last executing test programs:

32.439772045s ago: executing program 2 (id=397):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x2020)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x40)
ppoll(&(0x7f0000000400)=[{r1, 0x4010}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x2020) (async)
socket(0x40000000015, 0x5, 0x0) (async)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x40) (async)
ppoll(&(0x7f0000000400)=[{r1, 0x4010}], 0x1, 0x0, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) (async)
listen(r2, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) (async)

32.32001742s ago: executing program 2 (id=398):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fe06f949e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x32)
ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x1)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2a020480)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x101, 0x1, &(0x7f00000000c0)=[r5], 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x7})

32.239161619s ago: executing program 2 (id=399):
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r2=>r0}) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
r3 = semget(0x1, 0x0, 0x43a) (async)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
semtimedop(r3, &(0x7f0000000140)=[{0x3, 0x3, 0x800}], 0x1, &(0x7f00000001c0)={r4, r5+10000000})
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)={0x38c, 0x12, 0x200, 0x70bd2c, 0x25dfdbfb, {0x29, 0x1, 0x7, 0x4, {0x4e21, 0x4e20, [0x6, 0x0, 0x1], [0x9, 0x800, 0x8000, 0x80000000], r6, [0x7fff, 0x1]}, 0x5, 0x51}, [@INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "93e7ea8d3ca6760933ef3c366204f4870622369fd582441b1dc79511f61156b85397f5976ae182161e41563a8b81e62038c1e7797d43213e5ad0961bbcc54edd023cdbe4c9edec0175a42ce6adc64a973f46cc4946bde9bdcbac823be22b39653520e601d0f4f38291bc74dfdd5f1f1e2dcbe4dea820abbf68ec304ad426720dee0affaef4b3036fd771973c217ab04b38b41342b0f483053ce33430acae31b35721a5e660385cc66b823d2bbdfe64e7975d3aa31d94d75f21c07e2f772ca1324b0837d9c5aacecf3139e23fc297d3245639283c785a264277aef302ab936063878ddefd54b46b303756d3eaf0af"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "5de7240ff999b99a9f957eac2f194bc5923c5072fa2e5f1839d964b4ab5b516e3bbdc7e8a11f3c12c04bb57e5bbe6255203274d8f28b084f5a9604a4869d91d15c678e0016c376a6348400647af0f395ca2f1824f9a1f1474b968c2f5d68b31a3de7e062fc80f3ff4a5287af746f876ed282da1b80e6d5db57feb949faec5052f03ed1cb92660cb1e1f327cfba83aa249beefa6c9f3eec50406fe0c3d79784681008fdd13c78a7743b65f2c8cd65d21397520c183b1c3f340e7ce00cd115ba30daeb39ac2c61a332e8a75fd8bc984f3851ff4e"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "0eace838aa7e80d886caaa930112f98213d67830b3a5351d130dd71e7fdb9fa53d8a963d9e2cccf4de29c1da353be8ee7b23a7513a8fde4b3f88e68d398eb2f2d80a7208b9ff0ab13e4f8d78f38ca8554e68bbdf96b36e970c4520c863cc4b9e19683d21a3cc9cbef655b9572e8707015cf863a0b26eb8a9c95c0e9de942a346c44e7c2e99fae2962ca95d927d09f3181085201748f6efc1b3f0135139b656043ed98ed1ab0f5cf1169ef7e215f8cbecaeb70ce1f084bb337354ef0de8a19733c8146090a2fc2868bc2c553d3559a9168e"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "56fc0a7276685f543a86fd310f9aaf19d08010d7c4be58225f47e1152db7178b25cd6dcb69a141819208c68ca4a077f858fdbfb607ebd9874e431c9af338597334dcf6a21b2a3e3373325f0e2c"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "4abb53b0874ed6f1e2b8e2848c0551a494441760f8e65363ba"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "9faaa70c6806de930a567b4092c5b57f0d81c65b334f402972bef507d22bc9be4fbccf"}]}, 0x38c}, 0x1, 0x0, 0x0, 0x80080}, 0x20000004) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
socket$netlink(0x10, 0x3, 0x6) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000006c0)=""/161) (async)
getpeername$l2tp(r1, &(0x7f0000000780)={0x2, 0x0, @initdev}, &(0x7f00000007c0)=0x10) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x6000) (async)
getgroups(0x6, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, <r8=>0xee01, 0xee00, 0xffffffffffffffff])
semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000b00)={{0x2, r7, r8, 0x0, 0x0, 0x80, 0x8}, 0xffffffffffff7fff, 0x7cc, 0x0, 0x0, 0x0, 0x0, 0x4})

32.238171939s ago: executing program 2 (id=400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000100)='./file3\x00', 0x48081, 0x1)
mkdirat(r1, &(0x7f0000000300)='./file1/file1\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000000)={@private0, @dev={0xfe, 0x80, '\x00', 0x3d}})
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0)

32.1691733s ago: executing program 2 (id=401):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x1f8, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x1e4, 0x1, [@m_nat={0x1e0, 0x19, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x7f, 0x4, 0x0, 0x4}, @loopback, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x10000000, 0x3, 0x7}, @rand_addr=0x64010102, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffa, 0x8, 0x20000000, 0x2, 0x4}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xfffffff7, 0x0, 0xb8, 0x1}, @multicast2, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x2, 0x4, 0x280a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x37d11df, 0x0, 0x6, 0x0, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc1c, 0x120, 0x1, 0x5dc, 0xfff}, @loopback, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x7, 0x7, 0x2, 0x6}, @empty, @rand_addr=0x64010101, 0xff, 0x1}}]}, {0x77, 0x6, "4de7bc8043adcb6c11e284347292eadcfb772d0875cf2ece9f7ed55df1898edb112c26edd9010f224260a39d913cb096c35edf33e3b76ce593024f6cb3add12a7fb462ebea7a3085cb5cc6fcd6a48ec23fc3c4864a0281e1436ec690e3881d302f1cad4b8b2d8edbcb772513e510497ad25867"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x1f8}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000005000000000400000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000001900000000000000000000000004000000006ee8b65a0d3c4a10d79ab1fddf987cdd3652c3db"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xe3, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x6e, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x48b3802862a734d6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r8}, 0x10)
r9 = openat2(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x24300, 0x0, 0x6}, 0x18)
readahead(r9, 0x3cf, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
syz_open_dev$sndmidi(&(0x7f0000000880), 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x59, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

32.114670383s ago: executing program 2 (id=402):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000000c0)={0x1, 0x200, 0x6, 0x5, 0xff, 0x7})
writev(r1, &(0x7f0000001380)=[{&(0x7f0000000180)="b1ff5cc982d34010b7cd6e11c50b9bd27a09463daa6ac62502efcdab89674523220df660aec36c3da20cdf63882deea50aab4ae728b88be047e9c1de4d3428835edfece01a907acbebb734022a8738c0733177cf2bc7d61a3a791ad3e0972faf52b29d3476b8aff7e79275ad61b36971c0d2d8e1e242261dc50464a134b1a2e36243c3b5bb93a2e7a7087c254e0b5089100624eb5b273a62e5798cb0a4b96845ef45e0238d22062a8d5f43c3875d773c45e426dc162914e26ae112c5dfdef60f2f274ac96a6c77b37799cd03dc1c8ad69d1fcad1be379ad212ea51e0f272a3ec7bf0bdda2c7a15b3fb018cb2ce53c99b0af09b5c874cf4d79e13c7580d4ebc0669bb048863f28e8f00ea67d87e92c6fc4bc31a4a06b7344519d72e9662309dd51a02a7d295972dd1f63431968d9f5212daa47d49d85bf08190aef758e842da69375269c5f33bb0e60bb98abb2a51e8a89d7b4680185b9665d5da6254cb15392332b0e850169d90ac1374cf5346092b47f682c2f22c8cdcf98718bfa0ca4c5b50ebf8d6c53afa3830233a3e486a0d73fed67851403f72492feec1528cac329dd11f82cf149ec049e71b979ad055053dcf654f470f780f32b22dd6567401f94a94c592265a2dbdd3c5c88cfde1a6cc112231a5797e092a5040be19bde03dc2d9dc0078b42f27e168810770cd5b4c0f2073037e9a57e8148392a3063ee55ad9449fa6265189337777d7a605bb7cf51d682ac7823207343fa7328ce207029e7e9818d7fcff9b9e7ac731dc502ce7471cab17108e5614fdec649d35a6638928931f110d4608a9cf22868dd3bf764d5b09a5325bcf987546e3edf1df9f1866fa89fb99a7f945c853586b4e3344eb286067e7b42d79ed93baddc3e5bd47ca613d654d4d54ece371b699ca7f05677c48cdb8f265fb35e0ff7ec5da801ae4198c7d9290d2ddc3586bd1ba3e34e722c47c14e4f310029751fbdc75da8461356b7a6784b490810284bdc727061944a283b7276b6a0b679d74089c54db98c92c2e329248b07365f45b3511ac11f8483a3f0bec8e4ceae324640f5762444efa94207115b5550fb8e4a1277aee3f11f2e6cac543d2168a83cd0367b24859e1b8b9cb9a5beb2d9851124b9c74acf21ecb5ae5e31e29543638a1cebdd2384dda1b2d301e59ea092707cd68838f12a05f9ec25832ddf22e2a01a8a28ff5c4f925a09b18849c180f0fed6057fc68d473eddb467796f8c086475dc1444c7f879d842662da4e59fd3c02b6d54c822ae8aeb91aefde57008f7728f1d236bbcda61a5b2dfdc0648ba72229b764fbd43a2eabe639a49f44de663b2e4e244370c7681f130e4a7790924e0826c0ebe768996d22edf83088b18492ccaa1344f5b14aa4218e3204434e0483bb56043e63ae02d584fed308759840064686ebb7349aa85adc00ba9ac6ec3e895f6b6cb33902cfa04a5fe6946475775284ba5f00f31a37aca06ce7485acbbf8e66db1daa273025860d216eb69a71666c0e5e3dcb9054c7c5edb138893b22a6f80655aeecd0f59f3bba544ae9897d2e795d0ca5a124519712a54366dca8b20c2191d5515231d5066c9c9f2b5b180da10542d7911f688c3b0f07ffcfe249161590d95d445c5ce2c647b97ad45249226a04144d900de9496f8f85e4607e7907eb20a1856efa7b06de5334ed1ba34b1c6e30da7df850da42b728208b85510b9acdd9ffe22894ec97c832b65257fa72d7f77a02359fad7ea2465c53df34c391c617d2e02197f6b5ab4a152327f6ae4d1107f6e8b68ce43de174dd559fe3ec95f32bd1d9244943230654e68fc3237e17dbd131996202beaf1578a925ab94510fccfa2be306bce3bdbb413ec6e50e6b0081362999ce7991b2c384001fd74e9de82dba16df74529800a201d8bd35eb789527b1f2e2ea7a12fb2858e389b4e96b5a9e32838916f147c99e3fd723972930a2eb8422ac15a254bae41e604e5459f6f573f9ce9d94e9dcbcdd392e2ed35ab5c6673f69c711ff121a2f1b1421d4a70571a20c732b1c1af990795c10ee23a6b8b056f91a4aa32d118a71cad879d5883327e7347d3fc7de504d42162a16fcd2fde8035a54205da46ce06c1f66b6ddb43248cbd5347cb80aec30a88af4166dcf131b92568ffad2f3cdb2835264705025b612d8b82920a01b87b9781020c38f438330735966ff27488db4ea6e74fa9d0e9a0fa929d9585a4de92648839a971edb1d03945fc7d6f64bb194085f63ccf8ea52b90505f2809d0ddc40b59909fff3e0c3362934019dca2b8733a8fdddd978d0b264d4b0105d4f9db315cbc8a2426f494de1d2f1b73de816e561004be0430be083fc6179ebfdc9bfca85df6b2c81bc0bf4685cdf072ddb5f7a3183a226df665c95d86c6046be75fdd008b96ad5696cbd3182a01c6a80d1bd3f4a288c015355004e6bbc788aef9bf65fe691dd6777a531a040c9ec7754d0e746dd89521d2ae6df1b13fd9433b164ba014fa7b3d8e08b30fe54b3d0ea810cc5f436a0370fd976eb481a07b3f81469cd6ed490d687528bf470d3800893a718f1f6c970a130ab49e04e1dfe4d594927bb34247d1c25c75197807206242b0ff807cb8c6ca4d67acce16de41a663fe86eec015dde1d828ac3a63763c0fbeda90c824abeb593efa9e2df76b761fa0d25e70e4e8d888f8ca1fcf7e88d35064a73600d4cc98e75ed4dd7c05919dcfdd4bdfaccd4a0a33e11c55276e105338b13ba765b728d0ae08a03cf59f3212373be7c7f74601c325c605ccbdff2bd895f43303888f9f8609df38a52d718cfb423a580711886de8affaf997d85a23af0de249f92f0b04305f12cbbd19c271339988a0c3eada32416b880f1859ba58353675b45b177d4306bbbd4ad8890a1a06126fb069b06566d92b026337f2f9c9f1321fd9b427a57df9e68505cdbbe1c5807fe485a85693e39e09bb72c7e46c95277526db6ee949ba143e4d3027c84df4c483aa0e419e438741661bb4349dffd003baa6112db3c9f84b0438ed3af79b90f1cea1b8ec4943bc3ced5567eec6510e910c8f9346e74c338fcfc892aaf970691b60f5ea4c04a33954c280c0c28f5c4ed79a3d4cb09ac60dc00060b09afa42fe60a250bb0c7529b282714df7de4938f1c56241189a707a7091a1035d82c7d43c66e9abd92ceec9ec5c102df63d4a0b8eac16b618e97567a87296a42bb7a018204b3dcdcee5e5c758faf3172e8c6c50483f341c5656cb8df27c63c98e74d1b7312e49926d143817f8e9b4125406ab91242bdcba7ccc3db507ff994047b33ce9a59179d119991a161e8bd06e0f58d7bffe6457f531942cc46c88bfec69e0b995ac7e7ab04d270efe443541bc55f327ad8921c32bcadaa0e1ad8ac263a312f92f904b333becbdf4a102f5b379619c8204c3a18af91347fbb5eab64ff81a05f3b830f36691121f0a398405521c3dac1300a0db6e21e56ac8bd6a03923a3d8ed96d9df54b98b42b70a0a3ffa8291ceb0e607f0e2f8ce1832111051bb16bdc25d5a4af117634af898f5952f98a7b132cf140a79ccb80d1d9f1bb52c3aaf50b7232dba94e896295c5a6bf71ec63a2f95315b06b590c6965249d1ea7f7039344242bae628f7b1bd45d9ccd51183279863c640d8fd7127ca5e593d7ae02b8ecc77188389c766634b18e54ab9da7ea92e8101d6088a373c3da38941e566dae9c1b191b48f387ecf8b91c6e6f05c800cef4c39b11dad2e42f1b54a44204ffe29c84defd41a3ab9173957b3007cad89d259ba60cb320d26b1ce00453629af98ab9371d8e47854396009169ebef43f471c2b00e7298dfb61a42000b68c44dc2429233f5fa17c524856c6383ae4ffed02f566edb7eb961489b5cb677e568eba83885641486af623dafe8693ac6dd5df261294a9286e445bb91098b96d5b2e912c21d161c9d6a6c0882a5ccd68d3b0025546bb79ace81b3338bc613209bb48f725d144df39604111da9c775da5e5f911934fb719d5d2d73c4d083b644d81d5ef22b900c5e00a0646972fb9984bf8023be30af1a018d16e4a33c8f1e26f5fd1e344c164a88283dbbc66142b9cfffed194984dd288779638827a4435f749a50db79918f33d67adc4014754133437c9d2bb90246a33070216d80560e4fc33047f75418d4e8d88fb244aab374b60a2a71fe7b579a121edd7cabdd38c794ce3e486803d0eba379a41f074a7667790ef9acf99f7ea8856b9383498850404704655bdac133d26967fb1ef4a484780aab18e86e9f119a11e6195a40ed26b32054e0a1939dea8b2f3e5ab7d7bc5cb32895c069b84b2f0fc9291d4e35ca2a78108593e74ea25f81fa90f86c76fecc3fe193c13fb427ab6a0f5c540512309a9b4a96fb636b4275012157420c3efa09701d35ae2b06e96d4ebcfdaeb83d3ffa44c59b301243ceb33c115ced26656e15c244b4e677e981e7456950489396b83fd66746de97e41cecc8f14435ebe2f3437890fc31eb790df327cba7d40aa352911b36d71b2aafe495c9b82b790c97d3b5179ca47eddffe1f700f506491865c86e8dad4a2870efad0772b32d67d10498d5f1d4032d341078d2d5af3e9b7ef1fb7981cc1d50fe9cec2c037782ad472edb0be5cb870c203477e6df78762b1be15fb1648c6e1da3d1f95858b7a03dae9dd6fdc82d0c4434961550aa8991c73a6df1fe5cbe815a1e2c0add62f5b340e262bb369dfbced592b77df8ce5d694a59a5125b72a7d70cbcd7fcad1f8e85fbc632c21903c611744955dc7bcfa3a83b87c7dff38516e2e8974dd8f6835b5a681ab0cfe5b72b42d63047983a6ac6efeea069e12428f2d07965ea369635390f6459b1407fa5a0c5967fb119186e665e71b9b0b386f9cd690990eda4adff85cc484874265e2a9ff6573ee8d083bfdb45325dbfc452c33e92a19d024c0841892d43f4dec71b185dad3731ca647a2ffa2c80e008a8dc25667e63f8bda20806bc1a1adb93674cbcc548ba8ca7af22df43f7a41ad774e95bb8fbcf03845d5cdfb808387fc6a4d4676ea6e01c2f39836a77852ce97bd69e92865b54bc4876f0f4243db0de84d469676bb82e43bdaaa362ce99368a7ab30b8d92611ab053fb40523658884efe299a562dc0cf6b5bf996cf05a7e03ca369754968b6c317e740679b0dfe60133414932c1ae75ca0d26cd8cfbc78989de4eb37f64cbf3a14d2a72a24fbcf4c559f261115ccb4002d8d9590a5819d04869a5bebca4cac2901c2262a49b5a86ab0a3ba33942f7b94107a5ae35afd247485786e7b23c5d008ab0d9c1ca51cc86ba7bbc596a788251a8b1ef9817191c1c0dabd1e9d826f3c451b5ea73d6b74300873e34c216d21a869ed06a0d9c3be9024be3e24828393e0635a614d78eb0abcf44bfe8c8c860027c9cee58b5e41d5f1209e48253281b18727dfb926ac3687df56217241c872a5a39f65251b5ca032bfaca2c9fe662584bcb6cb3fe9be2ae57be0655586a8c704ae915f284adac8d85174799ebf9e16c43b74a154a4524e6f33467e13a121a255acfb592d47eaf13cd538de15327151ad74f578bbbfdfde82fd6afb592b7933b52241f182cb65778e3628f177eaa8c8ecc970e82a2aa52f3b7d534748b35fa1dbc0f58ede3df5ddf1f1202290a74f4a871802d1f970de3ea5553f35456e2596669c00404337f6d394fb68c588effe8987f18b04b1b52eca71062b722b2cc44e4805abf6347715a3c9e5e9b9376a45fed63b494781a4905f9ff6d898e48c5f1279fb2f4c3af50d54204d0ab410415fcb28a1b4dc0afdcce76f19f60f65534d802ee8c", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r6}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0)
close_range(r6, r6, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r4, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) (async)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) (async)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000000c0)={0x1, 0x200, 0x6, 0x5, 0xff, 0x7}) (async)
writev(r1, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r6}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) (async)
close_range(r6, r6, 0x0) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r4, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0) (async)

17.151048793s ago: executing program 32 (id=402):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000000c0)={0x1, 0x200, 0x6, 0x5, 0xff, 0x7})
writev(r1, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r6}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0)
close_range(r6, r6, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r4, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) (async)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) (async)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000000c0)={0x1, 0x200, 0x6, 0x5, 0xff, 0x7}) (async)
writev(r1, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r6}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) (async)
close_range(r6, r6, 0x0) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r4, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0) (async)

13.159951773s ago: executing program 1 (id=639):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c)

13.159388813s ago: executing program 1 (id=640):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cadb7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2ae59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c5e2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff83482dbab3f591dded505630dd9dd4828dde3fd9218fb1d041a26c60a724fd8506ba03a370721c281ff6202410dd078fc15f5c4e02b46fba33e0a772130f9a158a2e403ea61919f461358bee016e4c7c114ba7f4486aa7984fffd4555d71e049b2e933ae820bb5990ac3e27e7ebb101ad67ea47ed363de7dab4fb43769f5eca65b5918a76af8860f4d0d79805d9c08d3e27a8f041615ef85b52e521a90e511fcb303dc0ab19abaf0e37e9725bb596de8d8afecf5e15215a83652f3834bf00bf7bbc82b3c45e78a46e70a54a1925b4bf8392070e9cde0634790e444e4e4ee762db725122865a194d7ba289d9aecbba85da0a5c0de6b71a3cc"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000480)="ed6f5c45ba71feb568202046ba6bc367", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'tunl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xc27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x8, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newaddrlabel={0x38, 0x48, 0x8, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x38, 0x0, r9, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_loaded', 0x200, 0x105)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000023655080000000000000000000000000900020073797a3000000000050004000000000012000300686173683a6e65742c706f72740000000c0007800500150006000000050005000a000000050001000600000029e7c1f10dcb4acb55000000000000000057f66f2d0065e5633cfe9628afd80fb9d8ca34d88f719bac84ee9f017d66dd6e1f4aa3c6de4fbf"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x3, r12})
syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0xfffffffb)
fchdir(r0)
r13 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r13, 0x8927, &(0x7f0000000380)={'ip6tnl0\x00', 0x0})
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)
shutdown(r13, 0x0)

12.917366275s ago: executing program 1 (id=648):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x29, 0x40, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000000000000100000015cd000001010000ff"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000100), 0x12)
write(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00')
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000002380)=""/165, 0xa5}], 0x1, 0x3, 0x4)
setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000040)={0x2f, @private=0xa010102, 0x4e23, 0x0, 'ovf\x00', 0x0, 0x6, 0x56}, 0x2c)

12.639564093s ago: executing program 1 (id=654):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070002000000000000000000060005000d101000", 0x24)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000000))
r2 = accept$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x9d)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000280)=0x3)
r3 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x10d, 0x5}, {0x10, 0x107, 0x6}], 0x20}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket(0x2, 0x3, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r10, &(0x7f0000005500)={0x2020}, 0x2020)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@int=0x4, 0x4)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaa8aaf5aa5abbbbbbbbbbbb86dd600000fc01000000000000000000000034ad498a3774000000fe800000800000f900000000000000ac009b4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000990780000fe48f989bb653c93cf1b5dd85ce7fcfa766bb601"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r11, 0x0)
sendfile(r11, r11, 0x0, 0x40008)

12.429765873s ago: executing program 1 (id=656):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2ca})
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000001000005, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r5})
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r3)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000400000014000600776c616e31000000000000000000000014000300fe8000000000000000000000000000aa040002"], 0x50}, 0x1, 0x0, 0x0, 0x30}, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000540)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @info_request={0xf, 0x0, 0x0, 0x20f, 0x1}}}}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8})
r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r11, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x149)
fstat(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
r14 = dup(r0)
sendmsg$IPSET_CMD_RENAME(r14, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x5, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0xff03, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008090}, 0x8000)
ioctl$KVM_SET_MSRS(r14, 0xc008aec1, &(0x7f0000000500)=ANY=[@ANYRES8=r7])
dup(r2)
ioctl$TUNSETOWNER(r14, 0x400454cc, r13)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)

12.333972926s ago: executing program 1 (id=657):
lseek(0xffffffffffffffff, 0x9, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000800)=""/225, 0xe1}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000900)=""/181, 0xb5}], 0x7)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10.947941185s ago: executing program 3 (id=672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004084}, 0x8c4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', <r3=>0x0, 0x40, 0x20, 0x100, 0x1, {{0x16, 0x4, 0x1, 0x20, 0x58, 0x65, 0x0, 0xbb, 0x4, 0x0, @loopback, @multicast1, {[@generic={0xcfb4783a12610a9, 0xc, "d5913220ad95b1e50812"}, @lsrr={0x83, 0xf, 0x1f, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @empty]}, @ssrr={0x89, 0x27, 0x98, [@dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @local, @loopback, @remote, @empty, @broadcast]}]}}}}})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000680002002bbd7000fddbdf25000003000000000008000500", @ANYRES32=r3, @ANYBLOB="14000600fe8000000000000000000000000000aa0800010001000000d90b64af2c05407612d3e8080f2239d5267fd94e6d17eb7769e50d6686935c75feba3ef9aeb62ead9242ad9e4ac3f92c4f16d07b0f950f4e9dd17eda867df6c4fe32c7d3f6faf52d3a5cf988f4e57ebff18862c6c9aefb08d1d27993f34fe67cbb99e760e8ecf01790eab4e0b54fe3ad97832fd14f28b9c4b484b131ec2701"], 0x3c}}, 0x2004c041)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xaf4d}, 0x1c)
prctl$PR_SET_THP_DISABLE(0x41, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r5, 0x75e7f000)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000100)={0x1, 0x7})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000001030000000000000000000200000324001414bb08000200e00000010c000280050001003a000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048851}, 0x20000004)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r7, 0x0, &(0x7f0000000380)=""/53}, 0x20)
bind$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r8 = socket$inet(0x2, 0x1, 0x58)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
dup3(r10, r8, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$USBDEVFS_REAPURB(r9, 0x4008550c, &(0x7f0000002300))
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00')
write$P9_RLCREATE(r11, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000000080)={0x2, r9, 0x2})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180))
setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000140)={@local, @private=0xa010100, r3}, 0xc)

10.888743612s ago: executing program 3 (id=674):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000))
socket$unix(0x1, 0x2, 0x0) (async)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x1fff0}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x240c4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettfilter={0x24, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {0xfff1, 0x1}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4048840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettfilter={0x24, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {0xfff1, 0x1}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010000d0425bd7000fcdbff250000000066cfe8d9eedd867631bda605d75a1eb5328e7d49d69fd4a7f782108f771de4aeb5f6ae901eb08e6b593c86ce170f14db0bf392c11dd1458083396e7886000469d6d1c222b17187162b7bec17fe98389da2464f77f9d3a48d0b340691e61479d20d69f0fc60a894ef83f0e7ed517e6bef85c94dbd9f4076ea0cd1173f1f41bd6e454ed44f9d5b07ff7df3e326bc4882c810e373b96b0c6aa8e995fb3d9a08b6ccf783ebf9711cfa1769d918cfa1b3de2819fc3721c6eb99ea061d13078e4cb90d5ad1cf7d850238675e097441c50b09650a9a89cf3d175ff0798c469224ef", @ANYRES32=0x0, @ANYBLOB="1000000000000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x1d, 0x3, 0x2, 0x0, 0x9, 0xffff, 0x8, 0xa8, 0x435}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10.78002543s ago: executing program 3 (id=678):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r0}, 0x4)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000180)={0x0, 0x1}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', <r2=>0x0}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfecb, 0x100, 0x5, 0x3d4}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async)
exit(0x7) (async)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@rose, @bcast, @null, @remote, @null, @netrom]}, &(0x7f0000000080)=0x48)
accept4$netrom(r7, &(0x7f00000000c0)={{}, [@rose, @default, @rose, @remote, @netrom, @remote, @null, @bcast]}, &(0x7f0000000140)=0x48, 0xc0000)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000)

10.778866931s ago: executing program 3 (id=680):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000004d00)={0x2020}, 0x2020)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

10.698448893s ago: executing program 3 (id=682):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
sendto$inet6(r0, &(0x7f0000000040)="9a1e", 0x2, 0x4, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @local, 0x1}, 0x1c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xf0}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)

10.696114172s ago: executing program 3 (id=684):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {0x6}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0)

10.623983135s ago: executing program 33 (id=684):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {0x6}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0)

2.039931467s ago: executing program 5 (id=754):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x48041, 0xc6)
syz_clone(0x4a100000, &(0x7f0000000340)="91ff780506f2f1aee667f80c82abc47337162c7c2462de2e2437d2606ec25391df4fc94f10ea04e12f188dbb63479ba39740c78a31fc9f53ba8596972c7dde335948c6dfa853c3a1515c3ad2eeb832776d032df4ebcb3c26772ab46a6141955fc3b9b0cdecc951291f9d4c46f453fc8d0056c49e0b5c192a3cb808583ab2f3ba6df148c25e2d4310f58f7f028dfe3011beb6b0781a0e80a1b950eced31bf4cdea4b3f91133c0c5f67f98c745737adf77f05f0792a7d474b7fd8517420ed703d0c7712891e3a0b2f64763fa8b5701", 0xce, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="0ff3e0112bd3ee767feb5ebe7df433e3fe1210bdbbce37ba16830c8af2aaa8d2b162b8fdc7f1487bc7f222b72b850f927ad3da88afe7ecad3172b6cef0dcee4a8442418965a35c60e1678f5476266b2b779b7d026ad4d4105be52ebc3840b0197181cc3b132eed82f4c0509b4af4c6fbf30fd61f7b57047499ed7d8069d675e744b9f233e52ab6b994173627b7c316278d313a0e2f4fed3188e13645150bba6b652f05593b0e71712fad937257c19f7d8889772d8b0ac12496d6a83981ff4a")
creat(&(0x7f0000000180)='./file0\x00', 0x8b)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

1.627811826s ago: executing program 5 (id=755):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)

1.089988987s ago: executing program 4 (id=762):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x101082, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x7d3, 0x9, 0xf909, 0x899d, 0x80, 0xfffffffb, 0x7, 0x10, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x1, 0x4000007}) (async)
syz_io_uring_setup(0x4c92, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0xfffffd, 0x20000}, 0x0, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000006a2ddcf6177a88644510001f0000002100069078000000474129e7d240369422", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405000090780000"], 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 64)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
r2 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\x01\x00\x00\x00\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xbaL\xd3#\x87|J\xb9\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\x00\x00\x00\x00\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9Z\xd9G\xb6K[\x94\xfd^\xdd\x04\xa1\x83U\x900}!\x8b\x0e,M\xc0D\x15\x02\xde\xda', 0x0)
fallocate(r2, 0x0, 0x0, 0x400001) (async)
ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x100000001}) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1.088757282s ago: executing program 4 (id=764):
r0 = socket$caif_stream(0x25, 0x1, 0x4)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0)
r2 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, r2, 0x0, 0x8, 'syz1\x00', 0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, <r3=>0x0}, &(0x7f00000003c0)=0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00')
getdents64(r5, &(0x7f00000000c0)=""/44, 0x2c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf000000957519fe8f83e0a5435397c73442ab218361cc33cb8dccb465567adf499ec3ef76876be01d11aaca69278790619784b68fa1f796acd18ac2d5ee6d9eaf2ba0faac6d9c68020e54eb22b79bd02830ba2d13d021b404f12116000fd9ae23a4e098f681214b8d7cf3cd56353f209943d707"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94)
mknod(&(0x7f00000000c0)='./file0\x00', 0x100, 0xef)
mknod(&(0x7f0000000400)='./file0\x00', 0x1, 0x8)
mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r3}}]})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
fadvise64(r6, 0x5851, 0x0, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffef0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r7, @ANYRES64=r7, @ANYRES8=r7, @ANYRESOCT=r7], 0x98}}, 0x44015)

1.02840234s ago: executing program 4 (id=766):
r0 = socket$inet6(0xa, 0x2, 0x0)
epoll_create(0x3)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000370429bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c0400000000003c0012800b000100697036746e6c00002c000280080008003200000014000200fc0100000000000000000000000000e306000f00010000e4a2d5ff80"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x9c, 0x10, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x22028, 0x1000}, [@IFLA_MAP={0x24, 0xe, {0xd6, 0x3ff, 0x2, 0x0, 0x38, 0x3}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffff8}, @IFLA_MAP={0x24, 0xe, {0x5, 0x6, 0x89f9, 0x5, 0x7, 0x10}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'pim6reg0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x10, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x8}}}}]}, 0x38}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x1, {0x0, 0x1}, {0x74, 0x1}, @const={0x1, {0x15, 0x6, 0x2, 0x4}}})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0})
write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

959.60992ms ago: executing program 4 (id=767):
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0xf8ab8000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000040)=0x10, 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setpgid(0x0, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000840)=""/74, &(0x7f00000008c0)=0x4a)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$isdn(0x22, 0x2, 0x25)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x8, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x2090, 0x4)
sendto$inet6(r2, &(0x7f0000000900)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r4, 0x11c, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x10)
sendmsg$inet6(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='e', 0x1}], 0x1}, 0x8000)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
sendto$inet(r5, &(0x7f0000000980)="d7890fbb19d1352348389b2c8c1aff01ce0cc48a1c7ee9767f8f129e693ab916d465c3bb0584ce12378a58489a14e1607f51378a6f1b12b568d5e1249d357f6828b01dd519f4bac1bc7545c7f58526fd0a0e7595181da1ae65ae6d7e6137f06c6b8b6e301b", 0x65, 0x4, &(0x7f0000000a00)={0x2, 0x4e21, @private=0xa010101}, 0x10)
recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/225, 0xe1}], 0x2, &(0x7f00000002c0)=""/230, 0xe6}, 0x4}, {{&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000600)=""/226, 0xe2}], 0x3, &(0x7f0000000740)=""/69, 0x45}, 0x5}], 0x2, 0x102, 0x0)

898.452998ms ago: executing program 0 (id=768):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3e, 0x300, 0x0, 0xfc, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x2a, 0x0, @wg=@data={0x4, 0x1200, 0x0, "ec2ae930ccc5a412378e0b8e55e747a3556a"}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
getsockopt$rose(r0, 0x104, 0x2, 0x0, &(0x7f0000000040))

897.428471ms ago: executing program 0 (id=769):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r1=>0x0})
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x40086603, &(0x7f0000000040))
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r0, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600307000000892f143488a87f43055762cb80948864113b022543424aa608", 0x2f, 0x0, &(0x7f0000000a80)={0x11, 0x10, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

807.929519ms ago: executing program 0 (id=770):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
fcntl$setlease(r0, 0x400, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
recvfrom$inet6(r0, &(0x7f0000000180)=""/67, 0x43, 0x142, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x1, 0xf000, 0x2000, &(0x7f0000fee000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000280)="9aa2000000a800c42ecad965411010e1bdd476e10f01ca0f01cab953090000b847da0000ba000000000f3066b8e8000f00d80f785e00f3a6660f756a20", 0x3d}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x348, 0x348, 0xffffffff, 0x258, 0x550, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, 0x0, {[{{@ipv6={@mcast2, @dev, [], [], 'pimreg0\x00', 'veth0\x00', {}, {}, 0x0, 0x7}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @dev, @remote, @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @private1, @dev, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@loopback, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev, [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, @ipv4=@local, @port, @icmp_id}}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv4=@dev, @icmp_id}}}, {{@ipv6={@dev, @empty, [], [], 'pimreg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@loopback, @icmp_id, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffda4)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
listen(r0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
fcntl$setlease(r0, 0x400, 0x1) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) (async)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) (async)
recvfrom$inet6(r0, &(0x7f0000000180)=""/67, 0x43, 0x142, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x1, 0xf000, 0x2000, &(0x7f0000fee000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000280)="9aa2000000a800c42ecad965411010e1bdd476e10f01ca0f01cab953090000b847da0000ba000000000f3066b8e8000f00d80f785e00f3a6660f756a20", 0x3d}], 0x1, 0x4, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x348, 0x348, 0xffffffff, 0x258, 0x550, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, 0x0, {[{{@ipv6={@mcast2, @dev, [], [], 'pimreg0\x00', 'veth0\x00', {}, {}, 0x0, 0x7}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @dev, @remote, @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @private1, @dev, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@loopback, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev, [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, @ipv4=@local, @port, @icmp_id}}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv4=@dev, @icmp_id}}}, {{@ipv6={@dev, @empty, [], [], 'pimreg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@loopback, @icmp_id, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffda4) (async)

807.309385ms ago: executing program 5 (id=771):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4140aecd, &(0x7f00000000c0))
r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r5, 0x5, 0x4c1, 0x50, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)

629.845418ms ago: executing program 0 (id=772):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x1, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x9d, 0x33}) (async)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"c7e08268beaed10b3d14894bf9b6d42bdb325094f0a0f1b3dfea84f454bc5050", 0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) (async)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3) (async)
ptrace$setregset(0x4205, r3, 0x204, &(0x7f00000000c0)={0x0}) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, &(0x7f0000000040)) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @local}, 0x10) (async)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="2716157f3354"}, 0x10)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x66240, 0x0) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.log\x00', 0x400041, 0x80) (async, rerun: 64)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x42442, 0x0) (rerun: 64)
ioctl$COMEDI_INSNLIST(r9, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000185780)=[{0x8000001, 0x0, 0x0, 0x0, 0x3}]}) (async)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r1, r2, r4, r7, r8, r9], 0x6) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0x6, <r10=>0x0})
ioctl$DRM_IOCTL_SG_ALLOC(r7, 0xc0106438, &(0x7f0000000300)={0x5, r10})
r11 = socket$inet6(0xa, 0x80002, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}, 0x1c) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x18, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) (async, rerun: 32)
ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x2, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x3, 0x3, 0x100, 0x0, 0x0, [0x1]}) (async, rerun: 32)
sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

559.60761ms ago: executing program 5 (id=773):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xf0}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)

557.318395ms ago: executing program 0 (id=774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003c0007012bbd7000fbdbdf25037c000004000f80"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x80, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000600000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000001440)=0x9)
read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000040)={[{@memory_recursiveprot}]})
setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4)
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f00000020c0)='./file1\x00', 0x48)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./bus\x00')

447.862571ms ago: executing program 5 (id=775):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x88, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x69, 0x5b, "b569776cea99f96907983f6005516439dff9170c25510c1a04dbfae561dd89cc4cb69d78248ce66055b93f29edd64674f8a57c364f9a391d05bdc0f8bf24954474c6e990b4059b5d3b0d87921e41d400f0c44326a7a238e910e5e718f3b881c759c7019cad"}]}, 0x88}, 0x1, 0x0, 0x0, 0xc38bbfcbb6523ced}, 0x10)
socket(0x2c, 0x3, 0x0)
socket(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00'})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20)

359.937523ms ago: executing program 5 (id=776):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x100, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4048084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
close(r4)
write$UHID_CREATE2(r5, 0x0, 0x1d8)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @mcast2, 0x6}, 0x1c)
listen(r3, 0x5)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000003c0)=0xe55d, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000ff000000080045ff01280066000005069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50106071907800e7"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpid()
r8 = getpgrp(r7)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c)
r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
read(r10, &(0x7f00000001c0)=""/36, 0x24)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x5, 0x14, 0x0, &(0x7f0000000440)="259a53f271a76d2686dd4c5488a8f4b9ff8a58c1", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000040)=0x3)
fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x0, r8})

159.82583ms ago: executing program 0 (id=777):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) (async, rerun: 32)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async, rerun: 32)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ldst={0x3, 0x3, 0x0, 0x8, 0x8, 0x10, 0xfffffffffffffffc}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x89, &(0x7f0000000140)=""/137, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x6, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x1, 0x4, 0xd, 0x7}, {0x5, 0x4, 0x10, 0x1}, {0x3, 0x1, 0x8, 0x1}, {0x0, 0x4, 0x10, 0x2}, {0x1, 0x2, 0xa, 0x3}, {0x3, 0x1, 0x7, 0x8}, {0x1, 0x5, 0xc, 0x6}, {0x0, 0x3, 0xe, 0x1}, {0x0, 0x3, 0xd, 0x6}, {0x1, 0x3}], 0x10, 0x5}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4)

79.895171ms ago: executing program 4 (id=778):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) (async)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x80000001, 0xfff, 0x10000, 0x2})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "2d1e2533e54f297a"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x404c0c0)

0s ago: executing program 4 (id=779):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe55}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x20000008, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

200!!!
[   65.040591][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.046425][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   65.149912][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.156747][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.212499][ T6985] syz.3.270 (6985): drop_caches: 2
[   65.417582][ T7002] __nla_validate_parse: 3 callbacks suppressed
[   65.417660][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.3.274'.
[   65.718297][ T7018] netlink: 'syz.0.280': attribute type 7 has an invalid length.
[   65.729957][ T7018] : entered promiscuous mode
[   66.106988][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   66.138340][   T40] kauditd_printk_skb: 505 callbacks suppressed
[   66.138380][   T40] audit: type=1400 audit(1752720305.769:900): avc:  denied  { bind } for  pid=7060 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.138749][ T7061] Bluetooth: MGMT ver 1.23
[   66.154012][   T40] audit: type=1400 audit(1752720305.779:901): avc:  denied  { create } for  pid=7060 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   66.167714][   T40] audit: type=1400 audit(1752720305.799:902): avc:  denied  { sys_admin } for  pid=7060 comm="syz.0.290" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   66.221352][   T40] audit: type=1400 audit(1752720305.849:903): avc:  denied  { shutdown } for  pid=7066 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.243748][ T7077] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   66.357336][ T7088] tc_dump_action: action bad kind
[   66.386640][   T40] audit: type=1400 audit(1752720306.009:904): avc:  denied  { read } for  pid=7079 comm="syz.1.295" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   66.392300][ T7099] fuse: Unknown parameter 'f	'
[   66.398492][   T40] audit: type=1400 audit(1752720306.009:905): avc:  denied  { open } for  pid=7079 comm="syz.1.295" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   66.410362][ T7099] netlink: 'syz.0.299': attribute type 10 has an invalid length.
[   66.415021][ T7099] lo: entered promiscuous mode
[   66.415995][ T7098] binder: 7079:7098 ioctl c0306201 200000000140 returned -11
[   66.420342][ T7099] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   66.422563][   T40] audit: type=1400 audit(1752720306.029:906): avc:  denied  { ioctl } for  pid=7079 comm="syz.1.295" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   66.442109][   T40] audit: type=1400 audit(1752720306.029:907): avc:  denied  { set_context_mgr } for  pid=7079 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   66.451493][   T40] audit: type=1400 audit(1752720306.069:908): avc:  denied  { mount } for  pid=7100 comm="syz.2.300" name="/" dev="configfs" ino=3269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   66.459890][ T7102] No such timeout policy "syz0"
[   66.468698][ T7102] team0: Device gtp0 is of different type
[   66.517311][ T7110] No such timeout policy "syz0"
[   66.525953][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[   66.530715][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'.
[   66.535016][ T7106] netlink: 'syz.0.302': attribute type 12 has an invalid length.
[   66.632973][   T40] audit: type=1400 audit(1752720306.259:909): avc:  denied  { setattr } for  pid=7120 comm="syz.3.306" name="[io_uring]" dev="anon_inodefs" ino=16558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   66.754232][ T7141] tmpfs: Unknown parameter '18446744073709551615'
[   66.796082][ T7147] tmpfs: Unknown parameter '18446744073709551615'
[   66.809429][ T7137] @: renamed from vlan0 (while UP)
[   66.894104][ T7168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.317'.
[   67.202698][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'.
[   67.230039][ T7197] erofs (device nbd3): cannot find valid erofs superblock
[   67.321477][ T7200] cgroup: Invalid name
[   67.322972][ T7200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7200 comm=syz.3.325
[   67.323026][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7202 comm=syz.3.325
[   67.330612][ T7202] netlink: 'syz.3.325': attribute type 9 has an invalid length.
[   67.333324][ T7200] netlink: 'syz.3.325': attribute type 9 has an invalid length.
[   67.603166][ T7204] capability: warning: `syz.2.326' uses 32-bit capabilities (legacy support in use)
[   68.186377][ T5962] Bluetooth: hci3: command 0x0405 tx timeout
[   69.226312][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout
[   69.226323][ T7185] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   70.115788][ T7185] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   70.120886][ T7185] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   70.124773][ T7185] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   70.126744][ T7185] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   70.129625][ T7185] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   70.132824][ T7185] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   70.134708][ T7185] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   70.137891][ T7185] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   70.141147][ T7185] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   70.143108][ T7185] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   70.157165][ T7185] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   70.285582][ T7220] sock: sock_set_timeout: `syz.0.330' (pid 7220) tries to set negative timeout
[   70.337006][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[   70.375513][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'.
[   70.381072][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'.
[   70.382220][ T7237] fuse: Bad value for 'fd'
[   70.411203][ T7237] 9pnet_fd: Insufficient options for proto=fd
[   70.539010][ T7252] capability: warning: `syz.1.337' uses deprecated v2 capabilities in a way that may be insecure
[   70.567778][ T7256] netlink: 'syz.1.338': attribute type 4 has an invalid length.
[   70.869412][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   71.070926][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[   71.073331][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[   71.074791][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'.
[   71.250339][   T40] kauditd_printk_skb: 19 callbacks suppressed
[   71.250351][   T40] audit: type=1400 audit(1752720310.879:929): avc:  denied  { bind } for  pid=7297 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.281278][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   71.316721][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout
[   71.319908][ T7302] tipc: Failed to remove unknown binding: 66,1,1/0:1753189283/1753189285
[   71.323389][ T7302] tipc: Failed to remove unknown binding: 66,1,1/0:1753189283/1753189285
[   71.417036][   T40] audit: type=1400 audit(1752720311.049:930): avc:  denied  { append } for  pid=7313 comm="syz.1.354" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   71.457102][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'.
[   72.186397][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout
[   72.187146][ T5962] Bluetooth: hci3: command 0x0405 tx timeout
[   72.262029][   T40] audit: type=1400 audit(1752720311.889:931): avc:  denied  { listen } for  pid=7320 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   72.290491][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'.
[   72.321265][ T7325] devtmpfs: Cannot change global quota limit on remount
[   72.326763][ T5959] Bluetooth: hci1: unexpected event for opcode 0x0c56
[   72.329107][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'.
[   72.359335][ T7331] tipc: Started in network mode
[   72.361405][ T7331] tipc: Node identity ac14140f, cluster identity 4711
[   72.364440][ T7331] tipc: New replicast peer: 172.30.0.2
[   72.367298][ T7331] tipc: Enabled bearer <udp:syz2>, priority 10
[   72.370182][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'.
[   72.375027][ T7331] tipc: Disabling bearer <udp:syz2>
[   72.419772][   T40] audit: type=1400 audit(1752720312.049:932): avc:  denied  { connect } for  pid=7336 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   72.433784][ T7339] 9pnet_fd: Insufficient options for proto=fd
[   72.462193][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'.
[   72.498597][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'.
[   72.559070][ T7352] sctp: [Deprecated]: syz.0.368 (pid 7352) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.559070][ T7352] Use struct sctp_sack_info instead
[   72.611671][ T7361] Bluetooth: hci4: Frame reassembly failed (-84)
[   72.703375][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'.
[   72.779555][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'.
[   72.841391][ T7379] team0 (unregistering): Port device team_slave_0 removed
[   72.850130][ T7379] team0 (unregistering): Port device team_slave_1 removed
[   73.030398][   T40] audit: type=1400 audit(1752720312.659:933): avc:  denied  { mount } for  pid=7381 comm="syz.1.376" name="/" dev="rpc_pipefs" ino=17542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   73.119930][ T7390] openvswitch: netlink: Duplicate key (type 0).
[   73.263936][   T40] audit: type=1400 audit(1752720312.889:934): avc:  denied  { module_request } for  pid=7394 comm="syz.1.379" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   73.386326][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout
[   73.555907][ T7410] netlink: 'syz.1.383': attribute type 10 has an invalid length.
[   73.559143][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.383'.
[   73.562558][ T7410] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.565332][ T7410] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.568549][ T7410] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.571295][ T7410] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.576978][ T7410] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   73.642967][ T7416] devtmpfs: Cannot change global quota limit on remount
[   73.645652][ T5962] Bluetooth: hci1: unexpected event for opcode 0x0c56
[   73.872300][   T40] audit: type=1400 audit(1752720313.499:935): avc:  denied  { shutdown } for  pid=7426 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   73.903546][ T7429] netlink: 'syz.1.390': attribute type 21 has an invalid length.
[   74.054965][ T7440] devtmpfs: Cannot change global quota limit on remount
[   74.058310][ T5962] Bluetooth: hci1: unexpected event for opcode 0x0c56
[   74.071698][ T7438] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[   74.096875][ T7438] syzkaller0: entered allmulticast mode
[   74.119403][   T40] audit: type=1400 audit(1752720313.749:936): avc:  denied  { accept } for  pid=7443 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   74.134328][ T7444] netlink: 'syz.1.395': attribute type 21 has an invalid length.
[   74.137106][ T7444] netlink: 'syz.1.395': attribute type 4 has an invalid length.
[   74.139739][ T7444] netlink: 'syz.1.395': attribute type 5 has an invalid length.
[   74.218634][ T7437] syzkaller0: left allmulticast mode
[   74.266839][ T5962] Bluetooth: hci3: command 0x0405 tx timeout
[   74.405619][   T40] audit: type=1400 audit(1752720314.029:937): avc:  denied  { mount } for  pid=7449 comm="syz.2.397" name="/" dev="ramfs" ino=17678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   74.424522][   T40] audit: type=1400 audit(1752720314.049:938): avc:  denied  { unmount } for  pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   74.454778][ T7455] netlink: 'syz.2.398': attribute type 5 has an invalid length.
[   74.560068][ T7462] overlayfs: failed to resolve './file1': -2
[   74.642553][ T7466] random: crng reseeded on system resumption
[   74.666919][ T5962] Bluetooth: hci4: command 0x1003 tx timeout
[   74.669130][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   75.066676][ T6147] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   75.096904][ T7475] kernel read not supported for file /policy (pid: 7475 comm: syz.1.405)
[   75.198054][ T6147] usb 5-1: device descriptor read/64, error -71
[   75.310957][ T7485] xt_cluster: node mask cannot exceed total number of nodes
[   75.436591][ T6147] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   75.566328][ T6147] usb 5-1: device descriptor read/64, error -71
[   75.646357][  T836] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   75.653446][ T7493] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   75.687412][ T6147] usb usb5-port1: attempt power cycle
[   75.752459][ T7500] fuse: Bad value for 'fd'
[   75.807850][  T836] usb 6-1: too many configurations: 151, using maximum allowed: 8
[   75.821156][  T836] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[   75.824008][  T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[   75.827298][  T836] usb 6-1: Product: syz
[   75.829056][  T836] usb 6-1: Manufacturer: syz
[   75.831010][  T836] usb 6-1: SerialNumber: syz
[   75.838371][  T836] usb 6-1: config 0 descriptor??
[   76.036284][ T6147] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   76.045353][ T5959] Bluetooth: hci1: ACL packet for unknown connection handle 201
[   76.049073][  T837] usb 6-1: USB disconnect, device number 4
[   76.059908][ T6147] usb 5-1: device descriptor read/8, error -71
[   76.108251][ T7511] delete_channel: no stack
[   76.327509][ T6147] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   76.352117][ T7526] netlink: 'syz.3.422': attribute type 9 has an invalid length.
[   76.356466][ T5959] Bluetooth: hci3: command 0x0405 tx timeout
[   76.360040][ T6147] usb 5-1: device descriptor read/8, error -71
[   76.414897][ T7530] __nla_validate_parse: 7 callbacks suppressed
[   76.414908][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'.
[   76.422963][ T7530] overlayfs: failed to clone upperpath
[   76.467752][ T6147] usb usb5-port1: unable to enumerate USB device
[   76.515152][ T7533] netlink: 'syz.3.425': attribute type 1 has an invalid length.
[   76.517618][ T7533] netlink: 'syz.3.425': attribute type 2 has an invalid length.
[   76.520211][ T7533] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.425'.
[   76.625651][ T7539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   76.631090][ T7539] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   76.662805][ T7539] overlayfs: failed to look up (tracing) for ino (-66)
[   76.765954][   T40] kauditd_printk_skb: 3 callbacks suppressed
[   76.765965][   T40] audit: type=1400 audit(1752720316.389:942): avc:  denied  { write } for  pid=7547 comm="syz.1.429" lport=49230 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   77.859511][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'.
[   77.895988][   T40] audit: type=1400 audit(1752720317.519:943): avc:  denied  { bind } for  pid=7574 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   78.053415][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'.
[   78.119691][ T7585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=7 (14 ns) > initial count (8 ns). Using initial count to start timer.
[   78.178466][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.180509][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.182485][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.184489][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.186997][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.189128][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.191210][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.193280][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.195517][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.197916][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.200107][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.202066][ T7591] netlink: 'syz.3.442': attribute type 10 has an invalid length.
[   78.202179][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.206716][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.209347][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.211437][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.213425][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.215502][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.217834][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.219924][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.222026][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.224011][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.226043][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.228465][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.230464][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.232472][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.234558][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.237054][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.239091][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.241079][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.243164][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.245241][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.247782][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.249810][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.251845][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.253913][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.255930][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.258400][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.261750][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.264385][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.267218][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.269961][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.272649][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.275306][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.277920][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.279967][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.282413][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.285055][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.287854][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.289872][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.291893][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.293890][   T40] audit: type=1400 audit(1752720317.919:944): avc:  denied  { wake_alarm } for  pid=7592 comm="syz.0.443" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   78.293941][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.304302][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.306381][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.308397][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.310532][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.312527][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.314627][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.316687][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.318670][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.320609][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.322587][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.324591][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.326773][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.328773][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.329349][ T7599] 9pnet_virtio: no channels available for device syz
[   78.330844][ T7588] ieee802154 phy0 wpan0: encryption failed: -22
[   78.380880][ T7599] overlayfs: failed to clone upperpath
[   78.442885][   T40] audit: type=1400 audit(1752720318.069:945): avc:  denied  { watch watch_reads } for  pid=7608 comm="syz.3.449" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   78.451444][   T40] audit: type=1326 audit(1752720318.069:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.3.449" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08be98e929 code=0x0
[   78.492394][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[   78.495237][ T7612] ipvlan0: default FDB implementation only supports local addresses
[   78.654382][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[   78.657398][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'.
[   78.690449][ T7616] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[   78.807505][   T40] audit: type=1400 audit(1752720318.439:947): avc:  denied  { ioctl } for  pid=7617 comm="syz.1.452" path="socket:[20499]" dev="sockfs" ino=20499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   78.814589][   T40] audit: type=1400 audit(1752720318.439:948): avc:  denied  { ioctl } for  pid=7617 comm="syz.1.452" path="socket:[20499]" dev="sockfs" ino=20499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   78.893537][ T7625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.899620][ T7625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.903320][ T7625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.905968][ T7625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.909595][ T7625] geneve1: entered promiscuous mode
[   78.911320][ T7625] geneve1: entered allmulticast mode
[   78.914020][ T7625] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.917001][ T7625] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.919776][ T7625] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.922581][ T7625] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.944712][   T40] audit: type=1400 audit(1752720318.569:949): avc:  denied  { map } for  pid=7624 comm="syz.1.453" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   78.951935][   T40] audit: type=1400 audit(1752720318.569:950): avc:  denied  { execute } for  pid=7624 comm="syz.1.453" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   79.053054][   T40] audit: type=1400 audit(1752720318.679:951): avc:  denied  { bind } for  pid=7627 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   79.053264][ T7628] netlink: 'syz.1.454': attribute type 4 has an invalid length.
[   79.094870][ T7630] devtmpfs: Cannot change global quota limit on remount
[   79.097844][ T5959] Bluetooth: hci1: unexpected event for opcode 0x0c56
[   79.178104][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.211383][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.366335][ T1024] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[   79.539877][ T1024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.542964][ T1024] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[   79.545707][ T1024] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   79.548864][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.556698][ T1024] usb 5-1: config 0 descriptor??
[   79.561479][ T1024] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   79.563711][ T1024] dvb-usb: bulk message failed: -22 (3/0)
[   79.568502][ T1024] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   79.576077][ T1024] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   79.578501][ T1024] usb 5-1: media controller created
[   79.581304][ T1024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   79.588849][ T1024] dvb-usb: bulk message failed: -22 (6/0)
[   79.590743][ T1024] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   79.595628][ T1024] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input5
[   79.602649][ T1024] dvb-usb: schedule remote query interval to 150 msecs.
[   79.604964][ T1024] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   79.762359][ T7657] program syz.0.457 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.767684][ T1024] dvb-usb: bulk message failed: -22 (1/0)
[   79.769631][ T1024] dvb-usb: error while querying for an remote control event.
[   79.770533][  T836] usb 5-1: USB disconnect, device number 9
[   79.792854][  T836] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   79.796624][ T6147] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   79.936580][ T6147] usb 6-1: device descriptor read/64, error -71
[   79.969871][ T7660] overlayfs: failed to clone upperpath
[   79.973090][ T7662] overlayfs: failed to clone upperpath
[   80.021587][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   80.176303][ T6147] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   80.316359][ T6147] usb 6-1: device descriptor read/64, error -71
[   80.426947][ T6147] usb usb6-port1: attempt power cycle
[   80.766286][ T6147] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   80.786718][ T6147] usb 6-1: device descriptor read/8, error -71
[   81.036401][ T6147] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   81.066827][ T6147] usb 6-1: device descriptor read/8, error -71
[   81.176499][ T6147] usb usb6-port1: unable to enumerate USB device
[   81.307991][ T1339] cfg80211: failed to load regulatory.db
[   81.372589][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'.
[   81.458519][ T7694] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   81.631082][ T7698] devtmpfs: Cannot change global quota limit on remount
[   81.634425][ T5959] Bluetooth: hci0: unexpected event for opcode 0x0c56
[   81.737929][ T7705] usb usb9: usbfs: process 7705 (syz.0.479) did not claim interface 0 before use
[   81.774761][ T5959] Bluetooth: hci0: ACL packet for unknown connection handle 200
[   81.899260][ T7714] kvm: emulating exchange as write
[   81.986487][ T7720] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) !
[   82.046972][ T7726] netlink: 'syz.3.485': attribute type 1 has an invalid length.
[   82.046994][ T7727] netlink: 'syz.3.485': attribute type 1 has an invalid length.
[   82.049394][ T7726] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.485'.
[   82.051819][ T7727] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.485'.
[   82.111600][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.114707][ T7734] batadv_slave_0: entered promiscuous mode
[   82.116432][   T40] kauditd_printk_skb: 9 callbacks suppressed
[   82.116441][   T40] audit: type=1400 audit(1752720321.739:961): avc:  denied  { watch_reads } for  pid=7735 comm="syz.3.488" path="/143" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   82.125645][   T40] audit: type=1400 audit(1752720321.749:962): avc:  denied  { write } for  pid=7732 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   82.132008][   T40] audit: type=1400 audit(1752720321.749:963): avc:  denied  { nlmsg_write } for  pid=7732 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   82.183194][   T40] audit: type=1400 audit(1752720321.809:964): avc:  denied  { write } for  pid=7743 comm="syz.0.490" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   82.183482][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[   82.195338][ T7744] netlink: 244 bytes leftover after parsing attributes in process `syz.0.490'.
[   82.229120][ T7748] devtmpfs: Cannot change global quota limit on remount
[   82.232376][ T5959] Bluetooth: hci0: unexpected event for opcode 0x0c56
[   82.262369][ T7753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   82.313729][ T7757] mmap: syz.0.494 (7757): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[   82.548854][   T40] audit: type=1400 audit(1752720322.179:965): avc:  denied  { mounton } for  pid=7767 comm="syz.0.497" path="/108/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   82.555808][ T7768] Device name not specified.
[   82.555808][ T7768] 
[   82.591701][   T40] audit: type=1400 audit(1752720322.219:966): avc:  denied  { setopt } for  pid=7779 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   82.594890][ T7782] devtmpfs: Cannot change global quota limit on remount
[   82.602072][ T5959] Bluetooth: hci0: unexpected event for opcode 0x0c56
[   82.695645][ T7797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5147 sclass=netlink_route_socket pid=7797 comm=syz.3.509
[   82.697369][   T40] audit: type=1400 audit(1752720322.329:967): avc:  denied  { ioctl } for  pid=7795 comm="syz.3.509" path="socket:[18130]" dev="sockfs" ino=18130 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   82.729628][ T7805] vlan0: entered promiscuous mode
[   82.732285][ T7805] vlan0: entered allmulticast mode
[   82.733907][ T7805] hsr_slave_1: entered allmulticast mode
[   82.750687][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'.
[   82.753371][ T7809] netlink: 'syz.1.513': attribute type 30 has an invalid length.
[   82.759818][ T7809] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.760260][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   82.762653][ T7809] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.768616][ T7809] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.771319][ T7809] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.803137][ T7813] netlink: 'syz.1.516': attribute type 1 has an invalid length.
[   82.827680][ T7813] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.850452][ T7820] netlink: 81 bytes leftover after parsing attributes in process `syz.3.517'.
[   82.853228][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'.
[   82.855948][ T7820] netlink: 332 bytes leftover after parsing attributes in process `syz.3.517'.
[   82.858921][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'.
[   82.863483][ T7820] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000
[   82.901182][ T7820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.903805][ T7820] IPv6: NLM_F_CREATE should be set when creating new route
[   82.906080][ T7820] IPv6: NLM_F_CREATE should be set when creating new route
[   82.916691][ T7820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.974054][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'.
[   83.038578][   T40] audit: type=1400 audit(1752720322.669:968): avc:  denied  { read write } for  pid=7838 comm="syz.0.523" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   83.045724][   T40] audit: type=1400 audit(1752720322.669:969): avc:  denied  { open } for  pid=7838 comm="syz.0.523" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   83.053667][   T40] audit: type=1400 audit(1752720322.669:970): avc:  denied  { write } for  pid=7836 comm="syz.1.524" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   83.078763][ T7833] team0: Port device team_slave_0 removed
[   83.108627][ T7841] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20003
[   83.164410][ T7847] netlink: 'syz.3.528': attribute type 3 has an invalid length.
[   83.293924][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   83.323479][ T7859] netdevsim netdevsim3: Direct firmware load for .
[   83.323479][ T7859]  failed with error -2
[   83.330089][ T7859] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[   83.330089][ T7859] 
[   83.370501][ T7864] tipc: Enabling of bearer <ud#:s> rejected, media not registered
[   83.377878][ T7864] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   83.696423][ T6147] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   85.344673][ T7883] devtmpfs: Cannot change global quota limit on remount
[   85.347417][ T5959] Bluetooth: hci1: unexpected event for opcode 0x0c56
[   86.460894][ T6147] usb 5-1: unable to get BOS descriptor or descriptor too short
[   86.465017][ T6147] usb 5-1: unable to read config index 0 descriptor/start: -71
[   86.467921][ T6147] usb 5-1: can't read configurations, error -71
[   86.504410][ T7887] netlink: 'syz.0.543': attribute type 10 has an invalid length.
[   86.504433][ T7888] netlink: 'syz.0.543': attribute type 10 has an invalid length.
[   86.534954][ T7887] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.583926][ T7903] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   86.589677][ T7903] Cannot find del_set index 0 as target
[   86.749238][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   86.812270][ T7929] geneve2: entered promiscuous mode
[   86.826447][ T7929] geneve2: entered allmulticast mode
[   87.239021][ T7943] team0: Device gtp0 is of different type
[   87.350603][ T7950] Sensor A: =================  START STATUS  =================
[   87.353038][ T7950] Sensor A: Test Pattern: 75% Colorbar
[   87.355271][ T7950] Sensor A: Show Information: All
[   87.359296][ T7950] Sensor A: Vertical Flip: false
[   87.360890][ T7950] Sensor A: Horizontal Flip: false
[   87.362528][ T7950] Sensor A: Brightness: 128
[   87.363995][ T7950] Sensor A: Contrast: 128
[   87.365369][ T7950] Sensor A: Hue: 0
[   87.367114][ T7950] Sensor A: Saturation: 128
[   87.368622][ T7950] Sensor A: ==================  END STATUS  ==================
[   87.379032][ T7953] trusted_key: syz.1.559 sent an empty control message without MSG_MORE.
[   87.434296][ T7958] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   87.463548][ T7963] __nla_validate_parse: 11 callbacks suppressed
[   87.463558][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'.
[   87.699879][   T40] kauditd_printk_skb: 7 callbacks suppressed
[   87.699890][   T40] audit: type=1400 audit(1752720327.329:978): avc:  denied  { lock } for  pid=7990 comm="syz.1.569" path="socket:[20012]" dev="sockfs" ino=20012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   87.719206][   T40] audit: type=1400 audit(1752720327.349:979): avc:  denied  { read } for  pid=7992 comm="syz.0.568" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   87.726857][   T40] audit: type=1400 audit(1752720327.359:980): avc:  denied  { open } for  pid=7992 comm="syz.0.568" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   87.786323][   T40] audit: type=1400 audit(1752720327.409:981): avc:  denied  { append } for  pid=7995 comm="syz.0.570" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   88.576729][ T8015] netlink: 'syz.3.574': attribute type 4 has an invalid length.
[   88.593862][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[   88.645361][ T8017] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   88.659726][   T40] audit: type=1400 audit(1752720328.289:982): avc:  denied  { create } for  pid=8018 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   88.670407][   T40] audit: type=1400 audit(1752720328.289:983): avc:  denied  { ioctl } for  pid=8018 comm="syz.3.576" path="socket:[18351]" dev="sockfs" ino=18351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   88.711465][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[   88.712122][   T40] audit: type=1400 audit(1752720328.349:984): avc:  denied  { write } for  pid=8018 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   89.389566][ T7913] syz.0.548 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   89.392698][ T7913] CPU: 1 UID: 0 PID: 7913 Comm: syz.0.548 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[   89.392713][ T7913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   89.392720][ T7913] Call Trace:
[   89.392724][ T7913]  <TASK>
[   89.392728][ T7913]  dump_stack_lvl+0x16c/0x1f0
[   89.392761][ T7913]  dump_header+0x101/0x930
[   89.392778][ T7913]  oom_kill_process+0x270/0xa60
[   89.392796][ T7913]  out_of_memory+0x350/0x1700
[   89.392814][ T7913]  ? __pfx_out_of_memory+0x10/0x10
[   89.392833][ T7913]  mem_cgroup_out_of_memory+0x118/0x130
[   89.392846][ T7913]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   89.392862][ T7913]  ? do_raw_spin_unlock+0x172/0x230
[   89.392878][ T7913]  try_charge_memcg+0x72b/0xd50
[   89.392896][ T7913]  ? __pfx_try_charge_memcg+0x10/0x10
[   89.392913][ T7913]  ? __print_lock_name+0x81/0xe0
[   89.392927][ T7913]  ? rcu_read_unlock+0x17/0x60
[   89.392948][ T7913]  charge_memcg+0x8a/0x230
[   89.392969][ T7913]  __mem_cgroup_charge+0x2b/0x1e0
[   89.392988][ T7913]  shmem_alloc_and_add_folio+0x514/0xc20
[   89.393006][ T7913]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   89.393021][ T7913]  ? shmem_allowable_huge_orders+0xcb/0x2f0
[   89.393038][ T7913]  shmem_get_folio_gfp+0x67f/0x1600
[   89.393055][ T7913]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   89.393070][ T7913]  ? __pte_offset_map_lock+0x174/0x310
[   89.393090][ T7913]  shmem_write_begin+0x160/0x300
[   89.393104][ T7913]  ? find_held_lock+0x2b/0x80
[   89.393118][ T7913]  ? __pfx_shmem_write_begin+0x10/0x10
[   89.393132][ T7913]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[   89.393144][ T7913]  ? __pfx_timestamp_truncate+0x10/0x10
[   89.393167][ T7913]  generic_perform_write+0x3d0/0x930
[   89.393186][ T7913]  ? __pfx_generic_perform_write+0x10/0x10
[   89.393201][ T7913]  ? inode_needs_update_time.part.0+0x191/0x270
[   89.393222][ T7913]  shmem_file_write_iter+0x10e/0x140
[   89.393239][ T7913]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   89.393255][ T7913]  __kernel_write_iter+0x31a/0xa90
[   89.393271][ T7913]  ? __pfx___kernel_write_iter+0x10/0x10
[   89.393285][ T7913]  ? __up_read+0x1f8/0x750
[   89.393298][ T7913]  ? dump_user_range+0x745/0xb60
[   89.393315][ T7913]  dump_user_range+0x41f/0xb60
[   89.393332][ T7913]  ? __pfx_dump_user_range+0x10/0x10
[   89.393346][ T7913]  ? elf_coredump_extra_notes_write+0xbd/0x4f0
[   89.393367][ T7913]  ? __pfx_writenote+0x10/0x10
[   89.393385][ T7913]  elf_core_dump+0x288a/0x3a90
[   89.393408][ T7913]  ? __pfx_elf_core_dump+0x10/0x10
[   89.393422][ T7913]  ? kasan_save_stack+0x42/0x60
[   89.393435][ T7913]  ? kasan_save_stack+0x33/0x60
[   89.393448][ T7913]  ? kasan_save_track+0x14/0x30
[   89.393461][ T7913]  ? __kasan_kmalloc+0xaa/0xb0
[   89.393474][ T7913]  ? do_coredump+0x1c9a/0x4f10
[   89.393486][ T7913]  ? get_signal+0x22e3/0x26d0
[   89.393499][ T7913]  ? arch_do_signal_or_restart+0x8f/0x7d0
[   89.393515][ T7913]  ? 0xffffffffff600000
[   89.393548][ T7913]  ? do_coredump+0x399f/0x4f10
[   89.393560][ T7913]  do_coredump+0x399f/0x4f10
[   89.393578][ T7913]  ? __pfx_do_coredump+0x10/0x10
[   89.393591][ T7913]  ? find_held_lock+0x2b/0x80
[   89.393606][ T7913]  ? is_bpf_text_address+0x8a/0x1a0
[   89.393621][ T7913]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   89.393637][ T7913]  ? is_bpf_text_address+0x94/0x1a0
[   89.393650][ T7913]  ? kernel_text_address+0x8d/0x100
[   89.393663][ T7913]  ? __kernel_text_address+0xd/0x40
[   89.393674][ T7913]  ? unwind_get_return_address+0x59/0xa0
[   89.393695][ T7913]  ? stack_depot_save_flags+0x28/0xa40
[   89.393711][ T7913]  ? __lock_acquire+0xb8a/0x1c90
[   89.393723][ T7913]  ? kasan_save_stack+0x42/0x60
[   89.393736][ T7913]  ? kasan_save_stack+0x33/0x60
[   89.393749][ T7913]  ? kasan_save_track+0x14/0x30
[   89.393761][ T7913]  ? kasan_save_free_info+0x3b/0x60
[   89.393772][ T7913]  ? __kasan_slab_free+0x51/0x70
[   89.393785][ T7913]  ? kmem_cache_free+0x2d1/0x4d0
[   89.393798][ T7913]  ? __sigqueue_free+0xba/0x2a0
[   89.393813][ T7913]  ? get_signal+0xcba/0x26d0
[   89.393826][ T7913]  ? arch_do_signal_or_restart+0x8f/0x7d0
[   89.393858][ T7913]  ? proc_coredump_connector+0x2d1/0x4f0
[   89.393871][ T7913]  ? __pfx_proc_coredump_connector+0x10/0x10
[   89.393887][ T7913]  ? rcu_is_watching+0x12/0xc0
[   89.393903][ T7913]  get_signal+0x22e3/0x26d0
[   89.393921][ T7913]  ? force_sig_fault+0xc4/0x100
[   89.393935][ T7913]  ? __pfx_get_signal+0x10/0x10
[   89.393953][ T7913]  arch_do_signal_or_restart+0x8f/0x7d0
[   89.393969][ T7913]  ? trace_irq_disable.constprop.0+0xd4/0x120
[   89.393983][ T7913]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   89.394005][ T7913]  irqentry_exit_to_user_mode+0x12a/0x270
[   89.394022][ T7913]  asm_exc_page_fault+0x26/0x30
[   89.394032][ T7913] RIP: 0033:0x0
[   89.394040][ T7913] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   89.394044][ T7913] RSP: 002b:00002000000003e8 EFLAGS: 00010217
[   89.394053][ T7913] RAX: 0000000000000000 RBX: 00007fad55db6080 RCX: 00007fad55b8e929
[   89.394060][ T7913] RDX: 00002000000002c0 RSI: 00002000000003e0 RDI: 0000000000000000
[   89.394066][ T7913] RBP: 00007fad55c10ca1 R08: 0000200000000440 R09: 0000200000000440
[   89.394073][ T7913] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000
[   89.394079][ T7913] R13: 0000000000000000 R14: 00007fad55db6080 R15: 00007ffed6157b18
[   89.394093][ T7913]  </TASK>
[   89.394097][ T7913] memory: usage 307200kB, limit 307200kB, failcnt 17410
[   89.494345][ T7913] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0
[   89.562773][ T7913] kmem: usage 5516kB, limit 9007199254740988kB, failcnt 0
[   89.565460][ T7913] Memory cgroup stats for /syz0:
[   89.565591][ T7913] cache 308654080
[   89.569088][ T7913] rss 90112
[   89.570118][ T7913] rss_huge 0
[   89.571162][ T7913] shmem 308654080
[   89.572315][ T7913] mapped_file 0
[   89.573422][ T7913] dirty 0
[   89.574566][ T7913] writeback 0
[   89.575637][ T7913] workingset_refault_anon 1031
[   89.577378][ T7913] workingset_refault_file 79
[   89.578832][ T7913] swap 127975424
[   89.579960][ T7913] swapcached 20480
[   89.581140][ T7913] pgpgin 142288
[   89.582235][ T7913] pgpgout 66911
[   89.583349][ T7913] pgfault 34037
[   89.584454][ T7913] pgmajfault 15
[   89.585558][ T7913] inactive_anon 144297984
[   89.587030][ T7913] active_anon 164392960
[   89.588342][ T7913] inactive_file 0
[   89.589496][ T7913] active_file 0
[   89.590598][ T7913] unevictable 0
[   89.591736][ T7913] hierarchical_memory_limit 314572800
[   89.593430][ T7913] hierarchical_memsw_limit 9223372036854771712
[   89.595350][ T7913] total_cache 308654080
[   89.596802][ T7913] total_rss 90112
[   89.597963][ T7913] total_rss_huge 0
[   89.599157][ T7913] total_shmem 308654080
[   89.600463][ T7913] total_mapped_file 0
[   89.601719][ T7913] total_dirty 0
[   89.602834][ T7913] total_writeback 0
[   89.604042][ T7913] total_workingset_refault_anon 1031
[   89.605680][ T7913] total_workingset_refault_file 79
[   89.608373][ T7913] total_swap 127975424
[   89.609734][ T7913] total_swapcached 20480
[   89.611014][ T7913] total_pgpgin 142288
[   89.612234][ T7913] total_pgpgout 66911
[   89.613485][ T7913] total_pgfault 34037
[   89.614766][ T7913] total_pgmajfault 15
[   89.616022][ T7913] total_inactive_anon 144297984
[   89.618210][ T7913] total_active_anon 164392960
[   89.619706][ T7913] total_inactive_file 0
[   89.621015][ T7913] total_active_file 0
[   89.622279][ T7913] total_unevictable 0
[   89.623542][ T7913] anon_cost 0
[   89.624598][ T7913] file_cost 0
[   89.625656][ T7913] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.548,pid=7923,uid=0
[   89.632043][ T7913] Memory cgroup out of memory: Killed process 7923 (syz.0.548) total-vm:98248kB, anon-rss:1088kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000
[   89.638617][   T40] audit: type=1400 audit(1752720329.269:985): avc:  denied  { execute } for  pid=8042 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   89.660986][ T8043] Bluetooth: MGMT ver 1.23
[   89.662817][   T40] audit: type=1400 audit(1752720329.269:986): avc:  denied  { execute_no_trans } for  pid=8042 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   89.731432][ T8043] netlink: 'syz.1.584': attribute type 10 has an invalid length.
[   89.763408][ T7934] syz.0.548 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   89.778073][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.0.548 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[   89.778090][ T7934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   89.778097][ T7934] Call Trace:
[   89.778101][ T7934]  <TASK>
[   89.778105][ T7934]  dump_stack_lvl+0x16c/0x1f0
[   89.778124][ T7934]  dump_header+0x101/0x930
[   89.778142][ T7934]  oom_kill_process+0x270/0xa60
[   89.778159][ T7934]  out_of_memory+0x350/0x1700
[   89.778177][ T7934]  ? __pfx_out_of_memory+0x10/0x10
[   89.778197][ T7934]  mem_cgroup_out_of_memory+0x118/0x130
[   89.778210][ T7934]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   89.778225][ T7934]  ? do_raw_spin_unlock+0x172/0x230
[   89.778242][ T7934]  try_charge_memcg+0x72b/0xd50
[   89.778261][ T7934]  ? __pfx_try_charge_memcg+0x10/0x10
[   89.778277][ T7934]  ? __print_lock_name+0x81/0xe0
[   89.778292][ T7934]  ? rcu_read_unlock+0x17/0x60
[   89.778313][ T7934]  charge_memcg+0x8a/0x230
[   89.778329][ T7934]  __mem_cgroup_charge+0x2b/0x1e0
[   89.778347][ T7934]  shmem_alloc_and_add_folio+0x514/0xc20
[   89.778365][ T7934]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   89.778380][ T7934]  ? shmem_allowable_huge_orders+0xcb/0x2f0
[   89.778397][ T7934]  shmem_get_folio_gfp+0x67f/0x1600
[   89.778414][ T7934]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   89.778429][ T7934]  ? __pte_offset_map_lock+0x174/0x310
[   89.778449][ T7934]  shmem_write_begin+0x160/0x300
[   89.778463][ T7934]  ? find_held_lock+0x2b/0x80
[   89.778476][ T7934]  ? __pfx_shmem_write_begin+0x10/0x10
[   89.778491][ T7934]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[   89.778502][ T7934]  ? __pfx_timestamp_truncate+0x10/0x10
[   89.778521][ T7934]  generic_perform_write+0x3d0/0x930
[   89.778540][ T7934]  ? __pfx_generic_perform_write+0x10/0x10
[   89.778554][ T7934]  ? inode_needs_update_time.part.0+0x191/0x270
[   89.778576][ T7934]  shmem_file_write_iter+0x10e/0x140
[   89.778593][ T7934]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   89.778608][ T7934]  __kernel_write_iter+0x31a/0xa90
[   89.778624][ T7934]  ? __pfx___kernel_write_iter+0x10/0x10
[   89.778638][ T7934]  ? __up_read+0x1f8/0x750
[   89.778652][ T7934]  ? dump_user_range+0x745/0xb60
[   89.778669][ T7934]  dump_user_range+0x41f/0xb60
[   89.778685][ T7934]  ? __pfx_dump_user_range+0x10/0x10
[   89.778700][ T7934]  ? elf_coredump_extra_notes_write+0xbd/0x4f0
[   89.778721][ T7934]  ? __pfx_writenote+0x10/0x10
[   89.778758][ T7934]  elf_core_dump+0x288a/0x3a90
[   89.778781][ T7934]  ? __pfx_elf_core_dump+0x10/0x10
[   89.778795][ T7934]  ? kasan_save_stack+0x42/0x60
[   89.778808][ T7934]  ? kasan_save_stack+0x33/0x60
[   89.778821][ T7934]  ? kasan_save_track+0x14/0x30
[   89.778834][ T7934]  ? __kasan_kmalloc+0xaa/0xb0
[   89.778848][ T7934]  ? do_coredump+0x1c9a/0x4f10
[   89.778870][ T7934]  ? get_signal+0x22e3/0x26d0
[   89.778885][ T7934]  ? arch_do_signal_or_restart+0x8f/0x7d0
[   89.778901][ T7934]  ? 0xffffffffff600000
[   89.778936][ T7934]  ? do_coredump+0x399f/0x4f10
[   89.778948][ T7934]  do_coredump+0x399f/0x4f10
[   89.778967][ T7934]  ? __pfx_do_coredump+0x10/0x10
[   89.778980][ T7934]  ? find_held_lock+0x2b/0x80
[   89.778995][ T7934]  ? is_bpf_text_address+0x8a/0x1a0
[   89.779013][ T7934]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   89.779030][ T7934]  ? is_bpf_text_address+0x94/0x1a0
[   89.779043][ T7934]  ? kernel_text_address+0x8d/0x100
[   89.779056][ T7934]  ? __kernel_text_address+0xd/0x40
[   89.779068][ T7934]  ? unwind_get_return_address+0x59/0xa0
[   89.779088][ T7934]  ? stack_depot_save_flags+0x28/0xa40
[   89.779105][ T7934]  ? __lock_acquire+0xb8a/0x1c90
[   89.779117][ T7934]  ? kasan_save_stack+0x42/0x60
[   89.779130][ T7934]  ? kasan_save_stack+0x33/0x60
[   89.779143][ T7934]  ? kasan_save_track+0x14/0x30
[   89.779156][ T7934]  ? kasan_save_free_info+0x3b/0x60
[   89.779167][ T7934]  ? __kasan_slab_free+0x51/0x70
[   89.779181][ T7934]  ? kmem_cache_free+0x2d1/0x4d0
[   89.779194][ T7934]  ? __sigqueue_free+0xba/0x2a0
[   89.779209][ T7934]  ? get_signal+0xcba/0x26d0
[   89.779222][ T7934]  ? arch_do_signal_or_restart+0x8f/0x7d0
[   89.779256][ T7934]  ? proc_coredump_connector+0x2d1/0x4f0
[   89.779269][ T7934]  ? __pfx_proc_coredump_connector+0x10/0x10
[   89.779284][ T7934]  ? rcu_is_watching+0x12/0xc0
[   89.779302][ T7934]  get_signal+0x22e3/0x26d0
[   89.779319][ T7934]  ? force_sig_fault+0xc4/0x100
[   89.779334][ T7934]  ? __pfx_get_signal+0x10/0x10
[   89.779352][ T7934]  arch_do_signal_or_restart+0x8f/0x7d0
[   89.779365][ T7934]  ? trace_irq_disable.constprop.0+0xd4/0x120
[   89.779378][ T7934]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   89.779401][ T7934]  irqentry_exit_to_user_mode+0x12a/0x270
[   89.779419][ T7934]  asm_exc_page_fault+0x26/0x30
[   89.779429][ T7934] RIP: 0033:0x0
[   89.779437][ T7934] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   89.779441][ T7934] RSP: 002b:00002000000003e8 EFLAGS: 00010217
[   89.779451][ T7934] RAX: 0000000000000000 RBX: 00007fad55db6080 RCX: 00007fad55b8e929
[   89.779457][ T7934] RDX: 00002000000002c0 RSI: 00002000000003e0 RDI: 0000000000000000
[   89.779464][ T7934] RBP: 00007fad55c10ca1 R08: 0000200000000440 R09: 0000200000000440
[   89.779470][ T7934] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000
[   89.779477][ T7934] R13: 0000000000000000 R14: 00007fad55db6080 R15: 00007ffed6157b18
[   89.779491][ T7934]  </TASK>
[   89.779571][ T7934] memory: usage 307200kB, limit 307200kB, failcnt 18301
[   89.800295][ T5962] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   89.805769][ T5313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.841975][ T7934] memory+swap: usage 418264kB, limit 9007199254740988kB, failcnt 0
[   89.844830][ T5313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.850260][ T7934] kmem: usage 5532kB, limit 9007199254740988kB, failcnt 0
[   89.851642][ T5313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.852319][ T7934] Memory cgroup stats for 
[   89.854358][ T5313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.855428][ T7934] /syz0
[   89.857786][ T5313] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.859573][ T7934] :
[   89.896982][ T7923] syz.0.548 (7923) used greatest stack depth: 19096 bytes left
[   89.966931][ T7934] cache 308695040
[   89.968577][ T7934] rss 151552
[   89.969625][ T7934] rss_huge 0
[   89.970668][ T7934] shmem 308695040
[   89.971853][ T7934] mapped_file 0
[   89.972966][ T7934] dirty 0
[   89.973924][ T7934] writeback 0
[   89.975009][ T7934] workingset_refault_anon 1031
[   89.976878][ T7934] workingset_refault_file 226
[   89.978872][ T7934] swap 127975424
[   89.980401][ T7934] swapcached 20480
[   89.982011][ T7934] pgpgin 151957
[   89.983524][ T7934] pgpgout 76555
[   89.985078][ T7934] pgfault 34216
[   89.988213][ T7934] pgmajfault 18
[   89.989732][ T7934] inactive_anon 68030464
[   89.991546][ T7934] active_anon 240758784
[   89.993300][ T7934] inactive_file 0
[   89.994865][ T7934] active_file 0
[   89.996931][ T7934] unevictable 0
[   89.998441][ T7934] hierarchical_memory_limit 314572800
[   90.000749][ T7934] hierarchical_memsw_limit 9223372036854771712
[   90.003356][ T7934] total_cache 308695040
[   90.005106][ T7934] total_rss 151552
[   90.007362][ T7934] total_rss_huge 0
[   90.008984][ T7934] total_shmem 308695040
[   90.010768][ T7934] total_mapped_file 0
[   90.012503][ T7934] total_dirty 0
[   90.014018][ T7934] total_writeback 0
[   90.015703][ T7934] total_workingset_refault_anon 1031
[   90.021837][ T7934] total_workingset_refault_file 226
[   90.024088][ T7934] total_swap 127975424
[   90.025831][ T7934] total_swapcached 20480
[   90.028120][ T7934] total_pgpgin 151957
[   90.029863][ T7934] total_pgpgout 76555
[   90.031598][ T7934] total_pgfault 34216
[   90.033208][ T7934] total_pgmajfault 18
[   90.034936][ T7934] total_inactive_anon 68030464
[   90.039517][ T7934] total_active_anon 240758784
[   90.041472][ T7934] total_inactive_file 0
[   90.043243][ T7934] total_active_file 0
[   90.044853][ T7934] total_unevictable 0
[   90.046618][ T7934] anon_cost 0
[   90.048065][ T7934] file_cost 0
[   90.049478][ T7934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.548,pid=7920,uid=0
[   90.055034][ T7934] Memory cgroup out of memory: Killed process 7920 (syz.0.548) total-vm:98116kB, anon-rss:960kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000
[   90.119736][ T8054] chnl_net:caif_netlink_parms(): no params data found
[   90.138156][   T40] audit: type=1400 audit(1752720329.769:987): avc:  denied  { accept } for  pid=8074 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   90.231591][ T7934] syz.0.548 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   90.234664][ T7934] CPU: 1 UID: 0 PID: 7934 Comm: syz.0.548 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[   90.234678][ T7934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   90.234685][ T7934] Call Trace:
[   90.234689][ T7934]  <TASK>
[   90.234693][ T7934]  dump_stack_lvl+0x16c/0x1f0
[   90.234713][ T7934]  dump_header+0x101/0x930
[   90.234748][ T7934]  oom_kill_process+0x270/0xa60
[   90.234765][ T7934]  out_of_memory+0x350/0x1700
[   90.234783][ T7934]  ? __pfx_out_of_memory+0x10/0x10
[   90.234802][ T7934]  mem_cgroup_out_of_memory+0x118/0x130
[   90.234815][ T7934]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   90.234831][ T7934]  ? do_raw_spin_unlock+0x172/0x230
[   90.234847][ T7934]  try_charge_memcg+0x72b/0xd50
[   90.234866][ T7934]  ? __pfx_try_charge_memcg+0x10/0x10
[   90.234882][ T7934]  ? __print_lock_name+0x81/0xe0
[   90.234897][ T7934]  ? rcu_read_unlock+0x17/0x60
[   90.234917][ T7934]  charge_memcg+0x8a/0x230
[   90.234933][ T7934]  __mem_cgroup_charge+0x2b/0x1e0
[   90.234952][ T7934]  shmem_alloc_and_add_folio+0x514/0xc20
[   90.234970][ T7934]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   90.234986][ T7934]  ? shmem_allowable_huge_orders+0xcb/0x2f0
[   90.235002][ T7934]  shmem_get_folio_gfp+0x67f/0x1600
[   90.235019][ T7934]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   90.235035][ T7934]  ? __pte_offset_map_lock+0x174/0x310
[   90.235054][ T7934]  shmem_write_begin+0x160/0x300
[   90.235068][ T7934]  ? find_held_lock+0x2b/0x80
[   90.235081][ T7934]  ? __pfx_shmem_write_begin+0x10/0x10
[   90.235096][ T7934]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[   90.235108][ T7934]  ? __pfx_timestamp_truncate+0x10/0x10
[   90.235128][ T7934]  generic_perform_write+0x3d0/0x930
[   90.235146][ T7934]  ? __pfx_generic_perform_write+0x10/0x10
[   90.235161][ T7934]  ? inode_needs_update_time.part.0+0x191/0x270
[   90.235182][ T7934]  shmem_file_write_iter+0x10e/0x140
[   90.235199][ T7934]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   90.235215][ T7934]  __kernel_write_iter+0x31a/0xa90
[   90.235231][ T7934]  ? __pfx___kernel_write_iter+0x10/0x10
[   90.235245][ T7934]  ? __up_read+0x1f8/0x750
[   90.235262][ T7934]  ? dump_user_range+0x745/0xb60
[   90.235279][ T7934]  dump_user_range+0x41f/0xb60
[   90.235295][ T7934]  ? __pfx_dump_user_range+0x10/0x10
[   90.235310][ T7934]  ? elf_coredump_extra_notes_write+0xbd/0x4f0
[   90.235331][ T7934]  ? __pfx_writenote+0x10/0x10
[   90.235350][ T7934]  elf_core_dump+0x288a/0x3a90
[   90.235380][ T7934]  ? __pfx_elf_core_dump+0x10/0x10
[   90.235399][ T7934]  ? kasan_save_stack+0x42/0x60
[   90.235417][ T7934]  ? kasan_save_stack+0x33/0x60
[   90.235430][ T7934]  ? kasan_save_track+0x14/0x30
[   90.235443][ T7934]  ? __kasan_kmalloc+0xaa/0xb0
[   90.235456][ T7934]  ? do_coredump+0x1c9a/0x4f10
[   90.235468][ T7934]  ? get_signal+0x22e3/0x26d0
[   90.235482][ T7934]  ? arch_do_signal_or_restart+0x8f/0x7d0
[   90.235498][ T7934]  ? 0xffffffffff600000
[   90.235531][ T7934]  ? do_coredump+0x399f/0x4f10
[   90.235542][ T7934]  do_coredump+0x399f/0x4f10
[   90.235561][ T7934]  ? __pfx_do_coredump+0x10/0x10
[   90.235574][ T7934]  ? find_held_lock+0x2b/0x80
[   90.235588][ T7934]  ? is_bpf_text_address+0x8a/0x1a0
[   90.235603][ T7934]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   90.235620][ T7934]  ? is_bpf_text_address+0x94/0x1a0
[   90.235633][ T7934]  ? kernel_text_address+0x8d/0x100
[   90.235646][ T7934]  ? __kernel_text_address+0xd/0x40
[   90.235657][ T7934]  ? unwind_get_return_address+0x59/0xa0
[   90.235678][ T7934]  ? stack_depot_save_flags+0x28/0xa40
[   90.235695][ T7934]  ? __lock_acquire+0xb8a/0x1c90
[   90.235707][ T7934]  ? kasan_save_stack+0x42/0x60
[   90.235720][ T7934]  ? kasan_save_stack+0x33/0x60
[   90.235733][ T7934]  ? kasan_save_track+0x14/0x30
[   90.235746][ T7934]  ? kasan_save_free_info+0x3b/0x60
[   90.235756][ T7934]  ? __kasan_slab_free+0x51/0x70
[   90.235770][ T7934]  ? kmem_cache_free+0x2d1/0x4d0
[   90.235783][ T7934]  ? __sigqueue_free+0xba/0x2a0
[   90.235798][ T7934]  ? get_signal+0xcba/0x26d0
[   90.235811][ T7934]  ? arch_do_signal_or_restart+0x8f/0x7d0
[   90.235843][ T7934]  ? proc_coredump_connector+0x2d1/0x4f0
[   90.235856][ T7934]  ? __pfx_proc_coredump_connector+0x10/0x10
[   90.235871][ T7934]  ? rcu_is_watching+0x12/0xc0
[   90.235888][ T7934]  get_signal+0x22e3/0x26d0
[   90.235905][ T7934]  ? force_sig_fault+0xc4/0x100
[   90.235923][ T7934]  ? __pfx_get_signal+0x10/0x10
[   90.235948][ T7934]  arch_do_signal_or_restart+0x8f/0x7d0
[   90.235962][ T7934]  ? trace_irq_disable.constprop.0+0xd4/0x120
[   90.235976][ T7934]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   90.235998][ T7934]  irqentry_exit_to_user_mode+0x12a/0x270
[   90.236015][ T7934]  asm_exc_page_fault+0x26/0x30
[   90.236026][ T7934] RIP: 0033:0x0
[   90.236033][ T7934] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   90.236038][ T7934] RSP: 002b:00002000000003e8 EFLAGS: 00010217
[   90.236048][ T7934] RAX: 0000000000000000 RBX: 00007fad55db6080 RCX: 00007fad55b8e929
[   90.236054][ T7934] RDX: 00002000000002c0 RSI: 00002000000003e0 RDI: 0000000000000000
[   90.236061][ T7934] RBP: 00007fad55c10ca1 R08: 0000200000000440 R09: 0000200000000440
[   90.236067][ T7934] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000
[   90.236073][ T7934] R13: 0000000000000000 R14: 00007fad55db6080 R15: 00007ffed6157b18
[   90.236087][ T7934]  </TASK>
[   90.236092][ T7934] memory: usage 307036kB, limit 307200kB, failcnt 19676
[   90.429451][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.431620][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.433978][ T8054] bridge_slave_0: entered allmulticast mode
[   90.436623][ T8054] bridge_slave_0: entered promiscuous mode
[   90.440551][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.446393][ T7934] memory+swap: usage 431304kB, limit 9007199254740988kB, failcnt 0
[   90.447648][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.448946][ T7934] kmem: usage 5440kB, limit 9007199254740988kB, failcnt 0
[   90.451301][ T8054] bridge_slave_1: entered allmulticast mode
[   90.453222][ T7934] Memory cgroup stats for /syz0:
[   90.455141][ T7934] cache 308637696
[   90.455840][ T8054] bridge_slave_1: entered promiscuous mode
[   90.456735][ T7934] rss 233472
[   90.463101][ T7934] rss_huge 0
[   90.466865][ T7934] shmem 307544064
[   90.468420][ T7934] mapped_file 1630208
[   90.469884][ T7934] dirty 8192
[   90.471037][ T7934] writeback 0
[   90.472228][ T7934] workingset_refault_anon 1031
[   90.473793][ T7934] workingset_refault_file 1049
[   90.475387][ T7934] swap 127975424
[   90.479128][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   90.481192][ T7934] swapcached 20480
[   90.482337][ T7934] pgpgin 160571
[   90.483383][ T7934] pgpgout 85137
[   90.484427][ T7934] pgfault 34536
[   90.485509][ T7934] pgmajfault 25
[   90.487065][ T7934] inactive_anon 116625408
[   90.488391][ T7934] active_anon 190832640
[   90.489627][ T7934] inactive_file 217088
[   90.490888][ T7934] active_file 0
[   90.491980][ T7934] unevictable 0
[   90.493063][ T7934] hierarchical_memory_limit 314572800
[   90.494684][ T7934] hierarchical_memsw_limit 9223372036854771712
[   90.497263][ T7934] total_cache 308637696
[   90.498654][ T7934] total_rss 233472
[   90.499828][ T7934] total_rss_huge 0
[   90.500998][ T7934] total_shmem 307544064
[   90.502397][ T7934] total_mapped_file 1630208
[   90.503829][ T7934] total_dirty 8192
[   90.505010][ T7934] total_writeback 0
[   90.506895][ T7934] total_workingset_refault_anon 1031
[   90.508563][ T7934] total_workingset_refault_file 1049
[   90.510217][ T7934] total_swap 127975424
[   90.511497][ T7934] total_swapcached 20480
[   90.512899][ T7934] total_pgpgin 160571
[   90.514148][ T7934] total_pgpgout 85137
[   90.515404][ T7934] total_pgfault 34536
[   90.517138][ T7934] total_pgmajfault 25
[   90.518428][ T7934] total_inactive_anon 116625408
[   90.519952][ T7934] total_active_anon 190832640
[   90.521410][ T7934] total_inactive_file 217088
[   90.522855][ T7934] total_active_file 0
[   90.524109][ T7934] total_unevictable 0
[   90.525354][ T7934] anon_cost 0
[   90.526903][ T7934] file_cost 0
[   90.527981][ T7934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.548,pid=7915,uid=0
[   90.532394][ T7934] Memory cgroup out of memory: Killed process 7915 (syz.0.548) total-vm:98116kB, anon-rss:960kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000
[   90.571743][ T8054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.576187][ T8054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.710010][ T7913] syz.0.548 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   90.713053][ T7913] CPU: 1 UID: 0 PID: 7913 Comm: syz.0.548 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[   90.713068][ T7913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   90.713075][ T7913] Call Trace:
[   90.713079][ T7913]  <TASK>
[   90.713083][ T7913]  dump_stack_lvl+0x16c/0x1f0
[   90.713102][ T7913]  dump_header+0x101/0x930
[   90.713120][ T7913]  oom_kill_process+0x270/0xa60
[   90.713137][ T7913]  out_of_memory+0x350/0x1700
[   90.713156][ T7913]  ? __pfx_out_of_memory+0x10/0x10
[   90.713175][ T7913]  mem_cgroup_out_of_memory+0x118/0x130
[   90.713188][ T7913]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   90.713203][ T7913]  ? do_raw_spin_unlock+0x172/0x230
[   90.713219][ T7913]  try_charge_memcg+0x72b/0xd50
[   90.713238][ T7913]  ? __pfx_try_charge_memcg+0x10/0x10
[   90.713254][ T7913]  ? __print_lock_name+0x81/0xe0
[   90.713269][ T7913]  ? rcu_read_unlock+0x17/0x60
[   90.713289][ T7913]  charge_memcg+0x8a/0x230
[   90.713306][ T7913]  __mem_cgroup_charge+0x2b/0x1e0
[   90.713324][ T7913]  shmem_alloc_and_add_folio+0x514/0xc20
[   90.713342][ T7913]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   90.713358][ T7913]  ? shmem_allowable_huge_orders+0xcb/0x2f0
[   90.713375][ T7913]  shmem_get_folio_gfp+0x67f/0x1600
[   90.713392][ T7913]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   90.713406][ T7913]  ? timestamp_truncate+0x21e/0x2d0
[   90.713426][ T7913]  shmem_write_begin+0x160/0x300
[   90.713441][ T7913]  ? __pfx_shmem_write_begin+0x10/0x10
[   90.713456][ T7913]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[   90.713471][ T7913]  generic_perform_write+0x3d0/0x930
[   90.713490][ T7913]  ? __pfx_generic_perform_write+0x10/0x10
[   90.713505][ T7913]  ? generic_update_time+0xcf/0xf0
[   90.713515][ T7913]  ? mnt_put_write_access_file+0x45/0xf0
[   90.713533][ T7913]  shmem_file_write_iter+0x10e/0x140
[   90.713550][ T7913]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   90.713565][ T7913]  __kernel_write_iter+0x31a/0xa90
[   90.713581][ T7913]  ? __pfx___kernel_write_iter+0x10/0x10
[   90.713595][ T7913]  ? __up_read+0x1f8/0x750
[   90.713608][ T7913]  ? dump_user_range+0x745/0xb60
[   90.713625][ T7913]  dump_user_range+0x41f/0xb60
[   90.713642][ T7913]  ? __pfx_dump_user_range+0x10/0x10
[   90.713656][ T7913]  ? elf_coredump_extra_notes_write+0xbd/0x4f0
[   90.713677][ T7913]  ? __pfx_writenote+0x10/0x10
[   90.713695][ T7913]  elf_core_dump+0x288a/0x3a90
[   90.713717][ T7913]  ? __pfx_elf_core_dump+0x10/0x10
[   90.713732][ T7913]  ? kasan_save_stack+0x42/0x60
[   90.713745][ T7913]  ? kasan_save_stack+0x33/0x60
[   90.713758][ T7913]  ? kasan_save_track+0x14/0x30
[   90.713771][ T7913]  ? __kasan_kmalloc+0xaa/0xb0
[   90.713784][ T7913]  ? do_coredump+0x1c9a/0x4f10
[   90.713796][ T7913]  ? get_signal+0x22e3/0x26d0
[   90.713810][ T7913]  ? arch_do_signal_or_restart+0x8f/0x7d0
[   90.713826][ T7913]  ? 0xffffffffff600000
[   90.713858][ T7913]  ? do_coredump+0x399f/0x4f10
[   90.713870][ T7913]  do_coredump+0x399f/0x4f10
[   90.713888][ T7913]  ? __pfx_do_coredump+0x10/0x10
[   90.713902][ T7913]  ? find_held_lock+0x2b/0x80
[   90.713920][ T7913]  ? is_bpf_text_address+0x8a/0x1a0
[   90.713936][ T7913]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   90.713952][ T7913]  ? is_bpf_text_address+0x94/0x1a0
[   90.713965][ T7913]  ? kernel_text_address+0x8d/0x100
[   90.713978][ T7913]  ? __kernel_text_address+0xd/0x40
[   90.713990][ T7913]  ? unwind_get_return_address+0x59/0xa0
[   90.714010][ T7913]  ? stack_depot_save_flags+0x28/0xa40
[   90.714026][ T7913]  ? __lock_acquire+0xb8a/0x1c90
[   90.714038][ T7913]  ? kasan_save_stack+0x42/0x60
[   90.714051][ T7913]  ? kasan_save_stack+0x33/0x60
[   90.714064][ T7913]  ? kasan_save_track+0x14/0x30
[   90.714077][ T7913]  ? kasan_save_free_info+0x3b/0x60
[   90.714088][ T7913]  ? __kasan_slab_free+0x51/0x70
[   90.714101][ T7913]  ? kmem_cache_free+0x2d1/0x4d0
[   90.714114][ T7913]  ? __sigqueue_free+0xba/0x2a0
[   90.714129][ T7913]  ? get_signal+0xcba/0x26d0
[   90.714142][ T7913]  ? arch_do_signal_or_restart+0x8f/0x7d0
[   90.714174][ T7913]  ? proc_coredump_connector+0x2d1/0x4f0
[   90.714188][ T7913]  ? __pfx_proc_coredump_connector+0x10/0x10
[   90.714203][ T7913]  ? rcu_is_watching+0x12/0xc0
[   90.714220][ T7913]  get_signal+0x22e3/0x26d0
[   90.714237][ T7913]  ? force_sig_fault+0xc4/0x100
[   90.714252][ T7913]  ? __pfx_get_signal+0x10/0x10
[   90.714270][ T7913]  arch_do_signal_or_restart+0x8f/0x7d0
[   90.714283][ T7913]  ? trace_irq_disable.constprop.0+0xd4/0x120
[   90.714297][ T7913]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   90.714319][ T7913]  irqentry_exit_to_user_mode+0x12a/0x270
[   90.714336][ T7913]  asm_exc_page_fault+0x26/0x30
[   90.714347][ T7913] RIP: 0033:0x0
[   90.714354][ T7913] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   90.714359][ T7913] RSP: 002b:00002000000003e8 EFLAGS: 00010217
[   90.714368][ T7913] RAX: 0000000000000000 RBX: 00007fad55db6080 RCX: 00007fad55b8e929
[   90.714374][ T7913] RDX: 00002000000002c0 RSI: 00002000000003e0 RDI: 0000000000000000
[   90.714381][ T7913] RBP: 00007fad55c10ca1 R08: 0000200000000440 R09: 0000200000000440
[   90.714387][ T7913] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000
[   90.714394][ T7913] R13: 0000000000000000 R14: 00007fad55db6080 R15: 00007ffed6157b18
[   90.714408][ T7913]  </TASK>
[   90.714412][ T7913] memory: usage 307200kB, limit 307200kB, failcnt 22536
[   90.741283][ T8054] team0: Port device team_slave_0 added
[   90.744166][ T7913] memory+swap: usage 430600kB, limit 9007199254740988kB, failcnt 0
[   90.748323][ T8054] team0: Port device team_slave_1 added
[   90.749419][ T7913] kmem: usage 5300kB, limit 9007199254740988kB, failcnt 0
[   90.871607][ T7915] syz.0.548 (7915) used greatest stack depth: 19080 bytes left
[   90.873407][ T7913] Memory cgroup stats for /syz0:
[   90.887989][ T7913] cache 264736768
[   90.890741][ T7913] rss 327680
[   90.892047][ T7913] rss_huge 0
[   90.893108][ T7913] shmem 264736768
[   90.894260][ T7913] mapped_file 884736
[   90.895496][ T7913] dirty 0
[   90.896816][ T7913] writeback 0
[   90.897881][ T7913] workingset_refault_anon 1055
[   90.899380][ T7913] workingset_refault_file 1125
[   90.901425][ T7913] swap 127885312
[   90.902584][ T7913] swapcached 110592
[   90.903829][ T7913] pgpgin 163503
[   90.904937][ T7913] pgpgout 98789
[   90.907395][ T7913] pgfault 34739
[   90.908533][ T7913] pgmajfault 54
[   90.909641][ T7913] inactive_anon 126390272
[   90.910969][ T7913] active_anon 136634368
[   90.912243][ T7913] inactive_file 0
[   90.913433][ T7913] active_file 0
[   90.914544][ T7913] unevictable 0
[   90.915316][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.915661][ T7913] hierarchical_memory_limit 314572800
[   90.917889][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.917917][ T8054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.918756][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.919632][ T7913] hierarchical_memsw_limit 9223372036854771712
[   90.919639][ T7913] total_cache 264736768
[   90.919644][ T7913] total_rss 327680
[   90.919649][ T7913] total_rss_huge 0
[   90.919653][ T7913] total_shmem 264736768
[   90.919657][ T7913] total_mapped_file 884736
[   90.919662][ T7913] total_dirty 0
[   90.930269][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.930579][ T7913] total_writeback 0
[   90.932785][ T8054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.935134][ T7913] total_workingset_refault_anon 1055
[   90.956151][ T7913] total_workingset_refault_file 1125
[   90.957981][ T7913] total_swap 127885312
[   90.959284][ T7913] total_swapcached 110592
[   90.960633][ T7913] total_pgpgin 163503
[   90.961887][ T7913] total_pgpgout 98789
[   90.963159][ T7913] total_pgfault 34739
[   90.964416][ T7913] total_pgmajfault 54
[   90.965671][ T7913] total_inactive_anon 126390272
[   90.967617][ T7913] total_active_anon 136634368
[   90.969101][ T7913] total_inactive_file 0
[   90.973468][ T7913] total_active_file 0
[   90.974782][ T7913] total_unevictable 0
[   90.976012][ T7913] anon_cost 0
[   90.977454][ T7913] file_cost 0
[   90.978522][ T7913] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.548,pid=7912,uid=0
[   90.982918][ T7913] Memory cgroup out of memory: OOM victim 7912 (syz.0.548) is already exiting. Skip killing the task
[   91.050504][ T8054] hsr_slave_0: entered promiscuous mode
[   91.052833][ T8054] hsr_slave_1: entered promiscuous mode
[   91.054894][ T8054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.057584][ T8054] Cannot create hsr debugfs directory
[   91.151555][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   91.282538][ T8127] ipt_REJECT: ECHOREPLY no longer supported.
[   91.364662][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[   91.369762][ T8054] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.379818][ T8054] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.408317][ T8054] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.418286][ T8054] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.451719][ T8141] tmpfs: Bad value for 'mpol'
[   91.506497][ T7913] syz.0.548 (7913) used greatest stack depth: 19048 bytes left
[   91.575754][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.587815][ T8054] 8021q: adding VLAN 0 to HW filter on device team0
[   91.597513][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.599758][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.605713][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.608036][ T6786] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.655107][ T5959] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   91.698402][ T7911] syz.0.548 (7911) used greatest stack depth: 18712 bytes left
[   91.713117][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'.
[   91.719475][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'.
[   91.744349][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.804271][ T8191] 9pnet_virtio: no channels available for device syz
[   91.883000][ T5959] Bluetooth: hci4: command tx timeout
[   91.985197][ T8054] veth0_vlan: entered promiscuous mode
[   91.991116][ T8054] veth1_vlan: entered promiscuous mode
[   92.007262][ T8054] veth0_macvtap: entered promiscuous mode
[   92.011204][ T8054] veth1_macvtap: entered promiscuous mode
[   92.029975][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.034159][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.046376][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.140489][ T8054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.147350][ T8054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.151253][ T8054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.154332][ T8054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.236602][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   92.257294][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.346567][ T6107] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   92.439767][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.454584][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.508844][ T6107] usb 5-1: Using ep0 maxpacket: 32
[   92.529682][ T6107] usb 5-1: config 128 has an invalid interface number: 218 but max is 2
[   92.538768][ T6107] usb 5-1: config 128 has an invalid interface number: 50 but max is 2
[   92.549866][ T6107] usb 5-1: config 128 contains an unexpected descriptor of type 0x2, skipping
[   92.563167][ T6107] usb 5-1: config 128 has an invalid interface number: 57 but max is 2
[   92.565867][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.572430][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.575710][ T6107] usb 5-1: config 128 has an invalid descriptor of length 172, skipping remainder of the config
[   92.594713][ T6107] usb 5-1: config 128 has no interface number 0
[   92.605367][ T6107] usb 5-1: config 128 has no interface number 1
[   92.609721][ T6107] usb 5-1: config 128 has no interface number 2
[   92.613101][ T6107] usb 5-1: config 128 interface 50 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[   92.625516][ T6107] usb 5-1: config 128 interface 57 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   92.638452][ T6107] usb 5-1: config 128 interface 57 has no altsetting 0
[   92.653579][ T6107] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ea.34
[   92.660153][ T6107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.664853][ T6107] usb 5-1: Product: ࠉ
[   92.672520][ T6107] usb 5-1: Manufacturer: ࠾
[   92.675354][ T6107] usb 5-1: SerialNumber: Ѝ
[   92.903802][ T8089] Invalid option length (673) for dns_resolver key
[   93.096424][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c57
[   93.139111][ T6107] ti_usb_3410_5052 5-1:128.218: required endpoints missing
[   93.171022][ T6107] ti_usb_3410_5052 5-1:128.50: required endpoints missing
[   93.197065][ T6107] ti_usb_3410_5052 5-1:128.57: required endpoints missing
[   93.220246][ T6107] usb 5-1: USB disconnect, device number 12
[   93.229649][   T40] kauditd_printk_skb: 2 callbacks suppressed
[   93.229659][   T40] audit: type=1400 audit(1752720332.859:990): avc:  denied  { mount } for  pid=8213 comm="syz.4.627" name="/" dev="hugetlbfs" ino=22829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   93.299637][   T40] audit: type=1400 audit(1752720332.929:991): avc:  denied  { remount } for  pid=8213 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   93.374985][   T40] audit: type=1400 audit(1752720332.999:992): avc:  denied  { mounton } for  pid=8213 comm="syz.4.627" path="/1/file0" dev="hugetlbfs" ino=22829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[   93.489482][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'.
[   93.538977][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0c56
[   93.564122][ T7927] syz.0.548 (7927) used greatest stack depth: 18560 bytes left
[   93.670188][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'.
[   93.673307][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'.
[   93.687046][   T40] audit: type=1400 audit(1752720333.319:993): avc:  denied  { unmount } for  pid=8054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   93.693406][   T40] audit: type=1400 audit(1752720333.319:994): avc:  denied  { create } for  pid=8248 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   93.797865][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'.
[   93.819458][   T40] audit: type=1400 audit(1752720333.449:995): avc:  denied  { module_load } for  pid=8267 comm="syz.4.645" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[   93.820033][ T8269] kernel read not supported for file /policy (pid: 8269 comm: syz.4.645)
[   93.833134][   T40] audit: type=1400 audit(1752720333.459:996): avc:  denied  { connect } for  pid=8267 comm="syz.4.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   93.895338][   T40] audit: type=1326 audit(1752720333.519:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.3.650" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08be98e929 code=0x0
[   93.912262][   T40] audit: type=1400 audit(1752720333.539:998): avc:  denied  { create } for  pid=8272 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   93.918382][   T40] audit: type=1400 audit(1752720333.539:999): avc:  denied  { bind } for  pid=8272 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   93.956316][ T5959] Bluetooth: hci4: command tx timeout
[   93.983686][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'.
[   94.336596][ T8305] tap0: tun_chr_ioctl cmd 1074025675
[   94.338903][ T8305] tap0: persist enabled
[   94.342480][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'.
[   95.209380][ T5959] Bluetooth: hci0: Received unexpected HCI Event 0x00
[   95.211676][ T5959] Bluetooth: hci0: Received unexpected HCI Event 0x00
[   95.410299][ T8325] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   95.413355][ T8325] overlayfs: failed to set xattr on upper
[   95.415170][ T8325] overlayfs: ...falling back to redirect_dir=nofollow.
[   95.421936][ T8325] overlayfs: ...falling back to index=off.
[   95.423826][ T8325] overlayfs: ...falling back to uuid=null.
[   95.425649][ T8325] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   95.650908][ T8330] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   95.653678][ T8330] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   95.694796][ T8339] openvswitch: netlink: Duplicate or invalid key (type 0).
[   95.697209][ T8339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.735374][ T8343] IPVS: Unknown mcast interface: nicvf0
[   95.758336][ T8347] netlink: 9 bytes leftover after parsing attributes in process `syz.0.670'.
[   95.761161][ T8347] 0�: renamed from hsr0 (while UP)
[   95.764125][ T8347] 0�: entered allmulticast mode
[   95.765732][ T8347] hsr_slave_0: entered allmulticast mode
[   95.768042][ T8347] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[   95.922834][ T8370] fuse: Bad value for 'user_id'
[   95.924368][ T8370] fuse: Bad value for 'user_id'
[   95.965671][ T8374] overlayfs: missing 'lowerdir'
[   95.994139][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'.
[   96.022610][ T8385] devtmpfs: Cannot change global quota limit on remount
[   96.028146][ T5313] Bluetooth: hci4: command tx timeout
[   96.170126][ T8389] 9pnet: Could not find request transport: �:�!virtio
[   96.277097][ T5313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.280410][ T5313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.283534][ T5313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.288668][ T5313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.292089][ T5313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.371594][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'.
[   96.441636][ T8395] chnl_net:caif_netlink_parms(): no params data found
[   96.509537][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.511796][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.514152][ T8395] bridge_slave_0: entered allmulticast mode
[   96.517297][ T8395] bridge_slave_0: entered promiscuous mode
[   96.520838][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.523990][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.527478][ T8395] bridge_slave_1: entered allmulticast mode
[   96.531436][ T8395] bridge_slave_1: entered promiscuous mode
[   96.583907][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.590843][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.595259][ T8414] nfs: Unknown parameter '4'
[   96.628870][ T8395] team0: Port device team_slave_0 added
[   96.632508][ T8395] team0: Port device team_slave_1 added
[   96.664841][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.668465][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.677048][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.681646][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.683836][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.691888][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.737349][ T8395] hsr_slave_0: entered promiscuous mode
[   96.739562][ T8395] hsr_slave_1: entered promiscuous mode
[   96.741588][ T8395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.744438][ T8395] Cannot create hsr debugfs directory
[   96.818710][ T6786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.823150][ T6786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.909794][ T8395] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   96.913973][ T8395] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   96.919567][ T8395] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   96.929910][ T6786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.933108][ T6786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.938754][ T8395] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   96.962812][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.965293][ T8395] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.968205][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.970422][ T8395] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.002596][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.011025][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.014171][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.026421][ T8395] 8021q: adding VLAN 0 to HW filter on device team0
[   97.033522][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.035799][ T6769] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.045628][ T6786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.049524][ T6786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.060057][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.062338][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.086510][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   97.161336][ T6786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.164601][ T6786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.191158][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.246307][   T10] usb 5-1: Using ep0 maxpacket: 16
[   97.249217][   T10] usb 5-1: config index 0 descriptor too short (expected 8192, got 92)
[   97.251748][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.255126][   T10] usb 5-1: config 0 has no interfaces?
[   97.269245][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   97.272080][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.274563][   T10] usb 5-1: Product: syz
[   97.276088][   T10] usb 5-1: Manufacturer: syz
[   97.280389][   T10] usb 5-1: SerialNumber: syz
[   97.285536][ T6786] bridge_slave_1: left allmulticast mode
[   97.288068][ T6786] bridge_slave_1: left promiscuous mode
[   97.288370][   T10] usb 5-1: config 0 descriptor??
[   97.290494][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.298928][ T6786] bridge_slave_0: left allmulticast mode
[   97.301290][ T6786] bridge_slave_0: left promiscuous mode
[   97.303768][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.493212][ T8438] devtmpfs: Cannot change global quota limit on remount
[   97.498850][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.502669][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.700614][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.705524][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.711336][ T6786] bond0 (unregistering): Released all slaves
[   97.726528][   T10] usb 5-1: USB disconnect, device number 13
[   97.741439][ T8395] veth0_vlan: entered promiscuous mode
[   97.757473][ T8395] veth1_vlan: entered promiscuous mode
[   97.795159][ T6786] tipc: Left network mode
[   97.795393][ T8395] veth0_macvtap: entered promiscuous mode
[   97.801236][ T8395] veth1_macvtap: entered promiscuous mode
[   97.847956][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.854180][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.859375][ T8395] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.862083][ T8395] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.864754][ T8395] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.868190][ T8395] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.935818][ T6769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.938338][ T6769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.960634][ T6769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.963097][ T6769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.076241][ T6786] hsr_slave_0: left promiscuous mode
[   98.081494][ T6786] hsr_slave_1: left promiscuous mode
[   98.084283][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.088175][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.091690][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.094627][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.103087][ T6769] Bluetooth: hci5: Frame reassembly failed (-84)
[   98.121058][ T6786] veth1_macvtap: left promiscuous mode
[   98.123124][ T6786] veth1_vlan: left promiscuous mode
[   98.125256][ T6786] veth0_vlan: left promiscuous mode
[   98.179045][ T8469] xt_policy: output policy not valid in PREROUTING and INPUT
[   98.347672][ T5313] Bluetooth: hci2: command tx timeout
[   98.350561][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'.
[   98.681139][ T6786] team0 (unregistering): Port device team_slave_1 removed
[   99.085586][ T8462] netem: invalid attributes len -22
[   99.087451][ T8462] netem: change failed
[   99.136746][ T8486] devtmpfs: Cannot change global quota limit on remount
[   99.139339][ T5313] Bluetooth: hci0: unexpected event for opcode 0x0c56
[   99.299438][   T40] kauditd_printk_skb: 8 callbacks suppressed
[   99.299449][   T40] audit: type=1400 audit(1752720338.919:1008): avc:  denied  { checkpoint_restore } for  pid=8493 comm="syz.4.703" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.442479][ T6786] IPVS: stop unused estimator thread 0...
[   99.567484][  T836] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[   99.718882][  T836] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.723661][  T836] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[   99.727851][  T836] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   99.731468][  T836] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   99.734936][  T836] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   99.738528][  T836] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   99.741381][  T836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.751627][ T8497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   99.754916][  T836] hub 9-1:1.0: bad descriptor, ignoring hub
[   99.757139][  T836] hub 9-1:1.0: probe with driver hub failed with error -5
[   99.759625][  T836] cdc_wdm 9-1:1.0: skipping garbage
[   99.761250][  T836] cdc_wdm 9-1:1.0: skipping garbage
[   99.768884][  T836] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[   99.770821][  T836] cdc_wdm 9-1:1.0: Unknown control protocol
[   99.962294][   T40] audit: type=1400 audit(1752720339.589:1009): avc:  denied  { read write } for  pid=8493 comm="syz.4.703" name="cdc-wdm0" dev="devtmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   99.970779][   T40] audit: type=1400 audit(1752720339.589:1010): avc:  denied  { open } for  pid=8493 comm="syz.4.703" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  100.107121][ T5313] Bluetooth: hci5: command 0x1003 tx timeout
[  100.107248][ T5959] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  100.143117][   T40] audit: type=1400 audit(1752720339.769:1011): avc:  denied  { read } for  pid=8535 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  100.153397][ T8536] netlink: 'syz.0.704': attribute type 9 has an invalid length.
[  100.171596][ T8539] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  100.226356][ T5959] Bluetooth: hci0: unexpected event for opcode 0x1405
[  100.226439][   T40] audit: type=1400 audit(1752720339.859:1012): avc:  denied  { accept } for  pid=8546 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  100.234491][   T40] audit: type=1400 audit(1752720339.859:1013): avc:  denied  { append } for  pid=8546 comm="syz.0.707" name="v4l-subdev3" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  100.260499][ T8551] program syz.5.708 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.272780][ T8551] evm: overlay not supported
[  100.427399][ T5959] Bluetooth: hci2: command tx timeout
[  100.519971][ T8494] usb 9-1: reset low-speed USB device number 2 using dummy_hcd
[  100.565752][ T8567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8567 comm=syz.0.714
[  100.693639][   T40] audit: type=1400 audit(1752720340.319:1014): avc:  denied  { getopt } for  pid=8572 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  100.829937][ T8497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  100.836612][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  100.838797][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  100.841121][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  100.843255][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  100.845865][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  100.848010][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  100.850425][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  100.852673][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  100.854752][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  100.856816][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  100.921448][   T40] audit: type=1400 audit(1752720340.549:1015): avc:  denied  { listen } for  pid=8583 comm="syz.0.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  100.921890][ T8584] dlm: no local IP address has been set
[  100.931414][ T8584] dlm: cannot start dlm midcomms -107
[  100.979192][ T8586] ntfs3: Unknown parameter 'discard��B&:0��z
[  100.979192][ T8586] �io�v�O-�)�B�<9[jB#������zկbS��zXS��*'
[  101.050317][   T40] audit: type=1326 audit(1752720340.679:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8591 comm="syz.5.723" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71f2d8e929 code=0x0
[  101.092800][ T8596] Cannot find map_set index 0 as target
[  101.127012][   T40] audit: type=1400 audit(1752720340.759:1017): avc:  denied  { lock } for  pid=8597 comm="syz.5.725" path="socket:[24893]" dev="sockfs" ino=24893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  101.138810][ T8598] xt_hashlimit: size too large, truncated to 1048576
[  101.276322][ T6044] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  101.516457][ T6044] usb 5-1: Using ep0 maxpacket: 16
[  101.776358][   T61] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  101.936307][   T61] usb 10-1: Using ep0 maxpacket: 32
[  101.943266][   T61] usb 10-1: config 128 has an invalid interface number: 218 but max is 2
[  101.950673][   T61] usb 10-1: config 128 has an invalid interface number: 50 but max is 2
[  101.958385][   T61] usb 10-1: config 128 contains an unexpected descriptor of type 0x2, skipping
[  101.967077][   T61] usb 10-1: config 128 has an invalid interface number: 57 but max is 2
[  101.974458][   T61] usb 10-1: config 128 has an invalid descriptor of length 172, skipping remainder of the config
[  101.984707][   T61] usb 10-1: config 128 has no interface number 0
[  101.990988][   T61] usb 10-1: config 128 has no interface number 1
[  101.997239][   T61] usb 10-1: config 128 has no interface number 2
[  102.003095][   T61] usb 10-1: config 128 interface 50 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  102.014789][   T61] usb 10-1: config 128 interface 57 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  102.027611][   T61] usb 10-1: config 128 interface 57 has no altsetting 0
[  102.039649][   T61] usb 10-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ea.34
[  102.045351][   T61] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.053067][   T61] usb 10-1: Product: ࠉ
[  102.056918][   T61] usb 10-1: Manufacturer: ࠾
[  102.060968][   T61] usb 10-1: SerialNumber: Ѝ
[  102.284221][ T8609] Invalid option length (673) for dns_resolver key
[  102.427975][   T61] ti_usb_3410_5052 10-1:128.218: required endpoints missing
[  102.437038][   T61] ti_usb_3410_5052 10-1:128.50: required endpoints missing
[  102.447451][ T6044] usb 5-1: config 2 has an invalid interface number: 54 but max is 2
[  102.450169][   T61] ti_usb_3410_5052 10-1:128.57: required endpoints missing
[  102.451250][ T6044] usb 5-1: config 2 has an invalid interface number: 90 but max is 2
[  102.456454][ T6044] usb 5-1: config 2 has an invalid interface number: 6 but max is 2
[  102.458794][   T61] usb 10-1: USB disconnect, device number 2
[  102.459703][ T6044] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  102.465136][ T6044] usb 5-1: config 2 has no interface number 0
[  102.467952][ T6044] usb 5-1: config 2 has no interface number 1
[  102.470512][ T6044] usb 5-1: config 2 has no interface number 2
[  102.472976][ T6044] usb 5-1: config 2 interface 54 altsetting 12 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  102.477832][ T6044] usb 5-1: config 2 interface 54 altsetting 12 has an invalid descriptor for endpoint zero, skipping
[  102.482280][ T6044] usb 5-1: config 2 interface 54 altsetting 12 has a duplicate endpoint with address 0xD, skipping
[  102.486484][ T6044] usb 5-1: config 2 interface 54 altsetting 12 bulk endpoint 0xF has invalid maxpacket 16
[  102.489556][ T6044] usb 5-1: config 2 interface 90 altsetting 7 endpoint 0xE has invalid maxpacket 42079, setting to 64
[  102.493790][ T6044] usb 5-1: config 2 interface 90 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  102.498245][ T6044] usb 5-1: config 2 interface 90 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  102.502685][ T6044] usb 5-1: config 2 interface 90 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  102.507174][ T5959] Bluetooth: hci2: command tx timeout
[  102.509403][ T6044] usb 5-1: config 2 interface 90 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[  102.513075][ T6044] usb 5-1: config 2 interface 90 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  102.516980][ T6044] usb 5-1: config 2 interface 90 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  102.521407][ T6044] usb 5-1: config 2 interface 6 altsetting 5 bulk endpoint 0xC has invalid maxpacket 1024
[  102.525426][ T6044] usb 5-1: config 2 interface 6 altsetting 5 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  102.529920][ T6044] usb 5-1: config 2 interface 6 altsetting 5 has a duplicate endpoint with address 0xF, skipping
[  102.534075][ T6044] usb 5-1: config 2 interface 6 altsetting 5 has a duplicate endpoint with address 0x5, skipping
[  102.538405][ T6044] usb 5-1: config 2 interface 6 altsetting 5 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  102.542800][ T6044] usb 5-1: config 2 interface 6 altsetting 5 has a duplicate endpoint with address 0xE, skipping
[  102.547105][ T6044] usb 5-1: config 2 interface 6 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[  102.551602][ T6044] usb 5-1: config 2 interface 54 has no altsetting 0
[  102.553663][ T6044] usb 5-1: config 2 interface 90 has no altsetting 0
[  102.555708][ T6044] usb 5-1: config 2 interface 6 has no altsetting 0
[  102.559401][ T6044] usb 5-1: New USB device found, idVendor=0483, idProduct=3746, bcdDevice=a6.81
[  102.562155][ T6044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.564610][ T6044] usb 5-1: Product: syz
[  102.566649][ T6044] usb 5-1: Manufacturer: 쥙辵띁㪅ힷ⛡ꉱ䵤觗钲ðҴ⡧㣗䧫擷偓欑籜䴰ﰩⒿ샳昢碽ܢ㨮梭ᢱἃᱚ蓏냦䳝硸ᵈ鈉ﾯ䢿⣕煕禤歉饏媒숮夒퀟呁酳ㄋ⽅謂穀꣌᎗徟ꥰ䬁ꩇ㯆꡻⹶ℕ䆶쥓较ό뻓쇼褲뇭鉥㝆•즈悽౅䵤ﶿ罜
[  102.575532][ T6044] usb 5-1: SerialNumber: syz
[  102.577142][  T836] usb 9-1: USB disconnect, device number 2
[  102.582391][ T8590] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  102.788199][ T8590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8590 comm=syz.0.722
[  102.797477][ T6044] ftdi_sio 5-1:2.54: FTDI USB Serial Device converter detected
[  102.800813][ T6044] ftdi_sio ttyUSB0: unknown device type: 0xa681
[  102.805199][ T6044] ftdi_sio 5-1:2.90: FTDI USB Serial Device converter detected
[  102.808116][ T6044] ftdi_sio ttyUSB1: unknown device type: 0xa681
[  102.812660][ T6044] ftdi_sio 5-1:2.6: FTDI USB Serial Device converter detected
[  102.815604][ T6044] ftdi_sio ttyUSB2: unknown device type: 0xa681
[  102.821385][ T6044] usb 5-1: USB disconnect, device number 14
[  102.826071][ T6044] ftdi_sio 5-1:2.54: device disconnected
[  102.830887][ T6044] ftdi_sio 5-1:2.90: device disconnected
[  102.834466][ T6044] ftdi_sio 5-1:2.6: device disconnected
[  102.926311][  T836] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  103.078416][  T836] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  103.081914][  T836] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.084891][  T836] usb 9-1: config 0 interface 0 has no altsetting 0
[  103.087191][  T836] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  103.089972][  T836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.096567][  T836] usb 9-1: config 0 descriptor??
[  103.233707][ T8616] batadv_slave_1: entered promiscuous mode
[  103.278208][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.729'.
[  103.280985][ T8616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.729'.
[  103.287403][ T8615] batadv_slave_1: left promiscuous mode
[  103.465426][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.732'.
[  103.468679][    C0] vcan0: j1939_session_tx_dat: 0xffff8880270c2400: queue data error: -100
[  103.471385][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  103.473781][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  103.476136][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.478611][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.481035][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.483460][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.485892][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.488366][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.490817][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.493228][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.495798][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.498260][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.500702][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.503130][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.505560][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.508028][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.510454][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.512922][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.515359][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.517811][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.520242][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.522670][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.525111][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.527760][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.530191][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.532593][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.534982][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.537457][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.539825][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.542144][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.544502][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.546927][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.549276][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.551609][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.553971][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.556361][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.558759][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.561091][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.563518][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.565853][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.568320][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.570663][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.573036][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.575392][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.577765][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.580094][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.582436][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.584744][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.587129][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.589494][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.591817][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.594124][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.596512][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.598882][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.601217][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.603551][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.605918][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.608457][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.610815][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.613150][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.615491][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.617888][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.620285][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.622652][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.624982][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.627343][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.629667][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.631997][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.634347][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.636933][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.639342][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.641658][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.644085][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.646532][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.648931][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.651273][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.653626][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.655959][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.658335][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.660722][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.663155][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.665527][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.668050][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.670466][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.672908][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.675289][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.677748][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.680132][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.682562][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.684940][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.687411][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.689813][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.692256][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.694682][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.697150][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.699534][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.701947][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.704327][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.706787][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.709152][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.711503][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.713898][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.716326][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.718690][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.721060][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.723405][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.725826][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.728287][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.730710][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.733120][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.735553][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.738010][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.740433][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.742834][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.745250][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.747699][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.750123][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.752534][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.754957][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.757396][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.759828][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.762218][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.764644][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.767098][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.769523][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.771852][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.774250][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  103.776672][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  103.786771][  T836] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0
[  103.789041][  T836] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0
[  103.791942][  T836] hid-steam 0003:28DE:1102.0004: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0
[  103.821639][ T8634] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  103.856504][  T836] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected
[  103.864648][  T836] input: Steam Controller as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:28DE:1102.0004/input/input7
[  103.890471][  T836] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0
[  103.892892][  T836] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0
[  103.899194][  T836] hid-steam 0003:28DE:1102.0005: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0
[  103.911220][  T836] usb 9-1: USB disconnect, device number 3
[  103.952005][  T836] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected
[  103.958441][ T8638] fido_id[8638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/9-1/report_descriptor': No such file or directory
[  104.174727][ T8667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  104.586545][ T5959] Bluetooth: hci2: command tx timeout
[  104.663931][ T8695] devtmpfs: Cannot change global quota limit on remount
[  104.962488][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  104.962500][   T40] audit: type=1800 audit(1752720344.589:1026): pid=8665 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.743" name="file1" dev="9p" ino=36047758 res=0 errno=0
[  105.269091][ T8712] bond1: entered promiscuous mode
[  105.270982][ T8712] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.361242][   T40] audit: type=1804 audit(1752720344.989:1027): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.758" name="/newroot/35/file0" dev="tmpfs" ino=212 res=1 errno=0
[  105.369489][   T40] audit: type=1800 audit(1752720344.989:1028): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.758" name="file0" dev="tmpfs" ino=212 res=0 errno=0
[  105.447475][ T8720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.759'.
[  105.599937][   T40] audit: type=1400 audit(1752720345.229:1029): avc:  denied  { write } for  pid=8728 comm="syz.4.760" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  105.611897][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.760'.
[  105.633537][ T8729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8729 comm=syz.4.760
[  105.634125][ T8735] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  105.646173][ T8735] cramfs: wrong magic
[  105.680426][ T8743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.763'.
[  105.713299][   T40] audit: type=1400 audit(1752720345.339:1030): avc:  denied  { getopt } for  pid=8745 comm="syz.4.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  105.717702][ T8746] tmpfs: Invalid gid '0x00000000ffffffff'
[  105.732270][ T8748] ata1.00: invalid multi_count 128 ignored
[  105.750948][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'.
[  105.761765][ T8750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.786354][   T40] audit: type=1400 audit(1752720345.409:1031): avc:  denied  { execute } for  pid=8747 comm="syz.0.765" dev="hugetlbfs" ino=26716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  105.792920][   T40] audit: type=1400 audit(1752720345.409:1032): avc:  denied  { execute_no_trans } for  pid=8747 comm="syz.0.765" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=26716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  105.817901][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  105.820094][ T1114] ata1: failed to read log page 10h (errno=-5)
[  105.822909][   T40] audit: type=1400 audit(1752720345.449:1033): avc:  denied  { getopt } for  pid=8753 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  105.831569][    C2] ata1: illegal qc_active transition (00000000->00400000)
[  105.855941][   T40] audit: type=1400 audit(1752720345.479:1034): avc:  denied  { read } for  pid=8751 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  105.863369][   T40] audit: type=1400 audit(1752720345.489:1035): avc:  denied  { ioctl } for  pid=8755 comm="syz.0.768" path="socket:[26725]" dev="sockfs" ino=26725 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  106.129940][ T8773] batadv_slave_1: entered promiscuous mode
[  106.158979][ T1114] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  106.164117][ T1114] ata1.00: configured for UDMA/100
[  106.181993][ T8771] batadv_slave_1: left promiscuous mode
[  106.284104][ T8781] overlayfs: workdir and upperdir must reside under the same mount
[  106.438087][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'.
[  106.444362][ T8791] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.447537][ T8791] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.450482][ T8791] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.453702][ T8791] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.457269][ T8791] vxlan0: entered promiscuous mode
Stopping sshd: stopped /usr/sbin/sshd (pid 5751)
OK
Stopping crond: stopped /usr/sbin/crond (pid 5745)
OK
Stopping dhcpcd...
[  106.645580][ T8753] delete_channel: no stack
stopped /sbin/dhcpcd (pid 5664)
Stopping network: [  106.939514][ T8834] devtmpfs: Cannot change global quota limit on remount
OK
Stopping iptables: [  107.043656][ T8838] /dev/sg0: Can't lookup blockdev
[  107.045842][ T8838] 9pnet_fd: Insufficient options for proto=fd
OK
[  107.076696][ T8838] kvm: pic: non byte write
Stopping system message bus: [  107.262293][ T8854] netlink: 'syz.5.782': attribute type 10 has an invalid length.
[  107.280977][ T8854] team0: Device ipvlan1 failed to register rx_handler
done
[  107.605234][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'.
[  107.609875][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'.
Stopping klogd: OK
Stopping acpid: OK
Stopping syslogd: stopped /sbin/syslogd (pid 5345)
OK
[  110.272955][ T6792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
umount: can't remount debugfs read-only
umount: tmpfs busy - remounted read-only
[  110.349135][ T6792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.435174][ T6792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
[  110.495591][ T5363] udevd[5363]: could not touch /run/udev/queue: Read-only file system
Sent SIGTERM to all processes
[  110.550595][ T6792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
Connection to localhost closed by remote host.
[  110.696054][ T8774] bond0: (slave syz_tun): Releasing backup interface
[  111.111737][ T6792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.115723][ T6792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.119213][ T6792] bond0 (unregistering): Released all slaves
[  111.176948][ T6792] bond1 (unregistering): Released all slaves
[  111.255182][ T6792] tipc: Left network mode
[  111.528103][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.530434][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.542739][ T6792] veth1_macvtap: left promiscuous mode
[  111.544499][ T6792] veth0_macvtap: left promiscuous mode
[  111.546489][ T6792] veth1_vlan: left promiscuous mode
[  111.548130][ T6792] veth0_vlan: left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[  112.566988][   T24] usb 7-1: Direct firmware load for mts_mt9234zba.fw failed with error -2
[  112.569754][   T24] usb 7-1: Falling back to sysfs fallback for: mts_mt9234zba.fw
[  112.572443][   T24] ------------[ cut here ]------------
[  112.574156][   T24] WARNING: CPU: 2 PID: 24 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x6d3/0xbe0
[  112.577869][   T24] Modules linked in:
[  112.579295][   T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  112.584625][   T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  112.589337][   T24] Workqueue: usb_hub_wq hub_event
[  112.591595][   T24] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0
[  112.594333][   T24] Code: 88 fb e9 da f9 ff ff e8 4b 90 a9 fb e8 86 f0 6f fb 31 ff 89 c3 89 c6 e8 7b 8b a9 fb 85 db 0f 84 17 fb ff ff e8 2e 90 a9 fb 90 <0f> 0b 90 48 c7 c6 20 c7 42 8c 4c 89 e2 4c 89 f7 e8 58 28 f9 ff e9
[  112.602618][   T24] RSP: 0018:ffffc9000062ec90 EFLAGS: 00010293
[  112.605277][   T24] RAX: 0000000000000000 RBX: 00000000fffffff5 RCX: ffffffff86126245
[  112.608285][   T24] RDX: ffff88801e2fa440 RSI: ffffffff86126252 RDI: 0000000000000005
[  112.611737][   T24] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  112.615438][   T24] R10: 00000000fffffff5 R11: 0000000000002c00 R12: ffffc9000062ef20
[  112.619117][   T24] R13: ffff888054822240 R14: ffff888032eb00b0 R15: 0000000000001770
[  112.622448][   T24] FS:  0000000000000000(0000) GS:ffff8880d6913000(0000) knlGS:0000000000000000
[  112.625960][   T24] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.628828][   T24] CR2: 00007ffb34df84c0 CR3: 000000000e382000 CR4: 0000000000352ef0
[  112.632225][   T24] DR0: 0000000000000000 DR1: 0000000000004b36 DR2: 0000000000000000
[  112.635602][   T24] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  112.638870][   T24] Call Trace:
[  112.640361][   T24]  <TASK>
[  112.641687][   T24]  _request_firmware+0xfe9/0x1470
[  112.643901][   T24]  ? __pfx__request_firmware+0x10/0x10
[  112.646083][   T24]  ? __pfx_sprintf+0x10/0x10
[  112.647850][   T24]  ? lockdep_init_map_type+0x5c/0x280
[  112.650025][   T24]  request_firmware+0x35/0x50
[  112.652016][   T24]  ti_startup+0x8f3/0x1350
[  112.653904][   T24]  ? __pfx_ti_startup+0x10/0x10
[  112.656000][   T24]  ? trace_kmalloc+0x2b/0xd0
[  112.658125][   T24]  ? __kmalloc_noprof+0x242/0x510
[  112.659953][   T24]  ? __asan_memset+0x23/0x50
[  112.661407][   T24]  ? __pfx_ti_startup+0x10/0x10
[  112.662995][   T24]  ? __pfx_ti_interrupt_callback+0x10/0x10
[  112.664944][   T24]  usb_serial_probe+0x2816/0x4040
[  112.667505][   T24]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  112.669773][   T24]  usb_probe_interface+0x300/0x9c0
[  112.672033][   T24]  ? __pfx_usb_probe_interface+0x10/0x10
[  112.674487][   T24]  really_probe+0x241/0xa90
[  112.676483][   T24]  __driver_probe_device+0x1de/0x440
[  112.678789][   T24]  driver_probe_device+0x4c/0x1b0
[  112.680380][   T24]  __device_attach_driver+0x1df/0x310
[  112.682084][   T24]  ? __pfx___device_attach_driver+0x10/0x10
[  112.683964][   T24]  bus_for_each_drv+0x159/0x1e0
[  112.685503][   T24]  ? __pfx_bus_for_each_drv+0x10/0x10
[  112.687260][   T24]  ? lockdep_hardirqs_on+0x7c/0x110
[  112.688914][   T24]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  112.690764][   T24]  __device_attach+0x1e4/0x4b0
[  112.692275][   T24]  ? __pfx___device_attach+0x10/0x10
[  112.693932][   T24]  ? do_raw_spin_unlock+0x172/0x230
[  112.695585][   T24]  bus_probe_device+0x17f/0x1c0
[  112.697174][   T24]  device_add+0x1148/0x1a70
[  112.698628][   T24]  ? __pfx_device_add+0x10/0x10
[  112.700168][   T24]  ? usb_cache_string+0xf2/0x150
[  112.701735][   T24]  usb_set_configuration+0x1187/0x1e20
[  112.703475][   T24]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  112.705379][   T24]  usb_generic_driver_probe+0xb1/0x110
[  112.707150][   T24]  usb_probe_device+0xec/0x3e0
[  112.708672][   T24]  ? __pfx_usb_probe_device+0x10/0x10
[  112.710361][   T24]  really_probe+0x241/0xa90
[  112.711833][   T24]  __driver_probe_device+0x1de/0x440
[  112.713497][   T24]  ? usb_driver_applicable+0x1c7/0x220
[  112.715230][   T24]  driver_probe_device+0x4c/0x1b0
[  112.716970][   T24]  __device_attach_driver+0x1df/0x310
[  112.718672][   T24]  ? __pfx___device_attach_driver+0x10/0x10
[  112.720538][   T24]  bus_for_each_drv+0x159/0x1e0
[  112.722095][   T24]  ? __pfx_bus_for_each_drv+0x10/0x10
[  112.723807][   T24]  ? lockdep_hardirqs_on+0x7c/0x110
[  112.725462][   T24]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  112.727514][   T24]  __device_attach+0x1e4/0x4b0
[  112.729043][   T24]  ? __pfx___device_attach+0x10/0x10
[  112.730727][   T24]  ? do_raw_spin_unlock+0x172/0x230
[  112.732418][   T24]  bus_probe_device+0x17f/0x1c0
[  112.733953][   T24]  device_add+0x1148/0x1a70
[  112.735415][   T24]  ? __pfx_device_add+0x10/0x10
[  112.737006][   T24]  ? add_device_randomness+0xb7/0xf0
[  112.738705][   T24]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  112.740567][   T24]  usb_new_device+0xd07/0x1a20
[  112.742080][   T24]  ? do_raw_spin_lock+0x12c/0x2b0
[  112.743706][   T24]  ? __pfx_usb_new_device+0x10/0x10
[  112.745481][   T24]  ? mark_held_locks+0x49/0x80
[  112.747129][   T24]  hub_event+0x2eb7/0x4fa0
[  112.748573][   T24]  ? __pfx_hub_event+0x10/0x10
[  112.750109][   T24]  ? sm3_block_generic+0x2e90/0x35e0
[  112.751812][   T24]  ? rcu_is_watching+0x12/0xc0
[  112.753331][   T24]  process_one_work+0x9cf/0x1b70
[  112.754906][   T24]  ? __pfx_hcd_resume_work+0x10/0x10
[  112.756602][   T24]  ? __pfx_process_one_work+0x10/0x10
[  112.758305][   T24]  ? assign_work+0x1a0/0x250
[  112.759809][   T24]  worker_thread+0x6c8/0xf10
[  112.761273][   T24]  ? __pfx_worker_thread+0x10/0x10
[  112.762899][   T24]  kthread+0x3c5/0x780
[  112.764191][   T24]  ? __pfx_kthread+0x10/0x10
[  112.765643][   T24]  ? rcu_is_watching+0x12/0xc0
[  112.767272][   T24]  ? __pfx_kthread+0x10/0x10
[  112.768764][   T24]  ret_from_fork+0x5d7/0x6f0
[  112.770243][   T24]  ? __pfx_kthread+0x10/0x10
[  112.771734][   T24]  ret_from_fork_asm+0x1a/0x30
[  112.773257][   T24]  </TASK>
[  112.774246][   T24] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  112.776540][   T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  112.780189][   T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  112.783542][   T24] Workqueue: usb_hub_wq hub_event
[  112.785144][   T24] Call Trace:
[  112.786208][   T24]  <TASK>
[  112.787178][   T24]  dump_stack_lvl+0x3d/0x1f0
[  112.788653][   T24]  panic+0x71c/0x800
[  112.789901][   T24]  ? __pfx_panic+0x10/0x10
[  112.791342][   T24]  ? show_trace_log_lvl+0x29b/0x3e0
[  112.792984][   T24]  ? check_panic_on_warn+0x1f/0xb0
[  112.794608][   T24]  ? firmware_fallback_sysfs+0x6d3/0xbe0
[  112.796334][   T24]  check_panic_on_warn+0xab/0xb0
[  112.797900][   T24]  __warn+0xf6/0x3c0
[  112.799167][   T24]  ? firmware_fallback_sysfs+0x6d3/0xbe0
[  112.800966][   T24]  report_bug+0x3c3/0x580
[  112.802366][   T24]  ? firmware_fallback_sysfs+0x6d3/0xbe0
[  112.804144][   T24]  handle_bug+0x184/0x210
[  112.805516][   T24]  exc_invalid_op+0x17/0x50
[  112.806974][   T24]  asm_exc_invalid_op+0x1a/0x20
[  112.808495][   T24] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0
[  112.810452][   T24] Code: 88 fb e9 da f9 ff ff e8 4b 90 a9 fb e8 86 f0 6f fb 31 ff 89 c3 89 c6 e8 7b 8b a9 fb 85 db 0f 84 17 fb ff ff e8 2e 90 a9 fb 90 <0f> 0b 90 48 c7 c6 20 c7 42 8c 4c 89 e2 4c 89 f7 e8 58 28 f9 ff e9
[  112.816472][   T24] RSP: 0018:ffffc9000062ec90 EFLAGS: 00010293
[  112.818400][   T24] RAX: 0000000000000000 RBX: 00000000fffffff5 RCX: ffffffff86126245
[  112.820882][   T24] RDX: ffff88801e2fa440 RSI: ffffffff86126252 RDI: 0000000000000005
[  112.823366][   T24] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  112.825821][   T24] R10: 00000000fffffff5 R11: 0000000000002c00 R12: ffffc9000062ef20
[  112.828328][   T24] R13: ffff888054822240 R14: ffff888032eb00b0 R15: 0000000000001770
[  112.830842][   T24]  ? firmware_fallback_sysfs+0x6c5/0xbe0
[  112.832591][   T24]  ? firmware_fallback_sysfs+0x6d2/0xbe0
[  112.834367][   T24]  _request_firmware+0xfe9/0x1470
[  112.835990][   T24]  ? __pfx__request_firmware+0x10/0x10
[  112.837712][   T24]  ? __pfx_sprintf+0x10/0x10
[  112.839208][   T24]  ? lockdep_init_map_type+0x5c/0x280
[  112.840927][   T24]  request_firmware+0x35/0x50
[  112.842431][   T24]  ti_startup+0x8f3/0x1350
[  112.843873][   T24]  ? __pfx_ti_startup+0x10/0x10
[  112.845421][   T24]  ? trace_kmalloc+0x2b/0xd0
[  112.846859][   T24]  ? __kmalloc_noprof+0x242/0x510
[  112.848476][   T24]  ? __asan_memset+0x23/0x50
[  112.849937][   T24]  ? __pfx_ti_startup+0x10/0x10
[  112.851495][   T24]  ? __pfx_ti_interrupt_callback+0x10/0x10
[  112.853341][   T24]  usb_serial_probe+0x2816/0x4040
[  112.854954][   T24]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  112.856799][   T24]  usb_probe_interface+0x300/0x9c0
[  112.858422][   T24]  ? __pfx_usb_probe_interface+0x10/0x10
[  112.860226][   T24]  really_probe+0x241/0xa90
[  112.861679][   T24]  __driver_probe_device+0x1de/0x440
[  112.863374][   T24]  driver_probe_device+0x4c/0x1b0
[  112.864958][   T24]  __device_attach_driver+0x1df/0x310
[  112.866663][   T24]  ? __pfx___device_attach_driver+0x10/0x10
[  112.868530][   T24]  bus_for_each_drv+0x159/0x1e0
[  112.870069][   T24]  ? __pfx_bus_for_each_drv+0x10/0x10
[  112.871779][   T24]  ? lockdep_hardirqs_on+0x7c/0x110
[  112.873416][   T24]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  112.875264][   T24]  __device_attach+0x1e4/0x4b0
[  112.876776][   T24]  ? __pfx___device_attach+0x10/0x10
[  112.878474][   T24]  ? do_raw_spin_unlock+0x172/0x230
[  112.880174][   T24]  bus_probe_device+0x17f/0x1c0
[  112.881712][   T24]  device_add+0x1148/0x1a70
[  112.883168][   T24]  ? __pfx_device_add+0x10/0x10
[  112.884644][   T24]  ? usb_cache_string+0xf2/0x150
[  112.886183][   T24]  usb_set_configuration+0x1187/0x1e20
[  112.887943][   T24]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  112.889845][   T24]  usb_generic_driver_probe+0xb1/0x110
[  112.891571][   T24]  usb_probe_device+0xec/0x3e0
[  112.893088][   T24]  ? __pfx_usb_probe_device+0x10/0x10
[  112.894789][   T24]  really_probe+0x241/0xa90
[  112.896231][   T24]  __driver_probe_device+0x1de/0x440
[  112.897903][   T24]  ? usb_driver_applicable+0x1c7/0x220
[  112.899628][   T24]  driver_probe_device+0x4c/0x1b0
[  112.901224][   T24]  __device_attach_driver+0x1df/0x310
[  112.902900][   T24]  ? __pfx___device_attach_driver+0x10/0x10
[  112.904776][   T24]  bus_for_each_drv+0x159/0x1e0
[  112.906314][   T24]  ? __pfx_bus_for_each_drv+0x10/0x10
[  112.908023][   T24]  ? lockdep_hardirqs_on+0x7c/0x110
[  112.909653][   T24]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  112.911490][   T24]  __device_attach+0x1e4/0x4b0
[  112.912998][   T24]  ? __pfx___device_attach+0x10/0x10
[  112.914665][   T24]  ? do_raw_spin_unlock+0x172/0x230
[  112.916295][   T24]  bus_probe_device+0x17f/0x1c0
[  112.917839][   T24]  device_add+0x1148/0x1a70
[  112.919298][   T24]  ? __pfx_device_add+0x10/0x10
[  112.920832][   T24]  ? add_device_randomness+0xb7/0xf0
[  112.922504][   T24]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  112.924378][   T24]  usb_new_device+0xd07/0x1a20
[  112.925890][   T24]  ? do_raw_spin_lock+0x12c/0x2b0
[  112.927508][   T24]  ? __pfx_usb_new_device+0x10/0x10
[  112.929152][   T24]  ? mark_held_locks+0x49/0x80
[  112.930680][   T24]  hub_event+0x2eb7/0x4fa0
[  112.932108][   T24]  ? __pfx_hub_event+0x10/0x10
[  112.933627][   T24]  ? sm3_block_generic+0x2e90/0x35e0
[  112.935346][   T24]  ? rcu_is_watching+0x12/0xc0
[  112.936860][   T24]  process_one_work+0x9cf/0x1b70
[  112.938422][   T24]  ? __pfx_hcd_resume_work+0x10/0x10
[  112.940090][   T24]  ? __pfx_process_one_work+0x10/0x10
[  112.941761][   T24]  ? assign_work+0x1a0/0x250
[  112.943239][   T24]  worker_thread+0x6c8/0xf10
[  112.944700][   T24]  ? __pfx_worker_thread+0x10/0x10
[  112.946294][   T24]  kthread+0x3c5/0x780
[  112.947627][   T24]  ? __pfx_kthread+0x10/0x10
[  112.949086][   T24]  ? rcu_is_watching+0x12/0xc0
[  112.950629][   T24]  ? __pfx_kthread+0x10/0x10
[  112.952121][   T24]  ret_from_fork+0x5d7/0x6f0
[  112.953596][   T24]  ? __pfx_kthread+0x10/0x10
[  112.955078][   T24]  ret_from_fork_asm+0x1a/0x30
[  112.956585][   T24]  </TASK>
[  112.958223][   T24] Kernel Offset: disabled
[  112.959607][   T24] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:45:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000174fad RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000
RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08
R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000
RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6713000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fc209ee7d60 CR3=000000002a049000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000009 Opmask01=0000000000000001 Opmask02=00000000ffff1fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 657473797320676e 6974736575716552
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 206d657473797320 676e697473657571
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a3d9d180 0000000004000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70424204 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe600000010 00007fe6a3f3fcd0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff704241e8 00007fff70424220
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a40005f0 00007fe6a4012f8c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe600000010 00007fff70424220
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454c4f534e4f4300 3120444950207361 206e757220656220 7473756d00712d00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454c4f534e4f4300 1405444950055644 054b505705404705 5156504800540800
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572202c74696e69 73797320666f2065 6e6f203d3d202020 206e6f6974636120
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000d9403 RBX=0000000000000001 RCX=ffffffff8b885c99 RDX=0000000000000000
RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003bd9488 RSP=ffffc90000177df8
R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001
R12=0000000000000001 R13=ffff88801deca440 R14=ffffffff90a98750 R15=0000000000000000
RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6813000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000564fba602000 CR3=000000000e382000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000002081 Opmask01=0000000000000001 Opmask02=00000000ff7f7fef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9150970c459bbd6f af7beade93da8ca7
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 39acc051c1eed7eb 0f52232bb9330125
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e44101696a859926 b973f6d649156c8b
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 193c4758731cb51c 0ee656c86d42fd5a
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 805613d323b5f9d2 ca033ecf3c58ff94
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e944828f1a83620 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4768ab6100aaba3f c6b6e218396c0580
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e224727300000000 e767a2e41f0a6a7d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b477a4b9b0f25b5 56462510e9bf5c54
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa59b0641fecb2e0 52318364d4bc6604
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66676f6c206e6570 6f2074276e646c75 6f43005445495551 004e4f4d45414400
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43424a49054b4055 4a0551024b414950 4a43005445495551 004e4f4d45414400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d326168732d6173 6463652c34383370 7473696e2d326168 732d61736463652c
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f332532ee222437 2421282bee313234 eec82f332532bf2c 2433323832213412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2fbf322f34333120 333237202c242231 342e3231242fbf2c 2433323832213432
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc9000062e600
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b0c7260 R15=ffffffff855bce70
RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6913000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffb34df84c0 CR3=000000000e382000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000004b36 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000009 Opmask01=0000000000000001 Opmask02=00000000ffff1fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 657473797320676e 6974736575716552
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 206d657473797320 676e697473657571
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a3d9d180 0000000004000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70424204 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe600000010 00007fe6a3f3fcd0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff704241e8 00007fff70424220
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6a40005f0 00007fe6a4012f8c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe600000010 00007fff70424220
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454c4f534e4f4300 3120444950207361 206e757220656220 7473756d00712d00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454c4f534e4f4300 1405444950055644 054b505705404705 5156504800540800
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572202c74696e69 73797320666f2065 6e6f203d3d202020 206e6f6974636120
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000000f8fbf RBX=0000000000000003 RCX=ffffffff8b885c99 RDX=0000000000000000
RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003c5c000 RSP=ffffc90000197df8
R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001
R12=0000000000000003 R13=ffff88801e2e0000 R14=ffffffff90a98750 R15=0000000000000000
RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fa65d70de9c CR3=000000000e382000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000020000002 Opmask01=0000000000000008 Opmask02=00000000ffffffbf Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a9b3aee1d1a9114
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4dffe3b2874143d6 ce5c96dbf18c49bd
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e70b7ea218cb75c1 2a486dc6333cd8df
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6f48ec43b30b328 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b3f68b12111bc85 7215c41b481861db
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b79d23d800000000 6ca22cd59d4966aa
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77a93a062e3056ba c5eba82c2ed40113
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 56df51af009b34dc a73c388dc6529a4f
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6e752074276e61 63006976633a7461 726e646c6600796c 6e6f2d6461657220
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 484b500551024b44 46004c53461f5144 574b414943005c49 4b4a084144405705
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d2c7463636175 70632c656d697461 6c65722c6c656261 6c6365732c777220
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000