last executing test programs:

1m32.122041807s ago: executing program 3 (id=1919):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0xffffffff80000000, 0x0, 0x121, 0x2, 0x1})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1b8, r5, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x69}}}}, [@NL80211_ATTR_KEYS={0x138, 0x51, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x13, 0x4, "ba40274fb672ab509cb71c9d35ec6a"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "628d08647ef471f558a6835a33"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "11808eb61d"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x9, 0x4, "00fdc3955b"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x12, 0x4, "c7ddefaa4bf74071766ec144daae"}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x9, 0x4, "3629cd6e4d"}, @NL80211_KEY_SEQ={0x10, 0x4, "e43373d4488f41159a3d9766"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0a9ac1376ade1c814c4c688aee"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0xb1}, @channel_switch={0x25, 0x3, {0x1, 0xd, 0x10}}, @dsss={0x3, 0x1, 0x88}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0xc, 0x1, 0x9, 0x3}}}, @NL80211_ATTR_SSID={0x12, 0x34, @random="2c140f9aea76813df767f3191a4d"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0xffff, 0x10, 0x7fff, 0x3}}}]}, 0x1b8}}, 0x24040081)
r7 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x60)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=<r8=>0x0)
connect$nfc_llcp(r7, &(0x7f0000000540)={0x27, r8, 0x1, 0x2, 0x4, 0x9, "1e4d90b9654f909e5d016d726fc291ec7af883589dd0874ffff4d0a9f001259afe6e461f2c35c15c972dc73b3e700cb271acb98801caac3d56a0d7faa5859a", 0xd}, 0x60)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xc4)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x800, 0x1, 0x0, "fa13ebdaf201800000070000050000000001000100", 0x494e4f4b})

1m32.121745242s ago: executing program 3 (id=1920):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) (async)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) (async)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) (async)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x1c4, 0x30, 0xffff, 0x2, 0x0, {}, [{0x1b0, 0x1, [@m_mpls={0x1ac, 0xe, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7e, 0x1, 0x10000000, 0xed70, 0x2}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PROTO={0x6, 0x4, 0xfbfb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x1d12, 0x2, 0x1ff80}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffff, 0x7, 0x1, 0x1000, 0x4}, 0x2}}]}, {0xf9, 0x6, "aad23800a9a08d300fb88ad96a7f4a335d085590b465ed14bfb177091108cae8e3e6a734078419417f19200faf58988499a90542dc89ddadbb58f903ace5995f54840cdfd0e6ac4e6588d065a64d442ad730bc6d9ee18401b95fd3778aad79494eaa22c8871118e46545401103cc68f80cdd2fd3550a9ace50e293fd2ed8bbd32ab505e9ad54ce414eaa524842806fcfa4a35a3d2685a19af8aef87157545feaff590f9fa11687e5f9a3356a0898e8987ed214293c2dbbd5bffb710ba0b42ed85920385a0ac2b44c4edf49d79d4da538483228e2a5e8f7f577b9a77b496fa89308173719435dc7841770a97640b3dd36ee18f80530"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1c4}}, 0x0) (async, rerun: 64)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {@in6=@loopback, 0x4d3, 0x33}, @in=@local, {0x20000, 0x0, 0xc4}, {0x400000000000000}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0)
close_range(r9, r10, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TUNGETFILTER(r11, 0x801054db, &(0x7f00000002c0)=""/144)

1m31.921458401s ago: executing program 3 (id=1921):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4c22, @multicast1}, 0x10, 0x0}}], 0x1, 0xc090) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async)
r3 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
shutdown(r3, 0x1) (async)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) (async)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x6, 0x1, 0x1ff, 0x9, 0xd, "c44fb8b2aac2e03b09ce6c9e04ae556a4acb40"}) (async)
r6 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000e3ffff840000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000080)={0x3d520, 0x4, 0xc88e, 0x8000000c, 0xfc, "0012412d08d500201e200021077b0a0080edff"}) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000040)=0xd) (async)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x2, 0x6, 0xd, 0x100}, {0x7fff, 0x6, 0x5, 0x232}, {0x4, 0x7f, 0xa, 0xf9a5}, {0x101, 0x2, 0x81, 0x9}, {0x8, 0x1, 0x3, 0x5}, {0x3, 0xfd, 0xa, 0x8}]})

1m31.92110422s ago: executing program 3 (id=1922):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000bc0)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r1, 0x2}}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd7000fedbdf251400000018000180140002006e657464657673696d30000000000000080005000300000008000d000d0000080800090009000000080007"], 0x4c}}, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32=r3], 0x294}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r7, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000300)=@arm64)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000800)={[0x0, 0xc60c, 0x9, 0xed0, 0x6, 0x3, 0x6, 0x1572, 0x8, 0x5, 0x7, 0x4, 0x0, 0x401, 0x0, 0x5], 0xd000, 0x80})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r11 = socket$netlink(0x10, 0x3, 0x4)
sysfs$1(0x3, 0x0)
writev(r11, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1)

1m31.721615899s ago: executing program 3 (id=1923):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x48441, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"})
r1 = syz_open_pts(r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='ocfs2_dlmfs\x00', 0x10810, 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)='ocfs2_dlmfs\x00', 0x10810, 0x0)
r4 = dup(r1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
dup3(r0, r4, 0x0)
dup3(r1, r0, 0x0) (async)
dup3(r1, r0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x1) (async)
ioctl$TCFLSH(r0, 0x540b, 0x1)

1m31.721322097s ago: executing program 3 (id=1924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r3, 0x107, 0xf, 0x0, &(0x7f0000000100))
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf4c3, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000080)
connect$can_j1939(r1, &(0x7f0000000600)={0x1d, r2, 0x1, {0x2, 0xff}, 0xfe}, 0x18)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
socket$packet(0x11, 0x3, 0x300) (async)
getsockopt$packet_int(r3, 0x107, 0xf, 0x0, &(0x7f0000000100)) (async)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf4c3, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000080) (async)
connect$can_j1939(r1, &(0x7f0000000600)={0x1d, r2, 0x1, {0x2, 0xff}, 0xfe}, 0x18) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async)

1m16.650980947s ago: executing program 32 (id=1924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r3, 0x107, 0xf, 0x0, &(0x7f0000000100))
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf4c3, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000080)
connect$can_j1939(r1, &(0x7f0000000600)={0x1d, r2, 0x1, {0x2, 0xff}, 0xfe}, 0x18)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
socket$packet(0x11, 0x3, 0x300) (async)
getsockopt$packet_int(r3, 0x107, 0xf, 0x0, &(0x7f0000000100)) (async)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf4c3, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000080) (async)
connect$can_j1939(r1, &(0x7f0000000600)={0x1d, r2, 0x1, {0x2, 0xff}, 0xfe}, 0x18) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async)

1m10.811267218s ago: executing program 1 (id=2152):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000640)=<r2=>0x0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32)
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0}) (rerun: 32)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000140)={r4, r5/1000+60000}, 0x10) (async, rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (rerun: 32)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0x8) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) (async)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'syz_tun\x00'}}, 0x1e)
io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0)

1m10.810665016s ago: executing program 1 (id=2154):
mkdir(&(0x7f0000000380)='./bus\x00', 0x20)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c)
connect$rose(r0, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r1 = gettid()
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2)
tkill(r1, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x120000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x58}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@xino_auto}], [{@seclabel}, {@flag='ro'}]})
r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getdents(r5, &(0x7f00000001c0)=""/240, 0xf0)
getdents64(r5, 0x0, 0x0)
linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="6669d052337a00000000000000000000000000000000000000000000000000e304"], &(0x7f0000000bc0)=0x2c)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
preadv(r7, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0)

1m10.6817997s ago: executing program 1 (id=2155):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d2000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000004cc07b3bf00edffba9fc56a618f21000000000000000002000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x2b34, &(0x7f0000000080)={0x0, 0x17a3, 0x800, 0x1, 0x337})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000100)=[0x7fff, 0x520e], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = open(&(0x7f00000002c0)='.\x00', 0x500, 0x104)
fcntl$notify(r4, 0x402, 0x8000003d)
getdents(r4, &(0x7f0000000500)=""/215, 0xd7)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010031bd7008000000002e000000080003002c0685c8ece94886892babf66d551bb5e4fe4aa966b2ffa2c7ee6c703aaee5ec53d287e5d850258516312b09630832eecdb62911f00c5dee67e5915f74bf95b9328191613af432aac3b819657226b1dc45c9fd66690c7d1c6b361532c429cc288abf68d746d07aca9a60ea", @ANYRES32=r6, @ANYBLOB="060034003f16000004009300"], 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20000005)

1m10.620497848s ago: executing program 1 (id=2157):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0xd0d, 0x200)
ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f00000003c0))
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x3, 0x6e, '\x00', 0x9})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x100000000000, 0x5]})
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x23cdc43, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
write$ppp(r0, &(0x7f00000001c0)="c021", 0x2)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x1, 0xfffffffe, 0xfffffffc, 0x800})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc0106442, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x92)

1m10.223742332s ago: executing program 1 (id=2163):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000000000000000000022"], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)={[{@size={'size', 0x3d, [0x25]}}]})
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r2=>0x0, 0x2f, 0x7, 0xff, 0x7f, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x20, 0x7800, 0x3, 0xfffffffc}})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>r0, {r1}}, './file0\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0)
pipe2$watch_queue(0x0, 0x80)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, &(0x7f0000000100), &(0x7f0000000140)='syzkaller\x00', 0x1, 0xe8, &(0x7f0000000180)=""/232, 0x41100, 0x42, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000480)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x7fffffff, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r0], &(0x7f0000000540)=[{0x4, 0x1, 0x9, 0x7}, {0x5, 0x4, 0x6, 0x8}, {0x4, 0x3, 0x10, 0x6}], 0x10, 0xef, @void, @value}, 0x94)

1m10.223454118s ago: executing program 1 (id=2164):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r0)
r1 = syz_io_uring_setup(0xd4, &(0x7f0000000340)={0x0, 0x8a77, 0x1, 0x2, 0x335}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x46ba, 0x0, 0x0, 0x0, 0x0)
unshare(0x6a040000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000009d25000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r8=>r6, @ANYBLOB="050000000000000000009d25000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x0)
r9 = socket(0x10, 0x80003, 0x0)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r11, 0x1, 0x50bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x240400a1}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r9, @ANYRESHEX=r2, @ANYRES64=0x0, @ANYRES16=r11, @ANYRESDEC=r12, @ANYRES32=r8, @ANYRES8=r12], 0x25c}}, 0x1)

1m10.139150526s ago: executing program 33 (id=2164):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r0)
r1 = syz_io_uring_setup(0xd4, &(0x7f0000000340)={0x0, 0x8a77, 0x1, 0x2, 0x335}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x46ba, 0x0, 0x0, 0x0, 0x0)
unshare(0x6a040000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000009d25000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r8=>r6, @ANYBLOB="050000000000000000009d25000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x0)
r9 = socket(0x10, 0x80003, 0x0)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r11, 0x1, 0x50bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x240400a1}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r9, @ANYRESHEX=r2, @ANYRES64=0x0, @ANYRES16=r11, @ANYRESDEC=r12, @ANYRES32=r8, @ANYRES8=r12], 0x25c}}, 0x1)

1m2.099373931s ago: executing program 5 (id=2283):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x70}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x64}}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0))
fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, <r3=>0x0})
syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/user\x00')
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000280)={{r0}, "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"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8, 0x3, r2}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
unlink(&(0x7f0000001380)='./file0\x00')
move_pages(r3, 0x9, &(0x7f00000013c0)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000001440)=[0x0], 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000014c0)={<r6=>0x0, @rand_addr, @initdev}, &(0x7f0000001500)=0xc)
sendmsg$nl_route(r5, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=@ipv6_getroute={0x3c, 0x1a, 0x210, 0x70bd2d, 0x25dfdbfd, {0xa, 0x20, 0x14, 0xa, 0xff, 0x4, 0xff, 0x1, 0x800}, [@RTA_EXPIRES={0x8, 0x17, 0x8}, @RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)=@newqdisc={0xb4, 0x24, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0xf}, {0x4, 0xffe0}, {0xfffe, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x70}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3b}, @TCA_RATE={0x6, 0x5, {0x87, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x2000, 0x7fff, 0x1, 0x1, 0x7238, 0x3}}, {0xa, 0x2, [0x9, 0x9, 0x2]}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1c86}, @TCA_TBF_PRATE64={0xc, 0x5, 0x31125e9b3fe60eb8}, @TCA_TBF_PRATE64={0xc, 0x5, 0x647c97ee4a7e4785}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4044800}, 0x10)
r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
fcntl$notify(r8, 0x402, 0x25)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000017c0), r4)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001840)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001880)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001940)={'syztnl0\x00', &(0x7f00000018c0)={'syztnl0\x00', <r12=>r6, 0x4, 0xcc, 0x6, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x1, 0x1, 0x7, 0xcf}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a00)={0xffffffffffffffff, 0x58, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002040)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001a40)={0x59c, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r11}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x3, 0x1, 0xffffff7f}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x50}, 0x800)
r14 = accept4$inet(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x0, @remote}, &(0x7f00000020c0)=0x10, 0x80000)
setsockopt$inet_int(r14, 0x0, 0xa, &(0x7f0000002100)=0xfb, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000021c0)={{0x1, 0x1, 0x18, <r15=>0xffffffffffffffff}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x20, &(0x7f0000002200)={'trans=fd,', {'rfdno', 0x3d, r15}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@afid={'afid', 0x3d, 0x3}}, {@mmap}, {@loose}, {@msize={'msize', 0x3d, 0x21d}}, {@posixacl}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@fscache}], [{@permit_directio}, {@obj_type={'obj_type', 0x3d, '.\x9c*'}}, {@subj_user={'subj_user', 0x3d, 'mode\x00'}}, {@dont_measure}, {@euid_gt}]}})
openat(r15, &(0x7f0000002340)='./file0\x00', 0x4042, 0xe1)

1m2.035689721s ago: executing program 5 (id=2286):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000009c0)={'syz0\x00', {0x3, 0x2, 0x80, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x1ff, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0xffff, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x4, 0x6, 0x0, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x8, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x8000005, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x8000000b, 0x5, 0x2, 0x2, 0x400003, 0x7, 0x6, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x4a470631, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ef, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x8, 0x0, 0xb9, 0xce4, 0x1ff, 0x32, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa623, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r3 = dup(r2)
ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000000))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="040081000a000600080211000001000006001a01040000000600100063070000080014"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x3}, 0x8)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r10=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r9, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r10}}, 0xc)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x43c}}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x9})
r12 = openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0)
ioctl$CDROMREADTOCENTRY(r12, 0x5306, &(0x7f0000001300)={0x0, 0x8, 0x9, 0x1, @msf={0x0, 0x7f, 0x6}, 0x69})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m1.781513427s ago: executing program 5 (id=2292):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
socket$netlink(0x10, 0x3, 0x1)
syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0)

1m1.581296162s ago: executing program 5 (id=2296):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0xffffffc3, <r0=>0xffffffffffffffff}, './bus\x00'})
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xaa, 0x7, 0x1, 0x0, "e280ec7c8f21b67b8c2dffaabe5f4ebabef73e0e7732eaa4920e5ff80fd814f4e1f73100c2d9aa83827fdefd1002868a5fdd73e4e03e25880d62a0a39c7f227d3da72b13a685561d09cf0b869ed1057985247ff8f9a6d117ac4b43ad3e71a8ec4dba5175eaee49fbb3b7640942851cb9c17c1fe01b934777b1040c20d153cdf80a0579a4961ba461384b83921af0cf5f438a1f8d8e3c0d1356c836d70153c3b94bf58e8ed36a"}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000091}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ppoll(&(0x7f0000000080)=[{r3, 0x4260}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000040)={0x0, 0x4, 0xffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mincore(&(0x7f0000059000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/181)
open(&(0x7f00000000c0)='./bus\x00', 0x37320295b40bdb63, 0x4)

1m1.579384743s ago: executing program 5 (id=2299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x40)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}})
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000100)='pstore\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000680)='./file1\x00', &(0x7f0000000700)='binder\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0xd9, &(0x7f0000000100)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x8)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
rmdir(&(0x7f0000000440)='./file0\x00')

1m1.520719572s ago: executing program 5 (id=2302):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2700, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xcf}, 0x8)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00'})

46.504130011s ago: executing program 34 (id=2302):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2700, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xcf}, 0x8)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00'})

10.899360477s ago: executing program 2 (id=2998):
r0 = mq_open(&(0x7f0000001bc0)='security.selinux\x00', 0x8c0, 0x1, &(0x7f0000001c00)={0x400, 0x4, 0x20, 0x9})
mq_timedreceive(r0, &(0x7f0000001c40)=""/229, 0xe5, 0xbd5, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000003000005"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) (async)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9)

10.8363339s ago: executing program 2 (id=3000):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfd, 0x7fffffff}]})
syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ptrace(0x10, r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000300)={0x4})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) (async)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = signalfd4(r1, &(0x7f0000000180)={[0x7]}, 0x8, 0x180800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x270, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="386ba21120c4930df1d6e1821f8e523f"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x513}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a342743a5e68abf5e33392caf28c571c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c383c4ed400f2478"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e9a24361cb5b4ab8c0410b4db7caab8d"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "35225537c827270f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b95699438b8172fdc8f37791cc2c049b7819ca19faa22507f6e21c3fbf9c75fb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "292a11e1344ed66e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0c2d65bcf8cecb104e724dda52100aa9d3fc63b3baf1d73f"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a9cb2d54fe96b1277f5bed26eeb94bb9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9143b72426f0f0d26471363915665ec58697f51ceb5de8af70e2df38a6699947"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "75a38bf38da63e26"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5b113fe29f82b2c45aa8e5558716a094"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8b82180c4103aa39"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="67842f83e0ee1ebe4a32f674f86190bf4e34eb1c3b35988f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6ab36c38168f287d"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffff00}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e8a648978d62cba8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c2becba176903fc"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a2201ba9a3fb4bf7256b068d8bee6fb4"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9833aa4aaece0aee355d88a5e7def271606f0483ba224ea66eb9a2f309b0db31"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7d6b9b759252b3d18b1ad6c99ee4aec5"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d4d66deec0e071af05eacf15f34ff635829561d40fc5cc79a0235c3adaac462a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="37b756116716b1717cae862131c9a62e482f4cdabc43abe47f0b41aae543f884"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="11ca173ad6cb1db7dfe1ff6fc76281d1"}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40001}, 0x4800)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x88900a}}, 0x50)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r8, 0x401870c8, &(0x7f0000000040))

9.95934006s ago: executing program 2 (id=3012):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f"], 0xb4}}, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x43, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000024c0)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet(0x2, 0x80000, 0xfffffff9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r2, &(0x7f0000000200)=""/154, 0x9a)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='xfrm0\x00', 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
acct(0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xff, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080))

8.763374777s ago: executing program 2 (id=3024):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000002100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
lstat(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2100040, &(0x7f0000000500)={'trans=virtio,', {[{@noxattr}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@cache_mmap}]}})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00'], 0x100bf)
read$FUSE(r3, &(0x7f0000000600)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)=0x28)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x9, 0x400000, 0x3, 0x3, 0x7, 0x4, 0x0, 0x0, 0x2, 0x80000000}}, 0x50)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)

7.851073421s ago: executing program 2 (id=3033):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f000003a000/0x2000)=nil)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

7.57034713s ago: executing program 2 (id=3038):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept(r1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)
sendmmsg$alg(r2, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="3db85ae490f53cda25d46e72d84be3ee", 0x10}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x20000884)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00')
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
recvfrom$inet6(r2, &(0x7f0000000000)=""/220, 0xdc, 0x10000, &(0x7f0000000100)={0xa, 0x4e23, 0x8c1, @rand_addr=' \x01\x00', 0x800}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000008000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000b00)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

7.492278528s ago: executing program 35 (id=3038):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept(r1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)
sendmmsg$alg(r2, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="3db85ae490f53cda25d46e72d84be3ee", 0x10}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x20000884)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00')
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
recvfrom$inet6(r2, &(0x7f0000000000)=""/220, 0xdc, 0x10000, &(0x7f0000000100)={0xa, 0x4e23, 0x8c1, @rand_addr=' \x01\x00', 0x800}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000008000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000b00)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.378199694s ago: executing program 7 (id=3121):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async)
add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)="fc479c5868cc5f3be60ca131267200c06c823825055e14240e97093029f9654a25f0f3013e2a3d99", 0xfffff, 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2b}, r2}}}], 0x40}}], 0x2, 0x0) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, 0x0, &(0x7f0000000500)) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (rerun: 32)

2.250557113s ago: executing program 7 (id=3123):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
dup2(r1, r0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
pread64(r2, &(0x7f0000000080)=""/221, 0xdd, 0x7fffffffffffffff)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)

2.189018022s ago: executing program 7 (id=3126):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r6, r6, 0x2f00c6, 0x17a8, 0x1, 0x1ced39})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x1, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xffffffffffff0001})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x10000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)="4cdc58", 0x3})

2.157628974s ago: executing program 7 (id=3128):
chdir(&(0x7f0000000140)='./file0\x00')
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0xc44a81d1a42f846d, 0x0) (async)
msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000007f39700486a2c0a1c3e84418bc378deee0057ed6f219d202013f4c7b605a9cbb737e17f5d19f4af50a8d3ef810bac26bd9d1031ef3577e98a8548b24f3ec5d4baa501489e5f52f7999d2e8d2992f4d732ff3b7122193687066105108bd3da67025d6622c4d20077287de673b66d9ee1900a7e296bb6d7955725a7fcd5cab97e80c4ded28f8724a580da9d28d5e"], 0x8, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x800c050}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0004010a0000000d0085a168216b46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.100563722s ago: executing program 4 (id=3130):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/mnt\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r4, &(0x7f0000000080), 0x0}, 0x20)
ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000003c0)={{}, "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"})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0)
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r6 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x0, 0xf4, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x98, 0xe, 0x1, {0x22, 0xc1e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x4, 0xdd}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x7, 0xfb}}]}}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x14, 0x4, 0xc3, 0x40, 0x7f}, 0xd4, &(0x7f0000000180)={0x5, 0xf, 0xd4, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0x9, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x4, 0x7}, @generic={0x9f, 0x10, 0x4, "ad0a3715467442a0911bc4d91185649673f5014b0c0e79b183957939234872fb338f784a5fbc959a4a8c1adfb097ae6a1abde9cb0cec715c8f2fc4aa5b6fc47447366e92827893a551049e31ce52d0cb6251daa19f5aa0f829cc3994bb8195eab6b0bf0812e4bd5e31d69e583ccbed84818f201a33894d76bd5d59da1c49aa48eca05eae559d4d4d7ea5c3f399524ad7649b6ece607f0cc71374dc9f"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "5b9143d48629611db19b8591d92b1f0e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x7, 0x2, 0x5, 0x1, 0xa}]}, 0x9, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x426}}, {0x86, &(0x7f00000013c0)=@string={0x86, 0x3, "4882d37a32673869a75b46e3442c24ba4f195c31f80bd8ae3ca6d994dc794b26471a5fa7154a3262fb54e268f223c2baf81a347e69f4dcf020c41f9ba37ad3a0e22def6ecab91f80eac989354b59f0287797f5aea5aa93daf93f432db11a21ebebad65f9cf8c597869b17c61fb54e9ab01cead64fb2dc1c8d547ea5806b2297ff1843513"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x42d}}, {0x16, &(0x7f00000014c0)=@string={0x16, 0x3, "d8f3fb2ba2cc7d3dc17fd81200420d8c6c006c17"}}, {0x77, &(0x7f0000001500)=@string={0x77, 0x3, "c305796f269a3c637256349dbffc9303d70465a2c2775a474d16f5ecb27ff143f9da9a0b9ff864ab873f3da5eea876c6b9897ca376f9fbbe044e236d6d2b4adb344dde8e18809d270709eb008d7df9f54c7a76e757c604785fa6fe9f4982014ed0a1f04d0c5b87f75c9c6fd7e961410d56c0ff068a"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x100a}}]})
syz_usb_disconnect(r6)
syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/time\x00')

1.530221771s ago: executing program 6 (id=3136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0}) (async)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) (async)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="040081000a000600080211000001000006001a01040000000600100063070000080014"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3a0000050000000bf91200000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1.528544268s ago: executing program 6 (id=3138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="82ffdcc2"], 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000006, 0x80010, 0xffffffffffffffff, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006, 0x110, 0xffffffffffffffff, 0x10000000)
r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x440001, 0xc)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000680)={0x8, 0x120, 0xfa00, {0x1, {0x7, 0x3, "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", 0xad, 0x3, 0x0, 0x4, 0x8, 0x8, 0x3, 0x1}}}, 0x128)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, r6, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x200, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd70f4fadbdf255500000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20004043}, 0x4040)
r9 = fanotify_init(0x8, 0x40000)
r10 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_ro(r11, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0)
preadv(r12, &(0x7f0000000b00)=[{&(0x7f0000000040)=""/115, 0x73}], 0x1, 0x2, 0x0)
sendfile(r12, r7, &(0x7f0000000340)=0x8000, 0x703c37c0)
fanotify_mark(r9, 0x1, 0x100018, r10, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001900010029bd7000ffdbdf250a801000fc04fd07002f000014001680100002800b000200696e6f7965333200050014"], 0x40}, 0x1, 0x0, 0x0, 0x6001}, 0x24000050)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000200), &(0x7f00000002c0)=0x14)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2})

1.460055148s ago: executing program 6 (id=3140):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,directio,posixacl,'])
read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x2b, 0xf8ff, 0x80000, 0x5, 0x401, 0x6, 0x8, 0x0, 0x0, 0x100, 0x8}}, 0x50)

1.459641425s ago: executing program 6 (id=3141):
open(&(0x7f0000000000)='./bus\x00', 0x105c42, 0x5)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x3, 0xc, 0x7, 0x8fb, 0x9})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
r6 = io_uring_setup(0x7939, &(0x7f0000001080)={0x0, 0x9ba2, 0x2, 0x1, 0x217})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001000)={0x10001, 0x2, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x40000000)
setuid(r5)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001040)=ANY=[@ANYRES32=r6], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
mmap(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x2000006, 0x13, r4, 0x79ca4000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r11, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x4, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xfff})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000180), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB='noswap,uid=', @ANYRESHEX=r8])

1.300303136s ago: executing program 4 (id=3143):
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYRES8, @ANYBLOB="2e2cf8a078c2e638a6ff942769220e7552e429c8e3fc929f6a89d0bc063dd85a735515", @ANYRES64, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT], 0x11)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402505a8a440000134030109021b0015018f000c090400000107010103090501020800080005"], &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x80, 0x3, 0x45, 0x40, 0x9}, 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x5, [{0xf2, &(0x7f00000012c0)=ANY=[@ANYBLOB="f203bfe866c77e99299067a879fdfff710d29734ebd8fb092f88cbd05bde10b15c9dffa68cd061288754658bb15af4bd598fbeff460c33a5eaa57e13d063b41da5d8fcdf191026a6d5e78aa897c6ef06ec8f54d3aa8b7c12b5d9e48ff5ab8d6e48ff664d1ab07a92a723969be4cca4294cdac22297098845a9ff4be071f448e3c3fc399e5c6af426c6500de912013d25bd08feef7294e4c37317d3cb04a9387ddd6e4e06d33fec869f8a355a17b363b4872d3bd11633778e0752954716a707ce6fecbcd6adbd0a4bb193e9a7939bfcb9dd011ae77680a4a82eb67b7739226c2069e880a64b015ceed86e51c5e9914a2076e0"]}, {0x85, &(0x7f0000000240)=ANY=[@ANYBLOB="8503d280d815f7d8c09544e0753dc8e6db4c7b889fe5f142304fb57a82abb104aedc7e960c2cc80316a227eb08140975809d224b9050f13c996c291cdd5fe106983102deae72fdd6c962afae437331816790a59fe01d7ee16e2babdfacb8da1bc1fa5267800f78802122e8ed1b683ecf5df078533e3602426778ef4e0ac4916af3b867c3c1"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x90, &(0x7f0000000bc0)=ANY=[@ANYBLOB="9003c2db334ab96b3a7006d3984e5d31a787500203be190cbed0f64b0b48893907dd92cb26c92e02fa9d54b061e35064b298953f1d3ec563f885676a5e38ab81bc5352cc6667ed1e4d2a488669e80bd38e7b5359675fd5fba10d2eac64cc0d67e1ba3ac64d45eff9933eac758906c17057b6921f1d91b14599da62ff06fa0f58978d3d54c14c2001a43ca5dff542d5eb198bac19a8626d1713402d3a579d7e911c8565e3f15c25371f623f639f9315be94"]}]})
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = fanotify_init(0x16, 0x0)
memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2)
r1 = syz_usb_connect$cdc_ecm(0x5, 0xa5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000740)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x4, 0x40, 0xac, 0xff, 0x4}, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="7b7332000410100a01610000000fffdb2130ff00000b1001040c040c05000140071002065105000b100108040002e8010008"], 0x4, [{0x8e, &(0x7f0000001780)=@string={0x8e, 0x3, "087f554707bff1a79d955435dc1d71599d4eab243f7884d6b5f83d05c9388853782a2ad6bb67d75e5f4ef797c8cba6492c50b6f9a1e72ac35fd5882ec50d0560a9dbda85d239372584eb4819b9ad894c77767cfed26a138aedf70452ad8813205b9ee2b8c2a8225c1d6d8422e592748c374b229a70c5a69a23a92d8d6f45558158da607425d934f7044c247a"}}, {0xdf, &(0x7f0000001980)=ANY=[@ANYBLOB="df036a5dced7fcafcd0aa6a9440c1acbe47b55aaa66eaaf179e9ae2a452299708f8486279744720fcc7d01f47a397d10d645f310ebe4c034bf33dc2db1e7eb90c5f4e49c2968eb7e9ffa374ecb1fb9242d335055a06c3f3a85bb735f3132a40c00c26ad8e933fa41bf63b178e9c1884eb6f130afde57bc70b1b6efdbe8daa38dbb540287183972397dd615b89c8953127f0d5140f7d0fc03b222e51fcfda5074e17dd2b895a2352a80a29d2abd2f1d4ea813a0430478cd183a8b552f979f3fb55821d8baa1b395ad9bbab65986e009787131a6f55a1800"/228]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1806}}, {0xa7, &(0x7f0000000b00)=ANY=[@ANYBLOB="a703dc2d536b578f5789d3f43277d3c167bdfa8ca7d4f9aff33e02d1ebf1f7e9d7c6f6e552e0f2133f7a5f2d088495c7f6cfba4a70af93b9555e374241b4846054133b36674850af35f3acd16d829931a5d93ccdb9200653c3689fe519ed71f9223286e093d4836323ebaa876b50087bd53c3dda840a9bb029b9c5b16c1c3452984d3fb871d89c9e03f43a376fdc2ad858217b5cd2d6d0e884b8a49fa2240d5c466449ea46b4"]}]})
fanotify_mark(r0, 0x1, 0x40000010, 0xffffffffffffffff, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="fad6aa8714", 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)
execveat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x82, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x420c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x41dc, 0x2, [@TCA_BASIC_ACT={0x41d8, 0x3, [@m_gact={0x7c, 0x1d, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1fa5, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x56b, 0x20000000, 0x6, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x203e}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4f2, 0xf6174f8ee923296}}]}, {0x5, 0x6, 'P'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x164, 0x14, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0xfffffffb, 0x4, 0x8, 0x8}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8, 0x4, 0xd96, 0x6}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0x6, 0x8f2, 0x4}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x1, 0x2, 0x4}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x813, 0x1, 0x77ae, 0x6}, 0x6, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0xe, 0x0, 0x1, 0x4}, 0x4, r6}}]}, {0x77, 0x6, "d6183c51b8881a9ecb5630f5c8c2ef0c4787580a6e717eab2bebc73a4cde2d3a64124d27f4def5d4a7460220aa54685b1621a82aacfc7fae63d39234d1d052497f26ecb2fb01fd8c2c2ffdf030c18afaaa60c6c78827b67ebc5a41611f5353f81f03f6cc6e4b1c17b6163f5ebe996b79472853"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x11c, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x24}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}]}, {0xd5, 0x6, "d10b1c42831f26c4aed937f3c1fa9da57a44e16ff9dd4eadd49774b7713d57bb1dde81a5ec10bff1c165bd0b7fdb1e9f0b8e6540abf4fcadc5dd3e0497d654a9d7eae6289d6bc979e8748a125a2d270e40c4a9b91e0a4174a6287b4a35af6c12f68280b6601e58b2f4fca7f6350021495ab400bc9de13a6701fba5f04b6983fa06ef42bfd1b58e93d9ab94107adb93f721047864a9b205bd376f7a8d0975f540ad7da730f40670bec910b43d93b93ffc3ac28de28b08352abb97806a5360d161bb72063345c00e4551bb3c93f51134598c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x1054, 0x8, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xf4, 0x6, 0xaed, 0xd}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x1114, 0x16, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x8, 0x3, 0x81}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x10000000, 0x3, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x210f17af, 0x1, 0x0, 0x1}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x2, 0x6, 0x1aa}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x3, 0x93e, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xaf5, 0x5, 0xf, 0xf20e}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x55b, 0xffffffffffffffff, 0x7f, 0xe90}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbfe, 0xffff8001, 0x20000000, 0x800, 0x6}, 0x30}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x5}}}}, @m_pedit={0x1cd0, 0x12, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0xffffff64, 0xffffffd6, 0x7, 0x3, 0x8}, 0x0, 0x59, [{0x9, 0xd34b, 0x9, 0xfffffff9, 0xfffffffa, 0x1}, {0x0, 0x3, 0x1, 0x1, 0x5, 0x51e8b443}]}, [{0x8, 0x3, 0x2, 0x5, 0x36e63d69, 0x7f}, {0x6, 0xac, 0x6, 0xc, 0x1, 0x5}, {0x9, 0x3, 0xe, 0x8000, 0x800}, {0x3, 0x0, 0x8, 0x4, 0x5}, {0x0, 0x6, 0x10, 0x0, 0x2, 0x3}, {0x7, 0xa2, 0x1, 0x0, 0x9, 0x7}, {0x80000001, 0x5, 0xffff, 0x1, 0x9, 0xb44}, {0x8, 0xffff, 0x1, 0x9, 0xd, 0x7}, {0x0, 0xfffffffe, 0x10001, 0x0, 0x3, 0x1ff}, {0xffffff00, 0x4, 0x2, 0x73a7, 0x5, 0xda}, {0x6574, 0x8000000, 0x1, 0x96b, 0x4, 0x8}, {0xb, 0xfffffffe, 0x5fd, 0x3, 0x4, 0x6}, {0x7, 0x0, 0x8, 0xaee, 0x0, 0x5}, {0x8001, 0x0, 0x7, 0xd, 0x2, 0xfffffff9}, {0x4, 0x8, 0xffff, 0x6, 0x8, 0x200}, {0x2, 0x6, 0x6, 0xffffffc0, 0x6, 0x7ff}, {0x10, 0x101, 0xb26, 0x0, 0x4bc9}, {0x0, 0x7, 0x1, 0xffff, 0x9, 0x4}, {0x8, 0xa93b, 0x2, 0x3d7, 0x9, 0x7}, {0x2, 0x10001, 0xfff, 0xffffff80, 0x2, 0x1}, {0xc, 0xfffffff9, 0x81, 0x101, 0xffffffa5, 0x4292}, {0x5, 0x6, 0xe3, 0x2, 0xb, 0x5e}, {0x5, 0x0, 0x9, 0x9, 0x800, 0x6be00}, {0x69, 0xd5a6, 0xd5a, 0x8, 0x7, 0x8}, {0xffffff73, 0x6, 0xb041, 0x0, 0x2, 0x9c91}, {0xfff, 0x81, 0x2e06, 0x9, 0xa2, 0xa13}, {0x401, 0x1, 0x3, 0xe, 0x8000, 0x200}, {0x2, 0x2, 0x4, 0x6, 0xfffffff7, 0x2}, {0x400, 0xe5f2, 0x2, 0x8, 0x7fff}, {0xd16b, 0xc, 0x7, 0x1, 0x9, 0x18}, {0x9, 0x6, 0x7, 0x9, 0x3, 0x1}, {0x10, 0xfff, 0xfffffff3, 0x7, 0x8, 0xd841}, {0x10, 0x2, 0x8, 0x0, 0x3, 0x19e}, {0xb24, 0xff, 0x2, 0x80000001, 0x9, 0x4}, {0xfffffffa, 0x10000, 0x10000000, 0x4, 0x2, 0x6}, {0xf0000000, 0x4, 0x5, 0x3, 0xffff, 0x2c12}, {0x9, 0x3, 0x848, 0xff, 0x0, 0x3}, {0x101, 0x3, 0x8, 0x6, 0x8001, 0x2}, {0x5, 0xfff, 0x112, 0x6, 0x1000, 0x7}, {0x6, 0x10000, 0x7, 0x2, 0xffffa1ca, 0x8}, {0xe5, 0x1, 0x1ff, 0x9, 0x5, 0x6}, {0x5, 0x401, 0x18a60000, 0x200, 0x9, 0x8}, {0xa, 0x10001, 0x8, 0x9, 0xfffffff7, 0x5}, {0x4, 0x101, 0x10000, 0x6000, 0x6, 0xd}, {0xffffffff, 0x2, 0xa, 0x1, 0x2, 0x3f}, {0x400, 0x10000, 0x3, 0xc0000000, 0x9, 0x593}, {0x0, 0x7fff, 0x4, 0x2, 0xfff, 0xa23f30cb}, {0x4, 0x7, 0xe72, 0x3b, 0x7, 0x7}, {0x1, 0x1c, 0x2, 0x7, 0x0, 0x78}, {0x0, 0x6, 0x8, 0x8000, 0x9, 0x4}, {0x10, 0x9, 0x7ff, 0x2, 0xd09, 0x3}, {0x3, 0x2, 0xfffffffa, 0x7, 0x9, 0x9}, {0x200, 0x9, 0x9c4f, 0x5, 0xfff, 0xffff}, {0xfffffff5, 0x6, 0x1c1a, 0x8, 0x2, 0x2}, {0x80000000, 0xfffff297, 0x1, 0x6, 0x0, 0x36c}, {0x8, 0x1, 0x7, 0x2, 0x101, 0x7}, {0x1, 0x7fff, 0x8, 0x100, 0xffff, 0x592b8dab}, {0x6, 0x1, 0xaa7, 0x1, 0x80000001, 0xf}, {0xa2c, 0x101, 0x3, 0x5, 0x2a58, 0x38000000}, {0x690, 0xffffffff, 0xfffffffa, 0x6, 0x7, 0xfffffff8}, {0x81, 0x0, 0x5, 0x10, 0x1000, 0x3ff}, {0x2, 0xfffffffb, 0x5, 0x401, 0x2}, {0x5, 0x48, 0x7f, 0xd, 0x4, 0x7}, {0x9, 0x8141, 0x5, 0x0, 0x3, 0x30e}, {0x7, 0x4e37, 0x1, 0x5, 0x8ba7, 0x3a31427d}, {0x3, 0x1, 0x6, 0x6, 0x8, 0x4c}, {0x9e, 0x5, 0x0, 0x42b, 0xffffffff, 0x1110}, {0x6, 0x0, 0x4, 0x9, 0x7, 0xffffffff}, {0x3, 0x8000, 0x0, 0x6, 0xdbf, 0x7fff}, {0x6, 0x6, 0xc, 0x5, 0x1, 0x4}, {0x3f8, 0x2, 0x10000, 0x5, 0x800, 0x723f}, {0x8, 0x4, 0x5, 0x7f, 0x7, 0xffff}, {0xffff7a9b, 0x9, 0x7, 0xffffffff, 0x2, 0x4}, {0x5, 0xf882, 0x10, 0x5, 0x6, 0xc13}, {0x7, 0x5, 0x5, 0x0, 0x5, 0x9}, {0x8, 0x400, 0x5, 0xb, 0x8, 0x2}, {0x6, 0xb, 0x4, 0x10, 0x2, 0x6}, {0x8, 0x0, 0x4, 0xc, 0x2, 0x76}, {0xe, 0x2, 0x9, 0x6, 0x3, 0x2}, {0x7, 0xcc, 0x100000, 0x5, 0x6, 0x10}, {0x6, 0x0, 0x0, 0xfffffff6, 0x9, 0x5}, {0xfffffffc, 0x6, 0x8001, 0x223, 0x7, 0x8}, {0x2, 0x1, 0x3, 0xab62, 0x5, 0x87}, {0x3, 0xfffffa9e, 0x1, 0x3, 0x0, 0x2}, {0x70a9d781, 0x3, 0x0, 0x80, 0x6}, {0x1, 0xea9, 0x1, 0x5, 0x6, 0xffff8001}, {0x3d01, 0x10000, 0x7, 0x9, 0x4, 0x80000000}, {0x2, 0xff, 0x1b1, 0x9, 0x5, 0x7fffffff}, {0x3, 0x0, 0x8, 0x8001, 0x3, 0x8}, {0x2, 0x40, 0x1, 0x4, 0x7c54, 0x6}, {0x3, 0xc, 0x6, 0xfffeffff, 0xde, 0x8}, {0xfff, 0x9, 0x1, 0x10000, 0xd05b, 0x6}, {0x7, 0xb, 0x7, 0x80, 0x4b, 0x400}, {0x4, 0x7, 0x2, 0xff, 0x2754, 0x800}, {0x1, 0x4, 0x2a824cd5, 0x5, 0x2, 0x2}, {0x3, 0x615, 0x8, 0xf7d2, 0xad, 0x4}, {0xa8fa, 0x8, 0x4, 0xf61c, 0x3, 0xf}, {0x9, 0x100, 0xd, 0x9, 0x1, 0xa3}, {0x7, 0x6, 0x5a, 0x3, 0x49, 0x2}, {0x5, 0x6, 0x58caa5a, 0xd, 0x3, 0x7}, {0x5, 0x2, 0x0, 0xe54eccba, 0xd, 0x6}, {0x8, 0x2, 0x8, 0x3, 0x5, 0xffffa785}, {0xc, 0xa49, 0x4, 0xffffff01, 0xa, 0x81a1}, {0x80000001, 0x100, 0xc, 0x5df, 0x14, 0x3}, {0x5, 0x8, 0x0, 0x6, 0xfffffff9, 0x7ff}, {0x8, 0x6, 0x23, 0x6, 0x0, 0x7}, {0x1, 0x3, 0xe, 0xffff, 0x8, 0x2000}, {0x7fffffff, 0x8, 0x47, 0xbd, 0x4, 0x6}, {0x40, 0x0, 0x4, 0x6, 0x44, 0xd1}, {0x102000, 0x7, 0xe, 0xf34, 0x7ff, 0x4}, {0x1, 0xe, 0xff, 0x3, 0x3}, {0xf, 0x3, 0xf39, 0xfff, 0x7ff}, {0x6, 0x800, 0x9, 0x42, 0xfffffffc, 0x100}, {0xf, 0x9, 0xafe2, 0x3, 0x8, 0x9}, {0x2, 0x9, 0x6, 0x7, 0x1b, 0x6}, {0x1, 0x0, 0x7fff, 0x8, 0x7fff, 0x1}, {0x7c4812f7, 0x6, 0x4, 0x3, 0x5, 0x7}, {0x5, 0x8, 0x10001, 0xffffffff, 0xffff, 0x2}, {0x401, 0x1ff, 0x1, 0x7f, 0x10, 0x1ff}, {0x80000000, 0x400, 0x4, 0x40, 0x9, 0x90000}, {0xffffffff, 0xd, 0xfff, 0x80, 0xf047, 0x9}, {0xff, 0x8, 0x5, 0x6, 0x0, 0x9}, {0x4, 0x8001, 0x6, 0x9, 0x3, 0x7}, {0x1000, 0x7, 0x0, 0x6, 0x1, 0x8000}, {0x806b, 0x9, 0x1000, 0x4, 0x9, 0x6}, {0x5, 0x9, 0x9, 0x9, 0xffffffff, 0xfffffffa}, {0x40, 0x0, 0x8, 0x1, 0x6, 0x48e}, {0xffffffa0, 0x6, 0x870, 0x7, 0xa, 0x7}], [{0x2}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0xeeb05c99ee48e8c4}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xecffe78ab1c474a}, {0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x8d5c6a79698cd5d7}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x5}, {0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x0, 0x1}, {0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0x9, 0x5, 0x6, 0x8001}, 0x94, 0x2, [{0x4, 0xfffffffc, 0x8001, 0x0, 0x8f9, 0xd}, {0x101, 0x9, 0x7, 0x9, 0x5, 0x1}]}, [{0x5, 0x400, 0x50, 0xce, 0x321e, 0x9}, {0x0, 0x10001, 0x3, 0x40, 0x7, 0x100}, {0xac0, 0x1, 0x7, 0x1ff, 0x1c000000, 0x6}, {0x6, 0x7f, 0x3, 0x2, 0x52, 0x7}, {0x401, 0x7, 0x400, 0xfff, 0x403b, 0x4}, {0x3, 0x6, 0x9, 0x1, 0xd869}, {0x48000000, 0x3, 0x4, 0x4, 0xffff}, {0x7, 0x2, 0x6, 0x6, 0x2, 0x6}, {0x1800000, 0xffff, 0x2, 0xbb27, 0x2, 0x80000001}, {0x80000000, 0x8, 0x98, 0x4, 0x8, 0x7}, {0x9, 0x0, 0x7, 0x0, 0x3, 0x10}, {0x6, 0x0, 0x498, 0x6, 0x304, 0x9}, {0x2, 0x5, 0xffffffc0, 0xa, 0x7ce2, 0x4}, {0x3, 0xbb, 0x101, 0x8, 0x4, 0xfe}, {0x2, 0x1000, 0x9, 0x5e2, 0x9, 0x2}, {0x3, 0x6, 0x11c0200, 0x0, 0xfffffffb, 0x1}, {0x81, 0x6, 0x3, 0x1, 0x7, 0x5}, {0x2, 0x1000, 0x2, 0x9, 0x2, 0x4}, {0x400, 0x0, 0x0, 0x44, 0x4, 0x4dad}, {0x8, 0xb36, 0x5, 0x85, 0x2, 0x1ff}, {0x7fff, 0x6, 0x2, 0x7, 0x8000000, 0x7}, {0x8, 0xc, 0x4, 0x5, 0x0, 0x794}, {0x9, 0x40d1d939, 0x0, 0x32d, 0x0, 0x80000000}, {0x5, 0x200, 0x3, 0x3, 0x7f, 0x6}, {0xfffffff9, 0x3, 0x7ff, 0x7, 0x7, 0x7}, {0x0, 0x7fffffff, 0x5, 0xff, 0xffff, 0x1}, {0x1579edd7, 0xffffd73c, 0x8, 0x0, 0x80000000, 0x9}, {0x1, 0x7, 0x5, 0x8, 0x0, 0x80}, {0x3, 0x0, 0x6, 0x7f, 0x0, 0xfffffffb}, {0xff, 0xb1d5, 0x5, 0x9, 0x7fff, 0x4}, {0x7d, 0x5, 0x6, 0x80000000, 0x9, 0x3}, {0x3, 0x9, 0x7, 0x8001, 0x9, 0x40}, {0x3, 0x10, 0x2, 0x4, 0xfffffffc, 0x800}, {0x5, 0x401, 0x1, 0xfffff511, 0x1, 0x5ac1}, {0x0, 0xffffffff, 0x0, 0x7f, 0x42, 0x6}, {0x1000, 0xd, 0xfffffffd, 0xc, 0x0, 0x9}, {0x2, 0x0, 0x51cc, 0x4, 0x1, 0x5}, {0xbb1d, 0xe, 0x1, 0x8, 0x2, 0x6}, {0x0, 0x5, 0x434611b5, 0x8, 0x40, 0x9}, {0x0, 0x5, 0xc8075ae, 0x1, 0x80, 0x3ff}, {0x3ff, 0xc, 0x7, 0xa9, 0x9, 0x4}, {0x3ae13001, 0xfffffff8, 0x8, 0x401, 0x3, 0xc0}, {0x6, 0x7, 0xeb, 0xc8d5, 0x7, 0x5}, {0x4, 0xfffffff9, 0x5, 0x6, 0x2, 0x6}, {0x200, 0xbf, 0x6, 0x2, 0x5, 0xa}, {0x40, 0x5, 0x4, 0x3, 0x0, 0x8001}, {0x8899, 0x80000001, 0x1, 0x6, 0x200, 0x5}, {0x4, 0x2, 0x2, 0x7, 0x1}, {0xed7, 0xffff, 0x6, 0x40, 0x9, 0x2}, {0x7fffffff, 0x9, 0x2, 0x1, 0x10001, 0x2}, {0x7fffffff, 0x1, 0x1ff, 0x52, 0xbb, 0x7c43}, {0x7fffffff, 0xff, 0x6, 0xfffffff7, 0x0, 0x4}, {0x6, 0x7ff, 0xff, 0xf20, 0x800, 0x6}, {0xad, 0xf, 0x5, 0x0, 0x5, 0x5}, {0x9, 0x200, 0x1, 0xd, 0x3cba, 0x8}, {0x3, 0x8, 0x4, 0x47, 0x800, 0x1}, {0x3a2, 0x3, 0x3de, 0x6, 0x5, 0x959}, {0x8, 0x3, 0xe5, 0xfffffffb, 0x1, 0x200}, {0x80, 0x7bbb, 0x200, 0x80000000, 0x7fff, 0x5}, {0x0, 0xfffffffd, 0x0, 0x8, 0x40, 0xff}, {0x7f, 0x0, 0x2, 0x3, 0x31d, 0x9}, {0x7, 0x5, 0x8000000, 0xe6, 0x2, 0x3}, {0x3, 0xb13, 0x2, 0x6, 0x5, 0x5}, {0x1, 0xa, 0x9, 0x8, 0xfffffffd, 0x5}, {0x8, 0x0, 0x80, 0x4, 0xab, 0x4}, {0x18b5e8d6, 0x0, 0x0, 0x8, 0x9b45, 0x3}, {0xc, 0x85bf, 0x7ff, 0x3, 0x101, 0x7}, {0x3, 0x6, 0x7f, 0x7fff, 0xfffffffa, 0x2f}, {0xbd7, 0x7, 0xba, 0x1000, 0x7, 0x10000}, {0x4, 0x10, 0x3, 0x2, 0xade2}, {0x101, 0x1, 0x532, 0x10, 0x6, 0x7f}, {0x8000, 0x9, 0x100, 0x8f6, 0x3, 0x2}, {0x1, 0xffffffff, 0xfffff001, 0x9, 0xfffffff7, 0x8000}, {0x5, 0x8, 0x800, 0xf, 0x2a, 0x7}, {0xff, 0x9, 0xffff, 0x1, 0x5, 0x2f8}, {0x8000, 0x0, 0x8a0, 0x2, 0x2, 0x7f}, {0x7fffffff, 0x4, 0xf, 0xf, 0x2, 0x3d5800}, {0x2, 0x5, 0x8, 0x0, 0x0, 0x7}, {0xd16, 0x0, 0x80000000, 0xe, 0x0, 0x100}, {0x6, 0x0, 0x1000, 0xd, 0x2, 0x8}, {0xe, 0x5, 0x54efd9e1, 0x0, 0xc9a, 0x3ff}, {0x8, 0x3, 0x3, 0xfff, 0x5b8280eb, 0x2}, {0x5, 0x84800000, 0xfffffadc, 0x3, 0x3ff, 0x3}, {0x7, 0x4, 0x7, 0x401, 0x61a, 0x5}, {0x1f62, 0x0, 0x4, 0x5, 0x2, 0x9}, {0x8001, 0x6, 0x5, 0x1, 0x4, 0x189d4584}, {0x8615, 0x6, 0x9, 0xeb, 0xbba, 0x2}, {0x2, 0x3, 0x101, 0x5, 0x8, 0x9}, {0x7, 0x4, 0x0, 0x80000001, 0x7, 0xe3e3}, {0x200, 0x8, 0x3ff, 0x8, 0x0, 0x8}, {0x5, 0x8, 0x0, 0x10000000, 0x7, 0x80000000}, {0xfffffff8, 0x3, 0x8, 0x0, 0xeb1400, 0xffff2879}, {0xb3, 0x1, 0x5, 0x7ff, 0x2, 0x7ff}, {0x7, 0x1, 0x8, 0x5, 0x3, 0x9}, {0x4, 0xffffffff, 0x5, 0x0, 0xffffffc0, 0x2}, {0x5, 0xee43, 0x1, 0x8, 0x3, 0x7fff}, {0x5, 0xf5c, 0x101, 0x69c, 0xc9ac, 0x70}, {0x1, 0xffff, 0x1000, 0x8, 0x1, 0x4}, {0x5, 0x7, 0x5, 0x10000, 0x0, 0x1}, {0x1, 0x6, 0x2, 0xbe4e, 0x7fffffff, 0xa}, {0x3, 0x0, 0x7e318108, 0x0, 0x2, 0x8000}, {0xffffffff, 0x4, 0x7f, 0x140, 0x3, 0x12b9c9f7}, {0x10, 0x1a4, 0x3, 0x3, 0x9e3, 0x3}, {0xa3f1, 0x4, 0x1, 0x0, 0x709d, 0x8}, {0xfffffffb, 0x6, 0x101, 0x9, 0x8000, 0x1ff}, {0x2, 0xffffffd0, 0x2, 0x3, 0x2, 0xe9c}, {0x6, 0x7, 0x6, 0x4, 0x5, 0x9}, {0x4, 0x7756, 0x12aa, 0x81, 0x72795a34, 0x2d}, {0x8, 0x780, 0x39d, 0x3, 0x80000001, 0x800}, {0x200, 0x6, 0x3, 0x3, 0x3, 0x4}, {0x8, 0x2, 0x33, 0x8, 0x101, 0x5ba2}, {0x6, 0x192b, 0xfffffffb, 0x81, 0x7fffffff, 0x2}, {0x5, 0xb, 0x8, 0xfffffffc, 0x8, 0x8}, {0x2d3, 0xfffffffe, 0x80, 0x8, 0xc52b, 0x7}, {0x4, 0x8, 0xa1e, 0x8e7, 0x4, 0x80000000}, {0x6e4, 0x1, 0x1, 0x149, 0x3, 0x3}, {0x6, 0x5, 0x3, 0xd5e, 0x334, 0x9}, {0x1, 0x7f, 0x3, 0x7, 0x1000}, {0x5, 0x2e, 0x0, 0x81, 0x6, 0x9}, {0x9, 0xbc40, 0xa89c, 0x4, 0x101, 0x2}, {0x0, 0x8, 0x80000001, 0xffff, 0x4, 0xf7}, {0x0, 0x2, 0x0, 0x9, 0xe115, 0x9}, {0x5, 0x7fffffff, 0x8, 0x9, 0x1d4d43a3, 0x9}, {0xfffffff0, 0x64, 0x7, 0x5, 0x8, 0x5}, {0x100, 0x7, 0x6, 0x800, 0x2, 0x1}, {0x8068, 0xb46, 0x3b, 0xa23, 0x5, 0x7ff}, {0xe, 0x4, 0x200, 0xffffffff, 0x0, 0x1}, {0x2, 0x12a7, 0x3, 0x1, 0x6362, 0x5}], [{0x3}, {0x2}, {0x2}, {0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {0x4}, {0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x5}, {}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {0x94f8e72dc7f01e23}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {0x2}, {0x3, 0x3953ce75c686e9}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0xf}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5, 0xad51304919f02bc7}, {0x5, 0x1}, {0x5}, {0x4}, {}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0xa0, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xd}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}]}, {0x60, 0x6, "f2f7a1ae466d0bbf2a530a29148a2512a74f7f034c1cfd38bcfecdcc25babb1e7aa51d7158a45f2c96d40b490b41e19ace3e2ae041c9b8e5d24905631b2516d72d68c70ef314d31db7f6e3fe2d8d6f0ac7815d36d6b095f1bf895e1e"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x420c}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x5d, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7, 0x2, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80), <r8=>0x0, 0x46, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000f00), &(0x7f0000000680), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10)
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001100), 0x4040, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xe, 0x34, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000035000000000000000500000095fbe770ca000000950000000000000012578000010000000998fdfff8ffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b70800006b0f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES16, @ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000d00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x1f00, 0x26, '\x00', r6, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xf, 0x7, 0xf905}, 0x10, r8, r2, 0x0, &(0x7f0000001140)=[0xffffffffffffffff, r9], 0x0, 0x10, 0xfff, @void, @value}, 0x94)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000700)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)

1.295622623s ago: executing program 7 (id=3145):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
setfsuid(0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
lchown(&(0x7f00000000c0)='./file0\x00', r1, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x185083)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x1d, 0xa, 0x3, "b75c89e7a20c8eac1638b5394c000000000006000000000000e8ff00", 0x32314d54})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000400), 0x2, 0x6800)
fanotify_init(0x16, 0x0)
r5 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2)
r6 = dup(r5)
r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r4)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

1.294755423s ago: executing program 0 (id=3146):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000440)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487391e09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b042a753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e2d", 0xc1, r0)
r2 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r1, r2}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha224-ssse3\x00'}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3) (async, rerun: 32)
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async, rerun: 32)
creat(&(0x7f00000000c0)='\x00', 0x40) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) (async)
ioctl$TCSETS(r4, 0x89f3, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"})
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000140)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard')

1.230642597s ago: executing program 0 (id=3147):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0xffffffffffffff28)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = fanotify_init(0x0, 0x0)
pipe2(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
fanotify_mark(r2, 0x1, 0x40000020, r3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r4, 0x8800000)
sendfile(r1, r4, 0x0, 0x578410e9)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000002c0)=0x1)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x80002, 0x0)
r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'})
r9 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000007045cf7da785a9fa4e455000050104ea8c1cb4a4d300"/39], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x5800, 0x49b345f764a72789, &(0x7f0000000080))

1.230373288s ago: executing program 6 (id=3148):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x2004, 0x4)
sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1bf1d", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf257c0000000c0099000e00000008000000"], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x8040)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, 0x0}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

1.140270923s ago: executing program 6 (id=3149):
ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x200c0005)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))
fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fb4501678c8445bb8d9c1a87a817626ccff2159ae010738a41dd9c169fddad4bfdcdcc83c3f67bae1165372cd9c3c9f82a78d259f969886364c78389cebf690e3584ec39"], 0x45, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x1b4, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}}, [@TCA_STAB={0x180, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0xff, 0x800, 0x80000001, 0x2, 0xf, 0x8, 0x5}}, {0xe, 0x2, [0x7, 0x1be, 0x0, 0x6, 0x4]}}, {{0x1c, 0x1, {0x8, 0x8, 0xffff, 0x6, 0x0, 0x2, 0x7, 0x4}}, {0xc, 0x2, [0xd, 0x28c0, 0xa6, 0x1]}}, {{0x1c, 0x1, {0x2, 0x66, 0x2, 0x0, 0x1, 0x6, 0x2, 0x4}}, {0xc, 0x2, [0x5, 0x1, 0xb, 0x4]}}, {{0x1c, 0x1, {0x4, 0x3e, 0x5, 0x80000000, 0x1, 0x8, 0x10, 0x3}}, {0xa, 0x2, [0x2, 0x8, 0x92]}}, {{0x1c, 0x1, {0x6, 0x0, 0x0, 0x8, 0x2, 0x44, 0x7fffffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0xe, 0x72, 0x5, 0x3, 0x0, 0x6, 0x3, 0x3}}, {0xa, 0x2, [0x10, 0xffff, 0x6ea3]}}, {{0x1c, 0x1, {0x23, 0xf7, 0xc185, 0x2, 0x912512f0828c4be6, 0x0, 0x42, 0x8}}, {0x14, 0x2, [0x6, 0x6, 0x5, 0x7f, 0xd0, 0x0, 0x4, 0x0]}}, {{0x1c, 0x1, {0xc, 0x7, 0x4, 0x1, 0x0, 0x6, 0x9, 0x7}}, {0x12, 0x2, [0x2, 0x8001, 0x3b8a, 0x0, 0x7, 0xf, 0x7]}}, {{0x1c, 0x1, {0x1, 0x8a, 0x81, 0x3ff, 0x0, 0x1, 0x92, 0x5}}, {0xe, 0x2, [0x7, 0x1, 0x0, 0x1, 0x9f5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}]}, 0x1b4}}, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r11 = socket(0x11, 0x800000003, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r12 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="afa84622f9cd6ee5e5d8a26f074845", @ANYRES16=r11, @ANYRES8, @ANYRES32=r12, @ANYBLOB="946ca1641ce9532a9bc2cffcc17ce95b09f7375c89d5a5eccb459f099fa1151d451ff9176a8c5dc923ff658fb1e904f5c3a247a041cc661f0aa379f39eaea3e034def009ea1bcde186ea869de1dcc94492626cb4fb15f7915e3322f05cdee9edab2cf9dfc984b2e8cfd908675b402f11"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040))

371.223135ms ago: executing program 0 (id=3150):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={<r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
close_range(r0, 0xffffffffffffffff, 0x0)

369.211385ms ago: executing program 7 (id=3151):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r1 = syz_open_dev$hiddev(&(0x7f0000000b00), 0x7, 0x40)
read$hiddev(r1, &(0x7f0000000dc0)=""/139, 0x8b) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r2])
socket$packet(0x11, 0x2, 0x300) (async)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0)
utime(&(0x7f0000000000)='./file0\x00', 0x0) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x3ee7}, {0x28, 0x0, 0x0, 0xff7ff038}, {0x6}]}, 0x10) (async)
r9 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={<r10=>0x0, 0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r11, r11, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r12=>r6, {0x4}}, './file0\x00'})
r13 = inotify_init1(0x800) (async)
getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@initdev, @in=@multicast2}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000ac0)=0xe8)
r14 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r14, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr, 0x1}}, @sadb_lifetime={0x4, 0x4, 0xc84a}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000003}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0xb0}}, 0x84) (async)
sendmmsg$unix(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r11}}}], 0x20, 0x4}}, {{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="9cc1c9c7a317ff78da6747be1a50e8987e84e86c98fcd3", 0x17}, {&(0x7f0000000380)="1676a5330b2d785cfe30a2dcdd12fb73af4c73b6c421b1b217d7b451a439e9a0d5ba0879ee531532b2e314b7c10d7bf802f78fa08247df12dc37b0eae51aa486bbb96a8d31062ecc8fe11c9a6acba662bfc51802fadb8c750da68883e620c75ddd36025bee83151a201a09a25728f1320f8695f4a97c546a0184c4e0ccd1c75fd381b056223109e050bd", 0x8a}], 0x2, &(0x7f00000006c0)=[@rights={{0x30, 0x1, 0x1, [r0, r12, r7, r9, r9, r0, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r10, r2, r3}}}, @rights={{0x18, 0x1, 0x1, [r0, r13]}}], 0x88, 0x8810}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000780)="af03ea83a5892d9746def086e9ed475816f6484cd0bb0d474b63260888b5808f6e7ca2d7cb36907e5f30a5498c745b1738209efe2d32371fa565f806c1126bca57", 0x41}, {&(0x7f0000000800)="6491eb25c5e84941d8a042dbc6e1565acf4746ad2dc7", 0x16}], 0x2, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [r13, r13, r13]}}], 0x4, 0x80}}, {{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000940)="a4d6450d10", 0x5}], 0x1, &(0x7f0000000d40)=[@rights={{0x2c, 0x1, 0x1, [r13, r9, 0xffffffffffffffff, r14, r9, r7, r6]}}, @rights={{0x1c, 0x1, 0x1, [r6, r13, r12]}}], 0x50, 0x4000000}}], 0x4, 0x0)

220.653802ms ago: executing program 0 (id=3152):
syz_clone3(&(0x7f0000000280)={0x0, &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0), {0x28}, &(0x7f0000000100)=""/114, 0x72, &(0x7f0000000180)=""/178, &(0x7f0000000240)}, 0x58)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300), 0x10)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x23)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r1, 0x0, 0x1, &(0x7f0000000340)='\x00'}, 0x30)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4e, 0x2}, 0x8)
ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x5}, {0x7, 0x80, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0xc}, {0x8, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x7, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0xf3}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}})

141.118251ms ago: executing program 0 (id=3153):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000a9436371fa3b21c452ceb5d6ab", @ANYRES16=r1, @ANYBLOB="0100000000000000000035000000"], 0x14}}, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000440))
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x208102, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000140)={<r7=>0xffffffffffffffff}, 0x80)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000180)=[0x1, 0x1], 0x2)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r8, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x5a)
socket$can_j1939(0x1d, 0x2, 0x7)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb3)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0xfffffffdffffffff)
r11 = socket(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x1, 0x1, 0x0, 0xffffffff}, 0xb56c, 0x0, 0x4, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x80000000, 0x10}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048900}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40008cc)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0xf8, 0xf8, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x9000000, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8)
keyctl$clear(0x7, 0xfffffffffffffffd)

71.338431ms ago: executing program 4 (id=3154):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:syz '], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000080)=0xfffffffffffffde4)

70.533774ms ago: executing program 4 (id=3155):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002e0001000000000000000000010100800c0001000300000000000000140003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000e468c38b8555008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)

70.215998ms ago: executing program 0 (id=3156):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2004c090)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000004c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0xed, &(0x7f0000000240), &(0x7f0000000280)=""/237, 0x9, 0x0, 0x1000, 0x38, &(0x7f0000000500)="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", &(0x7f0000000380)="9a6023cd3f7d4c9554d5a6360db0164be198fdd007b404dcd3b4160c426aaa3f07a2928be7f8314b78f034b3d5134007f8139c26041173ad", 0x1, 0x0, 0x6}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x2c, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

518.198Āµs ago: executing program 4 (id=3157):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x80405600, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}})
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) (async)
sendmsg$kcm(r1, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000440)={0x6, "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"}) (async)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000440)={0x6, "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"})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6070eae400080000fc0000000000000000deffffffffffffff000000000002000000ffffac1e000140000500000000007afb964bb0f689c62fa577c07821d6f92c775fc94015e9d0c29b77b2aec061386b9628a062c7"], 0x0)
sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0xfffffffe}, 0x80, 0x0}, 0x20000080)

0s ago: executing program 4 (id=3158):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r1 = socket(0x1d, 0x2, 0x6) (async)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x105c42, 0x5)
r3 = syz_io_uring_setup(0x231, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5f, &(0x7f0000000240)=[r3, 0xffffffffffffffff, r3, r2], 0x4, 0x0, 0x1}) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
setfsuid(0xee00)
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) (async)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)
ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000001680)={0x0, @bt={0xc7, 0x7, 0x0, 0x1, 0x80000000, 0x3, 0x1, 0xffffff74, 0x59f, 0x6, 0xffff790a, 0x6, 0x5, 0x8, 0x18, 0x19, {0x4, 0x4}, 0xe4, 0x8}})
ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async)
ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, 0x0) (async)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r7, &(0x7f0000000ac0)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) (async)
bind$can_j1939(r1, &(0x7f0000000200)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x3}, 0xe9d2c4bffb33924a}, 0x18)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x3da1) (async)
futex(&(0x7f0000000040), 0xa, 0x0, 0x0, &(0x7f00000000c0)=0xffffffff, 0xfffffffd) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a3000000000b4000000030a01010000000000000000020000000000000064000c0070ee031e9ee36ab203c49e3c5bad7bcac4e40783b4239dfd516611f4593f04f1e541ad9758b550c9a6fb1b510ef05e26f15c1a2dee38cd54fee1818a573780e5f9eaadfd2c8583266791dfd05af74e018759bf53f5ed04eba8a2e35a06df30a976a1dcaadcbc4b3813503b2b080007006e617400280004801400030073797a6b616c6c6572300000000000000800024044665d22080001400000000314000000020a050000000000000000000000000814000000110001000000000000000000"], 0x110}}, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000000), 0x7ff, 0x119081)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

kernel console output (not intermixed with test programs):

6] 8021q: adding VLAN 0 to HW filter on device bond3
[  229.673899][T14380] bond3: (slave gretap1): making interface the new active one
[  229.678232][T14380] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  229.683513][T14224] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.686550][T14224] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.689408][T14224] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.692536][T14224] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.743133][T14385] netlink: 'syz.2.2480': attribute type 10 has an invalid length.
[  229.753433][T14385] team0: Device ipvlan1 failed to register rx_handler
[  229.795400][T12059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.804403][T12059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.811144][ T5938] Bluetooth: hci2: command tx timeout
[  229.821469][T14392] __nla_validate_parse: 46 callbacks suppressed
[  229.821481][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'.
[  229.830649][T14392] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.836744][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2484'.
[  229.949471][T14392] bridge_slave_1 (unregistering): left allmulticast mode
[  229.951968][T14392] bridge_slave_1 (unregistering): left promiscuous mode
[  229.954192][T14392] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.963415][T14397] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  229.977046][T11530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.979643][T11530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.139570][   T40] audit: type=1326 audit(1746602881.006:35841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.0.2488" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b46f8e969 code=0x0
[  230.141120][ T5938] Bluetooth: hci0: command 0x0401 tx timeout
[  230.199268][T14423] can0: slcan on ptm0.
[  230.199895][T12058] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  230.206161][   T40] audit: type=1400 audit(1746602881.076:35842): avc:  denied  { remount } for  pid=14418 comm="syz.0.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  230.274896][T14422] can0 (unregistered): slcan off ptm0.
[  230.316428][   T40] audit: type=1400 audit(1746602881.186:35843): avc:  denied  { sys_chroot } for  pid=14428 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  230.325919][   T40] audit: type=1400 audit(1746602881.186:35844): avc:  denied  { setgid } for  pid=14428 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  230.350831][   T40] audit: type=1400 audit(1746602881.186:35845): avc:  denied  { setrlimit } for  pid=14428 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[  230.646275][T14454] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2493'.
[  230.890207][T14462] netlink: 'syz.6.2494': attribute type 2 has an invalid length.
[  230.894225][   T40] audit: type=1400 audit(1746602881.766:35846): avc:  denied  { getopt } for  pid=14457 comm="syz.6.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  230.904875][T14458] syz.6.2494: attempt to access beyond end of device
[  230.904875][T14458] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0
[  230.910098][T14458] SQUASHFS error: Failed to read block 0x0: -5
[  230.912350][T14458] unable to read squashfs_super_block
[  230.955986][   T40] audit: type=1400 audit(1746602881.826:35847): avc:  denied  { unmount } for  pid=13740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  230.973799][   T40] audit: type=1400 audit(1746602881.846:35848): avc:  denied  { create } for  pid=14469 comm="syz.6.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  230.993030][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2496'.
[  231.008877][T14472] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2497'.
[  231.269189][T14483] xt_hashlimit: max too large, truncated to 1048576
[  231.270885][T14484] xt_hashlimit: max too large, truncated to 1048576
[  231.509029][T14501] ceph: Path missing in source
[  231.535870][T14503] block nbd4: NBD_DISCONNECT
[  231.612818][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'.
[  231.615770][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'.
[  231.652330][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'.
[  231.655764][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2511'.
[  231.658724][T14516] netlink: 'syz.2.2511': attribute type 12 has an invalid length.
[  231.688975][T14518] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2512'.
[  231.695963][T14518] program syz.6.2512 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  231.756395][T14528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.900934][ T5938] Bluetooth: hci2: command tx timeout
[  231.999899][T14557] syz.0.2524: attempt to access beyond end of device
[  231.999899][T14557] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0
[  232.005849][T14557] XFS (nbd0): SB validate failed with error -5.
[  232.310886][ T5935] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[  232.472206][ T5935] usb 9-1: config index 0 descriptor too short (expected 1307, got 27)
[  232.475055][ T5935] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[  232.477720][ T5935] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[  232.480606][ T5935] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  232.484467][ T5935] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  232.487837][ T5935] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  232.494935][ T5935] usb 9-1: string descriptor 0 read error: -22
[  232.497591][ T5935] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  232.500582][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.504908][ T5935] usb 9-1: config 0 descriptor??
[  232.509688][T14568] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  232.516117][ T5935] hub 9-1:0.0: bad descriptor, ignoring hub
[  232.518052][ T5935] hub 9-1:0.0: probe with driver hub failed with error -5
[  232.524384][ T5935] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input56
[  232.729251][   T64] usb 9-1: USB disconnect, device number 11
[  232.735189][T14568] netlink: 'syz.4.2526': attribute type 7 has an invalid length.
[  232.737807][T14568] netlink: 'syz.4.2526': attribute type 8 has an invalid length.
[  232.756321][T14568] can0: slcan on ptm0.
[  232.896916][T14611] CIFS: iocharset name too long
[  232.899788][T14611] program syz.2.2536 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.904379][T14611] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  233.027779][T14619] netlink: 'syz.0.2540': attribute type 10 has an invalid length.
[  233.044951][T14619] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  233.066789][T14621] binder_alloc: binder_alloc_mmap_handler: 14620 200000ffd000-200001000000 already mapped failed -16
[  233.086294][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.086622][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.086933][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.087186][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.087453][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.087719][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.088135][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.088572][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.089032][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.089376][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.089631][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.089950][T14625] overlay: filesystem on ./bus not supported as upperdir
[  233.121240][T14622] sp0: Synchronizing with TNC
[  233.136934][T14621] binder: BINDER_SET_CONTEXT_MGR already set
[  233.136954][T14621] binder: 14620:14621 ioctl 4018620d 200000000040 returned -16
[  233.140313][T14625] overlayfs: failed to resolve './bus': -40
[  233.148207][T14625] overlayfs: failed to resolve './bus': -40
[  233.148841][T14625] overlayfs: failed to resolve './bus': -40
[  233.149440][T14625] overlayfs: failed to resolve './bus': -40
[  233.150063][T14625] overlayfs: failed to resolve './bus': -40
[  233.150624][T14625] overlayfs: failed to resolve './bus': -40
[  233.151647][T14625] overlayfs: failed to resolve './bus': -40
[  233.154518][T14625] overlayfs: failed to resolve './bus': -40
[  233.154978][T14625] overlayfs: failed to resolve './bus': -40
[  233.155450][T14625] overlayfs: failed to resolve './bus': -40
[  233.155942][T14625] overlayfs: failed to resolve './bus': -40
[  233.156429][T14625] overlayfs: failed to resolve './bus': -40
[  233.156972][T14625] overlayfs: failed to resolve './bus': -40
[  233.157323][T14625] overlayfs: failed to resolve './bus': -40
[  233.157652][T14625] overlayfs: failed to resolve './bus': -40
[  233.158716][T14625] overlayfs: failed to resolve './bus': -40
[  233.159224][T14625] overlayfs: failed to resolve './bus': -40
[  233.159685][T14625] overlayfs: failed to resolve './bus': -40
[  233.160180][T14625] overlayfs: failed to resolve './bus': -40
[  233.160698][T14625] overlayfs: failed to resolve './bus': -40
[  233.161590][T14625] overlayfs: failed to resolve './bus': -40
[  233.163452][T14625] overlayfs: failed to resolve './bus': -40
[  233.163975][T14625] overlayfs: failed to resolve './bus': -40
[  233.164544][T14625] overlayfs: failed to resolve './bus': -40
[  233.165214][T14625] overlayfs: failed to resolve './bus': -40
[  233.165639][T14625] overlayfs: failed to resolve './bus': -40
[  233.165963][T14625] overlayfs: failed to resolve './bus': -40
[  233.166276][T14625] overlayfs: failed to resolve './bus': -40
[  233.166590][T14625] overlayfs: failed to resolve './bus': -40
[  233.166941][T14625] overlayfs: failed to resolve './bus': -40
[  233.167445][T14625] overlayfs: failed to resolve './bus': -40
[  233.169615][T14625] overlayfs: failed to resolve './bus': -40
[  233.170079][T14625] overlayfs: failed to resolve './bus': -40
[  233.170583][T14625] overlayfs: failed to resolve './bus': -40
[  233.171498][T14625] overlayfs: failed to resolve './bus': -40
[  233.173372][T14625] overlayfs: failed to resolve './bus': -40
[  233.173911][T14625] overlayfs: failed to resolve './bus': -40
[  233.174450][T14625] overlayfs: failed to resolve './bus': -40
[  233.174944][T14625] overlayfs: failed to resolve './bus': -40
[  233.175465][T14625] overlayfs: failed to resolve './bus': -40
[  233.175958][T14625] overlayfs: failed to resolve './bus': -40
[  233.176440][T14625] overlayfs: failed to resolve './bus': -40
[  233.176882][T14625] overlayfs: failed to resolve './bus': -40
[  233.177239][T14625] overlayfs: failed to resolve './bus': -40
[  233.177556][T14625] overlayfs: failed to resolve './bus': -40
[  233.179516][T14625] overlayfs: failed to resolve './bus': -40
[  233.180047][T14625] overlayfs: failed to resolve './bus': -40
[  233.180554][T14625] overlayfs: failed to resolve './bus': -40
[  233.181764][T14625] overlayfs: failed to resolve './bus': -40
[  233.182338][T14625] overlayfs: failed to resolve './bus': -40
[  233.182900][T14625] overlayfs: failed to resolve './bus': -40
[  233.183399][T14625] overlayfs: failed to resolve './bus': -40
[  233.247315][T14634] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  233.434048][T14568] can0 (unregistered): slcan off ptm0.
[  233.443635][T14642] openvswitch: netlink: IP tunnel dst address not specified
[  233.802024][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  233.804236][ T1112] ata1: failed to read log page 10h (errno=-5)
[  233.806680][ T1112] ata1.00: exception Emask 0x1 SAct 0x100000 SErr 0x0 action 0x0
[  233.809245][ T1112] ata1.00: irq_stat 0x40000000
[  233.811627][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED
[  233.813699][ T1112] ata1.00: cmd 61/48:a0:8a:0b:10/00:00:00:00:00/40 tag 20 ncq dma 36864 out
[  233.813699][ T1112]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  233.819533][ T1112] ata1.00: status: { DRDY }
[  233.821574][ T1112] ata1.00: error: { ABRT }
[  233.828804][ T1112] ata1.00: configured for UDMA/100
[  233.831022][ T1112] ata1: EH complete
[  233.971278][ T5938] Bluetooth: hci2: command tx timeout
[  234.290959][    C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  234.335966][T14741] ip6t_srh: unknown srh match flags  4000
[  234.376409][T14748] veth1_to_batadv: entered promiscuous mode
[  234.379835][T14748] macsec1: entered promiscuous mode
[  234.432062][   T40] kauditd_printk_skb: 27 callbacks suppressed
[  234.432073][   T40] audit: type=1400 audit(1746602885.306:35876): avc:  denied  { getopt } for  pid=14757 comm="syz.2.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  234.441570][T14764] usb usb7: usbfs: process 14764 (syz.0.2584) did not claim interface 0 before use
[  234.581369][T14780] syz.4.2589: attempt to access beyond end of device
[  234.581369][T14780] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  234.586378][T14780] syz.4.2589: attempt to access beyond end of device
[  234.586378][T14780] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  234.592158][T14780] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  234.596362][T14780] syz.4.2589: attempt to access beyond end of device
[  234.596362][T14780] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  234.600691][T14780] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  234.605462][T14780] syz.4.2589: attempt to access beyond end of device
[  234.605462][T14780] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  234.609777][T14780] syz.4.2589: attempt to access beyond end of device
[  234.609777][T14780] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  234.615018][T14780] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  234.618552][T14780] syz.4.2589: attempt to access beyond end of device
[  234.618552][T14780] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  234.629592][T14780] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  234.634737][T14780] syz.4.2589: attempt to access beyond end of device
[  234.634737][T14780] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  234.641629][T14780] syz.4.2589: attempt to access beyond end of device
[  234.641629][T14780] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  234.646344][T14780] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  234.649633][T14780] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  234.653506][T14780] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  234.656617][T14780] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  234.661236][T14780] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  234.694101][   T40] audit: type=1400 audit(1746602885.566:35877): avc:  denied  { shutdown } for  pid=14777 comm="syz.6.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  234.752773][T12059] tipc: Subscription rejected, illegal request
[  234.780460][T14813] PKCS7: Unknown OID: [4] 5.25.43204.122
[  234.784269][T14813] PKCS7: Only support pkcs7_signedData type
[  234.800375][T14816] openvswitch: netlink: IPv4 tun info is not correct
[  234.992249][   T40] audit: type=1400 audit(1746602885.866:35878): avc:  denied  { setattr } for  pid=14844 comm="syz.4.2602" name="bus" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  235.014203][   T40] audit: type=1400 audit(1746602885.886:35879): avc:  denied  { ioctl } for  pid=14844 comm="syz.4.2602" path="/122/file0/bus" dev="9p" ino=35913961 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  235.040891][ T5969] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  235.060923][T14168] usb 11-1: new low-speed USB device number 2 using dummy_hcd
[  235.202512][ T5969] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  235.205654][ T5969] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  235.209964][ T5969] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  235.213330][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.232223][T14168] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.235522][T14168] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2
[  235.238481][T14168] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  235.245538][T14168] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  235.248530][T14168] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.262561][T14824] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  235.267208][T14168] hub 11-1:1.0: bad descriptor, ignoring hub
[  235.269265][T14168] hub 11-1:1.0: probe with driver hub failed with error -5
[  235.277774][T14168] cdc_wdm 11-1:1.0: skipping garbage
[  235.279610][T14168] cdc_wdm 11-1:1.0: skipping garbage
[  235.290156][T14168] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  235.293079][T14168] cdc_wdm 11-1:1.0: Unknown control protocol
[  235.418648][T14866] futex_wake_op: syz.2.2606 tries to shift op by -1; fix this program
[  235.421944][ T5969] usb 5-1: usb_control_msg returned -32
[  235.424112][ T5969] usbtmc 5-1:16.0: can't read capabilities
[  235.488506][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.495181][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.498198][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.508105][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.516669][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.521958][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.527126][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.531179][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.537019][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.541258][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.564707][   T40] audit: type=1400 audit(1746602886.436:35880): avc:  denied  { mount } for  pid=14873 comm="syz.2.2608" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  235.637049][    C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71
[  235.639935][    C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes
[  235.643588][    C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71
[  235.646299][    C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes
[  235.648260][    C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  235.723726][   T40] audit: type=1400 audit(1746602886.596:35881): avc:  denied  { view } for  pid=14876 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  235.740679][   T40] audit: type=1400 audit(1746602886.606:35882): avc:  denied  { create } for  pid=14876 comm="syz.2.2609" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  235.749900][   T40] audit: type=1400 audit(1746602886.616:35883): avc:  denied  { write } for  pid=14876 comm="syz.2.2609" name="file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  235.761972][    C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71
[  235.764243][    C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes
[  235.768019][    C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71
[  235.770144][    C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes
[  235.772409][    C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  235.865159][   T40] audit: type=1400 audit(1746602886.736:35884): avc:  denied  { unlink } for  pid=14026 comm="syz-executor" name="file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  235.875314][   T29] usb 11-1: USB disconnect, device number 2
[  235.877801][   T58] usb 11-1: Failed to suspend device, error -19
[  235.882897][T14878] syz_tun: entered allmulticast mode
[  235.935700][T14888] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  236.001652][   T40] audit: type=1400 audit(1746602886.876:35885): avc:  denied  { connect } for  pid=14887 comm="syz.2.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  236.367312][T14913] netlink: 'syz.4.2620': attribute type 10 has an invalid length.
[  236.379061][T14913] team0: Device ipvlan1 failed to register rx_handler
[  236.591123][T14168] usb 7-1: new full-speed USB device number 36 using dummy_hcd
[  236.762636][T14168] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  236.766529][T14168] usb 7-1: config 0 interface 0 has no altsetting 0
[  236.771591][T14168] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  236.775430][T14168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.778767][T14168] usb 7-1: Product: syz
[  236.780564][T14168] usb 7-1: Manufacturer: syz
[  236.783533][T14168] usb 7-1: SerialNumber: syz
[  236.788513][T14168] usb 7-1: config 0 descriptor??
[  236.795858][T14168] usb 7-1: selecting invalid altsetting 0
[  236.925813][T14961] XFS (nbd4): no-recovery mounts must be read-only.
[  236.953051][T14961] mkiss: ax0: crc mode is auto.
[  237.003896][   T29] usb 7-1: USB disconnect, device number 36
[  237.117062][T14969] syzkaller1: entered promiscuous mode
[  237.117078][T14969] syzkaller1: entered allmulticast mode
[  237.123716][T14969] tmpfs: User quota block hardlimit too large.
[  237.256910][T14971] __nla_validate_parse: 11 callbacks suppressed
[  237.256927][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2636'.
[  237.556050][T14984] netlink: 'syz.4.2640': attribute type 11 has an invalid length.
[  237.558882][T14984] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2640'.
[  237.651999][T14997] PKCS7: Unknown OID: [4] 5.25.43183(bad)
[  237.654167][T14997] PKCS7: Only support pkcs7_signedData type
[  237.793278][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2646'.
[  237.796210][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2647'.
[  237.808543][T14168] usb 5-1: USB disconnect, device number 35
[  237.810863][T14809] syz_tun: left allmulticast mode
[  237.956899][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'.
[  237.960019][T15017] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  237.962823][T15017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.975816][T15020] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  238.046336][T15033] netlink: 'syz.2.2657': attribute type 25 has an invalid length.
[  238.131846][T15040] syz.2.2658(15040): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  238.392489][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2662'.
[  238.395421][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2662'.
[  238.428414][T15051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.590126][T15061] 9pnet: p9_errstr2errno: server reported unknown error @ķ’’’’’’’’	
[  238.688351][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2669'.
[  239.018707][T15092] Bluetooth: MGMT ver 1.23
[  239.081702][T15099] pim6reg1: entered promiscuous mode
[  239.083559][T15099] pim6reg1: entered allmulticast mode
[  239.247910][T15107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2683'.
[  239.257011][ T6507] IPVS: starting estimator thread 0...
[  239.272806][T15108] block device autoloading is deprecated and will be removed.
[  239.276912][T15108] bio_check_eod: 6 callbacks suppressed
[  239.276921][T15108] syz.4.2683: attempt to access beyond end of device
[  239.276921][T15108] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  239.284318][T15107] syz.4.2683: attempt to access beyond end of device
[  239.284318][T15107] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  239.284410][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'.
[  239.341014][T15110] IPVS: using max 45 ests per chain, 108000 per kthread
[  239.443071][T15125] netlink: 'syz.0.2688': attribute type 1 has an invalid length.
[  239.463333][T15125] 8021q: adding VLAN 0 to HW filter on device bond1
[  239.467937][T15125] erspan0: entered allmulticast mode
[  239.474641][T15125] bond1: (slave erspan0): making interface the new active one
[  239.481197][T15125] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  239.691302][ T6507] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  239.850961][ T6507] usb 7-1: Using ep0 maxpacket: 8
[  239.854203][ T6507] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  239.857223][ T6507] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  239.860085][ T6507] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  239.863430][ T6507] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  239.867231][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  239.867242][   T40] audit: type=1400 audit(1746602890.736:35900): avc:  denied  { mounton } for  pid=15140 comm="syz.0.2692" path="/94/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  239.875897][ T6507] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  239.878617][ T6507] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.094303][ T6507] usb 7-1: GET_CAPABILITIES returned 0
[  240.094326][ T6507] usbtmc 7-1:16.0: can't read capabilities
[  240.291758][T15161] support for the xor transformation has been removed.
[  240.295488][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.295534][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.295569][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.295602][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.295812][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.295844][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.295875][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.295907][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.296106][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.296141][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.296173][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.296204][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.296236][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.296472][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.296504][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  240.296537][    C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  240.299516][ T6507] usb 7-1: USB disconnect, device number 37
[  240.591596][T15182] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=15182 comm=syz.4.2702
[  241.075048][T15206] input: syz0 as /devices/virtual/input/input58
[  241.114345][   T40] audit: type=1400 audit(1746602891.986:35901): avc:  denied  { execute } for  pid=15225 comm="syz.4.2711" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  241.201026][   T40] audit: type=1400 audit(1746602892.066:35902): avc:  denied  { call } for  pid=15205 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  241.246443][T15234] xt_hashlimit: size too large, truncated to 1048576
[  241.252275][T15234] warn_alloc: 1 callbacks suppressed
[  241.252284][T15234] syz.4.2712: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  241.259376][T15234] CPU: 3 UID: 0 PID: 15234 Comm: syz.4.2712 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  241.259390][T15234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  241.259398][T15234] Call Trace:
[  241.259402][T15234]  <TASK>
[  241.259407][T15234]  dump_stack_lvl+0x16c/0x1f0
[  241.259437][T15234]  warn_alloc+0x248/0x3a0
[  241.259456][T15234]  ? __pfx_warn_alloc+0x10/0x10
[  241.259476][T15234]  ? __get_vm_area_node+0x1b9/0x300
[  241.259489][T15234]  ? __get_vm_area_node+0x1e5/0x300
[  241.259505][T15234]  __vmalloc_node_range_noprof+0x1110/0x1540
[  241.259525][T15234]  ? hashlimit_mt_check_common+0x8bb/0x1460
[  241.259542][T15234]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  241.259562][T15234]  __kvmalloc_node_noprof+0x2ff/0x600
[  241.259578][T15234]  ? hashlimit_mt_check_common+0x8bb/0x1460
[  241.259592][T15234]  ? net_generic+0xea/0x2a0
[  241.259603][T15234]  ? hashlimit_mt_check_common+0x8bb/0x1460
[  241.259619][T15234]  ? hashlimit_mt_check_common+0x8bb/0x1460
[  241.259632][T15234]  hashlimit_mt_check_common+0x8bb/0x1460
[  241.259649][T15234]  hashlimit_mt_check+0x71/0x90
[  241.259661][T15234]  ? __pfx_hashlimit_mt_check+0x10/0x10
[  241.259674][T15234]  xt_check_match+0x283/0xa50
[  241.259686][T15234]  ? yield_to+0x2c2/0x7f0
[  241.259699][T15234]  ? __pfx_xt_check_match+0x10/0x10
[  241.259713][T15234]  ? xt_find_target+0x1f2/0x290
[  241.259726][T15234]  ? xt_find_match+0x1f6/0x290
[  241.259740][T15234]  find_check_entry.constprop.0+0x34e/0xa20
[  241.259758][T15234]  ? __pfx_find_check_entry.constprop.0+0x10/0x10
[  241.259775][T15234]  ? kasan_quarantine_put+0x10a/0x240
[  241.259790][T15234]  ? lockdep_hardirqs_on+0x7c/0x110
[  241.259805][T15234]  ? kfree+0x2b6/0x4d0
[  241.259818][T15234]  ? translate_table+0xc0e/0x17b0
[  241.259833][T15234]  translate_table+0xd0b/0x17b0
[  241.259850][T15234]  ? __pfx_translate_table+0x10/0x10
[  241.259862][T15234]  ? xt_alloc_table_info+0x3e/0xa0
[  241.259877][T15234]  do_ip6t_set_ctl+0x570/0xb00
[  241.259890][T15234]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  241.259904][T15234]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  241.259918][T15234]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  241.259939][T15234]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  241.259952][T15234]  nf_setsockopt+0x8a/0xf0
[  241.259964][T15234]  ipv6_setsockopt+0x135/0x170
[  241.259977][T15234]  rawv6_setsockopt+0xc2/0x510
[  241.259988][T15234]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  241.259999][T15234]  ? selinux_socket_setsockopt+0x6a/0x80
[  241.260015][T15234]  ? sock_common_setsockopt+0x2e/0xf0
[  241.260029][T15234]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  241.260042][T15234]  do_sock_setsockopt+0x221/0x470
[  241.260055][T15234]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  241.260075][T15234]  __sys_setsockopt+0x1a0/0x230
[  241.260086][T15234]  __x64_sys_setsockopt+0xbd/0x160
[  241.260095][T15234]  ? do_syscall_64+0x91/0x260
[  241.260108][T15234]  ? lockdep_hardirqs_on+0x7c/0x110
[  241.260120][T15234]  do_syscall_64+0xcd/0x260
[  241.260134][T15234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.260145][T15234] RIP: 0033:0x7f89a158e969
[  241.260154][T15234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.260164][T15234] RSP: 002b:00007f89a24bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  241.260173][T15234] RAX: ffffffffffffffda RBX: 00007f89a17b5fa0 RCX: 00007f89a158e969
[  241.260180][T15234] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000045
[  241.260186][T15234] RBP: 00007f89a1610ab1 R08: 0000000000000588 R09: 0000000000000000
[  241.260191][T15234] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  241.260197][T15234] R13: 0000000000000000 R14: 00007f89a17b5fa0 R15: 00007ffce3db8f18
[  241.260210][T15234]  </TASK>
[  241.260214][T15234] Mem-Info:
[  241.321140][   T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  241.331184][ T5938] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  241.331819][ T5942] Bluetooth: hci1: command 0x1003 tx timeout
[  241.334076][T15234] active_anon:11398 inactive_anon:0 isolated_anon:0
[  241.334076][T15234]  active_file:2707 inactive_file:37202 isolated_file:0
[  241.334076][T15234]  unevictable:1768 dirty:190 writeback:0
[  241.334076][T15234]  slab_reclaimable:8017 slab_unreclaimable:91478
[  241.334076][T15234]  mapped:29835 shmem:2478 pagetables:1071
[  241.334076][T15234]  sec_pagetables:307 bounce:0
[  241.334076][T15234]  kernel_misc_reclaimable:0
[  241.334076][T15234]  free:436022 free_pcp:2926 free_cma:0
[  241.434827][T15234] Node 0 active_anon:45584kB inactive_anon:0kB active_file:10828kB inactive_file:148528kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110552kB dirty:760kB writeback:0kB shmem:6372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:14416kB pagetables:4512kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB
[  241.453007][T15234] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:280kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8540kB dirty:0kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:20kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB
[  241.466055][T15234] Node 0 DMA free:9632kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB
[  241.474007][   T24] usb 5-1: Using ep0 maxpacket: 8
[  241.474724][T15234] lowmem_reserve[]:
[  241.474935][T15251] serio: Serial port ptm0
[  241.478415][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  241.478531][T15234]  0
[  241.480423][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  241.484450][T15234]  1238 1238 1238 1238
[  241.484477][T15234] Node 0 DMA32 free:172944kB boost:0kB min:27576kB low:34468kB high:41360kB reserved_highatomic:0KB active_anon:43276kB inactive_anon:0kB active_file:10828kB inactive_file:148528kB unevictable:3536kB writepending:760kB present:2080628kB managed:1268568kB mlocked:0kB bounce:0kB free_pcp:6476kB local_pcp:1232kB free_cma:0kB
[  241.484525][T15234] lowmem_reserve[]: 0 0 0 0 0
[  241.484558][T15234] Node 1 Normal free:1559788kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:280kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:7836kB local_pcp:4488kB free_cma:0kB
[  241.484600][T15234] lowmem_reserve[]: 0 0 0 0 0
[  241.484633][T15234] Node 0 DMA: 10*4kB (UM) 9*8kB (UM) 5*16kB (UM) 7*32kB (UM) 4*64kB (UM) 2*128kB (M) 2*256kB (UM) 4*512kB (U) 4*1024kB (UM) 1*2048kB (M) 0*4096kB = 9632kB
[  241.484761][T15234] Node 0 
[  241.490936][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  241.492558][T15234] DMA32: 
[  241.506688][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  241.519040][T15234] 267*4kB 
[  241.523565][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  241.526556][T15234] (UME) 
[  241.527834][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.530974][T15234] 474*8kB (UME) 525*16kB (UME) 282*32kB (UME) 316*64kB (UME) 162*128kB (UME) 110*256kB (UME) 36*512kB (UME) 34*1024kB (UM) 12*2048kB (UM) 2*4096kB (U) = 177420kB
[  241.531053][T15234] Node 1 Normal: 6*4kB (UE) 16*8kB (UE) 33*16kB (UE) 30*32kB (UME) 36*64kB (UME) 9*128kB (UE) 66*256kB (UE) 54*512kB (UE) 33*1024kB (UME) 19*2048kB (UM) 351*4096kB (UM) = 1560040kB
[  241.531140][T15234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  241.531148][T15234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.531156][T15234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  241.531164][T15234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.531172][T15234] 42393 total pagecache pages
[  241.531176][T15234] 0 pages in swap cache
[  241.531179][T15234] Free swap  = 124996kB
[  241.531183][T15234] Total swap = 124996kB
[  241.531187][T15234] 1048443 pages RAM
[  241.531190][T15234] 0 pages HighMem/MovableOnly
[  241.531194][T15234] 281970 pages reserved
[  241.531198][T15234] 0 pages cma reserved
[  241.560881][T14168] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  241.642715][T15262] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  241.780368][   T24] usb 5-1: GET_CAPABILITIES returned 0
[  241.781306][T14168] usb 7-1: too many configurations: 80, using maximum allowed: 8
[  241.782556][   T24] usbtmc 5-1:16.0: can't read capabilities
[  241.792409][T14168] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  241.795336][T14168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.797838][T14168] usb 7-1: Product: syz
[  241.798170][   T40] audit: type=1400 audit(1746602892.666:35903): avc:  denied  { search } for  pid=5646 comm="dhcpcd" name="netdev:wlan4" dev="debugfs" ino=73980 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  241.805202][T15274] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  241.811583][T15274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.816871][T15274] binder: BINDER_SET_CONTEXT_MGR already set
[  241.819537][T15274] binder: 15272:15274 ioctl 4018620d 200000000040 returned -16
[  241.830894][T14168] usb 7-1: Manufacturer: syz
[  241.832508][T14168] usb 7-1: SerialNumber: syz
[  241.839461][T14168] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  241.852295][   T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  241.909283][   T40] audit: type=1400 audit(1746602892.776:35904): avc:  denied  { read write } for  pid=15292 comm="syz.4.2724" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  241.919622][   T40] audit: type=1400 audit(1746602892.776:35905): avc:  denied  { open } for  pid=15292 comm="syz.4.2724" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  241.922254][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.930155][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.933531][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.936666][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.939833][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.944786][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.947996][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.951987][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.955388][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.958946][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.963189][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.966504][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.969711][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.973617][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.976899][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.980215][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.983869][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.987167][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.990513][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.995887][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  241.998735][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.001873][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.005287][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.008664][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.012462][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.014091][T14168] usb 5-1: USB disconnect, device number 36
[  242.016002][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.020280][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.028549][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.031315][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.033836][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.036332][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.038799][T10084] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0
[  242.045243][T10084] hid-generic 0004:FFFFFFFF:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  242.170860][ T6507] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  242.346058][ T6507] usb 9-1: config 0 has no interfaces?
[  242.347938][ T6507] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  242.350728][ T6507] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.355178][ T6507] usb 9-1: config 0 descriptor??
[  242.565233][   T40] audit: type=1400 audit(1746602893.436:35906): avc:  denied  { ioctl } for  pid=15292 comm="syz.4.2724" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  242.565756][ T6507] usb 9-1: USB disconnect, device number 12
[  242.611770][    C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  242.615633][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.619123][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.624340][T15319] sp0: Synchronizing with TNC
[  242.629019][T15319] tmpfs: Bad value for 'mpol'
[  242.770185][T15326] netlink: 'syz.0.2731': attribute type 2 has an invalid length.
[  242.774965][T15326] __nla_validate_parse: 16 callbacks suppressed
[  242.774978][T15326] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2731'.
[  242.819851][T15332] netlink: 'syz.6.2732': attribute type 10 has an invalid length.
[  242.823038][T15331] netlink: 'syz.6.2732': attribute type 10 has an invalid length.
[  242.826890][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.830193][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.832299][   T40] audit: type=1400 audit(1746602893.706:35907): avc:  denied  { write } for  pid=15334 comm="syz.0.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  242.835757][T15332] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2732'.
[  242.848531][T15331] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.851280][T15331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.853817][T15331] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.856616][T15331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.861429][T15331] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  242.864513][T15332] batadv0: entered promiscuous mode
[  242.866366][T15332] batadv0: entered allmulticast mode
[  242.868623][T15332] bridge0: port 3(batadv0) entered blocking state
[  242.871088][T15332] bridge0: port 3(batadv0) entered disabled state
[  242.874414][T15332] bridge0: port 3(batadv0) entered blocking state
[  242.876583][T15332] bridge0: port 3(batadv0) entered forwarding state
[  242.882522][T11530] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  242.886226][T11530] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  242.948239][   T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  242.950936][   T10] ath9k_htc: Failed to initialize the device
[  242.977004][   T10] usb 7-1: ath9k_htc: USB layer deinitialized
[  242.988814][T10084] usb 7-1: USB disconnect, device number 38
[  243.113983][T15365] syz.4.2740: attempt to access beyond end of device
[  243.113983][T15365] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0
[  243.118731][T15365] qnx6: unable to read the first superblock
[  243.124698][T15365] syz.4.2740: attempt to access beyond end of device
[  243.124698][T15365] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  243.128670][T15365] qnx6: unable to read the first superblock
[  243.130580][T15365] qnx6: unable to read the first superblock
[  243.255925][T15369] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  243.542339][T15375] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2743'.
[  243.544462][   T40] audit: type=1400 audit(1746602894.416:35908): avc:  denied  { map } for  pid=15376 comm="syz.0.2744" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  243.562621][   T40] audit: type=1400 audit(1746602894.416:35909): avc:  denied  { execute } for  pid=15376 comm="syz.0.2744" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  244.133306][T15390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2745'.
[  244.176506][T15392] xfrm1: entered allmulticast mode
[  244.241658][T15399] [U] vŌ3øĀfł¾"SēĮ/Éź4:ĆXTz“W”t‘’lWµ«=
[  244.243662][T15399] [U] J"—e:ĄĘ"


[  244.247628][T15399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56943 sclass=netlink_route_socket pid=15399 comm=syz.0.2750
[  244.260846][ T6507] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  244.410838][ T6507] usb 9-1: Using ep0 maxpacket: 8
[  244.414615][ T6507] usb 9-1: config index 0 descriptor too short (expected 5138, got 18)
[  244.417396][ T6507] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.420687][ T6507] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  244.426247][ T6507] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  244.429307][ T6507] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.433870][ T6507] usb 9-1: Product: syz
[  244.435292][ T6507] usb 9-1: Manufacturer: syz
[  244.436839][ T6507] usb 9-1: SerialNumber: syz
[  244.440327][ T6507] usb 9-1: config 0 descriptor??
[  244.480103][T15407] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  244.483886][T15407] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  244.486834][T15407] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  244.489725][T15407] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  244.493200][T15407] geneve2: entered promiscuous mode
[  244.495052][T15407] geneve2: entered allmulticast mode
[  244.522229][T15409] tmpfs: Unknown parameter '’'
[  244.522261][T15410] tmpfs: Unknown parameter '’'
[  244.637294][T15418] exFAT-fs (nullb0): invalid boot record signature
[  244.639793][T15418] exFAT-fs (nullb0): failed to read boot sector
[  244.643094][T15418] exFAT-fs (nullb0): failed to recognize exfat type
[  244.647836][T15418] SELinux:  policydb version 0 does not match my version range 15-34
[  244.650556][T15418] SELinux: failed to load policy
[  244.654116][T15418] exFAT-fs (nullb0): invalid boot record signature
[  244.656298][T15418] exFAT-fs (nullb0): failed to read boot sector
[  244.658459][T15418] exFAT-fs (nullb0): failed to recognize exfat type
[  244.664491][   T24] usb 9-1: USB disconnect, device number 13
[  244.707409][T15425] (syz.0.2758,15425,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  244.737958][T15430] cgroup: Name too long
[  244.755305][T15429] 9pnet: Could not find request transport: xen
[  245.206956][T15454] syz_tun: entered allmulticast mode
[  245.224588][T15454] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  245.227432][T15454] mroute: pending queue full, dropping entries
[  245.251626][T15453] syz_tun: left allmulticast mode
[  245.334892][T15460] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  245.338475][T15460] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  245.352220][T15460] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  245.354645][T15460] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  245.360706][T15460] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  245.371626][T15460] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  245.373970][T15460] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  245.377102][T15460] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  245.389905][T15460] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  245.394414][T15460] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  245.400473][T15460] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  245.413892][T15460] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  245.415923][T15460] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  245.418595][T15460] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  245.480204][T15485] ip6t_srh: unknown srh match flags  B153
[  245.485049][T15485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2777'.
[  245.488190][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'.
[  245.509576][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  245.509590][   T40] audit: type=1400 audit(1746602896.376:35920): avc:  denied  { mounton } for  pid=15472 comm="syz.4.2774" path="/proc/507/task" dev="proc" ino=75380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  245.644018][   T40] audit: type=1400 audit(1746602896.516:35921): avc:  denied  { lock } for  pid=15490 comm="syz.0.2779" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  245.667716][T15495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54016 sclass=netlink_route_socket pid=15495 comm=syz.2.2780
[  245.805196][T15507] xt_hashlimit: size too large, truncated to 1048576
[  245.860843][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2784'.
[  245.907584][T15517] netlink: 'syz.2.2785': attribute type 10 has an invalid length.
[  245.914139][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.917546][T15517] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  246.005226][T15531] bond1: (slave erspan0): Releasing active interface
[  246.016081][T15531] bridge_slave_0: left allmulticast mode
[  246.018487][T15531] bridge_slave_0: left promiscuous mode
[  246.022727][T15531] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.040422][T15531] bridge_slave_1: left allmulticast mode
[  246.043162][T15531] bridge_slave_1: left promiscuous mode
[  246.045129][T15531] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.050908][T15531] bond0: (slave bond_slave_0): Releasing backup interface
[  246.058421][T15531] bond0: (slave bond_slave_1): Releasing backup interface
[  246.064963][   T40] audit: type=1400 audit(1746602896.936:35922): avc:  denied  { mounton } for  pid=15536 comm="syz.2.2791" path="/87/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  246.076962][   T40] audit: type=1400 audit(1746602896.946:35923): avc:  denied  { write } for  pid=15539 comm="syz.6.2792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  246.098415][T15531] team0: Port device team_slave_0 removed
[  246.105933][T15531] team0: Port device team_slave_1 removed
[  246.108325][T15531] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.111251][T15531] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.115262][T15531] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.118149][T15531] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.126068][T15531] bond0: (slave wlan1): Releasing backup interface
[  246.238793][   T40] audit: type=1400 audit(1746602897.106:35924): avc:  denied  { bind } for  pid=15548 comm="syz.6.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  246.249342][   T40] audit: type=1400 audit(1746602897.126:35925): avc:  denied  { nlmsg_write } for  pid=15548 comm="syz.6.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  246.464105][T15569] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2799'.
[  246.477909][   T40] audit: type=1400 audit(1746602897.346:35926): avc:  denied  { write } for  pid=15568 comm="syz.6.2799" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  246.908418][T15580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2803'.
[  247.062481][ T5942] Bluetooth: hci0: SCO packet for unknown connection handle 201
[  247.062595][ T5942] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  247.150481][T15592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15592 comm=syz.2.2807
[  247.413544][ T5942] Bluetooth: hci0: command 0x0401 tx timeout
[  247.413613][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout
[  247.413670][ T5940] Bluetooth: hci3: command 0x0406 tx timeout
[  247.418185][ T5938] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  247.421556][ T5933] Bluetooth: hci5: command 0x0c1a tx timeout
[  247.492485][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout
[  247.954060][T15575] team0: Device gtp0 is of different type
[  247.961395][T15595] macvlan0: entered promiscuous mode
[  247.963375][T15595] macvlan0: entered allmulticast mode
[  247.965171][T15595] veth1_vlan: entered allmulticast mode
[  248.019620][T15602] netfs: Couldn't get user pages (rc=-14)
[  248.060723][   T40] audit: type=1400 audit(1746602898.916:35927): avc:  denied  { read } for  pid=15600 comm="syz.2.2809" name="file0" dev="9p" ino=35913883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  248.144186][   T40] audit: type=1400 audit(1746602899.016:35928): avc:  denied  { write } for  pid=15609 comm="syz.6.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  248.151039][T15613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2813'.
[  248.155418][T15613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2813'.
[  248.170868][T15614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2813'.
[  248.174962][T15614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2813'.
[  248.199384][T15621] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  248.201543][T15621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  248.205939][T15621] vhci_hcd vhci_hcd.0: Device attached
[  248.208265][T15623] vhci_hcd: cannot find the pending unlink 1023
[  248.234088][   T40] audit: type=1400 audit(1746602899.106:35929): avc:  denied  { read write } for  pid=15626 comm="syz.4.2817" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  248.330700][T15644] kvm: kvm [15636]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x3030303030303030
[  248.341915][T15644] JFS: discard option not supported on device
[  248.344657][T15644] syz.4.2818: attempt to access beyond end of device
[  248.344657][T15644] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  248.348949][T15644] syz.4.2818: attempt to access beyond end of device
[  248.348949][T15644] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0
[  248.353995][T15644] Mount JFS Failure: -5
[  248.390038][T15648] syzkaller1: entered promiscuous mode
[  248.393658][T15648] syzkaller1: entered allmulticast mode
[  248.451267][   T24] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[  248.460200][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2822'.
[  248.461347][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2822'.
[  248.851038][T15657] netlink: 'syz.2.2824': attribute type 29 has an invalid length.
[  248.931387][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'.
[  248.934385][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'.
[  248.945226][ T5937] Bluetooth: hci0: unexpected event for opcode 0x2041
[  249.031848][T15623] vhci_hcd: connection reset by peer
[  249.033940][T12060] vhci_hcd: stop threads
[  249.035366][T12060] vhci_hcd: release socket
[  249.036894][T12060] vhci_hcd: disconnect device
[  249.084151][T15665] binder: 15661:15665 ioctl 4018620d 0 returned -22
[  249.131563][   T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  249.145521][T15671] Cannot find add_set index 4 as target
[  249.148446][T15671] tmpfs: Group quota block hardlimit too large.
[  249.148600][T15672] tmpfs: Group quota block hardlimit too large.
[  249.178160][T15674] NILFS (nbd4): device size too small
[  249.490991][ T5933] Bluetooth: hci4: command 0x0c1a tx timeout
[  249.491035][ T5938] Bluetooth: hci5: command 0x0c1a tx timeout
[  249.491087][ T5942] Bluetooth: hci3: command 0x0406 tx timeout
[  249.571290][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout
[  250.137829][T15695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2835'.
[  250.192862][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'.
[  250.241159][T15706] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  250.262214][T15709] bpf: Bad value for 'uid'
[  250.263983][T15706] netlink: 'syz.0.2838': attribute type 4 has an invalid length.
[  250.277674][T15706] : renamed from bond0 (while UP)
[  250.332896][T15710] binder: 15703:15710 ioctl 3 2000000000c0 returned -22
[  250.364668][T15720] openvswitch: netlink: Flow actions attr not present in new flow.
[  250.370392][T15723] openvswitch: netlink: Flow actions attr not present in new flow.
[  250.384472][ T5933] Bluetooth: hci6: sending frame failed (-49)
[  250.387525][ T5938] Bluetooth: hci6: Opcode 0x1003 failed: -49
[  250.432626][T15727] ufs: You didn't specify the type of your ufs filesystem
[  250.432626][T15727] 
[  250.432626][T15727] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  250.432626][T15727] 
[  250.432626][T15727] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  250.447651][T15727] ufs: failed to set blocksize
[  250.455101][T15717] sp0: Synchronizing with TNC
[  250.460472][T15727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15727 comm=syz.0.2844
[  250.641233][T15734] netlink: 'syz.6.2847': attribute type 3 has an invalid length.
[  250.644555][T15734] netlink: 'syz.6.2847': attribute type 1 has an invalid length.
[  250.647838][T15734] NCSI netlink: No device for ifindex 33022
[  250.701170][   T29] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  250.756537][T15736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.832444][   T29] usb 5-1: device descriptor read/64, error -71
[  250.844641][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  250.844650][   T40] audit: type=1400 audit(1746602901.716:35934): avc:  denied  { read } for  pid=15740 comm="syz.6.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  250.921575][T15745] FAULT_INJECTION: forcing a failure.
[  250.921575][T15745] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  250.926193][T15745] CPU: 0 UID: 0 PID: 15745 Comm: syz.6.2852 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  250.926208][T15745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  250.926214][T15745] Call Trace:
[  250.926218][T15745]  <TASK>
[  250.926223][T15745]  dump_stack_lvl+0x16c/0x1f0
[  250.926256][T15745]  should_fail_ex+0x512/0x640
[  250.926276][T15745]  _copy_from_iter+0x477/0x15b0
[  250.926291][T15745]  ? __alloc_skb+0x200/0x380
[  250.926301][T15745]  ? __pfx__copy_from_iter+0x10/0x10
[  250.926321][T15745]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  250.926337][T15745]  netlink_sendmsg+0x829/0xdd0
[  250.926351][T15745]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.926368][T15745]  ____sys_sendmsg+0xa95/0xc70
[  250.926382][T15745]  ? copy_msghdr_from_user+0x10a/0x160
[  250.926391][T15745]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.926410][T15745]  ___sys_sendmsg+0x134/0x1d0
[  250.926421][T15745]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.926447][T15745]  __sys_sendmsg+0x16d/0x220
[  250.926457][T15745]  ? __pfx___sys_sendmsg+0x10/0x10
[  250.926475][T15745]  do_syscall_64+0xcd/0x260
[  250.926490][T15745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.926501][T15745] RIP: 0033:0x7fa5cb58e969
[  250.926509][T15745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.926519][T15745] RSP: 002b:00007fa5cc3a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.926529][T15745] RAX: ffffffffffffffda RBX: 00007fa5cb7b5fa0 RCX: 00007fa5cb58e969
[  250.926535][T15745] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  250.926541][T15745] RBP: 00007fa5cc3a2090 R08: 0000000000000000 R09: 0000000000000000
[  250.926547][T15745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.926553][T15745] R13: 0000000000000000 R14: 00007fa5cb7b5fa0 R15: 00007fffd77442d8
[  250.926566][T15745]  </TASK>
[  251.001414][   T58] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  251.002414][    C0] vkms_vblank_simulate: vblank timer overrun
[  251.071210][   T29] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  251.089854][T15754] Cannot find del_set index 4 as target
[  251.093406][T15754] binder: 15753:15754 ioctl c00c620f 200000000080 returned -22
[  251.152508][   T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.152528][   T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.152539][   T58] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  251.152559][   T58] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  251.152570][   T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.154033][   T58] usb 9-1: config 0 descriptor??
[  251.173707][T15757] netlink: 'syz.6.2856': attribute type 5 has an invalid length.
[  251.200990][   T29] usb 5-1: device descriptor read/64, error -71
[  251.250933][ T5938] Bluetooth: hci1: command 0x1003 tx timeout
[  251.251107][ T5937] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  251.311321][   T29] usb usb5-port1: attempt power cycle
[  251.365157][T15739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.365332][T15739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.373613][   T58] usbhid 9-1:0.0: can't add hid device: -71
[  251.373667][   T58] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  251.374837][   T58] usb 9-1: USB disconnect, device number 14
[  251.514952][T15769] FAULT_INJECTION: forcing a failure.
[  251.514952][T15769] name failslab, interval 1, probability 0, space 0, times 0
[  251.514971][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.2.2861 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  251.514984][T15769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  251.514990][T15769] Call Trace:
[  251.514994][T15769]  <TASK>
[  251.514998][T15769]  dump_stack_lvl+0x16c/0x1f0
[  251.515015][T15769]  should_fail_ex+0x512/0x640
[  251.515031][T15769]  should_failslab+0xc2/0x120
[  251.515042][T15769]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  251.515059][T15769]  ? skb_clone+0x190/0x3f0
[  251.515072][T15769]  skb_clone+0x190/0x3f0
[  251.515083][T15769]  netlink_deliver_tap+0xabd/0xd30
[  251.515098][T15769]  netlink_unicast+0x5df/0x7f0
[  251.515111][T15769]  ? __pfx_netlink_unicast+0x10/0x10
[  251.515126][T15769]  netlink_sendmsg+0x8d1/0xdd0
[  251.515140][T15769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.515157][T15769]  ____sys_sendmsg+0xa95/0xc70
[  251.515170][T15769]  ? copy_msghdr_from_user+0x10a/0x160
[  251.515180][T15769]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.515200][T15769]  ___sys_sendmsg+0x134/0x1d0
[  251.515211][T15769]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.515237][T15769]  __sys_sendmsg+0x16d/0x220
[  251.515247][T15769]  ? __pfx___sys_sendmsg+0x10/0x10
[  251.515261][T15769]  ? rcu_is_watching+0x12/0xc0
[  251.515278][T15769]  do_syscall_64+0xcd/0x260
[  251.515292][T15769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.515303][T15769] RIP: 0033:0x7f28e358e969
[  251.515318][T15769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.515328][T15769] RSP: 002b:00007f28e43b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.515338][T15769] RAX: ffffffffffffffda RBX: 00007f28e37b5fa0 RCX: 00007f28e358e969
[  251.515344][T15769] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  251.515350][T15769] RBP: 00007f28e43b3090 R08: 0000000000000000 R09: 0000000000000000
[  251.515356][T15769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.515362][T15769] R13: 0000000000000000 R14: 00007f28e37b5fa0 R15: 00007ffface88388
[  251.515375][T15769]  </TASK>
[  251.538777][T15771] input: syz1 as /devices/virtual/input/input59
[  251.575823][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout
[  251.578262][ T5938] Bluetooth: hci5: command 0x0c1a tx timeout
[  251.650887][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout
[  251.651854][   T29] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  251.671774][   T29] usb 5-1: device descriptor read/8, error -71
[  251.861764][T15786] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  251.911174][   T29] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  251.931481][   T29] usb 5-1: device descriptor read/8, error -71
[  251.947709][   T40] audit: type=1400 audit(1746602902.816:35935): avc:  denied  { create } for  pid=15789 comm="syz.4.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  251.948064][   T40] audit: type=1400 audit(1746602902.816:35936): avc:  denied  { ioctl } for  pid=15789 comm="syz.4.2870" path="socket:[78988]" dev="sockfs" ino=78988 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  251.950640][   T40] audit: type=1400 audit(1746602902.816:35937): avc:  denied  { setopt } for  pid=15789 comm="syz.4.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  252.042523][   T29] usb usb5-port1: unable to enumerate USB device
[  252.110985][   T66] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  252.186091][T15800] FAULT_INJECTION: forcing a failure.
[  252.186091][T15800] name failslab, interval 1, probability 0, space 0, times 0
[  252.190181][T15800] CPU: 1 UID: 0 PID: 15800 Comm: syz.6.2872 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  252.190195][T15800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  252.190201][T15800] Call Trace:
[  252.190205][T15800]  <TASK>
[  252.190209][T15800]  dump_stack_lvl+0x16c/0x1f0
[  252.190227][T15800]  should_fail_ex+0x512/0x640
[  252.190241][T15800]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  252.190259][T15800]  should_failslab+0xc2/0x120
[  252.190270][T15800]  __kmalloc_cache_noprof+0x6a/0x3e0
[  252.190284][T15800]  ? rtnl_newlink+0x11b/0x2000
[  252.190297][T15800]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.190306][T15800]  rtnl_newlink+0x11b/0x2000
[  252.190321][T15800]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.190330][T15800]  ? find_held_lock+0x2b/0x80
[  252.190343][T15800]  ? avc_has_perm_noaudit+0x117/0x3b0
[  252.190355][T15800]  ? avc_has_perm_noaudit+0x149/0x3b0
[  252.190368][T15800]  ? __lock_acquire+0x5ca/0x1ba0
[  252.190390][T15800]  ? find_held_lock+0x2b/0x80
[  252.190401][T15800]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.190411][T15800]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.190420][T15800]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  252.190431][T15800]  ? __pfx_rtnl_newlink+0x10/0x10
[  252.190442][T15800]  rtnetlink_rcv_msg+0x95b/0xe90
[  252.190453][T15800]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  252.190470][T15800]  netlink_rcv_skb+0x16a/0x440
[  252.190483][T15800]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  252.190494][T15800]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  252.190513][T15800]  ? netlink_deliver_tap+0x1ae/0xd30
[  252.190526][T15800]  netlink_unicast+0x53a/0x7f0
[  252.190539][T15800]  ? __pfx_netlink_unicast+0x10/0x10
[  252.190554][T15800]  netlink_sendmsg+0x8d1/0xdd0
[  252.190568][T15800]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.190585][T15800]  ____sys_sendmsg+0xa95/0xc70
[  252.190599][T15800]  ? copy_msghdr_from_user+0x10a/0x160
[  252.190608][T15800]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.190627][T15800]  ___sys_sendmsg+0x134/0x1d0
[  252.190638][T15800]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.190663][T15800]  __sys_sendmsg+0x16d/0x220
[  252.190674][T15800]  ? __pfx___sys_sendmsg+0x10/0x10
[  252.190687][T15800]  ? rcu_is_watching+0x12/0xc0
[  252.190703][T15800]  do_syscall_64+0xcd/0x260
[  252.190717][T15800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.190728][T15800] RIP: 0033:0x7fa5cb58e969
[  252.190736][T15800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.190758][T15800] RSP: 002b:00007fa5cc3a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.190768][T15800] RAX: ffffffffffffffda RBX: 00007fa5cb7b5fa0 RCX: 00007fa5cb58e969
[  252.190775][T15800] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  252.190781][T15800] RBP: 00007fa5cc3a2090 R08: 0000000000000000 R09: 0000000000000000
[  252.190786][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.190792][T15800] R13: 0000000000000000 R14: 00007fa5cb7b5fa0 R15: 00007fffd77442d8
[  252.190805][T15800]  </TASK>
[  252.290993][   T66] usb 7-1: Using ep0 maxpacket: 8
[  252.302627][   T66] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  252.305607][   T66] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  252.310366][   T66] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  252.315487][   T66] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  252.320281][   T66] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  252.326042][   T66] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  252.332911][   T66] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  252.335942][   T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.347241][   T40] audit: type=1400 audit(1746602903.216:35938): avc:  denied  { listen } for  pid=15810 comm="syz.4.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  252.542301][   T66] usb 7-1: GET_CAPABILITIES returned 0
[  252.544175][   T66] usbtmc 7-1:16.0: can't read capabilities
[  252.686085][   T40] audit: type=1400 audit(1746602903.556:35939): avc:  denied  { connect } for  pid=15829 comm="syz.6.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  253.453124][T15839] program syz.0.2883 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  253.501790][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  253.504635][ T1112] ata1.00: irq_stat 0x40000000
[  253.506429][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT
[  253.508514][ T1112] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 10
[  253.508514][ T1112]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  253.515039][ T1112] ata1.00: status: { DRDY ERR }
[  253.516771][ T1112] ata1.00: error: { ABRT }
[  253.518575][ T1112] ata1.00: device reported invalid CHS sector 0
[  253.559428][T15841] FAULT_INJECTION: forcing a failure.
[  253.559428][T15841] name failslab, interval 1, probability 0, space 0, times 0
[  253.564229][   T24] vhci_hcd: vhci_device speed not set
[  253.569396][T15841] CPU: 2 UID: 0 PID: 15841 Comm: syz.0.2884 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  253.569418][T15841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  253.569429][T15841] Call Trace:
[  253.569434][T15841]  <TASK>
[  253.569440][T15841]  dump_stack_lvl+0x16c/0x1f0
[  253.569466][T15841]  should_fail_ex+0x512/0x640
[  253.569487][T15841]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  253.569515][T15841]  should_failslab+0xc2/0x120
[  253.569533][T15841]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  253.569558][T15841]  ? __alloc_skb+0x2b2/0x380
[  253.569577][T15841]  __alloc_skb+0x2b2/0x380
[  253.569592][T15841]  ? __pfx___alloc_skb+0x10/0x10
[  253.569610][T15841]  ? if_nlmsg_size+0x475/0xaf0
[  253.569631][T15841]  rtmsg_ifinfo_build_skb+0x81/0x280
[  253.569654][T15841]  rtmsg_ifinfo+0x9f/0x1a0
[  253.569676][T15841]  netif_state_change+0x17f/0x3b0
[  253.569697][T15841]  ? __pfx_netif_state_change+0x10/0x10
[  253.569721][T15841]  ? ip_tunnel_update+0x73b/0x960
[  253.569742][T15841]  netdev_state_change+0xaa/0x240
[  253.569762][T15841]  ip_tunnel_changelink+0x174/0x330
[  253.569782][T15841]  ipip_changelink+0x1e0/0x270
[  253.569803][T15841]  ? __pfx_ipip_changelink+0x10/0x10
[  253.569822][T15841]  ? mutex_lock_io_nested+0x900/0x920
[  253.569851][T15841]  ? ns_capable+0xd7/0x110
[  253.569868][T15841]  ? netlink_ns_capable+0xfa/0x130
[  253.569886][T15841]  ? __pfx_ipip_changelink+0x10/0x10
[  253.569905][T15841]  rtnl_newlink+0x129b/0x2000
[  253.569931][T15841]  ? __pfx_rtnl_newlink+0x10/0x10
[  253.569946][T15841]  ? find_held_lock+0x2b/0x80
[  253.569965][T15841]  ? avc_has_perm_noaudit+0x117/0x3b0
[  253.569986][T15841]  ? avc_has_perm_noaudit+0x149/0x3b0
[  253.570022][T15841]  ? find_held_lock+0x2b/0x80
[  253.570040][T15841]  ? __pfx_rtnl_newlink+0x10/0x10
[  253.570061][T15841]  ? __pfx_rtnl_newlink+0x10/0x10
[  253.570076][T15841]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  253.570093][T15841]  ? __pfx_rtnl_newlink+0x10/0x10
[  253.570111][T15841]  rtnetlink_rcv_msg+0x95b/0xe90
[  253.570129][T15841]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  253.570158][T15841]  netlink_rcv_skb+0x16a/0x440
[  253.570177][T15841]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  253.570195][T15841]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  253.570226][T15841]  ? netlink_deliver_tap+0x1ae/0xd30
[  253.570249][T15841]  netlink_unicast+0x53a/0x7f0
[  253.570270][T15841]  ? __pfx_netlink_unicast+0x10/0x10
[  253.570295][T15841]  netlink_sendmsg+0x8d1/0xdd0
[  253.570318][T15841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.570345][T15841]  ____sys_sendmsg+0xa95/0xc70
[  253.570367][T15841]  ? copy_msghdr_from_user+0x10a/0x160
[  253.570384][T15841]  ? __pfx_____sys_sendmsg+0x10/0x10
[  253.570415][T15841]  ___sys_sendmsg+0x134/0x1d0
[  253.570433][T15841]  ? __pfx____sys_sendmsg+0x10/0x10
[  253.570481][T15841]  __sys_sendmsg+0x16d/0x220
[  253.570500][T15841]  ? __pfx___sys_sendmsg+0x10/0x10
[  253.570523][T15841]  ? rcu_is_watching+0x12/0xc0
[  253.570549][T15841]  do_syscall_64+0xcd/0x260
[  253.570570][T15841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.570585][T15841] RIP: 0033:0x7f0b46f8e969
[  253.570598][T15841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.570613][T15841] RSP: 002b:00007f0b47d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.570629][T15841] RAX: ffffffffffffffda RBX: 00007f0b471b5fa0 RCX: 00007f0b46f8e969
[  253.570639][T15841] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  253.570649][T15841] RBP: 00007f0b47d57090 R08: 0000000000000000 R09: 0000000000000000
[  253.570658][T15841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.570666][T15841] R13: 0000000000000000 R14: 00007f0b471b5fa0 R15: 00007ffeea62b7b8
[  253.570689][T15841]  </TASK>
[  254.071639][    C2] ata1: illegal qc_active transition (00000000->10000000)
[  254.081710][   T40] audit: type=1400 audit(1746602904.956:35940): avc:  denied  { listen } for  pid=15858 comm="syz.0.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  254.100928][   T40] audit: type=1326 audit(1746602904.956:35941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.0.2890" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b46f8e969 code=0x0
[  254.395089][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  254.398583][ T1112] ata1.00: configured for UDMA/100
[  254.468253][T15876] __nla_validate_parse: 10 callbacks suppressed
[  254.468270][T15876] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2895'.
[  254.488071][T15876] input: syz1 as /devices/virtual/input/input61
[  254.514883][T15876] syzkaller1: entered promiscuous mode
[  254.517338][T15876] syzkaller1: entered allmulticast mode
[  254.868168][   T66] usb 7-1: USB disconnect, device number 39
[  255.004432][T15905] FAULT_INJECTION: forcing a failure.
[  255.004432][T15905] name failslab, interval 1, probability 0, space 0, times 0
[  255.008557][T15905] CPU: 2 UID: 0 PID: 15905 Comm: syz.2.2905 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  255.008572][T15905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  255.008578][T15905] Call Trace:
[  255.008582][T15905]  <TASK>
[  255.008587][T15905]  dump_stack_lvl+0x16c/0x1f0
[  255.008604][T15905]  should_fail_ex+0x512/0x640
[  255.008618][T15905]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  255.008636][T15905]  should_failslab+0xc2/0x120
[  255.008648][T15905]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  255.008664][T15905]  ? __alloc_skb+0x2b2/0x380
[  255.008676][T15905]  __alloc_skb+0x2b2/0x380
[  255.008685][T15905]  ? __pfx___alloc_skb+0x10/0x10
[  255.008697][T15905]  ? if_nlmsg_size+0x475/0xaf0
[  255.008709][T15905]  rtmsg_ifinfo_build_skb+0x81/0x280
[  255.008724][T15905]  rtmsg_ifinfo+0x9f/0x1a0
[  255.008738][T15905]  netif_state_change+0x17f/0x3b0
[  255.008751][T15905]  ? __pfx_netif_state_change+0x10/0x10
[  255.008766][T15905]  ? netif_change_flags+0x10d/0x160
[  255.008778][T15905]  do_setlink.constprop.0+0x3632/0x44b0
[  255.008814][T15905]  ? nlmsg_notify+0xac/0x220
[  255.008830][T15905]  ? nlmsg_notify+0x11e/0x220
[  255.008849][T15905]  ? __pfx_do_setlink.constprop.0+0x10/0x10
[  255.008860][T15905]  ? rtmsg_ifinfo+0x174/0x1a0
[  255.008874][T15905]  ? netif_state_change+0xfa/0x3b0
[  255.008886][T15905]  ? __pfx_netif_state_change+0x10/0x10
[  255.008901][T15905]  ? ip_tunnel_update+0x73b/0x960
[  255.008916][T15905]  ? netdev_state_change+0x136/0x240
[  255.008928][T15905]  ? ip_tunnel_changelink+0x179/0x330
[  255.008941][T15905]  ? ipip_changelink+0x1e8/0x270
[  255.008954][T15905]  ? __pfx_ipip_changelink+0x10/0x10
[  255.008966][T15905]  ? mutex_lock_io_nested+0x900/0x920
[  255.008986][T15905]  ? netlink_ns_capable+0xfa/0x130
[  255.008999][T15905]  rtnl_newlink+0x1446/0x2000
[  255.009018][T15905]  ? __pfx_rtnl_newlink+0x10/0x10
[  255.009028][T15905]  ? find_held_lock+0x2b/0x80
[  255.009041][T15905]  ? avc_has_perm_noaudit+0x117/0x3b0
[  255.009053][T15905]  ? avc_has_perm_noaudit+0x149/0x3b0
[  255.009074][T15905]  ? find_held_lock+0x2b/0x80
[  255.009085][T15905]  ? __pfx_rtnl_newlink+0x10/0x10
[  255.009095][T15905]  ? __pfx_rtnl_newlink+0x10/0x10
[  255.009104][T15905]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  255.009115][T15905]  ? __pfx_rtnl_newlink+0x10/0x10
[  255.009126][T15905]  rtnetlink_rcv_msg+0x95b/0xe90
[  255.009138][T15905]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  255.009156][T15905]  netlink_rcv_skb+0x16a/0x440
[  255.009167][T15905]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  255.009179][T15905]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  255.009198][T15905]  ? netlink_deliver_tap+0x1ae/0xd30
[  255.009212][T15905]  netlink_unicast+0x53a/0x7f0
[  255.009225][T15905]  ? __pfx_netlink_unicast+0x10/0x10
[  255.009240][T15905]  netlink_sendmsg+0x8d1/0xdd0
[  255.009254][T15905]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.009271][T15905]  ____sys_sendmsg+0xa95/0xc70
[  255.009286][T15905]  ? copy_msghdr_from_user+0x10a/0x160
[  255.009296][T15905]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.009316][T15905]  ___sys_sendmsg+0x134/0x1d0
[  255.009326][T15905]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.009353][T15905]  __sys_sendmsg+0x16d/0x220
[  255.009363][T15905]  ? __pfx___sys_sendmsg+0x10/0x10
[  255.009382][T15905]  do_syscall_64+0xcd/0x260
[  255.009398][T15905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.009408][T15905] RIP: 0033:0x7f28e358e969
[  255.009417][T15905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.009427][T15905] RSP: 002b:00007f28e43b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.009437][T15905] RAX: ffffffffffffffda RBX: 00007f28e37b5fa0 RCX: 00007f28e358e969
[  255.009443][T15905] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  255.009449][T15905] RBP: 00007f28e43b3090 R08: 0000000000000000 R09: 0000000000000000
[  255.009455][T15905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  255.009460][T15905] R13: 0000000000000000 R14: 00007f28e37b5fa0 R15: 00007ffface88388
[  255.009474][T15905]  </TASK>
[  255.323273][T15916] netlink: 'syz.6.2908': attribute type 1 has an invalid length.
[  255.358108][T15916] 8021q: adding VLAN 0 to HW filter on device bond1
[  255.372379][T15916] bond1: (slave gretap1): making interface the new active one
[  255.381590][T15916] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  255.432251][T15923] tmpfs: Invalid uid '0x00000000ffffffff'
[  255.785277][T15942] hub 4-0:1.0: USB hub found
[  255.789632][T15942] hub 4-0:1.0: 2 ports detected
[  255.837380][   T40] audit: type=1400 audit(1746602906.706:35942): avc:  denied  { append } for  pid=15953 comm="syz.6.2921" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  255.849325][   T40] audit: type=1400 audit(1746602906.726:35943): avc:  denied  { listen } for  pid=15953 comm="syz.6.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  255.871067][   T58] usb 7-1: new full-speed USB device number 40 using dummy_hcd
[  256.025624][   T58] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  256.029353][   T58] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  256.035751][   T58] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  256.045857][   T58] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  256.052834][   T58] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  256.054852][T15960] CIFS mount error: No usable UNC path provided in device string!
[  256.054852][T15960] 
[  256.058294][   T58] usb 7-1: config 0 interface 0 has no altsetting 0
[  256.061216][   T58] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  256.061640][T15960] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  256.064205][   T58] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  256.064228][   T58] usb 7-1: Product: syz
[  256.064241][   T58] usb 7-1: Manufacturer: syz
[  256.078769][   T58] usb 7-1: SerialNumber: syz
[  256.086254][   T58] usb 7-1: config 0 descriptor??
[  256.089245][T15944] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  256.094348][   T58] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  256.100219][   T58] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  256.117901][T15962] FAULT_INJECTION: forcing a failure.
[  256.117901][T15962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.123625][T15962] CPU: 3 UID: 0 PID: 15962 Comm: syz.6.2924 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  256.123641][T15962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  256.123647][T15962] Call Trace:
[  256.123651][T15962]  <TASK>
[  256.123655][T15962]  dump_stack_lvl+0x16c/0x1f0
[  256.123672][T15962]  should_fail_ex+0x512/0x640
[  256.123688][T15962]  _copy_to_user+0x32/0xd0
[  256.123704][T15962]  simple_read_from_buffer+0xcb/0x170
[  256.123721][T15962]  proc_fail_nth_read+0x197/0x270
[  256.123736][T15962]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  256.123752][T15962]  ? rw_verify_area+0xcf/0x680
[  256.123765][T15962]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  256.123779][T15962]  vfs_read+0x1de/0xc70
[  256.123796][T15962]  ? __pfx___mutex_lock+0x10/0x10
[  256.123809][T15962]  ? __pfx_vfs_read+0x10/0x10
[  256.123827][T15962]  ? __fget_files+0x20e/0x3c0
[  256.123847][T15962]  ksys_read+0x12a/0x240
[  256.123861][T15962]  ? __pfx_ksys_read+0x10/0x10
[  256.123874][T15962]  ? rcu_is_watching+0x12/0xc0
[  256.123890][T15962]  do_syscall_64+0xcd/0x260
[  256.123905][T15962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.123916][T15962] RIP: 0033:0x7fa5cb58d37c
[  256.123924][T15962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  256.123934][T15962] RSP: 002b:00007fa5cc3a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  256.123944][T15962] RAX: ffffffffffffffda RBX: 00007fa5cb7b5fa0 RCX: 00007fa5cb58d37c
[  256.123950][T15962] RDX: 000000000000000f RSI: 00007fa5cc3a20a0 RDI: 0000000000000006
[  256.123956][T15962] RBP: 00007fa5cc3a2090 R08: 0000000000000000 R09: 0000000000000000
[  256.123962][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  256.123968][T15962] R13: 0000000000000000 R14: 00007fa5cb7b5fa0 R15: 00007fffd77442d8
[  256.123982][T15962]  </TASK>
[  256.207537][   T40] audit: type=1400 audit(1746602907.076:35944): avc:  denied  { read } for  pid=15965 comm="syz.6.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  256.482705][   T58] usb 7-1: USB disconnect, device number 40
[  256.495581][   T58] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  256.499507][   T40] audit: type=1400 audit(1746602907.356:35945): avc:  denied  { write } for  pid=15978 comm="syz.4.2931" name="task" dev="proc" ino=78404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  256.511850][   T40] audit: type=1400 audit(1746602907.366:35946): avc:  denied  { add_name } for  pid=15978 comm="syz.4.2931" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  256.521237][   T40] audit: type=1400 audit(1746602907.366:35947): avc:  denied  { create } for  pid=15978 comm="syz.4.2931" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[  256.530471][   T40] audit: type=1400 audit(1746602907.366:35948): avc:  denied  { associate } for  pid=15978 comm="syz.4.2931" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  256.772036][T15993] NILFS (nbd0): device size too small
[  256.803736][T15993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2936'.
[  257.015705][T15999] [U] vŌ3øĀfł¾"SēĮ/Éź4:ĆXTz“W”t‘’lWµ«=
[  257.017807][T15999] [U] J"—e:ĄĘ"


[  257.134255][T16007] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2940'.
[  257.244325][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2943'.
[  257.259347][T16017] delete_channel: no stack
[  257.493295][T16033] : entered promiscuous mode
[  257.545259][T16038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16038 comm=syz.4.2950
[  257.634482][T16046] netlink: 'syz.0.2953': attribute type 1 has an invalid length.
[  257.650463][T16046] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.808017][   T40] audit: type=1400 audit(1746602908.676:35949): avc:  denied  { accept } for  pid=16056 comm="syz.0.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  257.843468][ T6507] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  257.891330][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout
[  257.995339][ T6507] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  258.000346][ T6507] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.004448][ T6507] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  258.006965][ T6507] usb 7-1: SerialNumber: å”¦ć˜¦ć¤‰é®”č„±ę‰‰ē –ī«“ļ«•ē™–ą¶…Õ·ć°–č¼œļ€—ć¬µć²›āž¹åƫ傄鎓źÆ§ć›™āŖ‡į”‰ļ°ˆą”ŗčŖ‚赔撐ā˜Šä‚Ÿė»Ÿćœ·
[  258.217207][T16079] mkiss: ax0: crc mode is auto.
[  258.224882][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2952'.
[  258.327023][ T6507] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  258.343653][ T6507] usb 7-1: USB disconnect, device number 41
[  258.853879][   T40] audit: type=1400 audit(1746602909.726:35950): avc:  denied  { map } for  pid=16090 comm="syz.2.2967" path="socket:[79320]" dev="sockfs" ino=79320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  258.885373][T16093] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  258.893750][ T6777] Bluetooth: hci1: Frame reassembly failed (-84)
[  258.895821][T11528] Bluetooth: hci1: Frame reassembly failed (-84)
[  258.905769][T16093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=16093 comm=syz.2.2968
[  258.912950][T16093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2968'.
[  259.190451][T16109] trusted_key: encrypted_key: master key parameter '' is invalid
[  259.251052][    C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  260.519142][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2983'.
[  260.522656][T16128] netlink: 'syz.6.2983': attribute type 30 has an invalid length.
[  260.525486][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2983'.
[  260.528959][T16126] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  260.536774][T16126] SELinux: failed to load policy
[  260.665209][T16138] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[  260.808451][T16152] team_slave_0: entered promiscuous mode
[  260.811114][T16152] team_slave_0: left promiscuous mode
[  260.857128][T16153] tipc: Started in network mode
[  260.858804][T16153] tipc: Node identity 4, cluster identity 4711
[  260.860920][T16153] tipc: Node number set to 4
[  260.864662][T11530] tipc: Subscription rejected, illegal request
[  260.911129][ T6507] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  260.930918][ T5938] Bluetooth: hci1: command 0x1003 tx timeout
[  260.931031][ T5937] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  261.011719][   T40] audit: type=1400 audit(1746602911.886:35951): avc:  denied  { bind } for  pid=16159 comm="syz.2.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  261.072609][ T6507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.077892][ T6507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.081124][ T6507] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  261.083998][ T6507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.089143][ T6507] usb 5-1: config 0 descriptor??
[  261.122554][   T40] audit: type=1400 audit(1746602911.996:35952): avc:  denied  { getopt } for  pid=16166 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  261.144283][T16171] syz.4.2999: attempt to access beyond end of device
[  261.144283][T16171] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  261.149856][T16171] syz.4.2999: attempt to access beyond end of device
[  261.149856][T16171] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0
[  261.157027][T16171] Mount JFS Failure: -5
[  261.158919][T16171] jfs_mount failed w/return code = -5
[  261.350047][   T40] audit: type=1400 audit(1746602912.216:35953): avc:  denied  { ioctl } for  pid=16186 comm="syz.4.3005" path="socket:[81302]" dev="sockfs" ino=81302 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  261.524140][ T6507] usbhid 5-1:0.0: can't add hid device: -71
[  261.526100][ T6507] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  261.541772][ T6507] usb 5-1: USB disconnect, device number 41
[  261.600330][T16198] netlink: 'syz.6.3008': attribute type 1 has an invalid length.
[  261.603078][T16198] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3008'.
[  262.013514][T16211] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3012'.
[  262.078825][T16213] syz.0.3013: attempt to access beyond end of device
[  262.078825][T16213] sr0: rw=0, sector=8, nr_sectors = 8 limit=0
[  262.084517][T16213] qnx4: unable to read the superblock
[  262.109539][T16213] team0: Port device ip6tnl2 added
[  262.251454][   T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  262.280028][T16219] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3015'.
[  262.285872][T16220] netlink: 700 bytes leftover after parsing attributes in process `syz.0.3015'.
[  262.317451][T16223] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3016'.
[  262.322306][   T40] audit: type=1400 audit(1746602913.196:35954): avc:  denied  { connect } for  pid=16222 comm="syz.0.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  262.357794][T16225] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  262.363978][T16225] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  262.464204][   T40] audit: type=1400 audit(1746602913.336:35955): avc:  denied  { mounton } for  pid=16237 comm="syz.4.3021" path="/228/file0" dev="9p" ino=35913821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  262.464211][T16238] 9pnet_virtio: no channels available for device syz
[  263.262465][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'.
[  263.266218][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'.
[  263.272813][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'.
[  263.287078][T16256] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  264.241503][   T40] audit: type=1400 audit(1746602915.116:35956): avc:  denied  { watch_mount } for  pid=16298 comm="syz.4.3034" path="/231" dev="tmpfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  264.269662][T16303] overlay: Unknown parameter 'fsuuid'
[  264.657740][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  264.664637][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  264.668662][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  264.675578][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  264.679288][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  264.708468][   T40] audit: type=1400 audit(1746602915.576:35957): avc:  denied  { unlink } for  pid=16318 comm="syz.6.3041" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  264.785942][T16325] netlink: 'syz.4.3042': attribute type 1 has an invalid length.
[  264.889967][T16320] chnl_net:caif_netlink_parms(): no params data found
[  264.980100][T16320] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.982579][T16320] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.984872][T16320] bridge_slave_0: entered allmulticast mode
[  264.987628][T16320] bridge_slave_0: entered promiscuous mode
[  264.993618][T16320] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.995984][T16320] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.998248][T16320] bridge_slave_1: entered allmulticast mode
[  265.001578][T16320] bridge_slave_1: entered promiscuous mode
[  265.037639][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.042492][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.077972][T16320] team0: Port device team_slave_0 added
[  265.082939][T16320] team0: Port device team_slave_1 added
[  265.096303][T16337] nbd: must specify at least one socket
[  265.114811][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.117165][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.125683][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.130088][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.132496][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.141991][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.168641][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.171948][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.174997][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.178189][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.181441][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.184501][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.187444][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.190543][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.194446][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.197752][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.198194][T16320] hsr_slave_0: entered promiscuous mode
[  265.203677][T16320] hsr_slave_1: entered promiscuous mode
[  265.205921][T16320] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.208268][T16320] Cannot create hsr debugfs directory
[  265.355184][T16320] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  265.359591][T16320] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  265.363847][T16320] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  265.368128][T16320] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  265.411643][T16320] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.424388][T16320] 8021q: adding VLAN 0 to HW filter on device team0
[  265.429641][T12058] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.432087][T12058] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.438741][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.441220][ T6776] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.491023][T14168] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  265.510672][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.565574][T16320] veth0_vlan: entered promiscuous mode
[  265.572488][T16320] veth1_vlan: entered promiscuous mode
[  265.588068][T16320] veth0_macvtap: entered promiscuous mode
[  265.594458][T16320] veth1_macvtap: entered promiscuous mode
[  265.602823][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.606027][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.609093][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.612743][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.615871][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.619164][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.622887][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.626067][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.629133][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.633525][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.637472][T16320] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.642646][T14168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  265.645074][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.647937][T14168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  265.649607][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.649616][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.649623][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.649635][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.649643][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.649652][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.649659][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.656031][T14168] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  265.657906][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.662399][T14168] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  265.666245][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.669559][T14168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.673815][T16320] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.680545][T14168] usb 5-1: config 0 descriptor??
[  265.692001][T16320] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.704340][T16320] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.707141][T16320] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.709953][T16320] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.748336][T11528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.751543][T11528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.766590][T11528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.769145][T11528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.000327][    C2] vcan0: j1939_tp_rxtimer: 0xffff88805817a800: rx timeout, send abort
[  266.099532][T14168] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  266.114718][T14168] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  266.250949][ T5969] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  266.413267][ T5969] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  266.417655][ T5969] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  266.430834][ T5969] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  266.434490][ T5969] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.441534][T16363] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  266.447373][ T5969] usb 12-1: Quirk or no altset; falling back to MIDI 1.0
[  266.504669][    C2] vcan0: j1939_tp_rxtimer: 0xffff88805817a800: abort rx timeout. Force session deactivation
[  266.584867][T16367] __nla_validate_parse: 2 callbacks suppressed
[  266.584882][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'.
[  266.686771][ T6507] usb 12-1: USB disconnect, device number 2
[  266.804228][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3054'.
[  266.842775][   T40] audit: type=1400 audit(1746602917.716:35958): avc:  denied  { getattr } for  pid=16383 comm="syz.7.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  266.906377][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3058'.
[  266.974655][T16400] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3058'.
[  267.814061][   T40] audit: type=1400 audit(1746602918.686:35959): avc:  denied  { setopt } for  pid=16411 comm="syz.4.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  267.944752][T16423] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3067'.
[  268.054133][T16431] netlink: 'syz.6.3069': attribute type 28 has an invalid length.
[  268.056765][T16431] netlink: 'syz.6.3069': attribute type 3 has an invalid length.
[  268.059250][T16431] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3069'.
[  268.088590][T16435] nftables ruleset with unbound set
[  268.091920][T16435] netlink: 308 bytes leftover after parsing attributes in process `syz.4.3071'.
[  268.134576][T16438] xt_hashlimit: size too large, truncated to 1048576
[  268.194298][T16442] x_tables: duplicate underflow at hook 1
[  268.259253][ T6507] usb 5-1: USB disconnect, device number 42
[  268.284684][   T40] audit: type=1400 audit(1746602919.156:35960): avc:  denied  { create } for  pid=16448 comm="syz.6.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  268.289575][T16449] syzkaller1: entered promiscuous mode
[  268.292935][   T40] audit: type=1400 audit(1746602919.166:35961): avc:  denied  { bind } for  pid=16448 comm="syz.6.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  268.293313][T16449] syzkaller1: entered allmulticast mode
[  268.480399][T16453] syz.0.3075: attempt to access beyond end of device
[  268.480399][T16453] sr0: rw=0, sector=0, nr_sectors = 4 limit=0
[  268.485228][T16453] hfs: can't find a HFS filesystem on dev sr0
[  268.515428][T16468] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2305 sclass=netlink_xfrm_socket pid=16468 comm=syz.6.3083
[  268.540710][   T40] audit: type=1400 audit(1746602919.406:35962): avc:  denied  { ioctl } for  pid=16467 comm="syz.4.3082" path="socket:[83145]" dev="sockfs" ino=83145 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  268.548837][T16473] serio: Serial port ptm0
[  268.551953][   T40] audit: type=1400 audit(1746602919.416:35963): avc:  denied  { setopt } for  pid=16467 comm="syz.4.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  268.624221][T16473] syz.6.3085: attempt to access beyond end of device
[  268.624221][T16473] loop6: rw=0, sector=64, nr_sectors = 2 limit=0
[  268.629288][T16473] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32
[  268.838527][T16500] 9pnet_virtio: no channels available for device syz
[  268.903562][   T40] audit: type=1400 audit(1746602919.776:35964): avc:  denied  { bind } for  pid=16503 comm="syz.4.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  269.015958][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3099'.
[  269.157574][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3102'.
[  269.163239][T16530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3102'.
[  269.210019][T16534] fuse: Unknown parameter 'aŅ²šmode'
[  269.329677][   T40] audit: type=1400 audit(1746602920.196:35965): avc:  denied  { ioctl } for  pid=16543 comm="syz.0.3107" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  269.375475][   T40] audit: type=1400 audit(1746602920.246:35966): avc:  denied  { map } for  pid=16547 comm="syz.4.3108" path="socket:[83273]" dev="sockfs" ino=83273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  269.455001][T16556] IPv6: Can't replace route, no match found
[  269.612503][ T5937] Bluetooth: hci4: unexpected cc 0x042f length: 1 < 7
[  269.614820][ T5937] Bluetooth: hci4: unexpected event for opcode 0x042f
[  269.827272][T16604] macsec1: entered promiscuous mode
[  269.892789][T16610] binder_alloc: binder_alloc_mmap_handler: 16609 200000ffc000-200000ffd000 already mapped failed -16
[  269.926117][T16610] hfs: unable to load iocharset "io#harsets/binder0"
[  269.976892][T16616] xt_hashlimit: size too large, truncated to 1048576
[  270.153991][T16618] team0 (unregistering): Port device team_slave_0 removed
[  270.163247][T16618] team0 (unregistering): Port device team_slave_1 removed
[  270.467441][T16647] SELinux: syz.0.3137 (16647) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  270.488401][   T40] audit: type=1400 audit(1746602921.356:35967): avc:  denied  { watch_with_perm } for  pid=16648 comm="syz.6.3138" path="/176/bus" dev="tmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  270.499059][T16651] 9pnet_virtio: no channels available for device 127.0.0.1
[  270.600795][T16655] Bluetooth: (null): Invalid header checksum
[  270.646211][T16657] geneve2: entered promiscuous mode
[  270.648381][T16657] geneve2: entered allmulticast mode
[  270.656086][T16657] netlink: 'syz.6.3141': attribute type 28 has an invalid length.
[  270.659341][T16657] netlink: 'syz.6.3141': attribute type 3 has an invalid length.
[  270.695876][T16663] net_ratelimit: 56 callbacks suppressed
[  270.695889][T16663] openvswitch: netlink: EtherType a is less than min 600
[  270.910883][T14168] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  271.062261][T14168] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  271.065861][T14168] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  271.069030][T14168] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  271.072146][ T5969] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  271.074901][T14168] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.080233][T16661] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  271.084631][T14168] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  271.220826][ T5969] usb 11-1: Using ep0 maxpacket: 8
[  271.223980][ T5969] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  271.227584][ T5969] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  271.230930][ T5969] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  271.234161][ T5969] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.238377][ T5969] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  271.241444][ T5969] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.288025][T16661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.292233][T16661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.382449][ T5935] usb 9-1: USB disconnect, device number 15
[  271.447418][ T5969] usb 11-1: GET_CAPABILITIES returned 0
[  271.449318][ T5969] usbtmc 11-1:16.0: can't read capabilities
[  271.732100][  T838] usb 11-1: USB disconnect, device number 3
[  271.759280][T16689] Unsupported ieee802154 address type: 0
[  271.846430][T16691] xt_l2tp: v2 tid > 0xffff: 150994944
[  271.871451][ T5969] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  271.920001][T16693] trusted_key: encrypted_key: keyword 'new0default' not recognized
[  271.948260][T16695] netlink: 'syz.4.3155': attribute type 1 has an invalid length.
[  271.950716][T16695] __nla_validate_parse: 11 callbacks suppressed
[  271.950723][T16695] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3155'.
[  271.957243][T16695] veth1_to_bond: entered allmulticast mode
[  271.959520][T16694] veth1_to_bond: left allmulticast mode
[  272.015820][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  272.015830][   T40] audit: type=1404 audit(1746602922.886:35972): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  272.023842][   T40] audit: type=1400 audit(1746602922.896:35973): avc:  denied  { ioctl } for  pid=16683 comm="syz.7.3151" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  272.032335][   T40] audit: type=1400 audit(1746602922.896:35974): avc:  denied  { prog_load } for  pid=16683 comm="syz.7.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  272.034922][T16704] SELinux: selinux_ima_measure_state_locked: failed to read policy -12.
[  272.038425][   T40] audit: type=1400 audit(1746602922.896:35975): avc:  denied  { write } for  pid=16683 comm="syz.7.3151" name="/" dev="9p" ino=35913821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0
[  272.048155][   T40] audit: type=1400 audit(1746602922.896:35976): avc:  denied  { recv } for  pid=5843 comm="syz-executor" saddr=127.0.0.1 src=53422 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  272.056593][   T40] audit: type=1400 audit(1746602922.896:35977): avc:  denied  { create } for  pid=16683 comm="syz.7.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0
[  272.062966][ T5969] usb 12-1: device descriptor read/all, error -71
[  272.063247][   T40] audit: type=1400 audit(1746602922.896:35978): avc:  denied  { read write } for  pid=13740 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  272.073302][   T40] audit: type=1400 audit(1746602922.916:35979): avc:  denied  { read write } for  pid=12997 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  272.081088][   T40] audit: type=1400 audit(1746602922.936:35980): avc:  denied  { prog_load } for  pid=16709 comm="syz.4.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  272.086963][   T40] audit: type=1400 audit(1746602922.946:35981): avc:  denied  { read write } for  pid=12997 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  272.226976][ T5937] Bluetooth: hci4: unexpected event for opcode 0xed23
[  272.904780][ T1174] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.115018][ T1174] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.235323][ T1174] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.402556][ T1174] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.511551][ T1174] bridge_slave_1: left allmulticast mode
[  273.513921][ T1174] bridge_slave_1: left promiscuous mode
[  273.515846][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.526700][ T1174] bridge_slave_0: left allmulticast mode
[  273.526722][ T1174] bridge_slave_0: left promiscuous mode
[  273.533253][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.902385][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.908499][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  273.913653][ T1174] bond0 (unregistering): Released all slaves
[  274.266814][ T1174] hsr_slave_0: left promiscuous mode
[  274.269592][ T1174] hsr_slave_1: left promiscuous mode
[  274.269979][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.274423][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.278825][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.282675][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.340447][ T1174] veth1_macvtap: left promiscuous mode
[  274.343074][ T1174] veth0_macvtap: left promiscuous mode
[  274.345706][ T1174] veth1_vlan: left promiscuous mode
[  274.349802][ T1174] veth0_vlan: left promiscuous mode
[  275.241993][ T1174] team0 (unregistering): Port device team_slave_1 removed
[  275.355169][ T1174] team0 (unregistering): Port device team_slave_0 removed
[  276.622735][ T1174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.698801][ T1174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.778983][ T1174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.845075][ T1174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.010010][ T1174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.021543][   T40] kauditd_printk_skb: 14586 callbacks suppressed
[  277.021555][   T40] audit: type=1400 audit(1746602927.896:50568): avc:  denied  { read } for  pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  277.030666][   T40] audit: type=1400 audit(1746602927.896:50569): avc:  denied  { read } for  pid=5646 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  277.037853][   T40] audit: type=1400 audit(1746602927.906:50570): avc:  denied  { read } for  pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  277.045408][   T40] audit: type=1400 audit(1746602927.906:50571): avc:  denied  { read } for  pid=5646 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  277.053157][   T40] audit: type=1400 audit(1746602927.926:50572): avc:  denied  { read } for  pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  277.060437][   T40] audit: type=1400 audit(1746602927.926:50573): avc:  denied  { read } for  pid=5646 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  277.067314][   T40] audit: type=1400 audit(1746602927.926:50574): avc:  denied  { read } for  pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  277.076065][   T40] audit: type=1400 audit(1746602927.956:50575): avc:  denied  { read } for  pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  277.084362][   T40] audit: type=1400 audit(1746602927.956:50576): avc:  denied  { read } for  pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  277.092134][   T40] audit: type=1400 audit(1746602927.956:50577): avc:  denied  { read } for  pid=5646 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  277.106356][ T1174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.197876][ T1174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.293132][ T1174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.511837][ T1174] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.611765][ T1174] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.697165][ T1174] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.791840][ T1174] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.900253][ T1174] bridge_slave_1: left allmulticast mode
[  277.903744][ T1174] bridge_slave_1: left promiscuous mode
[  277.905706][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.909936][ T1174] bridge_slave_0: left allmulticast mode
[  277.909949][ T1174] bridge_slave_0: left promiscuous mode
[  277.910034][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.927142][ T1174] bridge0: port 3(batadv0) entered disabled state
[  277.930585][ T1174] bridge_slave_1: left allmulticast mode
[  277.932695][ T1174] bridge_slave_1: left promiscuous mode
[  277.932796][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.938850][ T1174] bridge_slave_0: left allmulticast mode
[  277.941936][ T1174] bridge_slave_0: left promiscuous mode
[  277.942107][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.044660][ T1174] ==================================================================
[  278.047479][ T1174] BUG: KASAN: slab-out-of-bounds in arp_mc_map+0x847/0x9c0
[  278.047501][ T1174] Read of size 2 at addr ffff8880281af218 by task kworker/u32:9/1174
[  278.047510][ T1174] 
[  278.047516][ T1174] CPU: 3 UID: 0 PID: 1174 Comm: kworker/u32:9 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  278.047529][ T1174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  278.047537][ T1174] Workqueue: netns cleanup_net
[  278.047552][ T1174] Call Trace:
[  278.047556][ T1174]  <TASK>
[  278.047561][ T1174]  dump_stack_lvl+0x116/0x1f0
[  278.047576][ T1174]  print_report+0xc3/0x670
[  278.047587][ T1174]  ? __virt_addr_valid+0x5e/0x590
[  278.047602][ T1174]  ? __phys_addr+0xc6/0x150
[  278.047616][ T1174]  ? arp_mc_map+0x847/0x9c0
[  278.047629][ T1174]  kasan_report+0xe0/0x110
[  278.047640][ T1174]  ? arp_mc_map+0x847/0x9c0
[  278.047655][ T1174]  arp_mc_map+0x847/0x9c0
[  278.047669][ T1174]  ? __pfx_arp_mc_map+0x10/0x10
[  278.047684][ T1174]  ? __pfx___mutex_trylock_common+0x10/0x10
[  278.047702][ T1174]  __igmp_group_dropped+0xa77/0xe80
[  278.047713][ T1174]  ? __pfx___igmp_group_dropped+0x10/0x10
[  278.047723][ T1174]  ? find_held_lock+0x2b/0x80
[  278.047736][ T1174]  ? ib_device_get_by_netdev+0x1b8/0x520
[  278.047755][ T1174]  ip_mc_down+0xc0/0x3c0
[  278.047765][ T1174]  inetdev_event+0x3b2/0x18a0
[  278.047778][ T1174]  ? ib_netdevice_event+0xfc/0x330
[  278.047792][ T1174]  ? __pfx_inetdev_event+0x10/0x10
[  278.047808][ T1174]  ? wext_netdev_notifier_call+0xe/0x20
[  278.047829][ T1174]  ? cfg802154_netdev_notifier_call+0x391/0xa00
[  278.047851][ T1174]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  278.047879][ T1174]  notifier_call_chain+0xb9/0x410
[  278.047900][ T1174]  ? __pfx_inetdev_event+0x10/0x10
[  278.047920][ T1174]  call_netdevice_notifiers_info+0xbe/0x140
[  278.047942][ T1174]  dev_close_many+0x319/0x630
[  278.047957][ T1174]  ? __pfx_dev_close_many+0x10/0x10
[  278.047972][ T1174]  unregister_netdevice_many_notify+0x578/0x26f0
[  278.047985][ T1174]  ? __lock_acquire+0x5ca/0x1ba0
[  278.048002][ T1174]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  278.048016][ T1174]  ? unregister_netdevice_queue+0x22e/0x3f0
[  278.048028][ T1174]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  278.048040][ T1174]  ? find_held_lock+0x2b/0x80
[  278.048057][ T1174]  ? bond_net_exit_batch_rtnl+0x138/0x430
[  278.048069][ T1174]  ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10
[  278.048081][ T1174]  ? mutex_is_locked+0x17/0x60
[  278.048097][ T1174]  ? nexthop_net_exit_batch_rtnl+0x1c6/0x290
[  278.048109][ T1174]  cleanup_net+0x596/0xb30
[  278.048122][ T1174]  ? __pfx_cleanup_net+0x10/0x10
[  278.048135][ T1174]  ? rcu_is_watching+0x12/0xc0
[  278.048148][ T1174]  process_one_work+0x9cc/0x1b70
[  278.048161][ T1174]  ? __pfx_cleanup_net+0x10/0x10
[  278.048173][ T1174]  ? __pfx_process_one_work+0x10/0x10
[  278.048186][ T1174]  ? assign_work+0x1a0/0x250
[  278.048196][ T1174]  worker_thread+0x6c8/0xf10
[  278.048209][ T1174]  ? __kthread_parkme+0x19e/0x250
[  278.048224][ T1174]  ? __pfx_worker_thread+0x10/0x10
[  278.048235][ T1174]  kthread+0x3c2/0x780
[  278.048244][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.048253][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.048261][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.048270][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.048278][ T1174]  ? rcu_is_watching+0x12/0xc0
[  278.048290][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.048299][ T1174]  ret_from_fork+0x45/0x80
[  278.048310][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.048319][ T1174]  ret_from_fork_asm+0x1a/0x30
[  278.048338][ T1174]  </TASK>
[  278.048341][ T1174] 
[  278.159559][ T1174] Allocated by task 5939:
[  278.159568][ T1174]  kasan_save_stack+0x33/0x60
[  278.159588][ T1174]  kasan_save_track+0x14/0x30
[  278.159602][ T1174]  __kasan_kmalloc+0xaa/0xb0
[  278.159616][ T1174]  binderfs_binder_device_create.isra.0+0x17a/0xb70
[  278.159632][ T1174]  binderfs_fill_super+0x8d4/0x1360
[  278.159647][ T1174]  get_tree_nodev+0xda/0x190
[  278.159661][ T1174]  vfs_get_tree+0x8b/0x340
[  278.159672][ T1174]  path_mount+0x14d4/0x1f20
[  278.159682][ T1174]  __x64_sys_mount+0x28d/0x310
[  278.159691][ T1174]  do_syscall_64+0xcd/0x260
[  278.159704][ T1174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.159715][ T1174] 
[  278.159717][ T1174] The buggy address belongs to the object at ffff8880281af000
[  278.159717][ T1174]  which belongs to the cache kmalloc-512 of size 512
[  278.159726][ T1174] The buggy address is located 256 bytes to the right of
[  278.159726][ T1174]  allocated 280-byte region [ffff8880281af000, ffff8880281af118)
[  278.159736][ T1174] 
[  278.159739][ T1174] The buggy address belongs to the physical page:
[  278.159744][ T1174] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x281ac
[  278.159752][ T1174] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  278.159761][ T1174] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  278.159770][ T1174] page_type: f5(slab)
[  278.159779][ T1174] raw: 00fff00000000040 ffff88801b442c80 ffffea00015e5400 dead000000000002
[  278.159788][ T1174] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  278.159797][ T1174] head: 00fff00000000040 ffff88801b442c80 ffffea00015e5400 dead000000000002
[  278.159806][ T1174] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  278.212696][ T1174] head: 00fff00000000002 ffffea0000a06b01 00000000ffffffff 00000000ffffffff
[  278.212708][ T1174] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  278.212714][ T1174] page dumped because: kasan: bad access detected
[  278.212720][ T1174] page_owner tracks the page as allocated
[  278.212724][ T1174] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 46, tgid 46 (kworker/u32:2), ts 49297220279, free_ts 49288825153
[  278.228679][ T1174]  post_alloc_hook+0x181/0x1b0
[  278.228700][ T1174]  get_page_from_freelist+0x135c/0x3920
[  278.228716][ T1174]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  278.228732][ T1174]  alloc_pages_mpol+0x1fb/0x550
[  278.228741][ T1174]  new_slab+0x244/0x340
[  278.237300][ T1174]  ___slab_alloc+0xd9c/0x1940
[  278.237318][ T1174]  __slab_alloc.constprop.0+0x56/0xb0
[  278.237332][ T1174]  __kmalloc_cache_noprof+0xfb/0x3e0
[  278.237345][ T1174]  __ipv6_dev_mc_inc+0x2b9/0xc10
[  278.237358][ T1174]  addrconf_dad_work+0x284/0x14e0
[  278.237369][ T1174]  process_one_work+0x9cc/0x1b70
[  278.237379][ T1174]  worker_thread+0x6c8/0xf10
[  278.237389][ T1174]  kthread+0x3c2/0x780
[  278.250105][ T1174]  ret_from_fork+0x45/0x80
[  278.250118][ T1174]  ret_from_fork_asm+0x1a/0x30
[  278.250133][ T1174] page last free pid 5346 tgid 5346 stack trace:
[  278.250140][ T1174]  __free_frozen_pages+0x69d/0xff0
[  278.250153][ T1174]  qlist_free_all+0x4e/0x120
[  278.250168][ T1174]  kasan_quarantine_reduce+0x195/0x1e0
[  278.260441][ T1174]  __kasan_slab_alloc+0x69/0x90
[  278.260453][ T1174]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  278.260468][ T1174]  getname_flags.part.0+0x4c/0x550
[  278.260480][ T1174]  getname_flags+0x93/0xf0
[  278.260493][ T1174]  do_readlinkat+0xb4/0x3a0
[  278.260503][ T1174]  __x64_sys_readlink+0x78/0xc0
[  278.270043][ T1174]  do_syscall_64+0xcd/0x260
[  278.270060][ T1174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.270071][ T1174] 
[  278.270073][ T1174] Memory state around the buggy address:
[  278.270080][ T1174]  ffff8880281af100: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[  278.270087][ T1174]  ffff8880281af180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  278.270094][ T1174] >ffff8880281af200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  278.270099][ T1174]                             ^
[  278.270104][ T1174]  ffff8880281af280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  278.270111][ T1174]  ffff8880281af300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  278.270117][ T1174] ==================================================================
[  278.270491][ T1174] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  278.270502][ T1174] CPU: 2 UID: 0 PID: 1174 Comm: kworker/u32:9 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
[  278.270516][ T1174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  278.270523][ T1174] Workqueue: netns cleanup_net
[  278.270538][ T1174] Call Trace:
[  278.270542][ T1174]  <TASK>
[  278.270546][ T1174]  dump_stack_lvl+0x3d/0x1f0
[  278.270561][ T1174]  panic+0x71c/0x800
[  278.270577][ T1174]  ? __pfx_panic+0x10/0x10
[  278.270592][ T1174]  ? irqentry_exit+0x3b/0x90
[  278.270605][ T1174]  ? lockdep_hardirqs_on+0x7c/0x110
[  278.270618][ T1174]  ? preempt_schedule_thunk+0x16/0x30
[  278.270627][ T1174]  ? arp_mc_map+0x847/0x9c0
[  278.270642][ T1174]  ? preempt_schedule_common+0x44/0xc0
[  278.270654][ T1174]  ? check_panic_on_warn+0x1f/0xb0
[  278.270670][ T1174]  ? arp_mc_map+0x847/0x9c0
[  278.270683][ T1174]  check_panic_on_warn+0xab/0xb0
[  278.270713][ T1174]  end_report+0x107/0x170
[  278.270723][ T1174]  kasan_report+0xee/0x110
[  278.270733][ T1174]  ? arp_mc_map+0x847/0x9c0
[  278.270761][ T1174]  arp_mc_map+0x847/0x9c0
[  278.270774][ T1174]  ? __pfx_arp_mc_map+0x10/0x10
[  278.270788][ T1174]  ? __pfx___mutex_trylock_common+0x10/0x10
[  278.270806][ T1174]  __igmp_group_dropped+0xa77/0xe80
[  278.270816][ T1174]  ? __pfx___igmp_group_dropped+0x10/0x10
[  278.270826][ T1174]  ? find_held_lock+0x2b/0x80
[  278.270843][ T1174]  ? ib_device_get_by_netdev+0x1b8/0x520
[  278.270861][ T1174]  ip_mc_down+0xc0/0x3c0
[  278.270870][ T1174]  inetdev_event+0x3b2/0x18a0
[  278.270882][ T1174]  ? ib_netdevice_event+0xfc/0x330
[  278.270897][ T1174]  ? __pfx_inetdev_event+0x10/0x10
[  278.270908][ T1174]  ? wext_netdev_notifier_call+0xe/0x20
[  278.270922][ T1174]  ? cfg802154_netdev_notifier_call+0x391/0xa00
[  278.270937][ T1174]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  278.270955][ T1174]  notifier_call_chain+0xb9/0x410
[  278.270969][ T1174]  ? __pfx_inetdev_event+0x10/0x10
[  278.270982][ T1174]  call_netdevice_notifiers_info+0xbe/0x140
[  278.270996][ T1174]  dev_close_many+0x319/0x630
[  278.271010][ T1174]  ? __pfx_dev_close_many+0x10/0x10
[  278.271025][ T1174]  unregister_netdevice_many_notify+0x578/0x26f0
[  278.271038][ T1174]  ? __lock_acquire+0x5ca/0x1ba0
[  278.271054][ T1174]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  278.271067][ T1174]  ? unregister_netdevice_queue+0x22e/0x3f0
[  278.271079][ T1174]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  278.271091][ T1174]  ? find_held_lock+0x2b/0x80
[  278.271103][ T1174]  ? bond_net_exit_batch_rtnl+0x138/0x430
[  278.271115][ T1174]  ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10
[  278.271127][ T1174]  ? mutex_is_locked+0x17/0x60
[  278.271142][ T1174]  ? nexthop_net_exit_batch_rtnl+0x1c6/0x290
[  278.271154][ T1174]  cleanup_net+0x596/0xb30
[  278.271166][ T1174]  ? __pfx_cleanup_net+0x10/0x10
[  278.271179][ T1174]  ? rcu_is_watching+0x12/0xc0
[  278.271191][ T1174]  process_one_work+0x9cc/0x1b70
[  278.271205][ T1174]  ? __pfx_cleanup_net+0x10/0x10
[  278.271216][ T1174]  ? __pfx_process_one_work+0x10/0x10
[  278.271229][ T1174]  ? assign_work+0x1a0/0x250
[  278.271239][ T1174]  worker_thread+0x6c8/0xf10
[  278.271252][ T1174]  ? __kthread_parkme+0x19e/0x250
[  278.271266][ T1174]  ? __pfx_worker_thread+0x10/0x10
[  278.271277][ T1174]  kthread+0x3c2/0x780
[  278.271286][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.271295][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.271303][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.271312][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.271321][ T1174]  ? rcu_is_watching+0x12/0xc0
[  278.271333][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.271342][ T1174]  ret_from_fork+0x45/0x80
[  278.271352][ T1174]  ? __pfx_kthread+0x10/0x10
[  278.271360][ T1174]  ret_from_fork_asm+0x1a/0x30
[  278.271378][ T1174]  </TASK>
[  278.272261][ T1174] Kernel Offset: disabled

VM DIAGNOSIS:
07:16:00  Registers:
info registers vcpu 0

CPU#0
RAX=00000000003930cf RBX=0000000000000000 RCX=ffffffff8b6cd419 RDX=0000000000000000
RSI=ffffffff8dbe123f RDI=ffffffff8bf482a0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10
R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000
R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90850410 R15=0000000000000000
RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69df000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f1b68947ff8 CR3=000000002f642000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=0000000000040000 Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc66a64b00 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2074203a29203020 7265696d61662032 2065282032205d30 202c315b206e2030
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030202423203020 2020343636002032 2065222032203730 202c205b20362030
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c3a3b243d3d382a 2a51343c36003a37 6f7c637979636778 6f7a2a7e6f616965
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 647f2a30236d6463 786f7e79636d6f78 647f222a38676379 7c6f6e7e6f642a3a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000270e97 RBX=0000000000000001 RCX=ffffffff8b6cd419 RDX=0000000000000000
RSI=ffffffff8dbe123f RDI=ffffffff8bf482a0 RBP=ffffed1003ad0488 RSP=ffffc90000177df8
R8 =0000000000000001 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000
R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff90850410 R15=0000000000000000
RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6adf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f4edaee8710 CR3=0000000028204000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020000 Opmask01=00000000ffffffff Opmask02=00000000fff80000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd23eb5d70 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000002b6e33 RBX=0000000000000002 RCX=ffffffff8b6cd419 RDX=0000000000000000
RSI=ffffffff8dbe123f RDI=ffffffff8bf482a0 RBP=ffffed1003ad0910 RSP=ffffc90000187df8
R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000
R12=0000000000000002 R13=ffff88801d684880 R14=ffffffff90850410 R15=0000000000000000
RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6bdf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fa5cc2e7d60 CR3=0000000025930000 CR4=00352ef0
DR0=0000000000000000 DR1=000000000000000b DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000060000000 Opmask01=0000000001100000 Opmask02=000000000fffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70f82100 0000003000000008
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70f82100 0000003000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7325006563697665 64204c4c554e2064 6576696563657220 3a7665647562696c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56000040464c5340 41054c4c554e0541 40534c4046405705 1f53404150474c49
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3435313230386565 65692f6d69737768 5f34353132303863 616d2f6d726f6674
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000051 0000000000000000 00326e6170772f74 656e2f327968702f
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000563e494ec233 73656d5f70636864
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f295e4a8661 72610f777a6df37f 6567777f7b7fffff 7f7f7d7f75777965
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 207325203a732500 36657361656c2e73 2573252f64637063 68642f62642f7261
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 3

CPU#3
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff854f50f5 RDI=ffffffff9adf94e0 RBP=ffffffff9adf94a0 RSP=ffffc9000668f078
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3138323038386552
R12=0000000000000000 R13=0000000000000065 R14=ffffffff9adf94a0 R15=ffffffff854f5090
RIP=ffffffff854f511f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6cdf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffd96aa8f74 CR3=0000000025930000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000060000000 Opmask01=0000000001100000 Opmask02=000000000fffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70f82100 0000003000000008
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70f82100 0000003000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7325006563697665 64204c4c554e2064 6576696563657220 3a7665647562696c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56000040464c5340 41054c4c554e0541 40534c4046405705 1f53404150474c49
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3435313230386565 65692f6d69737768 5f34353132303863 616d2f6d726f6674
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000051 0000000000000000 00326e6170772f74 656e2f327968702f
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000563e494ec233 73656d5f70636864
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f295e4a8661 72610f777a6df37f 6567777f7b7fffff 7f7f7d7f75777965
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 207325203a732500 36657361656c2e73 2573252f64637063 68642f62642f7261
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020