last executing test programs:

3m16.18186805s ago: executing program 32 (id=512):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000240)={{0xdfb28f6d6c9a9115, 0x0, 0x80, {0x6000, 0xdddd1000, 0x2}}, "efb5166c231d96c86c6767be86581aca58fe01fb7cd1ac710bae9e3be2e0a69ec40d53e59a82ba07fcc7b9c656885733e84c20b0f56d8503e1390b942e776893bab7aadb4dfd97dbaaaceec1a71254e19d4d5b3bdffe732ca26da664d4b8f1887bf6ed6b22d26b360205a24b53d505d7cb386b102ea678ca7802975f31ca2c7be28981813d34b70b40501923cce05296d8a2c941058735a0ecf04c1a44ebbabc4c478a6599fa327339e7fc802918bebaace18114a618e4dc163c34d43d39dea18d880716d03dbcda75caceee334d0efe3a1f19601e1a40031074bc8bdf9f0211e997fa72de848c68aab28498320b0aaa579bff93b38d161931848c0373028b4a441f565f5b26acc205248e2460866602ca4bf771cb406709b76c4ae576af289a3259f98357dcb857540dd83c545b356372f3231705d72bb48224361a2f732763df685382b12c6219dce60b07798fd46b0b9e74a7d8ee51cfad1b7e26514954d26b8b377ea9603d9956f79bf0819567cc3d0ad251c5cb5cd4390907b9ea31b5131a98a2ff4cd7ef4b87aef6fda9d3163cea4c3b12654d07a1a22feb27693d78cbc408841cf8ad249fa5527cb9a2c851ff8ee7ae746affddde61b2973f79d62e9f271e4fb670547d6741a6f540d8a4614a85690e5f4c2151ea2b214035254a44a08eb06f7673dcea5cd81f901f714052baf17babbaf5fe84b77c2b7d7ef975b526eb0d98f339f1c1c6fc91a4dccfa674ee27ecb2dd8109fa3e93616fa420e7122ff0b576fbea2e300944a8a8865a6971692258c0e1c93167dcb15f30992020398d38da61dae66b6a401c0a64b1a190f71aabd4f997f21156b5a7bdd46e593733c421210a97c56eb6be3714d9047e6b14add16d87b45056d24847f5337dd127342bd991f06cd47fd2599bf2cf5d4141659e603b49976dd2dbd085924325741266d1f394288910fc29b14d90f1933abd1f15181f44631b6cd9c60d4bb750729351cdf57b53d147d535e0e404feeb147eadfad8922f7d5de81ff669d805260b042044d406eb4b93032c913b44440c1577e11d4258f274fea87dd64d253ad40a2cfd9e027be145b52772be9f79aba697b83061086c223f0c1dcdd7023165e115ae4802762e03831b3ee46f09624fa2f12ee54c4e0a1694152a31407e003488255d7a5b001dca9f665599128f36f862a52bcb9028376e1567fd849bc5a90ed7b42ddb3b3a023355bd9ed35cd936e235f4c03afe0f1893d6d82c776d2a81fa4fb4a7054707caf1de9008ae26551f3187d9078ba61ffca9f6430033557dd10dffd168a44507b3bdfac3cfebb7b7919abcb4497e716f673c007761ccd7ccccb642dc8e908ba1509eeec4580530bea83c38e6d95f8ed8c7cd189ca4a96ee9ebbde81cca92c8937a927b554c34a7a55fd6affa22400a900f1951999ba5cfc1276cae4a8d43a525c774eb2123482229cadedc9d5c2c8b86b0f04b449306d37136b8257dc6585780572392938a840f7df7723d8677f8cd6c848d50a46c280f91499775ec35cf74fdbd808a71ff870a600f20a6c978186bd7acd8c09eea0d163e0cb5f1d85a51b69ec12ba80628c3802c6986dd7d291b0328eddfb55fb7dd66bd49da021d06ef2ab486147d050836bc16d30755b92611289fc7abbb10f8e45f8586b952a71294c38180d69061ad40505fe183af8fc8835019014bb00b1a8493748c00f3f3e80d9f937aff016e2d1f03eba6d135adf13c61f82804ee4496a04c25f1250d601a043920c834a2976ffd4461b949fe298268f203dc12ff4d311dba3ae8854bc160f3349eb899294dc34df35fb2baa66b6aa35cc56a2b8f57faea556de01b5070ee292207d98137207973ebd86f21cda42ac130eaafd5807bb381eee8821e7d42a6bbcdd457d02154d1fe6454d656adecce5212ccef327e32efd6d4309ae32ad2c6171ae7b9f18de810a9ac8feab34caa09bc5a23c00037c5d4ffc6b2924b9c8bc62b92312c70fbf34327e7c80debcc3103533e35ca1b29a73749b5bd4b5c2db3338211456a671111a90a74967de85e7d72a2bdfbef953e8de64905fa6db938dc6b03be524d57084edf775eca57c1f4b42de61cb72750d72de69b4a85e6f685ddb338432be90794f6f3bdf66c5778ff15ebc12335c9be77a2cbc47a166fb81b67cec770a6c1d7d6cf39e8d44bd4a53a953fd2629cdab9108b1a9a19bf16f59735fbf544ac6358f0e85d2ba8fdaa190129d07d01ead5f21edbcae85dd795583e9836f354ab7c2b2bcdb05b264ebe31189f83b04cdceda969bcf9a0c08bc084a13b2f7378d941da53a17b11ff9f0e768187ff519ecad7043521eee41ae3470f301202613cb1465294c24ae37dbd24cfd21384939817bf7c15681c52b8316082d801007750fbb5558d292e42a9c4ddf125a6cb9f59be1d2a05fc1ebf49814b6fc1b9cf28407e27979c665167756f804b3661f86e2cab3203b6c02c4534a7a459dffba3589ba3cba455e064a3b11e8d3cafabeedbd80bd6a4178ddb52427d25aa2011a9af42a30c592024e31c245c9a1f48e3eb1ee171f171e3f154cd5d604bc89922a2df66dd9bdc273eab1e86c0904ca288715ced6db0529c8688aa509923b7791c2e099dca1e77898ed90f4a16219481c00129f630bd7c795cea6a950fd30af37893b74f057616f62d09ec00734667ef0bde8b39e204d1324e8bd07fe0ba5fe670b12159774c0f25af95dabc8a0515b45bd4334bec87c7ce474338cb00dba11278cf5167f0e7e0d0e76781a68f870d6fa6541243402d34877cff037243a808c4ebbde58612afab1216a6cb4e33349719ca75294c017f5f5d7066171908bb1cd7fc8d8ba0581b2df7f9e8130e4293708ae24fe18d66bef54c8c291960fc7abaefe22dff214272e8b5c1984fe9bf65842793b466aa32394be6066de8169215d2fcb3e7a9702ec8f9c0c268b297b422407cc709bf968d2d730a0ed9f5a36db6152955c1b488d77445498f447f16a81222cc65dd513f6689951a55535325bacf3cfc4f8871d0b808934bb244beb66ab40d9f324bf6542abe86a211c823ac1768dd9ceb0123389d3af5b9907934ce29f9bc89b7edb30b2e696beaef98f2b152e243adeb4e28dec817b3947ea269868a31f44195291c2e5499519dca87270d671329489f1acdec841b81d6038dffa281ba2990c33d5bb05e17e4cc01fac0af964365aa1b2bb2db92531321a853e3d43dd88d305c9025a25fd43196134ca0456fc56c728b599fdd43bb4b1f7bcfd2dd3eee9f60ba8287bd3e6d78e5d480e1d1342f273df7bcf5e5d1cad5b1386de35897de4c33f4221354a3327ebaec089d5a3b0e013c2020a462623283536eb18b1431a965c1173199c05e7b8bd325e286fc3c523334761420f54cc0aab9fd7278b0bfd9171fe76e69e2c129eb859f7fa21f02324e2f4212b1d3ef06e6c54d2f4ee43d630b660e48ee90e9efd77b423acacef2e173d8b7c08b7d29a5f3f9c3fee209d2e76404ae1445599c44900f7fe838785a94256cd54d7821a46b907ea7b7889b53cf0334272b53b0f1564dcf62d40cdf5de0a19a41e496d3fd6d3c9361dbb74bb4abf7c17e4e779e635a215b64e11ee3b0dfea0500adf7168940a518fd95f330cc7c3412c79e9de00b7743c71f7f41168647b28b1ea0099a6dea808e8ba0cf1506cc48f1b32008f664302745184f87eb13b3b549c180c26b70d12978a20017dfeeac99e38b02ad0b20587f107d8712888eec9948ee1752dc3247314d6b75cb4662c17ac6e8ddbf522e97a6b127e6880ac691d6cb0791df98abbbeaaded5217574143af153901a83e016210f59f43d3bb9a528c6128c2d0c5052e3867bfc15172e014add8b609fff207bebf494d17239dd80ee3b48c1fe4fd61309043543e9fa22d673458b8cba1a3e02b0ea147cb639f04316bee354a63f0ebe60fdd4896a236d9196a5887f4efc53d68582b2b548d0a2df858e210a72d3fb616ef9ffecd67a915a421802f1cdc4cafdbde6fa025a25a43f6c5d32d958a22fb8c4e46551e21c2d1afd775c9795067b151b781894c4f66586b76631d66fc9b497851d099fc24c4c3a1e411d9e7222240a1673dc5434686a45a1f243d2bdff1c66c77fadf506551762e4d54cb75d5914aab2c05ce4c46007589ff7182dec2911c0348df1e0b3e1fe913c5cbed1ae682ca2a75d7b68aad5265427fd035de630b7184b67ea62a5704650014a492c1822f4191025d4a46be8ec5134924edd6fe4bb2b178bdbbc5c8e377ef2ecb22f502a6274cb530c3f75da1d57b96766a699e91a9c6f05bd195afa0030f98793624db4ce0c3625118126494174cf222181371186b30621c2a0e5d5ff291fc07f75600c98446266e883646c13d3b11f6cda73e81b83f5a852628c0f52a462aedff80457c78495bb01a61fe7fa37249185a5f4c4ed5eee5185d41970412502df5b294045ff56bd3b6b1b7e0d5a3aea7e4bfd1fdac62e5ba64d2b8731302d86de7c3da0ceb69093396792066eb9828b96bf4d410427bca3ab8a59d614cccbd7bb2928ad427c14449612ea6f652d39e5c874bb0855653f3a318d8cd699bfffe260bd2e3e98464f0953306b9b2e6f0fe4902bbe49eb57672de6dd2168c204f3fd93201ad292ce25962a0a344d08e754dbb355c018dad6111faa283da4e9ee48591d07813a89ff3babb8f9fa4514af39070c03c06eae07b182a2212698545a9c525a82b180578d72b7aaf334eac356ed5458926dc5461fa158a7aac28d974297293c9c16f4a1eacc6e1a1518ac8c42795356038627131628727a446bd98d8980dcad10c492589b62d1a116dea4cc5fc6b333d9ce0d4bb76e40bd1841960f67ac52ed6019c1ead8740545a8a7413b609c8ac9a7c4dfc0777b74f88b59be3379b6f9e82e4453bc194324cc404f504bab8432199198f251e9f1315e25d536abaf3b7b0366e6dd2c5f8ba30685b1e530ef61f236337b2d4aff0dcea74836c0a28143d5314789175e961a378acb9191602aa4eb15c10c33e45302b3881abe163b9a13b18a950428358d7d7e8b02d302db3e06455c6aedb1f1924a93962baf7a9b74a07340382bf362b717d767568d1f74a58f3e9137e2963b82a4fe83574fc3123259da1687f29827baeaf454d7109caaef0c0e9fd336000f4e59d22b236012accd4bf0f6b8513af51f4c4d83fb7ab51af248a30e3e57e6290ba1949441fca4a3e56f9722b949daa58019c529408cbdb9e318bbbfc7e3f1dd6ece1c67b834a6a3dfd34b5ac1bc2c97451d3676aeab41a86aae588f8e2319310b0794ba9059cf9160be538d42e1eef1b8972c9c69a3e280e689a9c70086c1935abb21f0320cf3156e76307e63d449d3eb824726495e957a250cda947e888d3f1b39b5b1e4a1b65e2bf260144e7e4ebff8a7a8d6727a1343758fec26359d699d64b7befc07e96cc2cb2067028aa97608309b9dd3f1c6cdd9ab6930af0e72075ac9d4fea498bf5f1478a3225eac0a75646118def8b79448aa671e1d2fd690dd6e48da852c827bfa7ae3382906111db00f4aea12dc157884b1e5c447f4c726ff42a6a1fe7eba93df0fb744a335bfceaf739bb34c87d92cc00b8139c839907e8fea46e8c16febce1400411c4557d6bc95eca9dcd8217054c0f91d33295ed0e8cf32cfb7878ae27828cb39475b7954107ba4a3eca8ab8945161f5823f23d5b402d965ff95434edffb34a2d397709d0c2619a076ff0da97734863a1e93fd8334394b15f508ad28007821f312ef508d8d244a6723005f60134ed61d25e1bf1ad30d028a", "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"})
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x402)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000f40), 0x38e, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x80)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000022c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_POLICE={0x50, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x824, 0x2, [@TCA_FW_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0x200, 0x7, 0x3, 0x800, 0x800000, 0x8000, 0x4, 0x9, 0x80, 0x1, 0xfffffffc, 0xa, 0x3, 0x401, 0xc1, 0xffffffff, 0x1, 0x101, 0x0, 0x42e, 0x3, 0x2, 0x7, 0x10000, 0x7fffffff, 0x1, 0x9, 0x8, 0xf310, 0x2, 0x4, 0xc, 0x9d, 0x5, 0x25d, 0x25e, 0x6, 0x1, 0x6, 0x7, 0x100, 0x98c9, 0x5, 0x8, 0x3, 0xff, 0x800, 0x2, 0xfffffe00, 0x1, 0x1, 0x8fed, 0x9, 0xde, 0x31e, 0x5, 0x304d, 0x5, 0x101, 0x400, 0xb, 0x40, 0x0, 0x18b7, 0x8, 0x5, 0xb, 0x7, 0x26bf, 0x1000, 0x1, 0x900000, 0x9, 0x9, 0xeda000, 0x0, 0x7, 0x5, 0x7, 0x0, 0xffffffff, 0x9, 0x280000, 0x968, 0x8007, 0x80000000, 0xe, 0x40, 0xa, 0x6, 0x0, 0xd, 0x6, 0x7, 0x401, 0x310d, 0x0, 0x3ff, 0x7656cc07, 0x80000001, 0x8, 0x2, 0x0, 0xd955, 0x8, 0x9, 0xa, 0xe2, 0x9, 0xfff, 0x80, 0x8, 0x4, 0xeb5, 0x3, 0x1, 0x3, 0x9, 0x65, 0x1, 0xc4, 0x7, 0x101, 0x1, 0xfff, 0x5, 0x94, 0x5, 0x3, 0x4, 0x1000, 0x1, 0x0, 0xbfe, 0x6, 0x8, 0x8, 0x4, 0x6, 0x1, 0x1, 0x7fae, 0x5, 0x7fff, 0x4, 0xf1c2, 0x5, 0x7f, 0xa, 0x2, 0x9, 0xb, 0x0, 0x2, 0x5, 0xb1b, 0x5, 0x2, 0x6, 0x8, 0x2, 0x4, 0x200, 0x9, 0x10, 0x9, 0x4, 0x720615ae, 0x9, 0x0, 0xa, 0x8, 0x9, 0x1, 0x0, 0xbf87e89, 0x4, 0x10001, 0x1000, 0x6, 0x80, 0x9, 0x711, 0x8, 0x9, 0xfa, 0x400, 0x6, 0xffff, 0x8, 0x4, 0x0, 0x8, 0x1, 0x8, 0x2, 0x0, 0x8000, 0xc768, 0x5, 0x7fffffff, 0x0, 0x52a4, 0x5, 0x0, 0x0, 0x6, 0xffff, 0x1, 0x5, 0x4, 0x5, 0x6, 0x200, 0x20b, 0x19, 0xffff6d31, 0x6, 0x1, 0xf, 0xfffffdcc, 0x0, 0x6, 0xfff, 0x9, 0xb6a, 0x7ff, 0x2, 0x0, 0x8, 0x12, 0x0, 0x7, 0x40000, 0x2, 0x0, 0x1, 0x2, 0x4, 0x9d0, 0x9, 0x8001, 0x4, 0x0, 0x4, 0x5, 0xb, 0x9, 0xffffff81, 0x9, 0x3, 0x2, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x401, 0xfffffffc, 0x9, 0x800, 0x800, 0x1, 0x8, 0x5, 0x3, 0x3, 0x9e, 0x9, 0x3aaf, 0x4, 0x5, 0x9a7f, 0x7a63, 0x4, 0x5, 0x1, 0x7, 0x684, 0x9, 0x4, 0x7, 0x7fff, 0x9, 0x2, 0x1ff, 0x7f, 0x52, 0x4, 0x5435, 0x39, 0x0, 0x6, 0x6, 0x7f, 0xfffffffb, 0x4, 0xdd49, 0x8, 0xfffffffa, 0x20f9, 0x9, 0xd, 0x6, 0x40, 0x7fff, 0x4, 0x6, 0x4, 0x7f, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7ff, 0x5, 0x0, 0x6, 0x3, 0x20, 0x7, 0x9, 0x2, 0x40, 0x1, 0x3e14, 0x400, 0x9, 0x4000, 0xb3a, 0x8, 0x3, 0x8, 0x2cd, 0x8, 0x200, 0x4, 0x7, 0x7ff, 0x800, 0x1c9f, 0xffffff01, 0xf0e9, 0x3b0e, 0xfff, 0x1ff, 0x7, 0xce, 0x4, 0xa, 0x3, 0x7, 0x7, 0x4, 0x4, 0x1000, 0xd, 0x4, 0x3, 0x5, 0xc4, 0xa, 0xaa, 0xd, 0x607, 0x10001, 0x7, 0x3, 0x400, 0x63f2, 0x4, 0x2, 0x2, 0x2, 0x38c, 0x8, 0x9be, 0x40, 0x2, 0x9, 0x0, 0x3, 0x3, 0x1e81, 0xdd9, 0x5b27, 0xfffffffc, 0x1, 0x6, 0x1, 0x0, 0x1, 0x2, 0x4, 0x4, 0xe475, 0x8, 0x5, 0x0, 0x8, 0x0, 0x4, 0xbf, 0x8000, 0x1, 0xfffffff2, 0x10c0, 0x9, 0x7, 0x3ff, 0x1, 0x5, 0x81, 0x4, 0x80, 0xffff, 0x9, 0x0, 0x1, 0x2e, 0x7, 0x10000, 0x8, 0x7, 0x1800000, 0x0, 0x4, 0xd, 0x40000, 0x6d2, 0x174b, 0x2, 0x2, 0xc3, 0x0, 0x4, 0x7, 0x4, 0x10000, 0x3ff, 0x1ff, 0x5, 0xfffffffc, 0x5, 0x3, 0xb4, 0x9b, 0x767, 0x37eab7d1, 0x1, 0xfffffffc, 0x0, 0x8, 0x2, 0x7f, 0xfff, 0x100, 0xfff, 0x1, 0xfffffeff, 0x0, 0x3, 0xd, 0xdd, 0xffffff4a, 0x0, 0x3, 0xba8, 0x1, 0x7fffffff, 0xf, 0x8, 0x4, 0x4, 0x5, 0x2, 0x2, 0x8, 0x0, 0x3d7151ae, 0x4b, 0x5e5, 0x3, 0x10001, 0x7ff, 0x36, 0x7, 0x3, 0x8, 0x9b89, 0x8, 0x3, 0x888a, 0xa01, 0x1, 0x14000, 0x3, 0x2b, 0x514, 0x7, 0x7, 0x4, 0x6, 0x2e315a6d, 0x1, 0x1ff, 0x8000, 0x2, 0x8, 0x7, 0x1964005c]}]}, @TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socket$inet6(0x10, 0x2, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x15)
memfd_create(&(0x7f0000000f40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89*`\xf3\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9m\xe94 \f-\xebNv\x04\xa2Z\x0f\x0e^\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00 \x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x84\xa8\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0&\x8a\x18\xdfH\x80\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x05\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\b\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15>\x8fQ\xc2\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x9b 1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x00p+sh\xf5\xd3\x86i\x01>U\x9d\bT\xcd\xa2\xea\x9c\xec\xea\xf2\'\x8a\x89\x10=\x8eklgW\x8fEOr\xa1\xee\xec\xed1\xa6\xfev\r\x16\x0e\xae\xe6[\xf7p\xd8\xc2\xa5\xa0\xed\x8e\xcc\xfd\xf2*\xc1\x9eD\x8b3Q\xd15\x9f\xf8/ \xa5\x05\xf486A\xc6\xc0Pq;\xeb\xa5\a+\x8d\xed\xb2\xf7\xd4Kd\x0f\x1d_\x96\x80\xfd\xf1i\"\x13\xf1\x19\xf0\xc8\xa6\xd5d&\rx\x90\xa8_\x15g`\xf6\xa0\x85\xa6\xeb\a7\xd8]l\x0f[4]&(b\x12;Y\x04\xa7\xb2E\t[\xf7\xe1\x04\xed\xbd\xa4\xbc\x9a\x8a\xb9q\x86\x88\xaf\xaeK6\xa5\xbb\xd6\x81\x04p\x10\xe8\x80\xeb\x0fM\xae\xed\\L\xf8\xb0/\x0e;\x97\xff\xff\xff\xff\xff\xff\xff\x7f\xf2.\xef\xa8\xfd\r\x84\x80\xf8Yv\xc4\xcb\x00Rb\x0e(\xa3\xcf$\xd8\xd3vqG>\x05Z\xb2\xd0\xf6\x8c\xf77\xf8\x1f\x99\x18wZ\x1e\n\xbd\xb9\xa1\xe4H\xea\xab\x15\x1f\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8e\xe5U\x87H\xc7~\x952 \x1b\xeb\xd8\xff\x17C\xd4/I\x82N\xea\x99k\x9e\x91G\x01\x01\xe7NX\x15%>\xdc\xd6\x85\r\xf2\xc6\x0f\x18wk\xd9\x83\"\x1f\x0f\t\xd0D\x9e\xdf\'\xea#\xcc$V\xfa\xb8%\x0f\x8b\xa2\xa16l\xf626u\xc4\xf7y\xec5\xce\xd9\xe5\xba\x1e\xfb\xc3\xbe\xb0`\x87\x99z\x1b\xcc&\x8d\xf3\x81\x8d\xab\xd7\xa0+\xb1\xd5\xa8c\x8a/1\xc0\xach\xd04se!k\xed\xae\xe0\xa3\x1by\"b\"c\xa25CA\x17\xedc7\x80\xad(S;\x8f2\x00\fS\xc7\xf5eS\xc0\xddc7\x86\x9a\x90nvI\x04g\xab\x88\xf3\xb5\xfaVZ\x02\xf6\x1b\xf2\x9d\b\xe5m*\xe5\x87\xfe\xb7o\x19j\xf5\xd9\x9f~\xe6)\x92h\xfd\xb4\x0e\xea\xfd\x0e\xfc\x02\xce=\xcc\xfc3j\x81\xbb\xfc*h\xf7\xd1\xb1`,x\xb3\x13F\x18\xbb\xa1I\b\xc8\xa5M\x14+_\x8f\xe3\xa3=\x8b}\x85\xf0\x9djE\x99\xfd\x1e\xa0\xc8\xcc\x94\x00\x02\xb9\xbaB\xd1rq\xf7\xe4\xee\x9a\xa1\x88\xa8g\xd0\xf5R\xae\xffne\x87\x1b\x1e\xea\x94\xf8\x98\xbf\xef\x8b\xaby\x8d\xe1\xf7\xb8E~Ou\xc7\xae\x96j\xff\xd3\xe1\xa9\x13\xa2\x061R<1]\xb75\x91\xfa\xc2\a\xc1\xf18\xc3\x977\xaf\x01vzl\xc3\xefex\xc8r\aE\x1d\x11Ld\xa6\xf0\x03\xb2.\xa1;\x05U\xab&\x1bo\x1b\n\x96\x93FO%H\x1fr\xe8\xde&\x95\xd7d\x8d\xde\xa8\xaa\xf3\xc8\x99M\x90V,f\xc1\x9d\x95y\x12\x84\xddw\x87y\x80\x9f/', 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

2m53.846068433s ago: executing program 33 (id=771):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0x9, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x4, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4000, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0x2, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x6, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x5, 0x3, 0x3, 0xa, 0xfd, 0x5, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0x10e000, 0x9}, 0xc000000b, 0x0, 0x5000, 0x20a7, 0x9, 0x0, 0x80a0000, [0x1, 0x401, 0x0, 0xc5]})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000bc0)={0x2, 0x0, @ioapic={0x33325000, 0xb, 0xa, 0xfffffffc, 0x0, [{0xc, 0x6, 0x7, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0xf8}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x6, '\x00', 0xa8}, {0x2, 0x9, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0x8, '\x00', 0x1}, {0x5, 0x7, 0x6, '\x00', 0x4}, {0x2, 0xd, 0x15, '\x00', 0x8}, {0x6, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x19, '\x00', 0x5}, {0x7, 0x2, 0x4, '\x00', 0x7}, {0xef, 0x6, 0x9, '\x00', 0x8}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0xfe, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x6, 0xfa}]}})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@hyper})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000180)={@hyper, 0xffffffff})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f0000000000))
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x141a42, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x16)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000300)=ANY=[@ANYBLOB="000d00000000239c35102b54985096ae8b56eb54d8b6f22d17dd60b995166d8fa76db208a390a464d018c685d9cf1a611a3ce8e65810adcb0d1865727baccb9df4e3d4fa19f5b991564a5f75f20896d13afa5a86b5bb9c3c2e652208d7ab1693a7a808c0f0cbd83ff09dbb5693f99185e27541f06e3f11f3054d6faf2702be1d5188ff82da0f868b8d4d98c3c58e94b76e475a6e835f3fb4915e01c3373dc88502b2ba385a33a56cc7"])
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4)
sendfile(r6, r0, 0x0, 0xffffffff)

2m30.110882663s ago: executing program 4 (id=1097):
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) (async)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12200, 0x0)
getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x4)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, r0, 0x10000000)

2m30.110542704s ago: executing program 4 (id=1098):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, <r1=>0x0}, 0x2020) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002080)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000002180)=0xe8)
lstat(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
write$FUSE_ATTR(r0, &(0x7f0000002280)={0x78, 0x2f, r1, {0x5bb0, 0x1, 0x0, {0x6, 0x8, 0x3, 0x8001, 0xfffffffffffffffd, 0x9, 0x9, 0x1ea80, 0x1, 0xc000, 0x264f8000, r2, r3, 0x1, 0x800}}}, 0x78) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000002300)={<r5=>0x0, 0x2, 0x20}, &(0x7f0000002340)=0xc)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002380)={<r6=>r5, 0x60, "e475335e9e8ab543072da18859e845734cd2844b4cb246e4b216d1aa22b2f667b3e675811769132b6863796542bef21ddf2c63b071172f2c728200fee27380d69c93a2d00d84dc661a8180ab18768f717847bd139043c59826700c5e01d0293d"}, &(0x7f0000002400)=0x68) (async, rerun: 64)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000002440), 0x4)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000002480)=0xa) (async, rerun: 32)
close_range(r0, r7, 0x2) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000024c0)={r6, 0x9}, &(0x7f0000002500)=0x8) (async)
shutdown(r7, 0x1) (async, rerun: 64)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (rerun: 64)
write$FUSE_NOTIFY_STORE(r8, &(0x7f0000002580)={0x2b, 0x4, 0x0, {0x4, 0x1, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) (async)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xc66f) (async)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000025c0)={0x5, 0x2}) (async, rerun: 32)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000002600)={0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x20) (rerun: 32)
r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000002640)='.pending_reads\x00', 0x84001, 0x10) (async)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000026c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x1c, r10, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x802) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x20, 0x1406, 0x4, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x4)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000028c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async, rerun: 64)
ioctl$KVM_SET_FPU(r9, 0x41a0ae8d, &(0x7f0000002940)={'\x00', 0x3, 0x6d8, 0x9, 0x0, 0x0, 0x100000, 0xeeee8000, '\x00', 0x7ff}) (async, rerun: 64)
sendmsg$AUDIT_TRIM(r9, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x10, 0x3f6, 0x800, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20004011) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000002c00))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c40)='/sys/power/pm_wakeup_irq', 0x800, 0x10) (async)
flock(r7, 0x1) (async)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000002d40), &(0x7f0000002d80)=@md5={0x1, "87b750d414e4b2dcb12d38b5f84a7aed"}, 0x11, 0x3)

2m30.044557352s ago: executing program 4 (id=1100):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_loaded', 0x80, 0x3)
read$msr(r0, &(0x7f0000000280)=""/210, 0xd2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}}, 0x10004004)

2m29.990538197s ago: executing program 4 (id=1103):
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1e, {0x2, 0x0, @broadcast}, 'team_slave_0\x00'})
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write(r0, &(0x7f0000000840)="cdc966c80de75cceae1e6e8b524219ef983f7a5f8ae8d92c36e72c548b0b32e6ce5bfea741f2fbff34df5619106929de1376af78890010787befb353cacd588726adb8078b763212bcf38806540b6b044eb64277669d5f9aa19627c92077c80b6a3ce5e579eddd8f21a5bfb90a5ba28d3eb7289942ffa4e95a54e7715f3a46108bf1d03da3ad81d2ab619783acfc0e641b4e62c9dfc13071ae3e2ee84c7ac76a59287634e98388ff01deea4270619e3a2e4ff44e0ed0377ad1bbb6dda4caa730db9b531bf6e29fdccfeffae62d4a470aaab7283b0a06e4498be6226c4e5f0ad9645af07c146d0979cf08ae63a23073ff14f2b408d312de9ea2fd69564b2ad08ce392dd544b6007d12e304bdcb3ef2dc3c8fdfc8ca3fc3c5836744fc2dff296f6628c617f60a95d93018e6de00399916f146f47d646a1e0e1192bd73734283ea081897da9e4f988d565ec7e8f29847cfc454a6f5d9e7042512ab5f49c038c70fb207bc9980c86a510d4e78a95d7b5e7348d43a8445050ba5f19c609a5b87a6eeb0fbdfeb04278bc7e79707c6ad06bd44ed3d55438e12ee3e96dad7fa66de4169af0964c78af7ddffded7908d77591f75d8cd41eaf018f798c8e74f5762ea32f19065caccd4b149520646e467e19ef579bc0143623d47bd089b0814ea30e54f4aedc9eba71d007cd711d04b449325c347b1d8925212d9138b6b75c6906cd5a68e01a9c97d7709b5c063e9d11d09537d71064706a1ce43f14bd5ba9ebd3bcc732587efdb17704de04605ffe49643625f96ec7a1648b853b242f6afd2ae2d1f9c4637dd00002361c0d66dd071127461299925e542db104085fd21a43ea41bd0b7549c5ab127d45fb3ff06f984047de1d7b093b9adb5481e5b2dbf7013c16a0099cb5908bebe9364b4fef3e6fe01a0fe2588262bf3588b053f1386e2cc3463729f2fbfb8bdcdfaf13419fdcf6b4d3b2d9e96550320db3160e1881931542284e3e9c629971ba979cdf1f9b324d2dffd2d1316ed12ff6eecceffdef744ce0a5b95f00e28c9151dad0554e7beb4704fa9f1cb80ffc3f68993200787cb04ced01c3f9c68da394bd0fa5b5903a95a19eda686c95972f0eeba6a7a7152ec1f57ab59b3d67b3abb78c61ff841be4ad558f191d04d1dc10a739bc7de9279047826a98c340fe5ec8b81d79f98eb5f4371861cc1344f9d95532d9d41515bbaf63475e5d52169f7d243ba878120cd98e03661f9e31ebce3e46c238b67981537665bf5b1f397513de969c1a3cfedf78b46a65e23fb03278b024d761318a172d691a15a615434e83d90bdf681a8138285624edbbeccbb32637456be97b50f1656b55d193b85f23d509e11acb193abc1fec691eab19de36732aa541b50ae8573f38623bf3e57940bc412bcfe03967896e7760f0b6b1118daed3b7e1c93309b43fbc296aee71deb6b7a9a549b8171712fe66f5b8236292bb575262c243bf9e1e411eaf8b18cd7e98859bf3dcdc36ba3dc87a9d087394a5f2d827c7e2da60ddcf0ecb65fbf99d6d11b2ae7bca190ac34b5a4594fbcb9cf4f7bb1ce7eeda4a0a31456c50a01f2f277b241375ed09496f711bfa4d7518f394292703ed8e588db826c93437ef39dc6563444d3cf8393c947ee2b374af23914533e4da7ffa279f77220ee3b19548b3397496f58125d9984e977d0b702c3ded28dde0e12d39916c22e10b439a0f2f79f841fdebe257e92f7690e2d504951872d5db2c10a4bc6e4dffec9816eea5344b237aeb03b5902bec5637467da7425602c8d1c31e006158908c59c2dda42437edda0388aa5f94c178474a541cb2de3ea04bc81b08dcb3fcce262f93917c38e172a02f1df0c41d5ae09fbeba736bdc8aea9eaf0657cbeacba926b82c3dc67dad2df3a6d565b819bcabb62b4afa1369f598ba2621afede3644b0b3bc70b9281fd8f96bb855fb0a5fd7fff9a6cdb0eee7b879bbc1254216193b1f1859fddefc82bb331fbddd3bb7aef5712d30a768ac60856e1374054f575b5b626bc0e2936de47e7d14492ac939c74202e2d1645fc13625bf7324deb275af9eeae0a47e152cf8a8f04c75a041dd6b2a379fc6f0fa9baae6065c77f44ae1a0d63b1ca0647945fb552e7e9b9c2acbff86c2c78a1027cd0e4e47e9b2a10da17c2b50483a161934e579a504babcffe687bdac9b4b0e6ca601102a1003bcd16490f1169acb6a9ed46969ec320d1fc22a7cd378a451cfcb02752bfa81459c33179274238def61caf5fc2032b5bf13227ab233232952f8d2d7d2ebfbaa17a8c46824dc55ff6e7746501dbd44f71cfc6f8a5fb7b5e09a2bcc3b5e3904aed0ee822f4649c9e41b81b6626bbfa1f21570630fd984eeeb9ff3ce5635cd0a60923a5b596dacc27209f70718364756794e5bc1e0e8078028001a225017b3cde8d607a9b6de77e52749a66e61b4289d61c45c3d931a4695fca0494566ac21eb92ccb489275646aca4231a7fee29714c3a915bc3de757a1e1937e7bf7b7f1fa85cbc339bdd45f708f3b5b5297c4841e591491ab36b4b0114d818e128dd03c7f77312cd80990d59dbbd4f84af6f9d909439eec1e24ff7886a24b82ba3e06b86b79f03076b990f5cd24225c0ba1e573753a94170f545c657d7a7e5b9d5e06628ad5ef7af1937f3caf8cf572d4b1656a08c2424bd92107fa940fb3129a52a3a2279c6a79ac7af57421abf19b1ef5a52884bf68ded2057cd5035a58b524f8f1115aa9267823f0fba7be061bf7c6b9939050777b6edcbe724291f7721bb3da671c1e9b8943d39f825a8bb4c98c9423229111f764ec111f98ece619bf50a85562a3de45e87067246ce295eeffa7f35d811df41a96ff87c282cd763ed5b9bb6d0638784b04fd0a32f29e7d5eefbdb4593e9ec23e187857d632f58d9da5815766f9207c50a600b9062fa25e1b9563e1e1185f4147d13549afbb334e9a2ae3a104a4593fd0c3e29a3932622a51a893161af458a05433b3dd35b1fd2245c525d8dc86caf11164a4f226171269011bdfeeecb6a0b2d580be78590f5905643cdb3c34c2670c09fe10612331196341c65c00e0e84166476e679b54472cff67c7ee4b454764d098192b0f4b2dbf0de150746483baf43db59a589fcf142eda5336a82443e8524af2f108b55e0c38a187dfe680b5b63b6b906b503c799bfeb89456864f4907b2dcff054d0f0684358b28d1dbb6cf105cc3ff9deea065bcbad04fed3b8d56b952c4fd3e3bb51d9d4ef597de452b3fd27ca00c31c01c19b26aa0fe6092e2b6d47b7d509f9214c4bdb04802380c6773a982f6989569d9eaaa980228202aba4ba436196d131ac8bf1326fd91cbd2e1849bb81de8e67f1f8190d444bdcf238ace0cefde6c186d71b194218d5da117bc9d60a42306a210daa6d62860eb902e6dbf293617e40259c7082eac14da5d86d1360eccaaaaf51c35619bb7bbaec3819b069954bb5677e4202c49145122c3d28f30b8bd9f64b029806cb1ab3a8c3deed36ae544c92c2f8cec1e0bc3bacfc50a5a8aaef1158d3dcb29bc58a048559a79382357ddd7d60917ca32edbda9aa30757cf4718c7244ddd8538bdc8890e3ddf6d3a8e16b06e977c0df9c0c7bc1eb46b3f520e709c93f6c1afa285f2e4667b29120925cf118295004609f733d1e6a8af4b60447e672e23db1b2adb1a4ca0752e162c91687c7df09fd8e46cc408702d014873c699851b06d9bdc4a8d8a64d24a8640e8bd140421e6f0b1111f0e32347a837dc96dce2ef6e56f43a3a722bf32def97eb5bddcf4c9065b170a493544f54f710f851e6a7ee9194c08833c7d473fbdfe8b76904d9d6d8c8f5567c3c6096342da9c8f5e3aa8ee09551ad12a6b5a16479cae15faaace0409a24f977f1bac566c2cdb8a0b981a49eaa8e6fb771128f7aa023e1df1bafa139d9fee5bd5bce20eb29a5a2064bd25453da56b115fed2471987bbbc35942248c70ed24804bea6ae15842798d9c1e20a142178ff3cae6cef7946bf7de7231fcbb482179066001b6264d3246d6cdc781837a8c7dfb9d2cd275f1da3dbeb723e678304cb736e23ccc9ce209b07326d98764ceaa624b009d90743e5d6a418f2d968feb23b879998221431875c612645d2035e20209647cc00d92c65d3a5244ea1fcd89f9340054ef24f73f466c2738b4758a33df46c1a34c5d642009bcb3bc38d79203e10c1ca93a0e12119f82272fae3583edac11e63b0883d887cca8a87e3ca7c15b7b07aff3b7c8fb2e033a0fba1eb07014e44926bfdf073c84d9eb04c1237c1da2b2b015a88ceb867e7c384ce99c64ef2fd3018a13906ba68f4da1f47420149d2a5dd2b526b00fe84428ac7480f8a7d5b5f05ad52c8676a7d02bad5fd2664a4f2d2e359bb785b59402eef6a5cf88bf398672ded2a7a85650a085569eb4a49d8a9b44be6bb947d703ea6dcfaf4a2967c45083d893be7220aa92b5b192de2cc3fe25ad466ec6c189d728347d524b586d02aae64b18a8e0e9d4d4380722037d87703a42a17da19a2a97867d618138b7cd5c7e3ba6e6a41ef777d8a21083af00937e87c22513022a4e2d78a745254b0ee8452de02c9aa60d0d599951883f3b33cf1b749fbe31f46e3cfe5c04951576ac338d319e1eaed1b3eaa7f5acb9f8ecafe8b6cc2bef925b03d556ae935f0a6e400c9569ab35ed92efcba88409f3c999870af17f843ac5501cf4ad802bdd002f1d0e1ef2442ffc2080c65785f33da71e4efcb0770488d9f1d8dce2d4abb6b8f7ecb035f7132aadace07c6097400ce75fc99b5cd974cdb38e89b708ebfba6bb5cd9eada3007561e58deb86f7ea63028f26fb6d8b27404247d285478ec0b434eb0fecd0515b5a0115495b91d431f12f0834713b52424ecac195e0636071b0fd5ea840101fdb83d3faa74101c72c43b18a41f30fda83672892371bad9808915365d36646128e90d26b0939f8d8ae3e9d453e19ed368e659c51cc85025cf5f64ed9d5c69b11d7e033af10100025b9656da00967abc87659f729df6ab2aed62d4f1ac61391b9612ed92dfb867f55f6a471c4246d2107776c7de27a101dd4807302277cf0bf79e906a76cdd4f47c7928d35c3dd7de6a99f9f323b4e97cf45ac002f8c5cfbf1195c02b47b9f81561bcbfb077db740a53e7a828d2399766fbddd08df684c4b9cb2fdaffe044fa2f46568df01bdb7176143802bd7cce68c7fd972b1ab12199446bc90c4a30aaf4d024a4996b15b4fb4dfa344b5158960a2abb0c39c4e17842819a2702f6945470afa6bc5db9c479880f9c46bc23f7868177fb89417485420ce3818181ca30fc431b4c8f311bf36220358a0f6f58d3e8396ac8c10835342dc0e449bab3fe02a5069c255ed782676a25cda4f4bffba4d51c99867fbd178f91cdf2f9f82d4c4490946d84ccfde583f140e0c1ddbc25f0bd2ee6e09da590932b2a8b00f0a3106eec35fb9a2fd1476c5647ea7f965cc25fe409d351800f3d4a0870640f09b8a7c5d69f9071a014b8eea7ae868b3d8453864b8f4fc3f41cca1fb7e80973fe1c96bbc20540ea04d199277d8eb6384f6a9f4ffd39a7af71338d1f38ea8f685867ffddfd95bf4cf0d5d238001e4abc7051e63b0986d6a4cf5a5262026430450e5ef8fd38136ac1fc182124ab149f5a0ff5b5851d0b799ba16218169d64633fa49cda7bd53ff1f6a1ba6a66f4f8e496f685a5485950bb0858d380ccf12f264a3fb080ad69a257aee7d3f9b97b4175086da65f1861ac3da4406eac6dec6b27ca5c31ffa619e5380b4bbad6bcaec1cb9b2f6ab76fb64b6eee0de13443b956a209abebe3", 0x1000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100b, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x80000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000800)="240000001e005f0214f90408faac4700001e0000010000000000080008000dc00e0000ff", 0x24)

2m29.838715907s ago: executing program 4 (id=1108):
socket$kcm(0x29, 0x2, 0x0)
r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d09000100"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r3, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x380, 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8})
fstat(r5, &(0x7f0000000300))
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f00000000c0)=0xb)
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

2m29.771116978s ago: executing program 4 (id=1112):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x10000000, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}})
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000028c0), 0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="64603d17700f9448e62ef3317996565133605a4f9f7929cb07766f51a757cfa7075d9b2fc0f4546a845312672a777f665245eaf474250099cb75cb05d9730acc9dfdc2bb4a17632767064131b8bfd977469c8e7a98beed2a04921be8697b398b1416ca82adb32418adf92e7f21aae97f8534c278e6ff", @ANYRES8=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x6e1024, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYBLOB="b6c8b40f5e6b6a4c9965bbed6223749d810aa6d027bb84e925afcb369ad027df1711fe3588083d1228", @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="f6f76353f7bbf7bcddf1bfa2ab29fc03adf61dfd6c13aea14e238f973c02d72e0b7d0e4b50096331b09efdf41a3b5200d3ffe7a8e2cb0ce29e389a0f0ac9c85357add39e6c0c72930b20b14a764cafdbc8f027ec8522ed8892290104b07df1d7f6e99559ccacb628f4c50b27"])
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r5, 0xffffff82}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYRES32=r1], 0x30}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x1bbc}, 0x1, 0x0, 0x0, 0x44054}, 0x24048800)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000022a842, 0x0)
r7 = dup(r6)
fadvise64(r7, 0x4, 0x3, 0x1)
setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f00000003c0)=0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x98}}, 0x20)
r9 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}})
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r10, &(0x7f0000000880)={&(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0x40000008}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[], 0xb}, 0x24000000)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000010500001c000000000000ffff0000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2048884)

2m26.631841289s ago: executing program 34 (id=950):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001)
socket$kcm(0x10, 0x400000002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0xc0105b08, &(0x7f0000000040))

2m14.490959705s ago: executing program 35 (id=1112):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x10000000, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}})
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000028c0), 0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="64603d17700f9448e62ef3317996565133605a4f9f7929cb07766f51a757cfa7075d9b2fc0f4546a845312672a777f665245eaf474250099cb75cb05d9730acc9dfdc2bb4a17632767064131b8bfd977469c8e7a98beed2a04921be8697b398b1416ca82adb32418adf92e7f21aae97f8534c278e6ff", @ANYRES8=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x6e1024, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYBLOB="b6c8b40f5e6b6a4c9965bbed6223749d810aa6d027bb84e925afcb369ad027df1711fe3588083d1228", @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="f6f76353f7bbf7bcddf1bfa2ab29fc03adf61dfd6c13aea14e238f973c02d72e0b7d0e4b50096331b09efdf41a3b5200d3ffe7a8e2cb0ce29e389a0f0ac9c85357add39e6c0c72930b20b14a764cafdbc8f027ec8522ed8892290104b07df1d7f6e99559ccacb628f4c50b27"])
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r5, 0xffffff82}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYRES32=r1], 0x30}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x1bbc}, 0x1, 0x0, 0x0, 0x44054}, 0x24048800)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000022a842, 0x0)
r7 = dup(r6)
fadvise64(r7, 0x4, 0x3, 0x1)
setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f00000003c0)=0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x98}}, 0x20)
r9 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}})
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r10, &(0x7f0000000880)={&(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0x40000008}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[], 0xb}, 0x24000000)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000010500001c000000000000ffff0000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2048884)

2m4.869905583s ago: executing program 6 (id=1410):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f00), 0x802, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r1}, './file0/file1\x00'})
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x3d9200, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @rand_addr=0x64010102}}, 0xffff, 0x4}, 0x90)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00') (async)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00')
mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8100, &(0x7f0000000140)={0x78, 0x1, 0x120000, {r3}}, 0x20)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4e725f626c6f536b73e3ffffff0000"]) (async)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4e725f626c6f536b73e3ffffff0000"])

2m4.867991658s ago: executing program 6 (id=1412):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
poll(&(0x7f0000000280)=[{r0, 0x3080}], 0x1, 0x9)
write(r0, &(0x7f00000001c0)="0b0b0bf4a1e476c22225efb8fc4e", 0xe)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c810}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0)

2m4.800825712s ago: executing program 6 (id=1414):
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000500)={0x9, {0x3, 0x0, 0x9, 0xffffe0ff}, {0x9, 0x5, 0xffffbbff, 0x808}, {0x44, 0xa}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001002cbd7000f6dbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000023820000050021"], 0x28}, 0x1, 0x0, 0x0, 0x3000c054}, 0x24000004)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000500)={0x9, {0x3, 0x0, 0x9, 0xffffe0ff}, {0x9, 0x5, 0xffffbbff, 0x808}, {0x44, 0xa}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001002cbd7000f6dbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000023820000050021"], 0x28}, 0x1, 0x0, 0x0, 0x3000c054}, 0x24000004) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket(0x10, 0x803, 0x4) (async)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) (async)

2m4.668021724s ago: executing program 6 (id=1417):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
socket$alg(0x26, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
futex(&(0x7f000000cffc), 0x10d, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r5, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8'])
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
prctl$PR_SCHED_CORE(0x4d, 0x40003, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES16=r5, @ANYBLOB="e3492ffc6af74fff4e49066c445c81ddff131fd699e9dc8024f99e444df827da24918559495e0137fd087f4b5818ec5150cad688d9958fb6840775335650cf771ff040d926236421e0cbe3746762c0dc54894e3903fd80fc563ab3975164eca2fc03718b68843d7188792dc3c19b2d25a7b2e3cf3fdbcc5af9ec104fb4254260c5b713f78fc8ca40fbee48e8a6c41bb86020d22d500df5e74e9bb49694be12565406817f3a07289e237795e234f6457fa80a547f9047acf0852b6c50b1b4a29df6782770dbcf411cb63e1997b7209356f600974527d8debf4942c41f8094"], 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802)
ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000040000005a"])
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x105)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x128540c, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x4010, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x4209, r7, &(0x7f0000000000)={0x7, 0x0, 0x1}, &(0x7f0000000240)=[{}])
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

2m4.609466407s ago: executing program 6 (id=1420):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) (async, rerun: 64)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/116, 0x74}, {&(0x7f00000000c0)=""/229, 0xe5}], 0x2, &(0x7f0000000640)=""/140, 0x8c}}, {{&(0x7f00000002c0)=@llc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)=""/97, 0xfffffffffffffee8}, {&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/180, 0xb4}], 0x4}, 0x7}], 0x2, 0xcb, &(0x7f0000000200)={0x0, 0x3938700}) (rerun: 64)

2m4.167065064s ago: executing program 6 (id=1426):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
poll(&(0x7f0000000180)=[{r0, 0x1009}], 0x1, 0x3)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000200)={<r2=>0x0, <r3=>0x0}, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x40001043, r2, 0x0)
vmsplice(r2, &(0x7f0000000700)=[{&(0x7f0000000500)="6bf4", 0x2}], 0x1, 0x1)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x80, 0x800}}, 0x50)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={r5, 0x4, 0xe3b, 0xcd66})
r8 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r8, 0x2)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x1}, 0x10)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000022c0)={0x0, 0xff90})

2m4.075544819s ago: executing program 36 (id=1426):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
poll(&(0x7f0000000180)=[{r0, 0x1009}], 0x1, 0x3)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000200)={<r2=>0x0, <r3=>0x0}, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x40001043, r2, 0x0)
vmsplice(r2, &(0x7f0000000700)=[{&(0x7f0000000500)="6bf4", 0x2}], 0x1, 0x1)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x80, 0x800}}, 0x50)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={r5, 0x4, 0xe3b, 0xcd66})
r8 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r8, 0x2)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x1}, 0x10)
ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000022c0)={0x0, 0xff90})

1m20.109627822s ago: executing program 8 (id=1945):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000300)={'team_slave_1\x00', @ifru_ivalue=0x101}) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x24008000) (async)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r4, 0x20, 0xf, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x67e0a78114137122)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m20.040477597s ago: executing program 8 (id=1946):
ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, '\x00', {0x0, @reserved}})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x9, 0xff, 0x5, 0x7fff}, {0x0, 0x5, 0x98, 0x10}, {0x10, 0x9, 0x8, 0x1f}, {0x1, 0xc0, 0x9, 0x20}, {0xb420, 0xa, 0x7, 0x2}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r1, {0xffffffff}}, './file0\x00'})
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@can_newroute={0x14c, 0x18, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1d, 0x1, 0x8}, [@CGW_CS_CRC8={0x11e, 0x6, {0x4f, 0x1d, 0x27, 0x7f, 0x5, "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", 0x1, "9c59d4b8ac257cb9086a6bddd8d2b3eaf07c8550"}}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "667e800a4fb2476d"}, 0xa}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0x0, 0x1}, 0x6)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x134, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2b, 0x5b, "e754c42425325cb81e9299748325e60d4800b24adc660b5ac246fdd2fadbb771e769583ee61289"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xb9, 0x5b, "102184c03c3efab115516ce90876ebe60ad0884bbcde295fee9f73f7340cc8f2280d47d3f97e918b73f583cc70b3a783a53ecd84b7f9048c90834a41e7f2f089c970a0a1855d042ab71ff6076210b1a308e9b544868ec2742d72c74380546a9f41ab2b3e33e314382b48f11b7ecf09ccc8f6853826acc18695e515cc20e88bfc3ee1827fdaf000c4cf070294ab058d8d6b3076cbf5cb226fb079f62326b4ded6866f0f2c160c0c6efdf6be95b0522b245fc730b0a2"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x134}}, 0x4000)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f00000006c0)=""/195, &(0x7f00000007c0)=0xc3)
r7 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000000840)={0x4fe, 0xc, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000008040)=""/86, &(0x7f00000080c0)=0x56)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000008100))
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000008180)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0x0, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000008140), {[{{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1, 0x4, 0x3, 0x4, 0x4], 0x5, 0x4}, {0x4, [0x6, 0x0, 0x3, 0x4, 0x6], 0x2, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x6, 0x1, 0x7, 0x7], 0x0, 0x6}, {0xffffffffffffffff, [0x5, 0x0, 0x2, 0x6, 0x6, 0x4], 0x6, 0x6}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x6, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 0xf001, 0x4, [0x30, 0x3a, 0x7, 0x1, 0x37, 0x3c, 0x22, 0x7, 0x1f, 0x0, 0x30, 0x2c, 0x14, 0x14, 0x13, 0x28], 0x2, 0xa37e, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000008580)={<r8=>0x0}, &(0x7f00000085c0)=0xc)
write$cgroup_pid(r0, &(0x7f0000008600)=r8, 0x12)
preadv2(r0, &(0x7f0000009ac0)=[{&(0x7f0000008640)=""/214, 0xd6}, {&(0x7f0000008740)=""/132, 0x84}, {&(0x7f0000008800)=""/207, 0xcf}, {&(0x7f0000008900)=""/64, 0x40}, {&(0x7f0000008940)=""/102, 0x66}, {&(0x7f00000089c0)=""/117, 0x75}, {&(0x7f0000008a40)=""/10, 0xa}, {&(0x7f0000008a80)=""/4096, 0x1000}, {&(0x7f0000009a80)=""/57, 0x39}], 0x9, 0x38, 0x6b5c, 0xc)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000009bc0), r2)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000009c80)={&(0x7f0000009b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000009c40)={&(0x7f0000009c00)={0x28, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x50)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000009d00), r2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000009dc0)={&(0x7f0000009cc0), 0xc, &(0x7f0000009d80)={&(0x7f0000009d40)={0x14, r10, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x4040010)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000009e00), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000009e40)=0x5)
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000009e80)=0x55)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000009f80)={&(0x7f0000009ec0)={0x10, 0x0, 0x0, 0x50000410}, 0xc, &(0x7f0000009f40)={&(0x7f0000009f00)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x18010)
socket$nl_generic(0x10, 0x3, 0x10)

1m19.017058781s ago: executing program 8 (id=1950):
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7)
socket$inet6(0xa, 0xa, 0xc)

1m18.950847348s ago: executing program 8 (id=1951):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x80, 0x84)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc)
syz_open_dev$dri(&(0x7f00000001c0), 0xfffffffffffffff7, 0x88001)

1m18.950642541s ago: executing program 8 (id=1952):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x80000000})
mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) (async)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async)
mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x80000000}) (async)

1m18.881067293s ago: executing program 8 (id=1953):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc3, 0xc})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1m4.696944529s ago: executing program 1 (id=2129):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xb}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x7c2)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
syz_emit_ethernet(0x10b, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x23, 0xfd, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}, {"08885c11471639470b7502b8f1228cd852aa9f56b6466782947133b30434f23a0a3cf35004309516027f1ac7de42c07d82887749cad5c4c89f6960bca52f55f441ac9518332083400d3175fa25b96723f8936926d8d22988c7c9dc055543518a5a65e9ff73aa951befc8bf6075cd4e8aa974ad91e79e00e4468c870a4dc59292b4b7f3ae05251d312335c78783f00c6fa5246a265a0a0d23ebd7c877827e6adbfb882b5e2d1241eb08cb44bc361080e024c978158188ac5952497e5cc9d9e2df3e960ea188fdf4930810ae5f9554c9b787"}}}}}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier')

1m4.650636702s ago: executing program 1 (id=2130):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0xc}}}}, [@NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x509}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x85)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fdff0000", @ANYRES16=r6, @ANYBLOB="810626bd7000ffdbdf258800000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc804}, 0x20000800)
fcntl$setlease(r0, 0x403, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0)
read$FUSE(r8, &(0x7f00000009c0)={0x2020}, 0x2020)
fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000080)='.!&\xdd&/\x00', 0x0, r1)
sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x10}, 0x21)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)

1m4.650148495s ago: executing program 1 (id=2131):
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async)
sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400005}, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syz_tun\x00', 0x1000}) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_INIT(r7, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x24000012, 0x2, 0x6790, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, 0x2}}, 0x50) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000340)=0x12, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f0000000380))
r10 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@rnullb, r2, &(0x7f0000000040))
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x21, &(0x7f0000000080)=ANY=[@ANYBLOB="92737271756f74772cdd"])

1m4.566023289s ago: executing program 1 (id=2136):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async)
r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18) (async)
close_range(r0, r0, 0x0) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 64)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="2600000000e3000000001700", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async, rerun: 64)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x1, 0x20000800, 0x4000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) (async, rerun: 64)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32)
r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) (rerun: 32)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) (rerun: 64)
io_uring_enter(r3, 0x0, 0x1000002, 0x37, 0x0, 0x0)
inotify_init()
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async, rerun: 64)
r6 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64)
sendmsg$netlink(r6, &(0x7f0000000480), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async)
listen(r5, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64)
accept(r4, 0x0, 0x0) (rerun: 64)

1m4.450758568s ago: executing program 1 (id=2139):
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @multicast, 'ip6gre0\x00'}}, 0x1e)
mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0])

1m4.449909689s ago: executing program 1 (id=2141):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x0, 0x24, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
unshare(0x22020600)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="001a000600000000000000ff0000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
close_range(r5, 0xffffffffffffffff, 0x2)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x28c81, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
renameat2(r8, &(0x7f0000000540)='./file0\x00', r8, &(0x7f0000000200)='./bus\x00', 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x83, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r10, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r11, 0x5, 0x3, 0x0, 0x1, [<r12=>0x0], [0x4, 0x7, 0x7b], [0x7, 0x80000002, 0x2, 0x7], [0x0, 0x0, 0x1, 0xfff]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000300)={0x3ff, 0x1, 0x1})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000080)={r12})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000180)={r12, 0x80000})
ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=r3], 0x54}}, 0x4000054)

1m3.885411208s ago: executing program 37 (id=1953):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc3, 0xc})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

49.443476444s ago: executing program 38 (id=2141):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x0, 0x24, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
unshare(0x22020600)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="001a000600000000000000ff0000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
close_range(r5, 0xffffffffffffffff, 0x2)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x28c81, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
renameat2(r8, &(0x7f0000000540)='./file0\x00', r8, &(0x7f0000000200)='./bus\x00', 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x83, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r10, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r11, 0x5, 0x3, 0x0, 0x1, [<r12=>0x0], [0x4, 0x7, 0x7b], [0x7, 0x80000002, 0x2, 0x7], [0x0, 0x0, 0x1, 0xfff]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000300)={0x3ff, 0x1, 0x1})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000080)={r12})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000180)={r12, 0x80000})
ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=r3], 0x54}}, 0x4000054)

47.700206163s ago: executing program 7 (id=2380):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000003000/0x1000)=nil, 0x1000)
socket(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
dup(r1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x3e0000}], 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x80cd}, {r2}, {0xffffffffffffffff, 0xc000}, {r3, 0xa000}, {0xffffffffffffffff, 0x1041}], 0x5, 0x7)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x89727a31546dcc44, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@val={0x88a8, 0x2, 0x1, 0x6}, {0x8100, 0x3, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @remote, @remote, @remote}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
syz_extract_tcp_res(&(0x7f0000000440), 0xf3, 0x8)
sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x28008000, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

47.650342396s ago: executing program 7 (id=2382):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="273717e1"], 0x4)
close(r0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x1000)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006500)=ANY=[], 0xfffffdef}}, 0x10)
sendmmsg(r7, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="0e27", 0x2}], 0x1}}], 0x1, 0x4044044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0)

46.77027377s ago: executing program 7 (id=2389):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @mcast2, 0x2}, r1}}, 0xfffffe6f)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r1, 0x8}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r1}}, 0x120)
syz_80211_inject_frame(&(0x7f0000000180)=@device_b, 0x0, 0xfffffe44)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @initial, @broadcast, @random="73ee8fc779cf", {0x8, 0x1}, "", @value={0xa, 0x0, 0x1, 0x1, 0x3}}, @a_msdu=[{@broadcast, @device_b, 0xae, "b97ba9ba807addf296354d7d09a9531a829ea4d3c045ff9be21b1c3956e0c342f78e683b5ad7652e80a4cc48b6593fcb8c7fdde1ec8681ba74058a20c0f24279482a9caae75edaacb4909cc2cf43d1ce0a658997c6837260d987c75bf2c9477784f4d564bcc780cd4db233c9bb444dccf9fc589023195848d19a551cbfbdac89f4184b608310984e1f89fe7ebfcefd821d9ba2a27bf393a59a08485165a23b1297f53f591f27d5d534a940e0b7a4"}]}, 0xd6)

46.239015476s ago: executing program 7 (id=2402):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x105, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x8, 0xeb, 0x0, 0x0, @u32=0x7}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}}, 0x8000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80000d8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000640), 0x8, 0x38, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0xc8, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xfff1}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xff, 0x2, 0x7, 0x1, 0x1ff, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0xe8, 0x6000, 0xfffffffd, 0x0, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x6, 0x80, 0xd]}}, {{0x1c, 0x1, {0xff, 0xc8, 0x0, 0x5, 0x0, 0x7, 0x800, 0x5}}, {0xe, 0x2, [0xfffb, 0x4, 0x8001, 0x1, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x35, 0x8e}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5eba8f33}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4050}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=<r3=>0x0, @ANYBLOB="0328f1fe7f0a0001007fca1d177678"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c95}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r5, 0xc4c03d12, &(0x7f0000000780)={0x1000, 0x1})
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x4, 0x2, 0x5, 0x6, 0x3, 0xac, 0x4, {0x8, 0x2, "5d9ac5613540eda5"}, 0x7, 0x4, 0x6, 0xf8, 0x1, "a4"}}, 0x1a)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r11 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r11, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
socket$netlink(0x10, 0x3, 0xf)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
syz_usb_control_io$hid(r10, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r3], 0x0}, 0x0)

43.550429235s ago: executing program 0 (id=2408):
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0141, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@empty, @broadcast, 0x18, 0x12}})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x6)
r6 = syz_io_uring_setup(0x10ac, &(0x7f0000000480)={0x0, 0xe001, 0x3180, 0x22, 0x31a}, &(0x7f0000000300)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1})
io_uring_enter(r6, 0x437b, 0xa9c3, 0x3, 0x0, 0x0)
io_uring_enter(r6, 0x628, 0xc88d, 0x43, 0x0, 0x0)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r9, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1)
mount$tmpfs(0x0, 0x0, 0x0, 0x800000, 0x0)

43.425655359s ago: executing program 0 (id=2409):
r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
mlockall(0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="a0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="0efaed", 0x3}], 0x1}}], 0x3, 0x404c800)
shutdown(r2, 0x2)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000180001000000000000000000020020000003c80900000000060015000300000014001680100008800c0001800600010000040000182a6f99b8e2c6f1bee10349db91ca7d14dcd51219a6241546fe462b9e6b1238b5ef52c1d49425bdcbb3df7672c1013063d6abf4eb8594680a23a058e59f4748143c06c5118a2ba0515c432b8421d2db2793d5090046204491493d568585c71a5f6f69fd4ed2c8f0d389f8220481af3fa70b02923b8cbb65055e4503d25d173fff151e0dda59064027e685c646a47b4dde986b027cc021fdd4cb38fc5dc791d6a64f6a27b8d6c5cde182"], 0x38}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39)
mlockall(0x5)

43.189120837s ago: executing program 7 (id=2411):
r0 = inotify_init1(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20048051}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0)
r3 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r0, 0x8, r3)
r4 = syz_open_procfs(r3, &(0x7f0000000000)='gid_map\x00')
getdents64(r4, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r4, 0x0, 0x0)

43.180513647s ago: executing program 7 (id=2413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
read$usbmon(r2, 0x0, 0x2f)
syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x801)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r4, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x2000)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f00000002c0)={0x7, [[0x100, 0x0, 0x9e3, 0x3, 0x1, 0xe1, 0x401, 0x1ee1], [0xe2b, 0x1, 0xb, 0x6, 0x8000, 0x5, 0x7, 0x5], [0x7, 0x9, 0x10000, 0x3, 0xe75, 0x958f, 0x4, 0x7fff]], '\x00', [{0x4080, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1}, {0x3, 0x1000}, {0x4, 0x7, 0x1, 0x1}, {0x0, 0xd9d, 0x1, 0x1, 0x1, 0x1}, {0x1000, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x2c2a, 0x1}, {0x3c, 0xe, 0x1, 0x0, 0x1, 0x1}, {0xd8b, 0x0, 0x1, 0x0, 0x0, 0x1}], '\x00', 0xba})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd2f, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4000000)

42.964952304s ago: executing program 0 (id=2414):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000b80)="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", 0xff8}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x240490c0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'cts(cbc(aes))\x00'}, {}, {0x20, 'cts(cbc(aes))\x00'}, {0x20, '/*'}, {0x20, 'skcipher\x00'}], 0xa, "542084e7e1ff1cd1850e6e4fb01c6e362d07aa73f0588e87f7b9e9f035927b60cb4fdcf0a60c724fc131c776e0ab280a893fca40fa94d194188648401197d7208db925db782c688890dae72d2209cec5f913793dccd46501952da797180d6e072e65e78f6bb686acc3138054b6caa0b5e66d07d926c0bdb131fdcab3be951f44b8f2853aab72f787978a510c9f4b674eab4e"}, 0xc9)
recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002c40)=""/4068, 0xfed}], 0x1, 0x0, 0x35}, 0x0)

42.963958004s ago: executing program 0 (id=2415):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x3, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x80000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x40)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000600000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005194dd1c00"/240], 0x138}}, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x65, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a1047", 0x49}], 0x1}], 0x1, 0x40800)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x1, 0x0, 0x0, 0x4})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800040, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000100)='./file0\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xf08cb000)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
tkill(r8, 0x17)
tkill(r8, 0x23)

42.879924642s ago: executing program 0 (id=2416):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000002780)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000180)=0x2f, 0xfffffffffffffe71)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x48004)

42.550372468s ago: executing program 0 (id=2417):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c) (async)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
r3 = dup(r2)
write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x2, 0x3}}, 0xfffffd26)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) (async, rerun: 64)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='\n', 0x1}], 0x1}, 0x2004c811) (async)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

42.487712711s ago: executing program 39 (id=2417):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c) (async)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
r3 = dup(r2)
write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x2, 0x3}}, 0xfffffd26)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) (async, rerun: 64)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='\n', 0x1}], 0x1}, 0x2004c811) (async)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

28.085368455s ago: executing program 40 (id=2413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
read$usbmon(r2, 0x0, 0x2f)
syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x801)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r4, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x2000)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f00000002c0)={0x7, [[0x100, 0x0, 0x9e3, 0x3, 0x1, 0xe1, 0x401, 0x1ee1], [0xe2b, 0x1, 0xb, 0x6, 0x8000, 0x5, 0x7, 0x5], [0x7, 0x9, 0x10000, 0x3, 0xe75, 0x958f, 0x4, 0x7fff]], '\x00', [{0x4080, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1}, {0x3, 0x1000}, {0x4, 0x7, 0x1, 0x1}, {0x0, 0xd9d, 0x1, 0x1, 0x1, 0x1}, {0x1000, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x2c2a, 0x1}, {0x3c, 0xe, 0x1, 0x0, 0x1, 0x1}, {0xd8b, 0x0, 0x1, 0x0, 0x0, 0x1}], '\x00', 0xba})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd2f, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4000000)

3.807136566s ago: executing program 5 (id=2953):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_usb_ep_read(r0, 0x1, 0x13, &(0x7f0000000000)=""/19) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.500103518s ago: executing program 5 (id=2974):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xe, 0xe}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0)
fchown(r2, 0xee01, 0x0)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000240)={0x2, 0x40})
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})
r3 = accept4$ax25(r0, 0x0, &(0x7f00000001c0), 0x65efcbbe6aa44774)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000200)=@netrom={'nr', 0x0}, 0x10)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x2, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.499546805s ago: executing program 5 (id=2975):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) (async)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) (async)
listen(r4, 0x803) (async)
setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000014060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780023"], 0x0)
syz_emit_ethernet(0x1b9, &(0x7f0000000040)={@remote, @link_local, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1a7, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x193, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "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"}}}}}}, 0x0)

2.299635757s ago: executing program 5 (id=2979):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000012009702"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

2.297902196s ago: executing program 5 (id=2980):
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, <r0=>0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000080)={{0xeeef0000, 0xd000, 0xc, 0x6, 0x2, 0x43, 0x6, 0x18, 0x3, 0x4, 0xa}, {0x100000, 0x0, 0x8, 0xfd, 0x3, 0x2, 0x4, 0x7, 0x4, 0x2, 0xff, 0x9}, {0x4, 0x0, 0xb, 0x8, 0xff, 0x1, 0x1, 0xee, 0x8, 0xd, 0x84, 0x1}, {0x10000, 0x6000, 0xd, 0x6, 0x6, 0x40, 0x16, 0xa, 0xe, 0x3, 0x2, 0x3}, {0x0, 0x5000, 0xb, 0x9, 0x4a, 0x1, 0x8, 0x91, 0x2, 0x0, 0x10, 0x9}, {0x6000, 0xe6e50000, 0x4, 0x1, 0x2, 0x7, 0x1, 0x80, 0x8, 0x9, 0x2, 0x40}, {0x5000, 0x10000, 0x0, 0x7, 0x6, 0x7, 0xf, 0xa, 0x2, 0x8, 0xa4, 0x9}, {0xeeee8000, 0xeeeff001, 0xc, 0x5, 0x8, 0x0, 0x7, 0x4, 0x0, 0x80, 0x7f, 0x8}, {0x2000, 0x7}, {0x2000, 0x2}, 0x2004003a, 0x0, 0x80a0000, 0x405081, 0xb, 0x0, 0x8000000, [0x4e42, 0x5, 0x5]})
ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000001c0)={r0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000200), 0x7ff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x50, r1, 0x6fa17000) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000240))
r2 = syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) (async)
r3 = socket$kcm(0x29, 0x0, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r4, 0x3ba0, &(0x7f0000001300)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000000300)="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", 0x5}) (async)
r5 = socket$inet6(0xa, 0x2, 0x80000001)
setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000001380)=0x40, 0x4) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r3, 0x4d171000)
statx(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', 0x100, 0x10, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, r6, &(0x7f0000001500)={0x7, 0x2, 0x0, 0x4}) (async)
getsockname$inet6(r5, &(0x7f0000001540)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001580)=0x1c) (async)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x7c, 0x453, 0x200, 0x70bd2a, 0x25dfdbfe, "00c6be40f769f7dd56d130c827cf018b27121c6ff04c58a36dbc9acfd1fe9daee77d0669bd354ee727b352e691c6b1bc432ff9216a2b97d7981d18fabfc79f956848641803448343bf21cb0a8a54aeb8b03b320069813b0844175dce09860edf5578f62d66ea37e04d", [""]}, 0x7c}}, 0x801) (async)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b)
r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001940)={0x0, &(0x7f0000001700)=[@wrmsr={0x1e, 0x20, {0x898, 0x2}}, @wr_drn={0x6e, 0x20, {0x1, 0x4}}, @wr_crn={0x46, 0x20, {0x2, 0x8}}, @wr_drn={0x6e, 0x20, {0x1, 0x2}}, @code={0xa, 0x5d, {"440f20c0350f000000440f22c066bad104ec3e457100450f019cc049000000f3400f1efa440f01d1b9800000c00f3235004000000f30450fc799000000002e26460f01b57c8e0000420f01d1"}}, @wrmsr={0x1e, 0x20, {0xb15, 0x1}}, @set_irq_handler={0xbe, 0x20, {0xaf, 0x1}}, @code={0xa, 0x75, {"c403a57cb50e000000070f4da4b12f22ebd7c744240097000000c7442402a0000000ff1c24c744240011927bd3c7442402bbc83669c7442406000000000f0114242e3e67260fc72ec482190454bc9b0f01c80f01ca0f07440f20c0350a000000440f22c0"}}, @cpuid={0x14, 0x18, {0x9, 0x1}}, @wr_crn={0x46, 0x20, {0x0, 0x3}}, @out_dx={0xaa, 0x28, {0x67a4, 0x1, 0x80000001}}, @wr_crn={0x46, 0x20, {0x0, 0x5}}], 0x212})
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001a00)=[@text32={0x20, &(0x7f0000001980)="b9a90b00000f32f20f7df1f30f0966ba4300b090ee66f2de5318c7442400353a0000c744240200000100c7442406000000000f01142466baf80cb8e2039280ef66bafc0cb07eeeb95f030000b800000000ba000000800f30c4e32538e892650f795000", 0x63}], 0x1, 0x28, &(0x7f0000001a40)=[@cr4={0x1, 0xa0}, @flags={0x3, 0x10081}], 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x11)
ioctl$KVM_GET_PIT(r8, 0xc048ae65, &(0x7f0000001b80))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
accept$unix(r11, &(0x7f0000001c40)=@abs, &(0x7f0000001cc0)=0x6e)
socket$pppoe(0x18, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000001d00))
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20484610}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003240)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x374}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f80)='syzkaller\x00', 0x7ff, 0x1000, &(0x7f0000001fc0)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000003180)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f00000031c0)=[{0x1, 0x2, 0x6, 0x1}, {0x5, 0x3, 0xc, 0x4}, {0x1, 0x2, 0x7, 0x6}, {0x1, 0x2, 0xe}, {0x5, 0x4, 0xb, 0xa}, {0x3, 0x5, 0x10, 0x5}, {0x4, 0x3, 0xb, 0x6}, {0x4, 0x4, 0x7, 0x6}], 0x10, 0xe}, 0x94)

2.229270511s ago: executing program 5 (id=2981):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000080)='./file0\x00')
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0x7)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x129c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[], 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
r2 = fanotify_init(0x200, 0x40000)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r2, 0x455, 0x8000003, r3, 0x0)

1.550058026s ago: executing program 3 (id=2985):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x40040)

1.549267331s ago: executing program 3 (id=2986):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x29, 0x1, 0x3, "00000000bf2b000005000104000000e4f4ffff0000ea00000d00", 0x32344d59})
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff})
r3 = memfd_secret(0x80000)
ftruncate(r3, 0x10)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000080)={0x80000000, &(0x7f0000000000), &(0x7f0000000140)=[{{}, {<r4=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={r4, &(0x7f00000001c0), &(0x7f0000000200)})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x803, 0x0)
write(r6, &(0x7f0000000980)="26000000010047fc050007108980e8ff06016d20002b1ffec0ff0301c77f0000000000000000", 0x26)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendto(r6, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000340)={"7fbc052d6d8f48f6d89b7f866e67fa2a868d1462f4f15aee823f0d4734366427", r1})

1.456715766s ago: executing program 3 (id=2987):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
write$binfmt_misc(r1, &(0x7f00000000c0), 0xfdef) (async)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x10) (async)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$qrtrtun(r2, &(0x7f0000000400)="2ec8425d4ce2ef00", 0x8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x5, 0x81, 0x6, 0x9, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x20, 0x211, 0xfffffeb8}}) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/175, 0xaf, <r5=>0x0, &(0x7f0000000500)=""/62, 0x3e}}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) (async)
r10 = socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
r12 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x237b, 0x400, 0x7, 0x288}, &(0x7f00000000c0)=<r13=>0x0, &(0x7f0000000280)=<r14=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) (async)
io_uring_enter(r12, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) (async)
setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
getsockopt$packet_buf(r10, 0x107, 0x6, 0x0, &(0x7f0000000000)) (async)
ioctl$CEC_RECEIVE(r9, 0xc0386106, &(0x7f00000010c0)={0xd52, 0x8000, 0x6, 0x0, 0x1fc, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x5c, 0x3, 0x1, 0x4, 0x9c, 0xff})
setuid(r8)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000580)={'batadv0\x00', {0x2, 0x0, @loopback}})
fcntl$setlease(r6, 0x400, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, <r15=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="4590060000000000186400f70a00000000000000100000008520000002000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x2f, &(0x7f00000002c0)=""/47, 0x40f00, 0x5, '\x00', r4, @fallback=0x1e, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x8, 0x9}, 0x10, r5, 0xffffffffffffffff, 0xa, &(0x7f0000000600)=[r15, r1, r1, r0, r2, r2, r1], &(0x7f0000000640)=[{0x7, 0x1, 0x0, 0x2}, {0x1, 0x5, 0x3, 0xc}, {0x5, 0x2, 0x9, 0x2}, {0x0, 0x4, 0x3, 0x9}, {0x0, 0x4, 0x2}, {0x3, 0x3, 0x9, 0x4}, {0x4, 0x1, 0xc, 0xa7a532d74b8e0704}, {0x1, 0x1, 0x5, 0xb}, {0x0, 0x4, 0xa, 0x5}, {0x0, 0x5, 0x8}], 0x10, 0x2}, 0x94)

1.32956437s ago: executing program 3 (id=2990):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x2c)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x440, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc4, 0xc})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2})
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pread64(r4, &(0x7f00000024c0)=""/209, 0xfd36, 0x698)
readv(r1, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
write$dsp(r6, &(0x7f0000000040)="c7", 0x1)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000100))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x28, r8, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8045}, 0x40c4000)

1.328982502s ago: executing program 2 (id=2991):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x101002, 0x0) (rerun: 32)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x80000000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r6, @ANYRES32=r6, @ANYRES64=r6], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x84)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="81000000", @ANYRESOCT=r1, @ANYBLOB="01002dbd7000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r9, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="7048adb4dac8"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7322d11548ddf4df10718b5daccf027d"}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="0d6cab30fea5"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0x5, 0x34, @random="05"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044800}, 0x1) (async, rerun: 32)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
r12 = dup(r11)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000603"], 0x5c}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r14}, 0x10)
close(r15) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r16 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb018618"], 0x0, 0x26}, 0x28) (async, rerun: 32)
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000000702f5d1d4a1a40bce7fc95a537b13ce5e816985d1ca0a6056692b1453ef91d70ffc94883518603f390136e242ad9711f057f9660bc56bd745f68f859f3e673996f377553af5905f65f5e7888887e6e9abe5cc", @ANYRES16=r13, @ANYBLOB="cf0428bd7000fddbdf2513000000040013000a00060008021100000100000800a40003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80c1}, 0x48c0)

1.238356556s ago: executing program 2 (id=2992):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000000c0)=""/172)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x4, 0x0, 0xfd, 0x1, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r5 = semget$private(0x0, 0x3, 0x4a7)
semop(r5, &(0x7f0000000240)=[{0x0, 0x5}], 0x1)

1.230364964s ago: executing program 2 (id=2993):
syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60f900f500240600fe8000000000000000000000000000bbfe8000000000000000000000000000c2047a2a0700000000004e22000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv(r0, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x10000, 0x1)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0x9b1e1500, 0x0, 0xfdd1, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5})
fsopen(&(0x7f0000000240)='sysfs\x00', 0x0)
r5 = shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_INFO(r5, 0x3, &(0x7f00000000c0))
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x4000001a)
r10 = eventfd(0x40048c67)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000240)={0x6, 0x8000000, 0x1, r10, 0x1})
close_range(r7, 0xffffffffffffffff, 0x0)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r12 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0xabd42)
ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001ac0)={r11, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0xb, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f801a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e770a00000000000000930606f9000000000f000000000600", [0x3]}})
r13 = dup(r12)
write$UHID_INPUT(r13, &(0x7f0000002c40)={0x8, {"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", 0x1000}}, 0x1006)
write$UHID_INPUT(r13, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0x1006)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="62004000001c001280091b010869706970000000000c00028008001400c3a528960d0000"], 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)
pipe2$9p(&(0x7f0000001100)={<r14=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000010c0), 0x810002, &(0x7f0000001280)=ANY=[@ANYBLOB="7472616e731d66642c7211021a1fa5833a2805c8e6c20cd6d07cefb30f7fb50d66f258c78ea891e225771b3f206101bef2205049061cb0485ceaea32f9a94b67c05a620ad2889d0880412d404e6dc1cb31b5c06a8cbf59ef299a84b38cbed83c937de400bdf3ddf0513a5f4c107b5a9d54314cb42439147e8623014b6511dcd645442feaa2bb28ad00655628f602fef9642b05add6a35e17dad55e953815d2b359b07ce8e9c1c62a693872ecd6e37556fd0f04ee554fd0a84000"/197, @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',debug=0x0000000000008001,cache=mmap,mmap,cache=fscache,aname=:$,privport,uname=:$,noxattr,\x00'])
unshare(0x8040080)

1.160121622s ago: executing program 2 (id=2994):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000000c0)=""/227, 0xe3, 0x0, &(0x7f00000001c0)=""/126, 0x7e}}, 0x10)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x3, @mcast2, 0x9}, 0x1c) (async)
unshare(0x42000000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c00028006000100010000000800058063ffd515ac15b727a4df1a42d5c4719c81013e08851f6c2885a5f987d4f647a00800000000000000ad1fb80221514d059de39ec50918bf16e0e45cec33d9d16d9bb9285a7e7c35353c7aefde84d1be92ae9e19c8bb89c4746d0a3365b9b798a609a150", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x62, @dev={0xac, 0x14, 0x14, 0x3d}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x1}) (async)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) (async)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x80000, 0x6, 0x10}, 0x18)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000500)={@desc={0x1, 0x0, @desc4}}) (async)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7}, 0x8) (async)
open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x4f, 0x0)

949.455905ms ago: executing program 3 (id=2996):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chroot(&(0x7f0000000300)='./file0\x00')
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$pvfs2(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2060, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='lp', 0x2)
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'veth0_to_hsr\x00', @local})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000540)=ANY=[@ANYRES8=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc8, &(0x7f00000006c0)=""/200, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010000000000000000394ba6c360213c00"/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000380)=r2}, 0x20)
recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0x2ffe}], 0x1}, 0x40000102)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000240)={0x7f, 0x0, 0x1006, 0x61bf, 0x0, {0xfffffffe}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002000a40e5"], 0x44}}, 0x0)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42bfffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)
pselect6(0x40, &(0x7f0000000000)={0x1, 0x3, 0x3, 0x3, 0x0, 0xc, 0x71a0f1ce, 0x400}, &(0x7f0000000080)={0x7, 0x8000000000000001, 0x2, 0x6, 0x0, 0x2, 0xa8, 0x3}, &(0x7f00000000c0)={0x4, 0xe2, 0x100000001, 0x0, 0x80000001, 0x9, 0x92, 0x57}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000140)={[0xa61b]}, 0x8})

737.261412ms ago: executing program 9 (id=2998):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000000)={0x1, 0x0, 0xa, 0x81, '\x00', 0x2})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x0}) (async)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@any, 0x800000}, 0x400, "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"}, 0x418, 0x80000002}) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "a9d2bef95a4d26c618abe6c962b582cf72b7b4e665b9f2e35a455c315dc31664a7f666e087997bbc7c595538e71494ebf8926f58ae3e07675b41af9fe1b3a7bec8"}}]}, 0x17c}}, 0x0)

735.270357ms ago: executing program 9 (id=2999):
io_uring_setup(0x25f5, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1})
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000))
r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000001740)="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", 0x169, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})

639.670869ms ago: executing program 9 (id=3000):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x6, r3, r4, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82)
syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r5, &(0x7f0000000700)=[{&(0x7f0000000240)='9', 0x1}], 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd)
lstat(&(0x7f0000000580)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000901, r7, 0x0)
mount$fuseblk(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x861028, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize}, {@max_read={'max_read', 0x3d, 0x2f2a}}], [{@subj_type={'subj_type', 0x3d, '\\'}}, {@fowner_gt={'fowner>', r3}}, {@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, r3}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@pcr={'pcr', 0x3d, 0x24}}]}})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
unshare(0x62000000)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
alarm(0x8000000000000001)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0208004500002040000000032f907804000000"], 0x32)
dup3(r1, r5, 0x6700000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)

638.901066ms ago: executing program 2 (id=3001):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x20}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x48894)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r3, 0xa17, 0x70bd29, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0xc114)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

548.098272ms ago: executing program 2 (id=3002):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x64)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000003c0)={0x2, 0x1, @loopback}, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r2, 0x0, &(0x7f00006f3000/0x4000)=nil, 0x4000, 0x2})
madvise(&(0x7f00002f5000/0x1000)=nil, 0x1000, 0x12)
r3 = epoll_create1(0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x17)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd607428dd00283afffe80000000000000000000a3a6451a00f6d4aabbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b"], 0x0)
unshare(0x260a0600)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES64=r5, @ANYRESOCT=r3, @ANYRESDEC=r4], 0x2)
r6 = fsmount(r4, 0x1, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.freeze\x00', 0x300, 0x0)
read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020)
syz_open_dev$loop(&(0x7f0000000380), 0x8000, 0x24c780)
read$eventfd(r4, &(0x7f0000000100), 0xfffffd79)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r8, 0x104, 0x5, &(0x7f00000024c0)=0xc, 0x4)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
syz_clone(0x3100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
process_vm_writev(0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000580)=""/264, 0x108}], 0x2, &(0x7f0000121000)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, 0x0)

139.577711ms ago: executing program 9 (id=3003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc085}, 0x20004000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000080004400000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf257a00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0)
ioctl$BLKPG(r8, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440002100000900010073797a3000000000080003400000000814"], 0x64}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000000000008004f00010000000800030001"], 0x30}}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x140, r12, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf54b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x542e108d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaee1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50e9c60c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7885d24}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6da1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24f25a37}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57fa120e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4560}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7912810c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dc2e386}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9392}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a73562}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c397b03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b74}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x112c96d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a2acbfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6354f7b7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dcf497c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7424067e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x388729bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65a1b88b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8361}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000001)

79.178761ms ago: executing program 3 (id=3004):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x3}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}, {}, {}, {0x0, 0xfffff0a4}], '\x00', 0x10000})
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x8)

78.662298ms ago: executing program 9 (id=3005):
r0 = socket$netlink(0x10, 0x3, 0xa)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001000000000000000000000000000d"], 0x38}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {{@in=@remote, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x97, 0x2, 0x0, 0xa0, 0x16}, {@in=@remote, 0x4d6, 0xff}, @in6=@loopback, {0x4, 0x9, 0x0, 0x1, 0x4d7, 0x7ff, 0x2, 0x10001}, {0x7f, 0x4, 0x10001, 0x1}, {0xffff, 0x9, 0xf}, 0x70bd2b, 0x3504, 0x2, 0x4, 0x10}}, 0xf0}}, 0x4040)

0s ago: executing program 9 (id=3006):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r1, 0x0, 0x50000021, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)

kernel console output (not intermixed with test programs):

51] team0: Port device team_slave_0 added
[  221.045904][T13651] team0: Port device team_slave_1 added
[  221.084463][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.086549][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.094161][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.099234][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.101434][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.109501][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.165314][T13651] hsr_slave_0: entered promiscuous mode
[  221.167778][T13651] hsr_slave_1: entered promiscuous mode
[  221.187885][T10480] bridge_slave_1: left allmulticast mode
[  221.192367][T10480] bridge_slave_1: left promiscuous mode
[  221.194956][T10480] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.198654][T10480] bridge_slave_0: left allmulticast mode
[  221.200817][T10480] bridge_slave_0: left promiscuous mode
[  221.202527][T10480] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.554814][T10480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.561668][T10480] bond0 (unregistering): Released all slaves
[  221.601251][   T40] audit: type=1400 audit(2000000084.919:820): avc:  denied  { accept } for  pid=13703 comm="syz.5.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  221.607811][   T40] audit: type=1400 audit(2000000084.919:821): avc:  denied  { ioctl } for  pid=13703 comm="syz.5.2168" path="socket:[52221]" dev="sockfs" ino=52221 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  221.670760][   T40] audit: type=1400 audit(2000000084.989:822): avc:  denied  { write } for  pid=13710 comm="syz.5.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  221.731913][T13715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.740165][ T1340] lo speed is unknown, defaulting to 1000
[  221.743435][ T1340] syz2: Port: 1 Link ACTIVE
[  221.752872][ T1340] lo speed is unknown, defaulting to 1000
[  221.811708][T13651] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  221.816717][T13651] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  221.821718][T13651] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  221.829801][T13651] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  221.836353][T13724] tipc: Started in network mode
[  221.838213][T13724] tipc: Node identity 6ae1cd15f7cc, cluster identity 4711
[  221.840521][T13724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.843979][T13724] syzkaller0: entered promiscuous mode
[  221.845761][T13724] syzkaller0: entered allmulticast mode
[  221.898629][T13651] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.908671][T13651] 8021q: adding VLAN 0 to HW filter on device team0
[  221.922570][T10492] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.924947][T10492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.930845][T10478] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.933172][T10478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.942302][T10480] hsr_slave_0: left promiscuous mode
[  221.944519][T10480] hsr_slave_1: left promiscuous mode
[  221.946636][T10480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.950514][T10480] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.956761][T10480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.960592][T10480] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.986440][T10480] veth1_macvtap: left promiscuous mode
[  221.988240][T10480] veth0_macvtap: left promiscuous mode
[  221.990171][T10480] veth1_vlan: left promiscuous mode
[  221.991872][T10480] veth0_vlan: left promiscuous mode
[  222.119233][  T840] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  222.288954][  T840] usb 12-1: Using ep0 maxpacket: 8
[  222.292217][  T840] usb 12-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config
[  222.296346][  T840] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  222.301346][  T840] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  222.304973][  T840] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.310500][  T840] usb 12-1: config 0 descriptor??
[  222.571307][ T5937] Bluetooth: hci1: command tx timeout
[  222.706557][T10480] team0 (unregistering): Port device team_slave_1 removed
[  222.790928][T10480] team0 (unregistering): Port device team_slave_0 removed
[  222.969036][   T34] tipc: Node number set to 2637024533
[  223.332238][T13749] tipc: Resetting bearer <eth:syzkaller0>
[  223.448013][T13756] syz_tun: entered allmulticast mode
[  223.455367][T13756] tmpfs: Bad value for 'mpol'
[  223.464019][T13755] syz_tun: left allmulticast mode
[  223.474182][T13651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.646075][T13651] veth0_vlan: entered promiscuous mode
[  223.651229][T13651] veth1_vlan: entered promiscuous mode
[  223.677228][T13651] veth0_macvtap: entered promiscuous mode
[  223.682700][T13651] veth1_macvtap: entered promiscuous mode
[  223.693299][T13651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.701306][T13651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.714993][T10478] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.721660][T10478] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.724472][T10478] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.730547][T10478] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.759038][T10474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.762339][T10474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.787355][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.791726][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.913932][T13787] IPv6: addrconf: prefix option has invalid lifetime
[  223.959769][   T40] audit: type=1400 audit(2000000087.279:823): avc:  denied  { create } for  pid=13791 comm="syz.9.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  223.967995][   T40] audit: type=1400 audit(2000000087.279:824): avc:  denied  { read } for  pid=13791 comm="syz.9.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  224.174844][T13795] __nla_validate_parse: 3 callbacks suppressed
[  224.174855][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'.
[  224.260752][T13802] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2191'.
[  224.639029][ T5937] Bluetooth: hci1: command tx timeout
[  224.799539][ T8141] go7007-loader 6-1:10.99: unable to load firmware from file "go7007/px-tv402u.fw"
[  224.802466][ T8141] go7007-loader 6-1:10.99: probe failed
[  224.807604][ T8141] go7007-loader 6-1:10.68: loading firmware go7007/px-tv402u.fw
[  224.810611][ T8141] usb 6-1: Direct firmware load for go7007/px-tv402u.fw failed with error -2
[  224.813327][ T8141] usb 6-1: Falling back to sysfs fallback for: go7007/px-tv402u.fw
[  224.838429][ T6018] usb 12-1: USB disconnect, device number 6
[  224.841088][T13723] tipc: Resetting bearer <eth:syzkaller0>
[  224.851821][T13723] tipc: Disabling bearer <eth:syzkaller0>
[  224.969487][T13812] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2194'.
[  225.241875][T13824] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2198'.
[  225.420172][T13833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2202'.
[  226.353248][T13839] xt_hashlimit: invalid rate
[  226.360472][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  226.360486][   T40] audit: type=1400 audit(2000000089.679:826): avc:  denied  { attach_queue } for  pid=13838 comm="syz.7.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  226.575506][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2208'.
[  226.580182][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2208'.
[  226.719050][ T5937] Bluetooth: hci1: command tx timeout
[  226.721707][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2212'.
[  226.840017][T13873] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.844367][T13873] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.954053][T13881] overlayfs: cannot append lower layer
[  226.966124][T13881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.335075][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2221'.
[  227.735268][T13909] ip6erspan0: entered promiscuous mode
[  227.818039][T13911] bridge0: entered promiscuous mode
[  227.820219][T13911] macsec1: entered promiscuous mode
[  227.854617][T13915] fuse: Unknown parameter '0x0000000000000007'
[  227.883065][T13917] No source specified
[  227.922801][   T40] audit: type=1400 audit(2000000091.239:827): avc:  denied  { read } for  pid=13918 comm="syz.5.2229" path="socket:[55785]" dev="sockfs" ino=55785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  228.259420][   T40] audit: type=1400 audit(2000000091.579:828): avc:  denied  { create } for  pid=13923 comm="syz.7.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  228.266136][   T40] audit: type=1400 audit(2000000091.579:829): avc:  denied  { ioctl } for  pid=13923 comm="syz.7.2231" path="socket:[55791]" dev="sockfs" ino=55791 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  228.415874][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2233'.
[  228.559496][   T40] audit: type=1400 audit(2000000091.879:830): avc:  denied  { write } for  pid=13935 comm="syz.7.2235" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  228.568244][   T40] audit: type=1400 audit(2000000091.879:831): avc:  denied  { open } for  pid=13935 comm="syz.7.2235" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  228.576834][   T40] audit: type=1400 audit(2000000091.879:832): avc:  denied  { ioctl } for  pid=13935 comm="syz.7.2235" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  228.809017][ T5937] Bluetooth: hci1: command tx timeout
[  229.023704][T13965] x_tables: duplicate underflow at hook 2
[  229.106823][   T40] audit: type=1400 audit(2000000092.419:833): avc:  denied  { write } for  pid=13969 comm="syz.9.2244" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  229.115396][   T40] audit: type=1400 audit(2000000092.419:834): avc:  denied  { write } for  pid=13969 comm="syz.9.2244" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  229.475282][T13991] lo speed is unknown, defaulting to 1000
[  229.595077][T13994] netlink: 'syz.7.2250': attribute type 29 has an invalid length.
[  229.600253][T13994] netlink: 'syz.7.2250': attribute type 29 has an invalid length.
[  229.605446][T13994] __nla_validate_parse: 3 callbacks suppressed
[  229.605460][T13994] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2250'.
[  229.615554][T13991] xfrm0 speed is unknown, defaulting to 1000
[  229.777508][T14013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=14013 comm=syz.5.2254
[  229.804933][T14013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14013 comm=syz.5.2254
[  229.812418][ T5937] Bluetooth: hci2: unexpected event for opcode 0x1408
[  229.963824][T14024] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  230.011744][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2260'.
[  230.117668][   T40] audit: type=1400 audit(2000000093.429:835): avc:  denied  { ioctl } for  pid=14051 comm="syz.7.2265" path="socket:[56652]" dev="sockfs" ino=56652 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  230.165760][T14067] team0: Device ipvlan1 failed to register rx_handler
[  230.305060][T14076] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  230.309254][T14076] bond5 (unregistering): Released all slaves
[  230.324851][T14077] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  230.329293][T14077] bond5 (unregistering): Released all slaves
[  230.361705][T14082] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2273'.
[  230.366945][T14082] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  230.405853][T14084] netlink: 'syz.9.2274': attribute type 3 has an invalid length.
[  230.409301][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2274'.
[  230.413545][T14084] raw_sendmsg: syz.9.2274 forgot to set AF_INET. Fix it!
[  230.464994][T14086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14086 comm=syz.7.2275
[  230.475535][   T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  230.478657][T10480] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  230.483211][T10480] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  230.488402][T10480] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  230.626809][T14091] Bluetooth: MGMT ver 1.23
[  230.809224][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2280'.
[  231.100857][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2281'.
[  231.498952][   T60] usb 14-1: new high-speed USB device number 2 using dummy_hcd
[  231.669448][   T60] usb 14-1: too many configurations: 9, using maximum allowed: 8
[  231.673080][   T60] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.676836][   T60] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.681666][   T60] usb 14-1: config 0 interface 0 has no altsetting 0
[  231.685613][   T60] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.689094][   T60] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.692468][   T60] usb 14-1: config 0 interface 0 has no altsetting 0
[  231.695313][   T60] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.698089][   T60] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.702956][   T60] usb 14-1: config 0 interface 0 has no altsetting 0
[  231.706511][   T60] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.709608][   T60] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.714302][   T60] usb 14-1: config 0 interface 0 has no altsetting 0
[  231.717284][   T60] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.720199][   T60] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.723536][   T60] usb 14-1: config 0 interface 0 has no altsetting 0
[  231.726434][   T60] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.729356][   T60] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.730992][T14115] cdrom: dropping to single frame dma
[  231.732777][   T60] usb 14-1: config 0 interface 0 has no altsetting 0
[  231.733501][   T60] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.740794][   T60] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.744608][   T60] usb 14-1: config 0 interface 0 has no altsetting 0
[  231.747696][   T60] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.750714][   T60] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.754072][   T60] usb 14-1: config 0 interface 0 has no altsetting 0
[  231.757764][   T60] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  231.760714][   T60] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  231.763358][   T60] usb 14-1: Product: syz
[  231.764826][   T60] usb 14-1: Manufacturer: syz
[  231.766415][   T60] usb 14-1: SerialNumber: syz
[  231.770772][   T60] usb 14-1: config 0 descriptor??
[  231.775095][   T60] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0
[  231.965679][T14137] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2293'.
[  231.986960][T14113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.990398][T14113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.011689][   T34] usb 14-1: USB disconnect, device number 2
[  232.016496][   T34] yurex 14-1:0.0: USB YUREX #0 now disconnected
[  232.143111][T14161] autofs: Bad value for 'fd'
[  232.316380][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2305'.
[  232.325849][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.328188][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.330841][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.333121][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.335407][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.337725][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.343230][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.345631][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.347922][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.353907][   T60] hid-generic 0005:00B6:0009.000C: unknown main item tag 0x0
[  232.363744][   T40] audit: type=1400 audit(2000000095.679:836): avc:  denied  { read } for  pid=14176 comm="syz.7.2306" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  232.382246][   T60] hid-generic 0005:00B6:0009.000C: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1
[  232.733268][T14200] program syz.7.2310 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.899998][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2312'.
[  232.902993][T14205] macsec0: left allmulticast mode
[  232.905180][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2312'.
[  233.454393][T14228] netlink: 'syz.5.2320': attribute type 30 has an invalid length.
[  233.785328][T14263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14263 comm=syz.9.2330
[  233.836604][T14263] cgroup: Need name or subsystem set
[  233.858903][   T40] audit: type=1400 audit(2000000097.169:837): avc:  denied  { setattr } for  pid=14265 comm="syz.5.2331" path="socket:[56285]" dev="sockfs" ino=56285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  234.222175][   T40] audit: type=1400 audit(2000000097.539:838): avc:  denied  { mounton } for  pid=14289 comm="syz.9.2339" path="/bus" dev="bpf" ino=56908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  234.337694][T14303] netlink: 'syz.7.2342': attribute type 5 has an invalid length.
[  234.518607][T14318] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  234.701828][T14321] __nla_validate_parse: 7 callbacks suppressed
[  234.701844][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2347'.
[  234.985297][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  234.991304][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  234.995623][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.001051][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.003989][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.033061][T14334] lo speed is unknown, defaulting to 1000
[  235.044898][T14339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.124234][T14334] xfrm0 speed is unknown, defaulting to 1000
[  235.269830][T14334] chnl_net:caif_netlink_parms(): no params data found
[  235.329822][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2356'.
[  235.462122][T14373] netlink: 'syz.9.2360': attribute type 13 has an invalid length.
[  235.491975][T10480] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  235.492782][T14373] netlink: 'syz.9.2360': attribute type 13 has an invalid length.
[  235.496557][T10480] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.502636][T14334] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.505778][T14334] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.509013][T14334] bridge_slave_0: entered allmulticast mode
[  235.513190][T14334] bridge_slave_0: entered promiscuous mode
[  235.517643][T10480] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.521815][T10480] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.525839][T14334] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.529005][T14334] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.532046][T14334] bridge_slave_1: entered allmulticast mode
[  235.536493][T14334] bridge_slave_1: entered promiscuous mode
[  235.605679][   T40] audit: type=1400 audit(2000000098.919:839): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57158 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  235.615858][   T40] audit: type=1400 audit(2000000098.919:840): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=57158 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  235.617509][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.632686][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.658015][   T10] IPVS: starting estimator thread 0...
[  235.680813][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2364'.
[  235.683655][T14388] netlink: 'syz.5.2364': attribute type 21 has an invalid length.
[  235.692497][T14334] team0: Port device team_slave_0 added
[  235.705745][T14334] team0: Port device team_slave_1 added
[  235.732668][T14393] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  235.736898][   T40] audit: type=1400 audit(2000000099.049:841): avc:  denied  { bind } for  pid=14391 comm="syz.7.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  235.748921][T14382] IPVS: using max 46 ests per chain, 110400 per kthread
[  235.777794][T14390] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  235.785823][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.788655][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.799219][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.804077][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.806553][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.817446][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.846454][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2371'.
[  235.885381][T14407] 8021q: adding VLAN 0 to HW filter on device bond1
[  235.893397][T14334] hsr_slave_0: entered promiscuous mode
[  235.896815][T14334] hsr_slave_1: entered promiscuous mode
[  235.900478][T14334] debugfs: 'hsr0' already exists in 'hsr'
[  235.902894][T14334] Cannot create hsr debugfs directory
[  235.910167][T14405] lo speed is unknown, defaulting to 1000
[  235.981583][T14417] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  235.987349][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2372'.
[  236.014061][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2370'.
[  236.052461][T14405] xfrm0 speed is unknown, defaulting to 1000
[  236.063438][   T40] audit: type=1400 audit(2000000099.379:842): avc:  denied  { bind } for  pid=14414 comm="syz.9.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  236.230405][T14427] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14427 comm=syz.7.2376
[  236.589966][T14334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  236.594213][T14334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  236.598683][T14334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  236.602786][T14334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  236.650144][T14334] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.673399][T14334] 8021q: adding VLAN 0 to HW filter on device team0
[  236.678800][T10493] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.681805][T10493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.690726][T10493] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.693044][T10493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.713508][   T40] audit: type=1400 audit(2000000100.029:843): avc:  denied  { egress } for  pid=59 comm="kworker/2:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  236.717308][T14334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  236.725328][   T40] audit: type=1400 audit(2000000100.029:844): avc:  denied  { sendto } for  pid=59 comm="kworker/2:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  236.811299][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.832321][T14334] veth0_vlan: entered promiscuous mode
[  236.837505][T14334] veth1_vlan: entered promiscuous mode
[  236.852914][T14334] veth0_macvtap: entered promiscuous mode
[  236.856628][T14334] veth1_macvtap: entered promiscuous mode
[  236.865594][T14334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.872779][T14334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.879154][T10494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.882164][T10494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.885591][T10494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.888376][T10494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.039337][ T5943] Bluetooth: hci0: command tx timeout
[  237.222471][   T40] audit: type=1400 audit(2000000100.539:845): avc:  denied  { read } for  pid=14472 comm="syz.5.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  237.322719][T14478] overlay: Bad value for 'uuid'
[  237.417039][T10494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.419637][T10494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.448697][T14488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.450411][T10493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.455570][T10493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.534669][T14494] tmpfs: Unknown parameter 'indo64'
[  237.595423][T14492] netlink: 'syz.5.2390': attribute type 29 has an invalid length.
[  237.598873][   T40] audit: type=1400 audit(2000000100.909:846): avc:  denied  { remount } for  pid=14491 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  237.677696][T14507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'.
[  237.725090][T14509] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2396'.
[  237.850404][T14518] netlink: 182 bytes leftover after parsing attributes in process `syz.5.2398'.
[  237.971431][T14531] netlink: 'syz.5.2401': attribute type 1 has an invalid length.
[  237.982773][T14534] netlink: 'syz.7.2402': attribute type 1 has an invalid length.
[  237.986055][T14534] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2402'.
[  237.994154][T14531] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  237.998556][T14531] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  238.043086][T14538] gretap2: entered promiscuous mode
[  238.047083][T14538] bond9: (slave gretap2): making interface the new active one
[  238.050900][T14538] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  238.061570][T14531] macvlan0: entered promiscuous mode
[  238.063571][T14531] macvlan0: entered allmulticast mode
[  238.065971][T14531] bond9: entered promiscuous mode
[  238.068679][T14531] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  238.074126][T14531] bond9: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  238.081314][T14531] bond9: left promiscuous mode
[  238.108010][T14538] netlink: 'syz.5.2401': attribute type 8 has an invalid length.
[  238.319453][ T8880] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  238.331871][T14546] netlink: 'syz.5.2405': attribute type 4 has an invalid length.
[  238.337514][  T841] lo speed is unknown, defaulting to 1000
[  238.340701][  T841] syz2: Port: 1 Link DOWN
[  238.342589][  T841] lo speed is unknown, defaulting to 1000
[  238.468986][ T8880] usb 12-1: Using ep0 maxpacket: 32
[  238.472366][ T8880] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.476711][ T8880] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.481065][ T8880] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  238.484866][ T8880] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.491676][ T8880] usb 12-1: config 0 descriptor??
[  239.131886][ T5943] Bluetooth: hci0: command tx timeout
[  240.976150][T14534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.001834][ T8880] usbhid 12-1:0.0: can't add hid device: -71
[  241.007937][ T8880] usbhid 12-1:0.0: probe with driver usbhid failed with error -71
[  241.018774][ T8880] usb 12-1: USB disconnect, device number 7
[  241.198950][ T5943] Bluetooth: hci0: command tx timeout
[  241.256881][   T40] audit: type=1400 audit(2000000104.569:847): avc:  denied  { set_context_mgr } for  pid=14576 comm="syz.0.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  241.257882][T14577] Bluetooth: MGMT ver 1.23
[  241.267467][T14577] __nla_validate_parse: 2 callbacks suppressed
[  241.267476][T14577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2415'.
[  241.276095][T14577] binder: 14576:14577 unknown command 0
[  241.277898][T14577] binder: 14576:14577 ioctl c0306201 200000000080 returned -22
[  241.287419][   T40] audit: type=1400 audit(2000000104.599:848): avc:  denied  { append } for  pid=14576 comm="syz.0.2415" path="/7/file0/cpu.stat" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  241.297600][   T40] audit: type=1400 audit(2000000104.599:849): avc:  denied  { map } for  pid=14576 comm="syz.0.2415" path="/7/file0/cpu.stat" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  241.605784][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.695047][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.803681][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.857703][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  241.861596][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  241.864500][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  241.867749][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  241.872153][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  241.890450][T14580] lo speed is unknown, defaulting to 1000
[  241.925696][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.975878][T14580] xfrm0 speed is unknown, defaulting to 1000
[  242.064867][   T13] bridge_slave_1: left allmulticast mode
[  242.066659][   T13] bridge_slave_1: left promiscuous mode
[  242.068533][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.072329][   T13] bridge_slave_0: left allmulticast mode
[  242.074110][   T13] bridge_slave_0: left promiscuous mode
[  242.075984][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.330143][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.334291][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.337865][   T13] bond0 (unregistering): Released all slaves
[  242.370698][T14580] chnl_net:caif_netlink_parms(): no params data found
[  242.447700][T14580] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.450907][T14580] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.453913][T14580] bridge_slave_0: entered allmulticast mode
[  242.458183][T14580] bridge_slave_0: entered promiscuous mode
[  242.463105][T14580] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.465683][T14580] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.468397][T14580] bridge_slave_1: entered allmulticast mode
[  242.471187][T14580] bridge_slave_1: entered promiscuous mode
[  242.528298][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'.
[  242.529355][T14580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.531220][T14604] netlink: 'syz.5.2424': attribute type 21 has an invalid length.
[  242.535512][T14580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.565062][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2425'.
[  242.568812][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2425'.
[  242.578210][T14606] netlink: 'syz.5.2425': attribute type 12 has an invalid length.
[  242.594917][T14580] team0: Port device team_slave_0 added
[  242.631337][T14580] team0: Port device team_slave_1 added
[  242.686801][T14580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.689788][T14580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.700882][T14580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.709037][T14580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.711919][T14580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.722246][T14580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.726966][T14611] netlink: 'syz.5.2427': attribute type 5 has an invalid length.
[  242.752579][T14611] netlink: 'syz.5.2427': attribute type 5 has an invalid length.
[  242.814534][   T13] hsr_slave_0: left promiscuous mode
[  242.816667][   T13] hsr_slave_1: left promiscuous mode
[  242.819446][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.822246][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.825096][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.827702][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.862160][   T13] veth1_macvtap: left promiscuous mode
[  242.864722][   T13] veth0_macvtap: left promiscuous mode
[  242.867812][   T13] veth1_vlan: left promiscuous mode
[  242.870520][   T13] veth0_vlan: left promiscuous mode
[  243.522584][   T13] team0 (unregistering): Port device team_slave_1 removed
[  243.592734][   T13] team0 (unregistering): Port device team_slave_0 removed
[  243.931617][ T5937] Bluetooth: hci0: command tx timeout
[  244.104698][T14618] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2428'.
[  244.107797][T14618] netem: unknown loss type 13
[  244.109956][T14618] netem: change failed
[  244.138297][T14580] hsr_slave_0: entered promiscuous mode
[  244.140734][T14580] hsr_slave_1: entered promiscuous mode
[  244.142789][T14580] debugfs: 'hsr0' already exists in 'hsr'
[  244.144614][T14580] Cannot create hsr debugfs directory
[  244.362525][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2435'.
[  244.645688][T14580] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  244.649629][T14580] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  244.653528][T14580] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  244.657450][T14580] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  244.704686][T14580] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.716363][T14580] 8021q: adding VLAN 0 to HW filter on device team0
[  244.724423][T10493] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.726706][T10493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.733314][T10494] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.735584][T10494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.859494][T14580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.886197][T14580] veth0_vlan: entered promiscuous mode
[  244.891717][T14580] veth1_vlan: entered promiscuous mode
[  244.907210][T14580] veth0_macvtap: entered promiscuous mode
[  244.911388][T14580] veth1_macvtap: entered promiscuous mode
[  244.924666][T14580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.930688][T14580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.936217][T10494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.941566][T10495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.944313][T10495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.949633][T10495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.986212][T10480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.988780][T10480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.000696][T10480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.003935][T10480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.087648][T14654] delete_channel: no stack
[  245.163858][T14661] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2439'.
[  245.215508][T14669] netlink: 'syz.3.2441': attribute type 1 has an invalid length.
[  245.226884][T14669] bond1 (unregistering): Released all slaves
[  245.269890][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'.
[  245.498401][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'.
[  245.590661][T14686] team0 (unregistering): Port device team_slave_0 removed
[  245.596653][T14686] team0 (unregistering): Port device team_slave_1 removed
[  246.008954][ T5937] Bluetooth: hci0: command tx timeout
[  246.038085][T14689] bond2 (unregistering): Released all slaves
[  246.136142][T14693] x_tables: duplicate underflow at hook 1
[  246.138227][T14693] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2448'.
[  246.266867][   T40] audit: type=1400 audit(2000000109.579:850): avc:  denied  { ioctl } for  pid=14704 comm="syz.9.2452" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  246.435575][T14714] new mount options do not match the existing superblock, will be ignored
[  246.445296][T14715] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  246.743371][T14735] __nla_validate_parse: 1 callbacks suppressed
[  246.743381][T14735] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2459'.
[  246.751149][T14734] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  246.756103][T14734] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  246.760531][T14734] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  246.860135][T14739] fuse: Unknown parameter 'uwer_id'
[  247.113652][    C2] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  247.117105][    C2] sr 2:0:0:0: [sr0] tag#20 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[  247.169914][T14761] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2467'.
[  247.209940][T14761] kvm: user requested TSC rate below hardware speed
[  247.214989][T14761] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  247.365152][T14769] lo speed is unknown, defaulting to 1000
[  247.445455][T14769] xfrm0 speed is unknown, defaulting to 1000
[  248.088993][ T5937] Bluetooth: hci0: command tx timeout
[  248.159957][ T5937] Bluetooth: hci1: Unknown advertising packet type: 0x5f
[  248.160017][ T5937] Bluetooth: hci1: Malformed LE Event: 0x0d
[  248.235440][T14800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  248.371949][T14809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2481'.
[  248.374728][T14809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2481'.
[  248.410083][T14811] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  248.646647][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2485'.
[  248.651171][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2485'.
[  248.764754][T14833] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2490'.
[  248.802637][T14838] overlayfs: conflicting lowerdir path
[  249.492008][T14851] netlink: 'syz.5.2496': attribute type 9 has an invalid length.
[  249.596298][T14862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  249.641749][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2498'.
[  249.644846][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2498'.
[  249.847274][  T841] hid_parser_main: 4086 callbacks suppressed
[  249.847287][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.849742][   T40] audit: type=1400 audit(2000000113.169:851): avc:  denied  { mounton } for  pid=14881 comm="syz.9.2500" path="/87/file0/file0" dev="ramfs" ino=62574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  249.851751][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.859760][   T40] audit: type=1400 audit(2000000113.169:852): avc:  denied  { execute } for  pid=14881 comm="syz.9.2500" path="/87/file0/cpu.stat" dev="ramfs" ino=61123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  249.862418][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.871929][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.874214][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.876533][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.878962][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.881477][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.883846][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.886340][  T841] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  249.891454][  T841] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [] on 3z��۲�^�|���ބ�	���1��J�J�g�m!�v��';۝J=�
�a)�g_Bl%�D�
[  250.156910][T14890] overlayfs: failed lookup in lower (newroot/89, name='bus', err=-40): overlapping layers
[  250.164938][T14892] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers
[  250.169431][ T5937] Bluetooth: hci0: command tx timeout
[  250.281669][   T40] audit: type=1400 audit(2000000113.599:853): avc:  denied  { read } for  pid=14897 comm="syz.9.2504" path="socket:[63521]" dev="sockfs" ino=63521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  250.351108][T14911] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2508'.
[  250.433139][T14934] bond10: entered promiscuous mode
[  250.439824][T14934] netlink: 'syz.5.2512': attribute type 1 has an invalid length.
[  250.453171][T14934] bond11 (unregistering): Released all slaves
[  250.642537][T14956] bridge0: port 2(veth0_to_bridge) entered blocking state
[  250.644976][T14956] bridge0: port 2(veth0_to_bridge) entered disabled state
[  250.647358][T14956] veth0_to_bridge: entered allmulticast mode
[  250.650347][T14956] veth0_to_bridge: entered promiscuous mode
[  250.652325][T14956] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  250.656742][T14956] bridge0: port 2(veth0_to_bridge) entered blocking state
[  250.659097][T14956] bridge0: port 2(veth0_to_bridge) entered forwarding state
[  250.773108][T14964] kAFS: Can only specify source 'none' with -o dyn
[  251.609255][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.613718][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.618180][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.622180][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.626356][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.630290][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.634134][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.637921][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.641854][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  251.648712][T14971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.651434][T14971] IPv6: NLM_F_CREATE should be set when creating new route
[  251.653826][T14971] IPv6: NLM_F_CREATE should be set when creating new route
[  251.656209][T14971] IPv6: NLM_F_CREATE should be set when creating new route
[  251.659740][T14971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.672917][T14971] 8021q: adding VLAN 0 to HW filter on device bond11
[  251.679222][T14971] bond0: (slave bond11): Enslaving as an active interface with a down link
[  251.738662][T14973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=14973 comm=syz.5.2521
[  252.387593][T14980] __nla_validate_parse: 1 callbacks suppressed
[  252.387604][T14980] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2524'.
[  252.415187][T14980] loop6: detected capacity change from 0 to 524287999
[  252.417803][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.420842][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.423566][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.426144][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.429084][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.432444][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.435843][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.439650][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.442305][T14980] ldm_validate_partition_table(): Disk read failed.
[  252.444602][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.447384][T14980] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.450329][T14980] Dev loop6: unable to read RDB block 0
[  252.452441][T14980]  loop6: unable to read partition table
[  252.454670][T14980] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  252.514466][T14985] tipc: Trying to set illegal importance in message
[  252.519538][   T40] audit: type=1400 audit(2000000115.839:854): avc:  denied  { create } for  pid=14981 comm="syz.3.2525" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  252.520959][T14980] ldm_validate_partition_table(): Disk read failed.
[  252.530674][T14980] Dev loop6: unable to read RDB block 0
[  252.535467][T14980]  loop6: unable to read partition table
[  252.537410][T14980] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  252.659615][T14993] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  252.661655][T14993] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  252.664917][T14993] vhci_hcd vhci_hcd.0: Device attached
[  252.671374][T14993] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5)
[  252.674110][T14993] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  252.677202][T14993] vhci_hcd vhci_hcd.0: Device attached
[  252.908923][  T841] usb 55-1: new low-speed USB device number 2 using vhci_hcd
[  253.238889][    C2] net_ratelimit: 52670 callbacks suppressed
[  253.238902][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.244551][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.248296][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.252252][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.256048][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.260057][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.263860][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.267817][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.272306][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.276650][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.463393][   T40] audit: type=1326 audit(2000000116.779:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.5.2530" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9be818f6c9 code=0x0
[  253.492981][T14996] vhci_hcd: connection closed
[  253.493120][T14994] vhci_hcd: connection reset by peer
[  253.493158][T10474] vhci_hcd: stop threads
[  253.497708][T10474] vhci_hcd: release socket
[  253.499344][T10474] vhci_hcd: disconnect device
[  253.501211][T10474] vhci_hcd: stop threads
[  253.502574][T10474] vhci_hcd: release socket
[  253.504037][T10474] vhci_hcd: disconnect device
[  253.719837][T15006] binder: 15004:15006 ioctl c018620b 0 returned -14
[  254.641369][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2543'.
[  254.715893][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2538'.
[  254.781360][T15063] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  254.783427][T15063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  254.786414][T15063] vhci_hcd vhci_hcd.0: Device attached
[  254.794110][   T40] audit: type=1400 audit(2000000118.109:856): avc:  denied  { map } for  pid=15062 comm="syz.3.2548" path="socket:[63706]" dev="sockfs" ino=63706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  254.794587][T15063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=15063 comm=syz.3.2548
[  254.807407][T15065] vhci_hcd: connection closed
[  254.807583][T10494] vhci_hcd: stop threads
[  254.810552][T10494] vhci_hcd: release socket
[  254.811966][T10494] vhci_hcd: disconnect device
[  254.872053][T15075] 8021q: adding VLAN 0 to HW filter on device bond2
[  254.888524][T15075] bond2: (slave ip6gretap1): making interface the new active one
[  254.892633][T15075] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  254.955107][T15086] binder: 15083:15086 ioctl 40086200 200000000200 returned -22
[  254.957565][T15086] binder: 15083:15086 ioctl 40086200 200000000200 returned -22
[  255.026282][   T40] audit: type=1800 audit(2000000118.339:857): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2557" name="cpuacct.usage_percpu" dev="tmpfs" ino=636 res=0 errno=0
[  255.066143][   T40] audit: type=1400 audit(2000000118.379:858): avc:  denied  { read } for  pid=15095 comm="syz.9.2558" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  255.076355][   T40] audit: type=1400 audit(2000000118.379:859): avc:  denied  { open } for  pid=15095 comm="syz.9.2558" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  255.086016][   T40] audit: type=1400 audit(2000000118.379:860): avc:  denied  { ioctl } for  pid=15095 comm="syz.9.2558" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  255.226007][   T40] audit: type=1400 audit(2000000118.539:861): avc:  denied  { read write } for  pid=15099 comm="syz.9.2559" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  255.228176][T15100] program syz.9.2559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  255.235469][   T40] audit: type=1400 audit(2000000118.539:862): avc:  denied  { open } for  pid=15099 comm="syz.9.2559" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  255.287791][T15103] Bluetooth: MGMT ver 1.23
[  255.352779][T15105] netlink: 'syz.3.2561': attribute type 83 has an invalid length.
[  255.385557][T15108] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2562'.
[  255.388989][T15107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2562'.
[  255.391960][T15107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2562'.
[  255.395072][T15107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2562'.
[  255.462506][T15115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2564'.
[  255.491392][T15117] fuse: Unknown parameter 'user_i�A00000000000000000000'
[  255.521951][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  255.524084][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  255.586747][T15122] netlink: 'syz.3.2567': attribute type 2 has an invalid length.
[  255.653020][T15127] xt_time: invalid argument - start or stop time greater than 23:59:59
[  255.676896][   T40] audit: type=1326 audit(2000000118.989:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15072 comm="syz.5.2552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be818f6c9 code=0x7fc00000
[  255.710316][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'.
[  255.841180][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.850698][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.856641][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.860995][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.863685][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.898631][T15134] lo speed is unknown, defaulting to 1000
[  255.975205][T15134] xfrm0 speed is unknown, defaulting to 1000
[  256.055203][T15134] chnl_net:caif_netlink_parms(): no params data found
[  256.129648][T15134] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.131927][T15134] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.134504][T15134] bridge_slave_0: entered allmulticast mode
[  256.137694][T15134] bridge_slave_0: entered promiscuous mode
[  256.141389][T15134] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.144765][T15134] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.153663][T15134] bridge_slave_1: entered allmulticast mode
[  256.156286][T15134] bridge_slave_1: entered promiscuous mode
[  256.253701][T15134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.260857][T15134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.261143][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  256.267829][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.271579][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.280832][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.284940][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.326847][T15134] team0: Port device team_slave_0 added
[  256.333787][T15134] team0: Port device team_slave_1 added
[  256.369789][T15144] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  256.372869][T15134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.375395][T15144] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  256.377463][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.393792][T15134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.397295][T15147] lo speed is unknown, defaulting to 1000
[  256.398036][T15134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.401876][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.409934][T15134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.475163][T15134] hsr_slave_0: entered promiscuous mode
[  256.478469][T15134] hsr_slave_1: entered promiscuous mode
[  256.481612][T15134] debugfs: 'hsr0' already exists in 'hsr'
[  256.483445][T15134] Cannot create hsr debugfs directory
[  256.487789][T15147] xfrm0 speed is unknown, defaulting to 1000
[  256.621374][T15157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=15157 comm=syz.9.2578
[  256.672494][T15159] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  256.683341][T15134] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.686966][T15134] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  256.762596][T15164] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  256.788122][T15169] fuse: Bad value for 'group_id'
[  256.790424][T15169] fuse: Bad value for 'group_id'
[  256.814125][T15134] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.818431][T15134] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  256.839858][T15147] chnl_net:caif_netlink_parms(): no params data found
[  256.950627][T15134] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.954723][T15134] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.049504][T15134] team0: Port device netdevsim0 removed
[  257.052785][T15134] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.056307][T15134] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.130395][T15147] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.132665][T15147] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.135318][T15147] bridge_slave_0: entered allmulticast mode
[  257.137943][T15147] bridge_slave_0: entered promiscuous mode
[  257.144307][T15147] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.146542][T15147] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.148802][T15147] bridge_slave_1: entered allmulticast mode
[  257.157854][T15147] bridge_slave_1: entered promiscuous mode
[  257.190936][T15187] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2586'.
[  257.224502][T15147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.246506][T15147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.296117][T15147] team0: Port device team_slave_0 added
[  257.311832][T15147] team0: Port device team_slave_1 added
[  257.360045][T15134] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  257.365498][T15147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.367771][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.376492][T15147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.380437][T15134] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  257.383182][T15196] orangefs: client-core tried to read wrong size
[  257.387417][T15147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.390367][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.398365][T15147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.402161][T15134] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  257.429259][T15134] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  257.456348][T15147] hsr_slave_0: entered promiscuous mode
[  257.458714][T15147] hsr_slave_1: entered promiscuous mode
[  257.460905][T15147] debugfs: 'hsr0' already exists in 'hsr'
[  257.462717][T15147] Cannot create hsr debugfs directory
[  257.631822][T15134] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.658972][ T7854] usb 14-1: new high-speed USB device number 3 using dummy_hcd
[  257.689262][T15134] 8021q: adding VLAN 0 to HW filter on device team0
[  257.694659][T10495] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.697027][T10495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.706792][T10495] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.709751][T10495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.822848][ T7854] usb 14-1: Using ep0 maxpacket: 8
[  257.826425][ T7854] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  257.832268][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  257.836711][ T7854] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  257.841500][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  257.846055][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  257.851752][ T7854] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  257.854798][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  257.856521][T15134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.864359][ T7854] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  257.869383][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  257.873194][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  257.878732][ T7854] usb 14-1: config 168 descriptor has 1 excess byte, ignoring
[  257.881382][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  257.884964][ T7854] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  257.888664][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  257.892205][ T7854] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  257.898141][ T7854] usb 14-1: string descriptor 0 read error: -22
[  257.900772][ T7854] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  257.903692][ T7854] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.909475][ T7854] adutux 14-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  257.929720][ T5943] Bluetooth: hci4: command tx timeout
[  257.933416][T15147] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  257.938756][T15147] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  257.948459][T15147] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  257.955360][T15147] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  257.990895][  T841] vhci_hcd: vhci_device speed not set
[  258.003763][T15134] veth0_vlan: entered promiscuous mode
[  258.014421][T15134] veth1_vlan: entered promiscuous mode
[  258.019773][T15147] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.035194][T15147] 8021q: adding VLAN 0 to HW filter on device team0
[  258.042458][T15134] veth0_macvtap: entered promiscuous mode
[  258.050558][T15134] veth1_macvtap: entered promiscuous mode
[  258.054888][T10494] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.057355][T10494] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.063718][T10494] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.066040][T10494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.077030][T15224] tipc: Started in network mode
[  258.082093][T15224] tipc: Node identity faaf3f37e5b9, cluster identity 4711
[  258.085161][T15224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.090271][T15225] syzkaller0: entered promiscuous mode
[  258.092025][T15225] syzkaller0: entered allmulticast mode
[  258.100663][T15134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.107920][T15225] tipc: Resetting bearer <eth:syzkaller0>
[  258.120911][ T7854] usb 14-1: USB disconnect, device number 3
[  258.150412][T15225] tipc: Disabling bearer <eth:syzkaller0>
[  258.159920][T15134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.174034][T15147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  258.177406][T15147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  258.190999][T10474] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.193775][T10474] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.200628][T10474] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.203546][T10474] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.248870][    C2] net_ratelimit: 171751 callbacks suppressed
[  258.248882][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.252699][T10494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.254563][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.261039][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.261080][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.261422][T10494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.271073][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.274870][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.278554][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.282320][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.286037][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.289801][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.303099][T10494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.306495][T10494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.310333][T15235] No control pipe specified
[  258.319085][ T5943] Bluetooth: hci2: command tx timeout
[  258.323318][T15147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.358603][T15147] veth0_vlan: entered promiscuous mode
[  258.377943][T15147] veth1_vlan: entered promiscuous mode
[  258.402309][T15147] veth0_macvtap: entered promiscuous mode
[  258.406095][T15147] veth1_macvtap: entered promiscuous mode
[  258.425894][T15147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.439424][T15147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.445316][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.450232][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.471097][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.475039][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.516580][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.521813][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.535257][T10493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.538530][T10493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.590324][T15248] __nla_validate_parse: 1 callbacks suppressed
[  258.590334][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'.
[  258.621469][T15250] xt_socket: unknown flags 0xe4
[  258.692877][    C3] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  258.697157][    C3] sr 2:0:0:0: [sr0] tag#3 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[  258.729516][ T7854] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  258.781981][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  258.781990][   T40] audit: type=1400 audit(2000000122.099:866): avc:  denied  { remount } for  pid=15261 comm="syz.9.2601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  258.783918][T15262] devpts: Bad value for 'max'
[  258.814449][   T40] audit: type=1400 audit(2000000122.129:867): avc:  denied  { unmount } for  pid=13651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  258.889144][ T7854] usb 10-1: Using ep0 maxpacket: 8
[  258.895756][ T7854] usb 10-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.40
[  258.899959][ T7854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.903004][ T7854] usb 10-1: Manufacturer: 닱蜢롘ｹ㳶瀵ﷸ뎃곯됆ꡇ쯘ṇ授훌ᣢ㜬﫳諓ꦱ⌿㴀ⶣｾ蚂橅訕㤔鉼獮킱頮Ἁꊜ삮筝셥㎉獡緔⼊倗쵌鷸꓏驮㡫䋈鵯䶢阽뛛԰嘭書✳땖㋁﹚ẋ亐鈈ਲ਼䒟ᔯ街씶䩟ₒଊ䁗癠윜ꕗ厡ቬ鹲侚⹚疈蝑✊輊깹쇸㛼㻴䏲ᅅ锏蠐
[  258.911808][ T7854] usb 10-1: SerialNumber: syz
[  258.912112][T15276] geneve2: entered promiscuous mode
[  258.915697][T15276] geneve2: entered allmulticast mode
[  259.131298][T15291] lo speed is unknown, defaulting to 1000
[  259.229689][T15301] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2608'.
[  259.240406][T15292] lo speed is unknown, defaulting to 1000
[  259.244208][T15291] xfrm0 speed is unknown, defaulting to 1000
[  259.259097][T15301] could not open pipe file descriptor
[  259.331765][T15244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.335415][T15244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.352050][ T7854] usbhid 10-1:1.0: can't add hid device: -71
[  259.355189][ T7854] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  259.363687][ T7854] usb 10-1: USB disconnect, device number 12
[  259.395632][T15292] xfrm0 speed is unknown, defaulting to 1000
[  259.762216][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2624'.
[  259.765949][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2624'.
[  259.838616][T15360] No such timeout policy "syz1"
[  259.876697][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2626'.
[  259.885060][T10493] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.888303][T10493] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.893168][T10493] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.896337][T10493] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.896362][T15364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15364 comm=syz.5.2626
[  259.905644][T15364] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2626'.
[  259.978589][T15370] syzkaller1: entered promiscuous mode
[  259.981041][T15370] syzkaller1: entered allmulticast mode
[  259.998510][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2629'.
[  260.000029][ T5943] Bluetooth: hci4: command tx timeout
[  260.115948][T15390] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2635'.
[  260.301655][T15335] overlayfs: statfs failed on './file0'
[  260.401360][ T5943] Bluetooth: hci2: command tx timeout
[  260.561536][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2650'.
[  260.958979][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  260.974279][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2657'.
[  260.986923][T15470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64527 sclass=netlink_route_socket pid=15470 comm=syz.3.2658
[  260.989579][   T40] audit: type=1326 audit(2000000124.309:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.3.2658" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde81d8f6c9 code=0x0
[  261.119028][    T9] usb 7-1: Using ep0 maxpacket: 8
[  261.122570][    T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  261.125397][    T9] usb 7-1: config 0 has no interface number 0
[  261.127786][    T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  261.131479][    T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  261.135829][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  261.140320][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024
[  261.143951][    T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  261.148142][    T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  261.152438][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.156289][    T9] usb 7-1: config 0 descriptor??
[  261.158584][T15457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  261.163687][    T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  261.238669][   T40] audit: type=1400 audit(2000000124.549:869): avc:  denied  { write } for  pid=15485 comm="syz.9.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  261.368665][   T40] audit: type=1400 audit(2000000124.679:870): avc:  denied  { unmount } for  pid=15456 comm="syz.2.2654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  261.371247][T15457] overlay: Unknown parameter 'fowner>00000000000000060928'
[  261.380569][    T9] usb 7-1: USB disconnect, device number 11
[  261.386655][    T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  261.624613][T15510] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  261.929670][T15529] 9pnet_virtio: no channels available for device syz
[  262.031402][T15537] netlink: 'syz.2.2679': attribute type 3 has an invalid length.
[  262.031438][T15537] netlink: 'syz.2.2679': attribute type 2 has an invalid length.
[  262.079147][ T5943] Bluetooth: hci4: command tx timeout
[  262.244712][   T40] audit: type=1400 audit(2000000125.559:871): avc:  denied  { listen } for  pid=15549 comm="syz.2.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  262.252629][   T40] audit: type=1400 audit(2000000125.559:872): avc:  denied  { accept } for  pid=15549 comm="syz.2.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  262.481608][ T5943] Bluetooth: hci2: command tx timeout
[  262.505751][T15566] team0 (unregistering): Port device team_slave_0 removed
[  262.513376][T15566] team0 (unregistering): Port device team_slave_1 removed
[  262.515727][   T40] audit: type=1400 audit(2000000125.829:873): avc:  denied  { setopt } for  pid=15571 comm="syz.2.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  262.529600][T15570] sp0: Synchronizing with TNC
[  262.535643][T15569] [U] �``
[  262.575077][T15575] netlink: 'syz.2.2691': attribute type 22 has an invalid length.
[  262.587426][T10480] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  262.589046][T15575] netlink: 'syz.2.2691': attribute type 22 has an invalid length.
[  262.591262][T10480] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.597291][T10480] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.602336][T10480] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.258875][    C2] net_ratelimit: 172279 callbacks suppressed
[  263.258886][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.264520][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.267839][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.271942][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.275652][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.279381][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.283068][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.286738][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.290474][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.294205][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.352239][T15596] UHID_CREATE from different security context by process 480 (syz.9.2698), this is not allowed.
[  263.738803][   T40] audit: type=1400 audit(2000000127.049:874): avc:  denied  { lock } for  pid=15624 comm="syz.3.2707" path="socket:[66405]" dev="sockfs" ino=66405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  263.797751][T15627] __nla_validate_parse: 11 callbacks suppressed
[  263.797767][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'.
[  263.866448][T15629] trusted_key: encrypted_key: master key parameter 'de�ult' is invalid
[  263.894866][T15629] overlay: Unknown parameter 'smackfstransmute'
[  264.162888][T15643] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  264.169108][ T5943] Bluetooth: hci4: command tx timeout
[  264.171741][T15643] netlink: 760 bytes leftover after parsing attributes in process `syz.5.2712'.
[  264.401991][   T40] audit: type=1400 audit(2000000127.719:875): avc:  denied  { listen } for  pid=15646 comm="syz.5.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  264.488993][   T53] usb 14-1: new high-speed USB device number 4 using dummy_hcd
[  264.559036][ T5943] Bluetooth: hci2: command tx timeout
[  264.610452][T15651] x_tables: ip_tables: osf match: only valid for protocol 6
[  264.641407][   T53] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  264.645173][   T53] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.648536][   T53] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.651764][   T53] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  264.656649][   T53] usb 14-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  264.659580][   T53] usb 14-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  264.662191][   T53] usb 14-1: Manufacturer: syz
[  264.664741][   T53] usb 14-1: config 0 descriptor??
[  264.837198][   T40] audit: type=1400 audit(2000000128.149:876): avc:  denied  { append } for  pid=15659 comm="syz.3.2719" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  264.858942][ T8880] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  264.872944][   T53] hid_parser_main: 15 callbacks suppressed
[  264.872956][   T53] appleir 0003:05AC:8243.000E: unknown main item tag 0x0
[  264.879164][   T53] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[  264.884811][T15660] binder: Bad value for 'max'
[  264.937753][   T40] audit: type=1400 audit(2000000128.249:877): avc:  denied  { mounton } for  pid=15659 comm="syz.3.2719" path="/syzcgroup/unified/syz3" dev="rpc_pipefs" ino=60218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1
[  264.988941][ T8880] usb 10-1: device descriptor read/64, error -71
[  265.238141][    T9] usb 14-1: USB disconnect, device number 4
[  265.239004][ T8880] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  265.369307][ T8880] usb 10-1: device descriptor read/64, error -71
[  265.487874][T15677] fuse: Bad value for 'fd'
[  265.489120][ T8880] usb usb10-port1: attempt power cycle
[  265.491222][T15677] fuse: Bad value for 'fd'
[  265.493040][T15677] fuse: Bad value for 'fd'
[  265.494626][T15677] fuse: Bad value for 'fd'
[  265.496420][T15677] fuse: Bad value for 'fd'
[  265.506062][T15677] fuse: Bad value for 'fd'
[  265.508287][T15677] fuse: Bad value for 'fd'
[  265.512647][T15677] fuse: Bad value for 'fd'
[  265.514751][T15677] fuse: Bad value for 'fd'
[  265.516893][T15677] fuse: Bad value for 'fd'
[  265.519588][T15677] fuse: Bad value for 'fd'
[  265.521718][T15677] fuse: Bad value for 'fd'
[  265.523861][T15677] fuse: Bad value for 'fd'
[  265.526001][T15677] fuse: Bad value for 'fd'
[  265.528143][T15677] fuse: Bad value for 'fd'
[  265.532181][T15677] fuse: Bad value for 'fd'
[  265.534682][T15677] fuse: Bad value for 'fd'
[  265.536792][T15677] fuse: Bad value for 'fd'
[  265.539050][T15677] fuse: Bad value for 'fd'
[  265.541184][T15677] fuse: Bad value for 'fd'
[  265.543302][T15677] fuse: Bad value for 'fd'
[  265.545444][T15677] fuse: Bad value for 'fd'
[  265.547449][T15677] fuse: Bad value for 'fd'
[  265.549387][T15677] fuse: Bad value for 'fd'
[  265.551317][T15677] fuse: Bad value for 'fd'
[  265.553418][T15677] fuse: Bad value for 'fd'
[  265.555496][T15677] fuse: Bad value for 'fd'
[  265.557629][T15677] fuse: Bad value for 'fd'
[  265.560240][T15677] fuse: Bad value for 'fd'
[  265.562388][T15677] fuse: Bad value for 'fd'
[  265.564041][T15677] fuse: Bad value for 'fd'
[  265.566047][T15677] fuse: Bad value for 'fd'
[  265.567928][T15677] fuse: Bad value for 'fd'
[  265.570015][T15677] fuse: Bad value for 'fd'
[  265.572135][T15677] fuse: Bad value for 'fd'
[  265.574240][T15677] fuse: Bad value for 'fd'
[  265.576360][T15677] fuse: Bad value for 'fd'
[  265.578442][T15677] fuse: Bad value for 'fd'
[  265.580435][T15677] fuse: Bad value for 'fd'
[  265.582165][T15677] fuse: Bad value for 'fd'
[  265.584309][T15677] fuse: Bad value for 'fd'
[  265.587685][T15677] fuse: Bad value for 'fd'
[  265.589557][T15677] fuse: Bad value for 'fd'
[  265.591097][T15677] fuse: Bad value for 'fd'
[  265.592992][T15677] fuse: Bad value for 'fd'
[  265.595074][T15677] fuse: Bad value for 'fd'
[  265.597194][T15677] fuse: Bad value for 'fd'
[  265.600243][T15677] fuse: Bad value for 'fd'
[  265.602239][T15677] fuse: Bad value for 'fd'
[  265.604163][T15677] fuse: Bad value for 'fd'
[  265.606152][T15677] fuse: Bad value for 'fd'
[  265.608269][T15677] fuse: Bad value for 'fd'
[  265.610477][T15677] fuse: Bad value for 'fd'
[  265.612610][T15677] fuse: Bad value for 'fd'
[  265.614725][T15677] fuse: Bad value for 'fd'
[  265.616871][T15677] fuse: Bad value for 'fd'
[  265.618688][T15677] fuse: Bad value for 'fd'
[  265.620877][T15677] fuse: Bad value for 'fd'
[  265.623007][T15677] fuse: Bad value for 'fd'
[  265.625415][T15677] fuse: Bad value for 'fd'
[  265.627522][T15677] fuse: Bad value for 'fd'
[  265.629845][T15677] fuse: Bad value for 'fd'
[  265.631985][T15677] fuse: Bad value for 'fd'
[  265.634141][T15677] fuse: Bad value for 'fd'
[  265.636236][T15677] fuse: Bad value for 'fd'
[  265.732278][   T40] audit: type=1400 audit(2000000129.049:878): avc:  granted  { setsecparam } for  pid=15681 comm="syz.9.2725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  265.771562][T15688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15688 comm=syz.9.2727
[  265.851460][ T8880] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  265.853861][T15697] ip6erspan0: entered promiscuous mode
[  265.869505][ T8880] usb 10-1: device descriptor read/8, error -71
[  265.925791][   T40] audit: type=1400 audit(2000000129.239:879): avc:  denied  { relabelfrom } for  pid=15702 comm="syz.9.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  265.934008][   T40] audit: type=1400 audit(2000000129.239:880): avc:  denied  { relabelto } for  pid=15702 comm="syz.9.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  266.060825][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'.
[  266.112923][T15712] ����: renamed from bond_slave_1 (while UP)
[  266.118935][ T8880] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  266.139289][ T8880] usb 10-1: device descriptor read/8, error -71
[  266.250186][ T8880] usb usb10-port1: unable to enumerate USB device
[  266.258300][T15721] overlayfs: failed to resolve 'context=user_u': -2
[  266.399240][  T841] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  266.552896][  T841] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.556082][  T841] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  266.559191][  T841] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  266.562051][  T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.569481][  T841] usb 7-1: config 0 descriptor??
[  266.579954][  T841] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  266.582345][  T841] dvb-usb: bulk message failed: -22 (3/0)
[  266.587594][  T841] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  266.591029][  T841] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  266.593439][  T841] usb 7-1: media controller created
[  266.596742][  T841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  266.608456][  T841] dvb-usb: bulk message failed: -22 (6/0)
[  266.611200][  T841] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  266.614970][  T841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input25
[  266.620409][  T841] dvb-usb: schedule remote query interval to 150 msecs.
[  266.622672][  T841] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  266.777701][T15717] dvb-usb: bulk message failed: -22 (4/0)
[  266.785176][  T841] dvb-usb: bulk message failed: -22 (1/0)
[  266.787440][  T841] dvb-usb: error while querying for an remote control event.
[  266.802617][   T34] usb 7-1: USB disconnect, device number 12
[  266.836764][   T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  266.927611][   T40] audit: type=1400 audit(2000000130.239:881): avc:  denied  { getopt } for  pid=15725 comm="syz.3.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  267.134201][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2741'.
[  267.180856][T15735] bridge1: port 1(veth3) entered blocking state
[  267.183010][T15735] bridge1: port 1(veth3) entered disabled state
[  267.185115][T15735] veth3: entered allmulticast mode
[  267.187573][T15735] veth3: entered promiscuous mode
[  267.225759][T15735] bridge1: port 2(veth5) entered blocking state
[  267.228243][T15735] bridge1: port 2(veth5) entered disabled state
[  267.242193][T15735] veth5: entered allmulticast mode
[  267.249607][T15736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=15736 comm=syz.3.2741
[  267.253478][T15735] veth5: entered promiscuous mode
[  267.314252][T15738] Unsupported ieee802154 address type: 0
[  267.317149][   T40] audit: type=1400 audit(2000000130.629:882): avc:  denied  { bind } for  pid=15737 comm="syz.3.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  268.172132][T15753] misc userio: The device must be registered before sending interrupts
[  268.203874][T15755] netlink: 'syz.3.2749': attribute type 1 has an invalid length.
[  268.249938][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'.
[  268.252811][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'.
[  268.268875][    C2] net_ratelimit: 179128 callbacks suppressed
[  268.268887][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.274512][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.278478][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.282498][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.286236][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.289924][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.293526][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.297078][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.300826][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.304527][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.369941][   T40] audit: type=1400 audit(2000000131.689:883): avc:  denied  { listen } for  pid=15762 comm="syz.2.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  268.426028][   T40] audit: type=1400 audit(2000000131.739:884): avc:  denied  { watch watch_reads } for  pid=15767 comm="syz.3.2753" path="pipe:[58990]" dev="pipefs" ino=58990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  268.458670][T15772] lo speed is unknown, defaulting to 1000
[  268.534744][T15772] xfrm0 speed is unknown, defaulting to 1000
[  268.618215][T15777] rtc_cmos 00:05: Alarms can be up to one day in the future
[  268.901663][ T5943] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  268.904299][ T5943] Bluetooth: hci4: unexpected event 0x3c length: 97 > 7
[  269.025172][T15817] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2768'.
[  269.079112][T15822] 9pnet_virtio: no channels available for device syz
[  269.288929][ T7854] usb 14-1: new low-speed USB device number 5 using dummy_hcd
[  269.400415][T15836] lo speed is unknown, defaulting to 1000
[  269.449133][ T7854] usb 14-1: Invalid ep0 maxpacket: 32
[  269.471531][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  269.471544][   T40] audit: type=1326 audit(2000000132.789:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.3.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde81d8f6c9 code=0x7fc00000
[  269.511979][T15836] xfrm0 speed is unknown, defaulting to 1000
[  269.599130][ T7854] usb 14-1: new low-speed USB device number 6 using dummy_hcd
[  269.609002][    T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  269.690324][   T40] audit: type=1400 audit(2000000133.009:889): avc:  denied  { append } for  pid=15854 comm="syz.3.2781" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  269.698984][T15855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2781'.
[  269.702524][T15855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2781'.
[  269.744909][   T40] audit: type=1400 audit(2000000133.059:890): avc:  denied  { mounton } for  pid=15854 comm="syz.3.2781" path="/117/file0" dev="gadgetfs" ino=7690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  269.748926][ T7854] usb 14-1: Invalid ep0 maxpacket: 32
[  269.757055][ T7854] usb usb14-port1: attempt power cycle
[  269.769340][    T9] usb 10-1: Using ep0 maxpacket: 8
[  269.775806][    T9] usb 10-1: config 0 has an invalid interface number: 186 but max is 0
[  269.779596][    T9] usb 10-1: config 0 has no interface number 0
[  269.782260][    T9] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  269.786744][    T9] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  269.791281][    T9] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  269.795841][    T9] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  269.801495][T15860] program syz.2.2783 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  269.806516][    T9] usb 10-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5
[  269.809931][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.813401][    T9] usb 10-1: Product: syz
[  269.814947][    T9] usb 10-1: Manufacturer: syz
[  269.817041][    T9] usb 10-1: SerialNumber: syz
[  269.821973][    T9] usb 10-1: config 0 descriptor??
[  269.850445][T15864] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  269.990350][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2790'.
[  270.046546][T15878] bond3: Removing last ns target with arp_interval on
[  270.049067][T15834] rose0: tun_chr_ioctl cmd 1074025678
[  270.050847][T15834] rose0: group set to 0
[  270.118553][    T9] iowarrior 10-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0
[  270.120626][ T7854] usb 14-1: new low-speed USB device number 7 using dummy_hcd
[  270.139860][ T7854] usb 14-1: Invalid ep0 maxpacket: 32
[  270.261272][T15899] kvm: kvm [15898]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407
[  270.264550][T15899] kvm: kvm [15898]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07
[  270.279407][ T7854] usb 14-1: new low-speed USB device number 8 using dummy_hcd
[  270.302108][ T7854] usb 14-1: Invalid ep0 maxpacket: 32
[  270.306630][ T7854] usb usb14-port1: unable to enumerate USB device
[  270.795860][    T9] IPVS: starting estimator thread 0...
[  270.887695][T15914] IPVS: using max 28 ests per chain, 67200 per kthread
[  271.362015][T15926] 9pnet_fd: Insufficient options for proto=fd
[  271.566340][   T40] audit: type=1400 audit(2000000134.879:891): avc:  denied  { read } for  pid=15927 comm="syz.3.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  271.599676][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2808'.
[  272.194113][T15967] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2816'.
[  272.440118][ T7854] usb 10-1: USB disconnect, device number 17
[  272.529045][T15985] lo speed is unknown, defaulting to 1000
[  272.615255][T15985] xfrm0 speed is unknown, defaulting to 1000
[  272.739017][   T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  272.892625][   T34] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  272.896367][   T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.899810][   T34] usb 7-1: Product: syz
[  272.901507][   T34] usb 7-1: Manufacturer: syz
[  272.903378][   T34] usb 7-1: SerialNumber: syz
[  272.909988][   T34] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  272.946250][   T34] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  273.006958][   T40] audit: type=1400 audit(2000000136.319:892): avc:  denied  { execute } for  pid=15990 comm="syz.3.2823" path="/138/file0/cpu.stat" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  273.020484][   T40] audit: type=1400 audit(2000000136.339:893): avc:  denied  { lock } for  pid=15990 comm="syz.3.2823" path="/138/file0/cpuset.memory_pressure_enabled" dev="9p" ino=71827929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  273.093498][T15999] overlayfs: failed to resolve './bus': -2
[  273.098244][T16000] overlay: filesystem on ./bus not supported as upperdir
[  273.102586][T16000] overlay: filesystem on ./bus not supported as upperdir
[  273.166349][   T40] audit: type=1400 audit(2000000136.479:894): avc:  denied  { write } for  pid=16005 comm="syz.5.2828" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  273.196713][T16006] usb usb4: usbfs: process 16006 (syz.5.2828) did not claim interface 0 before use
[  273.278897][    C2] net_ratelimit: 153337 callbacks suppressed
[  273.278909][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.284886][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.288675][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.292426][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.296114][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.299913][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.303842][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.307527][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.311179][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.314922][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.331546][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'.
[  273.334736][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'.
[  273.391253][   T40] audit: type=1400 audit(2000000136.709:895): avc:  denied  { connect } for  pid=16023 comm="syz.9.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  273.406705][T16026] overlayfs: failed to get inode (-116)
[  273.410849][T16026] overlayfs: failed to get inode (-116)
[  273.466753][T16029] batman_adv: batadv0: Adding interface: macsec1
[  273.470155][T16029] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.482482][T16029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.486836][T16029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.490719][T16029] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active
[  273.577978][T16042] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  273.585825][T16042] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  273.591225][T16042] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  273.594380][T16042] UDF-fs: Scanning with blocksize 512 failed
[  273.604718][T16042] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  273.609016][T16042] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  273.613571][T16042] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  273.615997][T16042] UDF-fs: Scanning with blocksize 1024 failed
[  273.618270][T16042] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  273.621981][T16042] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  273.625159][T16042] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  273.627553][T16042] UDF-fs: Scanning with blocksize 2048 failed
[  273.629958][T16042] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  273.632962][T16042] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  273.635287][T16044] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2838'.
[  273.636080][T16042] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  273.640563][T16044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.642158][T16042] UDF-fs: Scanning with blocksize 4096 failed
[  273.642167][T16042] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  273.654389][T16044] batadv_slave_0: entered promiscuous mode
[  273.681283][   T40] audit: type=1400 audit(2000000136.999:896): avc:  denied  { getopt } for  pid=16048 comm="syz.5.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  273.722081][T16033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.725577][T16033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.899433][T16066] comedi comedi3: pcl730: I/O port conflict (0x8001,4)
[  273.999003][   T34] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  274.001375][   T34] ath9k_htc: Failed to initialize the device
[  274.023022][   T34] usb 7-1: ath9k_htc: USB layer deinitialized
[  274.031595][  T840] usb 7-1: USB disconnect, device number 13
[  274.066409][T16074] syz_tun: entered allmulticast mode
[  274.069020][T16074] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  274.166638][   T40] audit: type=1400 audit(2000000137.479:897): avc:  denied  { map } for  pid=16073 comm="syz.5.2847" path="socket:[71725]" dev="sockfs" ino=71725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  274.625582][T16073] syz_tun: left allmulticast mode
[  274.741822][T16103] xt_connbytes: Forcing CT accounting to be enabled
[  274.744902][T16103] set match dimension is over the limit!
[  274.774923][T16105] xt_bpf: check failed: parse error
[  274.777167][T16105] nfs4: Unknown parameter 'tcp
D<3'
[  274.828205][T16112] ieee802154 phy0 wpan0: encryption failed: -22
[  275.089417][   T34] usb 14-1: new high-speed USB device number 9 using dummy_hcd
[  275.125504][T16133] binder: 16131:16133 ioctl c0306201 200000000640 returned -22
[  275.188703][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  275.188714][   T40] audit: type=1400 audit(2000000138.499:899): avc:  denied  { getopt } for  pid=16136 comm="syz.3.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  275.241750][   T34] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  275.244866][   T34] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.248353][   T34] usb 14-1: Product: syz
[  275.250326][   T34] usb 14-1: Manufacturer: syz
[  275.252312][   T34] usb 14-1: SerialNumber: syz
[  275.263498][   T34] usb 14-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  275.279809][   T34] usb 14-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  275.333843][   T40] audit: type=1400 audit(2000000138.649:900): avc:  denied  { ioctl } for  pid=16140 comm="syz.3.2869" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  275.334894][T16141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=16141 comm=syz.3.2869
[  275.354486][   T40] audit: type=1400 audit(2000000138.669:901): avc:  denied  { read } for  pid=16140 comm="syz.3.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  275.454061][T16145] netlink: 'syz.3.2871': attribute type 30 has an invalid length.
[  275.672483][T16157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55893 sclass=netlink_route_socket pid=16157 comm=syz.3.2875
[  275.726412][T16167] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2876'.
[  275.877372][T16172] bridge0: entered promiscuous mode
[  275.879767][T16172] macsec2: entered promiscuous mode
[  276.037919][T16183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.041090][T16183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.101318][T16187] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  276.329077][   T34] ath9k_htc 14-1:1.0: ath9k_htc: Target is unresponsive
[  276.331476][   T34] ath9k_htc: Failed to initialize the device
[  276.340419][  T841] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  276.350786][   T34] usb 14-1: ath9k_htc: USB layer deinitialized
[  276.456166][T16202] geneve2: entered promiscuous mode
[  276.458420][T16202] geneve2: entered allmulticast mode
[  276.494965][  T841] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  276.500824][  T841] usb 7-1: config 1 interface 0 has no altsetting 0
[  276.505575][  T841] usb 7-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40
[  276.509431][  T841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.512740][  T841] usb 7-1: Product: ᷽ᷝ惩໣祑縹萔拖Ήꑝﬨ梃莹儯ẍ᳹⪸騽畽㢘℻톲ꡏ仕㥭ĸ䮆篙킹屫꿫佉ᯉ단졄रﵬ븻鶮䳘ফ횇ഠ쿳ᨕ獽ᅕ᝖ᒒ璩뱢啒괓勾掺㮚碪䩄ꘄ斤Ο䟽垐輈㙎䲫趭㢠혦ꀳ洀⧢䶙郒ꪹ䶕솷뻃蓑蝬妲㟬㞥⣣⩕⨝쫲닳ᾜ乵摞唾퉝Ͼ쟔锺䦶
[  276.527027][  T841] usb 7-1: Manufacturer: 凕
[  276.529399][  T841] usb 7-1: SerialNumber: І
[  276.561630][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'.
[  276.568170][T16204] erspan0: entered promiscuous mode
[  276.571537][T16204] macvtap1: entered promiscuous mode
[  276.573294][T16204] macvtap1: entered allmulticast mode
[  276.575003][T16204] erspan0: entered allmulticast mode
[  276.650944][T16118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.653872][T16118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.663318][ T7854] usb 14-1: USB disconnect, device number 9
[  276.718129][T16215] overlayfs: overlapping lowerdir path
[  276.726873][T16215] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  276.730086][T16215] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  276.765994][  T841] usbhid 7-1:1.0: can't add hid device: -71
[  276.768080][  T841] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  276.779323][  T841] usb 7-1: USB disconnect, device number 14
[  276.884749][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2899'.
[  276.925945][   T40] audit: type=1400 audit(2000000140.239:902): avc:  denied  { connect } for  pid=16241 comm="syz.5.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  277.306632][   T40] audit: type=1400 audit(2000000140.619:903): avc:  denied  { mount } for  pid=16253 comm="syz.2.2905" name="/" dev="pstore" ino=5781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  277.359802][T16262] geneve1: entered allmulticast mode
[  277.462085][   T40] audit: type=1400 audit(2000000140.779:904): avc:  denied  { ioctl } for  pid=16270 comm="syz.2.2911" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  278.288852][    C2] net_ratelimit: 180483 callbacks suppressed
[  278.288864][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.294376][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.298110][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.301767][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.305562][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.309462][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.313189][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.316921][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.320841][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.324446][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.420282][T16289] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2916'.
[  278.448387][T16291] can0: slcan on ttyprintk.
[  278.473548][T16290] [U] ^@
[  278.543273][T16308] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  278.560603][T16290] can0 (unregistered): slcan off ttyprintk.
[  278.839058][  T841] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  278.993290][  T841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  278.997845][  T841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  279.002785][  T841] usb 10-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  279.006556][  T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.011885][  T841] usb 10-1: config 0 descriptor??
[  279.015369][T16313] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  279.307388][T16320] i2c i2c-1: Invalid block write size 34
[  279.333628][  T841] usbhid 10-1:0.0: can't add hid device: -71
[  279.336191][  T841] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  279.344827][  T841] usb 10-1: USB disconnect, device number 18
[  279.527233][T16340] usb usb8: usbfs: process 16340 (syz.3.2933) did not claim interface 0 before use
[  279.838375][T16352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16352 comm=syz.9.2936
[  279.859915][T16354] netlink: 'syz.5.2937': attribute type 2 has an invalid length.
[  280.031190][T16374] usb usb9: usbfs: process 16374 (syz.5.2943) did not claim interface 0 before use
[  280.052168][T16376] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2944'.
[  280.055387][T16376] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2944'.
[  280.229710][T16390] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  280.234633][T16390] qnx6: wrong signature (magic) in superblock #1.
[  280.237423][T16390] qnx6: unable to read the first superblock
[  280.372049][T16400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=16400 comm=syz.2.2951
[  280.382908][T16400] nfs: Unknown parameter '�s(#��4p�a �usp"'
[  280.445697][   T40] audit: type=1400 audit(2000000143.759:905): avc:  denied  { setattr } for  pid=16401 comm="syz.9.2952" name="video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  280.519464][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2957'.
[  280.535632][   T60] libceph: connect (1)[c::]:6789 error -13
[  280.538171][   T60] libceph: mon0 (1)[c::]:6789 connect error
[  280.689136][T16414] ceph: No mds server is up or the cluster is laggy
[  280.759109][  T841] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  280.908899][  T841] usb 10-1: Using ep0 maxpacket: 8
[  280.912725][  T841] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  280.916335][  T841] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  280.921664][  T841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  280.925847][  T841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  280.930617][  T841] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  280.938486][  T841] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  280.942371][  T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.987718][T16436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2963'.
[  281.156881][  T841] usb 10-1: usb_control_msg returned -32
[  281.158751][  T841] usbtmc 10-1:16.0: can't read capabilities
[  281.165632][  T841] usb 10-1: USB disconnect, device number 19
[  281.270602][T16449] IPVS: set_ctl: invalid protocol: 8 172.30.0.3:20003
[  281.313575][T16451] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  281.445220][T16458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2970'.
[  281.560168][T16463] netlink: 'syz.2.2971': attribute type 5 has an invalid length.
[  281.757676][   T40] audit: type=1400 audit(2000000145.069:906): avc:  denied  { connect } for  pid=16478 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  281.761516][T16479] geneve2: entered promiscuous mode
[  281.767368][T16479] geneve2: entered allmulticast mode
[  281.904802][T16488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2979'.
[  282.078988][  T840] usb 14-1: new full-speed USB device number 10 using dummy_hcd
[  282.208936][  T841] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[  282.230313][  T840] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  282.233980][  T840] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  282.237449][  T840] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  282.240407][  T840] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.244786][T16486] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  282.248057][T16486] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  282.253899][  T840] usb 14-1: Quirk or no altset; falling back to MIDI 1.0
[  282.338904][  T841] usb 10-1: device descriptor read/64, error -71
[  282.427253][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'.
[  282.455205][T16497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2983'.
[  282.456490][   T53] usb 14-1: USB disconnect, device number 10
[  282.459187][T16497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2983'.
[  282.470868][T16497] gretap0: entered promiscuous mode
[  282.475439][T16497] gretap0: left promiscuous mode
[  282.580686][  T841] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  282.702782][T16504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=16504 comm=syz.3.2986
[  282.719145][  T841] usb 10-1: device descriptor read/64, error -71
[  282.727037][T16500] vxcan1: entered allmulticast mode
[  282.812294][T16512] netlink: 'syz.2.2988': attribute type 20 has an invalid length.
[  282.829527][  T841] usb usb10-port1: attempt power cycle
[  282.926982][   T40] audit: type=1400 audit(2000000146.239:907): avc:  denied  { map } for  pid=16518 comm="syz.2.2991" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  283.053637][T16529] lo speed is unknown, defaulting to 1000
[  283.169169][  T841] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[  283.169868][T16529] xfrm0 speed is unknown, defaulting to 1000
[  283.189420][  T841] usb 10-1: device descriptor read/8, error -71
[  283.204679][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2995'.
[  283.298855][    C2] net_ratelimit: 184623 callbacks suppressed
[  283.298867][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.304505][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.308211][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.311939][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.315698][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.319432][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.323103][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.326989][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.330745][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.334425][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.429306][  T841] usb 10-1: new full-speed USB device number 23 using dummy_hcd
[  283.449859][  T841] usb 10-1: device descriptor read/8, error -71
[  283.560468][  T841] usb usb10-port1: unable to enumerate USB device
[  283.609286][T16553] tc_dump_action: action bad kind
[  283.611003][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'.
[  283.613842][T16553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3001'.
[  283.616746][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'.
[  283.774693][   T40] audit: type=1400 audit(2000000147.089:908): avc:  denied  { remount } for  pid=16550 comm="syz.9.3000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  283.784556][T16551] lo speed is unknown, defaulting to 1000
[  283.859348][T16554] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.862441][T16554] bridge0: port 2(bridge_slave_1) entered listening state
[  283.865552][T16554] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.868454][T16554] bridge0: port 1(bridge_slave_0) entered listening state
[  283.925145][T16551] xfrm0 speed is unknown, defaulting to 1000
[  283.948987][  T840] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  284.111657][  T840] usb 7-1: Using ep0 maxpacket: 16
[  284.116951][  T840] usb 7-1: config 0 has no interfaces?
[  284.120120][  T840] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  284.123895][  T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.129329][  T840] usb 7-1: config 0 descriptor??
[  284.301509][    C0] 
[  284.302293][    C0] ======================================================
[  284.304573][    C0] WARNING: possible circular locking dependency detected
[  284.307290][    C0] syzkaller #0 Not tainted
[  284.309380][    C0] ------------------------------------------------------
[  284.313478][    C0] ipvs-e:8:0/10761 is trying to acquire lock:
[  284.315937][    C0] ffff88805163f218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+.-.}-{3:3}, at: __dev_queue_xmit+0x33ff/0x4490
[  284.320735][    C0] 
[  284.320735][    C0] but task is already holding lock:
[  284.323672][    C0] ffff8880349bed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3ba/0xcf0
[  284.327609][    C0] 
[  284.327609][    C0] which lock already depends on the new lock.
[  284.327609][    C0] 
[  284.331703][    C0] 
[  284.331703][    C0] the existing dependency chain (in reverse order) is:
[  284.335273][    C0] 
[  284.335273][    C0] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}:
[  284.338552][    C0]        _raw_spin_lock+0x2e/0x40
[  284.340502][    C0]        sch_direct_xmit+0x3ba/0xcf0
[  284.342636][    C0]        __dev_queue_xmit+0x144d/0x4490
[  284.344873][    C0]        neigh_resolve_output+0x53a/0x940
[  284.347167][    C0]        ip6_finish_output2+0xad1/0x1cf0
[  284.349433][    C0]        __ip6_finish_output+0x3cd/0x1010
[  284.351717][    C0]        ip6_output+0x253/0x710
[  284.353677][    C0]        mld_sendpack+0xac1/0x1350
[  284.355767][    C0]        mld_ifc_work+0x740/0xbf0
[  284.357807][    C0]        process_one_work+0x9cf/0x1b70
[  284.360011][    C0]        worker_thread+0x6c8/0xf10
[  284.362079][    C0]        kthread+0x3c5/0x780
[  284.363967][    C0]        ret_from_fork+0x675/0x7d0
[  284.366060][    C0]        ret_from_fork_asm+0x1a/0x30
[  284.368201][    C0] 
[  284.368201][    C0] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+.-.}-{3:3}:
[  284.372298][    C0]        __lock_acquire+0x126f/0x1c90
[  284.374496][    C0]        lock_acquire+0x179/0x350
[  284.376550][    C0]        _raw_spin_lock+0x2e/0x40
[  284.378582][    C0]        __dev_queue_xmit+0x33ff/0x4490
[  284.380837][    C0]        neigh_resolve_output+0x53a/0x940
[  284.383135][    C0]        ip6_finish_output2+0xad1/0x1cf0
[  284.385401][    C0]        __ip6_finish_output+0x3cd/0x1010
[  284.387547][    C0]        ip6_output+0x253/0x710
[  284.389265][    C0]        ndisc_send_skb+0xa85/0x1f50
[  284.391425][    C0]        ndisc_send_ns+0xc6/0x140
[  284.393466][    C0]        ndisc_solicit+0x2f6/0x510
[  284.395552][    C0]        neigh_probe+0xce/0x110
[  284.397487][    C0]        __neigh_event_send+0xac5/0x13c0
[  284.399399][    C0]        neigh_resolve_output+0x56b/0x940
[  284.401689][    C0]        ip6_finish_output2+0xad1/0x1cf0
[  284.403939][    C0]        __ip6_finish_output+0x3cd/0x1010
[  284.405958][    C0]        ip6_output+0x253/0x710
[  284.407802][    C0]        ip6_local_out+0xd1/0x4d0
[  284.409835][    C0]        ip6_send_skb+0x112/0x460
[  284.411861][    C0]        ip6_push_pending_frames+0xdd/0x100
[  284.414206][    C0]        icmpv6_push_pending_frames+0x2dc/0x460
[  284.416669][    C0]        icmp6_send+0x1ec9/0x2be0
[  284.418692][    C0]        ip6_link_failure+0x31/0x5a0
[  284.420621][    C0]        ip_tunnel_xmit+0x2fd7/0x3850
[  284.422552][    C0]        __gre_xmit+0x8bb/0xc00
[  284.424559][    C0]        erspan_xmit+0x56b/0x25d0
[  284.426594][    C0]        dev_hard_start_xmit+0x97/0x740
[  284.428819][    C0]        sch_direct_xmit+0x1b2/0xcf0
[  284.430895][    C0]        __qdisc_run+0x54a/0x1c00
[  284.432864][    C0]        net_tx_action+0x74f/0xce0
[  284.434493][    C0]        handle_softirqs+0x219/0x8e0
[  284.436592][    C0]        __irq_exit_rcu+0x109/0x170
[  284.438692][    C0]        irq_exit_rcu+0x9/0x30
[  284.440409][    C0]        sysvec_apic_timer_interrupt+0xa4/0xc0
[  284.442528][    C0]        asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  284.445163][    C0]        finish_task_switch.isra.0+0x22a/0xc10
[  284.447267][    C0]        __schedule+0x1198/0x5de0
[  284.449043][    C0]        schedule+0xe7/0x3a0
[  284.450924][    C0]        schedule_timeout+0x123/0x290
[  284.453003][    C0]        ip_vs_estimation_kthread+0x888/0x3310
[  284.455009][    C0]        kthread+0x3c5/0x780
[  284.456889][    C0]        ret_from_fork+0x675/0x7d0
[  284.458932][    C0]        ret_from_fork_asm+0x1a/0x30
[  284.460617][    C0] 
[  284.460617][    C0] other info that might help us debug this:
[  284.460617][    C0] 
[  284.464553][    C0]  Possible unsafe locking scenario:
[  284.464553][    C0] 
[  284.466994][    C0]        CPU0                    CPU1
[  284.469015][    C0]        ----                    ----
[  284.470991][    C0]   lock(&qdisc_xmit_lock_key#4);
[  284.472597][    C0]                                lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[  284.476401][    C0]                                lock(&qdisc_xmit_lock_key#4);
[  284.479015][    C0]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[  284.481648][    C0] 
[  284.481648][    C0]  *** DEADLOCK ***
[  284.481648][    C0] 
[  284.484697][    C0] 9 locks held by ipvs-e:8:0/10761:
[  284.486365][    C0]  #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: net_tx_action+0x39a/0xce0
[  284.490054][    C0]  #1: ffff8880349bed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3ba/0xcf0
[  284.493485][    C0]  #2: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x24c/0x2be0
[  284.496913][    C0]  #3: ffff88810a5901e0 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0x8a5/0x2be0
[  284.500177][    C0]  #4: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0xb9/0x460
[  284.503668][    C0]  #5: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: ip6_output+0xe3/0x710
[  284.506696][    C0]  #6: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1ab/0x1f50
[  284.510435][    C0]  #7: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: ip6_output+0xe3/0x710
[  284.513429][    C0]  #8: ffffffff8e3c46c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x276/0x4490
[  284.517366][    C0] 
[  284.517366][    C0] stack backtrace:
[  284.519307][    C0] CPU: 0 UID: 0 PID: 10761 Comm: ipvs-e:8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  284.519321][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  284.519328][    C0] Call Trace:
[  284.519332][    C0]  <IRQ>
[  284.519337][    C0]  dump_stack_lvl+0x116/0x1f0
[  284.519383][    C0]  print_circular_bug+0x275/0x350
[  284.519400][    C0]  check_noncircular+0x14c/0x170
[  284.519417][    C0]  __lock_acquire+0x126f/0x1c90
[  284.519434][    C0]  lock_acquire+0x179/0x350
[  284.519443][    C0]  ? __dev_queue_xmit+0x33ff/0x4490
[  284.519456][    C0]  _raw_spin_lock+0x2e/0x40
[  284.519470][    C0]  ? __dev_queue_xmit+0x33ff/0x4490
[  284.519480][    C0]  __dev_queue_xmit+0x33ff/0x4490
[  284.519491][    C0]  ? stack_trace_save+0x8e/0xc0
[  284.519506][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  284.519519][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  284.519529][    C0]  ? check_path.constprop.0+0x24/0x50
[  284.519542][    C0]  ? save_trace+0x4e/0x380
[  284.519555][    C0]  ? add_lock_to_list+0x9d/0x130
[  284.519568][    C0]  ? lockdep_unlock+0x64/0xe0
[  284.519579][    C0]  ? __lock_acquire+0x1053/0x1c90
[  284.519597][    C0]  ? __asan_memcpy+0x3c/0x60
[  284.519611][    C0]  ? eth_header+0x11c/0x1f0
[  284.519625][    C0]  neigh_resolve_output+0x53a/0x940
[  284.519643][    C0]  ip6_finish_output2+0xad1/0x1cf0
[  284.519654][    C0]  ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530
[  284.519667][    C0]  __ip6_finish_output+0x3cd/0x1010
[  284.519679][    C0]  ip6_output+0x253/0x710
[  284.519690][    C0]  ndisc_send_skb+0xa85/0x1f50
[  284.519703][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[  284.519714][    C0]  ? ndisc_alloc_skb+0x319/0x530
[  284.519726][    C0]  ? __pfx_dst_output+0x10/0x10
[  284.519736][    C0]  ? __ndisc_fill_addr_option+0xcd/0x110
[  284.519750][    C0]  ? __ipv6_chk_addr_and_flags+0x4a2/0x750
[  284.519770][    C0]  ndisc_send_ns+0xc6/0x140
[  284.519788][    C0]  ? __pfx_ndisc_send_ns+0x10/0x10
[  284.519810][    C0]  ? ipv6_chk_addr_and_flags+0x3b/0x60
[  284.519833][    C0]  ndisc_solicit+0x2f6/0x510
[  284.519852][    C0]  ? __pfx_ndisc_solicit+0x10/0x10
[  284.519872][    C0]  ? neigh_probe+0x72/0x110
[  284.519892][    C0]  ? __pfx_ndisc_solicit+0x10/0x10
[  284.519912][    C0]  neigh_probe+0xce/0x110
[  284.519931][    C0]  __neigh_event_send+0xac5/0x13c0
[  284.519957][    C0]  neigh_resolve_output+0x56b/0x940
[  284.519979][    C0]  ? nf_hook+0x48d/0x780
[  284.519995][    C0]  ? __pfx____neigh_create+0x10/0x10
[  284.520014][    C0]  ip6_finish_output2+0xad1/0x1cf0
[  284.520032][    C0]  ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530
[  284.520052][    C0]  __ip6_finish_output+0x3cd/0x1010
[  284.520071][    C0]  ip6_output+0x253/0x710
[  284.520090][    C0]  ip6_local_out+0xd1/0x4d0
[  284.520114][    C0]  ip6_send_skb+0x112/0x460
[  284.520133][    C0]  ip6_push_pending_frames+0xdd/0x100
[  284.520152][    C0]  icmpv6_push_pending_frames+0x2dc/0x460
[  284.520173][    C0]  icmp6_send+0x1ec9/0x2be0
[  284.520193][    C0]  ? __pfx_icmp6_send+0x10/0x10
[  284.520209][    C0]  ? ___neigh_create+0x15d8/0x28c0
[  284.520227][    C0]  ? find_held_lock+0x2b/0x80
[  284.520245][    C0]  ? __pfx____neigh_create+0x10/0x10
[  284.520259][    C0]  ? ip6_neigh_lookup+0x7b5/0xbe0
[  284.520279][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  284.520302][    C0]  ? __pfx_ip6_neigh_lookup+0x10/0x10
[  284.520321][    C0]  ? ip6_link_failure+0x31/0x5a0
[  284.520337][    C0]  ip6_link_failure+0x31/0x5a0
[  284.520357][    C0]  ? __pfx_ip6_link_failure+0x10/0x10
[  284.520372][    C0]  ip_tunnel_xmit+0x2fd7/0x3850
[  284.520394][    C0]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  284.520410][    C0]  ? rcu_is_watching+0x12/0xc0
[  284.520430][    C0]  ? trace_kmem_cache_alloc+0x28/0xc0
[  284.520448][    C0]  ? kmem_cache_alloc_node_noprof+0x2d8/0x770
[  284.520472][    C0]  ? skb_release_data+0x79a/0x9e0
[  284.520493][    C0]  ? kmalloc_reserve+0x18b/0x2c0
[  284.520514][    C0]  ? kmalloc_reserve+0x13c/0x2c0
[  284.520539][    C0]  __gre_xmit+0x8bb/0xc00
[  284.520562][    C0]  ? __pfx___gre_xmit+0x10/0x10
[  284.520584][    C0]  ? __pfx_pskb_expand_head+0x10/0x10
[  284.520603][    C0]  ? __kasan_save_free_info+0x3b/0x60
[  284.520623][    C0]  ? kmem_cache_free+0x2d4/0x6c0
[  284.520645][    C0]  ? rcu_core+0x79c/0x1530
[  284.520664][    C0]  erspan_xmit+0x56b/0x25d0
[  284.520690][    C0]  ? __pfx_erspan_xmit+0x10/0x10
[  284.520716][    C0]  dev_hard_start_xmit+0x97/0x740
[  284.520735][    C0]  sch_direct_xmit+0x1b2/0xcf0
[  284.520754][    C0]  ? __pfx_sch_direct_xmit+0x10/0x10
[  284.520772][    C0]  ? get_slot_next+0x230/0x2f0
[  284.520798][    C0]  __qdisc_run+0x54a/0x1c00
[  284.520821][    C0]  net_tx_action+0x74f/0xce0
[  284.520840][    C0]  ? rcu_is_watching+0x12/0xc0
[  284.520860][    C0]  handle_softirqs+0x219/0x8e0
[  284.520881][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  284.520902][    C0]  __irq_exit_rcu+0x109/0x170
[  284.520920][    C0]  irq_exit_rcu+0x9/0x30
[  284.520937][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  284.520961][    C0]  </IRQ>
[  284.520966][    C0]  <TASK>
[  284.520972][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  284.520990][    C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10
[  284.521012][    C0] Code: fb 09 00 00 44 8b 05 49 17 f8 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 7f d4 3a 00 fb 65 48 8b 1d ee 59 17 12 <48> 8d bb 58 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[  284.521028][    C0] RSP: 0018:ffffc900048679a8 EFLAGS: 00000206
[  284.521041][    C0] RAX: 000000000000f14d RBX: ffff888025bf0000 RCX: ffffffff81c4f99f
[  284.521052][    C0] RDX: 0000000000000000 RSI: ffffffff8da2b6a1 RDI: ffffffff8bf070c0
[  284.521062][    C0] RBP: ffffc900048679f0 R08: 0000000000000001 R09: 0000000000000001
[  284.521072][    C0] R10: ffffffff90820cd7 R11: 0000000000000001 R12: ffff88806a43a380
[  284.521083][    C0] R13: ffff88801d6b8000 R14: ffff88806a43a380 R15: ffff88806a43b1b0
[  284.521096][    C0]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  284.521120][    C0]  ? finish_task_switch.isra.0+0x221/0xc10
[  284.521139][    C0]  ? __switch_to+0x7af/0x11b0
[  284.521158][    C0]  __schedule+0x1198/0x5de0
[  284.521179][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[  284.521206][    C0]  ? __lock_acquire+0x622/0x1c90
[  284.521231][    C0]  ? __pfx___schedule+0x10/0x10
[  284.521255][    C0]  ? find_held_lock+0x2b/0x80
[  284.521274][    C0]  ? schedule+0x2d7/0x3a0
[  284.521297][    C0]  schedule+0xe7/0x3a0
[  284.521318][    C0]  schedule_timeout+0x123/0x290
[  284.521337][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  284.521361][    C0]  ? __pfx_process_timeout+0x10/0x10
[  284.521384][    C0]  ? ip_vs_estimation_kthread+0xe3b/0x3310
[  284.521410][    C0]  ip_vs_estimation_kthread+0x888/0x3310
[  284.521441][    C0]  ? __pfx_ip_vs_estimation_kthread+0x10/0x10
[  284.521464][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  284.521487][    C0]  ? __kthread_parkme+0x19e/0x250
[  284.521510][    C0]  ? __pfx_ip_vs_estimation_kthread+0x10/0x10
[  284.521533][    C0]  kthread+0x3c5/0x780
[  284.521547][    C0]  ? __pfx_kthread+0x10/0x10
[  284.521563][    C0]  ? rcu_is_watching+0x12/0xc0
[  284.521582][    C0]  ? __pfx_kthread+0x10/0x10
[  284.521597][    C0]  ret_from_fork+0x675/0x7d0
[  284.521610][    C0]  ? __pfx_kthread+0x10/0x10
[  284.521624][    C0]  ret_from_fork_asm+0x1a/0x30
[  284.521650][    C0]  </TASK>
[  284.788060][ T5943] Bluetooth: hci2: ISO packet too small
[  284.816635][   T60] usb 7-1: USB disconnect, device number 15
[  286.246271][ T8141] go7007-loader 6-1:10.68: unable to load firmware from file "go7007/px-tv402u.fw"
[  286.250189][ T8141] go7007-loader 6-1:10.68: probe failed
[  286.272349][ T8141] go7007-loader 6-1:10.126: loading firmware go7007/px-tv402u.fw
[  286.276120][ T8141] usb 6-1: Direct firmware load for go7007/px-tv402u.fw failed with error -2
[  286.279876][ T8141] usb 6-1: Falling back to sysfs fallback for: go7007/px-tv402u.fw
[  288.308856][    C2] net_ratelimit: 279874 callbacks suppressed
[  288.308868][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.314421][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.318321][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.321991][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.325725][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.329441][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.333154][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.336919][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.340654][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.344334][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.318872][    C2] net_ratelimit: 309461 callbacks suppressed
[  293.318884][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.324468][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.328108][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.331835][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.335479][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.339179][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.342885][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.346572][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.350297][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.353901][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)

VM DIAGNOSIS:
07:45:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85296335 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc900000064e8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9add8740 R15=ffffffff852962d0
RIP=ffffffff8529635f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a08000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f1056a16f98 CR3=000000004f2fd000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8fcfcc30 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c13050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c1305d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c13057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c1306b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c130f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c131cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080080783 RBX=0000000000000000 RCX=ffff888106999070 RDX=000000000000009d
RSI=ffffffff86799d88 RDI=ffff8881069992d0 RBP=0000000000000001 RSP=ffffc900006a0b80
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005d94
R12=0000000000000001 R13=0000000000004e20 R14=ffff888106999070 R15=0000000000000001
RIP=ffffffff86799dcf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6b08000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f1f65a02000 CR3=000000003e864000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c13050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c1305d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c13057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c1306b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c130f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055c131cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055db74a8 00007f1055db74a0 00007f1055db7498 00007f1055db7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f105691d100 00007f1055db7460 00007f1055db0004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1055db74b8 00007f1055db74b0 00007f1055db74a8 00007f1055db74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=ffffc90006d97030 RBX=00000000ffffffff RCX=ffffffff8a3c4b85 RDX=ffff88801dec0000
RSI=00000000ffffffff RDI=00000000fffffffc RBP=0000000000000002 RSP=ffffc9000061f1c0
R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000000 R11=0000000000002b81
R12=ffffc90006d97060 R13=ffff88802c03a240 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff8a3c4bc1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6c08000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f12cb7e1f98 CR3=000000000e182000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e17ea0dc6dc6859 3e634068bd42c211
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 839f2aef80bd2f22 9cc22a1af201bc8a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a521cbafa51c779 e0e2abd63cd123d1
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1be31aca174ad94 81793da4498cbca1
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003c80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e5b67970dba2eb33 28c076b839582b6c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008001003b4cedd8 e6e18760003726e5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ab00800100 e64af46c000000ab
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ab00000000 e66cb380000000ab
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cdeb5a224c84ab1 f42caa1340188b77
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3fe422a68989f97 4476df1a61a750a1
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12cabb74a8 00007f12cabb74a0 00007f12cabb7498 00007f12cabb7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12cb71d100 00007f12cabb7460 00007f12cabb7478 00007f12cabb74c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12cabb74b8 00007f12cabb74b0 00007f12cabb74a8 00007f12cabb74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000088
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000002095c4 RBX=0000000000000003 RCX=ffffffff8b60a2a9 RDX=ffffed100d4e6656
RSI=ffffffff8bf07040 RDI=ffffffff8192458d RBP=ffffed1003bd5000 RSP=ffffc90000197de8
R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000
R12=0000000000000003 R13=ffff88801dea8000 R14=ffffffff90820cd0 R15=0000000000000000
RIP=ffffffff8b608d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6d08000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005555894325c8 CR3=000000003c918000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde05e19d0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fde81e13050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fde81e1305d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fde81e13057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fde81e1306b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fde81e130f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fde81e131cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000