscuous mode
[  189.167476][T13364] bond_slave_0: entered promiscuous mode
[  189.169341][T13364] bond_slave_1: entered promiscuous mode
[  189.172133][T13364] bond0: left promiscuous mode
[  189.173655][T13364] bond_slave_0: left promiscuous mode
[  189.175271][T13364] bond_slave_1: left promiscuous mode
[  189.255640][T10468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.317476][ T5958] Bluetooth: hci2: command tx timeout
[  189.566834][T10468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.826769][T10468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.074803][T10468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.232398][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'.
[  190.378817][T10468] bridge_slave_1: left allmulticast mode
[  190.381602][T10468] bridge_slave_1: left promiscuous mode
[  190.386365][T10468] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.418724][T10468] bridge_slave_0: left allmulticast mode
[  190.424555][T10468] bridge_slave_0: left promiscuous mode
[  190.430543][T10468] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.925438][T10468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.930819][T10468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.935341][T10468] bond0 (unregistering): Released all slaves
[  191.038323][T13395] random: crng reseeded on system resumption
[  191.371672][T10468] hsr_slave_0: left promiscuous mode
[  191.374287][T10468] hsr_slave_1: left promiscuous mode
[  191.377812][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.380268][T10468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.382941][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.385579][T10468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.407624][ T5958] Bluetooth: hci2: command tx timeout
[  191.413457][T10468] veth1_macvtap: left promiscuous mode
[  191.415694][T10468] veth0_macvtap: left promiscuous mode
[  191.418243][T10468] veth1_vlan: left promiscuous mode
[  191.420332][T10468] veth0_vlan: left promiscuous mode
[  192.141247][ T5958] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  192.145829][ T5958] Bluetooth: hci3: Injecting HCI hardware error event
[  192.150260][ T5293] Bluetooth: hci3: hardware error 0x00
[  192.715971][T10468] team0 (unregistering): Port device team_slave_1 removed
[  192.900195][T13421] misc userio: The device must be registered before sending interrupts
[  192.937525][T10468] team0 (unregistering): Port device team_slave_0 removed
[  193.480973][ T5958] Bluetooth: hci2: command tx timeout
[  193.680219][T13425] openvswitch: netlink: Message has 4 unknown bytes.
[  193.682227][T13425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.922298][T13430] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1883'.
[  193.924908][T13430] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1883'.
[  193.930264][T13430] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1883'.
[  193.933850][T13430] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1883'.
[  194.047807][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  194.050262][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  194.228817][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'.
[  194.280799][ T5293] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  194.318946][T13330] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  194.338428][T13330] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  194.353511][T13330] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.361198][T13330] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.405803][T13330] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.414713][T13330] 8021q: adding VLAN 0 to HW filter on device team0
[  194.419291][T10472] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.421331][T10472] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.426746][T10459] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.428925][T10459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.557763][T13330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.923640][T13330] veth0_vlan: entered promiscuous mode
[  194.929475][T13330] veth1_vlan: entered promiscuous mode
[  194.945513][T13330] veth0_macvtap: entered promiscuous mode
[  194.950468][T13330] veth1_macvtap: entered promiscuous mode
[  194.958984][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.962074][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.969169][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.973011][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.975853][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.979115][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.982887][T13330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.987759][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.990802][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.993811][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.998213][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.002635][T13330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.005916][T13330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.010582][T13330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.015782][T13330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.026186][T13330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.029412][T13330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.032799][T13330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.176756][T10465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.179457][T10465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.184032][T10455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.186779][T10455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.104733][T13489] tipc: Failed to remove unknown binding: 66,1,1/6:3851386306/3851386308
[  198.087938][T10472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.286329][ T5293] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  198.286345][ T5958] Bluetooth: hci2: command 0x1003 tx timeout
[  198.565751][T13496] ceph: No mds server is up or the cluster is laggy
[  198.656220][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  198.662154][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  198.664967][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  198.670108][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  198.673159][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  198.675999][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  198.810743][T13512] chnl_net:caif_netlink_parms(): no params data found
[  198.879905][T13512] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.882107][T13512] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.884666][T13512] bridge_slave_0: entered allmulticast mode
[  198.887830][T13512] bridge_slave_0: entered promiscuous mode
[  198.891457][T13512] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.893944][T13512] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.896610][T13512] bridge_slave_1: entered allmulticast mode
[  198.899456][T13512] bridge_slave_1: entered promiscuous mode
[  198.931008][T13512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.935330][T13512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.967725][T13512] team0: Port device team_slave_0 added
[  198.972572][T13512] team0: Port device team_slave_1 added
[  199.007981][T13512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.010025][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.017514][T13512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.021352][T13512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.023393][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.031805][T13512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.135690][T13512] hsr_slave_0: entered promiscuous mode
[  199.138570][T13512] hsr_slave_1: entered promiscuous mode
[  199.141009][T13512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.143261][T13512] Cannot create hsr debugfs directory
[  199.226528][T13527] input: syz0 as /devices/virtual/input/input25
[  199.238551][   T41] audit: type=1326 audit(2000000043.759:44981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1edd8d169 code=0x7ffc0000
[  199.254842][   T41] audit: type=1326 audit(2000000043.759:44982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1edd8d169 code=0x7ffc0000
[  199.275534][   T41] audit: type=1326 audit(2000000043.759:44983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd1edd8d169 code=0x7ffc0000
[  199.303350][   T41] audit: type=1326 audit(2000000043.759:44984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1edd8d169 code=0x7ffc0000
[  199.353838][   T41] audit: type=1326 audit(2000000043.759:44985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1edd8d169 code=0x7ffc0000
[  199.374220][   T41] audit: type=1326 audit(2000000043.769:44986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd1edd8d169 code=0x7ffc0000
[  199.412854][   T41] audit: type=1326 audit(2000000043.769:44987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1edd8d169 code=0x7ffc0000
[  199.434561][   T41] audit: type=1326 audit(2000000043.769:44988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1edd8d169 code=0x7ffc0000
[  199.766714][T10472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.844357][T10472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.940259][T10472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.066429][T10472] bridge_slave_1: left allmulticast mode
[  200.068029][T10472] bridge_slave_1: left promiscuous mode
[  200.069710][T10472] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.084454][T10472] bridge_slave_0: left allmulticast mode
[  200.086077][T10472] bridge_slave_0: left promiscuous mode
[  200.093530][T10472] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.470415][T10472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.474634][T10472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.478617][T10472] bond0 (unregistering): Released all slaves
[  200.756440][ T5293] Bluetooth: hci2: command tx timeout
[  200.804670][T10472] hsr_slave_0: left promiscuous mode
[  200.807231][T10472] hsr_slave_1: left promiscuous mode
[  200.809039][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.811225][T10472] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.813797][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.816015][T10472] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.849220][T10472] veth1_macvtap: left promiscuous mode
[  200.851156][T10472] veth0_macvtap: left promiscuous mode
[  200.853418][T10472] veth1_vlan: left promiscuous mode
[  200.855388][T10472] veth0_vlan: left promiscuous mode
[  201.785061][T10472] team0 (unregistering): Port device team_slave_1 removed
[  201.890868][T10472] team0 (unregistering): Port device team_slave_0 removed
[  202.601453][T13542] misc userio: Invalid payload size
[  202.843885][ T5293] Bluetooth: hci2: command tx timeout
[  204.295872][T13512] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  204.304078][T13512] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  204.315323][T13512] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  204.328449][T13512] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  204.530863][T13512] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.541237][T13512] 8021q: adding VLAN 0 to HW filter on device team0
[  204.550640][T10459] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.552630][T10459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.570011][T10472] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.572757][T10472] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.663348][   T41] audit: type=1400 audit(2000000049.179:44989): avc:  denied  { read } for  pid=13556 comm="syz.3.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  204.774015][T13512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.917814][ T5293] Bluetooth: hci2: command tx timeout
[  205.059488][T13512] veth0_vlan: entered promiscuous mode
[  205.063552][T13512] veth1_vlan: entered promiscuous mode
[  205.074128][T13512] veth0_macvtap: entered promiscuous mode
[  205.079029][T13512] veth1_macvtap: entered promiscuous mode
[  205.087920][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.090893][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.093661][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.101009][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.103681][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.107247][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.112774][T13512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.119442][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.122492][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.125166][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.128147][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.130932][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.133796][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.137109][T13512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.140996][T13512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.143452][T13512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.145904][T13512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.148404][T13512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.235922][T10461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.245738][T10461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.264673][T10461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.269950][T10461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.433509][T13583] openvswitch: netlink: Flow key attr not present in new flow.
[  207.152899][T10460] Bluetooth: (null): Invalid header checksum
[  207.154787][T10460] Bluetooth: (null): Invalid header checksum
[  207.286825][T10468] Bluetooth: (null): Invalid header checksum
[  207.368492][T10465] Bluetooth: (null): Invalid header checksum
[  207.920445][T10461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.692032][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  208.699809][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  208.704392][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  208.710784][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  208.714042][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  208.717185][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  209.233187][T13629] chnl_net:caif_netlink_parms(): no params data found
[  209.370681][T13629] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.372818][T13629] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.375353][T13629] bridge_slave_0: entered allmulticast mode
[  209.379742][T13629] bridge_slave_0: entered promiscuous mode
[  209.386821][T13629] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.389032][T13629] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.391266][T13629] bridge_slave_1: entered allmulticast mode
[  209.396074][T13629] bridge_slave_1: entered promiscuous mode
[  209.477398][T13629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.483417][T13629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.545068][T13629] team0: Port device team_slave_0 added
[  209.548625][T13629] team0: Port device team_slave_1 added
[  209.570471][T13629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.572432][T13629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.580461][T13629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.584262][T13629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.586536][T13629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.595416][T13629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.736515][T13629] hsr_slave_0: entered promiscuous mode
[  209.739433][T13629] hsr_slave_1: entered promiscuous mode
[  209.742926][T13629] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.752813][T13629] Cannot create hsr debugfs directory
[  209.904786][T10461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.982603][T10461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.996304][T10043] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  210.103274][T10461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.175446][T10043] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  210.179719][T10043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.183151][T10043] usb 5-1: Product: syz
[  210.184972][T10043] usb 5-1: Manufacturer: syz
[  210.187160][T10043] usb 5-1: SerialNumber: syz
[  210.191085][T10043] usb 5-1: config 0 descriptor??
[  210.342977][T10461] bridge_slave_1: left allmulticast mode
[  210.345176][T10461] bridge_slave_1: left promiscuous mode
[  210.348239][T10461] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.364619][T10461] bridge_slave_0: left allmulticast mode
[  210.366409][T10461] bridge_slave_0: left promiscuous mode
[  210.369862][T10461] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.598728][T10043] usb 5-1: Firmware version (0.0) predates our first public release.
[  210.601093][T10043] usb 5-1: Please update to version 0.2 or newer
[  210.734222][T10461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.739078][T10461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.742746][T10461] bond0 (unregistering): Released all slaves
[  210.768216][ T5958] Bluetooth: hci2: command tx timeout
[  210.826515][   T41] audit: type=1400 audit(2000000055.339:44990): avc:  denied  { sys_ptrace } for  pid=13651 comm="syz.0.1941" capability=19  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  210.832683][T13652] use of bytesused == 0 is deprecated and will be removed in the future,
[  210.835099][T13652] use the actual size instead.
[  211.164940][T13679] usb 1-1: USB disconnect, device number 2
[  211.343591][T10461] hsr_slave_0: left promiscuous mode
[  211.348269][T10461] hsr_slave_1: left promiscuous mode
[  211.350910][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.353342][T10461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.356402][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.358055][T10043] usb 5-1: USB disconnect, device number 15
[  211.359225][T10461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.386566][T10461] veth1_macvtap: left promiscuous mode
[  211.388151][T10461] veth0_macvtap: left promiscuous mode
[  211.389731][T10461] veth1_vlan: left promiscuous mode
[  211.391209][T10461] veth0_vlan: left promiscuous mode
[  211.879738][T10455] Bluetooth: hci5: Frame reassembly failed (-84)
[  212.693354][T10461] team0 (unregistering): Port device team_slave_1 removed
[  212.829185][T10461] team0 (unregistering): Port device team_slave_0 removed
[  212.841249][ T5293] Bluetooth: hci2: command tx timeout
[  213.076243][   T63] usb 13-1: new high-speed USB device number 8 using dummy_hcd
[  213.253025][   T63] usb 13-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  213.256482][   T63] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.275056][   T63] usb 13-1: config 0 descriptor??
[  213.278898][   T63] cp210x 13-1:0.0: cp210x converter detected
[  213.686788][   T63] cp210x 13-1:0.0: failed to get vendor val 0x000e size 3: -71
[  213.689220][   T63] cp210x 13-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  213.691240][   T63] cp210x 13-1:0.0: GPIO initialisation failed: -71
[  213.718864][ T5293] Bluetooth: hci5: command 0x1003 tx timeout
[  213.718869][ T5958] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  213.722359][   T63] usb 13-1: cp210x converter now attached to ttyUSB0
[  213.739839][   T63] usb 13-1: USB disconnect, device number 8
[  213.762741][   T63] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  213.766422][   T63] cp210x 13-1:0.0: device disconnected
[  213.845536][   T41] audit: type=1400 audit(2000000058.359:44991): avc:  denied  { create } for  pid=13698 comm="syz.0.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  213.927362][   T41] audit: type=1400 audit(2000000058.449:44992): avc:  denied  { write } for  pid=13698 comm="syz.0.1953" path="socket:[59952]" dev="sockfs" ino=59952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  213.963380][T13629] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  213.993749][T13629] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  214.010520][T13629] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  214.017530][T13629] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  214.111098][T13629] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.125925][T13629] 8021q: adding VLAN 0 to HW filter on device team0
[  214.134161][T10465] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.136909][T10465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.148304][T10465] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.151033][T10465] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.297572][T13629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.403351][T13629] veth0_vlan: entered promiscuous mode
[  214.410197][T13629] veth1_vlan: entered promiscuous mode
[  214.433659][T13629] veth0_macvtap: entered promiscuous mode
[  214.438198][T13629] veth1_macvtap: entered promiscuous mode
[  214.451387][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.455265][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.459435][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.462018][   T41] audit: type=1400 audit(2000000058.979:44993): avc:  denied  { mount } for  pid=13705 comm="syz.8.1954" name="/" dev="rpc_pipefs" ino=62111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  214.462754][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.472668][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.475702][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.487592][T13629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.495096][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.498204][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.501744][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.504793][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.508542][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.512162][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.526916][T13629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.534383][T13629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.538210][T13629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.541223][T13629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.543992][T13629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.655619][T10460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.670249][T10460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.716510][T10468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.718788][T10468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.742097][   T41] audit: type=1400 audit(2000000060.259:44994): avc:  denied  { write } for  pid=13728 comm="syz.8.1958" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  215.824963][T13732] ieee802154 phy0 wpan0: encryption failed: -22
[  216.943958][T10465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.605162][   T41] audit: type=1400 audit(2000000062.119:44995): avc:  denied  { read } for  pid=13751 comm="syz.3.1964" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  217.619489][   T41] audit: type=1400 audit(2000000062.119:44996): avc:  denied  { open } for  pid=13751 comm="syz.3.1964" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  217.635580][   T41] audit: type=1400 audit(2000000062.119:44997): avc:  denied  { ioctl } for  pid=13751 comm="syz.3.1964" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  217.692729][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  217.701167][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  217.705492][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  217.709355][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  217.711748][ T5293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  217.713924][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  217.843646][T13758] chnl_net:caif_netlink_parms(): no params data found
[  217.936864][   T41] audit: type=1400 audit(2000000062.449:44998): avc:  denied  { read } for  pid=13760 comm="syz.3.1967" dev="sockfs" ino=62836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  218.237509][T13758] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.240187][T13758] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.243219][T13758] bridge_slave_0: entered allmulticast mode
[  218.245941][T13758] bridge_slave_0: entered promiscuous mode
[  218.249171][T13758] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.251177][T13758] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.253238][T13758] bridge_slave_1: entered allmulticast mode
[  218.255387][T13758] bridge_slave_1: entered promiscuous mode
[  218.276377][T13758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.280189][T13758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.310152][T13758] team0: Port device team_slave_0 added
[  218.313719][T13758] team0: Port device team_slave_1 added
[  218.334334][T13758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.336989][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.344151][T13758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.348308][T13758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.350331][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.357843][T13758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.386048][T13758] hsr_slave_0: entered promiscuous mode
[  218.388751][T13758] hsr_slave_1: entered promiscuous mode
[  218.390596][T13758] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.392827][T13758] Cannot create hsr debugfs directory
[  218.701912][T13788] xt_TPROXY: Can be used only with -p tcp or -p udp
[  218.860429][T10465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.953961][T10465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.038189][T10465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.156907][T10465] bridge_slave_1: left allmulticast mode
[  219.158570][T10465] bridge_slave_1: left promiscuous mode
[  219.161221][T10465] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.169435][T10465] bridge_slave_0: left allmulticast mode
[  219.171103][T10465] bridge_slave_0: left promiscuous mode
[  219.173510][T10465] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.567069][T10465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.573786][T10465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.584559][T10465] bond0 (unregistering): Released all slaves
[  219.687757][T13804] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  219.806364][ T5293] Bluetooth: hci2: command tx timeout
[  220.131841][T10465] hsr_slave_0: left promiscuous mode
[  220.137783][T10465] hsr_slave_1: left promiscuous mode
[  220.143024][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.145688][T10465] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.151962][T10465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.154345][T10465] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.223162][T10465] veth1_macvtap: left promiscuous mode
[  220.224950][T10465] veth0_macvtap: left promiscuous mode
[  220.226897][T10465] veth1_vlan: left promiscuous mode
[  220.228656][T10465] veth0_vlan: left promiscuous mode
[  221.896529][ T5293] Bluetooth: hci2: command tx timeout
[  222.223783][T10465] team0 (unregistering): Port device team_slave_1 removed
[  222.226473][ T5987] usb 13-1: new high-speed USB device number 9 using dummy_hcd
[  222.347538][T10465] team0 (unregistering): Port device team_slave_0 removed
[  222.376285][ T5987] usb 13-1: device descriptor read/64, error -71
[  222.636239][ T5987] usb 13-1: new high-speed USB device number 10 using dummy_hcd
[  222.762536][   T41] audit: type=1400 audit(2000000067.279:44999): avc:  denied  { append } for  pid=13832 comm="syz.0.1986" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  222.786666][T13839] hub 1-0:1.0: USB hub found
[  222.796348][T13839] hub 1-0:1.0: 6 ports detected
[  222.956312][ T5987] usb 13-1: device descriptor read/64, error -71
[  223.076483][ T5987] usb usb13-port1: attempt power cycle
[  223.086361][T10043] usb 1-1: new high-speed USB device number 3 using ehci-pci
[  223.185289][T13843] netlink: 'syz.3.1988': attribute type 1 has an invalid length.
[  223.189197][T13843] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1988'.
[  223.294676][T10043] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  223.297392][T10043] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  223.302038][T10043] usb 1-1: Product: QEMU USB Tablet
[  223.303612][T10043] usb 1-1: Manufacturer: QEMU
[  223.305008][T10043] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  223.356457][T10043] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input26
[  223.436263][ T5987] usb 13-1: new high-speed USB device number 11 using dummy_hcd
[  223.460220][ T5987] usb 13-1: device descriptor read/8, error -71
[  223.460234][T10043] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  223.573158][T10441] udevd[10441]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system
[  223.580736][T10441] udevd[10441]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system
[  223.921447][ T5987] usb 13-1: new high-speed USB device number 12 using dummy_hcd
[  223.937865][ T5987] usb 13-1: device descriptor read/8, error -71
[  223.947706][T13758] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  223.966241][ T5293] Bluetooth: hci2: command tx timeout
[  223.975178][T13758] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  224.012998][ T7370] udevd[7370]: setting mode of /dev/input/mouse1 to 020660 failed: Read-only file system
[  224.015249][ T6481] udevd[6481]: setting mode of /dev/input/event3 to 020660 failed: Read-only file system
[  224.015775][ T7370] udevd[7370]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: Read-only file system
[  224.019868][ T6481] udevd[6481]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: Read-only file system
[  224.033864][T13758] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  224.050232][T13758] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  224.060482][ T5987] usb usb13-port1: unable to enumerate USB device
[  224.131010][T13758] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.138722][T13758] 8021q: adding VLAN 0 to HW filter on device team0
[  224.142590][T10468] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.144633][T10468] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.153859][T10460] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.156162][T10460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.390474][T13758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.513641][T13758] veth0_vlan: entered promiscuous mode
[  224.519588][T13758] veth1_vlan: entered promiscuous mode
[  224.530196][T13758] veth0_macvtap: entered promiscuous mode
[  224.533388][T13758] veth1_macvtap: entered promiscuous mode
[  224.540480][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.543310][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.545978][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.550001][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.553671][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.557861][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.562574][T13758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.582212][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.585212][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.589471][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.592252][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.594842][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.599350][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.602666][T13758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.609801][T13758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.612263][T13758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.614586][T13758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.620378][T13758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.658887][T10465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.664619][T10465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.684149][T10465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.687061][T10465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.594604][T13880] netlink: 'syz.3.1995': attribute type 9 has an invalid length.
[  227.169638][T10461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.067394][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  228.072230][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  228.075456][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  228.078969][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  228.081172][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  228.083187][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  228.229669][T13906] chnl_net:caif_netlink_parms(): no params data found
[  228.312898][T13906] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.314927][T13906] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.326574][T13906] bridge_slave_0: entered allmulticast mode
[  228.328942][T13906] bridge_slave_0: entered promiscuous mode
[  228.331464][T13906] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.333418][T13906] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.335385][T13906] bridge_slave_1: entered allmulticast mode
[  228.346594][T13906] bridge_slave_1: entered promiscuous mode
[  228.348206][T13918] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2003'.
[  228.389219][T13906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.395243][T13906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.422662][T13906] team0: Port device team_slave_0 added
[  228.425759][T13906] team0: Port device team_slave_1 added
[  228.458677][T13906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.460629][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.467742][T13906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.472644][T13906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.474503][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.481370][T13906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.507056][T13906] hsr_slave_0: entered promiscuous mode
[  228.508978][T13906] hsr_slave_1: entered promiscuous mode
[  228.510675][T13906] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.512713][T13906] Cannot create hsr debugfs directory
[  229.159227][T10461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.220437][T10461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.256275][ T6020] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  229.306574][T10461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.450553][T10461] bridge_slave_1: left allmulticast mode
[  229.452254][T10461] bridge_slave_1: left promiscuous mode
[  229.455301][T10461] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.459167][T10461] bridge_slave_0: left allmulticast mode
[  229.461017][T10461] bridge_slave_0: left promiscuous mode
[  229.462658][T10461] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.785769][ T6020] usb 5-1: Using ep0 maxpacket: 32
[  229.788891][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.792027][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.794736][ T6020] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  229.797799][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.801198][ T6020] usb 5-1: config 0 descriptor??
[  229.803806][ T6020] hub 5-1:0.0: USB hub found
[  230.008184][ T6020] hub 5-1:0.0: 1 port detected
[  230.116656][ T5293] Bluetooth: hci2: command tx timeout
[  230.146487][T10461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.151131][T10461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.155436][T10461] bond0 (unregistering): Released all slaves
[  230.299545][   T41] audit: type=1400 audit(2000000074.819:45000): avc:  denied  { create } for  pid=13945 comm="syz.3.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  230.304685][T13946] bpq0: entered promiscuous mode
[  230.304891][   T41] audit: type=1400 audit(2000000074.819:45001): avc:  denied  { ioctl } for  pid=13945 comm="syz.3.2013" path="socket:[60958]" dev="sockfs" ino=60958 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  230.306349][T13946] bpq0: entered allmulticast mode
[  230.412354][T13951] veth1_to_bond: entered allmulticast mode
[  230.452409][T13951] veth1_to_bond: entered promiscuous mode
[  230.454869][T13951] veth1_to_bond: left promiscuous mode
[  230.456826][T13951] veth1_to_bond: left allmulticast mode
[  230.488603][T13955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.490644][T13955] IPv6: NLM_F_CREATE should be set when creating new route
[  230.494987][T13955] lo: entered allmulticast mode
[  230.498893][T13955] tunl0: entered allmulticast mode
[  230.501846][T13955] gre0: entered allmulticast mode
[  230.508181][T13955] gretap0: entered allmulticast mode
[  230.511252][T13955] erspan0: entered allmulticast mode
[  230.514805][T13955] ip_vti0: entered allmulticast mode
[  230.518810][T13955] ip6_vti0: entered allmulticast mode
[  230.521872][T13955] sit0: entered allmulticast mode
[  230.525164][T13955] ip6tnl0: entered allmulticast mode
[  230.529891][T13955] ip6gre0: entered allmulticast mode
[  230.532494][T13955] syz_tun: entered allmulticast mode
[  230.535324][T13955] ip6gretap0: entered allmulticast mode
[  230.539489][T13955] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.541637][T13955] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.544704][T13955] bridge0: entered allmulticast mode
[  230.547607][T13955] vcan0: entered allmulticast mode
[  230.551094][T13955] bond0: entered allmulticast mode
[  230.552554][T13955] bond_slave_0: entered allmulticast mode
[  230.554145][T13955] bond_slave_1: entered allmulticast mode
[  230.560182][T13955] team0: entered allmulticast mode
[  230.561668][T13955] team_slave_0: entered allmulticast mode
[  230.563262][T13955] team_slave_1: entered allmulticast mode
[  230.567765][T13955] dummy0: entered allmulticast mode
[  230.570488][T13955] nlmon0: entered allmulticast mode
[  230.572591][T13955] caif0: entered allmulticast mode
[  230.574260][T13955] batadv0: entered allmulticast mode
[  230.576970][T13955] vxcan0: entered allmulticast mode
[  230.578928][T13955] vxcan1: entered allmulticast mode
[  230.581647][T13955] veth0: entered allmulticast mode
[  230.584981][T13955] veth1: entered allmulticast mode
[  230.589870][T13955] wg0: entered allmulticast mode
[  230.592498][T13955] wg1: entered allmulticast mode
[  230.595666][T13955] wg2: entered allmulticast mode
[  230.600430][T13955] veth0_to_bridge: entered allmulticast mode
[  230.608521][T13955] veth1_to_bridge: entered allmulticast mode
[  230.617149][  T835] hub 5-1:0.0: activate --> -90
[  230.618394][T13955] veth0_to_bond: entered allmulticast mode
[  230.626805][T13955] veth1_to_bond: entered allmulticast mode
[  230.630843][T13955] veth0_to_team: entered allmulticast mode
[  230.635206][T13955] veth1_to_team: entered allmulticast mode
[  230.640094][T13955] veth0_to_batadv: entered allmulticast mode
[  230.642963][T13955] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.646693][T13955] batadv_slave_0: entered allmulticast mode
[  230.651274][T13955] veth1_to_batadv: entered allmulticast mode
[  230.654118][T13955] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.657628][T13955] batadv_slave_1: entered allmulticast mode
[  230.661157][T13955] xfrm0: entered allmulticast mode
[  230.665339][T13955] veth0_to_hsr: entered allmulticast mode
[  230.668448][T13955] hsr_slave_0: entered allmulticast mode
[  230.671745][T13955] veth1_to_hsr: entered allmulticast mode
[  230.674392][T13955] hsr_slave_1: entered allmulticast mode
[  230.677034][T13955] hsr0: entered allmulticast mode
[  230.682806][T13955] veth1_virt_wifi: entered allmulticast mode
[  230.688091][T13955] veth0_virt_wifi: entered allmulticast mode
[  230.691224][T13955] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  230.695111][T13955] veth1_vlan: entered allmulticast mode
[  230.700108][T13955] veth0_vlan: entered allmulticast mode
[  230.705247][T13955] vlan0: entered allmulticast mode
[  230.707156][T13955] vlan1: entered allmulticast mode
[  230.709068][T13955] macvlan0: entered allmulticast mode
[  230.713716][T13955] macvlan1: entered allmulticast mode
[  230.716218][ T6020] usb 13-1: new high-speed USB device number 13 using dummy_hcd
[  230.716854][T13955] ipvlan0: entered allmulticast mode
[  230.719914][T13955] ipvlan1: entered allmulticast mode
[  230.722594][T13955] veth1_macvtap: entered allmulticast mode
[  230.726283][T13955] veth0_macvtap: entered allmulticast mode
[  230.729314][T13955] macvtap0: entered allmulticast mode
[  230.732864][T13955] macsec0: entered allmulticast mode
[  230.737879][T13955] geneve0: entered allmulticast mode
[  230.740578][T13955] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.743023][T13955] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.745480][T13955] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.748199][T13955] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.750815][T13955] geneve1: entered allmulticast mode
[  230.753588][T13955] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  230.758821][T13955] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  230.762515][T13955] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  230.765907][T13955] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  230.772456][T13955] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode
[  230.780636][T13955] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode
[  230.784583][T13955] syztnl2: entered allmulticast mode
[  230.800769][T10461] hsr_slave_0: left promiscuous mode
[  230.802634][T10461] hsr_slave_1: left promiscuous mode
[  230.804371][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.806583][T10461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.808972][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.811016][T10461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.838748][T10461] veth1_macvtap: left promiscuous mode
[  230.840374][T10461] veth0_macvtap: left promiscuous mode
[  230.841935][T10461] veth1_vlan: left promiscuous mode
[  230.843404][T10461] veth0_vlan: left promiscuous mode
[  230.867522][ T6020] usb 13-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  230.870524][ T6020] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  230.873997][ T6020] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  230.877005][ T6020] usb 13-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.880760][ T6020] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  230.884383][ T6020] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.891044][ T6020] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[  230.893595][ T6020] usb 13-1: invalid MIDI out EP 0
[  231.036549][   T63] usb 5-1: USB disconnect, device number 16
[  231.065579][ T6020] snd-usb-audio 13-1:27.0: probe with driver snd-usb-audio failed with error -22
[  231.091435][ T9894] usb 13-1: USB disconnect, device number 13
[  231.338931][T13957] syz.3.2018: attempt to access beyond end of device
[  231.338931][T13957] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  231.343326][T13957] syz.3.2018: attempt to access beyond end of device
[  231.343326][T13957] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  231.347848][T13957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  231.351376][T13957] syz.3.2018: attempt to access beyond end of device
[  231.351376][T13957] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  231.356015][T13957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  231.369638][T13957] syz.3.2018: attempt to access beyond end of device
[  231.369638][T13957] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  231.374127][T13957] syz.3.2018: attempt to access beyond end of device
[  231.374127][T13957] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  231.378669][T13957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  231.382134][T13957] syz.3.2018: attempt to access beyond end of device
[  231.382134][T13957] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  231.386078][T13957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  231.389896][T13957] syz.3.2018: attempt to access beyond end of device
[  231.389896][T13957] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  231.394356][T13957] syz.3.2018: attempt to access beyond end of device
[  231.394356][T13957] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  231.397984][T13957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  231.400524][T13957] syz.3.2018: attempt to access beyond end of device
[  231.400524][T13957] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  231.404930][T13957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  231.408518][T13957] syz.3.2018: attempt to access beyond end of device
[  231.408518][T13957] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  231.412023][T13957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  231.414852][T13957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  231.418648][T13957] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  232.196253][ T5293] Bluetooth: hci2: command tx timeout
[  232.281865][T10461] team0 (unregistering): Port device team_slave_1 removed
[  232.454026][T10461] team0 (unregistering): Port device team_slave_0 removed
[  233.381015][T13964] : entered promiscuous mode
[  233.433316][T13906] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  233.439130][T13906] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  233.445918][T13987] udevd[13987]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  233.454284][T13906] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  233.459252][T13906] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  233.508629][T13906] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.515714][T13906] 8021q: adding VLAN 0 to HW filter on device team0
[  233.523953][T10408] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.526444][T10408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.534613][T10455] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.537164][T10455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.659637][T13906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.666472][   T41] audit: type=1400 audit(2000000078.179:45002): avc:  denied  { execute } for  pid=13988 comm="syz.8.2026" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  233.920979][T13906] veth0_vlan: entered promiscuous mode
[  233.926023][T13906] veth1_vlan: entered promiscuous mode
[  233.942345][T13906] veth0_macvtap: entered promiscuous mode
[  233.945854][T13906] veth1_macvtap: entered promiscuous mode
[  233.956639][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.959596][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.962334][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.965800][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.970935][T13906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.987720][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.990748][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.993609][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.996745][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.999862][T13906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.003969][T13906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.007899][T13906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.010690][T13906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.013305][T13906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.057323][T10455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.059984][T10455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.075423][T10408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.079901][T10408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.504106][T14015] syz.0.2031 (14015): drop_caches: 2
[  235.315793][T14024] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.2034' sets config #3
[  236.023228][T10461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.931048][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.936467][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.940169][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.943914][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.949199][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  236.951458][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.081200][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'.
[  237.090356][T14048] chnl_net:caif_netlink_parms(): no params data found
[  237.096821][T10085] usb 13-1: new high-speed USB device number 14 using dummy_hcd
[  237.171760][T14048] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.173759][T14048] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.175753][T14048] bridge_slave_0: entered allmulticast mode
[  237.178241][T14048] bridge_slave_0: entered promiscuous mode
[  237.181059][T14048] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.183259][T14048] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.185290][T14048] bridge_slave_1: entered allmulticast mode
[  237.187939][T14048] bridge_slave_1: entered promiscuous mode
[  237.209790][T14048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.213598][T14048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.235533][T14048] team0: Port device team_slave_0 added
[  237.239940][T14048] team0: Port device team_slave_1 added
[  237.257697][T14048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.259527][T14048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.267618][T14048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.271271][T14048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.273170][T14048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.276245][T10085] usb 13-1: Using ep0 maxpacket: 8
[  237.280271][T14048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.282744][T10085] usb 13-1: config index 0 descriptor too short (expected 301, got 45)
[  237.286600][T10085] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  237.289293][T10085] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  237.292290][T10085] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  237.295876][T10085] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  237.300912][T10085] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  237.304261][T10085] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.314096][T14048] hsr_slave_0: entered promiscuous mode
[  237.316079][T14048] hsr_slave_1: entered promiscuous mode
[  237.318080][T14048] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.320087][T14048] Cannot create hsr debugfs directory
[  237.386570][T14061] ieee802154 phy0 wpan0: encryption failed: -22
[  237.518431][T10085] usb 13-1: GET_CAPABILITIES returned 0
[  237.520558][T10085] usbtmc 13-1:16.0: can't read capabilities
[  237.724564][T10043] usb 13-1: USB disconnect, device number 14
[  237.767073][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'.
[  238.040783][T10461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.117888][T10461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.166796][   T41] audit: type=1326 audit(2000000082.689:45003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14074 comm="syz.3.2050" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1f4b8d169 code=0x0
[  238.201727][T10461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.384524][T10461] bridge_slave_1: left allmulticast mode
[  238.386194][T10461] bridge_slave_1: left promiscuous mode
[  238.388523][T10461] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.391783][T10461] bridge_slave_0: left allmulticast mode
[  238.393361][T10461] bridge_slave_0: left promiscuous mode
[  238.394915][T10461] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.513563][T14081] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2052'.
[  238.944458][T10461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.966508][T10461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.970670][T10461] bond0 (unregistering): Released all slaves
[  238.996304][ T5293] Bluetooth: hci2: command tx timeout
[  239.301179][T10461] hsr_slave_0: left promiscuous mode
[  239.303044][T10461] hsr_slave_1: left promiscuous mode
[  239.304842][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.307166][T10461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.310118][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.312420][T10461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.343483][T10461] veth1_macvtap: left promiscuous mode
[  239.345105][T10461] veth0_macvtap: left promiscuous mode
[  239.346853][T10461] veth1_vlan: left promiscuous mode
[  239.348400][T10461] veth0_vlan: left promiscuous mode
[  239.518947][T14096] xt_TPROXY: Can be used only with -p tcp or -p udp
[  239.992458][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2058'.
[  240.382183][T10461] team0 (unregistering): Port device team_slave_1 removed
[  240.488989][T10461] team0 (unregistering): Port device team_slave_0 removed
[  240.561153][T14113] hfsplus: unable to find HFS+ superblock
[  240.876240][   T63] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  241.042524][   T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.046900][   T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.050258][   T63] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  241.053795][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.067562][   T63] usb 5-1: config 0 descriptor??
[  241.086292][ T5293] Bluetooth: hci2: command tx timeout
[  241.746223][   T63] usb 5-1: USB disconnect, device number 17
[  242.146709][T14048] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  242.152139][T14048] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  242.160153][T14048] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  242.165540][T14048] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  242.300603][T14048] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.310103][T14048] 8021q: adding VLAN 0 to HW filter on device team0
[  242.314223][T10468] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.316310][T10468] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.327587][T10455] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.330459][T10455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.440506][T14137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input29
[  242.681872][T14048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.784981][T14048] veth0_vlan: entered promiscuous mode
[  242.792063][T14048] veth1_vlan: entered promiscuous mode
[  242.809055][T14048] veth0_macvtap: entered promiscuous mode
[  242.812758][T14048] veth1_macvtap: entered promiscuous mode
[  242.820463][T14048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.824313][T14048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.826272][ T5987] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  242.831393][T14048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.835214][T14048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.840316][T14048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.845548][T14048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.851877][T14048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.855497][T14048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.859367][T14048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.863557][T14048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.869884][T14048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.873145][T14048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.877459][T14048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.880719][T14048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.930058][T10460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.932906][T10460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.949575][T10460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.952359][T10460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.998027][ T5987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.009702][ T5987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  243.014190][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.023456][ T5987] usb 5-1: Product: syz
[  243.026233][ T5987] usb 5-1: Manufacturer: syz
[  243.029646][ T5987] usb 5-1: SerialNumber: syz
[  243.416253][ T6005] usb 13-1: new high-speed USB device number 15 using dummy_hcd
[  243.586264][ T6005] usb 13-1: Using ep0 maxpacket: 16
[  243.590912][ T6005] usb 13-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[  243.594229][ T6005] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.596815][ T6005] usb 13-1: Product: syz
[  243.598032][ T6005] usb 13-1: Manufacturer: syz
[  243.599395][ T6005] usb 13-1: SerialNumber: syz
[  243.601550][ T6005] usb 13-1: config 0 descriptor??
[  243.604125][ T6005] ems_usb 13-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  243.607211][ T6005] ems_usb 13-1:0.0: probe with driver ems_usb failed with error -22
[  244.241696][ T5987] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  244.243545][ T5987] cdc_ncm 5-1:1.0: setting tx_max = 76
[  244.249838][ T5987] cdc_ncm 5-1:1.0 eth26: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  244.299689][ T6005] usb 5-1: USB disconnect, device number 18
[  244.310052][ T6005] cdc_ncm 5-1:1.0 eth26: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  245.228521][T10462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.248729][T10085] usb 13-1: USB disconnect, device number 15
[  246.703145][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.708982][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.713834][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.721278][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.723959][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  246.726459][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.810223][T14172] chnl_net:caif_netlink_parms(): no params data found
[  246.870568][T14172] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.872706][T14172] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.874759][T14172] bridge_slave_0: entered allmulticast mode
[  246.877652][T14172] bridge_slave_0: entered promiscuous mode
[  246.880498][T14172] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.882664][T14172] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.885516][T14172] bridge_slave_1: entered allmulticast mode
[  246.888786][T14172] bridge_slave_1: entered promiscuous mode
[  246.914625][T14172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.918539][T14172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.947129][T14172] team0: Port device team_slave_0 added
[  246.950516][T14172] team0: Port device team_slave_1 added
[  246.969508][T14172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.971559][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.979265][T14172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.983052][T14172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.985076][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.992122][T14172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.017406][T14172] hsr_slave_0: entered promiscuous mode
[  247.019386][T14172] hsr_slave_1: entered promiscuous mode
[  247.021340][T14172] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.023492][T14172] Cannot create hsr debugfs directory
[  247.260147][T10462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.339749][T10462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.372363][T14189] usb 1-1: USB disconnect, device number 3
[  247.415407][T14189] hub 1-0:1.0: USB hub found
[  247.417211][T14189] hub 1-0:1.0: 6 ports detected
[  247.463839][T10462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.577170][T10043] usb 1-1: new high-speed USB device number 4 using ehci-pci
[  247.639859][T10462] bridge_slave_1: left allmulticast mode
[  247.643288][T10462] bridge_slave_1: left promiscuous mode
[  247.650868][T10462] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.655299][T10462] bridge_slave_0: left allmulticast mode
[  247.657560][T10462] bridge_slave_0: left promiscuous mode
[  247.659412][T10462] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.760997][T10043] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  247.763662][T10043] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  247.766006][T10043] usb 1-1: Product: QEMU USB Tablet
[  247.767865][T10043] usb 1-1: Manufacturer: QEMU
[  247.771561][T10043] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  247.825669][T10043] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input30
[  247.852454][T10043] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  247.962070][T10441] udevd[10441]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system
[  247.966448][T10441] udevd[10441]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system
[  247.999853][T13987] udevd[13987]: setting mode of /dev/input/mouse1 to 020660 failed: Read-only file system
[  248.002677][T13987] udevd[13987]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: Read-only file system
[  248.110632][ T7370] udevd[7370]: setting mode of /dev/input/event3 to 020660 failed: Read-only file system
[  248.113462][ T7370] udevd[7370]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: Read-only file system
[  248.170201][T10462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.176883][T10462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.184017][T10462] bond0 (unregistering): Released all slaves
[  248.757094][ T5293] Bluetooth: hci2: command tx timeout
[  248.928439][T10462] hsr_slave_0: left promiscuous mode
[  248.931906][T10462] hsr_slave_1: left promiscuous mode
[  248.935359][T10462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.942794][T10462] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.952607][T10462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.954871][T10462] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.991105][T10462] veth1_macvtap: left promiscuous mode
[  248.992828][T10462] veth0_macvtap: left promiscuous mode
[  248.994480][T10462] veth1_vlan: left promiscuous mode
[  248.996029][T10462] veth0_vlan: left promiscuous mode
[  250.058928][   T41] audit: type=1326 audit(2000000094.579:45004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.3.2089" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1f4b8d169 code=0x0
[  250.226265][T10462] team0 (unregistering): Port device team_slave_1 removed
[  250.373560][T10462] team0 (unregistering): Port device team_slave_0 removed
[  250.836200][ T5293] Bluetooth: hci2: command tx timeout
[  251.350577][T14172] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  251.353865][T14172] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  251.357958][T14172] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  251.361808][T14172] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  251.412594][T14172] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.422071][T14172] 8021q: adding VLAN 0 to HW filter on device team0
[  251.426529][T10408] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.428882][T10408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.437783][T10408] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.439810][T10408] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.466634][   T26] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  251.528242][T14172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.637466][   T26] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  251.639937][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.644481][   T26] usb 5-1: config 0 descriptor??
[  251.649900][   T26] cp210x 5-1:0.0: cp210x converter detected
[  251.672370][T14172] veth0_vlan: entered promiscuous mode
[  251.677183][T14172] veth1_vlan: entered promiscuous mode
[  251.693370][T14172] veth0_macvtap: entered promiscuous mode
[  251.697932][T14172] veth1_macvtap: entered promiscuous mode
[  251.705528][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.746187][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.748985][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.751907][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.757359][T14172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.762568][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.765518][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.768702][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.771587][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.775399][T14172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.780059][T14172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.782717][T14172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.785523][T14172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.791223][T14172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.819044][ T5293] Bluetooth: hci4: unexpected event for opcode 0x200c
[  251.859433][T10459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.861880][T10459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.874041][T10408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.877773][T10408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.253737][   T26] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  252.256197][   T26] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  252.259023][   T26] usb 5-1: cp210x converter now attached to ttyUSB0
[  252.262675][   T26] usb 5-1: USB disconnect, device number 19
[  252.265731][   T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  252.268708][   T26] cp210x 5-1:0.0: device disconnected
[  253.424810][   T41] audit: type=1800 audit(2000000097.939:45005): pid=14258 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2098" name="/" dev="fuse" ino=0 res=0 errno=0
[  253.742649][T14283] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  254.226183][   T63] usb 13-1: new high-speed USB device number 16 using dummy_hcd
[  254.397473][   T63] usb 13-1: config 0 has an invalid interface number: 117 but max is 0
[  254.399883][   T63] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.402833][   T63] usb 13-1: config 0 has no interface number 0
[  254.404958][   T63] usb 13-1: config 0 interface 117 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  254.408114][   T63] usb 13-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  254.413237][   T63] usb 13-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  254.415699][   T63] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.418016][   T63] usb 13-1: Product: syz
[  254.419236][   T63] usb 13-1: Manufacturer: syz
[  254.420654][   T63] usb 13-1: SerialNumber: syz
[  254.422899][   T63] usb 13-1: config 0 descriptor??
[  254.511506][T10468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.478252][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  255.480531][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  255.562075][   T41] audit: type=1326 audit(2000000100.079:45006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.3.2109" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1f4b8d169 code=0x0
[  255.671269][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.676322][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.680744][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.684957][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.693601][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  255.699711][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.810719][T14295] chnl_net:caif_netlink_parms(): no params data found
[  255.869872][T14295] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.871842][T14295] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.873761][T14295] bridge_slave_0: entered allmulticast mode
[  255.875882][T14295] bridge_slave_0: entered promiscuous mode
[  255.881087][T14295] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.883115][T14295] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.885094][T14295] bridge_slave_1: entered allmulticast mode
[  255.887943][T14295] bridge_slave_1: entered promiscuous mode
[  255.909541][T14295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.913434][T14295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.947639][T14295] team0: Port device team_slave_0 added
[  255.950926][T14295] team0: Port device team_slave_1 added
[  255.956024][T14305] sp0: Synchronizing with TNC
[  255.982963][T14295] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.984951][T14295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.994123][T14295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.001053][T14295] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.003556][T14295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.013258][T14295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.037785][T14295] hsr_slave_0: entered promiscuous mode
[  256.039659][T14295] hsr_slave_1: entered promiscuous mode
[  256.041405][T14295] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.043430][T14295] Cannot create hsr debugfs directory
[  256.047800][T14306] sp0: Synchronizing with TNC
[  256.375071][T10468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.568485][T10468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.644639][T10468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.755442][   T63] usb 13-1: USB disconnect, device number 16
[  256.946361][T10468] bridge_slave_1: left allmulticast mode
[  256.948557][T10468] bridge_slave_1: left promiscuous mode
[  256.951927][T10468] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.958840][T10468] bridge_slave_0: left allmulticast mode
[  256.960559][T10468] bridge_slave_0: left promiscuous mode
[  256.962935][T10468] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.385296][T10468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.389265][T10468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.392705][T10468] bond0 (unregistering): Released all slaves
[  257.716286][ T5958] Bluetooth: hci2: command tx timeout
[  257.757124][T10468] hsr_slave_0: left promiscuous mode
[  257.759105][T10468] hsr_slave_1: left promiscuous mode
[  257.760963][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.763094][T10468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.765920][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.768715][T10468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.803902][T14348] affs: No valid root block on device nullb0
[  257.811910][T10468] veth1_macvtap: left promiscuous mode
[  257.813757][T10468] veth0_macvtap: left promiscuous mode
[  257.815450][T10468] veth1_vlan: left promiscuous mode
[  257.817149][T10468] veth0_vlan: left promiscuous mode
[  258.536241][T13320] usb 13-1: new high-speed USB device number 17 using dummy_hcd
[  258.686181][T13320] usb 13-1: Using ep0 maxpacket: 32
[  258.702278][T13320] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  258.705123][T13320] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.714118][T13320] usb 13-1: config 0 descriptor??
[  258.759238][T13320] as10x_usb: device has been detected
[  258.761498][T13320] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  258.833554][T13320] usb 13-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  258.955727][T10468] team0 (unregistering): Port device team_slave_1 removed
[  259.043403][T13320] as10x_usb: error during firmware upload part1
[  259.045912][T13320] Registered device nBox DVB-T Dongle
[  259.151258][T10468] team0 (unregistering): Port device team_slave_0 removed
[  259.305584][   T36] usb 13-1: USB disconnect, device number 17
[  259.338149][   T36] Unregistered device nBox DVB-T Dongle
[  259.338554][   T36] as10x_usb: device has been disconnected
[  259.761587][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'.
[  259.806712][ T5958] Bluetooth: hci2: command tx timeout
[  259.990758][   T63] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  260.197749][   T63] usb 5-1: string descriptor 0 read error: -22
[  260.199337][   T63] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  260.201666][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.212969][   T63] usb 5-1: config 0 descriptor??
[  260.217539][   T63] usbtest 5-1:0.0: FX2 device
[  260.218793][   T63] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  260.260081][T14384] 8021q: adding VLAN 0 to HW filter on device team1
[  260.563148][T14295] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  260.589800][T14295] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  260.631410][T14295] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  260.647799][T14295] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  260.715404][T14295] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.736328][T14295] 8021q: adding VLAN 0 to HW filter on device team0
[  260.740229][   T63] IPVS: starting estimator thread 0...
[  260.740234][T14394] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  260.758274][T10462] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.760303][T10462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.763141][T10462] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.765049][T10462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.847324][T14396] IPVS: using max 24 ests per chain, 57600 per kthread
[  260.870352][T14295] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.164697][T14295] veth0_vlan: entered promiscuous mode
[  261.180537][T14295] veth1_vlan: entered promiscuous mode
[  261.191292][T14295] veth0_macvtap: entered promiscuous mode
[  261.194414][T14295] veth1_macvtap: entered promiscuous mode
[  261.201449][T14295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.204353][T14295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.207285][T14295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.210459][T14295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.213845][T14295] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.222357][T14295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.226712][T14295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.230122][T14295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.233090][T14295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.237303][T14295] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.241831][T14295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.244185][T14295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.246918][T14295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.249491][T14295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.315761][T10461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.318599][T10461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.330233][T10461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.332866][T10461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.375724][T14295] ------------[ cut here ]------------
[  261.378080][T14295] refcount_t: underflow; use-after-free.
[  261.379820][T14295] WARNING: CPU: 3 PID: 14295 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210
[  261.382392][T14295] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  261.383612][T14295] CPU: 3 UID: 0 PID: 14295 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  261.388219][T14295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  261.391096][T14295] RIP: 0010:refcount_warn_saturate+0x14a/0x210
[  261.392772][T14295] Code: ff 89 de e8 98 1b f5 fc 84 db 0f 85 66 ff ff ff e8 eb 20 f5 fc c6 05 a7 26 86 0b 01 90 48 c7 c7 a0 16 d3 8b e8 b7 4e b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 c8 20 f5 fc 0f b6 1d 82 26 86 0b 31
[  261.398317][T14295] RSP: 0018:ffffc90003cff968 EFLAGS: 00010286
[  261.400073][T14295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269
[  261.402254][T14295] RDX: ffff888032282440 RSI: ffffffff817a2276 RDI: 0000000000000001
[  261.404491][T14295] RBP: ffff888025cfac78 R08: 0000000000000001 R09: 0000000000000000
[  261.406834][T14295] R10: 0000000000000000 R11: 0000000000000004 R12: ffff88805a51f400
[  261.409036][T14295] R13: ffff888025cfac78 R14: ffffffff85ec4410 R15: dffffc0000000000
[  261.411236][T14295] FS:  0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
[  261.413695][T14295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  261.415537][T14295] CR2: 00007fa1f29f5f98 CR3: 000000003cb76000 CR4: 0000000000352ef0
[  261.417799][T14295] Call Trace:
[  261.418752][T14295]  <TASK>
[  261.419591][T14295]  ? __warn+0xea/0x3c0
[  261.420802][T14295]  ? __pfx_vprintk_emit+0x10/0x10
[  261.422214][T14295]  ? refcount_warn_saturate+0x14a/0x210
[  261.423767][T14295]  ? report_bug+0x3c0/0x580
[  261.425057][T14295]  ? handle_bug+0x54/0xa0
[  261.426314][T14295]  ? exc_invalid_op+0x17/0x50
[  261.427585][T14295]  ? asm_exc_invalid_op+0x1a/0x20
[  261.429011][T14295]  ? __pfx_klist_children_put+0x10/0x10
[  261.430572][T14295]  ? __warn_printk+0x199/0x350
[  261.431931][T14295]  ? __warn_printk+0x1a6/0x350
[  261.433300][T14295]  ? refcount_warn_saturate+0x14a/0x210
[  261.434857][T14295]  ? refcount_warn_saturate+0x149/0x210
[  261.436478][T14295]  klist_put+0x11b/0x1b0
[  261.437723][T14295]  klist_remove+0x140/0x2b0
[  261.439005][T14295]  ? __pfx_klist_remove+0x10/0x10
[  261.440449][T14295]  ? get_device_parent+0x1ed/0x4e0
[  261.441891][T14295]  device_move+0x12d/0x10b0
[  261.443170][T14295]  hci_conn_del_sysfs+0x81/0x180
[  261.444631][T14295]  hci_conn_del+0x54e/0xdb0
[  261.445917][T14295]  hci_conn_hash_flush+0x186/0x260
[  261.447398][T14295]  hci_dev_close_sync+0x603/0x11a0
[  261.448952][T14295]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  261.450503][T14295]  ? up_write+0x1b2/0x520
[  261.451738][T14295]  ? rcu_is_watching+0x12/0xc0
[  261.453088][T14295]  hci_dev_do_close+0x2e/0x90
[  261.454444][T14295]  hci_unregister_dev+0x213/0x620
[  261.456028][T14295]  ? __pfx_vhci_release+0x10/0x10
[  261.457632][T14295]  vhci_release+0x79/0xf0
[  261.458860][T14295]  __fput+0x3ff/0xb70
[  261.460032][T14295]  task_work_run+0x14e/0x250
[  261.461356][T14295]  ? __pfx_task_work_run+0x10/0x10
[  261.462797][T14295]  do_exit+0xad8/0x2db0
[  261.463977][T14295]  ? do_group_exit+0x1c3/0x2a0
[  261.465335][T14295]  ? __pfx_lock_release+0x10/0x10
[  261.466823][T14295]  ? do_raw_spin_lock+0x12d/0x2c0
[  261.468251][T14295]  ? __pfx_do_exit+0x10/0x10
[  261.469548][T14295]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  261.471092][T14295]  do_group_exit+0xd3/0x2a0
[  261.472388][T14295]  __x64_sys_exit_group+0x3e/0x50
[  261.473799][T14295]  x64_sys_call+0x151f/0x1720
[  261.475143][T14295]  do_syscall_64+0xcd/0x250
[  261.476537][T14295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.478219][T14295] RIP: 0033:0x7fd7e418d169
[  261.479484][T14295] Code: Unable to access opcode bytes at 0x7fd7e418d13f.
[  261.481435][T14295] RSP: 002b:00007ffd80f149f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  261.483758][T14295] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7e418d169
[  261.485953][T14295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  261.488225][T14295] RBP: 00007fd7e41ed8d0 R08: 00007ffd80f12797 R09: 0000000000000003
[  261.490416][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.492609][T14295] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd80f14bb0
[  261.494808][T14295]  </TASK>
[  261.495707][T14295] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  261.497717][T14295] CPU: 3 UID: 0 PID: 14295 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  261.500731][T14295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  261.503681][T14295] Call Trace:
[  261.504625][T14295]  <TASK>
[  261.505469][T14295]  dump_stack_lvl+0x3d/0x1f0
[  261.506799][T14295]  panic+0x71d/0x800
[  261.507911][T14295]  ? __pfx_panic+0x10/0x10
[  261.509171][T14295]  ? show_trace_log_lvl+0x29d/0x3d0
[  261.510638][T14295]  ? check_panic_on_warn+0x1f/0xb0
[  261.512071][T14295]  ? refcount_warn_saturate+0x14a/0x210
[  261.513599][T14295]  check_panic_on_warn+0xab/0xb0
[  261.514995][T14295]  __warn+0xf6/0x3c0
[  261.516101][T14295]  ? __pfx_vprintk_emit+0x10/0x10
[  261.517553][T14295]  ? refcount_warn_saturate+0x14a/0x210
[  261.519169][T14295]  report_bug+0x3c0/0x580
[  261.520441][T14295]  handle_bug+0x54/0xa0
[  261.521607][T14295]  exc_invalid_op+0x17/0x50
[  261.522903][T14295]  asm_exc_invalid_op+0x1a/0x20
[  261.524304][T14295] RIP: 0010:refcount_warn_saturate+0x14a/0x210
[  261.526062][T14295] Code: ff 89 de e8 98 1b f5 fc 84 db 0f 85 66 ff ff ff e8 eb 20 f5 fc c6 05 a7 26 86 0b 01 90 48 c7 c7 a0 16 d3 8b e8 b7 4e b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 c8 20 f5 fc 0f b6 1d 82 26 86 0b 31
[  261.531368][T14295] RSP: 0018:ffffc90003cff968 EFLAGS: 00010286
[  261.533012][T14295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269
[  261.535162][T14295] RDX: ffff888032282440 RSI: ffffffff817a2276 RDI: 0000000000000001
[  261.537395][T14295] RBP: ffff888025cfac78 R08: 0000000000000001 R09: 0000000000000000
[  261.539527][T14295] R10: 0000000000000000 R11: 0000000000000004 R12: ffff88805a51f400
[  261.541644][T14295] R13: ffff888025cfac78 R14: ffffffff85ec4410 R15: dffffc0000000000
[  261.543832][T14295]  ? __pfx_klist_children_put+0x10/0x10
[  261.545400][T14295]  ? __warn_printk+0x199/0x350
[  261.546746][T14295]  ? __warn_printk+0x1a6/0x350
[  261.548116][T14295]  ? refcount_warn_saturate+0x149/0x210
[  261.549647][T14295]  klist_put+0x11b/0x1b0
[  261.550827][T14295]  klist_remove+0x140/0x2b0
[  261.552162][T14295]  ? __pfx_klist_remove+0x10/0x10
[  261.553529][T14295]  ? get_device_parent+0x1ed/0x4e0
[  261.554940][T14295]  device_move+0x12d/0x10b0
[  261.556233][T14295]  hci_conn_del_sysfs+0x81/0x180
[  261.557752][T14295]  hci_conn_del+0x54e/0xdb0
[  261.559069][T14295]  hci_conn_hash_flush+0x186/0x260
[  261.560539][T14295]  hci_dev_close_sync+0x603/0x11a0
[  261.562006][T14295]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  261.563573][T14295]  ? up_write+0x1b2/0x520
[  261.564808][T14295]  ? rcu_is_watching+0x12/0xc0
[  261.566151][T14295]  hci_dev_do_close+0x2e/0x90
[  261.567471][T14295]  hci_unregister_dev+0x213/0x620
[  261.568915][T14295]  ? __pfx_vhci_release+0x10/0x10
[  261.570344][T14295]  vhci_release+0x79/0xf0
[  261.571575][T14295]  __fput+0x3ff/0xb70
[  261.572723][T14295]  task_work_run+0x14e/0x250
[  261.574047][T14295]  ? __pfx_task_work_run+0x10/0x10
[  261.575498][T14295]  do_exit+0xad8/0x2db0
[  261.576707][T14295]  ? do_group_exit+0x1c3/0x2a0
[  261.578066][T14295]  ? __pfx_lock_release+0x10/0x10
[  261.579492][T14295]  ? do_raw_spin_lock+0x12d/0x2c0
[  261.580917][T14295]  ? __pfx_do_exit+0x10/0x10
[  261.582216][T14295]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  261.583765][T14295]  do_group_exit+0xd3/0x2a0
[  261.585049][T14295]  __x64_sys_exit_group+0x3e/0x50
[  261.586464][T14295]  x64_sys_call+0x151f/0x1720
[  261.587803][T14295]  do_syscall_64+0xcd/0x250
[  261.589084][T14295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.590731][T14295] RIP: 0033:0x7fd7e418d169
[  261.592004][T14295] Code: Unable to access opcode bytes at 0x7fd7e418d13f.
[  261.593941][T14295] RSP: 002b:00007ffd80f149f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  261.596247][T14295] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7e418d169
[  261.598470][T14295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  261.600689][T14295] RBP: 00007fd7e41ed8d0 R08: 00007ffd80f12797 R09: 0000000000000003
[  261.602889][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.605088][T14295] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd80f14bb0
[  261.607284][T14295]  </TASK>
[  261.608725][T14295] Kernel Offset: disabled
[  261.610187][T14295] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:34:50  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000000 RBX=1ffff92000a2bf3d RCX=ffffc9000515fa28 RDX=1ffff110053f3a78
RSI=ffff8880324c9858 RDI=ffff888029f9d3e2 RBP=ffff888029f9d3c0 RSP=ffffc9000515f9d8
R8 =0000000000000000 R9 =fffffbfff20c4d42 R10=ffffffff90626a17 R11=0000000000000002
R12=0000000000000002 R13=0000000000000003 R14=ffff888029f9d368 R15=ffff888029f9c880
RIP=ffffffff8196b5d8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fd1eec2df98 CR3=000000002429a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000002002c200 Opmask01=0000000000000000 Opmask02=0000000003ffffff Opmask03=8200002022100080
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005599fcce59c0 00005599fccfd970
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 000000ff00000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65756575712f3070 656e622f74656e2f 6c6175747269762f 736563697665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079613070 656e622f74656e2f 6c6175747269762f 736563697665642f
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000302d 78742f7365756575 712f3070656e622f 74656e2f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000037396c6c 696b66722f383579 68702f3131323038
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 000000000000a094 000000000000a000 307761726469682f
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633380a007d6c
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81f3bd62 RDX=ffff888024ab8000
RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea00016ee480 RSP=ffffc90003bef2e8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000002 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81b9ec72 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f968b8d7d60 CR3=00000000286a0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968ad7c6a3 00007f968ad7c6a3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc86ec7940 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555562d31ec5 0000555562d31ce0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555562d30199 0000555562d30080
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006080606015ca0 00080002e0030010 0002d00300100002 c00302100002b003
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0105800402d0b608 0001000004080606 0139cc0010000280 0401000006080606
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 015ca000080002e0 0300100002d00300 100002c003021000 02b0031ffffff7de
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000049003028004 04800304800402a0 030008000290031f ffffffffffff0402
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80031fffffffffff ff041fffffffffff ff04010000000806 0606002010000004
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000003b81f3 RBX=0000000000000002 RCX=ffffffff8b578469 RDX=0000000000000000
RSI=ffffffff8b6cfc80 RDI=ffffffff8bd369a0 RBP=ffffed1003ad2488 RSP=ffffc900001a7e08
R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000
R12=0000000000000002 R13=ffff88801d692440 R14=ffffffff90626a10 R15=0000000000000000
RIP=ffffffff8b57984f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fa1f29d5d58 CR3=00000000435bc000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ede0f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ede0f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ede0f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ede0f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ede0f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1ede0f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1edf7c488 00007fd1edf7c480 00007fd1edf7c478 00007fd1edf7c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1eeadd100 00007fd1edf7c440 00007fd1edf70004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1edf7c498 00007fd1edf7c490 00007fd1edf7c488 00007fd1edf7c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8540c635 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc90003cff2e8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000008
R12=0000000000000000 R13=0000000000000036 R14=ffffffff9ab84780 R15=0000000000000000
RIP=ffffffff8540c65f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fa1f29f5f98 CR3=000000003cb76000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeac40f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeac40f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeac40f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeac40f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeac40f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeac40f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeac57c488 00007efeac57c480 00007efeac57c478 00007efeac57c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead0dd100 00007efeac57c440 00007efeac570004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeac57c498 00007efeac57c490 00007efeac57c488 00007efeac57c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000