last executing test programs:

3m0.411997057s ago: executing program 0 (id=73):
r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x3, 0x2})
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000200)={0x5})

3m0.352323314s ago: executing program 0 (id=74):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x3)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x3000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r5, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x5411, 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x5)
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

3m0.281985902s ago: executing program 0 (id=77):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
signalfd4(r1, &(0x7f0000000000)={[0x3]}, 0x8, 0x80000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x800, 0x400000000000, 0x2, 0x7, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m59.281129262s ago: executing program 0 (id=93):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mount$9p_virtio(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', &(0x7f0000000340), 0x8894, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
setxattr$incfs_id(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2)
r2 = dup(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r7)
ptrace(0x4207, r7)
chdir(&(0x7f0000000000)='./file1\x00')
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x4d, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xdc, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f0000000200), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8}, 0x18)

2m59.191030398s ago: executing program 0 (id=97):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x348, 0x258, 0xffffffff, 0x438, 0x348, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, 0x0, {[{{@ipv6={@mcast2, @dev, [], [], 'pimreg0\x00', 'veth0\x00'}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @dev, @remote, @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @private1, @dev, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@loopback, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev, [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, @ipv4=@local, @port, @icmp_id}}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv4=@dev, @icmp_id}}}, {{@ipv6={@dev, @empty, [], [], 'pimreg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@loopback, @icmp_id, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000680)=0x5, 0x4)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r3, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r5, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4})

2m58.009046298s ago: executing program 0 (id=100):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x20010, r0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_pidfd_open(r1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000100)="95440f9ae4a06580fc76f790541ec5c52ed0db9023f8052ca90917fac893e33f51824b3b9306e559b5e4059b411f8a81f0dfef5b8dd0e21440131499ca8750bdbe1a90fd928ad6265c1a7f599c907fdbcb252a598e971d77ddda49f67fdf8cd2912b66eac23a52f8a2ef6abbb4a67d0c7d828245e80ea29c9d89991ba70f2df014157ecf55d24dd0e6e9808b79e75a", 0x8f}, {&(0x7f00000001c0)="5cbb679804593c28f698c6162a75ab48d649956d6d54bd6b068c5a70c117fc922a7c5626ab9e80cd40fc504bcf5071f010e27ca911a118534537c27ac4b8004d04095724e37b357260f390ea42e67c1391ddb757f4ee413c82ef9c9f7670ef7e637825d29ec95d5bb7f7a4eb55243a3cdfb2fad38abc59cc602cae867fed049a0b679a7fc60d5e6598a740654bbb7cb9371b56e1be68c2a15845db73e6c80a99b49ae2ef76f073", 0xa7}, {&(0x7f0000000280)="b2b57dd36cc889ab6eeb476a0279c25773c1cea54fd1680864796b4fed54870d13ab6851c510157dd4887ad79a501eb5a2e247", 0x33}, {&(0x7f00000002c0)="5f4c0933578c7a50968aa987689f91ddb2a2d2142c1ea04dd75f3c94650d25c378d02130fe4ed5e1893609f2057b11bc7e7555cf9dcead3659c4165d9c4d28abf04d721232f95bbd850214bf2057f926bb2ebebac009ce2c8aaada04cc087926240d8b56e734e038c80065fc7db7a54d3413cd06d383f104b874dda51c7ae082b09d2e9ce7ea6ac94faff34776f03994c3d5f5a0ba04422e1a969510b0617e98f64d22f2574732c8ca52a0890843f2c083d39d50f191c2c5314cfd13ad54cbef182148e5d7624be353b9879dd0df425cf4364649b7255667f0ff7fc50b76a69f6b82798a0e541b5cc7f70d83", 0xec}, {&(0x7f00000003c0)="5e6c4da9cafa68c6e5e5dc2bd9709622a1a03975dab523e1b14ae748852198155728f352ef8d0d7080ebd7a93409587e81393f73b4296c32b5e6a2e78d512328b5c10a5af7575b68543b25c688cdd1a03b160d0c73477ba8f62dd9a4a32f2d788f96b387c50ad5e8c5793aa892cc9dda7c6ba43d61575e92674831b907f4e11df8f57adfd827ce1d61c342e8c0f3145f01099cacd25f0fabe79c7f8b081bc8c3b6cc450b9bf1a4557056aa20b55e738363101afba03e3ad1822a6be2646021518f7b73f73394709b77ff8ccd64420991f7c9dbf781cb270422b8c2373ffa29685dcdcf783cd4189eced3", 0xea}, {&(0x7f00000004c0)="0dbf5ea6d51a08e51214800d5f95ebd4ea45b385516556044768217c89767e8d7155fdf5c606cc70d758cd5e8c26427795ec4f59bdf71b334277c539f7255b2f4e2c32c9f10ae2c8e00169aab49d8d27077520082ca82abb1f2be5f40d5a63b533a0f590be2684c64745b0f0624ed12eda93e1b6b9ea95864ae1cbc7accfbbeb353a1ad8dba0e6df5185257e5023c210315d7b8c1f3db86980f8ab6ac784c51f151aa596c916aade27fdafa797cd34ee3c05d1dd765e6b49a00d4605acb3dc27554473b4043e573e944c62db726b69410c58993f92cfd4bca90c675b2c056faf6dda48769c06cadf6775a8647865894b1ce757c60a97e1cb04bd2bbc97", 0xfd}, {&(0x7f00000005c0)="badaac18fbfb6c5f273ee2ee7ec737cfee4654227bcabac3e954429aa3f5a59c3668deaad37358ad4b7931ebcf2aff87d1641581c96356bd01991dffab893aefcc61dc677a05dcf2968d5b18f27fc22c0f9189", 0x53}], 0x7, 0x0, 0x0, 0x4811}, 0x20008040)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
write$dsp(r5, &(0x7f0000000740)="56f957cb69b0deb4cc92f2e2d6b3ad920c", 0x11)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000780), 0x4080, 0x0)
read$dsp(r0, &(0x7f00000007c0)=""/131, 0x83)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000880))
setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000008c0)={0x100, 0x3, 0xffff})
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000900)=0x75)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xcf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000844}, 0x4040804)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x303}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x66a, 0x9, 0x65ab, 0x3, 0x100, 0x9]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000bc0))
ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000c00))
truncate(&(0x7f0000000c40)='./file0\x00', 0x4)
ioctl$SNDCTL_DSP_GETFMTS(r5, 0x8004500b, &(0x7f0000000c80)=0x1)
ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000cc0))
ioctl$SCSI_IOCTL_SYNC(r5, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, r6, 0x3, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_SELECT={0xc, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x2}}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x128}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000810)
sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [""]}, 0x14}}, 0x40084)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000f80)=0x401)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r2)
syz_emit_vhci(&(0x7f0000000fc0)=@HCI_VENDOR_PKT, 0x2)

2m57.960839608s ago: executing program 32 (id=100):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x20010, r0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_pidfd_open(r1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000100)="95440f9ae4a06580fc76f790541ec5c52ed0db9023f8052ca90917fac893e33f51824b3b9306e559b5e4059b411f8a81f0dfef5b8dd0e21440131499ca8750bdbe1a90fd928ad6265c1a7f599c907fdbcb252a598e971d77ddda49f67fdf8cd2912b66eac23a52f8a2ef6abbb4a67d0c7d828245e80ea29c9d89991ba70f2df014157ecf55d24dd0e6e9808b79e75a", 0x8f}, {&(0x7f00000001c0)="5cbb679804593c28f698c6162a75ab48d649956d6d54bd6b068c5a70c117fc922a7c5626ab9e80cd40fc504bcf5071f010e27ca911a118534537c27ac4b8004d04095724e37b357260f390ea42e67c1391ddb757f4ee413c82ef9c9f7670ef7e637825d29ec95d5bb7f7a4eb55243a3cdfb2fad38abc59cc602cae867fed049a0b679a7fc60d5e6598a740654bbb7cb9371b56e1be68c2a15845db73e6c80a99b49ae2ef76f073", 0xa7}, {&(0x7f0000000280)="b2b57dd36cc889ab6eeb476a0279c25773c1cea54fd1680864796b4fed54870d13ab6851c510157dd4887ad79a501eb5a2e247", 0x33}, {&(0x7f00000002c0)="5f4c0933578c7a50968aa987689f91ddb2a2d2142c1ea04dd75f3c94650d25c378d02130fe4ed5e1893609f2057b11bc7e7555cf9dcead3659c4165d9c4d28abf04d721232f95bbd850214bf2057f926bb2ebebac009ce2c8aaada04cc087926240d8b56e734e038c80065fc7db7a54d3413cd06d383f104b874dda51c7ae082b09d2e9ce7ea6ac94faff34776f03994c3d5f5a0ba04422e1a969510b0617e98f64d22f2574732c8ca52a0890843f2c083d39d50f191c2c5314cfd13ad54cbef182148e5d7624be353b9879dd0df425cf4364649b7255667f0ff7fc50b76a69f6b82798a0e541b5cc7f70d83", 0xec}, {&(0x7f00000003c0)="5e6c4da9cafa68c6e5e5dc2bd9709622a1a03975dab523e1b14ae748852198155728f352ef8d0d7080ebd7a93409587e81393f73b4296c32b5e6a2e78d512328b5c10a5af7575b68543b25c688cdd1a03b160d0c73477ba8f62dd9a4a32f2d788f96b387c50ad5e8c5793aa892cc9dda7c6ba43d61575e92674831b907f4e11df8f57adfd827ce1d61c342e8c0f3145f01099cacd25f0fabe79c7f8b081bc8c3b6cc450b9bf1a4557056aa20b55e738363101afba03e3ad1822a6be2646021518f7b73f73394709b77ff8ccd64420991f7c9dbf781cb270422b8c2373ffa29685dcdcf783cd4189eced3", 0xea}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f00000005c0)="badaac18fbfb6c5f273ee2ee7ec737cfee4654227bcabac3e954429aa3f5a59c3668deaad37358ad4b7931ebcf2aff87d1641581c96356bd01991dffab893aefcc61dc677a05dcf2968d5b18f27fc22c0f9189", 0x53}], 0x7, 0x0, 0x0, 0x4811}, 0x20008040)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
write$dsp(r5, &(0x7f0000000740)="56f957cb69b0deb4cc92f2e2d6b3ad920c", 0x11)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000780), 0x4080, 0x0)
read$dsp(r0, &(0x7f00000007c0)=""/131, 0x83)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000880))
setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000008c0)={0x100, 0x3, 0xffff})
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000900)=0x75)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xcf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000844}, 0x4040804)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x303}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x66a, 0x9, 0x65ab, 0x3, 0x100, 0x9]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000bc0))
ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000c00))
truncate(&(0x7f0000000c40)='./file0\x00', 0x4)
ioctl$SNDCTL_DSP_GETFMTS(r5, 0x8004500b, &(0x7f0000000c80)=0x1)
ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000cc0))
ioctl$SCSI_IOCTL_SYNC(r5, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, r6, 0x3, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_SELECT={0xc, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x2}}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x128}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000810)
sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [""]}, 0x14}}, 0x40084)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000f80)=0x401)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r2)
syz_emit_vhci(&(0x7f0000000fc0)=@HCI_VENDOR_PKT, 0x2)

2m33.45166063s ago: executing program 3 (id=480):
r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2m33.451230033s ago: executing program 3 (id=482):
fsopen(&(0x7f0000000000)='exfat\x00', 0x0) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f00001b0000/0x2000)=nil}) (async, rerun: 64)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 64)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000004c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x71, 0x0, 0x0) (async, rerun: 32)
memfd_create(&(0x7f0000000640)='@&)#\n*)\\\x00', 0x0) (rerun: 32)
r5 = socket$packet(0x11, 0x3, 0x300)
dup(r5) (async)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x81) (async)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0x74, 0x0, 0xeeb287d3c6e2a73d}) (async)
r6 = socket(0x15, 0x80000, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) (async)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=0x0, @ANYRESOCT=r1], 0x5c, 0x0) (async)
getxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)=""/198, 0xc6)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2m33.151439039s ago: executing program 3 (id=486):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
creat(&(0x7f00000001c0)='./file0\x00', 0x104)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="fd955c04763082e37e3bc5e2e61cdf54951af7cc9d149e85425f0e728f9d8b1939132f0f70c1d33439dc49a32ce3298ea76b2b940309158e9ab7cd3a0113a98c58d6e9ff9463286e4ea1f387cb459075691af97bf65990c7da752cfd90f90a01852529172e210bca2a4b81e497cf81577e2617c703a039c5f66d97e1d8463d692df7ada43804240a68fc8473a8be83c142ba7735b1557d277aebadbb4a1dc61a3a6da8b6de9c44b264", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(r5, 0x0, 0x4040850)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000800000000040000008500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x8f}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

2m32.819827281s ago: executing program 3 (id=493):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x12, &(0x7f0000000600)=""/97, &(0x7f0000000680)=0x61)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00')
preadv(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000440)=""/196, 0xc4}], 0xc, 0x4, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
syz_emit_ethernet(0xe4, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@mpls_mc={0x8848, {[{}], @generic="3da0f6fa0ffbb675ff82bd6f02b39b88e0e1adec753eb7ddff4a8d5e6dfd98e27fb45f5f6fc898a7eb6e90fd9f83d53c1e937f36c11b1ac20f336e72fa3d3faaa5d88b279c0f8a80188f7317eab04fac00e81fcaaf29c87f498da31fdb18e20b154bd903c88cd6c2f6cba6ad21f0270d2d8b1b8cb7c173f853e2ef3c396cd700d3ccb62ddb83b80e18a9004dd91df83166aacf644a335e72c2f840d3d122bbf143920e4eb70f4b25999fd65962a1e0207be0600c4c5a7b0281a4220f9b38ae529a0b70d3eadb0e60b515656f89dc76f63daa"}}}}, &(0x7f0000000100)={0x1, 0x3, [0xd44, 0xcb4, 0x2de, 0xab4]})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
getsockopt$sock_buf(r0, 0x1, 0x12, &(0x7f0000000600)=""/97, &(0x7f0000000680)=0x61) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') (async)
preadv(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000440)=""/196, 0xc4}], 0xc, 0x4, 0x0) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
socket$kcm(0xa, 0x3, 0x3a) (async)
syz_emit_ethernet(0xe4, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@mpls_mc={0x8848, {[{}], @generic="3da0f6fa0ffbb675ff82bd6f02b39b88e0e1adec753eb7ddff4a8d5e6dfd98e27fb45f5f6fc898a7eb6e90fd9f83d53c1e937f36c11b1ac20f336e72fa3d3faaa5d88b279c0f8a80188f7317eab04fac00e81fcaaf29c87f498da31fdb18e20b154bd903c88cd6c2f6cba6ad21f0270d2d8b1b8cb7c173f853e2ef3c396cd700d3ccb62ddb83b80e18a9004dd91df83166aacf644a335e72c2f840d3d122bbf143920e4eb70f4b25999fd65962a1e0207be0600c4c5a7b0281a4220f9b38ae529a0b70d3eadb0e60b515656f89dc76f63daa"}}}}, &(0x7f0000000100)={0x1, 0x3, [0xd44, 0xcb4, 0x2de, 0xab4]}) (async)

2m32.819572649s ago: executing program 3 (id=494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000003030500000000000000000000d600000c000200"], 0x20}}, 0x0) (async)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f00000002c0)) (async)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x115080, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r2=>0x0, @dev}, &(0x7f00000000c0)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd27, 0x25dfdbfd, {0x7, r2}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8a4}, 0x40)

2m32.75196832s ago: executing program 3 (id=495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x40000000, 0x2000, 0x2})
syz_io_uring_setup(0x1bb7, &(0x7f00000002c0)={0x0, 0x71d3, 0x2, 0x0, 0x10c}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000140)=0x4, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$P9_RLCREATE(r2, &(0x7f0000000380)={0x18, 0xf, 0x1, {{0x0, 0x4, 0x2}, 0x3}}, 0x18)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r5, &(0x7f0000000500)="a4", 0xbb7, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './bus/../file0', [{0x20, '/dev/kvm\x00'}, {}, {0x20, '\x10/(}*}%}\xf2'}]}, 0x27)
r7 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
close_range(0xffffffffffffffff, r5, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000250001002cbd7000ffdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)

2m17.41520369s ago: executing program 33 (id=495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x40000000, 0x2000, 0x2})
syz_io_uring_setup(0x1bb7, &(0x7f00000002c0)={0x0, 0x71d3, 0x2, 0x0, 0x10c}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000140)=0x4, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$P9_RLCREATE(r2, &(0x7f0000000380)={0x18, 0xf, 0x1, {{0x0, 0x4, 0x2}, 0x3}}, 0x18)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r5, &(0x7f0000000500)="a4", 0xbb7, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './bus/../file0', [{0x20, '/dev/kvm\x00'}, {}, {0x20, '\x10/(}*}%}\xf2'}]}, 0x27)
r7 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
close_range(0xffffffffffffffff, r5, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000250001002cbd7000ffdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)

1m37.861370154s ago: executing program 5 (id=1045):
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @private=0xa010100}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000001c0)={0xfec3, 0x3, 0x7, 0x5ff, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4044)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1800003, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)
ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080})
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_INTERRUPT(r8, 0x4004ae86, &(0x7f00000000c0))
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0400000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="60c10200080000002400128011000100627246b6bc675f736c617665000000000c00058006000200090000009f4f3e223db76a661707ead4639cfde60690968579010417358e54ec45b9eb1ca40e49e2fad975c4"], 0x44}}, 0x0)

1m36.750977463s ago: executing program 5 (id=1059):
r0 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='bind', 0xfffffffffffffff9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async, rerun: 32)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="9ff1d9c338b4c25e4f9b6b329849f72812eaa9fff6abf5f45818aadc5330039fe30c3cea6c571503090fa37c97467b0e74fd9ecf74976c55ce7aad7b93a6ad0b2517ff80480ca3d39f70b680662719728cdf730c310ab2cef2e30ddc70ab4c819a42976118c603b4d9200ec90e8073ce1b58ef375bd51676b838485958935a89d78e5072174a1b532fd794d38c1df11ace47eb6a13eec1e70403f72642c8f8388ae8a820f522f8ceb3a5a6334d53a9df775917c1d80305f3c07e70afaf88061bcead76f78c65451485962c4d6de369765262e4549c0dff21f2a8d4b032b2e1da44243f32", 0xe4, r0) (async, rerun: 32)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]})

1m36.750491135s ago: executing program 5 (id=1060):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000)
r1 = socket$inet(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x48042, 0x4)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$getflags(r2, 0x401)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='hybla\x00', 0x6)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000000906050800000000000000000200ff780900020073797a3100000000080009400000003905000100070000d92c7870800c00f47f080009400000000264ca1c325902cd0d38ecc5ce2cd75a5c7810126497522c2ee721697ede79b1417182f89ef9ebf98c5ac58a6592519436bd3c642823519ac965efac892ca2ccd2477c889e41aa000000000000791b10bdc4b7717a968a1ff2a657ed9058f86628acb112b15400"], 0x40}, 0x1, 0x0, 0x0, 0x20004004}, 0x80)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf252800000006000400a1aa000006000600ffff000005002b000000000008000200", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40850)
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x10000000)
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x400000, 0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, 0x0, &(0x7f0000000100))
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x25, @private2, 0x10}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @mcast2}, 0x16)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9)
socket$netlink(0x10, 0x3, 0x0)

1m36.680912923s ago: executing program 5 (id=1061):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

1m36.631301815s ago: executing program 5 (id=1062):
r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000680)="64fd0c2a060000", 0x7, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
io_uring_setup(0xf34, &(0x7f0000000180)={0x0, 0x51d0, 0x1000, 0x3, 0xe0})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000010) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x2000, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80000001}, 0x1c) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r2, &(0x7f0000006200)={0x2020, 0x0, <r4=>0x0}, 0x2020) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0) (async)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082)
fcntl$setstatus(r6, 0x4, 0x42c00) (async)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000740)="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", 0x141}], 0x1) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) (async)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000000c0)={r7}, &(0x7f0000000180)=0x8) (async)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2808b08}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4001, 0x0)
ioctl$SIOCRSGCAUSE(r8, 0x40806685, &(0x7f0000000180)) (async)
r9 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, r1, r9, r1, 0x1)

1m36.399831085s ago: executing program 5 (id=1066):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000020000040"])
r3 = open(&(0x7f00009e1000)='./file1\x00', 0x8160, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
setxattr$system_posix_acl(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)

1m36.367222978s ago: executing program 34 (id=1066):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000020000040"])
r3 = open(&(0x7f00009e1000)='./file1\x00', 0x8160, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
setxattr$system_posix_acl(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)

1m35.301546977s ago: executing program 1 (id=1078):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="03", 0x1, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000280)="21eeaaf3f9", 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x154}, 0x1, 0x0, 0x0, 0x20040840}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x154}}, 0x0)

1m35.301026146s ago: executing program 1 (id=1079):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x4c, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3f}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548)

1m35.181573529s ago: executing program 1 (id=1080):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x7db2, 0x4)
r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0)
r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121801)
io_setup(0x3, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000100)={0x5, @capture={0x0, 0x0, {0x8001, 0x5}, 0x6, 0x6}})
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0)

1m35.110510901s ago: executing program 1 (id=1082):
r0 = memfd_create(&(0x7f0000001040)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8\x13\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5\xad\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef%\xa1a\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x06\x00\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0Y\xcb\x8e;\xdb\x88\b.N\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p\x89E]%W=\xd1\x0e\x05S\xd0\x94\xe9\xf7U\x11\x9a\xc0^\x1a5\xc6dc\xe2\x8c\xa7j\b+\xfa.\f\xd9\xda\x12\xd0:\xb1\xb3', 0x7)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)="f100eeebfd2318b6849a92b58a1afeb6021074d45aea7ab97d7fb475df5f657645535044d49f6d524a8b7acdaf04b5d1607ffe0e4d55b3daf567b6c09fb84a4b6063ec40b0714e16c125ebb2f3dc96a33fb35496bf5cd7ccfa9e9903d10546dfaf5ad48a19c39881bb76c0f5183ba42d181fe9305f56bd307df131e88d818ccf0ec7cc2cb5737e16c3c89ef6172fd21b7131eb948f02c6b5a956183b8487318c8ab23dc1d75d59d3d6b0913ce7eedf9b917fa31fa18d210ac2fc75600b85d46d30f2ffbdd6abb1b75604b6aae43a252a54032615664839e85ade2121e848c2205f3c2d1242a517841918f43618ea54c1bdc417", 0xf3)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{}], 0x1, 0x1ff, 0x0, 0x0, 0x0, 0xd})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002140)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000300)={0x0, 0xffffffffffffffb0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES64=r1, @ANYBLOB="0a00180004030303030300004c002380060004009600000005001d000100000006000200d300000005001e000100000008001a000200000006000400ce0000000600010083"], 0x74}}, 0x0)
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x591440, 0x0)
ioctl(r5, 0x8000, 0x0)

1m35.029293434s ago: executing program 1 (id=1085):
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r6}, './file0\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0)

1m34.771517756s ago: executing program 1 (id=1086):
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/160}, 0xa8, 0x3, 0x1800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
connect$netlink(r1, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xe, '\x00', 0x198, 0xfffffffc, 0x200}}}}]}, 0x48}}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x800, 0x0, 0x103, 0x1, 0xf7b2}, 0x20)
sendmsg$inet6(r6, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}, @dstopts_2292={{0x18}}], 0x78}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x3c}}, 0x0)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$cgroup_pid(r7, &(0x7f00000031c0), 0x12)
sendmsg(r7, &(0x7f0000000580)={&(0x7f0000000140)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="dd50fe8bddb04b6f6bb9fb71ecd6a1e4a421dd7f65cc05c0a9e70db788e40ac9f7b72b41879d00419a6a84386c46267fe8e6", 0x32}, {&(0x7f00000002c0)="bd264ff9a442a996d4f6677a1a82eb1d063c2385265a9a8463a1d2cb7e4e26b71861232cbe9cf8f4d68771e33e47fc149cad182da2d1675da968d39bae258ac16c8f511dacd9101c4f33ba3fdb74ab086566f645dd436dc6d911bb79008d60714da34e1885c79f12ca634ad4a09ab5bff7040320b65ef37704f5215ea17ce232912572abe82c700b32072ed9e847cb", 0x8f}], 0x2, &(0x7f00000003c0)=[{0xd0, 0x10e, 0x8, "0117cffc5aa790b7e4564bfdae689453283530f3c5aeb326a443fefdd0b84ea0ceb78d17cec3701308dc2e7f1fccac818e092ceaafc46377513a689af4fa2acf83f4d58a0d86b17b1480db99958fb48c07351b25b7688eaedeedf583a46e5ae0c50a665c0671f235d931e17d50c2d3a19b64b9d17afd90239765f591c7b87e3688231ebf3d7cca43245a6bc54f38ffbd1db3dee71c3e9039e8b45d247dbf2012507d8ed88441a5189ad3af3e99146ac67ccc64d40ea6c7912fc0"}, {0x50, 0x104, 0x8, "e71744b892ea67743beb8bd5c6f76cca2ee03a333ab3d06c41f1b8034f1b046ee294476afa18be98dcad40aacb54a51c65090779e8a19c0b8066e5936f"}, {0x80, 0x84, 0x80000001, "ab36b1b95df14494398771aa6a1186e5e4c098e49af27cbcc9c2d5bf3561cd9ead1be37db31de859fc147018534ef29db2f14018a82e2d5d2545419c1531a89242ddd534b583646593266d8294c03ad865c014dd973ad2d9fde68dbdbf975ab0f9290ffa31683ecb28d1119a"}], 0x1a0}, 0x20000001)

1m19.312602075s ago: executing program 35 (id=1086):
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/160}, 0xa8, 0x3, 0x1800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
connect$netlink(r1, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xe, '\x00', 0x198, 0xfffffffc, 0x200}}}}]}, 0x48}}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x800, 0x0, 0x103, 0x1, 0xf7b2}, 0x20)
sendmsg$inet6(r6, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}, @dstopts_2292={{0x18}}], 0x78}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x3c}}, 0x0)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$cgroup_pid(r7, &(0x7f00000031c0), 0x12)
sendmsg(r7, &(0x7f0000000580)={&(0x7f0000000140)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="dd50fe8bddb04b6f6bb9fb71ecd6a1e4a421dd7f65cc05c0a9e70db788e40ac9f7b72b41879d00419a6a84386c46267fe8e6", 0x32}, {&(0x7f00000002c0)="bd264ff9a442a996d4f6677a1a82eb1d063c2385265a9a8463a1d2cb7e4e26b71861232cbe9cf8f4d68771e33e47fc149cad182da2d1675da968d39bae258ac16c8f511dacd9101c4f33ba3fdb74ab086566f645dd436dc6d911bb79008d60714da34e1885c79f12ca634ad4a09ab5bff7040320b65ef37704f5215ea17ce232912572abe82c700b32072ed9e847cb", 0x8f}], 0x2, &(0x7f00000003c0)=[{0xd0, 0x10e, 0x8, "0117cffc5aa790b7e4564bfdae689453283530f3c5aeb326a443fefdd0b84ea0ceb78d17cec3701308dc2e7f1fccac818e092ceaafc46377513a689af4fa2acf83f4d58a0d86b17b1480db99958fb48c07351b25b7688eaedeedf583a46e5ae0c50a665c0671f235d931e17d50c2d3a19b64b9d17afd90239765f591c7b87e3688231ebf3d7cca43245a6bc54f38ffbd1db3dee71c3e9039e8b45d247dbf2012507d8ed88441a5189ad3af3e99146ac67ccc64d40ea6c7912fc0"}, {0x50, 0x104, 0x8, "e71744b892ea67743beb8bd5c6f76cca2ee03a333ab3d06c41f1b8034f1b046ee294476afa18be98dcad40aacb54a51c65090779e8a19c0b8066e5936f"}, {0x80, 0x84, 0x80000001, "ab36b1b95df14494398771aa6a1186e5e4c098e49af27cbcc9c2d5bf3561cd9ead1be37db31de859fc147018534ef29db2f14018a82e2d5d2545419c1531a89242ddd534b583646593266d8294c03ad865c014dd973ad2d9fde68dbdbf975ab0f9290ffa31683ecb28d1119a"}], 0x1a0}, 0x20000001)

49.41088664s ago: executing program 6 (id=1303):
r0 = socket$inet6(0xa, 0x4, 0x0) (async)
r1 = semget$private(0x0, 0x6, 0x0)
semtimedop(r1, &(0x7f0000000200)=[{0x0, 0x2}, {}], 0x2, 0x0)
semctl$GETZCNT(r1, 0x0, 0xf, 0x0)
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000200)={0x7, 0x1, &(0x7f0000000000)=[0x8], &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)})
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r0], 0x60}}, 0x0)
close(r0)

48.550984381s ago: executing program 6 (id=1311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = syz_open_dev$evdev(&(0x7f0000000400), 0x1, 0x8001)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000440)=""/130)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fdatasync(r3)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x2002}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0)

45.490635488s ago: executing program 6 (id=1341):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x5, 0x40000})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7})
close(r2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x100f, &(0x7f0000001200)=""/4111, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

45.230196262s ago: executing program 6 (id=1344):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x218802, 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0xfe, 0x6, @broadcast}, 0x14)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1})
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = syz_open_dev$vcsn(&(0x7f0000000280), 0x7, 0x585003)
r8 = accept4$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x7, 0x80000)
getsockopt$inet6_buf(r8, 0x29, 0x2a, &(0x7f00000004c0)=""/128, &(0x7f00000002c0)=0x80)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, <r11=>0x0], 0x0, 0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000540)={r11})
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r9, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2200008c50e800", @ANYRES64=r2, @ANYBLOB="00062bbd7000fbdbdf250100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x20008005)

45.110840138s ago: executing program 6 (id=1346):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5)
r3 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0)
ioctl$LOOP_SET_FD(r3, 0x80044df9, 0xffffffffffffffff)
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/34)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

44.501076551s ago: executing program 6 (id=1351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x27, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

44.477570347s ago: executing program 36 (id=1351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x27, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

20.840654933s ago: executing program 7 (id=1460):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000080)={0xc, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x97, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
close(r5)
splice(r4, 0x0, r5, 0x0, 0x10500, 0xc)
write$P9_RSTATFS(r4, &(0x7f0000000400)={0x43, 0x9, 0x1, {0x9, 0x5d9, 0x7, 0x10, 0x1, 0x10001, 0x8f, 0x0, 0x67d}}, 0x43)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="da866d51f3b914e90ed4427e1b23bb24d1d77b328f6f53772e222c7ce89c61d6b2ede4f681bfd85e8096960f6e417adc2a2d4d41ed402fcdbd2808fbe7495c189b51f60fad452f1b4b23c14193bd44091692c8835872658976eadaadf989b6715b29d8e734276a5b075a5ccc84570a67cf1e1b6c0e79628b42d799959a00795038e10546c34bb3e6fe2379d983d6ee0d335e865127cc015550678da647dde5cee14e50a99fd929adfdc15a7d164c83f88919f2d82e0d85697cb12d6cabde2ff6bfa5cb2e2fd82c2ddefad4f8ceac21a3f01bb70f869e40292cf7cdc291ffca843bdbcaba24fb7f1701f88a9d51"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20ffa000})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x9, 0x0, 0x0, 0x6})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502)

20.840047915s ago: executing program 7 (id=1461):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
dup2(r0, r0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x9c}}, 0x0)

20.780960047s ago: executing program 7 (id=1462):
syz_open_dev$sndpcmp(&(0x7f0000000000), 0xfffffffffffffff8, 0x0) (async)
socket$packet(0x11, 0xc2340cf684d20d18, 0x300)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x9, 0x10000) (async)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[<r4=>0x0], &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r3], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r4], &(0x7f0000000100), 0x0, 0x400000003}) (async)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}, 0x14}, 0x1c) (async)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7) (async)
r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$selinux_validatetrans(r6, 0x0, 0x6c) (async)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4161, 0x0)

20.780176176s ago: executing program 7 (id=1463):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$kcm(0x2, 0x6030f18bc7a2ea3e, 0x84)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @rand_addr=0x64010103, 0x1}, 0x80, &(0x7f00000005c0), 0x13}, 0x400c008)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4c28, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)='i', 0x1}], 0x1}, 0x805)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe83, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_clone(0xa0320080, 0x0, 0x0, 0x0, 0x0, 0x0)

20.610563966s ago: executing program 7 (id=1464):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x2a, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
pread64(r1, &(0x7f0000000440)=""/197, 0xc5, 0x4)
ioctl$CDROM_DEBUG(r1, 0x5330, 0x0)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x140, 0x120, 0x2}, 0x18)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="28800100000000000500110001000000140003006272696467655f736c4176655f30"], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x0)

20.150405245s ago: executing program 7 (id=1466):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)="951aceb6b3159297549c81065c497a8a99f1fe71929e68dbf7d4f8373450250d3a906d9e762494d4f59f44b23058617f7f36deec9bf068cb8e17aa17ad7dcfd80ad86a4b23c085663df1340689adf779c88e8cdf37d37e0e8ff0148b97842eff7da65f3bf9337310b4e544a82999ba9aedc045558696948e59ce9bc01bb22ee0891578900857a4846fe2365332f31f8704072f274c657545b0ca1e59e4add975b3aaa55d8d317c48a7ac339b4faf86bd61ef6d6558211bb229b91be9bd2e439ef93c7c7230e39d0ee72f5e94453269d603f737da6fa49f816d52a9fb57", 0xdd}], 0x1)

20.094560281s ago: executing program 37 (id=1466):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
writev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)="951aceb6b3159297549c81065c497a8a99f1fe71929e68dbf7d4f8373450250d3a906d9e762494d4f59f44b23058617f7f36deec9bf068cb8e17aa17ad7dcfd80ad86a4b23c085663df1340689adf779c88e8cdf37d37e0e8ff0148b97842eff7da65f3bf9337310b4e544a82999ba9aedc045558696948e59ce9bc01bb22ee0891578900857a4846fe2365332f31f8704072f274c657545b0ca1e59e4add975b3aaa55d8d317c48a7ac339b4faf86bd61ef6d6558211bb229b91be9bd2e439ef93c7c7230e39d0ee72f5e94453269d603f737da6fa49f816d52a9fb57", 0xdd}], 0x1)

18.870846516s ago: executing program 8 (id=1479):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000000000000bb7f9b985e53393881e2f20f986d7b66b7b7d549ccf1603316b2e46b0651c9ae16ed7bd5657d56302ee30ca67f2ad5b740b741e9cf80c7bbb3b95c0f4e68a54c5d3312c2efb0f8b79a4f2786d7b7b10086f455c4f93b1d7f219a8d3b4cb1fe4cfd8a63f0af2d74bff68023963c939925823bba42acc7d074c9b6421d7c6188749be73cb9e189c98f5ecd3f632ba2e62262df65b87b358baf0bae8a8879cd23584e617bae5650616376441135a4091011a2064873cdda915c71997b8a391e6d52cbf62cb9e300aa6986a67ed4ec7da4b17f1e8ad5cdd65c7027dfc5bfbcf06e227f363fc8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

18.870022579s ago: executing program 8 (id=1480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x5]}}) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c07, 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0xa, @random="3a65fcc3638c"}}}}, 0x0) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r7, 0x1000}}, 0x10) (async, rerun: 32)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x5}}, 0x10) (async, rerun: 32)
r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) (async)
write$binfmt_script(r8, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'syz0\x00'}], 0xa, "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"}, 0x2ac) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r9=>0x0})
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r9, 0x25, 0x0, @val=@netfilter}, 0x40)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async, rerun: 32)
close_range(r3, r10, 0x0) (async, rerun: 32)
r11 = dup(r0) (async)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r12, &(0x7f0000000080)="47000300010003", 0x7) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) (rerun: 32)

17.670753906s ago: executing program 4 (id=1483):
syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="0ed69cb0ff1d", @dev, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x1, @remote, @local, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x65}}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x180020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000820}, 0x0)

17.669389348s ago: executing program 4 (id=1484):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001540)=""/155}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
renameat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000600)='.\x00')
socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022", @ANYBLOB="1101"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) (async)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x3, 0x0, 0x0, [<r8=>0x0], [], [0x0, 0xb]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9})
close_range(r3, 0xffffffffffffffff, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) (async)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r11, 0x12b, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) (async)
sendmsg$DEVLINK_CMD_PORT_SET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r11, 0x12b, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0)

17.42072417s ago: executing program 4 (id=1485):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x24000000)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {0x1}, {0x4000}, {0x0, 0x0, 0x0, 0x420004}]}) (async)
sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001bc0)=[{0xe8, 0x10a, 0xfffffff4, "943d7449f5c058fa03f8de6b0ef55a3df922a68c6250d24e0546ff2365446be72cd99968a7f177156c8f7f279320d681b973e876d6f67fe0e911576584a6b564baa6b51c4174dda8aa8543046b221c28733910aa11207ee62eed70c5235faecf46b92144ae217bb9d9c7f0b933542fd80eb2c224cd9890184583b7f2e4294f4220c48d0a9d966f24d6713488785c0c173263aaaaf501c72fa797087f3abd2929e7001791af23ed16666ebe29b8440d2296e54e06cabf69db6e5ca6d8936325cd2342399da528f337006871df9fabd48ae05e9eae"}, {0x40, 0x84, 0x3, "efdda206539ecdeeb6eb1e87193be14ad5ea980b7e1e35601f38f6687e78a0f0d994728ccaf40900db43f01fe7"}, {0x80, 0x84, 0xa, "ea778dd73ffb4816bf698673d89c7debc943342928f3ac3000e3b9bc5f41d1bb54ba4fa1c657bbd22bfaf006736b19a309dd0fe1b76fcaed452a2e9f658f4da720399e46e5ae3c21e7c2a2c410d81dd647c65b5b5d672eb312ef388bbe14fe687d5668806bb7928432"}, {0xb0, 0x29, 0x9537, "3a7e86f779f43849d64556484b3e36aa34cac92937974ba54456c2452cd95fe45c4b4de942fbf2d7c8211359ef1c157d21dd05d6efa98d542e3de1125683b78776a01dd9ea5e13ac430d49bbd2a9dd170000b27d65b341db6bbdff1b216246ea9135c1c130a77739a08a7c09b1ea793d88b061b9a723d133abe0af6d378b7c173f876c00c9a501d96413befa3bca441756276da2a40b4097174f82a799"}, {0xe8, 0x10c, 0x6, "aa4205e6b1505f7608b2b929da4d0ef0ffdbb6187d82681acfbe6da1f7033ca2efecb468ac847fc8b952131abe6b13ae850e001a3d962550bd317b24bbc46b9d3a6da895cca25a80cc721ef91b122426bcf0e092c2f800934bb25ab43bf8d5211830918c27036b851a43f0e3419e2e107abeb4ed00cd8e42a2cd51f23d6348415cc5c33cf1329d9f82440b1b93a2633fa0f843daed21e0d649d250b51388b1ce5aecbe5527950e769cb0c5e33d9d7768b143b3311f2c073155740013e4e1105e36dd32eca7b22ae181a8ba5fa9c14739275d8ea1e2"}, {0x68, 0x11, 0x3767, "bb1dcae0062ab06a472babb01b37dd630f7b655590420342a702584abe63acc13ff699fb7d5e63b1651f3e2a4a7c2cb5a28c9f771881120f3ecdf5a3a1a4b31f014971e891ff8ded350f876bc3a12d4b57d9d42612"}], 0x3a8}, 0x4)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000003"], 0x48) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) (async)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

16.010866576s ago: executing program 4 (id=1487):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4)

15.800915703s ago: executing program 8 (id=1491):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "c04d831721b66c43", "7e50992d53face4acb591d981848b3d9", "a7844c4e", "6c25c0284645e18b"}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4020000) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0xc631, 0x4)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @private=0xa010101}, 0x2, 0x3, 0x4, 0x3}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r6, 0x40047459, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x1, 0x4)

15.360751881s ago: executing program 8 (id=1493):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0)
ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000040))
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x46100) (async)
fsync(r1)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r5, 0x8000, 0x1) (async)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f30fc7720566f082070a0f32b8030d8ee0da4400660f7ceabaf80c66b89862a78366efbafc0c66b861039a0566efbaf80c66b831e2028866efbafc0cec66b8900000000f23d80f21f86635400000500f23f8b842048ee8", 0x57}], 0x1, 0x68, &(0x7f00000001c0)=[@cr0={0x0, 0x20000011}, @cr0={0x0, 0x20040015}], 0x2) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

15.360465305s ago: executing program 2 (id=1494):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000001019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002800)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000000) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)

15.360153782s ago: executing program 8 (id=1495):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x0, 0x0)
connect$bt_rfcomm(r1, &(0x7f0000000400)={0x1f, @any, 0x7}, 0xa) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (rerun: 32)
sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74a", 0xc6}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63e", 0x82}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb977b7035046ea60fc263c1f72c13c1c7be3f14407e96c832dd5b10a03966185a38402e2cf26722ddeb0ef8f2d4a071d516ed09b0adec288e14e03b42147a29ba7f26c6886c05bea9ef56a3bb171e67a92b838a19c3a646", 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d4", 0x7}], 0x1}}, {{0x0, 0xfffffffffffffc24, &(0x7f0000001140)=[{&(0x7f0000001bc0)="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", 0x1eb}, {&(0x7f00000010c0)="5690421d7b15da3c57662eddf3ba32786aba7339c1bd0a55738ba806aaa7b055496e7b620e6fd74cdd03a57ddeda018f9d510e43", 0x34}, {&(0x7f0000001100)="3705e3ffc22d16e56ac7c394ae", 0xd}], 0x3}}], 0x3, 0x40801) (async)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
write(r2, &(0x7f00000004c0)="89ea652eb07f80c9ca4edc2c11a5ae22c76adb7f7e282b73332b1e725777661bc9b0c9ca73221b8faa7806081088663e642da0781117a27d00eae57b7490caad5fd665c96242d5ada0e4a76356ab6c31709fd5b022f7ac671bf15e3a0ae5f10ab40ddd14bd1ca0116574f9f84c452af47db9a7d757b4312658c72276a09109fd194d19ee6ce7e5e8ba2d9182af3b72ed4f1e5793456d6737b6879194b0f589977e3d7e9bbda36651a31df26498b83b949e6959e16512a4aaff6c273c9c1b23a8c1f2988eaa77cde13db847", 0xcb) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async, rerun: 32)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000840)={0x0, 0x0, r5, r6, 0x6, 0x4, 0x4, 0x9, {0x3606, 0x30, 0x7b1, 0xfffe, 0x1, 0x7, 0x5, 0xff62, 0xfb62, 0xfb62, 0x7, 0xffffe, 0x9d, 0xfffffe01, "e10a2be47a666d3d42404ecfe5569fdc470ca9bd6cf42e33e5df01a3841470bb"}})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async, rerun: 32)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x190) (rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001500010000000000000000000200f700", @ANYRES32=r8], 0x18}}, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

15.260803756s ago: executing program 4 (id=1496):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x52a, 0x4, 0x3, 0x6}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000004000), 0x0)

15.260540642s ago: executing program 4 (id=1497):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
unshare(0x62040200)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000380)={r2, 0x0, 0x0, 0x36d7, 0x400, 0xfff, 0x5, 0xca, 0x6, 0x5, 0x4, 0x9})

15.140147254s ago: executing program 2 (id=1498):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"])
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d00c9", @ANYRES16=r2, @ANYRES16=r0], 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

15.139895809s ago: executing program 8 (id=1499):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000440)={0x6, "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"})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64)
ioctl(r1, 0x8b1a, &(0x7f0000000040)) (rerun: 64)

15.030873422s ago: executing program 2 (id=1500):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) (async)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)

15.029740326s ago: executing program 2 (id=1501):
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x8}, 0x18)
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0xc1086201, 0x20000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000100)="913f40ddda61e512157022d37d", 0xd, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
sendto$inet(r1, &(0x7f00000000c0)="3be7e5", 0x3, 0x4000001, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000300)="ab", 0x19fff, 0x0, 0x0, 0x0)

14.140479263s ago: executing program 2 (id=1502):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='timerslack_ns\x00')
lseek(r0, 0xae7d, 0x0) (async, rerun: 32)
r1 = io_uring_setup(0x5c9a, &(0x7f0000000000)={0x0, 0x5ef, 0x400, 0x2, 0x1b1}) (rerun: 32)
mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000f00)='./file0\x00', 0x0, 0x152) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="ffd0670f01d066b9800000c00f326635001000000f3066b98b09000066b8c85f000066ba000000000f300f011b66b8c90000000f23c00f21f8663500000e000f23f8650f812f59440f20c066350d000000440f22c0abf20f004609", 0x5b}], 0x1, 0x45, 0x0, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$KVM_NMI(r6, 0xae9a) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32)
r7 = open(&(0x7f0000000100)='./file0\x00', 0x900, 0xa2) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r7], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x709, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

13.940708676s ago: executing program 2 (id=1503):
unshare(0x62040200) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) (async)
ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r0})

43.321133ms ago: executing program 38 (id=1497):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
unshare(0x62040200)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000380)={r2, 0x0, 0x0, 0x36d7, 0x400, 0xfff, 0x5, 0xca, 0x6, 0x5, 0x4, 0x9})

0s ago: executing program 39 (id=1499):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000440)={0x6, "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"})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64)
ioctl(r1, 0x8b1a, &(0x7f0000000040)) (rerun: 64)

kernel console output (not intermixed with test programs):

ing attributes in process `syz.5.795'.
[  115.871774][ T9014] input: syz0 as /devices/virtual/input/input17
[  116.505401][ T9025] overlayfs: failed to resolve 'verity=require': -2
[  116.686666][ T9040] netlink: zone id is out of range
[  116.717111][   T39] kauditd_printk_skb: 49 callbacks suppressed
[  116.717122][   T39] audit: type=1400 audit(1733587397.162:815): avc:  denied  { connect } for  pid=9041 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.720072][ T9042] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma?
[  116.731750][   T39] audit: type=1400 audit(1733587397.172:816): avc:  denied  { mount } for  pid=9041 comm="syz.2.805" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  116.737892][   T39] audit: type=1400 audit(1733587397.172:817): avc:  denied  { remount } for  pid=9041 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  116.744483][   T39] audit: type=1400 audit(1733587397.182:818): avc:  denied  { unmount } for  pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  116.757465][ T1992] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  116.809503][ T9047] program syz.2.806 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  116.856101][ T9060] netlink: 'syz.5.811': attribute type 62 has an invalid length.
[  116.870446][ T5938] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  116.919375][ T1992] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.921991][ T1992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  116.924257][ T1992] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  116.929494][ T1992] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12389, setting to 8
[  116.932279][ T1992] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  116.934610][ T1992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.943624][ T9025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  116.946783][ T1992] hub 6-1:1.0: bad descriptor, ignoring hub
[  116.956984][ T1992] hub 6-1:1.0: probe with driver hub failed with error -5
[  116.960445][ T1992] cdc_wdm 6-1:1.0: skipping garbage
[  116.961911][ T1992] cdc_wdm 6-1:1.0: skipping garbage
[  116.965851][ T1992] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  116.971073][ T1992] cdc_wdm 6-1:1.0: Unknown control protocol
[  116.988143][ T9075] netlink: 'syz.5.815': attribute type 10 has an invalid length.
[  116.990279][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.001046][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.006076][ T9075] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  117.030913][ T9079] xt_hashlimit: size too large, truncated to 1048576
[  117.102553][   T39] audit: type=1400 audit(1733587397.542:819): avc:  denied  { listen } for  pid=9084 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  117.108164][   T39] audit: type=1400 audit(1733587397.542:820): avc:  denied  { accept } for  pid=9084 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  117.237018][   T39] audit: type=1400 audit(1733587397.672:821): avc:  denied  { module_load } for  pid=9091 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  117.410355][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.821'.
[  117.675147][   T39] audit: type=1400 audit(1733587398.112:822): avc:  denied  { create } for  pid=9106 comm="syz.5.823" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  117.684607][   T39] audit: type=1400 audit(1733587398.122:823): avc:  denied  { append } for  pid=9106 comm="syz.5.823" path="/43/file0/net_prio.prioidx" dev="9p" ino=42860604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.691406][   T39] audit: type=1400 audit(1733587398.132:824): avc:  denied  { map } for  pid=9106 comm="syz.5.823" path="/43/file0/net_prio.prioidx" dev="9p" ino=42860604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.699854][ T9107] IPv6: sit1: Disabled Multicast RS
[  117.713398][ T9025] usb 6-1: reset low-speed USB device number 9 using dummy_hcd
[  117.779716][ T9113] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  117.964997][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'.
[  118.009474][ T9090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  118.022199][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  118.024414][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  118.149608][ T9149] netlink: 'syz.4.833': attribute type 29 has an invalid length.
[  118.153259][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'.
[  118.157809][ T9149] netlink: 'syz.4.833': attribute type 29 has an invalid length.
[  118.283153][ T9151] netlink: 'syz.4.834': attribute type 2 has an invalid length.
[  118.318321][ T5977] usb 6-1: USB disconnect, device number 9
[  118.407836][ T1255] TC_ACT_REPEAT abuse ?
[  118.607127][ T1992] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  118.761765][ T1992] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  118.764328][ T1992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.766375][ T1992] usb 9-1: Product: syz
[  118.770499][ T1992] usb 9-1: Manufacturer: syz
[  118.771734][ T1992] usb 9-1: SerialNumber: syz
[  118.785840][ T1992] usb 9-1: config 0 descriptor??
[  118.791697][ T9160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.837'.
[  118.869719][ T9167] netlink: 20 bytes leftover after parsing attributes in process `syz.5.839'.
[  118.978144][ T9174] netlink: 'syz.5.842': attribute type 2 has an invalid length.
[  118.980779][ T9174] netlink: 'syz.5.842': attribute type 1 has an invalid length.
[  118.983243][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'.
[  119.037659][  T100] TC_ACT_REPEAT abuse ?
[  119.104530][ T5977] usb 9-1: USB disconnect, device number 13
[  119.309081][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'.
[  119.310254][ T9209] misc userio: No port type given on /dev/userio
[  119.380331][ T9209] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=101 sclass=netlink_xfrm_socket pid=9209 comm=syz.2.851
[  119.605784][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.610547][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.613515][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.615828][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.618105][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.620158][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.623921][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.626216][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.628529][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.630919][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.633254][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.635635][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.637941][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.640005][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.642306][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.644315][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.646388][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.649613][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.651655][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.653689][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.655755][ T9234] overlay: filesystem on ./bus not supported as upperdir
[  119.710714][ T9236] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  119.712416][ T9236] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  119.932556][ T9254] ntfs3(nullb0): Primary boot signature is not NTFS.
[  119.934463][ T9254] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  120.017061][ T9259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.860'.
[  120.061076][ T9261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  120.201289][ T9272] 9pnet_fd: Insufficient options for proto=fd
[  121.582574][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.882'.
[  121.596503][ T9335] netlink: 48 bytes leftover after parsing attributes in process `syz.5.882'.
[  121.697448][ T1992] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  121.811322][ T9375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9375 comm=syz.4.896
[  121.845127][ T5938] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  121.847384][ T1992] usb 7-1: Using ep0 maxpacket: 32
[  121.849966][ T1992] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  121.854129][ T1992] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  121.856405][ T1992] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  121.859383][ T1992] usb 7-1: Product: syz
[  121.860448][ T1992] usb 7-1: Manufacturer: syz
[  121.861615][ T1992] usb 7-1: SerialNumber: syz
[  121.868654][ T1992] usb 7-1: config 0 descriptor??
[  121.870707][ T9346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  121.932618][ T9385] delete_channel: no stack
[  121.962032][   T39] kauditd_printk_skb: 22 callbacks suppressed
[  121.962043][   T39] audit: type=1400 audit(1733587402.402:847): avc:  denied  { watch } for  pid=9388 comm="syz.4.902" path="/229" dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  121.970507][   T39] audit: type=1400 audit(1733587402.402:848): avc:  denied  { watch_sb } for  pid=9388 comm="syz.4.902" path="/229" dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  122.096004][ T9394] bond0: (slave bond1): Error -95 calling ndo_bpf
[  122.128713][ T1992] usb 7-1: USB disconnect, device number 11
[  122.201400][   T39] audit: type=1400 audit(1733587402.642:849): avc:  denied  { ioctl } for  pid=9402 comm="syz.4.907" path="socket:[27552]" dev="sockfs" ino=27552 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  122.228121][   T39] audit: type=1400 audit(1733587402.672:850): avc:  denied  { watch } for  pid=9409 comm="syz.5.908" path="pipe:[29407]" dev="pipefs" ino=29407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  122.355270][   T39] audit: type=1326 audit(1733587402.792:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.5.910" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e0f7fed9 code=0x0
[  122.717102][ T7994] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  123.040925][ T5938] Bluetooth: hci4: command 0x0406 tx timeout
[  123.153094][ T9439] sctp: [Deprecated]: syz.4.914 (pid 9439) Use of int in max_burst socket option.
[  123.153094][ T9439] Use struct sctp_assoc_value instead
[  123.167033][   T39] audit: type=1326 audit(1733587403.592:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.4.914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531d17fed9 code=0x7ffc0000
[  123.173878][   T39] audit: type=1326 audit(1733587403.592:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.4.914" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f531d17fed9 code=0x7ffc0000
[  123.185965][ T7994] usb 7-1: Using ep0 maxpacket: 8
[  123.185994][   T39] audit: type=1326 audit(1733587403.592:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.4.914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531d17fed9 code=0x7ffc0000
[  123.193406][   T39] audit: type=1326 audit(1733587403.592:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.4.914" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f531d17fed9 code=0x7ffc0000
[  123.194479][ T7994] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.199677][   T39] audit: type=1326 audit(1733587403.592:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.4.914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531d17fed9 code=0x7ffc0000
[  123.202014][ T7994] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.202036][ T7994] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.202048][ T7994] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  123.215159][ T7994] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  123.217665][ T7994] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  123.224935][ T7994] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.227372][ T7994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.229324][ T7994] usb 7-1: Product: syz
[  123.230373][ T7994] usb 7-1: Manufacturer: syz
[  123.231564][ T7994] usb 7-1: SerialNumber: syz
[  123.390955][ T9464] loop8: detected capacity change from 0 to 7
[  123.395652][ T9464] Dev loop8: unable to read RDB block 7
[  123.397849][ T9464]  loop8: unable to read partition table
[  123.399979][ T9464] loop8: partition table beyond EOD, truncated
[  123.402314][ T9464] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  123.402314][ T9464] 
) failed (rc=-5)
[  123.522790][   T77] TC_ACT_REPEAT abuse ?
[  124.077321][   T45] TC_ACT_REPEAT abuse ?
[  124.594728][ T9487] input: syz0 as /devices/virtual/input/input19
[  124.646468][ T9487] ucma_write: process 254 (syz.5.927) changed security contexts after opening file descriptor, this is not allowed.
[  124.786155][ T9498] syzkaller1: entered promiscuous mode
[  124.788187][ T9498] syzkaller1: entered allmulticast mode
[  124.792065][ T9498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9498 comm=syz.1.932
[  125.117457][ T9504] overlayfs: failed to resolve './file2': -2
[  125.123334][ T9504] program syz.4.933 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.128455][ T9504] __nla_validate_parse: 2 callbacks suppressed
[  125.128469][ T9504] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.933'.
[  125.174077][ T7994] cdc_ncm 7-1:1.0: bind() failure
[  125.177170][ T7994] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  125.179112][ T7994] cdc_ncm 7-1:1.1: bind() failure
[  125.187010][ T7994] usb 7-1: USB disconnect, device number 12
[  125.253967][ T9615] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.314134][ T9619] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  125.315878][ T9619] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  125.318851][ T9619] vhci_hcd vhci_hcd.0: Device attached
[  125.374731][ T9620] vhci_hcd: connection closed
[  125.383170][ T1136] vhci_hcd: stop threads
[  125.386350][ T1136] vhci_hcd: release socket
[  125.388714][ T1136] vhci_hcd: disconnect device
[  125.800754][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.942'.
[  125.981809][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  125.985772][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.988381][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.992702][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  125.994989][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  125.998927][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.052185][ T9644] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ 
[  126.125439][ T9640] chnl_net:caif_netlink_parms(): no params data found
[  126.179259][ T9651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.947'.
[  126.196182][ T9651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.947'.
[  126.203701][ T9651] UHID_CREATE from different security context by process 738 (syz.4.947), this is not allowed.
[  126.209729][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'.
[  126.238778][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.241260][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.243943][ T9640] bridge_slave_0: entered allmulticast mode
[  126.246262][ T9640] bridge_slave_0: entered promiscuous mode
[  126.252275][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.254909][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.257844][ T9640] bridge_slave_1: entered allmulticast mode
[  126.259888][ T9640] bridge_slave_1: entered promiscuous mode
[  126.326166][ T9640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.330153][ T9640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.378186][ T9640] team0: Port device team_slave_0 added
[  126.383326][ T9640] team0: Port device team_slave_1 added
[  126.449573][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.451582][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.459263][ T9640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.462908][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.465352][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.473509][ T9640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.551565][ T9681] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  126.561982][ T9640] hsr_slave_0: entered promiscuous mode
[  126.598106][ T9640] hsr_slave_1: entered promiscuous mode
[  126.601240][ T9704] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  126.610567][ T9704] CIFS mount error: No usable UNC path provided in device string!
[  126.610567][ T9704] 
[  126.614473][ T9704] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  126.627092][ T9640] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.629140][ T9640] Cannot create hsr debugfs directory
[  126.704319][ T9710] netlink: 48 bytes leftover after parsing attributes in process `syz.2.961'.
[  126.749070][ T9640] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.841672][ T9716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.845361][ T9716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.963'.
[  126.859533][ T9640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.991491][ T9640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.147954][ T9640] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.386272][ T9640] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  127.389797][ T9640] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  127.393007][ T9640] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  127.396204][ T9640] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  127.436333][   T39] kauditd_printk_skb: 26 callbacks suppressed
[  127.436350][   T39] audit: type=1326 audit(1733587407.872:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.2.961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596437fed9 code=0x7fc00000
[  127.441364][ T9640] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.462344][ T9640] 8021q: adding VLAN 0 to HW filter on device team0
[  127.463938][   T39] audit: type=1400 audit(1733587407.902:884): avc:  denied  { unmount } for  pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  127.469567][ T9719] netlink: 72 bytes leftover after parsing attributes in process `syz.5.964'.
[  127.477997][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.479974][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.485113][ T9719] netlink: 44 bytes leftover after parsing attributes in process `syz.5.964'.
[  127.488985][  T100] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.491306][  T100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.493709][ T9719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9719 comm=syz.5.964
[  127.498100][   T39] audit: type=1400 audit(1733587407.942:885): avc:  denied  { bind } for  pid=9718 comm="syz.5.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  127.504665][   T39] audit: type=1400 audit(1733587407.942:886): avc:  denied  { write } for  pid=9718 comm="syz.5.964" path="socket:[31353]" dev="sockfs" ino=31353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  127.526122][ T9719] input: syz0 as /devices/virtual/input/input20
[  127.615294][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'.
[  127.618663][ T9726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.620606][ T9726] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.621274][ T9722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9722 comm=syz.2.965
[  127.627288][ T9723] netlink: 'syz.2.965': attribute type 1 has an invalid length.
[  127.627711][ T9726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.630038][ T9722] netlink: 'syz.2.965': attribute type 1 has an invalid length.
[  127.635720][ T9726] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.710017][ T9722] 8021q: adding VLAN 0 to HW filter on device bond5
[  127.717580][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv1
[  127.724753][ T9732] bond5: (slave batadv1): making interface the new active one
[  127.727315][ T9732] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  127.756605][ T9640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.781791][   T39] audit: type=1400 audit(1733587408.212:887): avc:  denied  { ioctl } for  pid=9737 comm="syz.2.968" path="socket:[32811]" dev="sockfs" ino=32811 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  127.796834][ T9640] veth0_vlan: entered promiscuous mode
[  127.810614][ T9640] veth1_vlan: entered promiscuous mode
[  127.822907][ T9640] veth0_macvtap: entered promiscuous mode
[  127.825788][ T9640] veth1_macvtap: entered promiscuous mode
[  127.832427][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.835521][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.838322][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.841091][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.843593][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.846417][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.848208][ T9742] netlink: 'syz.5.970': attribute type 9 has an invalid length.
[  127.849084][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.853610][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.857778][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.861127][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.862874][   T39] audit: type=1400 audit(1733587408.302:888): avc:  denied  { accept } for  pid=9746 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  127.863842][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.863851][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.863860][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.863865][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.863872][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.863882][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.885717][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.889223][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.891996][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.895178][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.941160][ T9640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.943480][ T9640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.945762][ T9640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.948510][ T9640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.994827][  T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.997807][  T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.011382][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.011909][   T39] audit: type=1400 audit(1733587408.452:889): avc:  denied  { append } for  pid=9757 comm="syz.5.974" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  128.013452][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.030460][   T39] audit: type=1400 audit(1733587408.472:890): avc:  denied  { mounton } for  pid=9640 comm="syz-executor" path="/syzkaller.dETPjQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  128.078364][ T5938] Bluetooth: hci1: command tx timeout
[  128.313244][ T9783] netlink: 'syz.5.980': attribute type 29 has an invalid length.
[  128.315678][ T9783] netlink: 'syz.5.980': attribute type 29 has an invalid length.
[  128.327019][ T9783] netlink: 'syz.5.980': attribute type 29 has an invalid length.
[  128.329449][ T9783] netlink: 'syz.5.980': attribute type 29 has an invalid length.
[  128.331803][ T9783] netlink: 'syz.5.980': attribute type 29 has an invalid length.
[  128.334169][ T9783] netlink: 'syz.5.980': attribute type 29 has an invalid length.
[  128.336581][ T9783] netlink: 'syz.5.980': attribute type 29 has an invalid length.
[  128.344336][   T39] audit: type=1400 audit(1733587408.762:891): avc:  denied  { create } for  pid=9784 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  128.377457][ T9787] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  128.383211][   T39] audit: type=1400 audit(1733587408.822:892): avc:  denied  { create } for  pid=9789 comm="syz.5.983" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  128.392068][ T9791] (syz.5.983,9791,2):dlmfs_mkdir:420 ERROR: invalid domain name for directory.
[  128.522081][ T9795] program syz.4.985 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.525472][ T9798] vlan2: entered promiscuous mode
[  128.526901][ T9798] vlan2: entered allmulticast mode
[  128.529174][ T9798] hsr_slave_1: entered allmulticast mode
[  128.638664][   T11] TC_ACT_REPEAT abuse ?
[  128.663293][ T5945] Bluetooth: hci0: unexpected event for opcode 0x0403
[  128.665415][ T5945] Bluetooth: hci0: unexpected event for opcode 0x0403
[  128.719509][ T9817] Invalid logical block size (585)
[  129.001455][   T56] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  129.167392][   T56] usb 9-1: Using ep0 maxpacket: 8
[  129.169953][   T56] usb 9-1: config 0 has no interfaces?
[  129.171396][   T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  129.173744][   T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.180792][   T56] usb 9-1: config 0 descriptor??
[  129.287578][   T11] TC_ACT_REPEAT abuse ?
[  129.291294][ T9839] gtp0: entered promiscuous mode
[  129.292683][ T9839] gtp0: entered allmulticast mode
[  129.336059][ T9844] ip6t_srh: unknown srh invflags 7863
[  129.388732][   T56] usb 9-1: USB disconnect, device number 14
[  129.727108][ T5289] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  129.897082][ T5289] usb 7-1: Using ep0 maxpacket: 8
[  129.900469][ T5289] usb 7-1: config 2 interface 0 has no altsetting 0
[  129.904588][ T5289] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  129.908367][ T5289] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.911406][ T5289] usb 7-1: Product: syz
[  129.913071][ T5289] usb 7-1: Manufacturer: syz
[  129.914889][ T5289] usb 7-1: SerialNumber: syz
[  130.126663][ T5289] usb 7-1: USB disconnect, device number 13
[  130.157118][ T5945] Bluetooth: hci1: command tx timeout
[  130.310606][ T9877] __nla_validate_parse: 7 callbacks suppressed
[  130.310622][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'.
[  130.477992][ T5945] Bluetooth: hci1: Malformed LE Event: 0x0b
[  130.567335][   T56] usb 9-1: new low-speed USB device number 15 using dummy_hcd
[  130.699884][ T9906] program syz.5.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.717093][   T56] usb 9-1: Invalid ep0 maxpacket: 16
[  130.727052][ T5945] Bluetooth: hci4: command 0x0406 tx timeout
[  130.847504][   T56] usb 9-1: new low-speed USB device number 16 using dummy_hcd
[  130.997071][   T56] usb 9-1: Invalid ep0 maxpacket: 16
[  130.998714][   T56] usb usb9-port1: attempt power cycle
[  131.339156][   T56] usb 9-1: new low-speed USB device number 17 using dummy_hcd
[  131.357645][   T56] usb 9-1: Invalid ep0 maxpacket: 16
[  131.497191][   T56] usb 9-1: new low-speed USB device number 18 using dummy_hcd
[  131.517918][   T56] usb 9-1: Invalid ep0 maxpacket: 16
[  131.519658][   T56] usb usb9-port1: unable to enumerate USB device
[  131.574070][ T9928] bond0: entered promiscuous mode
[  131.575562][ T9928] bond_slave_1: entered promiscuous mode
[  131.577268][ T9928] batadv0: entered promiscuous mode
[  131.578573][ T9928] syz_tun: entered promiscuous mode
[  131.580143][ T9928] bond0: entered allmulticast mode
[  131.581505][ T9928] bond_slave_1: entered allmulticast mode
[  131.582976][ T9928] batadv0: entered allmulticast mode
[  131.584354][ T9928] syz_tun: entered allmulticast mode
[  131.611940][ T9930] siw: device registration error -23
[  131.614457][ T9930] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1027'.
[  131.616988][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1027'.
[  131.624844][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'.
[  131.667660][ T9935] libceph: resolve '
[  131.667660][ T9935] -&õÌ×fÍY¹Ç�²a×ïÅ2iˆ
[  131.667660][ T9935] .ÖúÕ?Çý&�*»§&' (ret=-3): failed
[  132.060014][ T9977] xt_hashlimit: size too large, truncated to 1048576
[  132.110751][ T9979] x_tables: duplicate underflow at hook 2
[  132.127794][ T9979] block device autoloading is deprecated and will be removed.
[  132.237405][ T5938] Bluetooth: hci1: command tx timeout
[  132.488363][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  132.640577][ T9983] netlink: 'syz.5.1041': attribute type 4 has an invalid length.
[  132.645849][ T9983] netlink: 'syz.5.1041': attribute type 4 has an invalid length.
[  132.652954][   T39] kauditd_printk_skb: 16 callbacks suppressed
[  132.652963][   T39] audit: type=1400 audit(1733587413.092:909): avc:  denied  { write } for  pid=9990 comm="syz.2.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  132.705828][   T39] audit: type=1400 audit(1733587413.142:910): avc:  denied  { execute } for  pid=9990 comm="syz.2.1043" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  132.828004][   T39] audit: type=1400 audit(1733587413.262:911): avc:  denied  { override_creds } for  pid=10006 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  132.838029][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'.
[  132.839706][T10007] bond6: entered promiscuous mode
[  132.841527][T10007] bond6: entered allmulticast mode
[  132.842980][T10007] 8021q: adding VLAN 0 to HW filter on device bond6
[  132.934075][T10026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1050'.
[  132.961935][T10028] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  132.991494][T10032] netlink: 'syz.2.1052': attribute type 11 has an invalid length.
[  133.111335][T10040] fuse: Bad value for 'fd'
[  133.111469][T10039] fuse: Bad value for 'fd'
[  133.119553][   T39] audit: type=1400 audit(1733587413.562:912): avc:  denied  { ioctl } for  pid=10038 comm="syz.1.1054" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  133.166679][T10045] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1055'.
[  133.282180][T10050] tipc: Started in network mode
[  133.283675][T10050] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  133.286481][T10050] tipc: Enabled bearer <eth:geneve1>, priority 10
[  133.449029][ T7994] libceph: connect (1)[c::]:6789 error -101
[  133.451592][ T7994] libceph: mon0 (1)[c::]:6789 connect error
[  133.563002][ T7994] libceph: connect (1)[b::]:6789 error -101
[  133.564650][ T7994] libceph: mon0 (1)[b::]:6789 connect error
[  133.721299][ T7994] libceph: connect (1)[c::]:6789 error -101
[  133.723600][ T7994] libceph: mon0 (1)[c::]:6789 connect error
[  133.758237][   T77] TC_ACT_REPEAT abuse ?
[  133.827213][ T7994] libceph: connect (1)[b::]:6789 error -101
[  133.828993][ T7994] libceph: mon0 (1)[b::]:6789 connect error
[  133.906633][T10076] tmpfs: Bad value for 'mpol'
[  133.947409][T10078] overlay: ./file0 is not a directory
[  133.996902][T10080] fuse: Bad value for 'fd'
[  134.227043][   T39] audit: type=1400 audit(1733587414.662:913): avc:  denied  { ioctl } for  pid=10090 comm="syz.1.1065" path="socket:[34193]" dev="sockfs" ino=34193 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  134.239338][ T7994] libceph: connect (1)[c::]:6789 error -101
[  134.241778][ T7994] libceph: mon0 (1)[c::]:6789 connect error
[  134.318318][ T5938] Bluetooth: hci1: command tx timeout
[  134.349491][ T7994] libceph: connect (1)[b::]:6789 error -101
[  134.351170][ T7994] libceph: mon0 (1)[b::]:6789 connect error
[  134.356094][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'.
[  134.391362][T10091] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  134.397110][   T62] tipc: Node number set to 15444650
[  134.440147][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  134.445101][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  134.448823][T10054] ceph: No mds server is up or the cluster is laggy
[  134.449021][T10064] ceph: No mds server is up or the cluster is laggy
[  134.461496][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  134.465284][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  134.479704][ T5945] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  134.482814][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  134.580831][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10118 comm=syz.4.1071
[  134.625505][T10107] chnl_net:caif_netlink_parms(): no params data found
[  134.686078][T10107] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.688167][T10107] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.690172][T10107] bridge_slave_0: entered allmulticast mode
[  134.692290][T10107] bridge_slave_0: entered promiscuous mode
[  134.695472][T10107] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.697534][T10107] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.699524][T10107] bridge_slave_1: entered allmulticast mode
[  134.701729][T10107] bridge_slave_1: entered promiscuous mode
[  134.734838][T10107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.739430][T10107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.772085][T10107] team0: Port device team_slave_0 added
[  134.775095][T10107] team0: Port device team_slave_1 added
[  134.822568][T10107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.825057][T10107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.834564][T10107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.840514][T10107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.843047][T10107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.852463][T10107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.939343][T10107] hsr_slave_0: entered promiscuous mode
[  135.017415][T10107] hsr_slave_1: entered promiscuous mode
[  135.041303][ T1255] TC_ACT_REPEAT abuse ?
[  135.057213][T10107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.059293][T10107] Cannot create hsr debugfs directory
[  135.101238][   T39] audit: type=1400 audit(1733587415.542:914): avc:  denied  { append } for  pid=10149 comm="syz.4.1076" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  135.107793][   T39] audit: type=1400 audit(1733587415.542:915): avc:  denied  { read } for  pid=10141 comm="syz.1.1074" path="socket:[35953]" dev="sockfs" ino=35953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  135.108459][T10148] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  135.130387][T10150] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request
[  135.135235][T10152] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  135.435741][T10161] xt_CT: You must specify a L4 protocol and not use inversions on it
[  135.539588][T10107] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  135.549205][T10107] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  135.556241][T10107] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  135.559745][T10107] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  135.567065][   T56] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  135.613245][   T39] audit: type=1400 audit(1733587416.052:916): avc:  denied  { accept } for  pid=10172 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  135.616250][T10172] delete_channel: no stack
[  135.617599][T10170] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1082'.
[  135.642506][T10107] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.650161][T10107] 8021q: adding VLAN 0 to HW filter on device team0
[  135.654052][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.655950][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.662536][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.664417][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.673248][   T39] audit: type=1400 audit(1733587416.112:917): avc:  denied  { name_connect } for  pid=10175 comm="syz.4.1084" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  135.694723][   T39] audit: type=1400 audit(1733587416.132:918): avc:  denied  { mounton } for  pid=10176 comm="syz.1.1085" path="/32/file1/file0" dev="autofs" ino=33508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  135.729620][   T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.732478][   T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.734984][   T56] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  135.737563][   T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.741088][   T56] usb 7-1: config 0 descriptor??
[  135.815464][T10107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.908702][T10107] veth0_vlan: entered promiscuous mode
[  135.913469][T10107] veth1_vlan: entered promiscuous mode
[  135.925271][T10107] veth0_macvtap: entered promiscuous mode
[  135.930245][T10107] veth1_macvtap: entered promiscuous mode
[  135.936043][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.938976][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.941589][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.944260][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.946876][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.950993][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.953469][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.956030][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.959007][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.961765][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.964868][T10107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.971328][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.974005][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.976625][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.980056][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.982434][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.984970][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.987668][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.990518][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.993310][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.996037][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.998759][T10107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.001535][T10107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.004819][T10107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.010513][T10107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.012794][T10107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.015044][T10107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.017913][T10107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.047308][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.049457][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.059736][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.061793][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.139510][T10193] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1067'.
[  136.153786][   T56] magicmouse 0003:05AC:0269.0006: item fetching failed at offset 5/7
[  136.158668][   T56] magicmouse 0003:05AC:0269.0006: magicmouse hid parse failed
[  136.162955][   T56] magicmouse 0003:05AC:0269.0006: probe with driver magicmouse failed with error -22
[  136.351748][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'.
[  136.356219][T10156] netlink: 'syz.2.1077': attribute type 5 has an invalid length.
[  136.361676][ T5289] usb 7-1: USB disconnect, device number 14
[  136.557817][ T5945] Bluetooth: hci4: command tx timeout
[  136.827221][T10206] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[  137.843427][T10228] gre1: entered promiscuous mode
[  137.845472][T10228] team0: Device gre1 is of different type
[  138.637157][ T5945] Bluetooth: hci4: command tx timeout
[  138.763373][T10240] netlink: 'syz.2.1099': attribute type 11 has an invalid length.
[  138.766047][T10240] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1099'.
[  138.887600][ T1136] TC_ACT_REPEAT abuse ?
[  138.951906][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1100'.
[  139.007160][T10245] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1100'.
[  139.153398][   T39] kauditd_printk_skb: 1 callbacks suppressed
[  139.153413][   T39] audit: type=1400 audit(1733587419.592:920): avc:  denied  { mounton } for  pid=10243 comm="syz.2.1100" path="/270/file0" dev="tmpfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  139.154641][T10246] netlink: 580 bytes leftover after parsing attributes in process `syz.2.1100'.
[  139.596639][T10255] 9pnet_virtio: no channels available for device syz
[  139.597570][   T39] audit: type=1400 audit(1733587420.032:921): avc:  denied  { mounton } for  pid=10251 comm="syz.6.1102" path="/3/file0" dev="9p" ino=42860577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  139.599401][T10255] 9pnet_virtio: no channels available for device syz
[  139.599586][T10255] 9pnet_virtio: no channels available for device syz
[  139.757148][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1104'.
[  139.762534][   T39] audit: type=1400 audit(1733587420.202:922): avc:  denied  { ioctl } for  pid=10261 comm="syz.4.1105" path="socket:[36492]" dev="sockfs" ino=36492 ioctlcmd=0x562f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  139.935917][T10279] netlink: 'syz.4.1110': attribute type 4 has an invalid length.
[  140.045798][   T39] audit: type=1400 audit(1733587420.482:923): avc:  denied  { name_bind } for  pid=10277 comm="syz.4.1110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  140.209690][T10292] nbd: couldn't find a device at index 127
[  140.212893][T10292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  140.215650][T10292] IPv6: NLM_F_CREATE should be set when creating new route
[  140.311318][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'.
[  140.314563][T10297] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1115'.
[  140.716285][T10319] __nla_validate_parse: 2 callbacks suppressed
[  140.716296][T10319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1123'.
[  140.718859][ T5945] Bluetooth: hci4: command tx timeout
[  140.801195][ T1255] TC_ACT_REPEAT abuse ?
[  141.107977][T10328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10328 comm=syz.6.1127
[  141.222021][T10340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=10340 comm=syz.4.1130
[  141.289458][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.291510][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.361061][T10342] input: syz0 as /devices/virtual/input/input21
[  141.412204][   T39] audit: type=1400 audit(1733587421.852:924): avc:  denied  { mount } for  pid=10343 comm="syz.6.1132" name="/" dev="hugetlbfs" ino=34690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  142.177253][T10365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10365 comm=syz.4.1135
[  142.760968][T10377] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.765934][T10377] bond0: (slave bond1): Enslaving as an active interface with an up link
[  142.782138][T10381] syzkaller1: entered promiscuous mode
[  142.783750][T10381] syzkaller1: entered allmulticast mode
[  142.978600][T10391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1142'.
[  143.034017][T10397] qnx4: no qnx4 filesystem (no root dir).
[  143.247095][   T63] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  143.284319][T10422] netlink: 'syz.2.1152': attribute type 29 has an invalid length.
[  143.286902][T10422] netlink: 'syz.2.1152': attribute type 29 has an invalid length.
[  143.291247][T10422] netlink: 'syz.2.1152': attribute type 29 has an invalid length.
[  143.291577][T10424] netlink: 'syz.4.1153': attribute type 1 has an invalid length.
[  143.294709][T10422] netlink: 'syz.2.1152': attribute type 29 has an invalid length.
[  143.296224][T10424] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1153'.
[  143.299691][T10422] 9pnet_virtio: no channels available for device 127.0.0.1
[  143.352869][T10427] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1154'.
[  143.377470][T10431] gadgetfs: Unknown parameter 'GPL'
[  143.397257][   T63] usb 11-1: device descriptor read/64, error -71
[  143.457600][   T39] audit: type=1326 audit(1733587423.902:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.4.1155" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f531d17fed9 code=0x0
[  143.541240][T10445] x_tables: duplicate underflow at hook 3
[  143.574241][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'.
[  143.579770][T10451] geneve2: entered promiscuous mode
[  143.637180][   T63] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  143.787072][   T63] usb 11-1: device descriptor read/64, error -71
[  143.791321][   T39] audit: type=1400 audit(1733587424.232:926): avc:  denied  { audit_read } for  pid=10461 comm="syz.2.1162" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  143.803388][   T77] nci: nci_rsp_packet: unknown rsp opcode 0x404
[  143.907273][   T63] usb usb11-port1: attempt power cycle
[  143.997724][  T100] TC_ACT_REPEAT abuse ?
[  144.117061][   T62] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  144.247042][   T62] usb 7-1: device descriptor read/64, error -71
[  144.247055][   T63] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  144.269486][   T63] usb 11-1: device descriptor read/8, error -71
[  144.497029][   T62] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  144.517157][   T63] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  144.549980][   T63] usb 11-1: device descriptor read/8, error -71
[  144.638313][   T62] usb 7-1: device descriptor read/64, error -71
[  144.652484][T10475] sp0: Synchronizing with TNC
[  144.659170][   T63] usb usb11-port1: unable to enumerate USB device
[  144.747191][   T62] usb usb7-port1: attempt power cycle
[  145.106227][T10495] bond_slave_0: entered promiscuous mode
[  145.108145][T10495] bond_slave_1: entered promiscuous mode
[  145.109828][   T62] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  145.110822][T10495] macvlan2: entered promiscuous mode
[  145.113236][T10495] bond0: entered promiscuous mode
[  145.114723][T10495] bond1: entered promiscuous mode
[  145.116112][T10495] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  145.118627][T10495] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  145.124336][   T39] audit: type=1400 audit(1733587425.562:927): avc:  denied  { read } for  pid=10494 comm="syz.4.1169" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  145.131149][   T39] audit: type=1400 audit(1733587425.562:928): avc:  denied  { open } for  pid=10494 comm="syz.4.1169" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  145.137674][   T62] usb 7-1: device descriptor read/8, error -71
[  145.139383][   T39] audit: type=1400 audit(1733587425.562:929): avc:  denied  { ioctl } for  pid=10494 comm="syz.4.1169" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  145.149094][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1170'.
[  145.151482][T10498] netlink: 'syz.4.1170': attribute type 7 has an invalid length.
[  145.153522][T10498] netlink: 'syz.4.1170': attribute type 8 has an invalid length.
[  145.155589][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'.
[  145.377049][   T62] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  145.398058][   T62] usb 7-1: device descriptor read/8, error -71
[  145.470446][T10515] netlink: 'syz.4.1174': attribute type 1 has an invalid length.
[  145.472793][T10515] netlink: 'syz.4.1174': attribute type 4 has an invalid length.
[  145.475994][T10515] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1174'.
[  145.479653][T10515] NCSI netlink: No device for ifindex 458760
[  145.508329][   T62] usb usb7-port1: unable to enumerate USB device
[  145.562587][T10522] dccp_close: ABORT with 32 bytes unread
[  145.929293][   T68] TC_ACT_REPEAT abuse ?
[  146.228992][T10536] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  146.287738][T10557] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  146.460450][   T39] audit: type=1400 audit(1733587426.902:930): avc:  denied  { getattr } for  pid=10561 comm="syz.6.1187" name="/" dev="9p" ino=42860577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  146.460823][T10562] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  146.707122][T10569] syz.6.1188 (10569) used greatest stack depth: 20624 bytes left
[  146.711205][T10580] random: crng reseeded on system resumption
[  146.932596][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'.
[  146.968111][T10599] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  146.969863][T10599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  146.973178][T10599] vhci_hcd vhci_hcd.0: Device attached
[  147.011672][T10597] syzkaller0: entered promiscuous mode
[  147.013762][T10597] syzkaller0: entered allmulticast mode
[  147.033000][T10597] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  147.038540][T10597] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  147.197158][    C3] TC_ACT_REPEAT abuse ?
[  147.207429][   T63] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  147.797943][T10600] vhci_hcd: connection reset by peer
[  147.805114][   T68] vhci_hcd: stop threads
[  147.806268][   T68] vhci_hcd: release socket
[  147.810216][   T68] vhci_hcd: disconnect device
[  149.117568][   T45] TC_ACT_REPEAT abuse ?
[  151.494375][ T5938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  151.500123][ T5938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  151.503230][ T5938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  151.506585][ T5938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.515487][ T5938] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  151.518839][ T5938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  151.677995][   T68] TC_ACT_REPEAT abuse ?
[  152.322175][   T63] vhci_hcd: vhci_device speed not set
[  153.607842][ T5945] Bluetooth: hci5: command tx timeout
[  154.887704][   T68] TC_ACT_REPEAT abuse ?
[  155.677397][ T5945] Bluetooth: hci5: command tx timeout
[  157.438757][ T1255] TC_ACT_REPEAT abuse ?
[  157.767266][ T5945] Bluetooth: hci5: command tx timeout
[  159.837405][ T5945] Bluetooth: hci5: command tx timeout
[  160.638277][ T1147] TC_ACT_REPEAT abuse ?
[  160.781117][T10617] chnl_net:caif_netlink_parms(): no params data found
[  160.895699][   T39] audit: type=1400 audit(1733587441.332:931): avc:  denied  { read } for  pid=10655 comm="syz.2.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  161.025634][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.032099][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.034672][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.036278][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.038341][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.039911][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.041939][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.043687][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.045596][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.047321][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.050202][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.052254][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.054937][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.057066][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.059622][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.061565][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.064064][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.066327][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.069510][T10667] binder: BINDER_SET_CONTEXT_MGR already set
[  161.071550][T10667] binder: 10666:10667 ioctl 4018620d 20000100 returned -16
[  161.098179][   T39] audit: type=1400 audit(1733587441.532:932): avc:  denied  { append } for  pid=10673 comm="syz.6.1216" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  161.127748][T10617] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.129667][T10617] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.137392][T10617] bridge_slave_0: entered allmulticast mode
[  161.139549][T10617] bridge_slave_0: entered promiscuous mode
[  161.142417][T10617] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.144313][T10617] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.146299][T10617] bridge_slave_1: entered allmulticast mode
[  161.151980][T10617] bridge_slave_1: entered promiscuous mode
[  161.195743][   T39] audit: type=1400 audit(1733587441.632:933): avc:  denied  { shutdown } for  pid=10682 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  161.196537][T10683] overlay: Unknown parameter 'fowner<00000000000000000000'
[  161.223690][  T100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.258145][T10617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.261826][T10617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.309822][T10617] team0: Port device team_slave_0 added
[  161.315578][T10617] team0: Port device team_slave_1 added
[  161.343700][T10709] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  161.344965][T10716] netlink: zone id is out of range
[  161.346089][T10709] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1225'.
[  161.347798][T10617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.355284][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.363740][T10617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.375919][T10717] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1225'.
[  161.419682][  T100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.425837][T10617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.427850][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.434523][T10617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.528730][T10617] hsr_slave_0: entered promiscuous mode
[  161.535633][T10728] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1231'.
[  161.567748][T10617] hsr_slave_1: entered promiscuous mode
[  161.647119][T10617] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.649177][T10617] Cannot create hsr debugfs directory
[  161.729602][  T100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.859708][  T100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.981219][T10617] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  161.985368][T10617] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  161.989119][T10617] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  161.992347][T10617] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  162.030095][T10617] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.040833][T10617] 8021q: adding VLAN 0 to HW filter on device team0
[  162.049210][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.051089][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.070498][   T39] audit: type=1400 audit(1733587442.502:934): avc:  denied  { append } for  pid=10767 comm="syz.6.1240" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  162.087224][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.089859][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.161794][  T100] bridge_slave_1: left allmulticast mode
[  162.163242][  T100] bridge_slave_1: left promiscuous mode
[  162.164844][  T100] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.174136][  T100] bridge_slave_0: left allmulticast mode
[  162.176303][  T100] bridge_slave_0: left promiscuous mode
[  162.179151][  T100] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.203618][  T100] tipc: Resetting bearer <eth:geneve1>
[  162.280970][   T39] audit: type=1400 audit(1733587442.722:935): avc:  denied  { setopt } for  pid=10787 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  162.487412][ T1136] TC_ACT_REPEAT abuse ?
[  163.218965][  T100] tipc: Disabling bearer <eth:geneve1>
[  164.209686][  T100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.250671][  T100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.290331][  T100] bond0 (unregistering): Released all slaves
[  164.341422][   T39] audit: type=1400 audit(1733587444.782:936): avc:  denied  { mounton } for  pid=10802 comm="syz.4.1250" path="/proc/1108/cgroup" dev="proc" ino=38272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  164.352472][T10617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.403605][ T5945] Bluetooth: hci4: command tx timeout
[  164.413824][  T100] tipc: Left network mode
[  164.447912][T10822] netlink: 'syz.6.1253': attribute type 1 has an invalid length.
[  164.449814][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1253'.
[  164.479213][T10617] veth0_vlan: entered promiscuous mode
[  164.495489][T10617] veth1_vlan: entered promiscuous mode
[  164.511595][T10617] veth0_macvtap: entered promiscuous mode
[  164.523682][T10617] veth1_macvtap: entered promiscuous mode
[  164.537586][T10821] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  164.538726][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.542340][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.544748][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.557296][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.564120][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.568810][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.573060][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.576835][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.580557][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.584610][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.587894][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.590690][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.592702][T10835] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1256'.
[  164.597476][T10617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.756258][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.759179][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.762090][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.764897][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.767870][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.770681][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.773353][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.776115][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.779131][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.781851][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.784524][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.788111][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.791570][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.795251][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.798927][T10617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.817349][ T5996] usb 11-1: new low-speed USB device number 6 using dummy_hcd
[  164.895504][T10617] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.898261][T10617] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.900725][T10617] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.903282][T10617] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.969549][ T5996] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.973292][ T5996] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2
[  164.976747][ T5996] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  164.981238][ T5996] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.985120][ T5996] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  164.988577][ T5996] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.995707][ T5996] hub 11-1:1.0: bad descriptor, ignoring hub
[  164.998078][ T5996] hub 11-1:1.0: probe with driver hub failed with error -5
[  165.001145][ T5996] cdc_wdm 11-1:1.0: skipping garbage
[  165.003093][ T5996] cdc_wdm 11-1:1.0: skipping garbage
[  165.008244][ T5996] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  165.010449][ T5996] cdc_wdm 11-1:1.0: Unknown control protocol
[  165.103469][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.106568][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.121101][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.128836][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.156005][   T39] audit: type=1400 audit(1733587445.592:937): avc:  denied  { connect } for  pid=10848 comm="syz.2.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  165.159942][T10849] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1259'.
[  165.263214][  T100] hsr_slave_0: left promiscuous mode
[  165.311058][   T39] audit: type=1400 audit(1733587445.752:938): avc:  denied  { ioctl } for  pid=10859 comm="syz.2.1262" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  165.338763][  T100] hsr_slave_1: left promiscuous mode
[  165.429872][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1261'.
[  165.440886][  T100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.442822][  T100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.445446][  T100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.447607][  T100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.478553][  T100] veth1_macvtap: left promiscuous mode
[  165.480074][  T100] veth0_macvtap: left promiscuous mode
[  165.482761][  T100] veth1_vlan: left promiscuous mode
[  165.484180][  T100] veth0_vlan: left promiscuous mode
[  165.758076][ T1173] TC_ACT_REPEAT abuse ?
[  165.762063][T10831] cdc_wdm 11-1:1.0: Error autopm - -16
[  165.762230][ T5996] usb 11-1: USB disconnect, device number 6
[  165.907078][ T5996] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  166.067027][ T5996] usb 11-1: Using ep0 maxpacket: 8
[  166.070020][ T5996] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.072853][ T5996] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2
[  166.075310][ T5996] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.078476][ T5996] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.081257][ T5996] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  166.084165][ T5996] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.089579][ T5996] hub 11-1:1.0: bad descriptor, ignoring hub
[  166.091586][ T5996] hub 11-1:1.0: probe with driver hub failed with error -5
[  166.094275][ T5996] cdc_wdm 11-1:1.0: skipping garbage
[  166.095765][ T5996] cdc_wdm 11-1:1.0: skipping garbage
[  166.098998][ T5996] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  166.100679][ T5996] cdc_wdm 11-1:1.0: Unknown control protocol
[  166.297317][T10831] omfs: Invalid superblock (0)
[  166.367535][T10873] cdc_wdm 11-1:1.0: Error submitting int urb - -90
[  166.387280][ T5992] usb 11-1: USB disconnect, device number 7
[  166.457237][   T39] audit: type=1400 audit(1733587446.892:939): avc:  denied  { ioctl } for  pid=10877 comm="syz.6.1265" path="socket:[37811]" dev="sockfs" ino=37811 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  166.509037][T10879] netlink: 'syz.6.1265': attribute type 16 has an invalid length.
[  166.511113][T10879] netlink: 'syz.6.1265': attribute type 3 has an invalid length.
[  166.513125][T10879] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.1265'.
[  168.319153][   T11] TC_ACT_REPEAT abuse ?
[  170.877484][ T1255] TC_ACT_REPEAT abuse ?
[  172.492109][  T100] team0 (unregistering): Port device team_slave_1 removed
[  173.363362][  T100] team0 (unregistering): Port device team_slave_0 removed
[  174.087788][   T45] TC_ACT_REPEAT abuse ?
[  176.647439][ T1147] TC_ACT_REPEAT abuse ?
[  178.559791][    C3] TC_ACT_REPEAT abuse ?
[  179.837454][   T77] TC_ACT_REPEAT abuse ?
[  180.016594][T10906] usb usb9: check_ctrlrecip: process 10906 (syz.7.1270) requesting ep 01 but needs 81
[  180.019399][T10906] usb usb9: usbfs: process 10906 (syz.7.1270) did not claim interface 0 before use
[  180.056093][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'.
[  180.059193][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'.
[  180.138596][T10925] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 2304
[  180.141250][T10925] tmpfs: Bad value for 'mpol'
[  180.277816][ T1992] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  180.302180][T10940] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  180.304622][T10940] program syz.2.1278 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  180.378540][T10924] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  180.447046][ T1992] usb 11-1: Using ep0 maxpacket: 8
[  180.448184][ T1992] usb 11-1: config 2 interface 0 has no altsetting 0
[  180.451577][ T1992] usb 11-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  180.463899][ T1992] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.464746][   T39] audit: type=1400 audit(1733587460.902:940): avc:  denied  { sys_chroot } for  pid=10951 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  180.466600][ T1992] usb 11-1: Product: syz
[  180.474565][   T39] audit: type=1400 audit(1733587460.902:941): avc:  denied  { setgid } for  pid=10951 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  180.476718][ T1992] usb 11-1: Manufacturer: syz
[  180.485092][ T1992] usb 11-1: SerialNumber: syz
[  180.505753][   T39] audit: type=1400 audit(1733587460.942:942): avc:  denied  { getopt } for  pid=10965 comm="syz.7.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  180.527929][   T39] audit: type=1326 audit(1733587460.962:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.4.1284" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f531d17fed9 code=0x0
[  180.575580][T10978] caif0: Master is either lo or non-ether device
[  180.644392][T10991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1290'.
[  180.714168][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'.
[  180.716839][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'.
[  180.718612][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1268'.
[  180.723984][ T1992] usb 11-1: USB disconnect, device number 8
[  180.787191][T11011] sp0: Synchronizing with TNC
[  180.838680][T11019] bridge0: entered allmulticast mode
[  180.840714][T11019] team0: left allmulticast mode
[  180.842044][T11019] team_slave_0: left allmulticast mode
[  180.845092][T11019] team_slave_1: left allmulticast mode
[  180.848048][T11019] bridge0: port 3(team0) entered disabled state
[  180.853575][T11019] bridge_slave_1: left allmulticast mode
[  180.855106][T11019] bridge_slave_1: left promiscuous mode
[  180.856649][T11019] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.863954][T11019] bridge_slave_0: left allmulticast mode
[  180.866412][T11019] bridge_slave_0: left promiscuous mode
[  180.868279][T11019] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.302520][T11039] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  181.302520][T11039] The task syz.6.1303 (11039) triggered the difference, watch for misbehavior.
[  181.308535][   T39] audit: type=1400 audit(1733587461.752:944): avc:  denied  { write } for  pid=11038 comm="syz.6.1303" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  181.319993][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1303'.
[  181.322420][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1303'.
[  181.328045][T11039] gtp0: entered promiscuous mode
[  181.330023][T11039] gtp0: entered allmulticast mode
[  181.427158][ T5289] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  181.577005][ T5289] usb 9-1: Using ep0 maxpacket: 8
[  181.580078][ T5289] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.582705][ T5289] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  181.585424][ T5289] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  181.588781][ T5289] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.592516][ T5289] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  181.596261][ T5289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.804439][ T5289] usb 9-1: GET_CAPABILITIES returned 0
[  181.805971][ T5289] usbtmc 9-1:16.0: can't read capabilities
[  182.005974][    C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  182.010185][T11037] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1302'.
[  182.016991][T11037] openvswitch: netlink: Missing key (keys=40, expected=80)
[  182.026557][ T5289] usb 9-1: USB disconnect, device number 19
[  182.046824][   T39] audit: type=1400 audit(1733587462.482:945): avc:  denied  { append } for  pid=11063 comm="syz.7.1310" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  182.185849][   T39] audit: type=1400 audit(1733587462.622:946): avc:  denied  { read } for  pid=11069 comm="syz.7.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  182.264126][T11076] overlayfs: failed to set uuid (20/file1, err=-1); falling back to uuid=null.
[  182.266461][T11076] overlayfs: failed to verify upper root origin
[  182.270788][T11076] ipt_REJECT: ECHOREPLY no longer supported.
[  182.367166][   T62] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  182.397729][   T77] TC_ACT_REPEAT abuse ?
[  182.497132][   T62] usb 11-1: device descriptor read/64, error -71
[  182.556375][   T39] audit: type=1400 audit(1733587462.992:947): avc:  denied  { getattr } for  pid=11079 comm="syz.4.1315" path="socket:[41039]" dev="sockfs" ino=41039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  182.609251][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'.
[  182.613599][T11081] vlan2: entered allmulticast mode
[  182.748336][   T62] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  182.887329][   T62] usb 11-1: device descriptor read/64, error -71
[  183.007902][   T62] usb usb11-port1: attempt power cycle
[  183.025534][T11094] netlink: 'syz.4.1319': attribute type 27 has an invalid length.
[  183.108521][T11098] netlink: 'syz.7.1321': attribute type 2 has an invalid length.
[  183.347061][   T62] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  183.351289][T11109] trusted_key: encrypted_key: key trusted:syz not found
[  183.352733][T11109] input: syz0 as /devices/virtual/input/input23
[  183.367631][   T62] usb 11-1: device descriptor read/8, error -71
[  183.481781][T11116] xt_nat: multiple ranges no longer supported
[  183.580557][T11128] tmpfs: Unknown parameter 'usrquotap1'
[  183.627115][   T62] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  183.655537][   T62] usb 11-1: device descriptor read/8, error -71
[  183.777294][   T62] usb usb11-port1: unable to enumerate USB device
[  183.872156][   T39] audit: type=1400 audit(1733587464.312:948): avc:  denied  { create } for  pid=11132 comm="syz.7.1333" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  183.959417][   T39] audit: type=1400 audit(1733587464.402:949): avc:  denied  { read } for  pid=11132 comm="syz.7.1333" name="file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  185.366707][T11173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11173 comm=syz.7.1343
[  185.597522][ T1173] TC_ACT_REPEAT abuse ?
[  185.687205][ T5996] usb 12-1: new low-speed USB device number 2 using dummy_hcd
[  185.848226][ T5996] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  185.850251][ T5996] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  185.852976][ T5996] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  185.856472][ T5996] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 8
[  185.860632][ T5996] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  185.862525][ T5996] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  185.865246][ T5996] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  185.868992][ T5996] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 8
[  185.872446][ T5996] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  185.874361][ T5996] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  185.877199][ T5996] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  185.880216][ T5996] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 8
[  185.885030][ T5996] usb 12-1: string descriptor 0 read error: -22
[  185.886676][ T5996] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  185.889467][ T5996] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.894190][ T5996] adutux 12-1:168.0: interrupt endpoints not found
[  186.035337][T11195] __nla_validate_parse: 4 callbacks suppressed
[  186.035348][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'.
[  186.095326][ T5996] usb 12-1: USB disconnect, device number 2
[  186.106851][T11180] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  186.310615][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.313525][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.316643][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.322277][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.324934][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  186.327475][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.922188][T11206] netlink: 'syz.7.1354': attribute type 1 has an invalid length.
[  186.926427][   T39] kauditd_printk_skb: 4 callbacks suppressed
[  186.926441][   T39] audit: type=1400 audit(1733587467.362:954): avc:  denied  { write } for  pid=11205 comm="syz.7.1354" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  186.982378][T11210] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1354'.
[  187.220446][   T77] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.248613][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1354'.
[  187.349546][T11221] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1357'.
[  187.379468][   T77] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.517451][ T1147] TC_ACT_REPEAT abuse ?
[  187.541417][   T77] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.658123][   T77] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.664003][T11198] chnl_net:caif_netlink_parms(): no params data found
[  187.670638][T11239] netlink: 'syz.7.1359': attribute type 5 has an invalid length.
[  187.754072][T11198] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.755989][T11198] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.760890][T11198] bridge_slave_0: entered allmulticast mode
[  187.763001][T11198] bridge_slave_0: entered promiscuous mode
[  187.768158][T11198] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.770096][T11198] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.771975][T11198] bridge_slave_1: entered allmulticast mode
[  187.774052][T11198] bridge_slave_1: entered promiscuous mode
[  187.814426][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.824587][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.855888][T11254] tmpfs: Bad value for 'huge'
[  187.893798][T11198] team0: Port device team_slave_0 added
[  187.898148][T11198] team0: Port device team_slave_1 added
[  187.900499][   T77] bridge_slave_1: left allmulticast mode
[  187.903025][   T77] bridge_slave_1: left promiscuous mode
[  187.904799][   T77] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.910961][   T77] bridge_slave_0: left allmulticast mode
[  187.912479][   T77] bridge_slave_0: left promiscuous mode
[  187.914004][   T77] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.397158][ T5938] Bluetooth: hci1: command tx timeout
[  188.709724][   T39] audit: type=1400 audit(1733587469.152:955): avc:  denied  { append } for  pid=11261 comm="syz.4.1364" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  188.770697][T11265] tmpfs: Bad value for 'huge'
[  188.980689][   T39] audit: type=1400 audit(1733587469.422:956): avc:  denied  { cmd } for  pid=11272 comm="syz.4.1367" path="socket:[42749]" dev="sockfs" ino=42749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  189.931508][   T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.969276][   T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.038558][   T77] bond0 (unregistering): (slave bond1): Releasing backup interface
[  190.078317][   T77] bond0 (unregistering): Released all slaves
[  190.487119][ T5938] Bluetooth: hci1: command tx timeout
[  190.717526][   T11] TC_ACT_REPEAT abuse ?
[  190.800156][   T77] bond1 (unregistering): Released all slaves
[  190.821931][T11256] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.905822][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.908306][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.915198][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.919214][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.921038][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.929229][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.936963][   T39] audit: type=1400 audit(1733587471.372:957): avc:  denied  { watch watch_reads } for  pid=11280 comm="syz.2.1369" path="/proc/1034/net/unix" dev="proc" ino=4026533356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  190.943763][   T39] audit: type=1400 audit(1733587471.372:958): avc:  denied  { getopt } for  pid=11280 comm="syz.2.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  190.946456][T11294] NILFS (nullb0): couldn't find nilfs on the device
[  190.961578][T11284] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003
[  191.179601][T11198] hsr_slave_0: entered promiscuous mode
[  191.197829][T11320] qnx6: unable to set blocksize
[  191.207252][ T1992] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[  191.237246][T11198] hsr_slave_1: entered promiscuous mode
[  191.287385][T11198] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.290450][T11198] Cannot create hsr debugfs directory
[  191.290626][T11320] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  191.365950][ T1992] usb 9-1: config 1 descriptor has 1 excess byte, ignoring
[  191.378080][   T39] audit: type=1400 audit(1733587471.812:959): avc:  denied  { write } for  pid=11330 comm="syz.2.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  191.383195][T11331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1380'.
[  191.383434][ T1992] usb 9-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  191.389206][   T39] audit: type=1400 audit(1733587471.832:960): avc:  denied  { shutdown } for  pid=11330 comm="syz.2.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  191.391019][ T1992] usb 9-1: config 1 interface 0 has no altsetting 0
[  191.407052][ T1992] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  191.410336][ T1992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.413233][ T1992] usb 9-1: Product: syz
[  191.414790][ T1992] usb 9-1: Manufacturer: syz
[  191.416498][ T1992] usb 9-1: SerialNumber: syz
[  191.561223][T11342] xt_hashlimit: size too large, truncated to 1048576
[  191.564347][T11342] syz.7.1382: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  191.569590][T11342] CPU: 0 UID: 0 PID: 11342 Comm: syz.7.1382 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0
[  191.572353][T11342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  191.575127][T11342] Call Trace:
[  191.576014][T11342]  <TASK>
[  191.576819][T11342]  dump_stack_lvl+0x16c/0x1f0
[  191.578074][T11342]  warn_alloc+0x24d/0x3a0
[  191.579220][T11342]  ? __pfx_warn_alloc+0x10/0x10
[  191.580560][T11342]  ? __get_vm_area_node+0x1b0/0x2f0
[  191.581917][T11342]  ? __get_vm_area_node+0x1dc/0x2f0
[  191.583267][T11342]  __vmalloc_node_range_noprof+0x1105/0x1530
[  191.584829][T11342]  ? __pfx___lock_acquire+0x10/0x10
[  191.586168][T11342]  ? hashlimit_mt_check_common+0x8b0/0x1450
[  191.587708][T11342]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  191.589339][T11342]  ? __pfx_lock_release+0x10/0x10
[  191.590666][T11342]  ? trace_lock_acquire+0x14e/0x1f0
[  191.592041][T11342]  ? hashlimit_mt_check_common+0x8b0/0x1450
[  191.593592][T11342]  vmalloc_noprof+0x6b/0x90
[  191.594796][T11342]  ? hashlimit_mt_check_common+0x8b0/0x1450
[  191.596342][T11342]  hashlimit_mt_check_common+0x8b0/0x1450
[  191.597825][T11342]  hashlimit_mt_check+0x71/0x90
[  191.599098][T11342]  ? __pfx_hashlimit_mt_check+0x10/0x10
[  191.600551][T11342]  xt_check_match+0x284/0xa50
[  191.601799][T11342]  ? __schedule+0x4952/0x5ad0
[  191.603060][T11342]  ? __pfx_xt_check_match+0x10/0x10
[  191.604429][T11342]  ? xt_find_target+0x1ee/0x290
[  191.605701][T11342]  ? xt_find_match+0x1f2/0x290
[  191.606956][T11342]  find_check_entry.constprop.0+0x34d/0xa20
[  191.608620][T11342]  ? __pfx_find_check_entry.constprop.0+0x10/0x10
[  191.610305][T11342]  ? kvfree+0x47/0x50
[  191.611352][T11342]  translate_table+0xd06/0x17b0
[  191.612641][T11342]  ? __pfx_translate_table+0x10/0x10
[  191.614011][T11342]  ? __might_fault+0xe3/0x190
[  191.615245][T11342]  do_ip6t_set_ctl+0x605/0xc40
[  191.616512][T11342]  ? __mutex_lock+0x1cc/0xa60
[  191.617751][T11342]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  191.619125][T11342]  ? __mutex_unlock_slowpath+0x164/0x690
[  191.620596][T11342]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  191.622165][T11342]  ? nf_sockopt_find.constprop.0+0x221/0x290
[  191.623729][T11342]  nf_setsockopt+0x8a/0xf0
[  191.624911][T11342]  ipv6_setsockopt+0x135/0x170
[  191.626163][T11342]  rawv6_setsockopt+0xd7/0x680
[  191.627414][T11342]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  191.628825][T11342]  ? selinux_socket_setsockopt+0x6a/0x80
[  191.630286][T11342]  ? sock_common_setsockopt+0x2e/0xf0
[  191.630872][ T1992] usb 9-1: USB disconnect, device number 20
[  191.631678][T11342]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  191.634848][T11342]  do_sock_setsockopt+0x222/0x480
[  191.636186][T11342]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  191.637661][T11342]  ? lock_acquire+0x2f/0xb0
[  191.638859][T11342]  __sys_setsockopt+0x1a0/0x230
[  191.640154][T11342]  __x64_sys_setsockopt+0xbd/0x160
[  191.641497][T11342]  ? do_syscall_64+0x91/0x250
[  191.642734][T11342]  ? lockdep_hardirqs_on+0x7c/0x110
[  191.644107][T11342]  do_syscall_64+0xcd/0x250
[  191.645308][T11342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.646857][T11342] RIP: 0033:0x7fb635d7fed9
[  191.648025][T11342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.652986][T11342] RSP: 002b:00007fb633bf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  191.655133][T11342] RAX: ffffffffffffffda RBX: 00007fb635f46080 RCX: 00007fb635d7fed9
[  191.657169][T11342] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  191.659195][T11342] RBP: 00007fb635df3cc8 R08: 0000000000000588 R09: 0000000000000000
[  191.661236][T11342] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000
[  191.663281][T11342] R13: 0000000000000000 R14: 00007fb635f46080 R15: 00007ffdf0b0f838
[  191.665333][T11342]  </TASK>
[  191.667419][T11342] Mem-Info:
[  191.668316][T11342] active_anon:9589 inactive_anon:0 isolated_anon:0
[  191.668316][T11342]  active_file:5545 inactive_file:48654 isolated_file:0
[  191.668316][T11342]  unevictable:2792 dirty:38 writeback:0
[  191.668316][T11342]  slab_reclaimable:7846 slab_unreclaimable:91762
[  191.668316][T11342]  mapped:32197 shmem:6390 pagetables:1081
[  191.668316][T11342]  sec_pagetables:304 bounce:0
[  191.668316][T11342]  kernel_misc_reclaimable:0
[  191.668316][T11342]  free:428734 free_pcp:6925 free_cma:0
[  191.681460][T11342] Node 0 active_anon:38356kB inactive_anon:0kB active_file:22180kB inactive_file:194544kB unevictable:7632kB isolated(anon):0kB isolated(file):0kB mapped:128788kB dirty:148kB writeback:0kB shmem:22024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13744kB pagetables:4324kB sec_pagetables:1216kB all_unreclaimable? yes
[  191.691850][T11342] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  191.701733][T11342] Node 0 DMA free:15308kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB
[  191.709148][T11342] lowmem_reserve[]: 0 1212 0 0 0
[  191.710463][T11342] Node 0 DMA32 free:128808kB boost:18432kB min:46040kB low:52940kB high:59840kB reserved_highatomic:0KB active_anon:38356kB inactive_anon:0kB active_file:22180kB inactive_file:194544kB unevictable:7632kB writepending:148kB present:2080628kB managed:1269936kB mlocked:0kB bounce:0kB free_pcp:6476kB local_pcp:1324kB free_cma:0kB
[  191.720483][T11342] lowmem_reserve[]: 0 0 0 0 0
[  191.721867][T11342] Node 1 Normal free:1572136kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:20460kB local_pcp:1392kB free_cma:0kB
[  191.730587][T11342] lowmem_reserve[]: 0 0 0 0 0
[  191.732128][T11342] Node 0 DMA: 1*4kB (U) 3*8kB (UM) 3*16kB (UM) 2*32kB (UM) 1*64kB (U) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 2*4096kB (M) = 15308kB
[  191.736383][T11342] Node 0 DMA32: 2*4kB (ME) 98*8kB (UME) 48*16kB (E) 66*32kB (UE) 252*64kB (UME) 65*128kB (UME) 38*256kB (UME) 30*512kB (UME) 27*1024kB (UM) 17*2048kB (UM) 3*4096kB (UM) = 127960kB
[  191.741497][T11342] Node 1 Normal: 7*4kB (UME) 14*8kB (UME) 6*16kB (UME) 30*32kB (UME) 50*64kB (UE) 20*128kB (UME) 6*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (U) 380*4096kB (M) = 1572140kB
[  191.747022][T11342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  191.750246][T11342] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.753585][T11342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  191.756895][T11342] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.759608][T11342] 60589 total pagecache pages
[  191.760797][T11342] 0 pages in swap cache
[  191.761850][T11342] Free swap  = 124048kB
[  191.762854][T11342] Total swap = 124996kB
[  191.764044][T11342] 1048443 pages RAM
[  191.765081][T11342] 0 pages HighMem/MovableOnly
[  191.766321][T11342] 281638 pages reserved
[  191.767571][T11342] 0 pages cma reserved
[  191.834418][   T77] hsr_slave_0: left promiscuous mode
[  191.873427][   T77] hsr_slave_1: left promiscuous mode
[  191.959791][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'.
[  191.962677][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'.
[  191.965759][T11373] netlink: 'syz.2.1387': attribute type 20 has an invalid length.
[  191.997823][   T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.999829][   T77] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.002418][   T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.004802][   T77] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.035822][   T77] veth1_macvtap: left promiscuous mode
[  192.037329][   T77] veth0_macvtap: left promiscuous mode
[  192.038996][   T77] veth1_vlan: left promiscuous mode
[  192.040691][   T77] veth0_vlan: left promiscuous mode
[  192.162067][T11382] netlink: 'syz.7.1389': attribute type 10 has an invalid length.
[  192.285330][T11384] 9pnet_fd: p9_fd_create_unix (11384): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  192.398428][T11388] binder: 11387:11388 ioctl c0306201 0 returned -14
[  192.453167][T11388] binder: 11387:11388 ioctl c0306201 20000200 returned -14
[  192.557102][ T5938] Bluetooth: hci1: command tx timeout
[  193.288883][  T100] TC_ACT_REPEAT abuse ?
[  193.923199][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  194.637143][ T5938] Bluetooth: hci1: command tx timeout
[  196.477596][   T12] TC_ACT_REPEAT abuse ?
[  198.906616][   T77] team0 (unregistering): Port device team_slave_1 removed
[  199.039352][   T12] TC_ACT_REPEAT abuse ?
[  199.761567][   T77] team0 (unregistering): Port device team_slave_0 removed
[  201.607239][ T1136] TC_ACT_REPEAT abuse ?
[  204.173605][ T1173] TC_ACT_REPEAT abuse ?
[  206.110158][T11382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.113950][T11382] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  206.125542][T11198] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  206.150798][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'.
[  206.153461][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'.
[  206.155861][T11404] netlink: 'syz.4.1395': attribute type 13 has an invalid length.
[  206.158259][T11404] netlink: 'syz.4.1395': attribute type 11 has an invalid length.
[  206.163083][T11198] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  206.164492][   T39] audit: type=1326 audit(1733587486.602:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.4.1395" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f531d17fed9 code=0x0
[  206.173914][T11198] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  206.181890][T11198] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  206.248438][T11198] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.268155][T11198] 8021q: adding VLAN 0 to HW filter on device team0
[  206.274038][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.276069][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.290183][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1399'.
[  206.293208][T11423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11423 comm=syz.2.1399
[  206.305219][T11198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  206.308356][T11198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  206.323015][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.324976][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.415271][T11198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.504260][T11198] veth0_vlan: entered promiscuous mode
[  206.522943][T11198] veth1_vlan: entered promiscuous mode
[  206.538111][T11198] veth0_macvtap: entered promiscuous mode
[  206.541105][T11198] veth1_macvtap: entered promiscuous mode
[  206.547661][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.550367][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.552874][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.555542][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.563185][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.566704][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.569939][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.572761][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.575529][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.576086][   T39] audit: type=1400 audit(1733587487.012:962): avc:  denied  { ioctl } for  pid=11459 comm="syz.2.1402" path="socket:[45081]" dev="sockfs" ino=45081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  206.578334][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.579086][T11198] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.593211][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.596856][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.601462][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.605163][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.609048][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.612978][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.616779][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.620928][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.622201][   T39] audit: type=1400 audit(1733587487.062:963): avc:  denied  { map } for  pid=11461 comm="syz.2.1403" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  206.624440][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.630949][T11462] dlm: no local IP address has been set
[  206.634681][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.636221][T11462] dlm: cannot start dlm midcomms -107
[  206.640198][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.645228][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.650093][T11198] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.662292][T11198] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.665483][T11198] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.671195][T11198] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.673479][T11198] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.710444][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.712529][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.727824][ T1147] TC_ACT_REPEAT abuse ?
[  206.735616][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.740657][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.866784][T11478] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  207.049653][T11501] ata3.00: invalid multi_count 1 ignored
[  207.071584][T11505] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  207.084332][   T39] audit: type=1400 audit(1733587487.522:964): avc:  denied  { read } for  pid=11504 comm="syz.7.1409" name="file0" dev="overlay" ino=42860590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  207.093155][   T39] audit: type=1400 audit(1733587487.522:965): avc:  denied  { open } for  pid=11504 comm="syz.7.1409" path="/54/bus/file0" dev="overlay" ino=42860590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  207.105122][   T39] audit: type=1400 audit(1733587487.532:966): avc:  denied  { create } for  pid=11504 comm="syz.7.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  207.117283][   T39] audit: type=1400 audit(1733587487.532:967): avc:  denied  { setopt } for  pid=11504 comm="syz.7.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  207.129104][T11511] overlayfs: workdir and upperdir must be separate subtrees
[  207.130412][   T39] audit: type=1400 audit(1733587487.542:968): avc:  denied  { bind } for  pid=11504 comm="syz.7.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  207.139635][   T39] audit: type=1400 audit(1733587487.542:969): avc:  denied  { write } for  pid=11504 comm="syz.7.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  207.209367][T11500] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  207.229122][   T39] audit: type=1400 audit(1733587487.672:970): avc:  denied  { ioctl } for  pid=11527 comm="syz.8.1415" path="socket:[43707]" dev="sockfs" ino=43707 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  207.264210][T11532] Cannot find set identified by id 65534 to match
[  207.283521][T11542] Cannot find set identified by id 0 to match
[  207.442082][T11552] syz.7.1419: attempt to access beyond end of device
[  207.442082][T11552] sr0: rw=2048, sector=0, nr_sectors = 4 limit=0
[  207.445435][T11552] hfsplus: unable to find HFS+ superblock
[  207.491209][T11564] deleting an unspecified loop device is not supported.
[  207.548014][T11552] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  208.157313][ T5996] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  208.254470][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'.
[  208.318855][ T5996] usb 9-1: Using ep0 maxpacket: 8
[  208.322256][ T5996] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.326121][ T5996] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.330318][ T5996] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  208.333424][ T5996] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  208.336041][ T5996] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  208.339898][ T5996] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  208.343999][ T5996] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  208.346865][ T5996] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.349197][ T5996] usb 9-1: Product: syz
[  208.350388][ T5996] usb 9-1: Manufacturer: syz
[  208.351675][ T5996] usb 9-1: SerialNumber: syz
[  208.566461][ T5996] cdc_ncm 9-1:1.0: bind() failure
[  208.574496][ T5996] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  208.576312][ T5996] cdc_ncm 9-1:1.1: bind() failure
[  208.584113][ T5996] usb 9-1: USB disconnect, device number 21
[  208.903204][T11721] fuseblk: Unknown parameter 'gr#p_id'
[  208.903207][T11722] fuseblk: Unknown parameter 'gr#p_id'
[  208.919552][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1443'.
[  208.924886][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1443'.
[  208.959140][T11726] nbd: must specify at least one socket
[  208.961785][T11726] netem: unknown loss type 5
[  209.038792][   T77] Bluetooth: hci4: Frame reassembly failed (-84)
[  209.231687][T11751] bridge_slave_0: left allmulticast mode
[  209.233274][T11751] bridge_slave_0: left promiscuous mode
[  209.234892][T11751] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.238763][T11751] bridge_slave_1: left allmulticast mode
[  209.240266][T11751] bridge_slave_1: left promiscuous mode
[  209.241787][T11751] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.250833][T11751] bond0: (slave bond_slave_0): Releasing backup interface
[  209.288587][T11751] bond_slave_0: left promiscuous mode
[  209.293797][T11751] bond0: (slave bond_slave_1): Releasing backup interface
[  209.348374][T11751] bond_slave_1: left promiscuous mode
[  209.359550][T11751] team0: Port device team_slave_0 removed
[  209.369778][T11751] team0: Port device team_slave_1 removed
[  209.376869][T11751] bond0: (slave wlan1): Releasing backup interface
[  209.437624][T11751] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  209.441396][T11751] bond0: (slave bond1): Releasing backup interface
[  209.476818][T11763] cgroup: Name too long
[  209.488110][T11751] bond1: left promiscuous mode
[  209.649354][T11771] loop2: detected capacity change from 0 to 7
[  209.651439][T11771] Dev loop2: unable to read RDB block 7
[  209.653827][T11771]  loop2: unable to read partition table
[  209.655738][T11771] loop2: partition table beyond EOD, truncated
[  209.658037][T11771] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  209.917444][   T77] TC_ACT_REPEAT abuse ?
[  210.697341][ T5940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  210.700959][ T5940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  210.703509][ T5940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  210.706427][ T5940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  210.709810][ T5940] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  210.711840][ T5940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  210.746611][T11812] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  210.909606][   T45] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.037087][ T5938] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  211.058040][   T45] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.106192][T11825] overlayfs: failed to resolve './file1': -2
[  211.219426][   T45] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.227830][T11810] chnl_net:caif_netlink_parms(): no params data found
[  211.329439][   T45] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.343123][T11810] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.345128][T11810] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.347209][T11810] bridge_slave_0: entered allmulticast mode
[  211.349813][T11810] bridge_slave_0: entered promiscuous mode
[  211.352731][T11810] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.354747][T11810] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.356757][T11810] bridge_slave_1: entered allmulticast mode
[  211.359281][T11810] bridge_slave_1: entered promiscuous mode
[  211.383642][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.387952][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.415831][T11810] team0: Port device team_slave_0 added
[  211.420188][T11810] team0: Port device team_slave_1 added
[  211.443219][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.445228][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.451901][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.457026][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.458821][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.465362][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.539253][T11810] hsr_slave_0: entered promiscuous mode
[  211.587584][T11810] hsr_slave_1: entered promiscuous mode
[  211.627089][T11810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.629114][T11810] Cannot create hsr debugfs directory
[  211.672398][   T45] bridge_slave_1: left allmulticast mode
[  211.673942][   T45] bridge_slave_1: left promiscuous mode
[  211.675474][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.678401][   T45] bridge_slave_0: left allmulticast mode
[  211.679993][   T45] bridge_slave_0: left promiscuous mode
[  211.681503][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.886025][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1480'.
[  211.941896][   T39] kauditd_printk_skb: 11 callbacks suppressed
[  211.941907][   T39] audit: type=1401 audit(1733587492.382:982): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530
[  212.477492][   T12] TC_ACT_REPEAT abuse ?
[  212.807199][ T5938] Bluetooth: hci5: command tx timeout
[  212.944179][   T39] audit: type=1400 audit(1733587493.382:983): avc:  denied  { write } for  pid=11855 comm="syz.4.1482" path="socket:[45027]" dev="sockfs" ino=45027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  213.025396][   T39] audit: type=1400 audit(1733587493.462:984): avc:  denied  { ioctl } for  pid=11863 comm="syz.4.1484" path="socket:[46321]" dev="sockfs" ino=46321 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  213.271604][T11871] netlink: 'syz.4.1485': attribute type 10 has an invalid length.
[  213.539807][   T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.588864][   T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.639220][   T45] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  213.680430][   T45] bond0 (unregistering): Released all slaves
[  213.687599][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'.
[  213.719828][   T39] audit: type=1400 audit(1733587494.162:985): avc:  denied  { ioctl } for  pid=11872 comm="syz.2.1486" path="socket:[47152]" dev="sockfs" ino=47152 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  214.416435][   T12] TC_ACT_REPEAT abuse ?
[  214.568897][T11842] hsr_slave_1 (unregistering): left promiscuous mode
[  214.613842][T11871] syz_tun: entered promiscuous mode
[  214.616116][T11871] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  214.637155][ T5938] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  214.640769][ T5938] Bluetooth: hci1: Injecting HCI hardware error event
[  214.646236][ T5938] Bluetooth: hci1: hardware error 0x00
[  214.877435][ T5945] Bluetooth: hci5: command tx timeout
[  214.937171][ T5970] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  215.097095][ T5970] usb 9-1: Using ep0 maxpacket: 16
[  215.100413][ T5970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.103284][ T5970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.106058][ T5970] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  215.109586][ T5970] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  215.111960][ T5970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.115835][ T5970] usb 9-1: config 0 descriptor??
[  215.241178][ T5992] hid (null): unknown global tag 0xe
[  215.257331][ T5992] hid-generic 0005:0008:0004.0007: unknown global tag 0xe
[  215.259439][ T5992] hid-generic 0005:0008:0004.0007: item 0 1 1 14 parsing failed
[  215.261890][ T5992] hid-generic 0005:0008:0004.0007: probe with driver hid-generic failed with error -22
[  215.303309][T11810] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  215.306758][T11810] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  215.309766][T11899] netlink: 'syz.2.1494': attribute type 1 has an invalid length.
[  215.348731][ T5970] usbhid 9-1:0.0: can't add hid device: -71
[  215.350965][ T5970] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  215.355399][ T5970] usb 9-1: USB disconnect, device number 22
[  215.437289][    C2] TC_ACT_REPEAT abuse ?
[  215.485013][T11810] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  215.490213][T11810] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  215.533344][T11810] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.577376][T11916] mac80211_hwsim hwsim28 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  215.617752][T11916] mac80211_hwsim hwsim28 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  215.688465][ T1255] TC_ACT_REPEAT abuse ?
[  215.731759][T11916] mac80211_hwsim hwsim28 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  215.787089][T11916] mac80211_hwsim hwsim28 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  215.837678][T11916] mac80211_hwsim hwsim28 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  215.851526][   T45] hsr_slave_0: left promiscuous mode
[  215.907360][   T45] hsr_slave_1: left promiscuous mode
[  215.997183][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.999826][   T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.003233][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.005923][   T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.050795][   T45] veth1_macvtap: left promiscuous mode
[  216.052858][   T45] veth0_macvtap: left promiscuous mode
[  216.054956][   T45] veth1_vlan: left promiscuous mode
[  216.056878][   T45] veth0_vlan: left promiscuous mode
[  216.477100][    C2] TC_ACT_REPEAT abuse ?
[  216.877380][ T5938] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  216.957222][ T5938] Bluetooth: hci5: command tx timeout
[  217.517147][    C2] TC_ACT_REPEAT abuse ?
[  218.238736][T11947] TC_ACT_REPEAT abuse ?
[  218.477357][T11947] wlan0: Trigger new scan to find an IBSS to join
[  218.557293][    C0] TC_ACT_REPEAT abuse ?
[  219.037309][ T5938] Bluetooth: hci5: command tx timeout
[  219.597056][    C2] TC_ACT_REPEAT abuse ?
[  221.437476][T11945] wlan0: Trigger new scan to find an IBSS to join
[  221.448110][T11931] TC_ACT_REPEAT abuse ?
[  221.687049][    C2] TC_ACT_REPEAT abuse ?
[  223.357325][ T1138] TC_ACT_REPEAT abuse ?
[  223.382157][   T45] team0 (unregistering): Port device team_slave_1 removed
[  224.241543][   T45] team0 (unregistering): Port device team_slave_0 removed
[  224.487171][T11949] wlan0: Trigger new scan to find an IBSS to join
[  225.467442][T11947] wlan0: Creating new IBSS network, BSSID 56:89:c4:a7:16:7d
[  225.757116][    C2] TC_ACT_REPEAT abuse ?
[  227.198019][   T68] TC_ACT_REPEAT abuse ?
[  228.487500][T11931] TC_ACT_REPEAT abuse ?
[  230.678477][T11916] mac80211_hwsim hwsim28 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  230.692144][T11810] 8021q: adding VLAN 0 to HW filter on device team0
[  230.703420][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.705796][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.716759][ T1136] ------------[ cut here ]------------
[  230.718509][ T1136] WARNING: CPU: 1 PID: 1136 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x4bb/0x560
[  230.721055][ T1136] Modules linked in:
[  230.722870][ T1136] CPU: 1 UID: 0 PID: 1136 Comm: kworker/u32:6 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0
[  230.727092][ T1136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  230.729886][ T1136] Workqueue: cfg80211 cfg80211_event_work
[  230.731365][ T1136] RIP: 0010:__cfg80211_ibss_joined+0x4bb/0x560
[  230.732971][ T1136] Code: ff ff e8 38 46 0e f7 90 0f 0b 90 e9 66 fe ff ff e8 4a 2e 71 f7 e9 3d fc ff ff e8 e0 2d 71 f7 e9 81 fc ff ff e8 16 46 0e f7 90 <0f> 0b 90 e9 8a fc ff ff e8 08 46 0e f7 90 0f 0b e8 50 2e 71 f7 e9
[  230.738223][ T1136] RSP: 0018:ffffc90005fefb50 EFLAGS: 00010293
[  230.739815][ T1136] RAX: 0000000000000000 RBX: ffff888052918d90 RCX: 1ffffffff2dd0ed8
[  230.741838][ T1136] RDX: ffff888026e20000 RSI: ffffffff8a8bc02a RDI: ffffffff8bd1b4e0
[  230.743877][ T1136] RBP: ffffc90005fefc00 R08: 0000000000000001 R09: fffffbfff2dca5a8
[  230.746047][ T1136] R10: ffffffff96e52d47 R11: 0000000000000003 R12: ffff888052918000
[  230.748231][ T1136] R13: 1ffff92000bfdf6e R14: 0000000000000000 R15: ffffc90005fefb90
[  230.750278][ T1136] FS:  0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000
[  230.752605][ T1136] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  230.754211][ T1136] CR2: 00007f48684c2629 CR3: 0000000036438000 CR4: 0000000000352ef0
[  230.756263][ T1136] DR0: fffffffffffffffc DR1: 0000000000000000 DR2: 0000000000000002
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  230.758582][ T1136] DR3: 0000000000000800 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  230.760660][ T1136] Call Trace:
[  230.761231][T11949] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.761525][ T1136]  <TASK>
[  230.763334][T11949] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.764101][ T1136]  ? __warn+0xea/0x3c0
[  230.768063][ T1136]  ? __cfg80211_ibss_joined+0x4bb/0x560
[  230.769514][ T1136]  ? report_bug+0x3c0/0x580
[  230.770711][ T1136]  ? handle_bug+0x54/0xa0
[  230.771856][ T1136]  ? exc_invalid_op+0x17/0x50
[  230.773078][ T1136]  ? asm_exc_invalid_op+0x1a/0x20
[  230.774408][ T1136]  ? __cfg80211_ibss_joined+0x4ba/0x560
[  230.775863][ T1136]  ? __cfg80211_ibss_joined+0x4bb/0x560
[  230.777359][ T1136]  ? __pfx_lock_release+0x10/0x10
[  230.778685][ T1136]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  230.780228][ T1136]  ? mark_held_locks+0x9f/0xe0
[  230.781482][ T1136]  ? cfg80211_process_wdev_events+0x3e6/0x5d0
[  230.781864][ T5940] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  230.783025][ T1136]  cfg80211_process_wdev_events+0x3e6/0x5d0
[  230.786542][ T1136]  cfg80211_process_rdev_events+0x9f/0x130
[  230.788157][ T1136]  cfg80211_event_work+0x2b/0x40
[  230.789282][ T5940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  230.789439][ T1136]  process_one_work+0x9c5/0x1ba0
[  230.792546][ T1136]  ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10
[  230.794329][ T1136]  ? __pfx_process_one_work+0x10/0x10
[  230.795726][ T1136]  ? rcu_is_watching+0x12/0xc0
[  230.797384][ T1136]  ? assign_work+0x1a0/0x250
[  230.798625][ T1136]  worker_thread+0x6c8/0xf00
[  230.799812][ T1136]  ? __pfx_worker_thread+0x10/0x10
[  230.799915][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  230.801072][ T1136]  kthread+0x2c1/0x3a0
[  230.804440][ T1136]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.805755][ T1136]  ? __pfx_kthread+0x10/0x10
[  230.805992][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  230.806903][ T1136]  ret_from_fork+0x45/0x80
[  230.809352][ T5940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  230.809652][ T1136]  ? __pfx_kthread+0x10/0x10
[  230.812690][ T1136]  ret_from_fork_asm+0x1a/0x30
[  230.813961][ T1136]  </TASK>
[  230.814046][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  230.814726][ T1136] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  230.814734][ T1136] CPU: 1 UID: 0 PID: 1136 Comm: kworker/u32:6 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0
[  230.814747][ T1136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  230.814754][ T1136] Workqueue: cfg80211 cfg80211_event_work
[  230.814768][ T1136] Call Trace:
[  230.814771][ T1136]  <TASK>
[  230.814775][ T1136]  dump_stack_lvl+0x3d/0x1f0
[  230.814790][ T1136]  panic+0x71d/0x800
[  230.814806][ T1136]  ? __pfx_panic+0x10/0x10
[  230.814822][ T1136]  ? show_trace_log_lvl+0x29d/0x3d0
[  230.814837][ T1136]  ? check_panic_on_warn+0x1f/0xb0
[  230.814848][ T1136]  ? __cfg80211_ibss_joined+0x4bb/0x560
[  230.814862][ T1136]  check_panic_on_warn+0xab/0xb0
[  230.814873][ T1136]  __warn+0xf6/0x3c0
[  230.814882][ T1136]  ? __cfg80211_ibss_joined+0x4bb/0x560
[  230.814896][ T1136]  report_bug+0x3c0/0x580
[  230.814911][ T1136]  handle_bug+0x54/0xa0
[  230.814925][ T1136]  exc_invalid_op+0x17/0x50
[  230.814940][ T1136]  asm_exc_invalid_op+0x1a/0x20
[  230.814955][ T1136] RIP: 0010:__cfg80211_ibss_joined+0x4bb/0x560
[  230.814969][ T1136] Code: ff ff e8 38 46 0e f7 90 0f 0b 90 e9 66 fe ff ff e8 4a 2e 71 f7 e9 3d fc ff ff e8 e0 2d 71 f7 e9 81 fc ff ff e8 16 46 0e f7 90 <0f> 0b 90 e9 8a fc ff ff e8 08 46 0e f7 90 0f 0b e8 50 2e 71 f7 e9
[  230.814979][ T1136] RSP: 0018:ffffc90005fefb50 EFLAGS: 00010293
[  230.814988][ T1136] RAX: 0000000000000000 RBX: ffff888052918d90 RCX: 1ffffffff2dd0ed8
[  230.814995][ T1136] RDX: ffff888026e20000 RSI: ffffffff8a8bc02a RDI: ffffffff8bd1b4e0
[  230.815002][ T1136] RBP: ffffc90005fefc00 R08: 0000000000000001 R09: fffffbfff2dca5a8
[  230.815008][ T1136] R10: ffffffff96e52d47 R11: 0000000000000003 R12: ffff888052918000
[  230.815015][ T1136] R13: 1ffff92000bfdf6e R14: 0000000000000000 R15: ffffc90005fefb90
[  230.815026][ T1136]  ? __cfg80211_ibss_joined+0x4ba/0x560
[  230.815042][ T1136]  ? __pfx_lock_release+0x10/0x10
[  230.815054][ T1136]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  230.815068][ T1136]  ? mark_held_locks+0x9f/0xe0
[  230.815082][ T1136]  ? cfg80211_process_wdev_events+0x3e6/0x5d0
[  230.815092][ T1136]  cfg80211_process_wdev_events+0x3e6/0x5d0
[  230.815107][ T1136]  cfg80211_process_rdev_events+0x9f/0x130
[  230.815117][ T1136]  cfg80211_event_work+0x2b/0x40
[  230.815128][ T1136]  process_one_work+0x9c5/0x1ba0
[  230.815144][ T1136]  ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10
[  230.815159][ T1136]  ? __pfx_process_one_work+0x10/0x10
[  230.815169][ T1136]  ? rcu_is_watching+0x12/0xc0
[  230.815187][ T1136]  ? assign_work+0x1a0/0x250
[  230.815198][ T1136]  worker_thread+0x6c8/0xf00
[  230.815215][ T1136]  ? __pfx_worker_thread+0x10/0x10
[  230.815226][ T1136]  kthread+0x2c1/0x3a0
[  230.815239][ T1136]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.815251][ T1136]  ? __pfx_kthread+0x10/0x10
[  230.815265][ T1136]  ret_from_fork+0x45/0x80
[  230.815275][ T1136]  ? __pfx_kthread+0x10/0x10
[  230.815289][ T1136]  ret_from_fork_asm+0x1a/0x30
[  230.815309][ T1136]  </TASK>
[  230.816941][ T1136] Kernel Offset: disabled

VM DIAGNOSIS:
16:05:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffffffffffff RCX=ffffffff81767932 RDX=1ffff1100a5e65e8
RSI=0000000000000008 RDI=00000000ffffffff RBP=0000000000000000 RSP=ffffc9000413f758
R8 =0000000000000000 R9 =fffffbfff2dca59a R10=ffffffff96e52cd7 R11=0000000000000000
R12=0000000000000000 R13=ffff888052f32440 R14=00000000000000a9 R15=ffff888052f32f20
RIP=ffffffff81767596 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555577474500 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff981545f40 CR3=000000005cdde000 CR4=00352ef0
DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff98207d100 00007ff981510440 00007ff981510458 00007ff9815104a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851c99d5 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc90005fef4b8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007
R12=0000000000000000 R13=0000000000000044 R14=ffffffff851c9970 R15=0000000000000000
RIP=ffffffff851c99ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f48684c2629 CR3=0000000036438000 CR4=00352ef0
DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff98207d100 00007ff981510440 00007ff981510458 00007ff9815104a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000000 RBX=1ffff92000ad7f2b RCX=ffffffff81ebdd34 RDX=ffff88805c448000
RSI=ffffffff81ebda81 RDI=ffffffff8e1bb500 RBP=0000000000000000 RSP=ffffc900056bf948
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffffff8e1bb500 R13=0000000000000000 R14=00000000000000ff R15=ffff88802e0c282c
RIP=ffffffff8176ab62 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005618c52c1050 CR3=0000000023364000 CR4=00352ef0
DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18a2c7d100 00007f18a2110440 00007f18a2110458 00007f18a21104a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000f00 RDX=ffffea000197c340
RSI=ffff888000000000 RDI=ffff888065f0d100 RBP=ffffea000197c340 RSP=ffffc90005b9f860
R8 =0000160000000000 R9 =0000000000000000 R10=ffffed100cbe1a00 R11=dffffc0000000000
R12=0000000000000000 R13=ffffea000197c380 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff8b28c9cb RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555589f6e500 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f18a2146038 CR3=0000000023364000 CR4=00352ef0
DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18a2c7d100 00007f18a2110440 00007f18a2110458 00007f18a21104a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000