last executing test programs:

13m11.185350655s ago: executing program 32 (id=1003):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="91f8a98495", 0x5}], 0x1}}], 0x1, 0x2090)

11m17.461811856s ago: executing program 33 (id=1873):
r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x0, 0x839a})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e31, 0x10000002, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0xff0f)

8m3.266049039s ago: executing program 34 (id=3396):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)=0xffffffff, 0x4)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x100000000, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x3f000000)

6m1.830972953s ago: executing program 35 (id=4147):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xfff3, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

5m55.16887854s ago: executing program 36 (id=4209):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x64, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5d2a83a8131ef6fe835818a497c2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94)
times(&(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r4 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x1000)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000080)={0x4c, 0x800000, 0x8, 0x7, 0x4})
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x80, 0x40}, [@IFLA_LINK_NETNSID={0x8}]}, 0x28}, 0x1, 0x2000000000000000}, 0x4044)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x64, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5d2a83a8131ef6fe835818a497c2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) (async)
times(&(0x7f0000000000)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x1000) (async)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000080)={0x4c, 0x800000, 0x8, 0x7, 0x4}) (async)
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x80, 0x40}, [@IFLA_LINK_NETNSID={0x8}]}, 0x28}, 0x1, 0x2000000000000000}, 0x4044) (async)

4m27.928147892s ago: executing program 37 (id=5014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x80)
recvmmsg(r3, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x80000008}], 0x1, 0x40012063, 0x0)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

4m21.830660255s ago: executing program 38 (id=5085):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x14, 0x10000, 0xff, 0x5, 0xcc7, 0xe, 0x7, 0xa, 0x100, 0x2, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x40000089, 0x6, 0x4, 0x20001e58, 0xb, 0x1, 0x7c, 0x208, 0x6, 0x0, 0xb, 0x2000000]})

3m7.323900361s ago: executing program 39 (id=5839):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0xfffffffffffffd21, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c0d5}, 0x40090)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0)

3m4.251254647s ago: executing program 8 (id=6038):
mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0)
mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x800000, &(0x7f00000000c0)='norecovery')

3m4.172651839s ago: executing program 8 (id=6040):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0x4)
sendmmsg$sock(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e443917c4ecfb7aa3d5c54c8b0536e67d02c85071c4c2805e61318f37c2d3378f1b11bc1818c03089afc6b908ee50d9f5b08d00c6a37ac3d4c3a6dffd11c86cf2ca6ad984f2fa3113f6226146f36dd94f6e233a07", 0x55}], 0x1, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x8b0}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xc1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xd8}}, {{&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0x5}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="6f1feb87eba97f6a992bc40f4c05f7701c3987879d41fe30459783ef375b990a597439b40563f3c3d75e7c54746c3fa3ef990c19652f674b583cd85fbf47e2b9542593f56130d2363a8fb2", 0x4b}], 0x1, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)="9c50a2da55b8d2038390055e75367987756b6dff902980771ee952037eb680ac1063b27664ee98faf066241c550322f1af810515e4af8945ca4cdf42dcb71354cd9e1570e326138fb17363dbfa5518de4bf39a23c21691267078821c78b71ba04f8e22ae7093e1e8e37ce6cb3f935ada31d48c0e77bbf57f4fe7a0185d318c6281186c63cc0182dde945502e80061bb2b0d27455bf995b7b679f662e600f0831487abd063cd52a3e92d47c784746c0d5470b5c61e4d7aadd2d905923f9d8e13b97f82b", 0xc3}, {&(0x7f0000000840)="7d144930d528b7a373dc529b89b5aebe960d8959221278d6136ada26a1accbc9e0af31ca45f53d23b82e64bcfdc6835cf637c62327d6e7ce80447f64cb992fa0f7515e5a7eb879a388bb9406a0dba992e108a91f35c76ca9b9ac02e8b6e90f5c471a5945ca53167732700d2adff9cae4ca55966d81395cf574b421cfb68175c3890d29476723ebd413e9584a03cc3ea1a860e494cb62419170dbbf7248c868fb2d55136cf226f23e04a7a68574a0b138e453ada5fd442c7023929d040b1b2a89780d98101729c823ea9451d1f2611459", 0xd0}], 0x2, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}}], 0x4, 0x804)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x2}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

3m4.092762403s ago: executing program 8 (id=6041):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x7}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x61}}}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x9}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x10}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3ff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffd8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3m3.992923626s ago: executing program 8 (id=6045):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a53f5cd494df848) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a53f5cd494df848)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) (async)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x210100, 0x40) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x210100, 0x40)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00003cd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x10, 0x803, 0x0) (async)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x5, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x3, 0x7ff, 0x4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x54, r4, 0x1, 0xffffffff, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x1ff}}]}, 0x54}}, 0x0)

3m3.751666859s ago: executing program 8 (id=6047):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="02060000000000000401"], 0x40)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000280)=@svm={0x8, 0x1, 0x1080, {0x4000}, {"af8a9af40c2c831ba40d7089bc7dd626f298eb2a23ae39c779c580367c2102c23940b26c5fd5583e46835e9f302fc2890078ca01ed85c6f5262623ea0a7424c9e061ac657130f2808f770a02c7fe180f6443ebef052c741366c215aded4e2f459b0a3293c31a7491a3c48b2df9112566472eeb8ac0bf89cae78fbcd7effc7686973a2b0251ba61c1c407fc397b8366b2fff282e38f43bf8e0908461fc7a6fd70458ba287423d5e8b09c92ae97c6b6b98023e48e7faf68ee07575063dcb65493fb4d58b6c3057d51bb482b911a678752781d640c744aa29a50ca263dbb23a9a89b759a1b54b0b49eefc4c80e2e3f4e6e26370a06cb8f7f2871e2417bb4ec89e1c245ea5dc2158394539361e69e1098e5430aabd93981112230ba380de49c17c5d3972c84241ad49e2ae085818dff4cf946ce0261a51378fada19392256817d9f0d293f44e8abc6bac7203f6c0ff0f8ba5ec052100f69ab0407927b505f7c16393c7a335ffbcb244b15351e7d4b10166f83d718e7c7b79d68dbdff9b374db35238383f370077733d60d8b36b22792f5b9d3705afeb7c5d01e47dff795702edf9701344cce1db158c6e7fb162fc36a06b6c4a0f7c016ded648ea78faca8da18c0d55a73896f3f19ec0fa259dc455be65a38be1acbef5e7bef60ee74792e1a6d3f524fb728cd1ed709e69eab0d4d837e45e381376e35b9c0e1c5e7978d6e752bd60cbdae62c003ce79629c3ba7dc90a7cd7ac6065840885532e5f16b8c7334ac1a8a5a46fe26f2967c3054ee9f5e3aa5db23ca25cd37d4a8297f6345e0d13f3c0b0e943aed19fa9d695c579f6d4be9216798deb51f903ec0c6e1230ed0af2dcebd3b2f87f92d2d79b5554eeab07182cee8562bb3ce58aef579be76d48764f6b4c39f38f0deee52d3b71c111c9ecc670f3c52b1034025853d686387fc9e75969ef93bfee36a211b6edd905b880241551bfc5db3fe33d10d4f28f230945f4f4b66e506777da23f1be27e085332bda6baff7e080346fd4a2fc9e4d39e5f30cb42d26cf272e91c1ca9bf3db468ebaef4b2801f3f44d29ab711dd6613efe4cad5f480ef8a6f23bfb072174bea8f12800ad9e0c3d94b05955db691aeeed8a2797341d9e6814f527289985e71e667aa7c32eba9d39c619a0e42d01c3b89d3b8c95298d42f927c6cda18431e9625cbe428c3c6251f6e7e35a6a611ec2587806f5bbb14873e8cf6839141e8770500184277b2b9bb23eee6ed1a913f409cc0f8cfc8fa33fe2c21c9f4f50f06f7d828c6cfec6658c54830805f0b3025e28159b0a44106e341ff0fe6a552cae1f1eadb667dbc9d852143e54020e361bbcbaf57b7118df903b9aec301e9fef08452017c4418691050b15e237805fa1db9f1703c08ef690a590c37b7473b4675bd6c2abc870a81a9fb9d70a3f721d4987aaaa4bab4e142b1e1abf1328310b376cd9d4ce5c551e101755fec399aeb242d9ed7a6f27a3cbb5a229ab61e4dd475d576a3a15147b4e8d5599c11a49b1b42d00487be5f5be0d8969f2bfb235389682c1ada02d935e1054cd1deb7b0caeaa193d924e47ebd59539eef9c32dc1ce1f6aa758a4fc1c3284beb63e10204924fc419971a5df76ca4b5ac5fd4467d34e4130d28bc71f1ae982d029f0f21f646962bcab82f763b6da7a12ca363d3dd6a6e7805cd8f3ed8f91def2a284bd9dec40635918ba8d30eea372de96c425d736c3a4e11da7021fe4268830fc8eb10da76cf41ace5fe107850cb7c5fc41450961456f44cf1700e8158a6bbd119965ee8bb8760ccb325d0b1b825801847f4d96f866242f007583bff43b62398ccde09a531b7e2c1c6f5907d7a24a02c675b6663b63d2b40101de0f92437e2755aa1a2ba644b1ea49f5a7740b078802aa8c68e838eb837eb90423b274a0ad58a17bf6a40f6ee41790a80edf2be00b6facdc06927d4899b14aa240f74913d632c7fb2767de2b23eac3b247928643c9b8dc54a62525704d85c780801c4a1e9d7a0553271a7184327e429634544aa78eac5d6cfa19e6220af6ee84f554220966b6752c3d1521311148af2f317bf4854d903b266d7d06155471e0991a8eb5061e9e6a58f30436087cc8e51773119cd0a62b60ef40cd9ce6cdf48a4bd26d7473d32d4250d44d1f61f861a2e72cabe269aad9f1219a5458e0d5242bd9d01372f75c205398bda19906ac3fdbbb7aff311d0b026517ba20a8e2fa76713c772d495e435f0dec67fde69b05ae432805ae8e88e423b819158e9f5abc0db11c917fe4a31227bc8186a85a56251b19634fdef098dbbb73608f2ee51a9650e175766b3439f012c59b9f90313f9b63aeb51168ab04c9885c735d1c3515888b450dc75c1dd4c11f529d6eefe6d99d5dde437685da57a8077cb5156c531817041be2c3c7a26b0c5bba48e806c8904b48893cdce129b73355a0484a0ee3309bb8a1542b5dae7933f3ce4b46b691f266fde3866881590050e48bbeb0d65277494f44ac269dfb1fa0d02c530eb5370fa3698781bf9947ee869d638f9ebae3f6e2554a96d4bc3dc15c4d6eaebf7694bc49fddea91abeb6e5c5f2e4797fe4754de7c9e6edcb5f25c94e07812625519dad0db8d65243fc3a01244fa052e5d93355dfd4c554002b38fa45f5bd1e07a147156777301e27bd023ca496a70a188f1e8e7525809d23440a62c2588953fad23a6336b2b04a7d4e1d8e4cc6988bf1db0403f39c757cb4a3bc193c2f32669f0360e70fd270fc71d25395d76b9bbb75a7cb7a485661f205eb2677b05973636914cb472fb7ac2ac1efb7addaa927b0db654f625185faca2415f50fea0b40d7a0182a171b6f7ae8e6a1916822004864706c36ef883e7e63a2b29fe67a5647b2c9225a94f58be58900714579bc0e4d267ce4e741f681fe7cd5d1a2ae950bc9a0a4bfec054f81748c02c9318b519763dc2bb59bf92e2a86f937cfc4d584304be78da5ece206ccd169ff683fdbf4bee6d1f3b2485ba18804b8bfc8700d3e66907490053b2bc772cbf1fff284d3c43717577250922c39835110219aa45e6cf83f54bbb185cace50e0fb9c645105653770437493c524d9a7ef3767c6ac50dd5aa2f079e86619b246c47b2b433c904cf44857f53e6e1cf4c0ff026c667565cd93fd2253dffdf08561c9a1c10673f23323ba02824e2f6198112d1295f629a7c09034b7511ca4dad5f03b0c32df2ace98467eade3e53db292606d4244f4865287849db7546735d43d6671f4f97d0a47ede71b5d2f2c4a6199117ea940a2dc41c57647252d4585228a8fcecb5e0f98d5f4454403af87f087bde0d5afd9b132758f2fe2ba92bdb7f2f711b0ff7a80c015ba1feefcbde02d36315b7907f7ea87d0ac1111f5872ac1ebb52909b441f7a706aaa1f63f3f83fc1d71121990be3db3e11132e5d6de071cdc1a182c6bdee8706a415171af4920ff7d84b53ebc5ac22daf0cf65d95a50240c2eda00a332391c7c0908dad98c9ad3e45ee879ac4a6543d72860a125ff93c43c59434df16cf6ea32a0c64ae05a1725e7326160eecf5cb69365acc77a4e4ccb16614586baa60a374667e591c3692552098774b7cffbffef856fdcaad1da144cc4d85036cef14989a6dce1330136f2fd18e2a9f5877d02fe4ba91615a7471ea636a19453c3098f850a6faed37129a7ca7d6a87559f2d1530f82d1451cf42bc99f1be728d9cc416b196485d7946316d99d4031758563a21a774a7bf1c2b82f087512b216d479794d6443dee9479eda6e6cb87db395ef85e4a64c0264429aef1b893baef59e1c59ffb91578850f019c69f03b06a101643b93be04aa8d390f452613064a661f2e248a9e125df3c84157ed6de24ae268b9fb93aef63720f23d9df4d905c8aa799ac73b27f1b9ad5184b08b688d58f54500a173cd00223bc959b7273d2cc41701ab4146d0de7dcb0fec48a9e18b1e038fc3610cf451b11159861f087ee2df3bc69832ec8f355b3612a24c0f61c10e7415c9458a0e5801bb3593e36d2056fff441298e441227ee4b63ecc2915c0b8b4667d236b2a021473fa4883f3f477dd6e3819cc20c11a7c95fe300d9697c218c546b1eb0d7cd90e9138ee8ca5caddaa6a36a7ed0bc525531875ef1d4697a0e2430c0252c558f39ba261e74d46f90e7484c7ef3ef2ecaaa815677e212efa3472c849567cd9c6548356b3fa1bf446cf75cc7907be50bb978148989e6ef726c4451b37e1718ac5b3a336fe95f7c19d9230b5496bab1a29a49982d6031c18a125a17d24b27d88b1c39349f742f8bcd6772a5856113e921ee0e5193eb028aa694b1d1f2c36c6d6ee5edc4cb50a4fe897cdf3b1836b36538cd84df5eba13335d4e6d6a7a006cfc606f153f6d961bee9fd4f5f5dd8ad537e8a40abcafb0e70641d0467cfed136f4e78a7ce455e058a974076053e6e0c875bb192e8a536646ed5fd7cec953e3318bba630f62766d8445a5a70134e9337fa75b358bb42936fe18abead87a0f2b3a9ec576e3c68c0bc0ec47c393536061592d8d0c7a26e148a8e18c36496c923f5046fea1abefae4a93bbb1fb9a7ff640e6d2e6f0eb1fc9ce567b5c949e6cd22b32966c463579e741a8ff64852e6b363ce7547ce03a237b0ec3cdd8d256d6a1342caf67feacadeab84f5d4ac5b15fb5fe9517919094be33a110998c087e23a6e99cb7a726889b9aa330389dbcdf27e120e7e6fb7133e19d1ca8925c6bb7b193d23247043ef4b5d19c48181c531707e404d798146218b280e246a7472d2deb3aee3c58f4f8d6468609680e336e945d7e9a228dd5b5f837f44239029b0f1563e3ba51c57a0cca3fd3e9854f5c42a70a8ffc262e0aefbe458528b993a766a5754ab28909b5a33736f9bd1a5b3902dacccb28a98eb0fd553f3a78ce6238435ed9bb32a80bddae43b9db7977e8390a1d2cee2ef15c68967afbd2af140d37e377eeeb1501be9087ea0eaeb288b319373b41c7410bfee8b177ccd8d926026972b95f3b6b594cd3a69a6031efd3235ec01a934595235b6a028ff315ccdb2ef091f245e52dbc318cd9d5fffde55064f6835535b422de98711f3b12157192a294d21e9295f839944235b4a3caec98c26b7f671c585e83e4e15dd71216035dd22a767ae9530bdd52b45d96b836b07e041ec9c2b34c5ec75e37035a7a2188841ea2f5309720db078163b38ac3889930b27f6a3a2daa972f9a92feec18e9f72cd29dc9ad210aece8968d101f1bdba1075968ad5c83002fea61bdb06fe6f7d0c35c2b7f7fd99e022d91092dd1ab2f8312426998a735ca73b85324fc38a7101256d7bff7c361101faabbbf7808f16956f4b9b4391851225abc6cf41c3c03359ccb249de1b13a6d01dfd165cc8803c899b56dd60cc619c08488d6495ddd8ba8eac16f69983cbcd2a5ec11fd05f22e3db9788d2a8b01f886dbf0a32267e99fbe4450bcf994e02760f6b93aeea6991253be70f737b34d44cf8d4cb6747c592fa29eaa6194b256185084fdebd39e0bb1da6550a8a7dbc620e7f8236ef3491bda59574a0a0c8ced699ce9167e84bfaee51d61b111db722d21b818c1f302a79517e0312b9d1e272bddffecee33c997b4bda5320f3935b4d18125d284fcf8a5d2affe12484e76969897613c78ef6a8406e5e05fef06cacfdcfe73c08ff3570155d5fd5885ad417efc8af02c49226fef3c0c809561b31a6702435d363db5ab7dbd9e1a12faac2069be5303bb6472002b5335c04fe7f42778be7c63168080cebb0bb28c970bedb124d6715c689066849d07a8f520c30a6976c51adbd3f244b877f1c4cd51c6a0709"}})
ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080))
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x0)
ioctl$TCSETSW2(r6, 0x5425, 0x0)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
r7 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095", @ANYRESDEC=r0, @ANYRES16], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x800000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m3.22356086s ago: executing program 8 (id=6054):
fsopen(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0)

3m3.094570253s ago: executing program 40 (id=6054):
fsopen(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0)

2m45.482806732s ago: executing program 0 (id=6283):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x2, 0x1ba242, 0x3cbc2c})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x334e8b})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x2, 0x1ba242, 0x3cbc2c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x334e8b}) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

2m45.478712887s ago: executing program 0 (id=6285):
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000000)='usrquota')

2m45.412637353s ago: executing program 0 (id=6286):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async, rerun: 32)
sendfile(0xffffffffffffffff, r0, 0x0, 0x20000000002) (async, rerun: 32)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="040026bd7000ffdbdf254a0000000e00a80066697273746e616d6500000008000300020000000800030001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008804}, 0x4000) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) (async)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}]}) (async)
syz_emit_ethernet(0x123b, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x50842, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4207, r6)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0xf, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000440)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xf, 0x80}, 0x10, 0x270dd, 0xffffffffffffffff, 0x7, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, r5], &(0x7f0000000540)=[{0x3, 0x1, 0x2, 0x1}, {0x0, 0x5, 0x6, 0x5}, {0x4, 0x3, 0x0, 0x9}, {0x1, 0x3, 0x3, 0x4}, {0x4, 0x5, 0xb, 0x3}, {0x5, 0x4, 0xa, 0xa}, {0x1, 0x2, 0xd, 0x2}], 0x10, 0x1}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000700)='syzkaller\x00', 0x9, 0x52, &(0x7f0000000740)=""/82, 0x41100, 0x60, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xc, 0xa709, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000880)=[{0x2, 0x2, 0xd, 0x8}], 0x10, 0x800}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@map, 0x20, 0x0, 0x6, &(0x7f0000000980)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0], <r9=>0x0}, 0x40) (rerun: 32)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b40)={0x5120, <r11=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@cgroup=r10, r7, 0x6, 0x2031, r8, @void, @void, @value=r11, @void, r9}, 0x20)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64)
r12 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f00000002c0)=0x12, 0x80000) (rerun: 64)
ioctl$SIOCX25SSUBSCRIP(r12, 0x89e1, &(0x7f0000000300)={'vcan0\x00', 0x7ff, 0xb6b6})
mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000b80)=ANY=[@ANYBLOB="6d656d6f72795f68756765746c625f61637500756e74696e672c6d656d6f72794d72656375727369766570726f742c00faffb823327ef4ee9d0f6c745d96d604f53b94ad23d3266b65b9559f535dd8080950636f3623ff59518ff9f6b33db7864e69020f20da75b1fda6b0ed057935f3c6903ef8beec6ddbc1ddc699c7435be0b0cc2cd565deaffd67989ae934d0fef318ca7aaf5bb21e4431aac584220b017add18ca0f3567163bd6fa6f043a819dc505778edba698903e5e8111db9828dc7994a20421f8fe1ad18e7b5ee1160c448c5546076bb397eac717d2acc70dfb48"])

2m45.412274758s ago: executing program 0 (id=6287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x4, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100a1ff0d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

2m45.212700687s ago: executing program 0 (id=6292):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x8, 0x2)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x68440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x240040c0)
ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x81cd, 0x1}}, './file0/file0\x00'})
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000340)={<r4=>0x0}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={r4, 0x0, &(0x7f00000003c0)}, &(0x7f0000000480)=0x10)
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000980)={0x80, 0x0, 0x5})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000800), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x48040, &(0x7f0000000840)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYBLOB="9a87528bc592a00f7acf763989148e55876d7cbffd3454494a50cd1d55a624a1dc192081847447f1db21de6b504abd61404c6bddb2247371339534a0451079a7291aa314bbcff05030cab960c1c2c435f4d9148d2235b0e63cc3b812875a59fc104e6a314b2eae57867d36bedb200ec0712745e93f41bed0c8863c8094f7f0c20f7cded9407837bf17168fc092fe9a8b4aefa099aac8de8a7a18e94909d79c75"])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x300000d, 0x1)
write$binfmt_misc(r5, &(0x7f0000000a00)="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", 0x140)
write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef)
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0)
mount$bpf(0x200000000000, &(0x7f00000007c0)='./file0/../file0/file0\x00', 0x0, 0x98b446, 0x0)
r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000500)=[@nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x34e9, 0x1, 0x1000ffffffff}}, @wr_crn={0x67, 0x20, {0x2, 0x8000}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x93, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control16=0x4, 0x81, 0xffffffffffff7ff8, 0x5}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x4f, 0x6, 0x7, 0x2}}, @out_dx={0x6a, 0x28, {0xcb0c, 0x4, 0x5}}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x9, 0x10000, 0x1}}], 0x1b0})
ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000740)={0xae22, 0xffffffff})
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x1000016, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m44.981886021s ago: executing program 0 (id=6300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x4, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100eaff0d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

2m29.980179819s ago: executing program 41 (id=6300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x4, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100eaff0d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

2m29.693626798s ago: executing program 5 (id=6472):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff})
r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)

2m28.706994388s ago: executing program 5 (id=6489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3)
sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r4, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40007ff}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed30004"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000300012800b00010067656e6576650015fcbb02800800ffffffff1400070000000000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='debugfs\x00', 0x200010, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77<r\xe9\x9cD\xb0\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3wA\xf6`>\x8b')

2m28.697377547s ago: executing program 5 (id=6491):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioperm(0x0, 0x2, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioperm(0x0, 0x6, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYRESOCT=r3], &(0x7f0000000200)='syzkaller\x00', 0x400008}, 0x94)

2m28.57391608s ago: executing program 5 (id=6492):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000600)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r1})
syz_open_dev$MSR(&(0x7f0000000080), 0xf, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x140, 0x10a)
finit_module(r2, 0x0, 0x4)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x80800)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x2})

2m28.502279124s ago: executing program 5 (id=6493):
ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x541042, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x11b, 0x405, 0xc0, 0x200, 0x2}})
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe)

2m27.203954394s ago: executing program 5 (id=6498):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000500)={0x1, 0x2, 0x9})
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x482080, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x1)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000005c0))
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x20800}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0xdb, 0x10}, &(0x7f0000000580)=0xc)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}})
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x109, 0x0, @scatter={0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/116, 0x74}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/17, 0x11}]}, &(0x7f00000001c0)="5538b9edff00000008ffffff01a26ccc143bc638b65f69d33b5ab57cf52671dc2d7b21178e751ed07500d83b77ea4beb9c4d4c362f69d05192fac58367ffe9779c6752fbdfc72b65c241364dee74e143fd791b70a2bbdbf4d0eb9b5ea7d2a2487b11a25a69d07e232a840bb5bacb14fd42890807191c52c541e28eba71ee2994d17e53d06732a861fbe148757981fdb1a412d834198e1aa1f5241010e87578fb4069800e64d8d46304771ab67e0325aa78c0b404aaa733e2eb7ec56870b6932912eb693d2a48fce52a88fa8f1250bda6fb2825d72773800f3ea37fbf9fd2038bd92db025776dbd835b638d3a3972f76886a46f1bbcbefeebbbbb1ccfa26db44577cdee28d0f61a4d4c", 0x0, 0x7, 0x15, 0x0, 0x0})
socket(0x2b, 0x6, 0xacc)

2m27.131301247s ago: executing program 42 (id=6498):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000500)={0x1, 0x2, 0x9})
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x482080, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x1)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000005c0))
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x20800}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0xdb, 0x10}, &(0x7f0000000580)=0xc)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}})
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x109, 0x0, @scatter={0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/116, 0x74}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/17, 0x11}]}, &(0x7f00000001c0)="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", 0x0, 0x7, 0x15, 0x0, 0x0})
socket(0x2b, 0x6, 0xacc)

1m55.173877895s ago: executing program 3 (id=7035):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa5}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0xac}}, 0x0)

1m55.173578362s ago: executing program 3 (id=7036):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@exit_looper], 0xffffffffffffff89, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x0, 0x1a}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xba}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

1m55.103318115s ago: executing program 3 (id=7038):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x318, 0x2e0, 0x2e0, 0x318, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@loopback, @dev={0xfe, 0x80, '\x00', 0x36}, @loopback, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x3}, @local, @mcast1, @mcast1, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)

1m55.101071415s ago: executing program 3 (id=7039):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x20)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x8, 0x9, 0x4, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff, 0x392c})
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$ARCH_SET_GS(0x1e, r1, 0x0, 0x1001)
lgetxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002180)=@known='system.posix_acl_default\x00', 0x0, 0x0)

1m54.983951101s ago: executing program 3 (id=7040):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf254f00000008000300", @ANYRES32=r4, @ANYBLOB="bc007a800c00030050697aee346a885b1400010073eda200dee372be168b4ab89016abb4140002"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48)
timer_gettime(r0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000008480), 0xffffffffffffffff)

1m54.553809313s ago: executing program 3 (id=7048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a00000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x810)

1m54.448901135s ago: executing program 43 (id=7048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a00000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x810)

1m4.213567898s ago: executing program 4 (id=7702):
madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x28, r2, 0x403, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000000}, 0x40000094)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df250100000008000100ac1414bb08000b"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)

1m4.213117218s ago: executing program 4 (id=7703):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000100))
ioperm(0x0, 0x7fff, 0x15f9)
syz_clone(0x4d000, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x0)
openat$cgroup_pressure(r2, &(0x7f0000001a40)='io.pressure\x00', 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000001080)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
setsockopt$MRT_PIM(r5, 0x0, 0xcf, &(0x7f0000000340)=0x3, 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbb85a6bb08004500001c00000000000190780a010102ac1414aa11009068000090b6c814e3113e85dc6de2489f0d26095ac3161aae773d0db8d2e9af5af368f4c989de65d8d4fece46a2b0a332c2d3442654ee87c9ad2dd936b8f006429de86b5b8a7dfe3f47a16dfe3f8672f97a9b8fcb93697be8fb8e9626b50c0c60d6d6e38084c2"], 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0xffff, @private}, 0xd0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x9})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r7, &(0x7f00000000c0), 0x2c8, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0426063d032bbb006965499a03b9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
gettid()

1m4.143297809s ago: executing program 4 (id=7704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x40004)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x1b0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ip={@remote, @loopback, 0xffffff00, 0xffffff00, 'virt_wifi0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x29, 0x0, 0x8}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2, 0x1}, {0x1, 0x4, 0x6}, 0xffffff00, 0x4}}}, {{@ip={@remote, @remote, 0xffffff00, 0xffffffff, 'netdevsim0\x00', 'erspan0\x00', {0xff}, {0xff}, 0xa7, 0x3, 0x46}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x1, 0x80000}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast1, 0xff000000, 0x0, 'vcan0\x00', 'ipvlan0\x00', {}, {0xff}, 0xbd55049754c98910, 0x1, 0x3c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r4, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x10, 0x9, 0x6, 0x5}}}, ["", "", "", "", ""]}, 0x30}}, 0x800)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000400)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000008c0))
ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000c40)={{'\x00', 0x3}, {0x8000000000000001}, 0x100, 0x0, 0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)="6231574cb60ade960d4e70d584d04a595bfe32051f4b94df0d3ff424809bc66c1c489782dca060259f4a0cbebff6ba931f23fab6da3813f47a6d0cf1cf9690631959bd8cf1393537f2a0dea4fc230e1b551bbdbcae31b55d2100646016b6eaa9275476815e3b3df23c54a04f8639f769f7d54fc0e4492d004da1cc7412de32970bd81a2daf0ec716a9ba9df6daf89f523aa6d539dee60856db313be2e55acac55be7aa85dc740b381becf4a29f9f3f7b4446c596775e6b98f424401dbbdce4eb2194258ef9b9fc57f1a0d0604dddec8b5f6043c430c94d837deb9b0199669f54787db0111b6a652252f5d4c6b8c6fd082fe7cdba6ec241fb9b4339b4fc60a62b04b0136121bb10007b42e78ec43e9b51bfb78182e2676f4f50ef958837010a8c02d2b86170ea22745da13b34fbda2e3e3ebc9f07a2cc7455473fe16e64948d7d6009cb3c1dbbe81caaf00cd2eab22d9d466ccb085395ead6a75a78587a742c71b1f59afcfc4ba1db4a78f09c4a92ee50f3336b4082ee7c09639fccbc767929db45d14936a00b6545c40af6bb51f505a146e41002b507", 0x196, 0x0, &(0x7f0000000b40)={0x2, 0xbb, {0x1, 0xc, 0x5, "07ad409e77", 0xa9, "908ae93932bd4e93b2984ddf30ab9120ed488c6c529649ced4a513b027cf20215516833c78383e13fbcd1b1c59e6023d14792ed2289c594c8aa3cb84ce911b6b3ea166af8da786d59b6d1fd04b19be1e83301c6e5e9d9e577a51e9cdd846fb2cf13c176521fa0da403459bf80ce1788e61574a22ea82e6f14f83fe4f1a93462b2382418e2e0f8c3b0c8bdf25dc860039cf6555bb924b35993985a4f3511cf11d1a012a950a3c022a09"}, 0x1f, "7800e22a7007b6e2f46d32c7dc6b17928fce9eb88213312bf8251830fc28c5"}, 0xe6})
read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
sched_setscheduler(r7, 0x1, &(0x7f0000002d00)=0x9)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000002e00)={&(0x7f0000002d40), 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x30, r4, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x4c840)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002e40), 0x48040, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002e80))
syz_genetlink_get_family_id$devlink(&(0x7f0000002ec0), r9)
ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000002f00)={0x0, {}, 0x0, {}, 0x41, 0x4, 0x8, 0x15, "68514650219ae983817ce8baa067fd3351d05a28456ba46b0589505673984b664f3ec83892581455385b5b35dec22040ae6d52ca7ca5e057d0aad0bea2e7787e", "c70dc39627c1e64edb97e7b2fb86d4f8f658301b7d2132832a3367f739ed35a7", [0x3, 0x5]})
symlinkat(&(0x7f0000002fc0)='./file0/file0\x00', r9, &(0x7f0000003000)='./file0\x00')
fallocate(r3, 0x0, 0x4, 0x9)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003080), r9)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000030c0)={'nicvf0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000003180)={'syztnl2\x00', &(0x7f0000003100)={'gretap0\x00', <r12=>0x0, 0x700, 0x7800, 0xe, 0xd4, {{0x17, 0x4, 0x3, 0x4, 0x5c, 0x65, 0x0, 0x16, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, {[@rr={0x7, 0x2b, 0x18, [@dev={0xac, 0x14, 0x14, 0x3a}, @remote, @multicast2, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010100, @empty, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x6d, 0x3, 0x6, [{@local, 0xffffffff}, {@empty, 0xfffffffe}, {@remote, 0x40}]}]}}}}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000034c0)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000003480)={&(0x7f00000033c0)={0xa4, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}}, 0xc895)

1m4.142858766s ago: executing program 4 (id=7705):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0xca800, 0x2)
symlinkat(&(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000380)='./file0/../file0/file0\x00')
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x8002000000000003, 0x428581)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x9, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x6, 0x0, 0x1, 0xffffffefffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010101, @empty}, 0xc)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x0, 0x0, 0x1, 0x8001, 0x4400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8054}]}}]}, 0x60}}, 0x44080)
socket(0x10, 0x3, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1m3.962935118s ago: executing program 4 (id=7706):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xba}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0xec}], 0x0, 0x0, 0x0})

1m3.603761233s ago: executing program 4 (id=7711):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000e7e495516c34e1e0a4f236f4d3bfeb", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x1, 0x0)
fchdir(r2)
r3 = dup(r1)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

1m3.507882538s ago: executing program 44 (id=7711):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000e7e495516c34e1e0a4f236f4d3bfeb", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x1, 0x0)
fchdir(r2)
r3 = dup(r1)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

59.269581774s ago: executing program 9 (id=7761):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
fchdir(r0) (async)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xbf22, 0x2000, r0, 0x1, '\x00', 0x0, r0, 0x1, 0x3}, 0x50)

59.213621666s ago: executing program 9 (id=7762):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88)
socket$alg(0x26, 0x5, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) (async)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYBLOB="1c000000e4720000000a26ac06a9a800008c9611600938490c71e1c064db1f4e22a200"/49, @ANYRESOCT=r2, @ANYRES8=r0], 0x1c}}, 0x8800)

59.113163081s ago: executing program 9 (id=7763):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xba}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x7000000000000000, 0x0})

59.098453714s ago: executing program 9 (id=7764):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x18, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x4080)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000540)="8a21d57b0000", 0x0, 0x0, 0x12, 0x0, 0x0})
r3 = syz_open_dev$radio(0x0, 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x3, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x80000, 0x0, 0x2, 0x400, 0x0, 0xa8, 0xfffffffffffffff7, 0x0, 0x291f5, 0x1f, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10001, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x5, 0x20000000000000, 0x0, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x2, 0x1000, 0x582a, 0x200000000000000, 0x7, 0x7, 0x1002, 0x400000, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x6, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffc]})
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="000063adffff54adb3f5dc3e1f7e00005ad576f3046493ba2bcb79cfdef34f1d0c4f9ea4935147ce7a26e70e86dbc8440f95ed439e369a0806b142c7f623477fdc39caf7f1", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006000000080003000000000005000d000000000005000d000000000008000600090000000800050004000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="fcf5e6d53b122191571270134a696623848a3aea24e390b038303a2c3f184747395d039121141824ff3f0c64e156347ae3d592cca75c8d91342b2cba505329c11b2498da43a0de4204a555c24b42914942174ff2f8b52e73af886d539b5b46b31d1e44a07b7da041f38f7586e18282e27bf76454a76f114de9c35046199de6ea1f4470aed3ac282efddad01e103b3f89c7fd8c84bf759d72176c5ebb2e808108338d617f5553f6bdc3c7fcd4bf78955648f34ee9aa22d311f30b0f17e72fb50f98e6e2e6536950268bfd62a6", 0xcc}], 0x2}}], 0x1, 0x0)
unlink(&(0x7f0000000340)='./file0\x00')
creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfff, 0x20000, 0x0, 0x3ff, 0x91a9, 0x9, 0x0, 0x0, 0x2, 0x7}}, 0x50)
fsmount(r5, 0x0, 0xc8)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x6, @local, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @private=0xa010100}], 0x6c)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000001400010027bd7000fddbdf250278"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000010)

59.001648574s ago: executing program 9 (id=7765):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f8b221697e7818049006ba7a7f39f77954f0", 0x18}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0009e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

56.543712829s ago: executing program 9 (id=7780):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
setresgid(0x0, 0xffffffffffffffff, 0xee00)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
fsopen(&(0x7f0000000240)='sysfs\x00', 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x224000, 0x133)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000880)={0x20, r5, 0x23, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r5, 0x0, &(0x7f0000d3d000/0x1000)=nil, 0x1000, 0x7645})
move_mount(r3, &(0x7f0000000100)='./file0\x00', r2, 0x0, 0x60)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x10, @void}, 0x10)

56.398752549s ago: executing program 45 (id=7780):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
setresgid(0x0, 0xffffffffffffffff, 0xee00)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
fsopen(&(0x7f0000000240)='sysfs\x00', 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x224000, 0x133)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000880)={0x20, r5, 0x23, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r5, 0x0, &(0x7f0000d3d000/0x1000)=nil, 0x1000, 0x7645})
move_mount(r3, &(0x7f0000000100)='./file0\x00', r2, 0x0, 0x60)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x10, @void}, 0x10)

5.052645233s ago: executing program 1 (id=8555):
syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x84, 0x0, 0x0, 0x6}], "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"}}}}}, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "1b56d9", 0x3c, 0x3a, 0xff, @private2, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x3, '\x00', {0x7, 0x6, "9aef12", 0x7fff, 0x11, 0x1, @mcast1, @local, [@hopopts], "4118de85"}}}}}}}, 0x0)

4.979354405s ago: executing program 1 (id=8557):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xec00, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xc8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

4.933319433s ago: executing program 1 (id=8560):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r4, 0x331, 0x4, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x85, 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x80)
syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0fc7ab47000000676466f2a50f18db3eff550ac4e1611666d1c4e17a12705a67f20f221e0f3236dfea660f388000", 0x2e}], 0x1, 0xf, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x75, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffde1bba22c3ae4859df02af000cec5ebdef01a5c9a4dc200aeed53ee16bac1ae9108a64270077c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af3"})

4.873144504s ago: executing program 1 (id=8561):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe9"}}]}, 0x150}}, 0x844)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000040)=0x2)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="72646fd0117e7347acbdf126", 0xc, <r3=>0x0})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000200)={r3, 0xc, &(0x7f00000001c0)=""/12})
io_setup(0x404, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
io_submit(r4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000090000007000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a8904004a90000008001b000000000024000e000200000000000000080000000000000009000000000000000e00000200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

2.853314829s ago: executing program 1 (id=8592):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000001080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x58, 0x68, 0x0, 0xc0, 0x2f, 0x0, @local, @broadcast}, {{}, {}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x6, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x3, 0xa2}, 0x2, {0x4, 0xd, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x2400) (async)
r4 = syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x2400)
ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000240)={0x0, 0x3, 0x83, '\x00', &(0x7f0000000200)=0x5})
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="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"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="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"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x1, 0x70b92d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0x4, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000000)) (async)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000000))
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100)=0xf, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x10, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)

2.852295201s ago: executing program 1 (id=8593):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffcfd9, 0xa080) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="40000000132001002bbd70"], 0x40}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x6, 0xf9, 0x2, 0x79, 0xff, 0x3, 0x1, 0x1, 0x0, 0x200008, 0x1, 0x8, 0x72, 0x6, 0xba, '\x00', 0x3}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
mount(&(0x7f0000000180)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x4, 0x0) (async)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) (async)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r7, 0x4020744f, 0x0)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r8, 0x80015b1a, 0x0) (async)
syz_usb_connect$cdc_ecm(0x3, 0x8f, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0x4, 0xb0, 0xff, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, 'YQ'}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x0, 0xe263, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x84, 0xf0, 0x8, 0x3, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0xfb, 0x7, 0xd1}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x5, 0xfd, 0x7f, 0x0, 0x67}, @obex={0x5, 0x24, 0x15, 0xed}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x80, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x3, 0xf6}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x5, 0x3, 0x8, 0xff, 0x7}, 0x4a, &(0x7f0000000440)={0x5, 0xf, 0x4a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "fd192cb4d457542d848f8ed6be5a97ef"}, @generic={0x2e, 0x10, 0x4, "abb7781432bc45efad9a1f33abc01f26882a2b6bec663eeae87e8a41728df85e8938a89b82837f55f9f16c"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44f}}, {0xdc, &(0x7f0000000500)=@string={0xdc, 0x3, "3b92a43d4bd4c0517102402034ccb6c72b47548bb22c61eca6d595c3978d3e7866b32ca7adcd26b38c6ae1867499039ceb406632e1c9f965aea336a8d851baa41da53d4d0a4cb99b9bde0bcd46abb6b24000a8488a4053f1862032733eeebd185a81147d62d363cf1bb12210ae45d28601a873a03bf786c5abb3cf648649a9a563d72fd45cb13b1a8fc63f30d28ce43cc48134d879dc103e1304a783c6509a5b2fef294f9f099b1110f1fb1219235aa380166b25e64e831a7c24e9474780b2e69199a9e3e77d6a7b0df859ebc256d84456d508e9b32e1f7fb9bd"}}, {0x6a, &(0x7f0000000600)=@string={0x6a, 0x3, "94f1832f7f264ee02e34ccf35ec897b64f24884b64a6d447d42e2c0c2473725b3c9d6c00403ddec28a3c74543739ff5615720ff8f361337ffe43f854e16f771b6f20e9ec9e2ba083eee057aba51de9f51f31d2a057c52ed84b25729b58557f08177b5cd9f73bb6c3"}}, {0x24, &(0x7f0000000680)=@string={0x24, 0x3, "e9381c644defa13b92687aee8f843d434c85767891e7976608c1c2a4651d61ad320a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x140c}}]})

2.532616913s ago: executing program 2 (id=8603):
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000340)=<r0=>0x0, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000000))
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
syz_io_uring_submit(r0, r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0)

1.951265313s ago: executing program 2 (id=8616):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bdaf, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffb1, &(0x7f0000000240)={&(0x7f0000000500)=@gettaction={0x90, 0x32, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80}, @action_dump_flags=@TCA_ROOT_FLAGS={0xffffffffffffff75, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x100f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}]}, 0x90}}, 0x0)
syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x880)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./bus\x00')
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00'})
syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1e}, @hci_ev_le_advertising_info={{}, {0x2, [{0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, "", 0x7}, {0x2, 0x1, @any, 0x8, "07835508d5ce66ef", 0x5}]}}}}, 0x21)

1.852656177s ago: executing program 2 (id=8618):
fsopen(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0)

1.562998355s ago: executing program 2 (id=8621):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xc8000000, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xc8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

1.503037724s ago: executing program 2 (id=8623):
landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x604, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
accept4(r4, 0x0, 0x0, 0x80000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r6 = accept4$alg(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001)
recvmmsg(r6, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000400)=""/197, 0xc5}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000ac0)=""/227, 0xe3}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x2}, 0x6622}], 0x2, 0x40002123, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

880.432679ms ago: executing program 7 (id=8636):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500008000", @ANYRES32=r2, @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

859.222619ms ago: executing program 7 (id=8637):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
r3 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
recvmsg$inet_nvme(r0, &(0x7f00000018c0)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/85, 0x55}, {&(0x7f00000016c0)=""/226, 0xe2}], 0x7, &(0x7f0000001840)=""/126, 0x7e}, 0x40002000)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80441001}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc040}, 0x4020000)
sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)

723.12383ms ago: executing program 7 (id=8640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x4, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000011f00000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

593.105068ms ago: executing program 7 (id=8644):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x9000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000001f000079d955a9e27d19a38d497043b79b7f1f0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={<r2=>r0, &(0x7f0000000380)='[#\x00', 0x0, &(0x7f0000000040)={@align=0x6, {0x4, 0x9, 0x2, 0x4}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={<r4=>0x0, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1)
ioctl$BLKPG(r9, 0xc0285443, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r4], 0x0, 0x1})
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820)
r12 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r13)
sendmsg$DEVLINK_CMD_RATE_SET(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r14, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
recvfrom$ax25(r12, 0x0, 0x0, 0x40010011, 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, r4], &(0x7f00000001c0)=[0x7fffffffffffffff, 0x0, 0x5, 0x4, 0x7, 0xffffffffffffff6a], 0x8, 0x2, 0x2})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'aio_aio12_8\x00', [0x0, 0x400000a, 0x1, 0x4, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x5, 0x40000002, 0x6, 0x7, 0x1, 0x9, 0x43, 0x400, 0x89, 0x10d, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x6, 0x6, 0x10000, 0xfffffff4]})
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000700)={0x2, {0x2, 0x0, 0x2, 0xffc8, 0x7, 0x3}})
r15 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x98001, 0x0)
ioctl$COMEDI_LOCK(r15, 0x6405)

452.117801ms ago: executing program 7 (id=8645):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) (async)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) (async)
io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001080)}]) (async)
syz_open_dev$sndctrl(0x0, 0x0, 0x801) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

313.440616ms ago: executing program 7 (id=8649):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x2, @pix_mp={0x5, 0x6, 0x39565559, 0x3, 0x0, [{0x1, 0x5}, {0x9}, {0x4, 0x5}, {0x2119, 0x101}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0x400}, {0x4, 0x6}], 0x38, 0x4, 0x6, 0x5e1b4426ebee21a8}})
r1 = userfaultfd(0x80001)
r2 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
mlockall(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0)
getitimer(0x2, &(0x7f00000001c0))
syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
read(r1, &(0x7f00000002c0)=""/153, 0x99)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000839000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000})
r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000240))
r7 = creat(&(0x7f0000000040)='./bus\x00', 0x181)
write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000000)=0x2)

243.077837ms ago: executing program 6 (id=8652):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001000600"/20, @ANYRES32=r1], 0x20}}, 0x0)

143.413011ms ago: executing program 6 (id=8653):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0) (async)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
r4 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) (async)
sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000)
accept$nfc_llcp(r2, 0x0, 0x0) (async)
accept$nfc_llcp(r2, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffe}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x40b}]}]}, 0x34}}, 0x40054)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005f37be64a00fcdb0900000000000000000008000500", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005f37be64a00fcdb0900000000000000000008000500", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
fchdir(r9)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r8) (async)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r8)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x24000800) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x24000800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x70bd29, 0x0, {0x7, 0x0, 0x0, r11}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x70bd29, 0x0, {0x7, 0x0, 0x0, r11}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0)

143.205176ms ago: executing program 6 (id=8654):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=<r2=>0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x40, 0x107, 0x70bd2d, 0x0, {0x1, 0x7c}, [@typed={0x8, 0xec, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @uid=r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048090}, 0xc010)

83.396811ms ago: executing program 6 (id=8655):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2)
getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$packet(0x11, 0xc2340cf684d20d18, 0x300)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r3, 0x701, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x140, 0xc8, 0x8, 0x140, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x1, {0xb}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xfffffffd, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ctinfo={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x8000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x80}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x1}]}, {0x0, 0x6, "53c3b277a5741bd4f1b1e484b9f7c153c331680f0b14ff90ad5e2e6037441968d34e8e9ae94830e663929886fc8d4e6dc82ee1393c8726ebc4c643d29542a76121c6e16a5b26831fe48260abc52169d1b7950ad111550cbf4f700b8f9fe710ab31d977978165a6f982708365f6117f0303217cc80779d41eac1ce90ed7f9158846864ad3477675b33404ffb9b962f3169d0c58d7cfa9abc0cee501f373e37a7748dcd4a0a51d5208fb0d3966904342d32b9b26530b8ed5e340e15dd2aecbef6ac062cb4d3f5757c73b8a95d4b1d512293ddde345ba2fdaf0d4e14656f55cd452b9c9fefafe"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

82.914571ms ago: executing program 6 (id=8656):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5bd2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35e}]}, 0x120}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x687}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9c5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44850}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x6, 0xa}, {0x120, 0x74, 0x81, 0x2, 0xff00}}}}, 0x17)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x45cc, 0x5c}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10040080) (async)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x45cc, 0x5c}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10040080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x18, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8880}, 0x8084)
r7 = fcntl$getown(r1, 0x9)
r8 = fcntl$getown(r6, 0x9)
socket$kcm(0x29, 0x5, 0x0) (async)
r9 = socket$kcm(0x29, 0x5, 0x0)
kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r3, &(0x7f0000000840)={0xffffffffffffffff, r9, 0x6})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x2000000) (async)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}}, 0x2000000)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000980), 0x802, 0x0)
ioctl$UI_GET_SYSNAME(r10, 0x8040552c, &(0x7f00000009c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r12, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x80c0)
r13 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/bsg/2:0:0:0\x00', 0x309201, 0x0)
ioctl$SG_GET_LOW_DMA(r13, 0x227a, &(0x7f0000000b80))
ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f0000000bc0)=0x1)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000c00)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x4, 0x6, 0x2, 0x9, 0x4}, &(0x7f0000000cc0)=0x98) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000c00)={<r14=>0x0, @in={{0x2, 0x4e23, @remote}}, 0x4, 0x6, 0x2, 0x9, 0x4}, &(0x7f0000000cc0)=0x98)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000d00)={r14, @in={{0x2, 0x4e23, @private=0xa010102}}, 0xb, 0x1ff}, &(0x7f0000000dc0)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000d00)={r14, @in={{0x2, 0x4e23, @private=0xa010102}}, 0xb, 0x1ff}, &(0x7f0000000dc0)=0x90)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0, 0x28}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x18844}, 0x20000000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000f00)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e20, 0x81, @loopback, 0x2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x3, @remote, 0x9}, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0xa4)

1.010549ms ago: executing program 6 (id=8657):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250100000006000a004e24000014000900fa880000000000000000000000000100050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800)
close(r0)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00\b'], 0x28)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815)

0s ago: executing program 2 (id=8658):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='gadgetfs\x00', 0x10005, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901)
mount_setattr(r1, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@overlay={0x1, 0x8, 0x4, 0x4000, 0x9, {}, {0x2, 0xc, 0x8, 0x9, 0x1, 0x2a, "60fd6501"}, 0x9, 0x3, {}, 0x3})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f0000000180)=[{0x1e, '\x00', @data=0x80000001, 0x5}]})
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_io_uring_setup(0x1bd3, &(0x7f0000000200)={0x0, 0x9999, 0x20, 0x1, 0xb}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x14, &(0x7f0000001d00)=[{0x6, 0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/150, 0x96}, {&(0x7f0000001400)=""/130, 0x82}, {&(0x7f00000014c0)=""/196, 0xc4}, {&(0x7f00000015c0)}, {&(0x7f0000001600)=""/39, 0x27}], &(0x7f00000016c0)=[0x5, 0x2, 0xe, 0xf7, 0x0]}, {0x8, 0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001700)=""/215, 0xd7}, {&(0x7f0000001800)=""/28, 0x1c}, {&(0x7f0000001840)=""/186, 0xba}, {&(0x7f0000001900)=""/113, 0x71}, {&(0x7f0000001980)=""/232, 0xe8}, {&(0x7f0000001a80)=""/210, 0xd2}, {&(0x7f0000001b80)=""/105, 0x69}, {&(0x7f0000001c00)=""/44, 0x2c}], &(0x7f0000001cc0)=[0x5, 0x7fffffff, 0x7, 0x6, 0x10000, 0x3, 0x800]}], 0x2)
r7 = getpgid(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r7)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d80), 0xffffffffffffffff)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000080)={@random="a70b49c5294f", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x3e}, "00000000ffff"}}}}}}}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, r9, 0x308, 0x70bd26, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4040020}, 0x4000)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)

kernel console output (not intermixed with test programs):

865:30866 ioctl c0306201 2000000003c0 returned -14
[  964.347393][T30871] FAULT_INJECTION: forcing a failure.
[  964.347393][T30871] name failslab, interval 1, probability 0, space 0, times 0
[  964.352933][T30871] CPU: 1 UID: 0 PID: 30871 Comm: syz.1.7972 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  964.352952][T30871] Tainted: [L]=SOFTLOCKUP
[  964.352957][T30871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  964.352964][T30871] Call Trace:
[  964.352969][T30871]  <TASK>
[  964.352973][T30871]  dump_stack_lvl+0x100/0x190
[  964.353001][T30871]  should_fail_ex.cold+0x5/0xa
[  964.353019][T30871]  should_failslab+0xc2/0x120
[  964.353033][T30871]  __kmalloc_cache_noprof+0x7a/0x6f0
[  964.353049][T30871]  ? binder_transaction+0x748/0x9ee0
[  964.353067][T30871]  binder_transaction+0x748/0x9ee0
[  964.353080][T30871]  ? ima_match_policy+0x8b8/0x2340
[  964.353101][T30871]  ? __lock_acquire+0x4a5/0x2630
[  964.353116][T30871]  ? __pfx_binder_transaction+0x10/0x10
[  964.353130][T30871]  ? __lock_acquire+0x4a5/0x2630
[  964.353147][T30871]  ? find_held_lock+0x2b/0x80
[  964.353162][T30871]  ? is_bpf_text_address+0x8a/0x1a0
[  964.353180][T30871]  ? is_bpf_text_address+0x8a/0x1a0
[  964.353197][T30871]  ? bpf_ksym_find+0x128/0x1c0
[  964.353209][T30871]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  964.353283][T30871]  ? is_bpf_text_address+0x94/0x1a0
[  964.353300][T30871]  ? kernel_text_address+0x8d/0x100
[  964.353318][T30871]  ? is_bpf_text_address+0x8a/0x1a0
[  964.353334][T30871]  ? __kernel_text_address+0xd/0x30
[  964.353349][T30871]  ? __lock_acquire+0x4a5/0x2630
[  964.353360][T30871]  ? __lock_acquire+0x4a5/0x2630
[  964.353376][T30871]  ? find_held_lock+0x2b/0x80
[  964.353391][T30871]  ? __might_fault+0xc5/0x140
[  964.353407][T30871]  ? __might_fault+0xc5/0x140
[  964.353428][T30871]  binder_thread_write+0x131f/0x4dd0
[  964.353444][T30871]  ? __lock_acquire+0x4a5/0x2630
[  964.353455][T30871]  ? __pfx_binder_thread_write+0x10/0x10
[  964.353468][T30871]  ? binder_debug+0xe0/0x190
[  964.353484][T30871]  ? __pfx_binder_debug+0x10/0x10
[  964.353501][T30871]  ? binder_debug+0xe0/0x190
[  964.353517][T30871]  ? __pfx_binder_debug+0x10/0x10
[  964.353541][T30871]  binder_ioctl+0x2941/0x7610
[  964.353557][T30871]  ? tomoyo_path_number_perm+0x188/0x580
[  964.353577][T30871]  ? __pfx_binder_ioctl+0x10/0x10
[  964.353589][T30871]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  964.353608][T30871]  ? do_vfs_ioctl+0x226/0x13e0
[  964.353627][T30871]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  964.353644][T30871]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  964.353668][T30871]  ? hook_file_ioctl_common+0x146/0x410
[  964.353684][T30871]  ? selinux_file_ioctl+0x139/0x290
[  964.353729][T30871]  ? selinux_file_ioctl+0xb4/0x290
[  964.353754][T30871]  ? __pfx_binder_ioctl+0x10/0x10
[  964.353770][T30871]  __x64_sys_ioctl+0x18e/0x210
[  964.353789][T30871]  do_syscall_64+0x106/0xf80
[  964.353801][T30871]  ? clear_bhb_loop+0x40/0x90
[  964.353816][T30871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.353829][T30871] RIP: 0033:0x7f5ad519c819
[  964.353839][T30871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.353850][T30871] RSP: 002b:00007f5ad5fb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  964.353862][T30871] RAX: ffffffffffffffda RBX: 00007f5ad5416090 RCX: 00007f5ad519c819
[  964.353869][T30871] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  964.353876][T30871] RBP: 00007f5ad5fb0090 R08: 0000000000000000 R09: 0000000000000000
[  964.353883][T30871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  964.353889][T30871] R13: 00007f5ad5416128 R14: 00007f5ad5416090 R15: 00007ffe6f12c318
[  964.353902][T30871]  </TASK>
[  964.419352][T30874] set_capacity_and_notify: 2 callbacks suppressed
[  964.419363][T30874] loop2: detected capacity change from 0 to 7
[  964.495862][T20098] Dev loop2: unable to read RDB block 7
[  964.498302][T20098]  loop2: AHDI p1 p4
[  964.500241][T20098] loop2: partition table partially beyond EOD, truncated
[  964.503732][T20098] loop2: p1 size 100663296 extends beyond EOD, truncated
[  964.517993][T30874] Dev loop2: unable to read RDB block 7
[  964.530703][T30878] binder: 30877:30878 ioctl c0306201 200000000080 returned -14
[  964.533965][T30874]  loop2: AHDI p1 p4
[  964.535838][T30874] loop2: partition table partially beyond EOD, truncated
[  964.536875][T30878] binder: BINDER_SET_CONTEXT_MGR already set
[  964.539587][T30874] loop2: p1 size 100663296 extends beyond EOD, 
[  964.541478][T30878] binder: 30877:30878 ioctl 4018620d 200000000040 returned -16
[  964.542291][T30878] binder: 30877:30878 ioctl c0306201 2000000003c0 returned -14
[  964.544222][T30874] truncated
[  964.605004][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  964.612597][T30883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7977'.
[  964.616434][T30883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7977'.
[  964.620582][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  964.627385][T30883] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7977'.
[  964.740959][T30887] syzkaller0: entered promiscuous mode
[  964.743409][T30887] syzkaller0: entered allmulticast mode
[  964.773128][T30887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  964.777450][T30886] tipc: Resetting bearer <eth:syzkaller0>
[  964.798814][    T9] usb 6-1: new low-speed USB device number 77 using dummy_hcd
[  964.804274][T30886] tipc: Disabling bearer <eth:syzkaller0>
[  964.816633][T30890] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  964.846662][T30895] binder: 30894:30895 ioctl c0306201 200000000080 returned -14
[  964.850912][T30895] binder: 30894:30895 ioctl c0306201 2000000003c0 returned -14
[  964.923816][T30900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7982'.
[  964.946780][T30898] *****************************************************
[  964.950946][    T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  964.951046][T30898] ORANGEFS Device Error:  You cannot open the device file 
[  964.955226][T30898] 
[  964.955226][T30898] /dev/pvfs2-req more than once.  Please make sure that
[  964.955226][T30898] there are no 
[  964.957473][T30898] instances of a program using this device
[  964.957473][T30898] currently running. (You must verify this!)
[  964.959031][    T9] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  964.961655][T30898] For example, you can use the lsof program as follows:
[  964.969396][    T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  964.970673][T30898] 'lsof | grep pvfs2-req' (run this as root)
[  964.972845][    T9] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  964.973934][    T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  964.976092][T30898]   open_access_count = 1
[  964.978730][    T9] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  964.983653][T30898] *****************************************************
[  964.988591][    T9] usb 6-1: string descriptor 0 read error: -22
[  964.995910][    T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  964.999063][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.008534][    T9] adutux 6-1:168.0: interrupt endpoints not found
[  965.013754][T30905] binder: 30904:30905 ioctl c0306201 200000000080 returned -14
[  965.019441][T30905] binder: 30904:30905 ioctl c0306201 2000000003c0 returned -14
[  965.047279][T30908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=30908 comm=syz.6.7985
[  965.058185][T30908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30908 comm=syz.6.7985
[  965.217349][    T9] usb 6-1: USB disconnect, device number 77
[  965.408779][T26575] net_ratelimit: 34 callbacks suppressed
[  965.408794][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  965.518870][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  965.638780][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  965.748713][T30920] "syz.1.7987" (30920) uses obsolete ecb(arc4) skcipher
[  965.748886][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  965.858874][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  965.938016][   T40] audit: type=1400 audit(2000001043.966:46341): avc:  denied  { getopt } for  pid=30928 comm="syz.6.7990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  965.952563][   T40] audit: type=1400 audit(2000001043.966:46342): avc:  denied  { ioctl } for  pid=30928 comm="syz.6.7990" path="socket:[167699]" dev="sockfs" ino=167699 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  965.968884][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  966.012193][T30931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  966.066194][T30934] binder: 30933:30934 ioctl c0306201 200000000080 returned -14
[  966.071956][T30934] binder: 30933:30934 ioctl c0306201 2000000003c0 returned -14
[  966.078916][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  966.128699][    T9] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  966.191193][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  966.291349][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  966.295125][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  966.302685][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  966.307234][    T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  966.308871][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  966.311042][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.323695][    T9] usb 6-1: config 0 descriptor??
[  966.375603][T30949] binder: 30948:30949 ioctl c0306201 200000000080 returned -14
[  966.387748][T30949] binder: 30948:30949 ioctl c0306201 2000000003c0 returned -14
[  966.418871][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  966.453117][   T40] audit: type=1400 audit(2000001044.486:46343): avc:  denied  { module_load } for  pid=30950 comm="syz.6.7996" path="/395/bus" dev="tmpfs" ino=2146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  966.453626][T30951] Invalid ELF header magic: != ELF
[  966.504022][T30953] overlayfs: failed to resolve 'fsname=/sys/kernel/debug/binder/failed_transaction_log': -2
[  966.509541][T30953] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7997'.
[  966.537399][T30927] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.541548][T30927] Buffer I/O error on dev nbd1, logical block 0, async page read
[  966.544900][T30927] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.550866][T30927] Buffer I/O error on dev nbd1, logical block 1, async page read
[  966.554234][T30927] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.558248][T30927] Buffer I/O error on dev nbd1, logical block 2, async page read
[  966.564990][T30927] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.570047][T30927] Buffer I/O error on dev nbd1, logical block 3, async page read
[  966.573383][T30927] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.577375][T30927] Buffer I/O error on dev nbd1, logical block 0, async page read
[  966.581151][T30927] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.585092][T30927] Buffer I/O error on dev nbd1, logical block 1, async page read
[  966.588375][T30927] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.593007][T30927] Buffer I/O error on dev nbd1, logical block 2, async page read
[  966.596583][T30927] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.600872][T30927] Buffer I/O error on dev nbd1, logical block 3, async page read
[  966.604207][T30927] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.608164][T30927] Buffer I/O error on dev nbd1, logical block 0, async page read
[  966.611651][T30927] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  966.615444][T30927] Buffer I/O error on dev nbd1, logical block 1, async page read
[  966.616130][T30958] binder: 30957:30958 ioctl c0306201 200000000080 returned -14
[  966.619537][T30927] ldm_validate_partition_table(): Disk read failed.
[  966.625728][T30927] Dev nbd1: unable to read RDB block 0
[  966.626243][T30958] binder: 30957:30958 ioctl c0306201 2000000003c0 returned -14
[  966.629848][T30927]  nbd1: unable to read partition table
[  966.680404][   T40] audit: type=1400 audit(2000001044.716:46344): avc:  denied  { accept } for  pid=30959 comm="syz.6.8000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  966.727214][T30962] binder: 30961:30962 ioctl c0306201 200000000080 returned -14
[  966.734739][T30962] binder: 30961:30962 ioctl c0306201 2000000003c0 returned -14
[  966.773844][T30964] binder: 30963:30964 ioctl c0306201 200000000080 returned -14
[  966.781156][T30964] binder: 30963:30964 ioctl c0306201 2000000003c0 returned -14
[  966.823518][    T9] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  966.846593][T30971] binder: 30970:30971 ioctl c0306201 200000000080 returned -14
[  966.905590][T30974] can0: slcan on ptm0.
[  966.915569][   T40] audit: type=1326 audit(2000001044.946:46345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30973 comm="syz.6.8005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98459c819 code=0x7ff00000
[  966.931564][   T40] audit: type=1326 audit(2000001044.956:46346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30973 comm="syz.6.8005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98459c819 code=0x7ff00000
[  966.942852][   T40] audit: type=1326 audit(2000001044.956:46347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30973 comm="syz.6.8005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98459c819 code=0x7ff00000
[  966.952255][   T40] audit: type=1326 audit(2000001044.956:46348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30973 comm="syz.6.8005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98459c819 code=0x7ff00000
[  966.959733][   T40] audit: type=1326 audit(2000001044.956:46349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30973 comm="syz.6.8005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98459c819 code=0x7ff00000
[  966.967103][   T40] audit: type=1326 audit(2000001044.956:46350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30973 comm="syz.6.8005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98459c819 code=0x7ff00000
[  967.148902][T30973] can0 (unregistered): slcan off ptm0.
[  967.243381][T30989] syzkaller0: entered promiscuous mode
[  967.245152][T30989] syzkaller0: entered allmulticast mode
[  967.265915][T30989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  967.272382][T30988] tipc: Resetting bearer <eth:syzkaller0>
[  967.288815][T30988] tipc: Disabling bearer <eth:syzkaller0>
[  967.478155][T31001] binder: 31000:31001 ioctl c0306201 200000000080 returned -14
[  967.484376][T31001] binder: 31000:31001 ioctl c0306201 2000000003c0 returned -14
[  967.533919][T31003] binder: 31002:31003 ioctl c0306201 200000000080 returned -14
[  967.538823][T31003] binder: 31002:31003 ioctl c0306201 2000000003c0 returned -14
[  967.592341][T31005] syzkaller0: entered promiscuous mode
[  967.594723][T31005] syzkaller0: entered allmulticast mode
[  967.615259][T31005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  967.619732][T31004] tipc: Resetting bearer <eth:syzkaller0>
[  967.635156][T31004] tipc: Disabling bearer <eth:syzkaller0>
[  967.779752][T31007] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.782355][T31007] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.820507][T31007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  967.888349][T31007] xfrm1: left promiscuous mode
[  967.905747][T26570] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  967.910653][T26570] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  967.914190][T26570] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  967.917682][T26570] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  968.238967][    T9] usb 12-1: new high-speed USB device number 13 using dummy_hcd
[  968.257285][T31016] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  968.318891][T31020] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  968.322771][T31023] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  968.353437][T31025] binder: 31024:31025 ioctl c0306201 200000000080 returned -14
[  968.358570][T31025] binder: 31024:31025 ioctl c0306201 2000000003c0 returned -14
[  968.398776][    T9] usb 12-1: Using ep0 maxpacket: 8
[  968.401846][    T9] usb 12-1: config index 0 descriptor too short (expected 301, got 45)
[  968.404315][    T9] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  968.407634][    T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  968.411772][    T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  968.414730][    T9] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  968.419110][    T9] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  968.422029][    T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.669058][T21406] usb 11-1: new high-speed USB device number 65 using dummy_hcd
[  968.779637][T31040] binder: BINDER_SET_CONTEXT_MGR already set
[  968.782199][T31040] binder: 31039:31040 ioctl 4018620d 200000003280 returned -16
[  968.785872][T31040] binder: 31039:31040 ioctl c0306201 200000000080 returned -14
[  968.790677][T31040] binder: BINDER_SET_CONTEXT_MGR already set
[  968.793191][T31040] binder: 31039:31040 ioctl 4018620d 200000000040 returned -16
[  968.796603][T31040] binder: 31039:31040 ioctl c0306201 2000000003c0 returned -14
[  968.800607][T31040] FAULT_INJECTION: forcing a failure.
[  968.800607][T31040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  968.805855][T31040] CPU: 3 UID: 0 PID: 31040 Comm: syz.1.8024 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  968.805883][T31040] Tainted: [L]=SOFTLOCKUP
[  968.805890][T31040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  968.805902][T31040] Call Trace:
[  968.805911][T31040]  <TASK>
[  968.805919][T31040]  dump_stack_lvl+0x100/0x190
[  968.805959][T31040]  should_fail_ex.cold+0x5/0xa
[  968.805987][T31040]  _copy_to_user+0x32/0xd0
[  968.806011][T31040]  simple_read_from_buffer+0xcb/0x170
[  968.806037][T31040]  proc_fail_nth_read+0x1af/0x230
[  968.806070][T31040]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  968.806099][T31040]  ? rw_verify_area+0xce/0x6d0
[  968.806127][T31040]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  968.806154][T31040]  vfs_read+0x1e4/0xb30
[  968.806175][T31040]  ? __pfx_vfs_read+0x10/0x10
[  968.806192][T31040]  ? __fget_files+0x215/0x3d0
[  968.806219][T31040]  ? __fget_files+0x21f/0x3d0
[  968.806246][T31040]  ksys_read+0x12a/0x250
[  968.806270][T31040]  ? __pfx_ksys_read+0x10/0x10
[  968.806295][T31040]  do_syscall_64+0x106/0xf80
[  968.806313][T31040]  ? clear_bhb_loop+0x40/0x90
[  968.806336][T31040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  968.806356][T31040] RIP: 0033:0x7f5ad515d04e
[  968.806373][T31040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  968.806389][T31040] RSP: 002b:00007f5ad5fd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  968.806407][T31040] RAX: ffffffffffffffda RBX: 00007f5ad5fd16c0 RCX: 00007f5ad515d04e
[  968.806419][T31040] RDX: 000000000000000f RSI: 00007f5ad5fd10a0 RDI: 0000000000000006
[  968.806430][T31040] RBP: 00007f5ad5fd1090 R08: 0000000000000000 R09: 0000000000000000
[  968.806441][T31040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  968.806451][T31040] R13: 00007f5ad5416038 R14: 00007f5ad5415fa0 R15: 00007ffe6f12c318
[  968.806476][T31040]  </TASK>
[  968.820581][T21406] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  968.839793][  T840] usb 12-1: USB disconnect, device number 13
[  968.840793][T21406] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  968.881666][T31044] loop2: detected capacity change from 0 to 7
[  968.884339][ T6088] usb 6-1: USB disconnect, device number 78
[  968.891788][T20098]  loop2:
[  968.893993][T21406] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  968.895946][T20098] loop2: partition table partially beyond EOD, truncated
[  968.905966][T21406] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  968.911705][T21406] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  968.912581][T31044]  loop2:
[  968.914923][T21406] usb 11-1: Product: syz
[  968.917185][T31044] loop2: partition table partially beyond EOD, truncated
[  968.918351][T21406] usb 11-1: Manufacturer: syz
[  968.923456][T21406] usb 11-1: SerialNumber: syz
[  968.961402][T31046] binder: BINDER_SET_CONTEXT_MGR already set
[  968.963633][T31046] binder: 31045:31046 ioctl 4018620d 200000003280 returned -16
[  968.967631][T31046] binder: 31045:31046 ioctl c0306201 200000000080 returned -14
[  968.972861][T31046] binder: BINDER_SET_CONTEXT_MGR already set
[  968.974804][T31046] binder: 31045:31046 ioctl 4018620d 200000000040 returned -16
[  968.977579][T31046] binder: 31045:31046 ioctl c0306201 2000000003c0 returned -14
[  968.981366][T31046] binder: 31045:31046 unknown command 0
[  968.983188][T31046] binder: 31045:31046 ioctl c0306201 2000000001c0 returned -22
[  969.114599][T31051] netlink: 'syz.1.8029': attribute type 2 has an invalid length.
[  969.132328][T21406] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  969.538070][T21406] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  969.693067][T21406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  969.697072][T21406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  969.701271][T31065] syzkaller0: entered promiscuous mode
[  969.701889][T21406] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  969.703609][T31065] syzkaller0: entered allmulticast mode
[  969.709867][T21406] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  969.715358][T21406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.723245][T21406] usb 6-1: config 0 descriptor??
[  969.742017][T31065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  969.748420][T31064] tipc: Resetting bearer <eth:syzkaller0>
[  969.773122][T31064] tipc: Disabling bearer <eth:syzkaller0>
[  970.015893][T31067] loop2: detected capacity change from 0 to 7
[  970.020239][T31067]  loop2:
[  970.021563][T31067] loop2: partition table partially beyond EOD, truncated
[  970.072735][T31069] binder: 31068:31069 ioctl c0306201 200000000080 returned -14
[  970.080747][T31069] binder: 31068:31069 ioctl c0306201 2000000003c0 returned -14
[  970.140122][T31071] binder: 31070:31071 ioctl c0306201 200000000080 returned -14
[  970.145545][T31071] binder: 31070:31071 ioctl c0306201 2000000003c0 returned -14
[  970.152598][T31071] binder: 31070:31071 unknown command 0
[  970.154888][T31071] binder: 31070:31071 ioctl c0306201 2000000001c0 returned -22
[  970.211093][T21406] plantronics 0003:047F:FFFF.0079: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  970.405721][T21406] usb 6-1: USB disconnect, device number 79
[  970.469108][T26569] net_ratelimit: 33 callbacks suppressed
[  970.469129][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  970.588882][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  970.698802][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  970.808994][T26574] bond4: (slave macvlan2): failed to get link speed/duplex
[  970.919066][T26549] bond4: (slave macvlan2): failed to get link speed/duplex
[  971.030170][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  971.149108][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  971.259019][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  971.283139][   T40] kauditd_printk_skb: 1491 callbacks suppressed
[  971.283157][   T40] audit: type=1800 audit(2000001049.316:47842): pid=31086 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.8041" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  971.368818][T26549] bond4: (slave macvlan2): failed to get link speed/duplex
[  971.384981][T31091] tmpfs: Unknown parameter '0x0000000000000003'
[  971.391303][T31091] xt_l2tp: v2 doesn't support IP mode
[  971.405495][T31092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31092 comm=syz.1.8042
[  971.422682][   T40] audit: type=1400 audit(2000001049.456:47843): avc:  denied  { listen } for  pid=31093 comm="syz.7.8044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  971.479286][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  971.481663][T31098] binder: 31097:31098 ioctl c0306201 200000000080 returned -14
[  971.486376][T31098] binder: 31097:31098 ioctl c0306201 2000000003c0 returned -14
[  971.496694][   T40] audit: type=1326 audit(2000001049.526:47844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31099 comm="syz.1.8046" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad519c819 code=0x0
[  971.523683][    T9] usb 11-1: USB disconnect, device number 65
[  971.528959][    T9] usblp0: removed
[  971.546347][T31104] syzkaller0: entered promiscuous mode
[  971.551212][T31104] syzkaller0: entered allmulticast mode
[  971.573240][T31106] binder: 31105:31106 ioctl c0306201 200000000080 returned -14
[  971.583500][T31104] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  971.586830][T31103] tipc: Resetting bearer <eth:syzkaller0>
[  971.599973][T31106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31106 comm=syz.6.8049
[  971.605344][T31106] binder: 31105:31106 ioctl c0306201 2000000003c0 returned -14
[  971.610620][T31103] tipc: Disabling bearer <eth:syzkaller0>
[  971.640273][T31111] input: syz0 as /devices/virtual/input/input175
[  971.647521][T31111] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  971.652631][T31111] Error validating options; rc = [-22]
[  971.712754][T31115] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  971.728204][T31114] wg2 speed is unknown, defaulting to 1000
[  971.762706][T31120] netlink: 'syz.6.8052': attribute type 20 has an invalid length.
[  971.795748][T31122] netlink: 'syz.7.8054': attribute type 5 has an invalid length.
[  971.938397][T31127] binder: 31125:31127 ioctl c0306201 200000000080 returned -14
[  971.942917][T31127] binder: 31125:31127 ioctl c0306201 2000000003c0 returned -14
[  971.978978][T31130] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  971.981409][T31130] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock
[  971.984024][T31130] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  971.986543][T31130] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock
[  972.022344][T31136] syzkaller0: entered promiscuous mode
[  972.024179][T31136] syzkaller0: entered allmulticast mode
[  972.043164][T31136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  972.046373][T31135] tipc: Resetting bearer <eth:syzkaller0>
[  972.071917][T31135] tipc: Disabling bearer <eth:syzkaller0>
[  972.089808][T31134] /dev/sr0: Can't open blockdev
[  972.210450][T31145] binder: 31144:31145 ioctl c0306201 200000000080 returned -14
[  972.215251][T31145] binder: 31144:31145 ioctl c0306201 2000000003c0 returned -14
[  972.217224][   T40] audit: type=1400 audit(2000001050.246:47845): avc:  denied  { create } for  pid=31143 comm="syz.6.8062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  972.239064][   T40] audit: type=1400 audit(2000001050.256:47846): avc:  denied  { ioctl } for  pid=31143 comm="syz.6.8062" path="socket:[169445]" dev="sockfs" ino=169445 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  972.249987][T31149] binder: 31148:31149 ioctl c0306201 200000000080 returned -14
[  972.255610][T31149] binder: 31148:31149 ioctl c0306201 2000000003c0 returned -14
[  972.489073][T18601] usb 12-1: new high-speed USB device number 14 using dummy_hcd
[  972.561175][T31168] syzkaller0: entered promiscuous mode
[  972.562989][T31168] syzkaller0: entered allmulticast mode
[  972.580428][T31168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  972.583841][T31167] tipc: Resetting bearer <eth:syzkaller0>
[  972.600290][T31167] tipc: Disabling bearer <eth:syzkaller0>
[  972.649177][  T840] usb 11-1: new high-speed USB device number 66 using dummy_hcd
[  972.654934][T18601] usb 12-1: config 0 interface 0 has no altsetting 0
[  972.659050][T18601] usb 12-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  972.662801][T18601] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.669259][T18601] usb 12-1: config 0 descriptor??
[  972.718918][   T39] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  972.800394][  T840] usb 11-1: Using ep0 maxpacket: 32
[  972.803796][  T840] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  972.807083][  T840] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  972.810843][  T840] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  972.814205][  T840] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  972.820359][  T840] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  972.823314][  T840] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.825899][  T840] usb 11-1: Product: syz
[  972.827368][  T840] usb 11-1: Manufacturer: syz
[  972.829261][  T840] usb 11-1: SerialNumber: syz
[  972.838302][    C3] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  972.846408][  T840] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input176
[  972.889044][   T39] usb 7-1: Using ep0 maxpacket: 8
[  972.893058][   T39] usb 7-1: unable to get BOS descriptor or descriptor too short
[  972.896416][   T39] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  972.912173][   T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  972.919401][   T39] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  972.922920][   T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.926142][   T39] usb 7-1: Product: syz
[  972.927842][   T39] usb 7-1: Manufacturer: syz
[  972.929819][   T39] usb 7-1: SerialNumber: syz
[  973.019057][T20988] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  973.058839][  T840] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  973.061513][  T840]  (id 0x00)
[  973.111701][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8064'.
[  973.118792][  T840] rc_core: IR keymap rc-imon-pad not found
[  973.123802][  T840] Registered IR keymap rc-empty
[  973.125488][  T840] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  973.125716][T31177] ubi: mtd0 is already attached to ubi0
[  973.129969][  T840] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  973.200449][T20988] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  973.203252][T20988] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  973.206507][T20988] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  973.209912][T18601]  (null): keene_cmd_main failed (-110)
[  973.212879][T20988] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  973.216975][T18601] video4linux radio48: keene_cmd_main failed (-32)
[  973.227310][T20988] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  973.230464][T18601] radio-keene 12-1:0.0: V4L2 device registered as radio48
[  973.235817][T20988] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  973.244187][T20988] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  973.246747][T20988] usb 6-1: Product: syz
[  973.248141][T20988] usb 6-1: Manufacturer: syz
[  973.262073][T20988] cdc_wdm 6-1:1.0: skipping garbage
[  973.263797][T20988] cdc_wdm 6-1:1.0: skipping garbage
[  973.269578][  T840] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0
[  973.274325][T20988] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  973.280277][  T840] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input177
[  973.283679][T20988] cdc_wdm 6-1:1.0: Unknown control protocol
[  973.301512][  T840] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:66> initialized
[  973.452343][T21406] usb 11-1: USB disconnect, device number 66
[  973.463493][T31174] cdc_wdm 6-1:1.0: Error submitting int urb - -90
[  973.485701][T31161] cdc_wdm 6-1:1.0: Error submitting int urb - -90
[  973.489748][  T840] usb 6-1: USB disconnect, device number 80
[  973.675624][T31166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.678558][T31166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.732785][   T39] usb 7-1: cannot find UAC_HEADER
[  973.774402][   T39] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  973.783944][   T39] usb 7-1: USB disconnect, device number 50
[  973.804428][T20098] udevd[20098]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  974.116749][T31191] loop2: detected capacity change from 0 to 7
[  974.123466][T20098] Dev loop2: unable to read RDB block 7
[  974.125957][T20098]  loop2: AHDI p1 p4
[  974.127570][T20098] loop2: partition table partially beyond EOD, truncated
[  974.130623][T20098] loop2: p1 size 100663296 extends beyond EOD, truncated
[  974.150496][T31191] Dev loop2: unable to read RDB block 7
[  974.152284][T31191]  loop2: AHDI p1 p4
[  974.153539][T31191] loop2: partition table partially beyond EOD, truncated
[  974.156333][T31191] loop2: p1 size 100663296 extends beyond EOD, truncated
[  974.178146][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  974.192156][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  974.290708][T31205] binder: BINDER_SET_CONTEXT_MGR already set
[  974.292607][T31205] binder: 31204:31205 ioctl 4018620d 200000003280 returned -16
[  974.300048][T31205] binder: 31204:31205 ioctl c0306201 200000000080 returned -14
[  974.303399][T31205] binder: BINDER_SET_CONTEXT_MGR already set
[  974.305407][T31205] binder: 31204:31205 ioctl 4018620d 200000000040 returned -16
[  974.307940][T31205] binder: 31204:31205 ioctl c0306201 2000000003c0 returned -14
[  974.333510][T31208] binder: BINDER_SET_CONTEXT_MGR already set
[  974.335559][T31208] binder: 31207:31208 ioctl 4018620d 200000003280 returned -16
[  974.338848][T31208] binder: 31207:31208 ioctl c0306201 200000000080 returned -14
[  974.342411][T31208] binder: BINDER_SET_CONTEXT_MGR already set
[  974.347454][T31208] binder: 31207:31208 ioctl 4018620d 200000000040 returned -16
[  974.352420][T31208] binder: 31207:31208 ioctl c0306201 2000000003c0 returned -14
[  974.389209][T31211] binder: BINDER_SET_CONTEXT_MGR already set
[  974.391161][T31211] binder: 31210:31211 ioctl 4018620d 200000003280 returned -16
[  974.394330][T31211] binder: 31210:31211 ioctl c0306201 200000000080 returned -14
[  974.398208][T31211] binder: BINDER_SET_CONTEXT_MGR already set
[  974.400492][T31211] binder: 31210:31211 ioctl 4018620d 200000000040 returned -16
[  974.403357][T31211] binder: 31210:31211 ioctl c0306201 2000000003c0 returned -14
[  974.458294][T31215] Option 'Í'M•O§±' to dns_resolver key: bad/missing value
[  974.468977][T31217] Option 'Í'M•O§±' to dns_resolver key: bad/missing value
[  974.532668][T31220] binder: BINDER_SET_CONTEXT_MGR already set
[  974.534789][T31220] binder: 31219:31220 ioctl 4018620d 200000003280 returned -16
[  974.537929][T31220] binder: 31219:31220 ioctl c0306201 200000000080 returned -14
[  974.542833][   T40] audit: type=1400 audit(2000001052.576:47847): avc:  denied  { create } for  pid=31219 comm="syz.1.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  974.601252][T31220] binder: 31219:31220 ioctl c0306201 2000000003c0 returned -14
[  974.636048][   T40] audit: type=1400 audit(2000001052.666:47848): avc:  denied  { execute_no_trans } for  pid=31222 comm="syz.1.8088" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=169521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  974.650130][   T40] audit: type=1400 audit(2000001052.676:47849): avc:  denied  { getopt } for  pid=31222 comm="syz.1.8088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  974.675090][T31225] loop2: detected capacity change from 0 to 7
[  974.681424][T31225] Dev loop2: unable to read RDB block 7
[  974.683532][T31225]  loop2: AHDI p1 p4
[  974.684950][T31225] loop2: partition table partially beyond EOD, truncated
[  974.687504][T31225] loop2: p1 size 100663296 extends beyond EOD, truncated
[  974.728364][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  974.740822][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  974.971177][T31230] binder: BINDER_SET_CONTEXT_MGR already set
[  974.973217][T31230] binder: 31229:31230 ioctl 4018620d 200000003280 returned -16
[  974.976523][T31230] binder: 31229:31230 ioctl c0306201 200000000080 returned -14
[  974.980704][T31230] binder: BINDER_SET_CONTEXT_MGR already set
[  974.982764][T31230] binder: 31229:31230 ioctl 4018620d 200000000040 returned -16
[  974.985435][T31230] binder: 31229:31230 ioctl c0306201 2000000003c0 returned -14
[  975.030098][T31232] binder: BINDER_SET_CONTEXT_MGR already set
[  975.032122][T31232] binder: 31231:31232 ioctl 4018620d 200000003280 returned -16
[  975.035177][T31232] binder: 31231:31232 ioctl c0306201 200000000080 returned -14
[  975.039375][T31232] binder: BINDER_SET_CONTEXT_MGR already set
[  975.041357][T31232] binder: 31231:31232 ioctl 4018620d 200000000040 returned -16
[  975.044124][T31232] binder: 31231:31232 ioctl c0306201 2000000003c0 returned -14
[  975.083208][T31235] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  975.210477][T31241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31241 comm=syz.2.8092
[  975.322636][T31243] binder: 31242:31243 ioctl 4018620d 200000003280 returned -22
[  975.328193][T31243] binder: 31242:31243 ioctl c0306201 2000000003c0 returned -14
[  975.333002][   T40] audit: type=1400 audit(2000001053.366:47850): avc:  denied  { bind } for  pid=31245 comm="syz.6.8096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  975.336141][ T6002] usb 12-1: USB disconnect, device number 14
[  975.368709][   T40] audit: type=1400 audit(2000001053.376:47851): avc:  denied  { listen } for  pid=31245 comm="syz.6.8096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  975.408392][T31255] binder: 31254:31255 ioctl c0306201 200000000080 returned -14
[  975.413832][T31255] binder: 31254:31255 ioctl c0306201 2000000003c0 returned -14
[  975.445779][T31257] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8102'.
[  975.509419][T26569] net_ratelimit: 34 callbacks suppressed
[  975.509434][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  975.522931][T31263] binder: 31261:31263 ioctl c0306201 200000000080 returned -14
[  975.526599][T31263] binder: 31261:31263 ioctl c0306201 2000000003c0 returned -14
[  975.557108][T31271] binder: 31270:31271 ioctl c0306201 200000000080 returned -14
[  975.564863][T31271] binder: 31270:31271 ioctl c0306201 2000000003c0 returned -14
[  975.611676][T31279] binder: BINDER_SET_CONTEXT_MGR already set
[  975.613725][T31279] binder: 31278:31279 ioctl 4018620d 200000003280 returned -16
[  975.617013][T31279] binder: 31278:31279 ioctl c0306201 200000000080 returned -14
[  975.618797][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  975.620679][T31279] binder: BINDER_SET_CONTEXT_MGR already set
[  975.623964][T31279] binder: 31278:31279 ioctl 4018620d 200000000040 returned -16
[  975.626853][T31279] binder: 31278:31279 ioctl c0306201 2000000003c0 returned -14
[  975.628741][ T3253] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  975.717392][T31288] Bluetooth: MGMT ver 1.23
[  975.723811][T31288] Bluetooth: hci0: invalid len left 7, exp >= 48
[  975.728921][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  975.750146][T31292] binder: 31291:31292 ioctl c0306201 200000000080 returned -14
[  975.755080][T31292] binder: 31291:31292 ioctl c0306201 2000000003c0 returned -14
[  975.791175][ T3253] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  975.795196][ T3253] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  975.799726][ T3253] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  975.821805][T31302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8120'.
[  975.826351][ T3253] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  975.830444][ T3253] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  975.833613][ T3253] usb 7-1: Product: syz
[  975.835009][ T3253] usb 7-1: Manufacturer: syz
[  975.836507][ T3253] usb 7-1: SerialNumber: syz
[  975.839556][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  975.878741][T31307] binder: BINDER_SET_CONTEXT_MGR already set
[  975.881298][T31307] binder: 31306:31307 ioctl 4018620d 200000003280 returned -16
[  975.895380][T31307] binder: 31306:31307 ioctl c0306201 200000000080 returned -14
[  975.902526][T31307] binder: BINDER_SET_CONTEXT_MGR already set
[  975.904472][T31307] binder: 31306:31307 ioctl 4018620d 200000000040 returned -16
[  975.907301][T31307] binder: 31306:31307 ioctl c0306201 2000000003c0 returned -14
[  975.959717][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  976.014218][T31319] veth1_macvtap: vlans aren't supported yet for dev_uc|mc_add()
[  976.043975][ T3253] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  976.063006][T31323] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8127'.
[  976.069208][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  976.106517][T31325] binder: 31324:31325 ioctl c0306201 200000000080 returned -14
[  976.111540][T31325] binder: 31324:31325 ioctl c0306201 2000000003c0 returned -14
[  976.178813][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  976.243385][T31337] binder: 31336:31337 ioctl c0306201 200000000080 returned -14
[  976.247920][T31337] binder: 31336:31337 ioctl c0306201 2000000003c0 returned -14
[  976.289760][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  976.398805][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  976.508975][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  976.892757][T31357] binder: 31356:31357 ioctl c0306201 200000000080 returned -14
[  976.896942][T31357] binder: 31356:31357 ioctl c0306201 2000000003c0 returned -14
[  976.977791][T31368] MTD: Couldn't look up '/dev/sg0': -15
[  976.980158][T31368] /dev/sg0: Can't lookup blockdev
[  977.011198][T31370] binder: 31369:31370 ioctl c0306201 200000000080 returned -14
[  977.016977][T31370] binder: 31369:31370 ioctl c0306201 2000000003c0 returned -14
[  977.017457][T31372] binder: 31371:31372 ioctl 4018620d 0 returned -22
[  977.023204][T31372] binder: 31371:31372 ioctl c0306201 200000000240 returned -11
[  977.030188][T31372] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð)
[  977.062981][T31374] binder: 31373:31374 ioctl c0306201 200000000080 returned -14
[  977.067273][T31374] binder: 31373:31374 ioctl c0306201 2000000003c0 returned -14
[  977.082569][T31376] binder: BINDER_SET_CONTEXT_MGR already set
[  977.085239][T31376] binder: 31375:31376 ioctl 4018620d 200000003280 returned -16
[  977.090115][T31376] binder: 31375:31376 ioctl c0306201 200000000080 returned -14
[  977.095357][T31376] binder: BINDER_SET_CONTEXT_MGR already set
[  977.098033][T31376] binder: 31375:31376 ioctl 4018620d 200000000040 returned -16
[  977.105211][T31376] binder: 31375:31376 ioctl c0306201 2000000003c0 returned -14
[  977.153425][T31385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8149'.
[  977.193387][T31385] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  977.194145][T31387] netlink: 'syz.6.8150': attribute type 7 has an invalid length.
[  977.203321][T31387] netlink: 'syz.6.8150': attribute type 7 has an invalid length.
[  977.322482][T31392] binder: BINDER_SET_CONTEXT_MGR already set
[  977.325042][T31392] binder: 31391:31392 ioctl 4018620d 200000003280 returned -16
[  977.330430][T31392] binder: 31391:31392 ioctl c0306201 200000000080 returned -14
[  977.335517][T31392] binder: BINDER_SET_CONTEXT_MGR already set
[  977.337952][T31392] binder: 31391:31392 ioctl 4018620d 200000000040 returned -16
[  977.344087][T31392] binder: 31391:31392 ioctl c0306201 2000000003c0 returned -14
[  977.657432][T31409] binder: 31408:31409 ioctl c0306201 200000000080 returned -14
[  977.660134][T31406] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8157'.
[  977.664368][T31406] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8157'.
[  977.672711][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  977.672728][   T40] audit: type=1326 audit(2000001055.706:47853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31405 comm="syz.1.8157" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad519c819 code=0x0
[  977.673800][T31409] binder: 31408:31409 ioctl c0306201 2000000003c0 returned -14
[  977.785178][T31416] xt_ipcomp: unknown flags 1D
[  978.471473][T31446] ip6t_rpfilter: unknown options
[  978.475912][   T40] audit: type=1400 audit(2000001056.506:47854): avc:  denied  { setopt } for  pid=31445 comm="syz.7.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  978.522333][    T9] usb 7-1: USB disconnect, device number 51
[  978.544190][T31453] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8164'.
[  978.563469][T31453] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8164'.
[  978.572920][    T9] usblp0: removed
[  978.636287][T31461] binder: 31460:31461 ioctl c0306201 200000000080 returned -14
[  978.651782][T31461] syzkaller1: entered promiscuous mode
[  978.654307][T31461] syzkaller1: entered allmulticast mode
[  978.661797][T31463] binder: BINDER_SET_CONTEXT_MGR already set
[  978.664417][T31463] binder: 31462:31463 ioctl 4018620d 200000003280 returned -16
[  978.669496][T31463] binder: 31462:31463 ioctl c0306201 200000000080 returned -14
[  978.672798][T31461] binder: 31460:31461 ioctl c0306201 2000000003c0 returned -14
[  978.673443][T31463] binder: BINDER_SET_CONTEXT_MGR already set
[  978.681541][T31463] binder: 31462:31463 ioctl 4018620d 200000000040 returned -16
[  978.706970][T31465] binder: 31464:31465 ioctl c0306201 200000000080 returned -14
[  978.711423][T31465] binder: 31464:31465 ioctl c0306201 2000000003c0 returned -14
[  979.097088][   T40] audit: type=1400 audit(2000001057.126:47855): avc:  denied  { remount } for  pid=31495 comm="syz.1.8177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1
[  979.118734][T20988] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  979.270903][T20988] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  979.275124][T20988] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  979.279080][T20988] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  979.285349][T20988] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  979.290086][T20988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  979.291006][T31390] ata1.00: invalid multi_count 128 ignored
[  979.293502][T20988] usb 7-1: Product: syz
[  979.293522][T20988] usb 7-1: Manufacturer: syz
[  979.293539][T20988] usb 7-1: SerialNumber: syz
[  979.503455][T20988] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  979.736245][T31509] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8181'.
[  980.080434][T31527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=31527 comm=syz.6.8186
[  980.124111][   T40] audit: type=1400 audit(2000001058.156:47856): avc:  denied  { mount } for  pid=31530 comm="syz.1.8188" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  980.139500][T31535] binder: 31534:31535 ioctl c0306201 200000000080 returned -14
[  980.143262][T31535] binder: 31534:31535 ioctl c0306201 2000000003c0 returned -14
[  980.198988][ T3253] usb 12-1: new high-speed USB device number 15 using dummy_hcd
[  980.348751][ T3253] usb 12-1: Using ep0 maxpacket: 8
[  980.352397][ T3253] usb 12-1: config index 0 descriptor too short (expected 301, got 45)
[  980.355657][ T3253] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  980.360573][ T3253] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  980.364294][ T3253] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  980.368127][ T3253] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  980.373756][ T3253] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  980.377243][ T3253] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.559411][T26575] net_ratelimit: 36 callbacks suppressed
[  980.559425][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  980.587119][ T3253] usb 12-1: usb_control_msg returned -32
[  980.590688][ T3253] usbtmc 12-1:16.0: can't read capabilities
[  980.597084][T31550] random: crng reseeded on system resumption
[  980.657027][T31552] blk_print_req_error: 54 callbacks suppressed
[  980.657044][T31552] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.657873][T31553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8194'.
[  980.660353][T31552] buffer_io_error: 54 callbacks suppressed
[  980.660368][T31552] Buffer I/O error on dev nbd1, logical block 0, async page read
[  980.673389][T31552] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.676679][T31552] Buffer I/O error on dev nbd1, logical block 1, async page read
[  980.682362][T31552] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.685584][T31552] Buffer I/O error on dev nbd1, logical block 2, async page read
[  980.688186][T31552] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.693350][T31552] Buffer I/O error on dev nbd1, logical block 3, async page read
[  980.696321][T31552] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.699704][T31552] Buffer I/O error on dev nbd1, logical block 0, async page read
[  980.702745][T31552] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.709143][T31552] Buffer I/O error on dev nbd1, logical block 1, async page read
[  980.711856][T31552] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.714807][T31552] Buffer I/O error on dev nbd1, logical block 2, async page read
[  980.717242][T31552] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.718747][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  980.721896][T31552] Buffer I/O error on dev nbd1, logical block 3, async page read
[  980.725716][T31552] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.728755][T31552] Buffer I/O error on dev nbd1, logical block 0, async page read
[  980.731273][T31552] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  980.734295][T31552] Buffer I/O error on dev nbd1, logical block 1, async page read
[  980.737123][T31552] ldm_validate_partition_table(): Disk read failed.
[  980.740658][T31552] Dev nbd1: unable to read RDB block 0
[  980.742722][T31552]  nbd1: unable to read partition table
[  980.773553][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.775992][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.779699][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.786485][T31558] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  980.802484][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.805481][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.808194][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.811718][T31562] netlink: 'syz.1.8197': attribute type 10 has an invalid length.
[  980.814680][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.820078][T31562] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  980.824717][T31562] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  980.831533][T31562] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  980.834401][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.837243][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.838832][T26549] bond4: (slave macvlan2): failed to get link speed/duplex
[  980.842365][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.845224][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.848030][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.850974][T31558] xfrm0 speed is unknown, defaulting to 1000
[  980.877836][T31564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8198'.
[  980.903418][T31567] pimreg: entered allmulticast mode
[  980.909665][T31567] pimreg: left allmulticast mode
[  980.912838][T31569] binder: BINDER_SET_CONTEXT_MGR already set
[  980.915800][T31569] binder: 31568:31569 ioctl 4018620d 200000003280 returned -16
[  980.919551][T31569] binder: 31568:31569 ioctl c0306201 200000000080 returned -14
[  980.924153][T31569] binder: BINDER_SET_CONTEXT_MGR already set
[  980.926279][T31569] binder: 31568:31569 ioctl 4018620d 200000000040 returned -16
[  980.929432][T31569] binder: 31568:31569 ioctl c0306201 2000000003c0 returned -14
[  980.948778][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  981.009839][T31577] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  981.058909][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  981.179145][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  981.224891][T31594] binder: BINDER_SET_CONTEXT_MGR already set
[  981.227431][T31594] binder: 31593:31594 ioctl 4018620d 200000003280 returned -16
[  981.231499][T31594] binder: 31593:31594 ioctl c0306201 200000000080 returned -14
[  981.236393][T31594] binder: BINDER_SET_CONTEXT_MGR already set
[  981.238435][T31594] binder: 31593:31594 ioctl 4018620d 200000000040 returned -16
[  981.241349][T31594] binder: 31593:31594 ioctl c0306201 2000000003c0 returned -14
[  981.300198][T26549] bond4: (slave macvlan2): failed to get link speed/duplex
[  981.359023][    T9] usb 11-1: new high-speed USB device number 67 using dummy_hcd
[  981.408849][T26549] bond4: (slave macvlan2): failed to get link speed/duplex
[  981.509063][    T9] usb 11-1: Using ep0 maxpacket: 32
[  981.515344][    T9] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  981.520355][    T9] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  981.525303][    T9] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  981.528939][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  981.530258][    T9] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  981.540457][    T9] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  981.544108][    T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.547425][    T9] usb 11-1: Product: syz
[  981.549854][    T9] usb 11-1: Manufacturer: syz
[  981.551907][    T9] usb 11-1: SerialNumber: syz
[  981.560847][    C0] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  981.566626][    T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input178
[  981.639482][T26574] bond4: (slave macvlan2): failed to get link speed/duplex
[  981.779104][    T9] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  981.782765][    T9]  (id 0x00)
[  981.838981][    T9] rc_core: IR keymap rc-imon-pad not found
[  981.841614][    T9] Registered IR keymap rc-empty
[  981.843878][    T9] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  981.848426][    T9] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  981.964945][T30410] usb 7-1: USB disconnect, device number 52
[  981.981266][T30410] usblp0: removed
[  981.996459][    T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0
[  982.011046][    T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input179
[  982.022057][    T9] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:67> initialized
[  982.191999][T31590] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  982.216286][T20988] usb 11-1: USB disconnect, device number 67
[  982.411196][T31618] ip6t_srh: unknown srh invflags 4000
[  982.792115][T31622] loop2: detected capacity change from 0 to 7
[  982.796329][T20098]  loop2:
[  982.797672][T20098] loop2: partition table partially beyond EOD, truncated
[  982.810625][T31622]  loop2:
[  982.811734][T31622] loop2: partition table partially beyond EOD, truncated
[  982.916104][T31627] loop6: detected capacity change from 0 to 2640
[  982.919706][T31627] ldm_validate_partition_table(): Disk read failed.
[  982.923031][T31627] Dev loop6: unable to read RDB block 0
[  982.924990][T31627]  loop6: unable to read partition table
[  982.927107][T31627] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  982.927265][   T40] audit: type=1400 audit(2000001060.956:47857): avc:  denied  { setopt } for  pid=31623 comm="syz.1.8215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  982.967259][T21430] usb 12-1: USB disconnect, device number 15
[  983.073837][   T40] audit: type=1400 audit(2000001061.106:47858): avc:  denied  { lock } for  pid=31635 comm="syz.6.8219" path="socket:[170812]" dev="sockfs" ino=170812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  983.102843][T31638] binder: 31637:31638 ioctl c0306201 200000000080 returned -14
[  983.108431][T31638] binder: 31637:31638 ioctl c0306201 2000000003c0 returned -14
[  983.113345][T31638] binder_alloc: 31637: binder_alloc_buf, no vma
[  983.140920][T31643] syzkaller0: entered promiscuous mode
[  983.143251][T31643] syzkaller0: entered allmulticast mode
[  983.166779][T31643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  983.171122][T31640] tipc: Resetting bearer <eth:syzkaller0>
[  983.194483][T31640] tipc: Disabling bearer <eth:syzkaller0>
[  983.259501][T31654] binder: 31653:31654 ioctl c0306201 200000000080 returned -14
[  983.268338][T31654] binder: 31653:31654 ioctl c0306201 2000000003c0 returned -14
[  983.391040][T31664] netlink: 830 bytes leftover after parsing attributes in process `syz.7.8229'.
[  983.412525][T31664] pimreg: entered allmulticast mode
[  983.414898][T31664] pimreg: left allmulticast mode
[  983.536312][T31672] binder: BINDER_SET_CONTEXT_MGR already set
[  983.537112][T31671] loop2: detected capacity change from 0 to 7
[  983.538971][T31672] binder: 31669:31672 ioctl 4018620d 200000003280 returned -16
[  983.539694][T31672] binder: 31669:31672 ioctl c0306201 200000000080 returned -14
[  983.543098][T20098] Dev loop2: unable to read RDB block 7
[  983.546489][T31672] binder: BINDER_SET_CONTEXT_MGR already set
[  983.547384][T20098]  loop2: AHDI p1 p4
[  983.551851][T31672] binder: 31669:31672 ioctl 4018620d 200000000040 returned -16
[  983.553456][T20098] loop2: partition table partially beyond EOD, truncated
[  983.556383][T31672] binder: 31669:31672 ioctl c0306201 2000000003c0 returned -14
[  983.559480][T20098] loop2: p1 size 100663296 extends beyond EOD, truncated
[  983.579662][T31671] Dev loop2: unable to read RDB block 7
[  983.581656][T31671]  loop2: AHDI p1 p4
[  983.582927][T31671] loop2: partition table partially beyond EOD, truncated
[  983.585786][T31671] loop2: p1 size 100663296 extends beyond EOD, truncated
[  983.633687][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  983.651585][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  983.803324][T31693] rdma_op ffff888057b4d1f0 conn xmit_rdma 0000000000000000
[  983.810684][T31696] netlink: 92 bytes leftover after parsing attributes in process `syz.7.8241'.
[  983.815184][T31696] syzkaller0: entered promiscuous mode
[  983.817225][T31696] syzkaller0: entered allmulticast mode
[  983.976685][T31716] binder: 31714:31716 ioctl c0306201 200000000080 returned -14
[  984.002860][T31716] binder: 31714:31716 ioctl c0306201 2000000003c0 returned -14
[  984.015680][T31727] binder: BINDER_SET_CONTEXT_MGR already set
[  984.017714][T31727] binder: 31726:31727 ioctl 4018620d 200000003280 returned -16
[  984.030974][T31727] binder: 31726:31727 ioctl c0306201 200000000080 returned -14
[  984.033799][T31725] wg2 speed is unknown, defaulting to 1000
[  984.037018][T31727] binder: BINDER_SET_CONTEXT_MGR already set
[  984.041275][T31727] binder: 31726:31727 ioctl 4018620d 200000000040 returned -16
[  984.061789][T31727] binder: 31726:31727 ioctl c0306201 2000000003c0 returned -14
[  984.149081][T31742] binder: BINDER_SET_CONTEXT_MGR already set
[  984.151075][T31742] binder: 31741:31742 ioctl 4018620d 200000003280 returned -16
[  984.154311][T31742] binder: 31741:31742 ioctl c0306201 200000000080 returned -14
[  984.217857][T31725] xfrm0 speed is unknown, defaulting to 1000
[  984.224101][T31744] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8254'.
[  984.322659][T31749] loop2: detected capacity change from 0 to 7
[  984.328063][T31749] Dev loop2: unable to read RDB block 7
[  984.330608][T31749]  loop2: AHDI p1 p4
[  984.332329][T31749] loop2: partition table partially beyond EOD, truncated
[  984.335467][T31749] loop2: p1 size 100663296 extends beyond EOD, truncated
[  984.375198][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  984.393205][T31752] io-wq is not configured for unbound workers
[  984.413481][T31752] gretap1: entered promiscuous mode
[  984.418427][T31752] batman_adv: batadv0: Adding interface: gretap1
[  984.421784][T31752] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  984.429630][T31752] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  984.466168][ T5940] Bluetooth: hci3: Malformed LE Event: 0x0d
[  984.486259][T31754] geneve3: entered promiscuous mode
[  984.511870][T31754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57594 sclass=netlink_route_socket pid=31754 comm=syz.6.8257
[  984.529084][ T5940] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  984.661424][T31768] binder: 31767:31768 ioctl c0306201 200000000080 returned -14
[  984.666836][T31768] binder: 31767:31768 ioctl c0306201 2000000003c0 returned -14
[  984.791924][T31771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8261'.
[  984.883544][   T40] audit: type=1800 audit(2000001062.916:47859): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.8263" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  985.073858][T31786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8266'.
[  985.076864][T31786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8266'.
[  985.159021][T21406] usb 7-1: new full-speed USB device number 53 using dummy_hcd
[  985.188369][   T40] audit: type=1400 audit(2000001063.216:47860): avc:  denied  { connect } for  pid=31784 comm="syz.1.8266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  985.206106][   T40] audit: type=1400 audit(2000001063.226:47861): avc:  denied  { read } for  pid=31784 comm="syz.1.8266" path="socket:[172425]" dev="sockfs" ino=172425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  985.337130][T21406] usb 7-1: unable to read config index 0 descriptor/start: -71
[  985.340742][T21406] usb 7-1: can't read configurations, error -71
[  985.486350][T31811] loop2: detected capacity change from 0 to 7
[  985.490816][T20098] Dev loop2: unable to read RDB block 7
[  985.493121][T20098]  loop2: AHDI p1 p4
[  985.494793][T20098] loop2: partition table partially beyond EOD, truncated
[  985.498213][T20098] loop2: p1 size 100663296 extends beyond EOD, truncated
[  985.500056][T31813] binder: BINDER_SET_CONTEXT_MGR already set
[  985.503549][T31813] binder: 31812:31813 ioctl 4018620d 200000003280 returned -16
[  985.507792][T31813] binder: 31812:31813 ioctl c0306201 200000000080 returned -14
[  985.514378][T31811] Dev loop2: unable to read RDB block 7
[  985.516599][T31811]  loop2: AHDI p1 p4
[  985.518208][T31811] loop2: partition table partially beyond EOD, truncated
[  985.522490][T31811] loop2: p1 size 100663296 extends beyond EOD, truncated
[  985.563069][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  985.582033][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  985.600137][T26567] net_ratelimit: 36 callbacks suppressed
[  985.600154][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  985.608313][   T40] audit: type=1400 audit(2000001063.636:47862): avc:  denied  { nlmsg_read } for  pid=31818 comm="syz.7.8276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  985.647965][T31825] binder: 31824:31825 ioctl c0306201 200000000080 returned -14
[  985.656651][T31825] binder: BINDER_SET_CONTEXT_MGR already set
[  985.659293][T31825] binder: 31824:31825 ioctl 4018620d 200000000040 returned -16
[  985.662024][T31825] binder: 31824:31825 ioctl c0306201 2000000003c0 returned -14
[  985.700093][T31827] syzkaller0: entered promiscuous mode
[  985.701904][T31827] syzkaller0: entered allmulticast mode
[  985.722631][T31827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  985.727470][T31826] tipc: Resetting bearer <eth:syzkaller0>
[  985.743130][T31826] tipc: Disabling bearer <eth:syzkaller0>
[  985.760067][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  985.869293][T26559] bond4: (slave macvlan2): failed to get link speed/duplex
[  985.993176][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  986.021768][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8283'.
[  986.026160][T31840] openvswitch: netlink: Flow key attr not present in new flow.
[  986.100354][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  986.208860][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  986.218669][   T40] audit: type=1326 audit(2000001064.246:47863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.7.8287" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649179c819 code=0x0
[  986.288216][T31766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8259'.
[  986.351964][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  986.357039][T31864] input input180: cannot allocate more than FF_MAX_EFFECTS effects
[  986.461878][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  986.545098][T31882] binder: 31881:31882 ioctl c0306201 200000000080 returned -14
[  986.549130][T31882] binder: BINDER_SET_CONTEXT_MGR already set
[  986.551130][T31882] binder: 31881:31882 ioctl 4018620d 200000000040 returned -16
[  986.553716][T31882] binder: 31881:31882 ioctl c0306201 2000000003c0 returned -14
[  986.568915][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  986.623400][T31886] loop2: detected capacity change from 0 to 7
[  986.626212][T31886] Dev loop2: unable to read RDB block 7
[  986.627973][T31886]  loop2: AHDI p1 p4
[  986.631036][T31886] loop2: partition table partially beyond EOD, truncated
[  986.633871][T31886] loop2: p1 size 100663296 extends beyond EOD, truncated
[  986.664112][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  986.805345][T31909] binder: 31908:31909 ioctl c0306201 2000000003c0 returned -14
[  986.849470][T31913] binder: 31912:31913 ioctl c0306201 200000000080 returned -14
[  986.850720][T31902] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8296'.
[  986.853786][T31913] binder: 31912:31913 ioctl c0306201 2000000003c0 returned -14
[  986.935253][T31918] loop2: detected capacity change from 0 to 7
[  986.942008][T31918] Dev loop2: unable to read RDB block 7
[  986.943926][T31918]  loop2: AHDI p1 p4
[  986.945486][T31918] loop2: partition table partially beyond EOD, truncated
[  986.947895][T31918] loop2: p1 size 100663296 extends beyond EOD, truncated
[  987.001394][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8305'.
[  987.005013][   T40] audit: type=1400 audit(2000001065.036:47864): avc:  denied  { setopt } for  pid=31925 comm="syz.2.8305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  987.005303][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  987.103221][T31936] netlink: 'syz.7.8308': attribute type 2 has an invalid length.
[  987.110901][T31936] netlink: 108 bytes leftover after parsing attributes in process `syz.7.8308'.
[  987.422565][T31951] loop2: detected capacity change from 0 to 7
[  987.427799][T31951] Dev loop2: unable to read RDB block 7
[  987.431408][T31951]  loop2: AHDI p1 p4
[  987.433319][T31951] loop2: partition table partially beyond EOD, truncated
[  987.437139][T31951] loop2: p1 size 100663296 extends beyond EOD, truncated
[  987.468015][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  987.574873][T31958] syzkaller0: entered promiscuous mode
[  987.577351][T31958] syzkaller0: entered allmulticast mode
[  987.583404][T31960] syzkaller0: entered promiscuous mode
[  987.585178][T31960] syzkaller0: entered allmulticast mode
[  987.623262][T31958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  987.626711][T31960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  987.629344][T31957] tipc: Resetting bearer <eth:syzkaller0>
[  987.646957][T31957] tipc: Disabling bearer <eth:syzkaller0>
[  987.653934][T31959] tipc: Resetting bearer <eth:syzkaller0>
[  987.672162][T31959] tipc: Disabling bearer <eth:syzkaller0>
[  987.748567][T31962] binder: 31961:31962 ioctl c0306201 200000000080 returned -14
[  987.754075][T31962] binder: 31961:31962 ioctl c0306201 2000000003c0 returned -14
[  987.788929][   T50] usb 12-1: new high-speed USB device number 16 using dummy_hcd
[  987.817022][T31968] IPv6: NLM_F_CREATE should be specified when creating new route
[  987.824975][T31970] binder: BINDER_SET_CONTEXT_MGR already set
[  987.826919][T31970] binder: 31969:31970 ioctl 4018620d 200000003280 returned -16
[  987.830113][T31970] binder: 31969:31970 ioctl c0306201 200000000080 returned -14
[  987.833816][T31970] binder: BINDER_SET_CONTEXT_MGR already set
[  987.835760][T31970] binder: 31969:31970 ioctl 4018620d 200000000040 returned -16
[  987.841111][T31970] binder: 31969:31970 ioctl c0306201 2000000003c0 returned -14
[  987.950824][   T50] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  987.953968][   T50] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  987.957505][   T50] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  987.971935][   T50] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  987.975698][   T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  987.984489][T31983] syzkaller0: entered promiscuous mode
[  987.986804][T31983] syzkaller0: entered allmulticast mode
[  987.987025][   T50] usb 12-1: Product: syz
[  987.994443][   T50] usb 12-1: Manufacturer: syz
[  987.996422][   T50] usb 12-1: SerialNumber: syz
[  988.015985][T31983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  988.025347][T31982] tipc: Resetting bearer <eth:syzkaller0>
[  988.058991][T31982] tipc: Disabling bearer <eth:syzkaller0>
[  988.130719][T31995] ISOFS: Unable to identify CD-ROM format.
[  988.202138][T32001] BIDI support in bsg has been removed.
[  988.212654][   T50] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  988.244235][T32003] Invalid logical block size (536872960)
[  988.381460][T32005] loop2: detected capacity change from 0 to 7
[  988.386204][T20098]  loop2:
[  988.387426][T20098] loop2: partition table partially beyond EOD, truncated
[  988.391610][T32005]  loop2:
[  988.393021][T32005] loop2: partition table partially beyond EOD, truncated
[  988.415458][   T50] usb 12-1: USB disconnect, device number 16
[  988.423348][   T50] usblp0: removed
[  988.764331][T32019] hpfs: Bad magic ... probably not HPFS
[  988.767225][T32020] hpfs: Bad magic ... probably not HPFS
[  988.770699][T32019] hpfs: Bad magic ... probably not HPFS
[  988.844941][T32031] binder: 32030:32031 ioctl c0306201 200000000080 returned -14
[  988.849858][T32031] binder: 32030:32031 ioctl c0306201 2000000003c0 returned -14
[  988.899694][T32035] loop2: detected capacity change from 0 to 7
[  988.904249][T32035] Dev loop2: unable to read RDB block 7
[  988.907246][T32035]  loop2: AHDI p1 p4
[  988.911144][T32035] loop2: partition table partially beyond EOD, truncated
[  988.914819][T32035] loop2: p1 size 100663296 extends beyond EOD, truncated
[  988.948581][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  989.009409][T32041] syzkaller0: entered promiscuous mode
[  989.011262][T32041] syzkaller0: entered allmulticast mode
[  989.059325][ T5940] Bluetooth: hci3: unexpected event for opcode 0x0c23
[  989.095966][T32045] __nla_validate_parse: 5 callbacks suppressed
[  989.096057][T32045] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.8347'.
[  989.103134][T32045] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  989.136182][T32054] binder: 32053:32054 ioctl c0306201 200000000640 returned -14
[  989.140706][T32054] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[  989.203875][T32061] wg2 speed is unknown, defaulting to 1000
[  989.257458][T32063] syzkaller0: entered promiscuous mode
[  989.259937][T32063] syzkaller0: entered allmulticast mode
[  989.376772][T32061] xfrm0 speed is unknown, defaulting to 1000
[  989.660778][T32071] binder: 32070:32071 ioctl c0306201 200000000080 returned -14
[  989.665372][T32071] binder: 32070:32071 ioctl c0306201 2000000003c0 returned -14
[  989.710510][T32073] loop2: detected capacity change from 0 to 7
[  989.714715][T20098] Dev loop2: unable to read RDB block 7
[  989.717280][T20098]  loop2: AHDI p1 p4
[  989.719472][T20098] loop2: partition table partially beyond EOD, truncated
[  989.722316][T20098] loop2: p1 size 100663296 extends beyond EOD, truncated
[  989.739487][T32073] Dev loop2: unable to read RDB block 7
[  989.741382][T32073]  loop2: AHDI p1 p4
[  989.742719][T32073] loop2: partition table partially beyond EOD, truncated
[  989.745406][T32073] loop2: p1 size 100663296 extends beyond EOD, truncated
[  989.793665][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  989.821752][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  990.609043][T26549] net_ratelimit: 34 callbacks suppressed
[  990.609128][T26549] bond4: (slave macvlan2): failed to get link speed/duplex
[  990.718900][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  990.828805][T26549] bond4: (slave macvlan2): failed to get link speed/duplex
[  990.938890][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  991.049112][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  991.169039][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  991.278895][T26569] bond4: (slave macvlan2): failed to get link speed/duplex
[  991.388851][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  991.498974][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  991.608947][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  991.969621][T32040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  991.978815][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8358'.
[  992.021982][T32078] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  992.121110][T32082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  992.140714][T32097] binder: 32096:32097 ioctl c0306201 200000000080 returned -14
[  992.145995][T32097] binder: 32096:32097 ioctl c0306201 2000000003c0 returned -14
[  992.203259][T32099] syzkaller0: entered promiscuous mode
[  992.205651][T32099] syzkaller0: entered allmulticast mode
[  992.227384][T32099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  992.239006][T32098] tipc: Resetting bearer <eth:syzkaller0>
[  992.261141][T32098] tipc: Disabling bearer <eth:syzkaller0>
[  992.380686][T32106] syzkaller0: entered promiscuous mode
[  992.382625][T32106] syzkaller0: entered allmulticast mode
[  992.404793][T32106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  992.409448][T32105] tipc: Resetting bearer <eth:syzkaller0>
[  992.430028][T32105] tipc: Disabling bearer <eth:syzkaller0>
[  992.552691][T32121] binder: 32120:32121 ioctl c0306201 200000000080 returned -14
[  992.556930][T32121] binder: 32120:32121 ioctl c0306201 2000000003c0 returned -14
[  992.606227][T32129] binder: BINDER_SET_CONTEXT_MGR already set
[  992.610202][T32129] binder: 32128:32129 ioctl 4018620d 200000003280 returned -16
[  992.614186][T32129] binder: 32128:32129 ioctl c0306201 200000000080 returned -14
[  992.619743][T32129] binder: BINDER_SET_CONTEXT_MGR already set
[  992.622327][T32129] binder: 32128:32129 ioctl 4018620d 200000000040 returned -16
[  992.625414][T32131] usb usb7: usbfs: process 32131 (syz.7.8379) did not claim interface 0 before use
[  992.625839][T32129] binder: 32128:32129 ioctl c0306201 2000000003c0 returned -14
[  992.679168][T32139] loop2: detected capacity change from 0 to 7
[  992.683253][T20098]  loop2:
[  992.684542][T20098] loop2: partition table partially beyond EOD, truncated
[  992.693227][T32139]  loop2:
[  992.694459][T32139] loop2: partition table partially beyond EOD, truncated
[  992.739638][T32135] ieee802154 phy0 wpan0: encryption failed: -22
[  992.780009][T32145] xt_CT: You must specify a L4 protocol and not use inversions on it
[  992.780071][T32146] binder: 32144:32146 ioctl c0306201 200000000080 returned -14
[  992.787146][T32145] netlink: 'syz.6.8384': attribute type 10 has an invalid length.
[  992.794324][T32145] bond0: (slave wlan1): Opening slave failed
[  992.810582][T32146] binder: 32144:32146 ioctl c0306201 2000000003c0 returned -14
[  992.833562][T32148] binder: 32147:32148 ioctl c0306201 200000000080 returned -14
[  992.841157][T32148] binder: 32147:32148 ioctl c0306201 2000000003c0 returned -14
[  992.881197][T32155] netlink: 'syz.1.8388': attribute type 10 has an invalid length.
[  992.894275][T32160] binder: 32159:32160 ioctl c0306201 200000000080 returned -14
[  992.900794][T32160] binder: 32159:32160 ioctl c0306201 2000000003c0 returned -14
[  992.929783][T32081] tipc: Disabling bearer <eth:syzkaller0>
[  992.952120][T32164] loop2: detected capacity change from 0 to 7
[  992.956339][T20098]  loop2:
[  992.957419][T20098] loop2: partition table partially beyond EOD, truncated
[  992.962760][T32164]  loop2:
[  992.971374][T32164] loop2: partition table partially beyond EOD, truncated
[  993.033254][T32167] tipc: Enabled bearer <eth:gre0>, priority 10
[  993.038212][   T40] audit: type=1400 audit(2000001071.066:47865): avc:  denied  { create } for  pid=32165 comm="syz.7.8393" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  993.065408][   T40] audit: type=1400 audit(2000001071.096:47866): avc:  denied  { unlink } for  pid=26013 comm="syz-executor" name="file0" dev="tmpfs" ino=2472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  993.090991][T32172] binder: 32170:32172 ioctl c0306201 200000000080 returned -14
[  993.095287][T32172] binder: 32170:32172 ioctl c0306201 2000000003c0 returned -14
[  993.120435][T32168] bond1: (slave bond_slave_1): Device is not our slave
[  993.123034][T32168] bond1: option active_slave: invalid value (bond_slave_1)
[  993.136713][T32168] bond1 (unregistering): Released all slaves
[  993.202107][T32181] binder: 32180:32181 ioctl c0306201 200000000080 returned -14
[  993.207527][T32181] binder: 32180:32181 ioctl c0306201 2000000003c0 returned -14
[  993.268088][T32185] loop2: detected capacity change from 0 to 7
[  993.271490][T32185] Dev loop2: unable to read RDB block 7
[  993.273682][T32185]  loop2: AHDI p1 p4
[  993.275386][T32185] loop2: partition table partially beyond EOD, truncated
[  993.281249][T32185] loop2: p1 size 100663296 extends beyond EOD, truncated
[  993.315510][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  993.377260][   T40] audit: type=1400 audit(2000001071.406:47867): avc:  denied  { unmount } for  pid=27859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  993.389959][T32204] vivid-004: disconnect
[  993.395495][T32203] vivid-004: reconnect
[  993.408229][T32206] rdma_rxe: rxe_newlink: failed to add wg1
[  993.474439][T32214] Process accounting resumed
[  993.518748][ T6002] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  993.578009][T32226] binder: BINDER_SET_CONTEXT_MGR already set
[  993.580905][T32226] binder: 32225:32226 ioctl 4018620d 200000003280 returned -16
[  993.585114][T32226] binder: 32225:32226 ioctl c0306201 200000000080 returned -14
[  993.590503][T32226] binder: BINDER_SET_CONTEXT_MGR already set
[  993.593260][T32226] binder: 32225:32226 ioctl 4018620d 200000000040 returned -16
[  993.596686][T32226] binder: 32225:32226 ioctl c0306201 2000000003c0 returned -14
[  993.596992][T32228] loop2: detected capacity change from 0 to 7
[  993.602767][T32228] Dev loop2: unable to read RDB block 7
[  993.605673][T32228]  loop2: AHDI p1 p4
[  993.607071][T32228] loop2: partition table partially beyond EOD, truncated
[  993.610564][T32228] loop2: p1 size 100663296 extends beyond EOD, truncated
[  993.640755][T32233] binder: BINDER_SET_CONTEXT_MGR already set
[  993.643288][T32233] binder: 32232:32233 ioctl 4018620d 200000003280 returned -16
[  993.647224][T32233] binder: 32232:32233 ioctl c0306201 200000000080 returned -14
[  993.654002][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  993.655878][T32233] binder: BINDER_SET_CONTEXT_MGR already set
[  993.662944][T32233] binder: 32232:32233 ioctl 4018620d 200000000040 returned -16
[  993.667996][T32233] binder: 32232:32233 ioctl c0306201 2000000003c0 returned -14
[  993.689044][ T6002] usb 7-1: Using ep0 maxpacket: 32
[  993.693038][ T6002] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  993.699163][ T6002] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  993.702959][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  993.706364][ T6002] usb 7-1: Product: syz
[  993.714975][ T6002] usb 7-1: Manufacturer: syz
[  993.717508][ T6002] usb 7-1: SerialNumber: syz
[  993.722845][ T6002] usb 7-1: config 0 descriptor??
[  993.725948][T32187] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  993.734054][ T6002] hub 7-1:0.0: bad descriptor, ignoring hub
[  993.736494][ T6002] hub 7-1:0.0: probe with driver hub failed with error -5
[  993.900719][   T40] audit: type=1400 audit(2000001071.936:47868): avc:  denied  { audit_write } for  pid=32268 comm="syz.6.8423" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  993.923819][T32273] binder: BINDER_SET_CONTEXT_MGR already set
[  993.926344][T32273] binder: 32272:32273 ioctl 4018620d 200000003280 returned -16
[  993.951238][T32273] binder: 32272:32273 ioctl c0306201 200000000080 returned -14
[  993.955766][T32273] binder: BINDER_SET_CONTEXT_MGR already set
[  993.958000][T32273] binder: 32272:32273 ioctl 4018620d 200000000040 returned -16
[  993.961419][T32273] binder: 32272:32273 ioctl c0306201 2000000003c0 returned -14
[  993.970326][T32278] binder: 32277:32278 ioctl c0306201 200000000080 returned -14
[  993.974783][T32278] binder: BINDER_SET_CONTEXT_MGR already set
[  993.977521][T32278] binder: 32277:32278 ioctl 4018620d 200000000040 returned -16
[  993.984902][T32278] binder: 32277:32278 ioctl c0306201 2000000003c0 returned -14
[  994.019887][T32286] binder: 32285:32286 ioctl c0306201 200000000080 returned -14
[  994.025193][T32286] binder: BINDER_SET_CONTEXT_MGR already set
[  994.027695][T32286] binder: 32285:32286 ioctl 4018620d 200000000040 returned -16
[  994.031296][T32286] binder: 32285:32286 ioctl c0306201 2000000003c0 returned -14
[  994.052693][T32293] binder: 32292:32293 ioctl c0306201 200000000080 returned -14
[  994.056564][T32291] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  994.063020][T32293] binder: 32292:32293 ioctl c0306201 2000000003c0 returned -14
[  994.132106][ T5940] Bluetooth: unknown link type 126
[  994.133881][ T5940] Bluetooth: hci3: connection err: -111
[  994.150423][T32303] syzkaller0: entered promiscuous mode
[  994.152417][T32303] syzkaller0: entered allmulticast mode
[  994.200469][T32303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  994.203823][T32302] tipc: Resetting bearer <eth:syzkaller0>
[  994.227298][T32302] tipc: Disabling bearer <eth:syzkaller0>
[  994.244789][T32310] netlink: 'syz.6.8435': attribute type 1 has an invalid length.
[  994.286140][   T40] audit: type=1400 audit(2000001072.316:47869): avc:  denied  { setopt } for  pid=32312 comm="syz.6.8436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  994.293922][   T40] audit: type=1400 audit(2000001072.326:47870): avc:  denied  { getopt } for  pid=32312 comm="syz.6.8436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  994.312926][T32315] binder: BINDER_SET_CONTEXT_MGR already set
[  994.314865][T32315] binder: 32314:32315 ioctl 4018620d 200000003280 returned -16
[  994.320211][T32315] binder: 32314:32315 ioctl c0306201 200000000080 returned -14
[  994.325265][T32315] binder: BINDER_SET_CONTEXT_MGR already set
[  994.327746][T32315] binder: 32314:32315 ioctl 4018620d 200000000040 returned -16
[  994.331290][T32315] binder: 32314:32315 ioctl c0306201 2000000003c0 returned -14
[  994.363338][T32187] usb 7-1: reset high-speed USB device number 55 using dummy_hcd
[  994.370567][T32187] usb 7-1: device reset changed ep0 maxpacket size!
[  994.379510][T30410] usb 7-1: USB disconnect, device number 55
[  994.387377][T32319] binder: 32318:32319 ioctl c0306201 200000000080 returned -14
[  994.396524][T32319] binder: 32318:32319 ioctl c0306201 2000000003c0 returned -14
[  994.450602][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8441'.
[  994.460176][   T40] audit: type=1326 audit(2000001072.496:47871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32325 comm="syz.7.8441" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649179c819 code=0x0
[  994.529089][T30410] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  994.688761][T30410] usb 7-1: Using ep0 maxpacket: 16
[  994.691714][T30410] usb 7-1: config 0 has an invalid interface number: 14 but max is 0
[  994.694457][T30410] usb 7-1: config 0 has no interface number 0
[  994.696519][T30410] usb 7-1: config 0 interface 14 has no altsetting 0
[  994.700726][T30410] usb 7-1: New USB device found, idVendor=0f11, idProduct=1033, bcdDevice=6f.5b
[  994.703524][T30410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.705992][T30410] usb 7-1: Product: syz
[  994.707360][T30410] usb 7-1: Manufacturer: syz
[  994.709488][T30410] usb 7-1: SerialNumber: syz
[  994.712422][T30410] usb 7-1: config 0 descriptor??
[  994.724843][T32330] hfsplus: unable to find HFS+ superblock
[  994.832028][T32333] netlink: 'syz.1.8443': attribute type 8 has an invalid length.
[  994.926978][T32281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  994.930400][T32281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  994.947656][T30410] ldusb 7-1:0.14: Interrupt in endpoint not found
[  994.961789][T30410] usb 7-1: USB disconnect, device number 56
[  995.013498][T32342] binder: 32341:32342 ioctl c0306201 2000000001c0 returned -14
[  995.053523][T32344] syzkaller0: entered promiscuous mode
[  995.055629][T32344] syzkaller0: entered allmulticast mode
[  995.073482][T32344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  995.077242][T32343] tipc: Resetting bearer <eth:syzkaller0>
[  995.099501][T32343] tipc: Disabling bearer <eth:syzkaller0>
[  995.160424][T32347] bpf: Bad value for 'uid'
[  995.201162][T32350] binder: 32348:32350 ioctl c0306201 200000000080 returned -14
[  995.204847][T32350] binder: 32348:32350 ioctl c0306201 2000000003c0 returned -14
[  995.242732][T32353] binder: 32352:32353 ioctl 4018620d 0 returned -22
[  995.246387][T32353] binder: 32352:32353 ioctl c0306201 200000000080 returned -14
[  995.252365][T32353] binder: 32352:32353 ioctl c0306201 2000000003c0 returned -14
[  995.528751][T30410] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  995.618884][T26553] net_ratelimit: 37 callbacks suppressed
[  995.618905][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  995.640498][T32367] binder: BINDER_SET_CONTEXT_MGR already set
[  995.642707][T32367] binder: 32366:32367 ioctl 4018620d 200000003280 returned -16
[  995.646266][T32367] binder: 32366:32367 ioctl c0306201 200000000080 returned -14
[  995.652518][T32367] binder: BINDER_SET_CONTEXT_MGR already set
[  995.654806][T32367] binder: 32366:32367 ioctl 4018620d 200000000040 returned -16
[  995.657730][T32367] binder: 32366:32367 ioctl c0306201 2000000003c0 returned -14
[  995.714582][T30410] usb 7-1: config 0 interface 0 has no altsetting 0
[  995.717532][T30410] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  995.721637][T30410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.730526][T26559] bond4: (slave macvlan2): failed to get link speed/duplex
[  995.733823][T30410] usb 7-1: config 0 descriptor??
[  995.840400][T26559] bond4: (slave macvlan2): failed to get link speed/duplex
[  995.954312][T32380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  995.957868][T32380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  995.960261][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  996.079084][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[  996.122350][T32385] binder: 32384:32385 ioctl 4018620d 0 returned -22
[  996.126146][T32385] binder: 32384:32385 ioctl c0306201 200000000080 returned -14
[  996.130653][T32386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8451'.
[  996.131719][T32385] binder: 32384:32385 ioctl c0306201 2000000003c0 returned -14
[  996.135693][T32386] ubi: mtd0 is already attached to ubi0
[  996.189403][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  996.309261][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[  996.418882][T26549] bond4: (slave macvlan2): failed to get link speed/duplex
[  996.528871][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[  996.639029][T26570] bond4: (slave macvlan2): failed to get link speed/duplex
[  997.019613][T30410]  (null): keene_cmd_main failed (-110)
[  997.023832][T30410] video4linux radio48: keene_cmd_main failed (-32)
[  997.026164][T30410] radio-keene 7-1:0.0: V4L2 device registered as radio48
[  997.196430][T32410] binder: BINDER_SET_CONTEXT_MGR already set
[  997.198935][T32410] binder: 32409:32410 ioctl 4018620d 200000003280 returned -16
[  997.202340][T32410] binder: 32409:32410 ioctl c0306201 200000000080 returned -14
[  997.210818][T32410] binder: BINDER_SET_CONTEXT_MGR already set
[  997.212853][T32410] binder: 32409:32410 ioctl 4018620d 200000000040 returned -16
[  997.217983][T32410] binder: 32409:32410 ioctl c0306201 2000000003c0 returned -14
[  997.257364][T32412] FAULT_INJECTION: forcing a failure.
[  997.257364][T32412] name failslab, interval 1, probability 0, space 0, times 0
[  997.262499][T32412] CPU: 2 UID: 0 PID: 32412 Comm: syz.7.8468 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  997.262527][T32412] Tainted: [L]=SOFTLOCKUP
[  997.262534][T32412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  997.262613][T32412] Call Trace:
[  997.262676][T32412]  <TASK>
[  997.262682][T32412]  dump_stack_lvl+0x100/0x190
[  997.262854][T32412]  should_fail_ex.cold+0x5/0xa
[  997.262962][T32412]  should_failslab+0xc2/0x120
[  997.263112][T32412]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  997.263213][T32412]  ? __alloc_skb+0x140/0x710
[  997.263233][T32412]  __alloc_skb+0x140/0x710
[  997.263248][T32412]  ? __alloc_skb+0x5b7/0x710
[  997.263263][T32412]  ? __pfx___alloc_skb+0x10/0x10
[  997.263283][T32412]  netlink_ack+0x117/0xb80
[  997.263296][T32412]  ? __lock_acquire+0x4a5/0x2630
[  997.263352][T32412]  netlink_rcv_skb+0x333/0x420
[  997.263363][T32412]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  997.263382][T32412]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  997.263398][T32412]  ? netlink_deliver_tap+0x1ae/0xcc0
[  997.263418][T32412]  netlink_unicast+0x5aa/0x870
[  997.263431][T32412]  ? __pfx_netlink_unicast+0x10/0x10
[  997.263447][T32412]  netlink_sendmsg+0x8b0/0xda0
[  997.263460][T32412]  ? __pfx_netlink_sendmsg+0x10/0x10
[  997.263471][T32412]  ? __might_fault+0x10/0x140
[  997.263536][T32412]  ____sys_sendmsg+0x9e1/0xb70
[  997.263549][T32412]  ? __pfx_netlink_sendmsg+0x10/0x10
[  997.263561][T32412]  ? __pfx_____sys_sendmsg+0x10/0x10
[  997.263579][T32412]  ___sys_sendmsg+0x190/0x1e0
[  997.263593][T32412]  ? __pfx____sys_sendmsg+0x10/0x10
[  997.263622][T32412]  __sys_sendmsg+0x170/0x220
[  997.263640][T32412]  ? __pfx___sys_sendmsg+0x10/0x10
[  997.263665][T32412]  do_syscall_64+0x106/0xf80
[  997.263788][T32412]  ? clear_bhb_loop+0x40/0x90
[  997.263804][T32412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.263816][T32412] RIP: 0033:0x7f649179c819
[  997.263828][T32412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  997.263839][T32412] RSP: 002b:00007f648f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  997.263887][T32412] RAX: ffffffffffffffda RBX: 00007f6491a15fa0 RCX: 00007f649179c819
[  997.263894][T32412] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  997.263901][T32412] RBP: 00007f648f9f6090 R08: 0000000000000000 R09: 0000000000000000
[  997.263907][T32412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  997.263917][T32412] R13: 00007f6491a16038 R14: 00007f6491a15fa0 R15: 00007ffef1681ea8
[  997.263931][T32412]  </TASK>
[  997.264096][T32416] binder: BINDER_SET_CONTEXT_MGR already set
[  997.348701][T32416] binder: 32415:32416 ioctl 4018620d 200000003280 returned -16
[  997.348931][T32417] binder: 32415:32417 ioctl c0306201 200000000080 returned -14
[  997.371656][T32416] binder: BINDER_SET_CONTEXT_MGR already set
[  997.373793][T32416] binder: 32415:32416 ioctl 4018620d 200000000040 returned -16
[  997.389342][T32416] binder: 32415:32416 ioctl c0306201 2000000003c0 returned -14
[  997.422559][T32419] SELinux: failed to load policy
[  997.489508][T32427] binder: BINDER_SET_CONTEXT_MGR already set
[  997.491734][T32427] binder: 32426:32427 ioctl 4018620d 200000003280 returned -16
[  997.495931][T32427] binder: BINDER_SET_CONTEXT_MGR already set
[  997.497968][T32427] binder: 32426:32427 ioctl 4018620d 200000000040 returned -16
[  997.577178][T32431] binder: BINDER_SET_CONTEXT_MGR already set
[  997.579077][T32431] binder: 32430:32431 ioctl 4018620d 200000003280 returned -16
[  997.581039][T32433] loop2: detected capacity change from 0 to 7
[  997.581939][T32431] binder: 32430:32431 ioctl c0306201 200000000080 returned -14
[  997.586531][T32433] Dev loop2: unable to read RDB block 7
[  997.588189][T32433]  loop2: AHDI p1 p4
[  997.590667][T32431] binder: BINDER_SET_CONTEXT_MGR already set
[  997.590769][T32433] loop2: partition table partially beyond EOD, 
[  997.592731][T32431] binder: 32430:32431 ioctl 4018620d 200000000040 returned -16
[  997.592939][T32431] binder: 32430:32431 ioctl c0306201 2000000003c0 returned -14
[  997.594697][T32433] truncated
[  997.602269][T32433] loop2: p1 size 100663296 extends beyond EOD, truncated
[  997.634243][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  997.723003][T32443] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  997.761314][T32443] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  998.045744][T32452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8483'.
[  998.125817][T32455] binder: BINDER_SET_CONTEXT_MGR already set
[  998.129505][T32455] binder: 32454:32455 ioctl 4018620d 200000003280 returned -16
[  998.134217][T32455] binder: 32454:32455 ioctl c0306201 200000000080 returned -14
[  998.141645][T32455] binder: BINDER_SET_CONTEXT_MGR already set
[  998.144453][T32455] binder: 32454:32455 ioctl 4018620d 200000000040 returned -16
[  998.148264][T32455] binder: 32454:32455 ioctl c0306201 2000000003c0 returned -14
[  998.197087][T32457] fuse: Bad value for 'fd'
[  998.205840][   T40] audit: type=1400 audit(2000001076.236:47872): avc:  denied  { map } for  pid=32456 comm="syz.1.8485" path="/373/file0" dev="tmpfs" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  998.257533][T32460] loop2: detected capacity change from 0 to 7
[  998.262703][T20098] Dev loop2: unable to read RDB block 7
[  998.265121][T20098]  loop2: AHDI p1 p4
[  998.266844][T20098] loop2: partition table partially beyond EOD, truncated
[  998.272915][T20098] loop2: p1 size 100663296 extends beyond EOD, truncated
[  998.283123][T32460] Dev loop2: unable to read RDB block 7
[  998.285193][T32460]  loop2: AHDI p1 p4
[  998.286798][T32460] loop2: partition table partially beyond EOD, truncated
[  998.290191][T32460] loop2: p1 size 100663296 extends beyond EOD, truncated
[  998.301173][T32463] netlink: 'syz.1.8488': attribute type 1 has an invalid length.
[  998.330175][T32463] 8021q: adding VLAN 0 to HW filter on device bond1
[  998.332388][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  998.355950][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  998.356428][T32463] bond1: (slave gretap1): making interface the new active one
[  998.365231][T32463] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  998.452238][T32471] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  998.526220][T32480] binder: 32479:32480 ioctl c0306201 200000000080 returned -14
[  998.531626][T32480] binder: 32479:32480 ioctl c0306201 2000000003c0 returned -14
[  998.561924][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  998.564042][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  998.569438][T21430] usb 7-1: USB disconnect, device number 57
[  998.582635][T32483] sctp: [Deprecated]: syz.6.8494 (pid 32483) Use of struct sctp_assoc_value in delayed_ack socket option.
[  998.582635][T32483] Use struct sctp_sack_info instead
[  998.601720][   T40] audit: type=1400 audit(2000001076.636:47873): avc:  denied  { lock } for  pid=32485 comm="syz.2.8495" path="socket:[176040]" dev="sockfs" ino=176040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  998.682612][T32494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8498'.
[  998.685227][T32496] XFS (loop1): SB validate failed with error -5.
[  998.696782][T32503] program syz.7.8500 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  998.798956][T32515] binder: 32514:32515 ioctl c0306201 200000000080 returned -14
[  998.803148][T32515] binder: 32514:32515 ioctl c0306201 2000000003c0 returned -14
[  998.842769][T32522] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8506'.
[  998.857928][T32517] netlink: 'syz.7.8505': attribute type 10 has an invalid length.
[  998.865461][T32517] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8505'.
[  998.906468][T32530] loop2: detected capacity change from 0 to 7
[  998.909104][T32522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8506'.
[  998.912748][T20098]  loop2:
[  998.914090][T20098] loop2: partition table partially beyond EOD, truncated
[  998.917378][T32517] team0: Port device geneve0 added
[  998.920327][T32530]  loop2:
[  998.921300][T32530] loop2: partition table partially beyond EOD, truncated
[  998.934369][ T5343]  loop2:
[  998.935367][ T5343] loop2: partition table partially beyond EOD, truncated
[  998.978305][T26570] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  998.990276][T26570] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  998.992912][T26570] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  999.021822][T32537] nfs: Unknown parameter ''
[  999.046389][   T40] audit: type=1326 audit(2000001077.076:47874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32538 comm="syz.1.8511" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad519c819 code=0x0
[  999.058938][   T40] audit: type=1326 audit(2000001077.076:47875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32538 comm="syz.1.8511" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad519c819 code=0x0
[  999.096839][T32542] binder: 32541:32542 ioctl c0306201 200000000080 returned -14
[  999.107727][T32542] binder: 32541:32542 ioctl c0306201 2000000003c0 returned -14
[  999.154253][T32547] cgroup: Name too long
[  999.156521][T32547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  999.159513][T32547] IPv6: NLM_F_CREATE should be set when creating new route
[  999.162388][T32547] IPv6: NLM_F_CREATE should be set when creating new route
[  999.165345][T32547] IPv6: NLM_F_CREATE should be set when creating new route
[  999.169443][T32547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  999.173836][T32549] cgroup: Name too long
[  999.221098][T32554] syzkaller0: entered promiscuous mode
[  999.223587][T32554] syzkaller0: entered allmulticast mode
[  999.243992][T32554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  999.247818][T32553] tipc: Resetting bearer <eth:syzkaller0>
[  999.262775][T32553] tipc: Disabling bearer <eth:syzkaller0>
[  999.383716][T32557] veth1_macvtap: left promiscuous mode
[  999.401722][T32562] loop2: detected capacity change from 0 to 7
[  999.405425][T32562]  loop2:
[  999.406887][T32562] loop2: partition table partially beyond EOD, truncated
[  999.417362][ T5343]  loop2:
[  999.418412][ T5343] loop2: partition table partially beyond EOD, truncated
[  999.450148][T32566] overlayfs: failed to resolve './file0': -2
[  999.457958][T32566] netlink: 21 bytes leftover after parsing attributes in process `syz.2.8519'.
[  999.628097][T32578] loop2: detected capacity change from 0 to 7
[  999.634731][T32578] Dev loop2: unable to read RDB block 7
[  999.637251][T32578]  loop2: AHDI p1 p4
[  999.639189][T32578] loop2: partition table partially beyond EOD, truncated
[  999.645147][T32578] loop2: p1 size 100663296 extends beyond EOD, truncated
[  999.701870][T20098] udevd[20098]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  999.770288][ T5645] veth1_macvtap: entered promiscuous mode
[  999.868403][T32596] fuse: Bad value for 'user_id'
[  999.871635][T32596] fuse: Bad value for 'user_id'
[  999.884605][T32596] can0: slcan on ttynull.
[ 1000.022893][T32611] binder: BINDER_SET_CONTEXT_MGR already set
[ 1000.025415][T32611] binder: 32610:32611 ioctl 4018620d 200000003280 returned -16
[ 1000.029519][T32611] binder: 32610:32611 ioctl c0306201 200000000080 returned -14
[ 1000.034041][T32611] binder: BINDER_SET_CONTEXT_MGR already set
[ 1000.034999][T32595] can0 (unregistered): slcan off ttynull.
[ 1000.036358][T32611] binder: 32610:32611 ioctl 4018620d 200000000040 returned -16
[ 1000.046092][T32611] binder: 32610:32611 ioctl c0306201 2000000003c0 returned -14
[ 1000.072689][T32614] binder: 32613:32614 ioctl c0306201 200000000080 returned -14
[ 1000.078679][T32614] binder: 32613:32614 ioctl c0306201 2000000003c0 returned -14
[ 1000.091727][T32616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8529'.
[ 1000.094762][   T40] audit: type=1400 audit(2000001078.126:47876): avc:  denied  { create } for  pid=32617 comm="syz.1.8530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1000.107782][   T40] audit: type=1400 audit(2000001078.136:47877): avc:  denied  { connect } for  pid=32617 comm="syz.1.8530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1000.217081][T32622] binder: BINDER_SET_CONTEXT_MGR already set
[ 1000.220437][T32622] binder: 32621:32622 ioctl 4018620d 200000000100 returned -16
[ 1000.267950][T32629] binder: BINDER_SET_CONTEXT_MGR already set
[ 1000.270867][T32629] binder: 32628:32629 ioctl 4018620d 200000003280 returned -16
[ 1000.275164][T32629] binder: 32628:32629 ioctl c0306201 200000000080 returned -14
[ 1000.280202][T32629] binder: BINDER_SET_CONTEXT_MGR already set
[ 1000.282812][T32629] binder: 32628:32629 ioctl 4018620d 200000000040 returned -16
[ 1000.286428][T32629] binder: 32628:32629 ioctl c0306201 2000000003c0 returned -14
[ 1000.321889][T32631] xt_hashlimit: max too large, truncated to 1048576
[ 1000.327661][T32631] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1000.457670][T32642] overlay: ./bus is not a directory
[ 1000.493115][T32640] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1000.513601][T32640] pic_ioport_write: 1887 callbacks suppressed
[ 1000.513620][T32640] kvm: pic: single mode not supported
[ 1000.660710][T32645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8539'.
[ 1000.669141][T32645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8539'.
[ 1000.698951][T26567] net_ratelimit: 33 callbacks suppressed
[ 1000.698972][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1000.764964][T32651] binder: BINDER_SET_CONTEXT_MGR already set
[ 1000.766971][T32651] binder: 32648:32651 ioctl 4018620d 200000003280 returned -16
[ 1000.774710][T32651] binder: BINDER_SET_CONTEXT_MGR already set
[ 1000.776837][T32651] binder: 32648:32651 ioctl 4018620d 200000000040 returned -16
[ 1000.782028][T32651] binder: 32648:32651 ioctl c0306201 2000000003c0 returned -14
[ 1000.821398][T32531] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.839975][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1000.902143][T32663] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22
[ 1000.910639][T32531] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.930610][T32664] binder: 32662:32664 ioctl c0306201 200000000080 returned -14
[ 1000.938712][T32664] binder: 32662:32664 ioctl c0306201 2000000003c0 returned -14
[ 1000.949962][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1001.005436][T32531] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1001.055289][T32672] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1001.057960][T32672] overlayfs: failed to set xattr on upper
[ 1001.060509][T32672] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1001.062868][T32672] overlayfs: ...falling back to index=off.
[ 1001.064838][T32672] overlayfs: ...falling back to uuid=null.
[ 1001.072489][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1001.080838][T32672] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1001.083799][T32672] overlayfs: failed to set xattr on upper
[ 1001.086153][T32672] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1001.091031][T32675] syzkaller0: entered promiscuous mode
[ 1001.092838][T32675] syzkaller0: entered allmulticast mode
[ 1001.094952][T32672] overlayfs: ...falling back to index=off.
[ 1001.099811][T32672] overlayfs: ...falling back to uuid=null.
[ 1001.130908][T32675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1001.132440][T32677] loop2: detected capacity change from 0 to 7
[ 1001.140293][T32674] tipc: Resetting bearer <eth:syzkaller0>
[ 1001.141431][T20098]  loop2:
[ 1001.143992][T20098] loop2: partition table partially beyond EOD, truncated
[ 1001.167666][T32677]  loop2:
[ 1001.169188][T32677] loop2: partition table partially beyond EOD, truncated
[ 1001.171479][T32674] tipc: Disabling bearer <eth:syzkaller0>
[ 1001.210760][T26549] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.214079][T32680] netlink: 'syz.2.8552': attribute type 10 has an invalid length.
[ 1001.235503][T26549] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.265723][T26570] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.283532][T26553] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.299444][T26570] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1001.330267][T32693] binder: BINDER_SET_CONTEXT_MGR already set
[ 1001.332962][T32693] binder: 32692:32693 ioctl 4018620d 200000003280 returned -16
[ 1001.339182][T32693] binder: 32692:32693 ioctl c0306201 200000000080 returned -14
[ 1001.343634][T32693] binder: BINDER_SET_CONTEXT_MGR already set
[ 1001.346053][T32693] binder: 32692:32693 ioctl 4018620d 200000000040 returned -16
[ 1001.352149][T32696] binder: 32694:32696 ioctl c0306201 200000000080 returned -14
[ 1001.356487][T32693] binder: 32692:32693 ioctl c0306201 2000000003c0 returned -14
[ 1001.359483][T32696] binder: 32694:32696 ioctl c0306201 2000000003c0 returned -14
[ 1001.389108][   T40] audit: type=1326 audit(2000001079.426:47878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32697 comm="syz.2.8558" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f882699c819 code=0x0
[ 1001.398422][   T40] audit: type=1326 audit(2000001079.426:47879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32697 comm="syz.2.8558" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f882699c819 code=0x0
[ 1001.410256][T26570] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1001.448785][T21406] usb 11-1: new high-speed USB device number 68 using dummy_hcd
[ 1001.475926][T32711] netlink: 4588 bytes leftover after parsing attributes in process `syz.2.8562'.
[ 1001.479985][T32710] netlink: 4588 bytes leftover after parsing attributes in process `syz.2.8562'.
[ 1001.483217][T32710] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1001.486024][T32711] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1001.528893][T26553] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1001.530695][T32707] ISOFS: Unable to identify CD-ROM format.
[ 1001.599558][T21406] usb 11-1: Using ep0 maxpacket: 16
[ 1001.603851][T21406] usb 11-1: config 0 has no interfaces?
[ 1001.606255][T21406] usb 11-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[ 1001.610497][T21406] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.616692][T21406] usb 11-1: config 0 descriptor??
[ 1001.657206][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1001.664479][   T40] audit: type=1326 audit(2000001079.696:47880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32719 comm="syz.7.8564" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f649179c819 code=0x0
[ 1001.842447][T21406] usb 11-1: USB disconnect, device number 68
[ 1001.931296][ T5940] Bluetooth: hci1: ACL packet for unknown connection handle 200
[ 1002.037870][T32738] XFS (loop7): SB validate failed with error -5.
[ 1002.243922][T32754] netlink: 348 bytes leftover after parsing attributes in process `syz.7.8570'.
[ 1002.403855][T32763] binder: 32762:32763 ioctl c0306201 200000000080 returned -14
[ 1002.424732][T32763] binder: BINDER_SET_CONTEXT_MGR already set
[ 1002.427264][T32763] binder: 32762:32763 ioctl 4018620d 200000000040 returned -16
[ 1002.430309][T32763] binder: 32762:32763 ioctl c0306201 2000000003c0 returned -14
[ 1002.507555][T32765] syzkaller0: entered promiscuous mode
[ 1002.510663][T32765] syzkaller0: entered allmulticast mode
[ 1002.553782][T32765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1002.557917][T32764] tipc: Resetting bearer <eth:syzkaller0>
[ 1002.579062][T32764] tipc: Disabling bearer <eth:syzkaller0>
[ 1002.594129][  T304] netlink: 448 bytes leftover after parsing attributes in process `syz.7.8577'.
[ 1002.676611][  T310] binder: 309:310 ioctl c0306201 200000000080 returned -14
[ 1002.700517][  T310] binder: 309:310 ioctl c0306201 2000000003c0 returned -14
[ 1002.707665][  T312] binder: 311:312 ioctl c0306201 200000000080 returned -14
[ 1002.719553][  T312] binder: 311:312 ioctl c0306201 2000000003c0 returned -14
[ 1002.761420][  T317] binder: 316:317 ioctl c0306201 2000000003c0 returned -14
[ 1002.848155][  T328] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1002.855537][  T331] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=331 comm=syz.6.8585
[ 1003.119158][  T337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8588'.
[ 1003.265013][  T342] syzkaller0: entered promiscuous mode
[ 1003.267471][  T342] syzkaller0: entered allmulticast mode
[ 1003.294531][  T342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1003.297881][  T341] tipc: Resetting bearer <eth:syzkaller0>
[ 1003.319578][  T341] tipc: Disabling bearer <eth:syzkaller0>
[ 1003.437342][  T346] syzkaller0: entered promiscuous mode
[ 1003.448750][  T346] syzkaller0: entered allmulticast mode
[ 1003.557734][   T40] audit: type=1400 audit(2000001081.586:47881): avc:  denied  { append } for  pid=352 comm="syz.2.8594" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1003.560022][  T353] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1003.664598][  T358] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8596'.
[ 1003.679105][  T358] ADFS-fs (nbd7): error: unable to read block 3, try 0
[ 1003.682359][  T362] loop2: detected capacity change from 0 to 7
[ 1003.685668][T20098]  loop2:
[ 1003.686782][T20098] loop2: partition table partially beyond EOD, truncated
[ 1003.690880][  T362]  loop2:
[ 1003.692268][  T362] loop2: partition table partially beyond EOD, truncated
[ 1003.749038][  T366] netlink: 'syz.6.8600': attribute type 3 has an invalid length.
[ 1003.751470][ T1459] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1003.766340][  T368] bond4: option xmit_hash_policy: invalid value (6)
[ 1003.782770][  T368] bond4 (unregistering): Released all slaves
[ 1003.792842][  T364] orangefs_devreq_write_iter: total:0: must be at least:8240:
[ 1003.802379][  T372] input: syz0 as /devices/virtual/input/input181
[ 1003.814872][  T373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8601'.
[ 1003.898723][ T1459] usb 6-1: Using ep0 maxpacket: 8
[ 1003.910206][ T1459] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1003.912914][ T1459] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1003.916175][ T1459] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1003.919882][ T1459] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1003.923228][ T1459] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1003.927315][ T1459] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1003.932075][ T1459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1003.965057][  T385] tmpfs: Unknown parameter 'quotakvm'
[ 1004.053696][  T392] loop2: detected capacity change from 0 to 7
[ 1004.059440][T20098]  loop2:
[ 1004.060789][T20098] loop2: partition table partially beyond EOD, truncated
[ 1004.069254][  T392]  loop2:
[ 1004.070611][  T392] loop2: partition table partially beyond EOD, truncated
[ 1004.142330][ T1459] usb 6-1: usb_control_msg returned -32
[ 1004.152394][ T1459] usbtmc 6-1:16.0: can't read capabilities
[ 1004.166274][  T399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1004.169865][  T399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1004.391269][  T417] vxlan0: entered promiscuous mode
[ 1004.393430][  T417] vxlan0: entered allmulticast mode
[ 1004.396410][T26567] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1004.401618][T26567] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1004.408722][T26567] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1004.411767][T26567] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1004.471535][  T422] netlink: 'syz.6.8617': attribute type 23 has an invalid length.
[ 1004.793478][  T439] binder: 438:439 ioctl c0306201 200000000080 returned -14
[ 1004.798967][  T439] binder: 438:439 ioctl c0306201 2000000003c0 returned -14
[ 1004.816436][  T441] dlm: non-version read from control device 0
[ 1004.942611][  T450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1004.945290][  T450] batadv_slave_0: entered promiscuous mode
[ 1005.025274][  T457] bridge0: port 3(ipvlan2) entered blocking state
[ 1005.028166][  T457] bridge0: port 3(ipvlan2) entered disabled state
[ 1005.031555][  T457] ipvlan2: entered allmulticast mode
[ 1005.033401][  T457] bridge0: entered allmulticast mode
[ 1005.036502][  T457] ipvlan2: left allmulticast mode
[ 1005.038403][  T457] bridge0: left allmulticast mode
[ 1005.078912][ T1459] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1005.086197][  T459] ipvlan0: entered promiscuous mode
[ 1005.138297][  T462] netlink: 'syz.7.8629': attribute type 63 has an invalid length.
[ 1005.142446][  T462] __nla_validate_parse: 2 callbacks suppressed
[ 1005.142462][  T462] netlink: 5 bytes leftover after parsing attributes in process `syz.7.8629'.
[ 1005.149371][  T462] gretap0: entered allmulticast mode
[ 1005.230668][ T1459] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1005.234682][ T1459] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1005.237891][ T1459] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1005.250889][ T1459] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1005.253751][ T1459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1005.256290][ T1459] usb 7-1: Product: syz
[ 1005.257707][ T1459] usb 7-1: Manufacturer: syz
[ 1005.259600][ T1459] usb 7-1: SerialNumber: syz
[ 1005.267207][  T468] binder: 467:468 ioctl c0306201 200000000080 returned -14
[ 1005.272697][  T468] binder: 467:468 ioctl c0306201 2000000003c0 returned -14
[ 1005.315953][  T470] binder: 469:470 ioctl c0306201 200000000080 returned -14
[ 1005.321468][  T470] binder: 469:470 ioctl c0306201 2000000003c0 returned -14
[ 1005.371156][  T473] loop2: detected capacity change from 0 to 7
[ 1005.377025][  T473]  loop2:
[ 1005.378193][  T473] loop2: partition table partially beyond EOD, truncated
[ 1005.441660][  T481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8636'.
[ 1005.468009][ T1459] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1005.479133][   T40] audit: type=1400 audit(2000001083.516:47882): avc:  denied  { create } for  pid=482 comm="syz.7.8637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1005.488483][   T40] audit: type=1400 audit(2000001083.516:47883): avc:  denied  { read } for  pid=482 comm="syz.7.8637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1005.499981][   T40] audit: type=1400 audit(2000001083.526:47884): avc:  denied  { write } for  pid=482 comm="syz.7.8637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1005.508884][   T40] audit: type=1400 audit(2000001083.536:47885): avc:  denied  { ioctl } for  pid=482 comm="syz.7.8637" path="socket:[177096]" dev="sockfs" ino=177096 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1005.556859][  T489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8639'.
[ 1005.595549][  T491] syzkaller0: entered promiscuous mode
[ 1005.597837][  T491] syzkaller0: entered allmulticast mode
[ 1005.620929][  T491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1005.623887][  T490] tipc: Resetting bearer <eth:syzkaller0>
[ 1005.645113][  T490] tipc: Disabling bearer <eth:syzkaller0>
[ 1005.769098][T26570] net_ratelimit: 38 callbacks suppressed
[ 1005.769119][T26570] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1005.791911][ T6088] usb 7-1: USB disconnect, device number 58
[ 1005.795813][ T6088] usblp1: removed
[ 1005.809837][  T504] comedi comedi0: aio_aio12_8: a I/O base address must be specified
[ 1005.828870][T21430] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[ 1005.831503][T21430] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[ 1005.834208][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1005.878854][T26570] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1005.895140][  T512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1005.989112][T26570] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1006.099415][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1006.171602][  T536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8653'.
[ 1006.182170][   T40] audit: type=1400 audit(2000001084.216:47886): avc:  denied  { name_bind } for  pid=535 comm="syz.6.8653" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1006.210733][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1006.213186][  T541] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8654'.
[ 1006.213202][  T541] openvswitch: netlink: Flow key attr not present in new flow.
[ 1006.244664][  T543] ip6t_rpfilter: unknown options
[ 1006.246779][  T543] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8655'.
[ 1006.319464][T26567] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1006.360987][  T553] ==================================================================
[ 1006.363671][  T553] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0
[ 1006.366972][  T553] Read of size 8 at addr ffff88802f3c0e18 by task syz.2.8658/553
[ 1006.372031][  T553] 
[ 1006.373631][  T553] CPU: 3 UID: 0 PID: 553 Comm: syz.2.8658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1006.373664][  T553] Tainted: [L]=SOFTLOCKUP
[ 1006.373672][  T553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1006.373685][  T553] Call Trace:
[ 1006.373696][  T553]  <TASK>
[ 1006.373704][  T553]  dump_stack_lvl+0x100/0x190
[ 1006.373907][  T553]  print_report+0x156/0x4c9
[ 1006.373983][  T553]  ? __virt_addr_valid+0x239/0x430
[ 1006.374063][  T553]  ? dvb_device_open+0x33f/0x3b0
[ 1006.374095][  T553]  kasan_report+0xdf/0x1e0
[ 1006.374171][  T553]  ? dvb_device_open+0x33f/0x3b0
[ 1006.374204][  T553]  ? __pfx_dvb_device_open+0x10/0x10
[ 1006.374235][  T553]  dvb_device_open+0x33f/0x3b0
[ 1006.374267][  T553]  ? __pfx_dvb_device_open+0x10/0x10
[ 1006.374296][  T553]  chrdev_open+0x234/0x6a0
[ 1006.374364][  T553]  ? __pfx_chrdev_open+0x10/0x10
[ 1006.374385][  T553]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1006.374468][  T553]  do_dentry_open+0x6d8/0x1660
[ 1006.374489][  T553]  ? __pfx_chrdev_open+0x10/0x10
[ 1006.374513][  T553]  vfs_open+0x82/0x3f0
[ 1006.374537][  T553]  path_openat+0x208c/0x31a0
[ 1006.374564][  T553]  ? __pfx_path_openat+0x10/0x10
[ 1006.374586][  T553]  do_file_open+0x20e/0x430
[ 1006.374605][  T553]  ? __pfx_do_file_open+0x10/0x10
[ 1006.374632][  T553]  ? alloc_fd+0x476/0x790
[ 1006.374655][  T553]  ? do_getname+0x191/0x390
[ 1006.374681][  T553]  do_sys_openat2+0x10d/0x1e0
[ 1006.374706][  T553]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1006.374735][  T553]  __x64_sys_openat+0x12d/0x210
[ 1006.374760][  T553]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1006.374786][  T553]  ? do_user_addr_fault+0x8d6/0x12f0
[ 1006.374812][  T553]  do_syscall_64+0x106/0xf80
[ 1006.374972][  T553]  ? clear_bhb_loop+0x40/0x90
[ 1006.374996][  T553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1006.375017][  T553] RIP: 0033:0x7f882695d04e
[ 1006.375036][  T553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1006.375055][  T553] RSP: 002b:00007f8827928b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1006.375076][  T553] RAX: ffffffffffffffda RBX: 00007f88279296c0 RCX: 00007f882695d04e
[ 1006.375089][  T553] RDX: 0000000000000002 RSI: 00007f8827928c00 RDI: ffffffffffffff9c
[ 1006.375101][  T553] RBP: 00007f8827928c00 R08: 0000000000000000 R09: 0000000000000000
[ 1006.375115][  T553] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1006.375132][  T553] R13: 00007f8826c16038 R14: 00007f8826c15fa0 R15: 00007fffdcfa72a8
[ 1006.375151][  T553]  </TASK>
[ 1006.375159][  T553] 
[ 1006.438894][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1006.440025][  T553] Allocated by task 552:
[ 1006.440105][  T553]  kasan_save_stack+0x30/0x50
[ 1006.473954][  T553]  kasan_save_track+0x14/0x30
[ 1006.475535][  T553]  __kasan_kmalloc+0xaa/0xb0
[ 1006.477067][  T553]  __kmalloc_noprof+0x301/0x850
[ 1006.478713][  T553]  security_inode_init_security+0x113/0x370
[ 1006.481162][  T553]  shmem_symlink+0x15f/0xa00
[ 1006.483074][  T553]  vfs_symlink+0x178/0x4d0
[ 1006.484745][  T553]  filename_symlinkat+0x2a6/0x560
[ 1006.486708][  T553]  __x64_sys_symlinkat+0x9c/0xe0
[ 1006.488603][  T553]  do_syscall_64+0x106/0xf80
[ 1006.490559][  T553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1006.492856][  T553] 
[ 1006.493890][  T553] Freed by task 552:
[ 1006.495485][  T553]  kasan_save_stack+0x30/0x50
[ 1006.497343][  T553]  kasan_save_track+0x14/0x30
[ 1006.499149][  T553]  kasan_save_free_info+0x3b/0x70
[ 1006.501180][  T553]  __kasan_slab_free+0x5f/0x80
[ 1006.503120][  T553]  kfree+0x1f6/0x6b0
[ 1006.504700][  T553]  security_inode_init_security+0x2bf/0x370
[ 1006.507099][  T553]  shmem_symlink+0x15f/0xa00
[ 1006.509004][  T553]  vfs_symlink+0x178/0x4d0
[ 1006.510712][  T556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8659'.
[ 1006.510832][  T553]  filename_symlinkat+0x2a6/0x560
[ 1006.513660][  T556] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8659'.
[ 1006.515771][  T553]  __x64_sys_symlinkat+0x9c/0xe0
[ 1006.521006][  T553]  do_syscall_64+0x106/0xf80
[ 1006.522591][  T553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1006.524582][  T553] 
[ 1006.525381][  T553] The buggy address belongs to the object at ffff88802f3c0e00
[ 1006.525381][  T553]  which belongs to the cache kmalloc-256 of size 256
[ 1006.529873][  T553] The buggy address is located 24 bytes inside of
[ 1006.529873][  T553]  freed 256-byte region [ffff88802f3c0e00, ffff88802f3c0f00)
[ 1006.534259][  T553] 
[ 1006.535049][  T553] The buggy address belongs to the physical page:
[ 1006.537225][  T553] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f3c0
[ 1006.540175][  T553] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1006.542934][  T553] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1006.545341][  T553] page_type: f5(slab)
[ 1006.546635][  T553] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122
[ 1006.549364][  T553] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1006.552078][  T553] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122
[ 1006.554749][  T553] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1006.557437][  T553] head: 00fff00000000001 ffffea0000bcf001 00000000ffffffff 00000000ffffffff
[ 1006.560186][  T553] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1006.562907][  T553] page dumped because: kasan: bad access detected
[ 1006.564911][  T553] page_owner tracks the page as allocated
[ 1006.566806][  T553] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19856616114, free_ts 0
[ 1006.572988][  T553]  post_alloc_hook+0x153/0x170
[ 1006.574591][  T553]  get_page_from_freelist+0x111d/0x3140
[ 1006.576386][  T553]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1006.578320][  T553]  new_slab+0xa6/0x6b0
[ 1006.579646][  T553]  refill_objects+0x26b/0x400
[ 1006.581192][  T553]  __pcs_replace_empty_main+0x1ab/0x660
[ 1006.582980][  T553]  __kmalloc_cache_noprof+0x493/0x6f0
[ 1006.584681][  T553]  bus_add_driver+0x92/0x5b0
[ 1006.586234][  T553]  driver_register+0x1e2/0x360
[ 1006.587787][  T553]  i2c_register_driver+0xd9/0x1f0
[ 1006.589401][  T553]  do_one_initcall+0x11d/0x760
[ 1006.590988][  T553]  kernel_init_freeable+0x6e5/0x7a0
[ 1006.592797][  T553]  kernel_init+0x1f/0x1e0
[ 1006.594223][  T553]  ret_from_fork+0x754/0xd80
[ 1006.595848][  T553]  ret_from_fork_asm+0x1a/0x30
[ 1006.597476][  T553] page_owner free stack trace missing
[ 1006.599239][  T553] 
[ 1006.600106][  T553] Memory state around the buggy address:
[ 1006.602009][  T553]  ffff88802f3c0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1006.604613][  T553]  ffff88802f3c0d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1006.607884][  T553] >ffff88802f3c0e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1006.608961][T26575] bond4: (slave macvlan2): failed to get link speed/duplex
[ 1006.611148][  T553]                             ^
[ 1006.611166][  T553]  ffff88802f3c0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1006.611182][  T553]  ffff88802f3c0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1006.611194][  T553] ==================================================================
[ 1006.613485][ T3253] usb 6-1: USB disconnect, device number 81
[ 1006.616925][  T553] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1006.616945][  T553] CPU: 3 UID: 0 PID: 553 Comm: syz.2.8658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1006.616970][  T553] Tainted: [L]=SOFTLOCKUP
[ 1006.616976][  T553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1006.616988][  T553] Call Trace:
[ 1006.616995][  T553]  <TASK>
[ 1006.617002][  T553]  dump_stack_lvl+0x100/0x190
[ 1006.617042][  T553]  vpanic+0x552/0x970
[ 1006.617061][  T553]  ? __pfx_vpanic+0x10/0x10
[ 1006.617079][  T553]  ? dvb_device_open+0x33f/0x3b0
[ 1006.617106][  T553]  panic+0xd1/0xe0
[ 1006.617121][  T553]  ? __pfx_panic+0x10/0x10
[ 1006.617144][  T553]  ? dvb_device_open+0x33f/0x3b0
[ 1006.617172][  T553]  ? preempt_schedule_common+0x42/0xc0
[ 1006.617206][  T553]  check_panic_on_warn.cold+0x19/0x34
[ 1006.617225][  T553]  end_report.part.0+0x3a/0x90
[ 1006.617252][  T553]  kasan_report.cold+0xe/0x18
[ 1006.617277][  T553]  ? dvb_device_open+0x33f/0x3b0
[ 1006.617306][  T553]  ? __pfx_dvb_device_open+0x10/0x10
[ 1006.617335][  T553]  dvb_device_open+0x33f/0x3b0
[ 1006.617365][  T553]  ? __pfx_dvb_device_open+0x10/0x10
[ 1006.617392][  T553]  chrdev_open+0x234/0x6a0
[ 1006.617416][  T553]  ? __pfx_chrdev_open+0x10/0x10
[ 1006.617436][  T553]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1006.617462][  T553]  do_dentry_open+0x6d8/0x1660
[ 1006.617482][  T553]  ? __pfx_chrdev_open+0x10/0x10
[ 1006.617506][  T553]  vfs_open+0x82/0x3f0
[ 1006.617553][  T553]  path_openat+0x208c/0x31a0
[ 1006.617579][  T553]  ? __pfx_path_openat+0x10/0x10
[ 1006.617602][  T553]  do_file_open+0x20e/0x430
[ 1006.617621][  T553]  ? __pfx_do_file_open+0x10/0x10
[ 1006.617652][  T553]  ? alloc_fd+0x476/0x790
[ 1006.617676][  T553]  ? do_getname+0x191/0x390
[ 1006.617719][  T553]  do_sys_openat2+0x10d/0x1e0
[ 1006.617743][  T553]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1006.617771][  T553]  __x64_sys_openat+0x12d/0x210
[ 1006.617795][  T553]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1006.617822][  T553]  ? do_user_addr_fault+0x8d6/0x12f0
[ 1006.617848][  T553]  do_syscall_64+0x106/0xf80
[ 1006.617867][  T553]  ? clear_bhb_loop+0x40/0x90
[ 1006.617889][  T553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1006.617910][  T553] RIP: 0033:0x7f882695d04e
[ 1006.617928][  T553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1006.617945][  T553] RSP: 002b:00007f8827928b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1006.617968][  T553] RAX: ffffffffffffffda RBX: 00007f88279296c0 RCX: 00007f882695d04e
[ 1006.617982][  T553] RDX: 0000000000000002 RSI: 00007f8827928c00 RDI: ffffffffffffff9c
[ 1006.617996][  T553] RBP: 00007f8827928c00 R08: 0000000000000000 R09: 0000000000000000
[ 1006.618009][  T553] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1006.618021][  T553] R13: 00007f8826c16038 R14: 00007f8826c15fa0 R15: 00007fffdcfa72a8
[ 1006.618038][  T553]  </TASK>
[ 1006.619263][  T553] Kernel Offset: disabled

VM DIAGNOSIS:
12:52:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000001 RCX=ffffffff8242d7ef RDX=0000000000000000
RSI=0000000000000004 RDI=ffffea0000e86734 RBP=ffffea0000e86734 RSP=ffffc90020e3f238
R8 =0000000000000001 R9 =fffff940001d0ce6 R10=ffffea0000e86737 R11=0000000000000000
R12=0000000000000000 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000557
RIP=ffffffff8242d81c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6338000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f882774da08 CR3=000000010cfae000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcfa7796
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcfa7796 00007fffdcfa779c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826a33274
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826a332b4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826a33418
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826a332a6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000010000000 RBX=ffff88802b4d9bc0 RCX=000000000000001c RDX=ffff88801c7e4980
RSI=ffffc9000013d134 RDI=ffff88801c7e4980 RBP=ffff88802b4d1028 RSP=ffffc90003727088
R8 =0000000000000005 R9 =000000000000001f R10=000000000000001c R11=0000000000000158
R12=ffffc9000013d100 R13=ffff88802b4d9c1c R14=ffff88802b4d9bc8 R15=000000000000001c
RIP=ffffffff8683beef RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0ced573300 ffffffff 00c00000
GS =0000 ffff8880d6438000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005624b42ecf40 CR3=000000002a71d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=c7d6d3b363ed22c2 0e521244cb7be44e c7d6d3b363ed22c2 0e521244cb7be44e c7d6d3b363ed22c2 0e521244cb7be44e c7d6d3b363ed22c2 0e521244cb7be44e
ZMM18=0de1b9750e3cf524 7926e7b484732de9 0de1b9750e3cf524 7926e7b484732de9 0de1b9750e3cf524 7926e7b484732de9 0de1b9750e3cf524 7926e7b484732de9
ZMM19=a826000000000000 0000000000000004 a826000000000000 0000000000000003 a826000000000000 0000000000000002 a826000000000000 0000000000000001
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2210000010000000 0000080608015aec 03fffe0400058403 0c0400058003038a
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000088004040107 f202100002800400 000000080606015b 9440800400028803
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0480820400028403 0204000280030eb8 10000810000f98f1 98e8018080808090
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000610002010 00060473c00c8004 04a4e60800010000 02080606013dfa00
ZMM25=7926e7b47926e7b4 7926e7b47926e7b4 7926e7b47926e7b4 7926e7b47926e7b4 7926e7b47926e7b4 7926e7b47926e7b4 7926e7b47926e7b4 7926e7b47926e7b4
ZMM26=0e3cf5240e3cf524 0e3cf5240e3cf524 0e3cf5240e3cf524 0e3cf5240e3cf524 0e3cf5240e3cf524 0e3cf5240e3cf524 0e3cf5240e3cf524 0e3cf5240e3cf524
ZMM27=0de1b9750de1b975 0de1b9750de1b975 0de1b9750de1b975 0de1b9750de1b975 0de1b9750de1b975 0de1b9750de1b975 0de1b9750de1b975 0de1b9750de1b975
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=a6260000a6260000 a6260000a6260000 a6260000a6260000 a6260000a6260000 a6260000a6260000 a6260000a6260000 a6260000a6260000 a6260000a6260000
info registers vcpu 2

CPU#2
RAX=ffffc9000013d000 RBX=ffff8880296ce800 RCX=ffffffff81e8e37b RDX=1ffff110052d9d87
RSI=ffffffff86843564 RDI=ffff8880296cec38 RBP=0000000000000001 RSP=ffffc90000648ea8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffc9000013d008 R13=dffffc0000000000 R14=ffff8880296cec28 R15=0000000000000000
RIP=ffffffff868435b2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6538000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c34c409 CR3=000000013cb2b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff857ab2f0 RDI=ffffffff9b4ae040 RBP=ffffffff9b4ae000 RSP=ffffc900209b72f0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000033353554
R12=0000000000000000 R13=ffffffff9b4ae2c0 R14=ffffffff9b4ae050 R15=0000000000000000
RIP=ffffffff857ab317 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f88279296c0 ffffffff 00c00000
GS =0000 ffff8880d6638000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f8826985e40 CR3=00000000130bf000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000f8000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcfa7796
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdcfa7796 00007fffdcfa779c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826a33274
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826a332b4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826a33418
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826a332a6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8826bec5f8 00007f8826bec5c8 00007f8826bec600 00007f8826bec5e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000