last executing test programs:

6m44.187479806s ago: executing program 32 (id=79):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'wg1\x00', 0x4000})
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x800, 0x0)

6m28.369541265s ago: executing program 33 (id=352):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x40305839, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5ce"])
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000140))
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x880)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000000100)=[{0x5, 0x3, 0x7c, 0x73}, {0x0, 0x80, 0x4, 0x3ff}, {0xa, 0x4, 0xb2, 0x7}]}, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x2080, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000e40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r6, 0x617515a196bc9819, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4)
r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000480)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}})
io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r7, 0x4866, 0x0, 0xb, 0x0, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f0000000240)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="2f679cc3fda1ddf6402d203fb1f9cbaaedc5f8a420c63e8de64a96ed472e751d9226b80d61a43736439708f81ffb2e2fef72dbd6f6204e6b04d9162cbb18b72488832507fbf855457d1d2f37f44b9d5b50741357ea89e30c0013021b6ebfb5186d073bf98a9877e247593199de51872d12c4c66e188f", 0x76}, {&(0x7f0000000840)="4cbf49715b300f2873e0b62c7e13c50929e53bb68ea291f7438179ffc84a33dc451d03c9ad9d4b14e59eee34b9ea9ec6fa0655c29871b74414c7d707d674f46591ecc889a5ab9895046c5ed30a4bc5df9f955b3168266a38dc22bebe16957c1b4b5d1ca143cbb836359e324bde4fbca6e36e172ef1a8efa98fe979885d0df659544134e4674770", 0x87}, {&(0x7f0000000340)="2a6609eb9b1b597b1900662bca0a9164ba59cb6a4a926b093b2e006ebe01606d8ca22eb8f8c5f6e1f51ce9ba1ebc0221cd1d795b77be1249fab6a64d9cd8f049c40164c7172c0a136493333c5d99fc915b149bfa58ceafb688c28e7de823fcbd6f6f8b30d7955c871c5cf77e074d49c1f767c9", 0x73}, {&(0x7f0000000900)="7a6d7e97acb4097e377fb8fe5e44fa0f715fa28d68ac13fa2e3c36209b4e8182f2a0465eca64c387a38b99e95c5ca084ea56b6edb5f6fc86c01580c66a903a36e1cfbfb82da356dd2ffa93796a3bcb31f0b7f65059f5c8617c99a417ea605a37093357683a338fc1d7afe7a1c28f2333525f50aa2c0592599b7d588ddce0c7207c1f2df6c39e089668196319ec76c53c227194823153826a1c920685d70f1d575a29fe", 0xa3}], 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x468}, 0x44800)

6m17.143312771s ago: executing program 34 (id=553):
r0 = socket(0x11, 0x80000, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000600)={0x1000, <r3=>0x0, 0x10001})
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000640)={0x7ff, r3})
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r5 = dup(r4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
recvmmsg(r5, &(0x7f00000072c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)
syz_usb_disconnect(r1)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000380)={0x0, 0xd, 0xea, {0xea, 0x10, "e0c1bd82cf91e8f8add02194a09503ec11e04e9c61ccb114928fa2c86510d6b6715663c9e72f7a224d1c1b2018a6320955da451fc6d2894848a42b68100398febedb92d4a315004ec256f0e3cd9d12721d2e7e560d4f97cf58d3860394bb17ac68cf0c455746b711324c441a334c0b69e2f67b0be94e1d20c43d33abf5980a32e12e8c68ab906358b708d97d44b88c3aed73dbb1b5d6d140d2967757356813be5f19c51d83019abb4c4b1b05ef3bec408b506d4e2e936c0fbf78b60ff5d9ae8b136f44d6d653a5a5263beb50bda304fcc60c9e58ea23207b3a2dc88847e5e627b1bca10fdbc44bcc"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x72, "f2d9e18156b78d0d80cb011b125e40f476144ba71ab00cd71f3dc650edc9bf6d620c0e8e1f6f156f9278d4c4554ca279a417241b2ccf91e023db0eccd75f8b985ddf1b2f1bbb00c7830aeb2602f8eb137c85a6b16af78f8a978d9c283ad5b1c7b19b38632177311b086b52e0ba0ba63986c5"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xaa}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x4}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000540)={0x5, 0x6dff, 0x3fb, 0x0, 0x12})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r8 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
socket$netlink(0x10, 0x3, 0x0)

4m32.895278999s ago: executing program 35 (id=2145):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1f, &(0x7f0000000000)=0x1, 0x4)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0})
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0)

4m24.348704345s ago: executing program 36 (id=2286):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000040)={0x5, 0x80000000, 0x9, 0x4, 0x2})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000800000000003900000008000300", @ANYRES32=r7, @ANYBLOB="0c005a8008000380040001"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x7a}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8084)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0)

3m10.282587266s ago: executing program 8 (id=3079):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000e00)={0x54, r3, 0x1, 0xfffffffd, 0x25dfdbfe, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x7}}]}, 0x54}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000e00)={0x54, r3, 0x1, 0xfffffffd, 0x25dfdbfe, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x7}}]}, 0x54}}, 0x0)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', <r6=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0xffff, 0x702]}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0xffff, 0x702]}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) (async)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x3, 0x2, "41f954", 0x1, 0xfd}]}}}, 0x12)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0x1, 0xc8a3, 0xffffffffffffffff, 0xf, 0x30000, 0xdb3})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r8)
sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x43642e115bd44d50}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) (async)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040))
r10 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x48801)
ioctl$LOOP_GET_STATUS(r10, 0x4c00, 0x0)
ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000040)={0xb0, 0x7, 0x7, 0x3})

3m10.177065757s ago: executing program 8 (id=3082):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4)

3m10.16672582s ago: executing program 8 (id=3083):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x2, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}, 0x1, 0x7, 0x0, 0x2000}, 0x0)

3m10.165811738s ago: executing program 8 (id=3084):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x3, &(0x7f0000000080)={0x0, "7ea08680448ae1cd0313388152f6a5dcd36f82e3050721215ed97a9793ecd18a42"}}) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
fstat(r3, &(0x7f0000000300)) (async)
connect$x25(r2, &(0x7f00000000c0), 0x12)

3m10.16274431s ago: executing program 8 (id=3087):
mkdir(&(0x7f0000000600)='./file0\x00', 0xe8)
r0 = syz_io_uring_setup(0x1b6c, &(0x7f0000000380)={0x0, 0x5040, 0x10, 0x1003, 0x101}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_complete(r1)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127})
io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x8000, r0, 0x12, {0x6, 0x1}, 0x5}, 0x1)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='securityfs\x00', 0x11, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0)

3m9.863080952s ago: executing program 8 (id=3091):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xc7f}, 0x18)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000"], 0x30}}, 0x44)
r5 = socket(0x1, 0x803, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01000000000000000000000000000000000008000000005f303030010000"], &(0x7f0000000400)=""/103, 0x20, 0x67, 0x1, 0x8}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3a, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10}, 0x94)
setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, 0x0) (async)
setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB])
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000580)={'sit0\x00', r1, 0x7, 0x1, 0x8, 0x6, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@lsrr={0x83, 0x23, 0x75, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x12}]}, @cipso={0x86, 0x19, 0x3, [{0x5, 0xc, "668baad1506d0800e458"}, {0x0, 0x7, "4c9ec48c5c"}]}]}}}}})
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014})
socket(0x10, 0x3, 0x0) (async)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) (async)
r12 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r12, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5, 0x1})
socket(0x1, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})

3m9.861276762s ago: executing program 37 (id=3091):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xc7f}, 0x18)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000"], 0x30}}, 0x44)
r5 = socket(0x1, 0x803, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01000000000000000000000000000000000008000000005f303030010000"], &(0x7f0000000400)=""/103, 0x20, 0x67, 0x1, 0x8}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3a, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10}, 0x94)
setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, 0x0) (async)
setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB])
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000580)={'sit0\x00', r1, 0x7, 0x1, 0x8, 0x6, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@lsrr={0x83, 0x23, 0x75, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x12}]}, @cipso={0x86, 0x19, 0x3, [{0x5, 0xc, "668baad1506d0800e458"}, {0x0, 0x7, "4c9ec48c5c"}]}]}}}}})
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014})
socket(0x10, 0x3, 0x0) (async)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) (async)
r12 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r12, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5, 0x1})
socket(0x1, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})

2m58.330724744s ago: executing program 9 (id=3210):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x9442)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r2, 0xffffd000)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ppoll(&(0x7f00000000c0)=[{r3, 0x7040}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, r2, 0x0)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x101000, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c6c5d700", @ANYRES16=r5, @ANYBLOB="010027bd7000fbd3df25020000000900010073797a320000000005000400020000000900030073797a3000000000"], 0x34}}, 0x0)
read$proc_mixer(r4, &(0x7f0000000040)=""/252, 0xfc)

2m56.546840454s ago: executing program 9 (id=3227):
r0 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) (async, rerun: 64)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)

2m55.652478322s ago: executing program 9 (id=3243):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket$kcm(0x11, 0xa, 0x300) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xb, 0xa}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@can_delroute={0x29c, 0x19, 0x20, 0x70bd26, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x0, 0x2, 0x0, 0x0, "3ad2f759e1eb974d"}, 0x3}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8, 0x8, 0x4, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5b, 0x4a, 0x62, 0x0, 0xe6, "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", 0x2, "b41707937d532964df49db724a0834a48189145e"}}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x1, 0x1}, 0x2, 0x4b5adef61430cb84, 0x0, 0x0, "a180c44aef65cb97"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_CS_CRC8={0x11e, 0x6, {0x1a, 0x2f, 0x12, 0x4, 0x24, "8391bd069326d08585c08b8a145d2f94c76ff0bbdc1e4826be4ec4529365e1a02590b426d90f399358803bc8f658b8d45971c251e7717387c0b1c8e01531dd7e1970517b50fe0bac99bc2ccf650505a8fd4f3806fb3dcd044a65c36d8c4857b442208fa12b01ac995b2423d27c3e74dc13ff93d8dd73e480a0c431bdc1be7c7b48ba60bf4c9ed9c22defbf14cbd92c9a4cebb5aa9fd8b7f099ac2ef66fb5559db60f6e03491bb3a5666f381b415a7d7d5c23bdea5b0d568b3b9222fd55cbae1eb5e3d728cc3e846e3fb21c558efb9eeb413d96d6ad88231468aa46c4d2399ecc6fbc299f322a6be72e6a87236a02d1a2f89f81f3772a6e729436f0d985785269", 0x3, "19ab771a6071ed56de408a456d04b8e6163de946"}}]}, 0x29c}}, 0x0) (async, rerun: 64)
recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40) (async, rerun: 64)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id'])

2m55.573265943s ago: executing program 9 (id=3247):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0)

2m55.52057809s ago: executing program 9 (id=3249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="000200000000000010001a800c000a80050009000000000014003500776c616e31"], 0x44}}, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
chroot(&(0x7f0000000000)='./bus\x00')
getcwd(&(0x7f00000005c0)=""/181, 0xb5)

2m55.071232712s ago: executing program 9 (id=3259):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x6000, 0x1000, 0xf000, 0x5, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x10, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xdddd0000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
fstat(r4, &(0x7f0000000080))
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x4, 0x4)
sendmsg$inet6(r3, &(0x7f0000001140)={&(0x7f00000002c0)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb84"], 0x28}, 0xc044)

2m55.000271504s ago: executing program 38 (id=3259):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x6000, 0x1000, 0xf000, 0x5, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x10, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xdddd0000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
fstat(r4, &(0x7f0000000080))
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x4, 0x4)
sendmsg$inet6(r3, &(0x7f0000001140)={&(0x7f00000002c0)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb84"], 0x28}, 0xc044)

2m37.046654142s ago: executing program 3 (id=3498):
r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r0, &(0x7f0000000000)="0af0eb901ef3047150b4a2b9cdb949e09fc3b729858366394eab3490359a08fbb979dd528adcea7f2ced6ea9f98425f5ffaef0841a6b5b5f7e8e0125958c4fa663c33b33e8e367c6d099766e9fe6306080e34cee3a08fcbab12d518f9dee", 0x5e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1}, 0x50)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)="05", 0x1}], 0x2)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(r4, &(0x7f0000002040)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x38}}], 0x1, 0x40000)
listen(r3, 0x4)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r5 = accept4$unix(r3, 0x0, 0x0, 0x800)
recvfrom$unix(r5, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x4, 0x3}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="96f00ef2"]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x28}}, 0x0)

2m36.971241343s ago: executing program 3 (id=3500):
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2200084, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYBLOB='3'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"})
write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x2, 0x3a, '', 0x3a, '/dev/autofs\x00', 0x3a, './file0', 0x3a, [0x43, 0x50, 0x4f]}, 0x36)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0)

2m36.907724725s ago: executing program 3 (id=3501):
syz_emit_ethernet(0xe6, &(0x7f0000000040)={@random='b9\x00', @remote, @void, {@ipv4={0x800, @icmp={{0x31, 0x4, 0x0, 0x4, 0xd8, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x67, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x54f0}]}, @generic={0x7, 0xd, "5ac577948eb8b177cc09e2"}, @ra={0x94, 0x4}, @cipso={0x86, 0x83, 0xffffffffffffffff, [{0x7, 0xf, "65d59e0da5208877771a44df3b"}, {0x1, 0xb, "c372c11dbb7586cd5d"}, {0x2, 0xd, "9593bb6aad22ffce7ea625"}, {0x5, 0x12, "3ace3446a3b30a4ad150189a93ae38ec"}, {0x2, 0xe, "c9715ca3ae62c78dd3c4c2af"}, {0x2, 0x10, "c476ff0c5393728d07eea1e8cf1c"}, {0x7, 0x7, "167a471621"}, {0x0, 0xf, "0859b31c6e73f80ce99c1794f2"}, {0x1, 0x10, "8091eb03df78b262f1919db8a909"}]}, @lsrr={0x83, 0x3, 0xab}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xa8, [@remote]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0)

2m36.832226544s ago: executing program 3 (id=3503):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r2, 0xb}}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x887dab077f141882, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xf}}, 0x20)
sendto$ax25(r4, 0x0, 0x0, 0x80, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null]}, 0x48)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4, "7eacf9", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xa79, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e22, 0x8001, @mcast2, 0x7c90}, 0xffffffffffffffff, 0x800}}, 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x15, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback, {[@generic={0x7, 0x3, 'E'}, @ssrr={0x89, 0x13, 0xc8, [@multicast2, @multicast2, @empty, @multicast2]}, @timestamp={0x44, 0xc, 0x3d, 0x0, 0x6, [0xd9, 0x13]}, @ssrr={0x89, 0x1b, 0xdc, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010102, @local]}]}}}}}}}, 0x0)

2m36.606732313s ago: executing program 3 (id=3504):
mlockall(0x7)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mlockall(0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xf6c, &(0x7f0000000000)) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xf6c, &(0x7f0000000000))
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x3ffc000000000, &(0x7f00000001c0)=0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) (async)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCCONS(r4, 0x541d) (async)
ioctl$TIOCCONS(r4, 0x541d)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10004)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r5, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r5, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x9, 0x10001, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0x6}})
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @none}, 0x3b)
socket$alg(0x26, 0x5, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r6, 0x0, 0x0) (async)
r7 = accept$alg(r6, 0x0, 0x0)
write$binfmt_script(r7, &(0x7f0000000600), 0xfec8)
recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
syz_open_dev$video4linux(&(0x7f00000002c0), 0xb70d, 0x602182)

2m36.38137535s ago: executing program 3 (id=3507):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x44)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e725f69076f6465733d742c009b72e395167425d6e0ea2b4a5bc58914581002eb9a445a73a3eeb57c9fd9e1864d20dd2a115d84143daf4f9fe636b46a"])
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="dca4eb769ee00f394d6bb5f2a63108c1c03fa47cd2dec5a95952fb4a1deaa2d69f767f866d7bdafe7c9837d593012e079e696119a77552af6cd2b15129fb7dbe1653db832fd7dadfe2a6cfbec8f20ceae81e7b10fca03dba511f6a7d079d1288318ac6d7aa1cc92e1bca067f36b546496ca48dc1c9e117ea36252affddcb8fa0cab3a690b8b3a78191be8a6789", 0x8d}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x40800)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x52, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'veth1_to_team\x00', 0x7})

2m36.328433644s ago: executing program 39 (id=3507):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x44)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e725f69076f6465733d742c009b72e395167425d6e0ea2b4a5bc58914581002eb9a445a73a3eeb57c9fd9e1864d20dd2a115d84143daf4f9fe636b46a"])
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="dca4eb769ee00f394d6bb5f2a63108c1c03fa47cd2dec5a95952fb4a1deaa2d69f767f866d7bdafe7c9837d593012e079e696119a77552af6cd2b15129fb7dbe1653db832fd7dadfe2a6cfbec8f20ceae81e7b10fca03dba511f6a7d079d1288318ac6d7aa1cc92e1bca067f36b546496ca48dc1c9e117ea36252affddcb8fa0cab3a690b8b3a78191be8a6789", 0x8d}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x40800)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x52, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'veth1_to_team\x00', 0x7})

2m30.322095624s ago: executing program 5 (id=3560):
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/3:0:0:0\x00', 0x220300, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r1=>0x0})
ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x9, 0x5, 0x9, 0x90c, 0x8, r1})
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000500)=[0x0, <r4=>0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x6, 0x4, 0x4})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000600)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}], r4, 0x0, '\x00', 0x3, 0x5})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x8, 0x3, 0x4, 0x2c, 0x40, 0x1a8a, 0x5}, 0x9c)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x4)
r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000980)={0x51, 0x0, 0x2, 0x10, &(0x7f00000007c0)="bb78594b960dac0471fc611556cb59ef", 0x5, 0x0, 0x8, 0x4, 0x60, &(0x7f0000000800), 0x0, 0x58, 0x0, 0x5, &(0x7f0000000880)="b03f907665450f136732f1be8beba9a88fddd4f5f84e8b197b06cb9b611ff90bc5965fd5481f210c3efbd6abf4ac7efdfb5d75d9cd3df645b060645e99a481f4ad3edd68ba08597878606fe7995ee491786445c980c7244b", &(0x7f0000000900)=""/5, 0x40, 0x0, &(0x7f0000000940)="31dc91b8693497ab122535ff2153d53cd1e4546fab02e4d1700fb57edec966370f641255f06f89fee8", 0x8})
close_range(r6, r0, 0x0)
r7 = syz_io_uring_setup(0x6f35, &(0x7f0000000a40)={0x0, 0x9e7b, 0x4000, 0x1, 0x1bb}, &(0x7f0000000ac0), &(0x7f0000000b00))
syz_io_uring_setup(0x34dc, &(0x7f0000000b40)={0x0, 0xa4ca, 0x10, 0x1, 0x347, 0x0, r7}, &(0x7f0000000bc0), &(0x7f0000000c00))
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000c40), 0x4)
r8 = accept4$llc(0xffffffffffffffff, &(0x7f0000000c80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000cc0)=0x10, 0x80800)
sendto$llc(r8, &(0x7f0000000d00)="1e8e1d6c1e504f1ca9a6a75789f126edbc86aa7ed30464cf65be098fdf139fca87b2311cec8d4ded4b6ca81ed3a54621111cde2928aed1eba7aeab8ebd7ea8b4649f35f7666f3254dd3dbac6089218f1c010b2dc50e701e64378cf0fe9336d57609bd88ec25748a99d4973379899882c01fc56aa0f4c43cfbea4ad89332cc6ba642678eacf88", 0x86, 0x0, &(0x7f0000000dc0)={0x1a, 0x303, 0x80, 0xe0, 0xf, 0xf7, @random="4f473f8f2b09"}, 0x10)
accept$ax25(0xffffffffffffffff, &(0x7f0000000e00)={{}, [@rose, @bcast, @netrom, @default, @bcast, @rose, @rose]}, &(0x7f0000000e80)=0x48)
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000f00)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000ec0)=[0x0]})
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000f40)={0x0, r9, 0x2, 0x4, 0x0, 0x9, 0x401})
r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000f80), 0x840c2, 0x0)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r10, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r11, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x851)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001100)={0x8, 0x209, 0x9, 0x1, <r12=>0x0}, &(0x7f0000001140)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001180)={r12, @in6={{0xa, 0x4e20, 0x6151, @remote, 0x9}}, 0x101c, 0x6, 0x5, 0x4, 0x48, 0x6, 0x38}, 0x9c)
ioctl$SNDCTL_SEQ_RESET(r10, 0x5100)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000012c0)={'ip6gre0\x00', &(0x7f0000001240)={'syztnl2\x00', <r13=>0x0, 0x4, 0x7, 0xc9, 0x6, 0x40, @private0, @loopback, 0x7, 0x7, 0x3, 0x3}})
setsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f0000001300)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x24}, r13}, 0xc)

2m30.258039493s ago: executing program 5 (id=3562):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000)
preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) (async)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14)
bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) (async)
socket$inet6(0xa, 0x2, 0x5)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r7 = accept4(r0, 0x0, 0x0, 0x0) (async)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r8, 0xc0485630, &(0x7f0000000080)={0x1, "072b20d017bbf2bd1632992e8c5c357cb8507e8dfa0a347a2852e54a4b71ab3a", 0x1, 0x20001, 0x100, 0xff, 0x8})
recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

2m30.257370167s ago: executing program 5 (id=3564):
renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1000, 0x3fd, 0x0, 0x8})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20)

2m30.178016418s ago: executing program 5 (id=3566):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff9, 0x4031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x80000)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000040)={0x5000, 0x26b5fe30fbb8b5cb})
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m30.012361006s ago: executing program 5 (id=3568):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1001, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x200, 0x7, 0x2, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)={r2})

2m30.011755131s ago: executing program 5 (id=3569):
r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x1}, 0x0)
ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000100))
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1400)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x80000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x3, 0x2, 0x8000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00'])

2m7.517446318s ago: executing program 40 (id=3569):
r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x1}, 0x0)
ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000100))
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1400)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x80000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x3, 0x2, 0x8000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00'])

1m40.375101083s ago: executing program 0 (id=3977):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)={r2})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r3, 0x100000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1aee2, 0x4000, 0x2, 0x8b6}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1m40.32086801s ago: executing program 0 (id=3979):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000540)='./file1\x00', &(0x7f00000007c0)='./file0\x00') (async)
rename(&(0x7f0000000540)='./file1\x00', &(0x7f00000007c0)='./file0\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)

1m40.235782421s ago: executing program 0 (id=3982):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r0}, 0xa, &(0x7f0000000040)=[0x8001, 0x9, 0x8061, 0x7, 0x8, 0x8000000000000000, 0x9, 0x1, 0x3, 0x0], 0x7, 0x5, 0x1})
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000280)=0xa40, 0x4)
setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x1, @loopback, 0xd01}, {0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0xffffffffffffffff, {[0x1ff, 0xffff, 0x7, 0xd20, 0x80000000, 0x1959, 0xfffff000, 0x4]}}, 0x5c)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8)
setsockopt$bt_BT_VOICE(r4, 0x112, 0x13, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a00000405000100076e467798572450"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

1m40.129034405s ago: executing program 0 (id=3983):
creat(&(0x7f0000000080)='./file0\x00', 0xac)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
r4 = dup(r1)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0x0, 0x8e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@nodevmap}], [], 0x6b}})

1m40.035032918s ago: executing program 0 (id=3987):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockname$inet(r0, 0x0, &(0x7f0000000a40))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x2)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x6802, 0x0)

1m39.638452665s ago: executing program 0 (id=3995):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x28, 0x1, 0x2, "4f80ff6f426ebb117c0caba25f00000000000000000000000000f3ff00", 0x31303553})
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r0, 0x0, 0x4040040)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r1}, 0x10)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x325, 0x80, 0x2}}, @l2cap_conn_rsp={{0x3, 0xfe, 0x8}, {0x7, 0x3, 0x1, 0x6}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0x101, 0x9}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x4}}, @l2cap_conf_req={{0x4, 0x0, 0x26}, {0x58b6, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x81}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x0, 0x9, 0x1, 0x86, 0x5}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xaaf}, @l2cap_conf_ews={0x7, 0x2}]}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x6, 0x2, 0x61, 0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x2}}, @l2cap_conn_rsp={{0x3, 0x13, 0x8}, {0xfffe, 0x0, 0x1, 0x1}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0xa, 0x6}}]}}, 0x7c)

1m39.571141501s ago: executing program 41 (id=3995):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x28, 0x1, 0x2, "4f80ff6f426ebb117c0caba25f00000000000000000000000000f3ff00", 0x31303553})
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r0, 0x0, 0x4040040)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r1}, 0x10)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_create_chan_req={{0xc, 0xa, 0x5}, {0x325, 0x80, 0x2}}, @l2cap_conn_rsp={{0x3, 0xfe, 0x8}, {0x7, 0x3, 0x1, 0x6}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0x101, 0x9}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x4}}, @l2cap_conf_req={{0x4, 0x0, 0x26}, {0x58b6, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x81}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x0, 0x9, 0x1, 0x86, 0x5}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xaaf}, @l2cap_conf_ews={0x7, 0x2}]}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x6, 0x2, 0x61, 0x6}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x2}}, @l2cap_conn_rsp={{0x3, 0x13, 0x8}, {0xfffe, 0x0, 0x1, 0x1}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0xa, 0x6}}]}}, 0x7c)

1m28.47499025s ago: executing program 6 (id=4108):
r0 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x10, 0x20, 0x200003, 0x80}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1m28.473979116s ago: executing program 6 (id=4109):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="140000004a00010200800000000000000a"], 0x14}}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe"], 0x50}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet(0x2, 0xa, 0x4)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x148, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2562a413}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400c0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r9, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000001)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4)

1m28.314421992s ago: executing program 6 (id=4110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x1})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[])
ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000080))
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8891}, 0x2000880)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffff}, {0x10, 0xffff}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x64}}, 0xd4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r11=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r11, 0x0, 0x2, 0x4}}, 0x20)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000060041900000000090a01040000000000000000f2df26862d8bb9b473797a310000000008000540000000040900020073797a3104349f35024e83b92de408fd0000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00df800800034000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

1m28.077959598s ago: executing program 6 (id=4111):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) (async)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async)
close(r0) (async)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x42080, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
poll(&(0x7f0000000080)=[{r2}, {r3, 0x1}, {r2, 0x5608}], 0x3, 0x7ff)
sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000000c0)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000240)="6412e0", 0x3}, {&(0x7f0000000280)="8b98959116977faa20bfc1ada01b26aa36b018d4d2a5105975b0d9355d3a9eee301c0e54331ea662b804e60200aab71b8fcf84f23742a4d0d98c16e291c9fdfbfa8f8c75afc127d801", 0x49}], 0x3, &(0x7f0000000700)=[{0x60, 0x0, 0x9a, "6b6c374dd9fd50c03fdc58230a23779569b1b9e1513fb139d2a625fd4a4b9662769539b8953195232a36407f9ab0be05a6c771d767c5193804e07231439f779d8f5a658b2c3f08dd13c18d0d862e49"}, {0xe0, 0x116, 0x5, "5e52507f058f055b2703ec57efb1de677183e17adc81267b9273a614e0caf7e2bafefb9735e7dc3afac497f5c42d0fd3877b5267d5f7ed46d58f313ffcb897561b4860cf4aee7219a9edac7eb3d88c924510c4aa56fc3760d65870850b8ecbc4d2aaa2e373740980e934df7f0dc37b885c8f52fc243ce95c06314b06ee5e23a1af7b5f9802f0e45d07957307022efb10c54135caf1ff3081801f3cea8afa3b73684fa639112c35d638cd49dbffe8c8265ab6bec62ff6e572f1b22bf9dcfb068d80a5f42c4a69d809184da24867f5"}], 0x140}, 0xc0) (async)
r4 = socket(0x1e, 0x1, 0x0)
recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000940)=""/203, 0xcb}], 0x1}, 0x38163) (async)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0}) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c2000e863fc021000ffff27bd70f121baa4bde8181c50aedf2fcb8dfba7b0051a3ccdf94de2ecdec141771b94016c392ca3c91af2d879cd521e427a6af31d749f683c5faa5810b19ba8c72a167cd665ea5c81dbcb7b99f811f49334016ae40106eee1e6c3d540f9c222afc9f3b5cddf44c3afa4a6368cce5ff32c550b732a83d07b47120d515cdd89d5c8741ed16da85add26de3a285297", @ANYRES32=0x0, @ANYBLOB="137c03002b1a07002c0012800e00010069703667726574617000000018000280140007000000000000000000000000000000000108001f005600000008000d0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

1m27.941666778s ago: executing program 6 (id=4112):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x5, @vbi={0x10, 0x1, 0x4, 0x38414261, [0x9, 0xfffffffe], [0x800, 0xffffffff], 0x1}})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket(0x9, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00007dd000/0x1000)=nil, 0x1000}, 0x2})
read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
readv(r5, &(0x7f00000015c0)=[{&(0x7f0000000580)=""/24, 0x18}], 0x1)
fchdir(r5)

1m27.556120986s ago: executing program 6 (id=4114):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280), &(0x7f0000000240)=0x8) (async, rerun: 64)
r1 = socket$inet6(0x10, 0x2, 0x0) (rerun: 64)
creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) (async)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x6, @loopback, 0x30000}}]}, 0x110) (async)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000180)={0x3, {{0xa, 0x4e23, 0xa46, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @loopback, 0xfffffe01}}}, 0x108) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x10}, {0x16}]}, 0x10) (async)
sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)

1m27.458420723s ago: executing program 42 (id=4114):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280), &(0x7f0000000240)=0x8) (async, rerun: 64)
r1 = socket$inet6(0x10, 0x2, 0x0) (rerun: 64)
creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) (async)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x6, @loopback, 0x30000}}]}, 0x110) (async)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000180)={0x3, {{0xa, 0x4e23, 0xa46, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @loopback, 0xfffffe01}}}, 0x108) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x10}, {0x16}]}, 0x10) (async)
sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)

5.313594761s ago: executing program 2 (id=4808):
r0 = userfaultfd(0x80801)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x7})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x200001, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2200, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00?'], 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x11, @multicast2, 0x4e1f, 0x3, 'lc\x00', 0x2, 0x4, 0x80}, {@multicast1, 0x4e24, 0x2, 0xc8, 0x3, 0x12d7c}}, 0x44)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x78}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000000)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40000)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7b)

2.886413843s ago: executing program 1 (id=4816):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x40040d0)

2.822798195s ago: executing program 1 (id=4817):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x0, {0x0, r5}})
setns(r1, 0x8000000)
io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
syz_pidfd_open(0x0, 0x0)
fcntl$lock(r6, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0xffffffbfffff8001, 0x8})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
fcntl$lock(r6, 0x25, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x1fd})
fcntl$lock(r6, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})

2.042355616s ago: executing program 2 (id=4818):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x6})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.978297933s ago: executing program 2 (id=4821):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2, 0xd7, 0x90, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}})
r0 = socket$inet(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
close(r0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)

1.977973788s ago: executing program 2 (id=4823):
syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x7, {0x400e802, 0x8001, 0x400, 0x4}})
syz_open_dev$dri(0x0, 0x2000008, 0x3)
open(0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0x8000000004)
renameat2(r2, &(0x7f00000000c0)='./cgroup\x00', r2, 0x0, 0x2)
r3 = fsmount(0xffffffffffffffff, 0x1, 0x1)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0)

1.941798441s ago: executing program 2 (id=4825):
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000", 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$printer(0x4, 0x0, 0xfffffffffffffffd, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x60, 0x1, 0x7, 0x10}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0xb7, &(0x7f0000000180)=@string={0xb7, 0x3, "50e44b96245e9225a9b5f079b41d3b918e539f2b1ad3499db1eb8a744ff0cc16e64b0cfa0e070fab87a893c0a19dcdffc7ba32be566dc99c8a44fdeddacbade332b6a0c58f1ca343c931adaa22c5be11e03e82068a50913aa3a2db88d4686eae850b7f479d56119cadbeffbf4925688829fb769e37cefa38d83d2386b3d0fda661258e962df8b9ce90e5a71b1d8ad5469112bb464c671551898312b6f9c679ce47b2628ad38e3b52bca4471e6b267cb14fb85d34bf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0a}}, {0x59, &(0x7f0000000340)=@string={0x59, 0x3, "2a1838e7549c4a2329d326afcc5cb9466fb27a5928fc3f1638901d5fd07150ed320017ae4070436800edfb47d5c794945ea084d7c6f36acc181ee03e046c5a3729f30226a7b079252d67c9f27f081e9497c2c8642df671"}}]})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x208, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x209, 0x6, 0x807, 0x2097}, 0x8)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

1.940829344s ago: executing program 1 (id=4826):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'dummy0\x00', 0x8000})

1.870916052s ago: executing program 1 (id=4827):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_sctp(0x2, 0x1, 0x84)

1.293630715s ago: executing program 1 (id=4833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0)
fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1)
open(0x0, 0x108843, 0x190)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080))
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f01b10e0000000f20e035000002000f22e0409f0f0d1403450f3a0f9902000000f012450f38de7208c402fd296a090f788ac3000000c442fd2336c463796187000000000d"}], 0x0, 0x47, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.047893781s ago: executing program 4 (id=4837):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fcntl$notify(r1, 0x402, 0x0)

876.988464ms ago: executing program 4 (id=4838):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

779.95076ms ago: executing program 4 (id=4839):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x4e24, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001140)=ANY=[@ANYBLOB="030000000000000002004e23e0"], 0x90)

779.794762ms ago: executing program 4 (id=4840):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [{0x20, ','}, {0x20, '#!\\\xb0f\n9=\xa0Jq\xcc{\xe5\xe7>!\x8et-P5\x84\x95h]@V\xb6\x1a\x04)V\xe3\x90M\xd1\xb2\x7f<\xee\xec\xf1\xe5z\x992\xd9\x00n\xd9\x84(\xa1\x14y\a\x00\xb2\xc1a\xef\xcb\xfc\xd4t86\xaf~\x98\xdc\xa5\x91C\x8f\x9fU\xd9I&\xbd\xa3\xc2\x19\x8f\v\xc1\xe66\xd1\xf4\xdf\x9e\xd4\xb4/:\xce\xb3C\x99z\xe9:\xe8\xfa\xab\xe6*\xaa\xce\xaf\x9f\x7f\xdc)[\x03D'}], 0xa, "4927297310a85760f85c1bcdd2ed17e57f000000000000002003420718bcc4aca67133772f830d56d8aeca36e6b4ae627e5afd2d1c2b64bf48a96df61d39dbe99e17ac662bef023b7ae3bbcc1421090420c7ceb08c3c720bafaf5ca82bf324dd16d7e6a72c4680da92e478cd69201340fc915eb1007c2d9807b0e37576fc5b6a3361d20d7486770aa5d1a4a6d6104c0ab0d2416328ffb993d77518c22b4ed845d6d6da41"}, 0x12a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 18447744073709551610'], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

705.982188ms ago: executing program 4 (id=4841):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x3e)

705.729885ms ago: executing program 4 (id=4842):
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r4)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
fsopen(&(0x7f00000003c0)='omfs\x00', 0x0)
r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
fsopen(&(0x7f0000000580)='overlay\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f40}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}]}}]}, 0xb0}}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3)
socket(0x10, 0x3, 0x0)

556.21505ms ago: executing program 2 (id=4843):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
bind$qrtr(r2, &(0x7f0000000200), 0xc)
r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x111cf8, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5})
close(r5)
mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0)
getresuid(&(0x7f00000002c0), &(0x7f00000004c0), &(0x7f0000000500)=<r6=>0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0xee00, r6, 0xee01, 0xd4, 0x6}, 0x0, 0x0, 0x783, 0x3, 0x971, 0x5, 0x6, 0x6, 0x3, 0x0, r4, r4})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delneigh={0x24, 0x1a, 0x401, 0x0, 0xfffffffc, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x640100fd}]}, 0x24}}, 0x20040800)
ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040))
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000801c400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc0700bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c398ab724577fd742bf44cdd8489086e61aa3cb1d3ab3dac8183102fe6fc8a038e3868a0592811446867969f0fb3f547e83c4ca35aac023f09f15bb0acb3cdc6efd9b0e9df56af7fda01280a384028b359943"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r8, 0x0, 0x0}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001100010100"/20, @ANYRES32, @ANYBLOB="000000002140000508"], 0x28}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x3, 0xd}, {0x8, 0x1}}}, 0x24}}, 0x4040004)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, 0x0)

267.033077ms ago: executing program 1 (id=4844):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a", 0x11}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

266.926074ms ago: executing program 7 (id=4845):
r0 = socket(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @empty, 0x6}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0xfff2)

195.282271ms ago: executing program 7 (id=4846):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x730e}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x0)

195.041385ms ago: executing program 7 (id=4847):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717ed76b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309877816048f24"}, 0x418, 0x6})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

107.489831ms ago: executing program 7 (id=4848):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x12c6, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x0, 0x800220}, 0x0, &(0x7f00000002c0))
r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6000, 0x800, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x2, 0x4e23, 0x8, 0xa, 0xa0, 0xa0, 0x67, 0x0, r1}, {0x6, 0x6, 0x0, 0x1, 0x3, 0x9, 0x2, 0x1000}, {0x3, 0x262a, 0xfffffffffffffff2, 0x3}, 0x7, 0x6e6bc0, 0x0, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x3c}, 0x14, @in=@rand_addr=0x64010101, 0x34ff, 0x2, 0x4d51417ae76afb12, 0x2, 0x89, 0x1, 0x10}}, 0xe8)
r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c})

267.155µs ago: executing program 7 (id=4849):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050006"], 0x48}}, 0x0)

0s ago: executing program 7 (id=4850):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x88ad, 0x0, 0x2, 0x40001333}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000480)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

37188][ T1786] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚL�h»�c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i'„j«ž3€e=:3à/ÒCœ_ßÍ<i�eT^ó×.íéŠq9!´Ëc±¡�7Q��áuR›`ÖÀîSúø+ZÕ	Ø
[  382.745150][ T1786] [U] T»qtÁvèbÀ–—Ý|Û@ÏÜD D�†E/Qšu’Ù�
3Ô裠��2’±Ÿõ°…y…rrÇ|l;6êD‹Ûûš¡%×ËjKƒ›ì‘Æ·2A[Œ‡ikuCñÝë��-T1xïT·�Ìvµ‘“3ãîl<£Ž3ΑØâKÆÃŒ5IÐ.“�>¯ 81ë(FW
[  382.751776][ T1786] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný
@ox²;JD‡¶ ¹ƒ,
[  382.754502][ T1786] [U] *CÃn¯3¿Àv7‰K�E¯Xgt_3êê§ëé
[  382.756674][ T1786] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£�s«=óR@
[  382.760833][ T1786] [U] ‰ϼcEv‹û@ý
[  382.762450][ T1786] [U] aÆ
„%
[  382.763884][ T1786] [U] ’@¿Ëø±·’äæëcÃ�_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@	o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~W�ìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª`
[  382.771273][ T1786] [U] éf1Ïp±3
[  382.772867][ T1786] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï×
[  382.775023][ T1786] [U] �Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è
[  383.012894][  T217] bond3 (unregistering): (slave bridge3): Releasing backup interface
[  383.015782][  T217] bridge3 (unregistering): left promiscuous mode
[  383.196712][  T217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.239806][  T217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  383.281341][  T217] bond0 (unregistering): Released all slaves
[  383.290680][  T217] bond1 (unregistering): Released all slaves
[  383.301702][  T217] bond2 (unregistering): Released all slaves
[  383.410793][  T217] bond3 (unregistering): Released all slaves
[  383.420916][  T217] bond4 (unregistering): Released all slaves
[  383.431161][  T217] bond5 (unregistering): Released all slaves
[  383.439343][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.442315][ T1423] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.444976][ T1423] bridge_slave_0: entered allmulticast mode
[  383.448823][ T1423] bridge_slave_0: entered promiscuous mode
[  383.453627][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.456589][ T1423] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.459615][ T1423] bridge_slave_1: entered allmulticast mode
[  383.463613][ T1423] bridge_slave_1: entered promiscuous mode
[  383.501611][ T1794] syz_tun: entered allmulticast mode
[  383.503668][ T1795] lo: entered allmulticast mode
[  383.507632][ T1792] syz_tun: left allmulticast mode
[  383.566911][ T1423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.569948][  T217] : left promiscuous mode
[  383.583828][ T1784] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôô�ádmÿ�¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀ
í·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎�ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ	ŸÜ�X†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬�Ý{»›‡n
[  383.592174][ T1423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.607011][   T29] hid_parser_main: 73 callbacks suppressed
[  383.607029][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.612078][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.614947][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.617496][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.619953][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.623950][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.626601][ T1975] IPv6: NLM_F_CREATE should be specified when creating new route
[  383.626981][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.631769][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.635053][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.638179][   T29] hid-generic 0005:00B6:0009.0013: unknown main item tag 0x0
[  383.675590][   T29] hid-generic 0005:00B6:0009.0013: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1
[  383.675841][ T1423] team0: Port device team_slave_0 added
[  383.685078][ T1423] team0: Port device team_slave_1 added
[  383.718840][ T2062] fido_id[2062]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  383.812167][ T1423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.816627][ T1423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.825290][ T1423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.830811][ T1423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.833758][ T1423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.843137][ T1423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.911193][ T2281] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  383.958448][ T1423] hsr_slave_0: entered promiscuous mode
[  383.961791][ T1423] hsr_slave_1: entered promiscuous mode
[  383.965025][ T1423] debugfs: 'hsr0' already exists in 'hsr'
[  383.967332][ T1423] Cannot create hsr debugfs directory
[  384.011658][ T2351] fuse: Unknown parameter ''
[  384.123726][  T217] hsr_slave_0: left promiscuous mode
[  384.126996][  T217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.129627][  T217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.138841][  T217] veth1_vlan: left allmulticast mode
[  384.140612][  T217] veth0_macvtap: left allmulticast mode
[  384.185164][ T5976] Bluetooth: hci3: command tx timeout
[  384.281293][ T2506] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4025'.
[  385.127260][  T217] team0 (unregistering): Port device team_slave_1 removed
[  385.250728][  T217] team0 (unregistering): Port device team_slave_0 removed
[  386.052330][ T2608] bridge0: entered allmulticast mode
[  386.055389][ T2608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4031'.
[  386.155069][   T40] audit: type=1400 audit(1758205438.770:26165): avc:  denied  { load_policy } for  pid=2617 comm="syz.1.4033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  386.163761][ T2623] SELinux: ebitmap: truncated map
[  386.171089][ T2623] SELinux: failed to load policy
[  386.183545][ T2643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4035'.
[  386.265307][ T2623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.294570][ T2650] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4036'.
[  386.358666][ T2623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.372823][ T2650] loop6: detected capacity change from 0 to 2560
[  386.376088][ T2650] buffer_io_error: 54 callbacks suppressed
[  386.376100][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.382413][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.385029][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.387672][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.390471][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.393370][ T5976] Bluetooth: hci3: command tx timeout
[  386.394817][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.398635][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.401950][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.408027][ T2650] ldm_validate_partition_table(): Disk read failed.
[  386.412251][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.417678][ T2650] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.421050][ T2650] Dev loop6: unable to read RDB block 0
[  386.423877][ T2650]  loop6: unable to read partition table
[  386.426830][ T2650] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  386.490542][ T2623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.536373][ T2758] Bluetooth: MGMT ver 1.23
[  386.537830][ T2758] Bluetooth: hci0: unsupported parameter 2459
[  386.539866][ T2758] Bluetooth: hci0: unsupported parameter 2459
[  386.559283][  T217] IPVS: stop unused estimator thread 0...
[  386.610326][ T2623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.656964][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4041'.
[  386.656964][ T2771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4041'.
[  386.662519][ T2771] ipvlan2: entered promiscuous mode
[  386.671525][ T2772] ipvlan3: entered promiscuous mode
[  386.702635][   T40] audit: type=1400 audit(1758205439.294:26166): avc:  denied  { write } for  pid=2777 comm="syz.4.4042" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  386.710057][   T40] audit: type=1400 audit(1758205439.294:26167): avc:  denied  { append } for  pid=2777 comm="syz.4.4042" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  386.785571][ T1423] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  386.804905][ T1423] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  386.809589][ T1423] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  386.814979][ T2778] lo speed is unknown, defaulting to 1000
[  386.815245][ T1423] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  386.838689][   T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.852305][ T7369] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.884515][ T7369] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.912365][ T2649] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  386.912691][ T1195] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.987192][ T1423] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.010906][ T1423] 8021q: adding VLAN 0 to HW filter on device team0
[  387.015418][ T2852] syz_tun: entered allmulticast mode
[  387.038562][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.041023][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.052186][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.055127][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.061494][ T2852] lo: left allmulticast mode
[  387.106141][ T2851] syz_tun: left allmulticast mode
[  387.236045][   T40] audit: type=1400 audit(1758205439.780:26168): avc:  denied  { append } for  pid=2874 comm="syz.1.4047" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  387.305137][ T1423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.519257][ T1423] veth0_vlan: entered promiscuous mode
[  387.532407][ T1423] veth1_vlan: entered promiscuous mode
[  387.627683][ T1423] veth0_macvtap: entered promiscuous mode
[  387.643889][ T1423] veth1_macvtap: entered promiscuous mode
[  387.673177][ T1423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.678717][ T1423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.696402][ T1149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.700949][ T1195] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.709954][ T1195] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.713458][ T1195] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.815855][ T7348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.819029][ T7348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.820764][ T2951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4053'.
[  387.888959][ T7368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.892267][ T7368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.245564][ T2997] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4058'.
[  388.249403][   T34] hid (null): bogus close delimiter
[  388.251205][   T34] hid (null): report_id 38394 is invalid
[  388.253220][   T34] hid (null): invalid report_size 306220673
[  388.255137][   T34] hid (null): unknown global tag 0x70
[  388.258112][   T34] hid-generic 0081:80000000:0005.0014: bogus close delimiter
[  388.260392][   T34] hid-generic 0081:80000000:0005.0014: item 0 0 2 10 parsing failed
[  388.263833][   T34] hid-generic 0081:80000000:0005.0014: probe with driver hid-generic failed with error -22
[  388.296702][ T3007] netlink: 'syz.6.4059': attribute type 2 has an invalid length.
[  388.300242][ T3007] netlink: 46 bytes leftover after parsing attributes in process `syz.6.4059'.
[  388.307541][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4059'.
[  388.311068][ T3007] bridge: RTM_NEWNEIGH with invalid ether address
[  388.313995][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4059'.
[  388.317834][ T3007] bridge: RTM_NEWNEIGH with invalid ether address
[  388.626127][ T5976] Bluetooth: hci3: command tx timeout
[  388.705955][ T3045] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4066'.
[  388.808193][ T3045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.853395][ T3045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.876822][ T3045] bond0 (unregistering): Released all slaves
[  388.948898][   T24] hid-generic 0095:000F:0001.0015: item fetching failed at offset 12/181
[  388.951888][   T24] hid-generic 0095:000F:0001.0015: probe with driver hid-generic failed with error -22
[  388.991665][   T40] audit: type=1400 audit(1758205441.436:26169): avc:  denied  { setopt } for  pid=3083 comm="syz.4.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  389.246368][   T40] audit: type=1400 audit(1758205441.670:26170): avc:  denied  { connect } for  pid=3091 comm="syz.7.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  389.256825][ T9887] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  389.379710][   T24] IPVS: starting estimator thread 0...
[  389.438843][ T9887] usb 9-1: Using ep0 maxpacket: 8
[  389.442041][ T9887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  389.445589][ T9887] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  389.450101][ T9887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.464621][ T9887] usb 9-1: config 0 descriptor??
[  389.470729][ T3099] IPVS: using max 27 ests per chain, 64800 per kthread
[  389.571398][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  389.573989][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  389.685742][ T9887] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  389.915639][ T6220] usb 9-1: USB disconnect, device number 10
[  390.443488][ T3148] netlink: 'syz.7.4078': attribute type 1 has an invalid length.
[  390.741806][   T40] audit: type=1326 audit(1758205443.063:26171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3152 comm="syz.6.4080" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f978858eba9 code=0x0
[  390.839051][ T5976] Bluetooth: hci3: command tx timeout
[  391.154627][   T40] audit: type=1400 audit(1758205443.456:26172): avc:  denied  { ioctl } for  pid=3156 comm="syz.4.4081" path="socket:[100410]" dev="sockfs" ino=100410 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  391.211450][   T40] audit: type=1400 audit(1758205443.503:26173): avc:  denied  { getopt } for  pid=3156 comm="syz.4.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  391.496156][ T3174] siw: device registration error -23
[  391.499148][ T3174] netlink: 'syz.4.4084': attribute type 21 has an invalid length.
[  391.503379][ T3174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4084'.
[  391.682114][ T3186] max out of range
[  391.682132][   T40] audit: type=1400 audit(1758205443.943:26174): avc:  denied  { remount } for  pid=3185 comm="syz.4.4089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  391.772248][ T3199] netlink: 'syz.6.4093': attribute type 1 has an invalid length.
[  391.775546][ T3199] netlink: 500 bytes leftover after parsing attributes in process `syz.6.4093'.
[  391.898382][ T3215] tipc: Started in network mode
[  391.900497][ T3215] tipc: Node identity 6a2c4825a6aa, cluster identity 4711
[  391.903708][ T3215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.911338][ T3215] tipc: Resetting bearer <eth:syzkaller0>
[  391.914642][   T40] audit: type=1400 audit(1758205444.167:26175): avc:  denied  { getopt } for  pid=3214 comm="syz.6.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  391.923068][ T3214] tipc: Disabling bearer <eth:syzkaller0>
[  392.170382][   T40] audit: type=1400 audit(1758205444.401:26176): avc:  denied  { write } for  pid=3230 comm="syz.6.4100" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  392.180269][   T40] audit: type=1400 audit(1758205444.410:26177): avc:  denied  { setopt } for  pid=3227 comm="syz.4.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  392.244852][ T3239] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  392.307588][ T3243] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  392.318379][ T3236] input: syz1 as /devices/virtual/input/input82
[  392.724269][ T3281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4109'.
[  392.728431][ T3281] gre0: entered promiscuous mode
[  392.730541][ T3281] gre0: entered allmulticast mode
[  392.860249][ T3284] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4110'.
[  392.870326][   T53] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  392.930151][ T3284] netlink: 'syz.6.4110': attribute type 4 has an invalid length.
[  392.939411][ T3284] netlink: 'syz.6.4110': attribute type 4 has an invalid length.
[  393.030696][   T53] usb 9-1: Using ep0 maxpacket: 32
[  393.034409][   T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.038250][   T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.042708][   T53] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  393.045662][   T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.060258][   T53] usb 9-1: config 0 descriptor??
[  393.500163][   T53] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  393.781851][ T9887] usb 9-1: USB disconnect, device number 11
[  393.908771][  T312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  393.913459][  T312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  393.919787][  T312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  393.924093][  T312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  393.926898][  T312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  394.001717][ T7348] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.033655][ T3359] lo speed is unknown, defaulting to 1000
[  394.109294][ T7348] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.191567][ T3359] chnl_net:caif_netlink_parms(): no params data found
[  394.200322][ T3481] overlayfs: conflicting options: userxattr,metacopy=on
[  394.275846][ T7348] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.287733][ T3536] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4118'.
[  394.383139][ T7348] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.399430][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.402468][ T3359] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.405542][ T3359] bridge_slave_0: entered allmulticast mode
[  394.411507][ T3359] bridge_slave_0: entered promiscuous mode
[  394.416071][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.419099][ T3359] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.423176][ T3359] bridge_slave_1: entered allmulticast mode
[  394.427081][ T3359] bridge_slave_1: entered promiscuous mode
[  394.514087][ T3359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.521506][ T3359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.613285][ T3359] team0: Port device team_slave_0 added
[  394.621883][ T3359] team0: Port device team_slave_1 added
[  394.622343][ T3876] netlink: 'syz.4.4122': attribute type 10 has an invalid length.
[  394.670561][ T3876] hsr_slave_0: left promiscuous mode
[  394.673505][ T3876] hsr_slave_1: left promiscuous mode
[  394.697118][ T3955] netlink: 'syz.7.4123': attribute type 29 has an invalid length.
[  394.748886][ T3955] netlink: 'syz.7.4123': attribute type 29 has an invalid length.
[  394.754808][ T3359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.755653][ T3955] netlink: 500 bytes leftover after parsing attributes in process `syz.7.4123'.
[  394.757710][ T3359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.773077][ T3359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.797923][ T3359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.800821][ T3359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.802303][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'.
[  394.804268][ T4073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'.
[  394.811683][ T3359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.883950][ T7348] bridge_slave_1: left allmulticast mode
[  394.885706][ T7348] bridge_slave_1: left promiscuous mode
[  394.887537][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.895181][ T7348] bridge_slave_0: left allmulticast mode
[  394.897447][ T7348] bridge_slave_0: left promiscuous mode
[  394.899499][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.971268][ T4153] netlink: 'syz.4.4126': attribute type 62 has an invalid length.
[  395.141212][ T4157] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4127'.
[  395.197039][ T4159] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4127'.
[  395.375489][ T3359] hsr_slave_0: entered promiscuous mode
[  395.380103][ T3359] hsr_slave_1: entered promiscuous mode
[  395.389520][ T3359] debugfs: 'hsr0' already exists in 'hsr'
[  395.391981][ T3359] Cannot create hsr debugfs directory
[  395.446958][ T7348] tipc: Left network mode
[  395.667082][ T4299] geneve3: entered promiscuous mode
[  395.668744][ T4299] geneve3: entered allmulticast mode
[  395.713166][ T4295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.759133][ T4465] 9pnet_virtio: no channels available for device syz
[  396.010635][ T7348] hsr_slave_0: left promiscuous mode
[  396.013833][ T7348] hsr_slave_1: left promiscuous mode
[  396.016615][ T7348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.019701][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.023515][ T7348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.026824][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.083518][ T7348] veth1_macvtap: left promiscuous mode
[  396.085538][ T7348] veth0_macvtap: left promiscuous mode
[  396.087371][ T7348] veth1_vlan: left promiscuous mode
[  396.089302][ T7348] veth0_vlan: left promiscuous mode
[  396.105548][ T4489] vivid-003: =================  START STATUS  =================
[  396.107933][ T4489] vivid-003: Interlaced VBI Format: false
[  396.111594][ T4489] vivid-003: ==================  END STATUS  ==================
[  396.114979][ T4490] vivid-003: =================  START STATUS  =================
[  396.118157][ T4490] vivid-003: Interlaced VBI Format: false
[  396.121233][ T4490] vivid-003: ==================  END STATUS  ==================
[  396.141817][  T312] Bluetooth: hci3: command tx timeout
[  397.085126][ T7348] team0 (unregistering): Port device team_slave_1 removed
[  397.212545][ T7348] team0 (unregistering): Port device team_slave_0 removed
[  398.090415][ T4504] lo speed is unknown, defaulting to 1000
[  398.099726][ T4503] lo speed is unknown, defaulting to 1000
[  398.177033][ T4542] netlink: 'syz.4.4142': attribute type 20 has an invalid length.
[  398.230490][ T4542] netlink: 'syz.4.4142': attribute type 10 has an invalid length.
[  398.276736][ T4575] netlink: 'syz.7.4143': attribute type 4 has an invalid length.
[  398.281412][ T4550] 9pnet_virtio: no channels available for device syz
[  398.283265][ T4575] netlink: 'syz.7.4143': attribute type 4 has an invalid length.
[  398.283383][ T4542] 9pnet_virtio: no channels available for device syz
[  398.365868][  T312] Bluetooth: hci3: command tx timeout
[  398.484520][ T4607] tmpfs: Unknown parameter '0Ä6Ø"„'
[  398.516978][ T3359] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  398.603183][ T3359] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  398.651744][ T3359] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  398.657697][ T3359] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  398.720693][ T3359] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.731392][ T3359] 8021q: adding VLAN 0 to HW filter on device team0
[  398.734848][ T4628] bridge0: port 1(veth0_to_bridge) entered blocking state
[  398.737270][ T4628] bridge0: port 1(veth0_to_bridge) entered disabled state
[  398.740494][ T4628] veth0_to_bridge: entered allmulticast mode
[  398.743281][ T4628] veth0_to_bridge: entered promiscuous mode
[  398.750893][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.753462][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.763394][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.765788][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.871601][   T40] audit: type=1400 audit(1758205450.678:26178): avc:  denied  { write } for  pid=4642 comm="syz.1.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  398.871843][ T4643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64362 sclass=netlink_route_socket pid=4643 comm=syz.1.4149
[  398.930526][ T3359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.944900][   T40] audit: type=1400 audit(1758205450.743:26179): avc:  denied  { read } for  pid=4642 comm="syz.1.4149" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  398.952853][   T40] audit: type=1400 audit(1758205450.743:26180): avc:  denied  { open } for  pid=4642 comm="syz.1.4149" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  398.972745][ T3359] veth0_vlan: entered promiscuous mode
[  398.978371][ T4652] netlink: 'syz.4.4152': attribute type 3 has an invalid length.
[  398.980860][ T4652] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4152'.
[  398.983472][ T3359] veth1_vlan: entered promiscuous mode
[  398.985783][   T40] audit: type=1400 audit(1758205450.771:26181): avc:  denied  { audit_read } for  pid=4651 comm="syz.4.4152" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  399.014561][ T3359] veth0_macvtap: entered promiscuous mode
[  399.019498][ T3359] veth1_macvtap: entered promiscuous mode
[  399.029621][ T3359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.036496][ T3359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.042869][  T217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.046491][  T217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.053878][  T217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.057525][  T217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.077740][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4154'.
[  399.233960][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.237488][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.263560][ T6068] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  399.265967][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.268431][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.346402][   T40] audit: type=1400 audit(1758205451.117:26182): avc:  denied  { map } for  pid=4684 comm="syz.4.4156" path="/dev/binderfs/binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  399.347232][ T4685] binder_alloc: binder_alloc_mmap_handler: 4684 200000ffe000-200000fff000 already mapped failed -16
[  399.366133][ T4685] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4156'.
[  399.372553][   T40] audit: type=1400 audit(1758205451.145:26183): avc:  denied  { call } for  pid=4684 comm="syz.4.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  399.373122][ T4685] binder_alloc: 4684: pid 4684 spamming oneway? 1 buffers allocated for a total size of 4096
[  399.392388][ T4685] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5137 sclass=netlink_xfrm_socket pid=4685 comm=syz.4.4156
[  399.433462][ T4697] comedi comedi3: ni_at_a2150: I/O port conflict (0x4f27,28)
[  399.438154][ T4697] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4158'.
[  399.444986][ T6068] usb 6-1: Using ep0 maxpacket: 16
[  399.448417][ T6068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  399.454076][ T6068] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  399.459335][ T6068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.462207][ T6068] usb 6-1: Product: syz
[  399.463901][ T6068] usb 6-1: Manufacturer: syz
[  399.465353][ T6068] usb 6-1: SerialNumber: syz
[  399.468647][ T6068] usb 6-1: config 0 descriptor??
[  399.475047][ T6068] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  399.480534][ T6068] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  399.541927][ T4714] random: crng reseeded on system resumption
[  399.591862][ T4720] program syz.4.4163 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  399.627956][ T4725] openvswitch: netlink: Missing key (keys=100040, expected=80)
[  399.642408][ T4727] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4165'.
[  399.645856][ T4729] 9pnet_fd: Insufficient options for proto=fd
[  399.653797][   T53] IPVS: starting estimator thread 0...
[  399.701091][ T4737] netlink: 'syz.4.4167': attribute type 1 has an invalid length.
[  399.718473][ T4737] 8021q: adding VLAN 0 to HW filter on device bond1
[  399.746009][ T4749] comedi comedi3: dt2817: I/O port conflict (0x4f27,5)
[  399.751856][ T4749] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  399.759094][ T4731] IPVS: using max 45 ests per chain, 108000 per kthread
[  399.822927][ T4725] syz.7.4164 (4725): drop_caches: 2
[  399.856494][   T40] audit: type=1400 audit(1758205451.594:26184): avc:  denied  { accept } for  pid=4788 comm="syz.4.4171" path="socket:[100949]" dev="sockfs" ino=100949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  399.896766][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4173'.
[  399.929464][ T4793] program syz.7.4172 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  400.021885][ T4818] FAULT_INJECTION: forcing a failure.
[  400.021885][ T4818] name failslab, interval 1, probability 0, space 0, times 0
[  400.029431][ T4818] CPU: 3 UID: 0 PID: 4818 Comm: syz.4.4178 Not tainted syzkaller #0 PREEMPT(full) 
[  400.029457][ T4818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  400.029471][ T4818] Call Trace:
[  400.029478][ T4818]  <TASK>
[  400.029486][ T4818]  dump_stack_lvl+0x16c/0x1f0
[  400.029532][ T4818]  should_fail_ex+0x512/0x640
[  400.029562][ T4818]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  400.029585][ T4818]  should_failslab+0xc2/0x120
[  400.029608][ T4818]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  400.029626][ T4818]  ? fput+0x9b/0xd0
[  400.029649][ T4818]  ? getname_flags.part.0+0x4c/0x550
[  400.029681][ T4818]  getname_flags.part.0+0x4c/0x550
[  400.029711][ T4818]  __x64_sys_unlink+0xb0/0x110
[  400.029735][ T4818]  do_syscall_64+0xcd/0x4e0
[  400.029762][ T4818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.029781][ T4818] RIP: 0033:0x7eff0d98eba9
[  400.029797][ T4818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.029814][ T4818] RSP: 002b:00007eff0e8a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  400.029833][ T4818] RAX: ffffffffffffffda RBX: 00007eff0dbd5fa0 RCX: 00007eff0d98eba9
[  400.029844][ T4818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440
[  400.029855][ T4818] RBP: 00007eff0e8a3090 R08: 0000000000000000 R09: 0000000000000000
[  400.029866][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.029877][ T4818] R13: 00007eff0dbd6038 R14: 00007eff0dbd5fa0 R15: 00007ffc195dfbf8
[  400.029926][ T4818]  </TASK>
[  400.098019][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'.
[  400.117444][ T6068] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  400.394726][ T4862] netlink: 'syz.4.4187': attribute type 9 has an invalid length.
[  400.397882][ T4862] netlink: 'syz.4.4187': attribute type 7 has an invalid length.
[  400.400554][ T4862] netlink: 'syz.4.4187': attribute type 8 has an invalid length.
[  400.404058][ T4862] 9pnet_virtio: no channels available for device syz
[  400.411266][ T4864] fuse: Unknown parameter 'grÈãp_id'
[  400.422034][ T4864] overlayfs: conflicting options: userxattr,metacopy=on
[  400.533212][ T4879] xt_l2tp: v2 sid > 0xffff: 1114112
[  400.581734][ T4885] xt_l2tp: v2 sid > 0xffff: 1114112
[  400.589113][  T312] Bluetooth: hci3: command tx timeout
[  400.722795][   T40] audit: type=1400 audit(1758205452.408:26185): avc:  denied  { getopt } for  pid=4654 comm="syz.1.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  400.794342][ T4896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4896 comm=syz.4.4193
[  401.027307][ T9887] usb 7-1: new full-speed USB device number 33 using dummy_hcd
[  401.041507][   T40] audit: type=1400 audit(1758205452.707:26186): avc:  denied  { ioctl } for  pid=4923 comm="syz.7.4198" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  401.112797][ T6037] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  401.191708][ T9887] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  401.196067][ T9887] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  401.201804][ T9887] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  401.205607][ T9887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.294954][ T6037] usb 9-1: Using ep0 maxpacket: 8
[  401.301146][ T6037] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  401.304579][ T6037] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  401.309192][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  401.313533][ T6037] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  401.318457][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  401.322789][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  401.327720][ T6037] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  401.332970][ T6037] usb 9-1: config 168 interface 0 has no altsetting 0
[  401.336404][ T6037] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  401.339179][ T6037] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  401.343036][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  401.347035][ T6037] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  401.350982][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  401.354480][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  401.358184][ T6037] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  401.363010][ T6037] usb 9-1: config 168 interface 0 has no altsetting 0
[  401.366906][ T6037] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  401.370446][ T6037] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  401.374233][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  401.378580][ T6037] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  401.383647][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  401.388244][ T6037] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  401.393305][ T6037] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  401.397940][ T6037] usb 9-1: config 168 interface 0 has no altsetting 0
[  401.404617][ T6037] usb 9-1: string descriptor 0 read error: -22
[  401.407321][ T6037] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  401.411236][ T6037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.425846][ T6037] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  401.429106][ T9887] usb 7-1: usb_control_msg returned -32
[  401.431570][ T9887] usbtmc 7-1:16.0: can't read capabilities
[  401.797403][ T6068] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  401.800924][ T6068] em28xx 6-1:0.0: board has no eeprom
[  401.803254][ T4655] em28xx 6-1:0.0: reading from i2c device at 0x100 failed (error=-5)
[  401.809879][ T4951] netlink: 'syz.2.4194': attribute type 1 has an invalid length.
[  401.827090][ T4951] 8021q: adding VLAN 0 to HW filter on device bond1
[  401.856865][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.860660][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.872322][ T6068] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  401.875582][ T6068] em28xx 6-1:0.0: dvb set to bulk mode.
[  401.878868][   T53] em28xx 6-1:0.0: Binding DVB extension
[  401.879401][ T6220] usb 7-1: USB disconnect, device number 33
[  401.924821][   T53] em28xx 6-1:0.0: Registering input extension
[  401.973219][   T40] audit: type=1400 audit(1758205453.577:26187): avc:  denied  { create } for  pid=5066 comm="syz.2.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  402.000167][ T6037] usb 12-1: new high-speed USB device number 28 using dummy_hcd
[  402.030497][ T5073] tipc: Started in network mode
[  402.032403][ T5073] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  402.037090][ T5073] tipc: Enabled bearer <udp:syz0>, priority 10
[  402.162929][ T6037] usb 12-1: config 0 has no interfaces?
[  402.165547][ T6037] usb 12-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00
[  402.169313][ T6037] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.178273][ T6037] usb 12-1: config 0 descriptor??
[  402.361266][ T5086] bridge0: port 3(syz_tun) entered blocking state
[  402.365063][ T5086] bridge0: port 3(syz_tun) entered disabled state
[  402.367995][ T5086] syz_tun: entered allmulticast mode
[  402.373595][ T5086] syz_tun: entered promiscuous mode
[  402.376841][ T5086] bridge0: port 3(syz_tun) entered blocking state
[  402.381959][ T5086] bridge0: port 3(syz_tun) entered forwarding state
[  402.402536][ T6220] usb 12-1: USB disconnect, device number 28
[  402.608302][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4214'.
[  402.617409][ T5111] xfrm1: entered promiscuous mode
[  402.619661][ T5111] xfrm1: entered allmulticast mode
[  402.626410][ T5111] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  402.742333][ T5121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=5121 comm=syz.1.4216
[  402.744325][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'.
[  402.825984][  T312] Bluetooth: hci3: command tx timeout
[  402.850997][ T5122] team0 (unregistering): Port device team_slave_0 removed
[  402.857731][ T5122] team0 (unregistering): Port device team_slave_1 removed
[  403.034445][ T5167] 9pnet_fd: Insufficient options for proto=fd
[  403.044679][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.048538][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.229595][ T6016] tipc: Node number set to 4269801488
[  403.268745][ T5170] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  403.629380][ T5204] block nbd7: Attempted send on invalid socket
[  403.631299][ T5204] blk_print_req_error: 54 callbacks suppressed
[  403.631308][ T5204] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  403.638475][ T5204] SQUASHFS error: Failed to read block 0x0: -5
[  403.641057][ T5204] unable to read squashfs_super_block
[  403.727042][ T5212] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4229'.
[  403.826698][ T5221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4230'.
[  403.848772][ T5224] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  404.063873][   T53] usb 9-1: USB disconnect, device number 12
[  404.167489][ T5260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4240'.
[  404.173065][ T5266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5266 comm=syz.4.4241
[  404.505471][ T5304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38632 sclass=netlink_route_socket pid=5304 comm=syz.4.4248
[  404.541169][ T5306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4249'.
[  404.545153][ T5306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4249'.
[  404.548580][ T5306] ksmbd: Daemon and kernel module version mismatch. ksmbd: 220, kernel module: 1. User-space ksmbd should terminate.
[  404.559209][ T5308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.598997][ T5313] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  404.608250][ T5313] veth0_to_bridge: left allmulticast mode
[  404.611701][ T5313] veth0_to_bridge: left promiscuous mode
[  404.613708][ T5313] bridge0: port 1(veth0_to_bridge) entered disabled state
[  404.627651][ T5313] bond0: (slave wlan1): Releasing backup interface
[  404.657664][ T5313] netlink: 'syz.4.4251': attribute type 10 has an invalid length.
[  404.660166][ T5313] mac80211_hwsim hwsim36 wlan1: left allmulticast mode
[  404.665571][ T5313] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  404.717936][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  404.717948][   T40] audit: type=1400 audit(1758205456.140:26191): avc:  denied  { watch } for  pid=5318 comm="syz.2.4253" path="/37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  404.875376][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.885806][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.897764][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.909908][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.915538][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.919731][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.924753][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.934280][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.939193][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.943476][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.965695][   T40] audit: type=1400 audit(1758205456.374:26192): avc:  denied  { getopt } for  pid=5407 comm="syz.7.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  405.590286][ T5426] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  405.593126][ T5426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  405.597890][ T5426] vhci_hcd vhci_hcd.0: Device attached
[  405.606216][ T5427] vhci_hcd: cannot find the pending unlink 1023
[  405.608272][ T5427] vhci_hcd: connection closed
[  405.608437][ T5328] vhci_hcd: stop threads
[  405.611416][ T5328] vhci_hcd: release socket
[  405.612996][ T5328] vhci_hcd: disconnect device
[  405.693978][ T5437] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  405.808742][ T5453] netlink: 'syz.1.4264': attribute type 1 has an invalid length.
[  405.834422][ T5453] 8021q: adding VLAN 0 to HW filter on device bond1
[  405.853099][   T40] audit: type=1800 audit(1758205457.207:26193): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4255" name="/" dev="fuse" ino=9 res=0 errno=0
[  405.866785][ T5453] veth3: entered promiscuous mode
[  405.873112][ T5453] bond1: (slave veth3): Enslaving as an active interface with a down link
[  405.887158][ T5453] vlan2: entered allmulticast mode
[  405.888936][ T5453] bond1: entered allmulticast mode
[  405.894907][ T5453] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  405.899107][   T40] audit: type=1400 audit(1758205457.244:26194): avc:  denied  { mount } for  pid=5548 comm="syz.7.4265" name="/" dev="rpc_pipefs" ino=103184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  405.927005][   T40] audit: type=1400 audit(1758205457.272:26195): avc:  denied  { mounton } for  pid=5548 comm="syz.7.4265" path="/532/file0" dev="rpc_pipefs" ino=103184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1
[  405.943194][   T40] audit: type=1400 audit(1758205457.282:26196): avc:  denied  { unmount } for  pid=14715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  406.260101][   T40] audit: type=1400 audit(1758205457.581:26197): avc:  denied  { read } for  pid=5589 comm="syz.2.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  406.301168][ T5593] CUSE: unknown device info ""
[  406.302785][ T5593] CUSE: zero length info key specified
[  406.305629][   T40] audit: type=1400 audit(1758205457.628:26198): avc:  denied  { mount } for  pid=5592 comm="syz.2.4275" name="/" dev="configfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  406.313480][   T40] audit: type=1400 audit(1758205457.628:26199): avc:  denied  { search } for  pid=5592 comm="syz.2.4275" name="/" dev="configfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  406.321714][   T40] audit: type=1400 audit(1758205457.628:26200): avc:  denied  { search } for  pid=5592 comm="syz.2.4275" name="/" dev="configfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  406.447482][ T6165] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  406.556996][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4277'.
[  406.563205][ T5601] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  406.597087][ T6165] usb 9-1: device descriptor read/64, error -71
[  406.663931][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4281'.
[  406.695168][ T5555] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  406.790589][ T5646] Bluetooth: hci0: unsupported parameter 2459
[  406.792562][ T5646] Bluetooth: hci0: unsupported parameter 2459
[  406.853578][ T6165] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  406.878576][ T5663] fuse: Bad value for 'user_id'
[  406.880390][ T5663] fuse: Bad value for 'user_id'
[  406.920874][ T5668] netlink: 'syz.7.4292': attribute type 32 has an invalid length.
[  406.977673][ T5676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5676 comm=syz.7.4292
[  406.992787][ T6165] usb 9-1: device descriptor read/64, error -71
[  407.112493][ T6165] usb usb9-port1: attempt power cycle
[  407.154913][ T5692] ISOFS: Unable to identify CD-ROM format.
[  407.191278][ T5697] macvlan4: entered promiscuous mode
[  407.193507][ T5697] macvlan4: entered allmulticast mode
[  407.196607][ T5697] veth1_vlan: entered allmulticast mode
[  407.202919][ T5697] bond0: (slave macvlan4): Enslaving as an active interface with an up link
[  407.230035][ T5703] Invalid ELF header type: 0 != 1
[  407.283761][ T5703] Invalid ELF header type: 3 != 1
[  407.284490][ T5704] Invalid ELF header type: 3 != 1
[  407.408320][ T5726] pimreg3: entered allmulticast mode
[  407.476379][ T6165] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  407.480073][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1
[  407.484957][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1
[  407.506360][ T6165] usb 9-1: device descriptor read/8, error -71
[  407.508558][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112
[  407.529766][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1
[  407.533482][ T5722] kvm: kvm [5721]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1
[  407.535288][ T5741] 9pnet_virtio: no channels available for device syz
[  407.542348][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4307'.
[  407.555472][ T5722] kvm_intel: kvm [5721]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1
[  407.578706][ T5745] netlink: 'syz.7.4308': attribute type 2 has an invalid length.
[  407.581743][ T5745] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4308'.
[  407.585154][ T5745] nbd: must specify a device to reconfigure
[  407.772623][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.776254][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.783704][ T6165] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  407.805717][ T6165] usb 9-1: device descriptor read/8, error -71
[  407.937901][ T6165] usb usb9-port1: unable to enumerate USB device
[  408.081541][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4311'.
[  408.094662][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4311'.
[  408.227150][ T5776] netlink: 'syz.7.4313': attribute type 8 has an invalid length.
[  408.229699][ T5781] netlink: 'syz.2.4315': attribute type 1 has an invalid length.
[  408.244286][ T5782] bond2 (unregistering): Released all slaves
[  408.259272][ T5776] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  408.331410][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4316'.
[  408.439729][ T5862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.445011][ T5862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.616409][ T5930] geneve2: entered allmulticast mode
[  409.206923][ T5944] mkiss: ax0: crc mode is auto.
[  409.360655][ T5956] nfs4: Unknown parameter '
'
[  409.374451][ T5959] 9pnet_virtio: no channels available for device syz
[  409.437945][ T5978] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4328'.
[  409.469981][ T5994] block nbd2: Attempted send on invalid socket
[  409.473474][ T5994] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  409.477870][ T5994] EXT4-fs (nbd2): unable to read superblock
[  409.489074][ T5994] netlink: 'syz.2.4330': attribute type 64 has an invalid length.
[  409.491585][ T5994] netlink: 'syz.2.4330': attribute type 4 has an invalid length.
[  409.494458][ T5994] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4330'.
[  409.535357][ T5978] netlink: 'syz.1.4328': attribute type 2 has an invalid length.
[  409.540588][ T5994] xt_l2tp: v2 sid > 0xffff: 1114112
[  409.588028][ T6008] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4331'.
[  410.142826][ T6057] random: crng reseeded on system resumption
[  410.259340][ T6064] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  410.436922][ T6080] 8021q: adding VLAN 0 to HW filter on device bond2
[  410.465733][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  410.488638][ T6080] bond0: (slave wlan1): Releasing backup interface
[  410.613932][ T6124] lo speed is unknown, defaulting to 1000
[  410.701863][ T6159] netlink: 'syz.2.4349': attribute type 4 has an invalid length.
[  410.767503][ T6123] /dev/sr0: Can't open blockdev
[  410.829575][ T6174] sp0: Synchronizing with TNC
[  410.848482][ T6173] [U] è
[  410.862611][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56592 sclass=netlink_route_socket pid=6181 comm=syz.2.4354
[  410.870129][ T6181] fuse: Unknown parameter ''
[  411.269993][    C0] vcan0: j1939_tp_rxtimer: 0xffff888041eb9000: rx timeout, send abort
[  411.280457][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  411.280471][   T40] audit: type=1400 audit(1758205462.286:26206): avc:  denied  { read } for  pid=5360 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  411.304436][   T40] audit: type=1400 audit(1758205462.286:26207): avc:  denied  { search } for  pid=5360 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  411.317650][   T40] audit: type=1400 audit(1758205462.286:26208): avc:  denied  { append } for  pid=5360 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  411.327925][   T40] audit: type=1400 audit(1758205462.286:26209): avc:  denied  { open } for  pid=5360 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  411.347791][   T40] audit: type=1400 audit(1758205462.286:26210): avc:  denied  { getattr } for  pid=5360 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  411.514711][ T6239] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode
[  411.517252][ T6239] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  411.785565][ T6258] netlink: 'syz.7.4369': attribute type 3 has an invalid length.
[  411.807172][    C0] vcan0: j1939_tp_rxtimer: 0xffff888041eb9000: abort rx timeout. Force session deactivation
[  411.912230][   T40] audit: type=1400 audit(1758205462.875:26211): avc:  denied  { bind } for  pid=6286 comm="syz.4.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  412.084982][ T6298] block nbd7: NBD_DISCONNECT
[  412.101058][ T6298] block nbd7: Disconnected due to user request.
[  412.104836][ T6298] block nbd7: shutting down sockets
[  412.172947][ T6307] netlink: 'syz.7.4380': attribute type 1 has an invalid length.
[  412.252245][   T40] audit: type=1400 audit(1758205463.184:26212): avc:  denied  { nlmsg_write } for  pid=6299 comm="syz.4.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  412.253732][ T6347] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  412.253732][ T6347] The task syz.4.4379 (6347) triggered the difference, watch for misbehavior.
[  412.259504][   T40] audit: type=1107 audit(1758205463.193:26213): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  412.268114][ T6349] vlan3: entered allmulticast mode
[  412.304528][ T6349] bond0: entered allmulticast mode
[  412.309127][ T6349] bond_slave_0: entered allmulticast mode
[  412.311613][ T6349] bond_slave_1: entered allmulticast mode
[  412.351044][ T6354] SELinux:  policydb string length 14080 does not match expected length 8
[  412.353768][ T6354] SELinux: failed to load policy
[  412.622069][ T6367] binder: BINDER_SET_CONTEXT_MGR already set
[  412.623272][ T1195] Bluetooth: Invalid byte 5e after esc byte
[  412.624346][ T6367] binder: 6366:6367 ioctl 4018620d 2000000000c0 returned -16
[  412.625431][   T40] audit: type=1400 audit(1758205463.530:26214): avc:  denied  { append } for  pid=6366 comm="syz.2.4386" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  412.626464][ T6370] binder: BINDER_SET_CONTEXT_MGR already set
[  412.626474][ T6370] binder: 6366:6370 ioctl 4018620d 200000000040 returned -16
[  412.923635][ T6381] __nla_validate_parse: 9 callbacks suppressed
[  412.923647][ T6381] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4389'.
[  412.973223][ T6381] 9pnet_virtio: no channels available for device syz
[  413.125534][ T6385] fuse: Unknown parameter ''
[  413.128188][   T40] audit: type=1400 audit(1758205464.007:26215): avc:  denied  { accept } for  pid=6383 comm="syz.4.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  413.407923][ T6411] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  413.453813][ T6411] binder: 6410:6411 unknown command 1668183398
[  413.455747][ T6411] binder: 6410:6411 ioctl c0306201 200000019200 returned -22
[  413.458519][ T6411] binder: 6410:6411 ioctl c0306201 2000000003c0 returned -14
[  413.553612][ T6420] bridge_slave_0: entered promiscuous mode
[  413.568429][ T6419] bridge_slave_0: left promiscuous mode
[  413.662757][ T6431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  413.669770][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4403'.
[  413.669794][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4403'.
[  413.792286][ T1123] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  413.795404][ T1123] sr 2:0:0:0: [sr0] tag#13 Sense Key : Illegal Request [current] 
[  413.797851][ T1123] sr 2:0:0:0: [sr0] tag#13 Add. Sense: Logical block address out of range
[  413.800549][ T1123] sr 2:0:0:0: [sr0] tag#13 CDB: Read(10) 28 00 00 00 00 20 00 00 02 00
[  413.803229][ T1123] I/O error, dev sr0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  413.806184][ T6441] gfs2: error -5 reading superblock
[  413.844919][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4407'.
[  413.849012][ T6446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4407'.
[  413.852479][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4407'.
[  413.858115][ T6446] IPv6: sit1: Disabled Multicast RS
[  413.860559][ T6446] sit1: entered allmulticast mode
[  413.866626][ T6446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6446 comm=syz.1.4407
[  413.880787][ T6453] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4408'.
[  414.205405][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4411'.
[  414.271235][ T6472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  414.275242][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4413'.
[  414.429066][ T6493] input: syz1 as /devices/virtual/input/input85
[  414.446290][ T6497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6497 comm=syz.4.4419
[  414.450632][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4419'.
[  414.470601][ T6497] vlan2: entered allmulticast mode
[  414.472803][ T6497] bond3: entered allmulticast mode
[  414.786999][ T5976] Bluetooth: hci5: command 0x1003 tx timeout
[  414.793014][  T312] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  415.096086][   T34] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  415.267693][   T34] usb 9-1: Using ep0 maxpacket: 8
[  415.272413][   T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  415.276376][   T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  415.279685][   T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  415.283661][   T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  415.287081][   T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  415.291602][   T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  415.294616][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.403620][ T6572] CIFS: Unable to determine destination address
[  415.591120][   T34] usb 9-1: usb_control_msg returned -71
[  415.592932][   T34] usbtmc 9-1:16.0: can't read capabilities
[  415.597952][   T34] usb 9-1: USB disconnect, device number 17
[  415.875162][ T6606] bridge2: entered promiscuous mode
[  427.800538][ T6632] __nla_validate_parse: 2 callbacks suppressed
[  427.800554][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'.
[  428.320387][   T53] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  428.323027][ T6068] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  428.459344][ T9885] usb 12-1: new high-speed USB device number 29 using dummy_hcd
[  428.480671][   T53] usb 9-1: Using ep0 maxpacket: 16
[  428.482533][ T6068] usb 7-1: Using ep0 maxpacket: 8
[  428.489380][ T6068] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  428.492448][ T6068] usb 7-1: config 0 has no interface number 0
[  428.494434][ T6068] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  428.497832][ T6068] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  428.501460][ T6068] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  428.505009][ T6068] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  428.509042][ T6068] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  428.511902][ T6068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.523794][ T6068] usb 7-1: config 0 descriptor??
[  428.529111][ T6068] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  428.640940][ T9885] usb 12-1: Using ep0 maxpacket: 32
[  428.643914][ T9885] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.647233][ T9885] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.650274][ T9885] usb 12-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  428.653325][ T9885] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.657338][ T9885] usb 12-1: config 0 descriptor??
[  428.660995][ T9885] hub 12-1:0.0: USB hub found
[  428.750363][   T34] usb 7-1: USB disconnect, device number 34
[  428.755811][   T34] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  428.784010][ T5976] Bluetooth: hci1: unexpected event for opcode 0x1407
[  428.877374][ T9885] hub 12-1:0.0: 1 port detected
[  428.934353][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.937438][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.434218][ T6705] usb 1-1: USB disconnect, device number 2
[  429.522350][ T9885] hub 12-1:0.0: activate --> -90
[  429.954181][ T9885] hub 12-1:0.0: hub_ext_port_status failed (err = -71)
[  429.956664][ T9885] hub_port_connect: 4 callbacks suppressed
[  429.956675][ T9885] usb 12-1-port1: connect-debounce failed
[  429.956930][ T6068] usb 12-1: USB disconnect, device number 29
[  430.640297][ T6068] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  430.821979][ T6068] usb 7-1: Using ep0 maxpacket: 16
[  430.828154][ T6068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.835346][ T6068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024
[  430.841238][ T6068] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  430.846842][ T6068] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  430.851023][ T6068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.857775][ T6068] usb 7-1: config 0 descriptor??
[  430.860907][ T6727] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  430.870104][ T6068] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input86
[  431.082272][   T53] usb 9-1: unable to get BOS descriptor or descriptor too short
[  431.085482][   T53] usb 9-1: unable to read config index 0 descriptor/start: -71
[  431.087947][   T53] usb 9-1: can't read configurations, error -71
[  431.463616][   T53] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  431.623659][   T53] usb 9-1: Using ep0 maxpacket: 8
[  431.627063][   T53] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  431.630245][   T53] usb 9-1: config 0 has no interface number 0
[  431.632662][   T53] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  431.637569][   T53] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  431.641954][   T53] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  431.645903][   T53] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  431.649986][   T53] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  431.653281][   T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.659371][   T53] usb 9-1: config 0 descriptor??
[  431.664262][   T53] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  432.419183][ T6802] veth1_macvtap: left promiscuous mode
[  432.560222][ T6809] [U] 
[  432.561412][ T6809] [U] K{‘
[  432.562603][ T6809] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[  432.565376][ T6809] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[  432.572283][ T6809] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[  432.577337][ T6809] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<Ã	¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[  432.590665][ T6809] [U] 	+�W‰G?]£Ó'A:	»Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[  432.597997][ T6809] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$	µ.Î7YÓ±œ2³
[  432.601976][ T6809] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[  432.606009][ T6809] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[  432.615884][ T6809] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿Ë;FЕ�I+ÖÐVUHÅÐÂMÑJ³´Æ·ÙÛZÄCØÃZ‹¼Â)_ÇŸ¡	Ô‘¡&ßÖ¡ßÁAÇXTOÈÝÊ_½ Ú¼¦:¨Â×%À²PÒ×ÈCÖ²‚YÖ+_ÞÜ›ÝÛ}UÏM˜ƒÆ«CÅ!KJÒ7пG¯Ë=BÈ
[  432.623647][ T6809] [U] Ù½¥Fœ%ŽXAÙÂLŸ2R*GŒÒVW¬Ñ$ƒÜJ	ÃA˜›F¶¿�·+ؾ9Í„VIºÖ—¼KÙ¾Å1}_©Â
Á¥%ÃR6„•(]“¦/Ÿ¶Ø�Å™YܺÇÞHä¾ÜÑR GªÄRN/Ü«Î#!ÊDÙÛÚ«%ÞÛËDªÏ-{Ð$ÞVU‘ÝT²¼ª$:MTRÔEŽC1V‰D~ÎÈ];[˜ËÚÐ÷SQ¾¯œÙ(ÌËE,X¦8Â"Ù
ÆÐG¥DŸÚµ2@T8ž¾´ÒƒÀÐßÀT8.RC+Ä@Ëʦ‡P‡UÁ
P”‰¼¶C±‡Ë'Å„YLÓ-SS1E?Å7ÓO‡§Ì^]¦†ÂÓC”½H]§JKR]RKQ܆�ØÝ£Þ´OTCÔÆX¶¨¾4™NË	³Ï&�Á­ÐÚ‹ŠÓ@¶:M7¿~�+”W*ÛÁ–XMÜÓ>>—¡{Q¢Ú×
_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q	ÌDWŸÒظ=ؽ|Q¬	ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`ƦM¢XÎÂ"Ä\
[  432.653658][ T6809] [U] {;ŽÕ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_  HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆȽ
[  432.656447][ T6809] [U] I,Ç>ÇÓ¤	ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ
[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í	Ø¿
[  432.661092][ T6809] [U] 22½“Æ©ÐÛ©X?0;3U±
[  432.662866][ T6809] [U] ÞœÕ
Æ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_
•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË,	‘Ä	ÞD~×D©£¡+ÃW;A\˜F
PÉÞȘ|$ºØ)�
KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ	ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[  432.670437][ T6809] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[  432.673906][ T6809] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[  432.676895][ T6809] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[  432.679133][ T6809] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[  432.683027][ T6809] [U] ¹EC�
[  432.684209][ T6809] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[  432.992131][ T6068] usb 12-1: new high-speed USB device number 30 using dummy_hcd
[  433.152416][ T6068] usb 12-1: Using ep0 maxpacket: 32
[  433.155608][ T6068] usb 12-1: config 0 has an invalid interface number: 54 but max is 0
[  433.158355][ T6068] usb 12-1: config 0 has no interface number 0
[  433.172262][ T6068] usb 12-1: config 0 interface 54 has no altsetting 0
[  433.176887][ T6068] usb 12-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[  433.179461][ T6068] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.181756][ T6068] usb 12-1: Product: syz
[  433.195378][ T6068] usb 12-1: Manufacturer: syz
[  433.196719][ T6068] usb 12-1: SerialNumber: syz
[  433.199908][ T6068] usb 12-1: config 0 descriptor??
[  433.323690][ T6803] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[  433.418611][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.425362][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.431844][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.437662][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.448768][ T6812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.462668][ T6068] ums_eneub6250 12-1:0.54: USB Mass Storage device detected
[  433.533406][ T6068] usb 12-1: USB disconnect, device number 30
[  433.591671][   T24] usb 7-1: USB disconnect, device number 35
[  433.738955][ T6868] loop6: detected capacity change from 0 to 63
[  433.741717][   T40] audit: type=1400 audit(1758205483.295:26220): avc:  denied  { map } for  pid=6857 comm="syz.2.4475" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  433.746664][ T6836] buffer_io_error: 11 callbacks suppressed
[  433.746679][ T6836] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.748043][   T40] audit: type=1400 audit(1758205483.295:26221): avc:  denied  { execute } for  pid=6857 comm="syz.2.4475" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  433.751162][ T6836] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.774249][ T6836] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.778013][ T6836] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.781380][ T6836] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.792648][ T6868] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.796045][ T6868] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.799027][ T6868] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.802003][ T6868] Buffer I/O error on dev loop6, logical block 0, async page read
[  433.805156][ T6868] Buffer I/O error on dev loop6, logical block 0, async page read
[  434.160828][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.165318][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.172465][ T6876] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.4477' resets device
[  434.319188][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.326591][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.552972][ T6165] usb 12-1: new high-speed USB device number 31 using dummy_hcd
[  434.726051][ T6165] usb 12-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  434.730151][ T6165] usb 12-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  434.733981][ T6165] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.742444][ T6165] gspca_main: stv0680-2.14.0 probing 041e:4007
[  435.550676][ T6926] block device autoloading is deprecated and will be removed.
[  435.826173][ T6165] stv0680 12-1:4.0: STV(e): camera ping failed!!
[  436.042113][ T6165] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  436.045025][ T6165] stv0680 12-1:4.0: last error: 86,  command = 0x70
[  436.048392][ T6165] usb 12-1: USB disconnect, device number 31
[  436.139335][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.145186][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.294355][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.300182][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.651483][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4492'.
[  436.835580][  T312] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  436.840815][  T312] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  436.844276][  T312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  436.848385][  T312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  436.861829][  T312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  436.896014][ T6959] lo speed is unknown, defaulting to 1000
[  436.992341][ T6959] chnl_net:caif_netlink_parms(): no params data found
[  437.092865][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.095113][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.099289][ T6959] bridge_slave_0: entered allmulticast mode
[  437.102386][ T6959] bridge_slave_0: entered promiscuous mode
[  437.105483][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.107724][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.111066][ T6959] bridge_slave_1: entered allmulticast mode
[  437.113863][ T6959] bridge_slave_1: entered promiscuous mode
[  437.160997][ T6959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.167121][ T6959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.212636][ T6959] team0: Port device team_slave_0 added
[  437.217397][ T6959] team0: Port device team_slave_1 added
[  437.267089][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.272337][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.284161][ T6959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.288498][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.291778][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.299500][ T6959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.345867][ T6959] hsr_slave_0: entered promiscuous mode
[  437.348109][ T6959] hsr_slave_1: entered promiscuous mode
[  437.350219][ T6959] debugfs: 'hsr0' already exists in 'hsr'
[  437.351948][ T6959] Cannot create hsr debugfs directory
[  437.457355][ T6959] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.514868][ T6959] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.563060][ T6959] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.642049][ T6959] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.851918][ T6959] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  437.858306][ T6959] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  437.863166][ T6959] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  437.867332][ T6959] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  437.883995][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.886233][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.888571][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.890723][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.923727][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.935131][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.939700][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.960189][ T6959] 8021q: adding VLAN 0 to HW filter on device team0
[  437.973266][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.975802][ T5355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.982676][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.985009][ T5386] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.120076][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.298148][ T6959] veth0_vlan: entered promiscuous mode
[  438.305928][ T6959] veth1_vlan: entered promiscuous mode
[  438.327971][ T6959] veth0_macvtap: entered promiscuous mode
[  438.333220][ T6959] veth1_macvtap: entered promiscuous mode
[  438.346470][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.354566][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.365156][ T5386] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.371477][ T5386] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.374616][ T5386] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.377802][ T5386] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.471184][ T7359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.479053][ T7359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.501430][ T5386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.504509][ T5386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.829337][ T6068] usb 12-1: new high-speed USB device number 32 using dummy_hcd
[  439.011054][ T6068] usb 12-1: Using ep0 maxpacket: 8
[  439.015417][ T6068] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  439.018736][ T6068] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  439.024328][ T6068] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  439.028070][ T6068] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  439.031547][ T6068] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  439.035000][ T6068] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  439.041415][ T6068] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  439.044813][ T6068] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.047268][ T6068] usb 12-1: Product: syz
[  439.048582][ T6068] usb 12-1: Manufacturer: syz
[  439.050056][ T6068] usb 12-1: SerialNumber: syz
[  439.077124][  T312] Bluetooth: hci5: command tx timeout
[  439.271539][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4493'.
[  439.283649][   T24] usb 12-1: USB disconnect, device number 32
[  439.310200][ T6037] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  439.481242][ T6037] usb 7-1: Using ep0 maxpacket: 8
[  439.494443][ T6037] usb 7-1: config 162 has an invalid interface number: 166 but max is 0
[  439.497041][ T6037] usb 7-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[  439.503144][ T6037] usb 7-1: config 162 has no interface number 0
[  439.510667][ T6037] usb 7-1: config 162 interface 166 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  439.516975][ T6037] usb 7-1: config 162 interface 166 has no altsetting 0
[  439.522212][ T6037] usb 7-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea
[  439.525928][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.529151][ T6037] usb 7-1: Product: syz
[  439.530924][ T6037] usb 7-1: Manufacturer: syz
[  439.532929][ T6037] usb 7-1: SerialNumber: syz
[  439.545997][ T6037] appledisplay 7-1:162.166: Could not find int-in endpoint
[  439.549762][ T6037] usbhid 7-1:162.166: couldn't find an input interrupt endpoint
[  439.610412][ T8131] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  439.769333][   T29] usb 7-1: USB disconnect, device number 36
[  440.251210][ T6068] usb 12-1: new high-speed USB device number 33 using dummy_hcd
[  440.432774][ T6068] usb 12-1: Using ep0 maxpacket: 8
[  440.436212][ T6068] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  440.439730][ T6068] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  440.443203][ T6068] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  440.451468][ T6068] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  440.455707][ T6068] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.458253][ T6068] usb 12-1: Product: syz
[  440.459590][ T6068] usb 12-1: Manufacturer: syz
[  440.461292][ T6068] usb 12-1: SerialNumber: syz
[  440.465519][ T8148] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  440.469642][ T6068] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -22
[  440.472558][ T6068] usbtest 12-1:1.0: couldn't get endpoints, -22
[  440.474597][ T6068] usbtest 12-1:1.0: probe with driver usbtest failed with error -22
[  440.817661][ T6016] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  440.988627][ T6016] usb 7-1: Using ep0 maxpacket: 8
[  440.991658][ T6016] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  440.994313][ T6016] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  440.997434][ T6016] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  441.002022][ T6016] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  441.004895][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.007442][ T6016] usb 7-1: Product: syz
[  441.008810][ T6016] usb 7-1: Manufacturer: syz
[  441.010526][ T6016] usb 7-1: SerialNumber: syz
[  441.234747][ T6016] usb 7-1: 0:2 : does not exist
[  441.241748][ T6016] usb 7-1: USB disconnect, device number 37
[  441.257272][ T6836] udevd[6836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  441.298701][  T312] Bluetooth: hci5: command tx timeout
[  441.480518][ T8200] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer.
[  441.487430][ T8200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  442.079221][ T6036] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  442.108243][ T8236] kvm: pic: non byte write
[  442.214372][ T8241] netlink: 'syz.4.4534': attribute type 10 has an invalid length.
[  442.224407][ T8241] 8021q: adding VLAN 0 to HW filter on device team0
[  442.227494][ T8241] bond0: (slave team0): Enslaving as an active interface with an up link
[  442.250846][ T6036] usb 7-1: Using ep0 maxpacket: 8
[  442.253946][ T6036] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  442.256982][ T6036] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  442.259968][ T6036] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  442.263661][ T6036] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  442.267708][ T6036] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  442.270563][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.476969][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4537'.
[  442.490288][ T6036] usb 7-1: GET_CAPABILITIES returned 0
[  442.492161][ T6036] usbtmc 7-1:16.0: can't read capabilities
[  442.635144][ T8260] 8021q: adding VLAN 0 to HW filter on device bond4
[  442.706605][ T6037] usb 7-1: USB disconnect, device number 38
[  442.850248][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4546'.
[  442.853104][ T8318] netlink: 'syz.1.4546': attribute type 8 has an invalid length.
[  443.092972][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4552'.
[  443.106658][ T6056] usb 12-1: USB disconnect, device number 33
[  443.149344][   T40] audit: type=1400 audit(1758205492.097:26222): avc:  denied  { setattr } for  pid=8330 comm="syz.1.4552" path="socket:[108261]" dev="sockfs" ino=108261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  443.430356][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.434119][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.468909][ T6056] usb 12-1: new high-speed USB device number 34 using dummy_hcd
[  443.522352][  T312] Bluetooth: hci5: command tx timeout
[  443.543934][ T6036] usb 7-1: new low-speed USB device number 39 using dummy_hcd
[  443.641643][ T6056] usb 12-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30
[  443.645830][ T6056] usb 12-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2
[  443.650627][ T6056] usb 12-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91
[  443.654394][ T6056] usb 12-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79
[  443.659404][ T6056] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  443.663256][ T6056] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.669169][ T8346] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  443.707151][ T6036] usb 7-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt
[  443.710266][ T6036] usb 7-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt
[  443.713642][ T6036] usb 7-1: config 1 interface 0 has no altsetting 0
[  443.718763][ T6036] usb 7-1: string descriptor 0 read error: -22
[  443.720795][ T6036] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  443.723589][ T6036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.728872][ T8353] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  443.731240][ T8353] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  443.889086][ T6056] ath6kl: Failed to submit usb control message: -71
[  443.891773][ T6056] ath6kl: unable to send the bmi data to the device: -71
[  443.894083][ T6056] ath6kl: Unable to send get target info: -71
[  443.897670][ T6056] ath6kl: Failed to init ath6kl core: -71
[  443.906106][ T6056] ath6kl_usb 12-1:4.0: probe with driver ath6kl_usb failed with error -71
[  443.911369][ T6056] usb 12-1: USB disconnect, device number 34
[  443.954014][ T6068] usb 7-1: USB disconnect, device number 39
[  445.739688][   T40] audit: type=1400 audit(1758205494.510:26223): avc:  denied  { lock } for  pid=8461 comm="syz.1.4585" path="socket:[109096]" dev="sockfs" ino=109096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  445.747029][  T312] Bluetooth: hci5: command tx timeout
[  445.762416][ T8460] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  446.911272][ T6068] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  446.914658][   T29] usb 12-1: new high-speed USB device number 35 using dummy_hcd
[  447.071620][ T6068] usb 7-1: Using ep0 maxpacket: 16
[  447.077198][   T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.080598][   T29] usb 12-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  447.083964][ T6068] usb 7-1: config 0 has an invalid interface number: 49 but max is 0
[  447.086972][ T6068] usb 7-1: config 0 has no interface number 0
[  447.088872][ T6068] usb 7-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  447.091969][ T6068] usb 7-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  447.095677][   T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.099578][   T29] usb 12-1: config 0 descriptor??
[  447.102974][   T29] pwc: Askey VC010 type 2 USB webcam detected.
[  447.110730][ T6068] usb 7-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  447.113970][ T6068] usb 7-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[  447.119007][ T6068] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  447.121941][ T6068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.124736][ T6068] usb 7-1: Product: syz
[  447.126479][ T6068] usb 7-1: Manufacturer: syz
[  447.127967][ T6068] usb 7-1: SerialNumber: syz
[  447.131783][ T6068] usb 7-1: config 0 descriptor??
[  447.134117][ T8479] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  447.355640][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.359477][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.538293][   T29] pwc: recv_control_msg error -32 req 02 val 2b00
[  447.563445][   T29] pwc: recv_control_msg error -32 req 02 val 2700
[  447.570438][   T29] pwc: recv_control_msg error -32 req 02 val 2c00
[  447.575239][   T29] pwc: recv_control_msg error -32 req 04 val 1000
[  447.578312][   T29] pwc: recv_control_msg error -32 req 04 val 1300
[  447.580799][   T29] pwc: recv_control_msg error -32 req 04 val 1400
[  447.597572][ T8496] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  447.600144][ T1338] IPVS: starting estimator thread 0...
[  447.702387][ T8499] IPVS: using max 45 ests per chain, 108000 per kthread
[  447.792246][   T40] audit: type=1326 audit(1758205496.437:26224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.4590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc58eba9 code=0x7ffc0000
[  447.797177][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.803679][   T29] pwc: recv_control_msg error -71 req 02 val 2100
[  447.803732][   T40] audit: type=1326 audit(1758205496.437:26225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.4590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc58eba9 code=0x7ffc0000
[  447.803820][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.825349][   T40] audit: type=1326 audit(1758205496.437:26226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.4590" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff0cc58eba9 code=0x7ffc0000
[  447.835069][   T40] audit: type=1326 audit(1758205496.437:26227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.4590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc58eba9 code=0x7ffc0000
[  447.844240][   T29] pwc: recv_control_msg error -71 req 04 val 1500
[  447.846012][   T40] audit: type=1326 audit(1758205496.437:26228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.4590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc58eba9 code=0x7ffc0000
[  447.847114][   T29] pwc: recv_control_msg error -71 req 02 val 2500
[  447.854149][   T40] audit: type=1326 audit(1758205496.437:26229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.4590" exe="/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7ff0cc58eba9 code=0x7ffc0000
[  447.856378][   T29] pwc: recv_control_msg error -71 req 02 val 2400
[  447.865284][   T40] audit: type=1326 audit(1758205496.437:26230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.4590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc58eba9 code=0x7ffc0000
[  447.868061][   T29] pwc: recv_control_msg error -71 req 02 val 2600
[  447.877273][   T40] audit: type=1326 audit(1758205496.437:26231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.4590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc58eba9 code=0x7ffc0000
[  447.879411][   T29] pwc: recv_control_msg error -71 req 02 val 2900
[  447.889793][   T29] pwc: recv_control_msg error -71 req 02 val 2800
[  447.892232][   T29] pwc: recv_control_msg error -71 req 04 val 1100
[  447.894596][   T29] pwc: recv_control_msg error -71 req 04 val 1200
[  447.906546][   T29] pwc: Registered as video103.
[  447.910273][   T29] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb12/12-1/input/input88
[  447.923223][   T29] usb 12-1: USB disconnect, device number 35
[  448.573590][ T8531] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4591'.
[  448.575119][ T8529] QAT: Device 127 not found
[  449.811688][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  449.811706][   T40] audit: type=1400 audit(1758205498.327:26239): avc:  denied  { append } for  pid=8562 comm="syz.7.4602" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  449.876213][   T40] audit: type=1400 audit(1758205498.327:26240): avc:  denied  { map } for  pid=8562 comm="syz.7.4602" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  449.888630][   T40] audit: type=1400 audit(1758205498.327:26241): avc:  denied  { write execute } for  pid=8562 comm="syz.7.4602" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  449.901054][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.910109][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.981541][ T8555] bond2 (unregistering): Released all slaves
[  450.054591][ T6068] qcserial 7-1:0.49: Qualcomm USB modem converter detected
[  450.069055][ T6068] usb 7-1: USB disconnect, device number 40
[  450.073649][ T6068] qcserial 7-1:0.49: device disconnected
[  451.989296][ T6056] usb 12-1: new high-speed USB device number 36 using dummy_hcd
[  452.152723][ T6056] usb 12-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  452.156711][ T6056] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.162422][ T6056] usb 12-1: config 0 descriptor??
[  452.286370][   T40] audit: type=1400 audit(1758205500.637:26242): avc:  denied  { create } for  pid=8701 comm="syz.4.4615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  452.430958][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4615'.
[  453.187454][   T53] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  453.249924][  T312] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1
[  453.357795][   T53] usb 7-1: Using ep0 maxpacket: 32
[  453.358745][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.362165][   T53] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  453.362578][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.365508][   T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.375918][   T53] usb 7-1: config 0 descriptor??
[  453.381125][   T53] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  454.527456][ T6056] usb 12-1: Cannot set autoneg
[  454.529231][ T6056] MOSCHIP usb-ethernet driver 12-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  454.536992][ T6056] usb 12-1: USB disconnect, device number 36
[  455.128371][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4629'.
[  455.243196][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  455.245325][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  455.315286][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.467132][ T6068] usb 12-1: new high-speed USB device number 37 using dummy_hcd
[  455.636649][ T6068] usb 12-1: Using ep0 maxpacket: 8
[  455.643988][ T6068] usb 12-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  455.647376][ T6068] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.649916][ T6068] usb 12-1: Product: syz
[  455.651283][ T6068] usb 12-1: Manufacturer: syz
[  455.652841][ T6068] usb 12-1: SerialNumber: syz
[  455.656878][ T6068] usb 12-1: config 0 descriptor??
[  455.660752][ T6068] radio-usb-si4713 12-1:0.0: Si4713 development board discovered: (10C4:8244)
[  455.744321][   T53] gspca_vc032x: reg_w err -71
[  455.745899][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.747567][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.749276][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.750778][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.752581][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.754553][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.756243][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.757947][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.759649][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.761358][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.763207][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.764881][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.767132][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.768871][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.770574][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.772279][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.774024][   T53] gspca_vc032x: I2c Bus Busy Wait 00
[  455.775738][   T53] gspca_vc032x: Unknown sensor...
[  455.777406][   T53] vc032x 7-1:0.0: probe with driver vc032x failed with error -22
[  455.781205][   T53] usb 7-1: USB disconnect, device number 41
[  455.884227][ T6068] radio-usb-si4713 12-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  455.887364][ T6068] usbhid 12-1:0.0: couldn't find an input interrupt endpoint
[  455.890890][ T6068] usb 12-1: USB disconnect, device number 37
[  456.843107][ T6037] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  457.007366][ T6037] usb 7-1: config index 0 descriptor too short (expected 30768, got 18)
[  457.011167][ T6037] usb 7-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  457.016742][ T6037] usb 7-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  457.021029][ T6037] usb 7-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  457.024603][ T6037] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  457.028337][ T6037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.078275][ T9886] usb 12-1: new high-speed USB device number 38 using dummy_hcd
[  457.239994][ T9886] usb 12-1: config index 0 descriptor too short (expected 30768, got 18)
[  457.242908][ T9886] usb 12-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  457.245786][ T9886] usb 12-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  457.250009][ T9886] usb 12-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  457.259078][ T9886] usb 12-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  457.262926][ T9886] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.478582][ T6037] usb 7-1: string descriptor 0 read error: -71
[  457.481360][ T6037] usb 7-1: USB disconnect, device number 42
[  457.705993][ T9886] usb 12-1: string descriptor 0 read error: -71
[  457.709997][ T9886] usb 12-1: USB disconnect, device number 38
[  458.314083][ T8897] pim6reg: entered allmulticast mode
[  458.317648][ T8897] pim6reg: left allmulticast mode
[  458.431626][ T8899] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  458.868373][ T8924] program syz.7.4665 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  459.265062][   T40] audit: type=1326 audit(1758205507.166:26243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.275578][   T40] audit: type=1326 audit(1758205507.166:26244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.284847][   T40] audit: type=1326 audit(1758205507.166:26245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.294370][   T40] audit: type=1326 audit(1758205507.166:26246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.302641][   T40] audit: type=1326 audit(1758205507.166:26247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.310450][   T40] audit: type=1326 audit(1758205507.166:26248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.318778][   T40] audit: type=1326 audit(1758205507.166:26249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.328684][   T40] audit: type=1326 audit(1758205507.166:26250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.337705][   T40] audit: type=1326 audit(1758205507.166:26251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.350258][   T40] audit: type=1326 audit(1758205507.166:26252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.2.4666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98eba9 code=0x7ffc0000
[  459.385655][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.390026][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.134740][ T8965] netlink: 'syz.1.4675': attribute type 3 has an invalid length.
[  460.139026][ T8965] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4675'.
[  460.181085][ T8957] lo speed is unknown, defaulting to 1000
[  461.005418][ T9015] bridge0: entered allmulticast mode
[  461.056583][  T312] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  461.059989][  T312] Bluetooth: hci5: Injecting HCI hardware error event
[  461.063803][  T312] Bluetooth: hci5: hardware error 0x00
[  461.300934][ T9885] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  461.461214][ T9885] usb 7-1: Using ep0 maxpacket: 32
[  461.465482][ T9885] usb 7-1: config 0 interface 0 has no altsetting 0
[  461.469153][ T9885] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  461.472137][ T9885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.474620][ T9885] usb 7-1: Product: syz
[  461.475881][ T9885] usb 7-1: Manufacturer: syz
[  461.477308][ T9885] usb 7-1: SerialNumber: syz
[  461.480183][ T9885] usb 7-1: config 0 descriptor??
[  461.836455][ T9013] bridge0: left allmulticast mode
[  461.914686][ T9885] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  462.345774][ T9885] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  462.367770][ T9885] usb 7-1: USB disconnect, device number 43
[  462.809013][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.812597][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.822202][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4702'.
[  463.449846][  T312] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  463.920210][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.924640][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.532672][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.536025][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.074811][   T29] page_pool_release_retry() stalled pool shutdown: id 108, 51 inflight 60 sec
[  465.192255][ T9885] usb 12-1: new high-speed USB device number 39 using dummy_hcd
[  465.284465][ T9162] input: syz0 as /devices/virtual/input/input89
[  465.351606][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4728'.
[  465.357121][ T9885] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  465.361193][ T9885] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  465.365546][ T9885] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  465.373584][ T9885] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  465.377517][ T9885] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  465.380727][ T9885] usb 12-1: Product: syz
[  465.382486][ T9885] usb 12-1: Manufacturer: syz
[  465.384675][ T9885] usb 12-1: SerialNumber: syz
[  465.417644][   T40] kauditd_printk_skb: 167 callbacks suppressed
[  465.417655][   T40] audit: type=1326 audit(1758205512.919:26420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.426535][   T40] audit: type=1326 audit(1758205512.919:26421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.434374][   T40] audit: type=1326 audit(1758205512.919:26422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.442927][   T40] audit: type=1326 audit(1758205512.919:26423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.451705][   T40] audit: type=1326 audit(1758205512.919:26424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.458705][   T40] audit: type=1326 audit(1758205512.919:26425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.465840][   T40] audit: type=1326 audit(1758205512.919:26426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.473568][   T40] audit: type=1326 audit(1758205512.919:26427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.480624][   T40] audit: type=1326 audit(1758205512.919:26428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.488489][   T40] audit: type=1326 audit(1758205512.919:26429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.4.4731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0d98eba9 code=0x7ffc0000
[  465.606896][ T9885] usblp 12-1:1.0: usblp1: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  465.769478][ T6016] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  465.871859][ T9206] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  465.874417][ T9206] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  465.881261][ T9205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9205 comm=syz.1.4736
[  465.885399][ T9206] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  465.888135][ T9206] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  465.891681][ T9206] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  465.895112][ T9206] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  465.940229][ T6037] usb 12-1: USB disconnect, device number 39
[  465.943967][ T6016] usb 7-1: Using ep0 maxpacket: 32
[  465.951452][ T6016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.955314][ T6016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.958359][ T6016] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  465.961220][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.964903][ T6037] usblp1: removed
[  465.969635][ T6016] usb 7-1: config 0 descriptor??
[  465.975651][ T6016] hub 7-1:0.0: USB hub found
[  466.146762][ T9206] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  466.148658][ T9206] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  466.190782][ T6016] hub 7-1:0.0: 2 ports detected
[  466.432103][ T9235] program syz.4.4737 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  466.539282][ T6016] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  466.544051][ T6016] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  466.554372][ T6016] usbhid 7-1:0.0: can't add hid device: -71
[  466.556264][ T6016] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  466.593007][ T6016] usb 7-1: USB disconnect, device number 44
[  466.608431][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.611586][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.635708][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.639716][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.642825][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'.
[  466.651428][ T9263] dummy0: entered promiscuous mode
[  466.653219][ T9263] macvtap1: entered promiscuous mode
[  466.654987][ T9263] macvtap1: entered allmulticast mode
[  466.657393][ T9263] dummy0: entered allmulticast mode
[  466.690621][ T9263] dummy0: left allmulticast mode
[  466.692874][ T9263] dummy0: left promiscuous mode
[  466.998899][   T29] usb 12-1: new high-speed USB device number 40 using dummy_hcd
[  467.176180][   T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  467.181006][   T29] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  467.183975][   T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.186681][   T29] usb 12-1: Product: syz
[  467.188044][   T29] usb 12-1: Manufacturer: syz
[  467.189520][   T29] usb 12-1: SerialNumber: syz
[  467.195322][   T29] usb 12-1: config 0 descriptor??
[  467.524452][ T9311] 
: renamed from bridge_slave_0 (while UP)
[  468.508801][ T9323] netlink: 'syz.4.4762': attribute type 4 has an invalid length.
[  468.524625][ T9323] netlink: 'syz.4.4762': attribute type 4 has an invalid length.
[  469.327726][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4768'.
[  469.478846][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4769'.
[  469.699463][ T9350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4770'.
[  469.825204][ T6068] usb 12-1: USB disconnect, device number 40
[  469.872494][ T9365] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4771'.
[  469.985803][ T9365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  470.018040][ T9365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  470.069768][ T9365] bond0 (unregistering): Released all slaves
[  470.343738][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.354868][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.504249][ T9454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.508100][ T9454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.531793][ T9885] usb 12-1: new high-speed USB device number 41 using dummy_hcd
[  471.696064][ T9885] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.700695][ T9885] usb 12-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  471.711475][ T9885] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.750587][ T9885] usb 12-1: config 0 descriptor??
[  472.189054][ T9885] hid_parser_main: 4087 callbacks suppressed
[  472.189068][ T9885] holtek 0003:1241:5015.0017: unknown main item tag 0x0
[  472.198559][ T9885] holtek 0003:1241:5015.0017: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.7-1/input0
[  472.202061][ T9885] holtek 0003:1241:5015.0017: no inputs found
[  472.402601][   T29] usb 12-1: USB disconnect, device number 41
[  472.527074][ T9490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.529868][ T9490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.771260][ T6220] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  474.946543][ T6220] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  474.949275][ T6220] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  474.953134][ T6220] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  474.958822][ T6220] usb 7-1: config 220 has no interface number 2
[  474.963859][ T6220] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  474.973432][ T6220] usb 7-1: config 220 interface 0 has no altsetting 0
[  474.978911][ T6220] usb 7-1: config 220 interface 76 has no altsetting 0
[  474.983744][ T6220] usb 7-1: config 220 interface 1 has no altsetting 0
[  474.987182][ T9544] input: syz1 as /devices/virtual/input/input92
[  474.995026][ T6220] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  474.997989][ T6220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.004461][ T6220] usb 7-1: Product: syz
[  475.006547][ T6220] usb 7-1: Manufacturer: syz
[  475.008317][ T6220] usb 7-1: SerialNumber: syz
[  475.232627][ T6220] usb 7-1: selecting invalid altsetting 0
[  475.235146][ T6220] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  475.242070][ T6220] usb 7-1: No valid video chain found.
[  475.248056][ T6220] usb 7-1: selecting invalid altsetting 0
[  475.250005][ T6220] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  475.254422][ T6220] usb 7-1: USB disconnect, device number 45
[  475.544118][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4803'.
[  476.299717][ T6220] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  476.472369][ T6220] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  476.476034][ T6220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.481589][ T6220] usb 7-1: config 0 descriptor??
[  476.703242][ T6220] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  476.936302][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  476.936315][   T40] audit: type=1800 audit(1758205523.695:26438): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4811" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  477.112702][ T6036] usb 12-1: new high-speed USB device number 42 using dummy_hcd
[  477.283611][ T6036] usb 12-1: Using ep0 maxpacket: 32
[  477.286783][ T6036] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.290292][ T6036] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.293445][ T6036] usb 12-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  477.296365][ T6036] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.300754][ T6036] usb 12-1: config 0 descriptor??
[  477.306162][ T6036] hub 12-1:0.0: USB hub found
[  477.521454][ T6036] hub 12-1:0.0: 1 port detected
[  478.164683][ T6036] hub 12-1:0.0: activate --> -90
[  478.595383][ T6036] hub 12-1:0.0: hub_ext_port_status failed (err = -71)
[  478.595431][   T24] usb 12-1: USB disconnect, device number 42
[  479.107076][ T6220] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  479.111826][ T6220] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  479.115082][ T6220] asix 7-1:0.0: probe with driver asix failed with error -71
[  479.120818][ T6220] usb 7-1: USB disconnect, device number 46
[  479.194623][ T9664] netlink: 'syz.2.4821': attribute type 4 has an invalid length.
[  479.243503][   T40] audit: type=1400 audit(1758205525.846:26439): avc:  denied  { rename } for  pid=9667 comm="syz.2.4823" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  479.306169][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.312811][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.635817][ T6220] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[  479.796819][ T6220] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  479.800282][ T6220] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64
[  479.803768][ T6220] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  479.809145][ T6220] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  479.811949][ T6220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  479.814465][ T6220] usb 7-1: SerialNumber: syz
[  479.819099][ T9672] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  479.823140][ T6220] hub 7-1:1.0: bad descriptor, ignoring hub
[  479.825092][ T6220] hub 7-1:1.0: probe with driver hub failed with error -5
[  480.079974][ T6220] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  480.193851][ T6220] usb 7-1: USB disconnect, device number 47
[  480.602653][ T9776] program syz.4.4842 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  480.610548][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.619510][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.239375][ T7354] ==================================================================
[  481.241919][ T7354] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x7401/0x84c0
[  481.244423][ T7354] Read of size 1 at addr ffff88802ffcf1b0 by task kworker/u32:21/7354
[  481.247868][ T7354] 
[  481.249117][ T7354] CPU: 3 UID: 0 PID: 7354 Comm: kworker/u32:21 Not tainted syzkaller #0 PREEMPT(full) 
[  481.249133][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  481.249156][ T7354] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[  481.249180][ T7354] Call Trace:
[  481.249185][ T7354]  <TASK>
[  481.249190][ T7354]  dump_stack_lvl+0x116/0x1f0
[  481.249206][ T7354]  print_report+0xcd/0x630
[  481.249219][ T7354]  ? __virt_addr_valid+0x81/0x610
[  481.249235][ T7354]  ? __phys_addr+0xe8/0x180
[  481.249249][ T7354]  ? xfrm_state_find+0x7401/0x84c0
[  481.249263][ T7354]  kasan_report+0xe0/0x110
[  481.249276][ T7354]  ? xfrm_state_find+0x7401/0x84c0
[  481.249291][ T7354]  xfrm_state_find+0x7401/0x84c0
[  481.249305][ T7354]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  481.249325][ T7354]  ? __pfx_xfrm_state_find+0x10/0x10
[  481.249341][ T7354]  ? save_trace+0x4e/0x380
[  481.249356][ T7354]  ? add_lock_to_list+0x9d/0x130
[  481.249371][ T7354]  ? __lock_acquire+0xb97/0x1ce0
[  481.249390][ T7354]  xfrm_resolve_and_create_bundle+0x4cd/0x3740
[  481.249411][ T7354]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  481.249427][ T7354]  ? xfrm_policy_lookup_bytype+0x994/0x1a10
[  481.249445][ T7354]  ? xfrm_policy_lookup_bytype+0x104/0x1a10
[  481.249465][ T7354]  ? dst_release+0x266/0x340
[  481.249479][ T7354]  ? rt_set_nexthop.constprop.0+0x500/0x12e0
[  481.249491][ T7354]  ? dst_alloc+0xc0/0x1a0
[  481.249502][ T7354]  ? xfrm_expand_policies.constprop.0+0x252/0x6a0
[  481.249520][ T7354]  xfrm_lookup_with_ifid+0x51d/0x1e40
[  481.249542][ T7354]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  481.249559][ T7354]  ? ip_route_output_key_hash+0x16b/0x2e0
[  481.249574][ T7354]  xfrm_lookup_route+0x3b/0x200
[  481.249591][ T7354]  ip_route_output_flow+0x11e/0x150
[  481.249603][ T7354]  send4+0x54d/0x1080
[  481.249615][ T7354]  ? __pfx_send4+0x10/0x10
[  481.249627][ T7354]  ? __alloc_skb+0x200/0x380
[  481.249639][ T7354]  ? __pfx___alloc_skb+0x10/0x10
[  481.249652][ T7354]  wg_socket_send_skb_to_peer+0x18f/0x210
[  481.249666][ T7354]  wg_socket_send_buffer_to_peer+0x148/0x1a0
[  481.249680][ T7354]  wg_packet_send_handshake_initiation+0x225/0x360
[  481.249693][ T7354]  ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10
[  481.249705][ T7354]  ? __lock_acquire+0xb97/0x1ce0
[  481.249727][ T7354]  wg_packet_handshake_send_worker+0x1c/0x30
[  481.249739][ T7354]  process_one_work+0x9cc/0x1b70
[  481.249755][ T7354]  ? __pfx_process_one_work+0x10/0x10
[  481.249769][ T7354]  ? assign_work+0x1a0/0x250
[  481.249780][ T7354]  worker_thread+0x6c8/0xf10
[  481.249795][ T7354]  ? __pfx_worker_thread+0x10/0x10
[  481.249808][ T7354]  kthread+0x3c2/0x780
[  481.249818][ T7354]  ? __pfx_kthread+0x10/0x10
[  481.249830][ T7354]  ? rcu_is_watching+0x12/0xc0
[  481.249844][ T7354]  ? __pfx_kthread+0x10/0x10
[  481.249854][ T7354]  ret_from_fork+0x56a/0x730
[  481.249865][ T7354]  ? __pfx_kthread+0x10/0x10
[  481.249876][ T7354]  ret_from_fork_asm+0x1a/0x30
[  481.249892][ T7354]  </TASK>
[  481.249897][ T7354] 
[  481.341729][ T7354] Allocated by task 4685:
[  481.343117][ T7354]  kasan_save_stack+0x33/0x60
[  481.344672][ T7354]  kasan_save_track+0x14/0x30
[  481.346183][ T7354]  __kasan_slab_alloc+0x89/0x90
[  481.347754][ T7354]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  481.349541][ T7354]  xfrm_state_alloc+0x23/0x5c0
[  481.351091][ T7354]  __find_acq_core+0xb59/0x2900
[  481.352689][ T7354]  xfrm_find_acq+0x7b/0xa0
[  481.354147][ T7354]  xfrm_alloc_userspi+0x58e/0xbb0
[  481.356089][ T7354]  xfrm_user_rcv_msg+0x58e/0xc00
[  481.358124][ T7354]  netlink_rcv_skb+0x155/0x420
[  481.360090][ T7354]  xfrm_netlink_rcv+0x71/0x90
[  481.362074][ T7354]  netlink_unicast+0x5aa/0x870
[  481.364069][ T7354]  netlink_sendmsg+0x8d1/0xdd0
[  481.366080][ T7354]  ____sys_sendmsg+0xa98/0xc70
[  481.368131][ T7354]  ___sys_sendmsg+0x134/0x1d0
[  481.370206][ T7354]  __sys_sendmsg+0x16d/0x220
[  481.372223][ T7354]  do_syscall_64+0xcd/0x4e0
[  481.374206][ T7354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.376587][ T7354] 
[  481.377686][ T7354] Freed by task 34:
[  481.379293][ T7354]  kasan_save_stack+0x33/0x60
[  481.381278][ T7354]  kasan_save_track+0x14/0x30
[  481.383248][ T7354]  kasan_save_free_info+0x3b/0x60
[  481.385405][ T7354]  __kasan_slab_free+0x60/0x70
[  481.387529][ T7354]  kmem_cache_free+0x2d1/0x4d0
[  481.389636][ T7354]  xfrm_state_gc_task+0x50a/0x770
[  481.391815][ T7354]  process_one_work+0x9cc/0x1b70
[  481.393795][ T7354]  worker_thread+0x6c8/0xf10
[  481.395646][ T7354]  kthread+0x3c2/0x780
[  481.397346][ T7354]  ret_from_fork+0x56a/0x730
[  481.399324][ T7354]  ret_from_fork_asm+0x1a/0x30
[  481.401378][ T7354] 
[  481.402431][ T7354] The buggy address belongs to the object at ffff88802ffcee80
[  481.402431][ T7354]  which belongs to the cache xfrm_state of size 928
[  481.408115][ T7354] The buggy address is located 816 bytes inside of
[  481.408115][ T7354]  freed 928-byte region [ffff88802ffcee80, ffff88802ffcf220)
[  481.413324][ T7354] 
[  481.414251][ T7354] The buggy address belongs to the physical page:
[  481.416692][ T7354] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ffcee80 pfn:0x2ffc8
[  481.420218][ T7354] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  481.422945][ T7354] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  481.425351][ T7354] page_type: f5(slab)
[  481.426880][ T7354] raw: 00fff00000000040 ffff88802186b180 dead000000000122 0000000000000000
[  481.429967][ T7354] raw: ffff88802ffcee80 00000000801e001b 00000000f5000000 0000000000000000
[  481.432665][ T7354] head: 00fff00000000040 ffff88802186b180 dead000000000122 0000000000000000
[  481.435468][ T7354] head: ffff88802ffcee80 00000000801e001b 00000000f5000000 0000000000000000
[  481.438208][ T7354] head: 00fff00000000003 ffffea0000bff201 00000000ffffffff 00000000ffffffff
[  481.440933][ T7354] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  481.443658][ T7354] page dumped because: kasan: bad access detected
[  481.445701][ T7354] page_owner tracks the page as allocated
[  481.447485][ T7354] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9059, tgid 9050 (syz.6.825), ts 124532004179, free_ts 123546120204
[  481.453382][ T7354]  post_alloc_hook+0x1c0/0x230
[  481.454905][ T7354]  get_page_from_freelist+0x132b/0x38e0
[  481.456666][ T7354]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  481.458572][ T7354]  alloc_pages_mpol+0x1fb/0x550
[  481.460126][ T7354]  new_slab+0x247/0x330
[  481.461490][ T7354]  ___slab_alloc+0xcf2/0x1750
[  481.463020][ T7354]  __slab_alloc.constprop.0+0x56/0xb0
[  481.464721][ T7354]  kmem_cache_alloc_noprof+0xef/0x3b0
[  481.466449][ T7354]  xfrm_state_alloc+0x23/0x5c0
[  481.467978][ T7354]  xfrm_state_find+0x31e6/0x84c0
[  481.469564][ T7354]  xfrm_resolve_and_create_bundle+0x4cd/0x3740
[  481.471507][ T7354]  xfrm_lookup_with_ifid+0x2a0/0x1e40
[  481.473203][ T7354]  xfrm_lookup_route+0x3b/0x200
[  481.474737][ T7354]  ip_route_output_flow+0x11e/0x150
[  481.476382][ T7354]  udp_sendmsg+0x1af9/0x2870
[  481.477928][ T7354]  inet_sendmsg+0x105/0x140
[  481.479396][ T7354] page last free pid 8991 tgid 8987 stack trace:
[  481.481406][ T7354]  __free_frozen_pages+0x7d5/0x10f0
[  481.483056][ T7354]  __put_partials+0x165/0x1c0
[  481.484581][ T7354]  qlist_free_all+0x4d/0x120
[  481.486075][ T7354]  kasan_quarantine_reduce+0x195/0x1e0
[  481.487880][ T7354]  __kasan_slab_alloc+0x69/0x90
[  481.489467][ T7354]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  481.491359][ T7354]  zswap_store+0x839/0x25a0
[  481.492820][ T7354]  swap_writeout+0x3b2/0xfe0
[  481.494301][ T7354]  shrink_folio_list+0x3e46/0x4880
[  481.495938][ T7354]  reclaim_folio_list+0xda/0x5d0
[  481.497509][ T7354]  reclaim_pages+0x47b/0x650
[  481.499006][ T7354]  madvise_cold_or_pageout_pte_range+0x1546/0x2120
[  481.501056][ T7354]  walk_pgd_range+0xc02/0x1f50
[  481.502625][ T7354]  __walk_page_range+0x163/0x820
[  481.504205][ T7354]  walk_page_range_vma+0x2c7/0xa20
[  481.505839][ T7354]  madvise_pageout+0x257/0x540
[  481.507366][ T7354] 
[  481.508148][ T7354] Memory state around the buggy address:
[  481.509945][ T7354]  ffff88802ffcf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  481.512507][ T7354]  ffff88802ffcf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  481.515032][ T7354] >ffff88802ffcf180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  481.517633][ T7354]                                      ^
[  481.519399][ T7354]  ffff88802ffcf200: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  481.521910][ T7354]  ffff88802ffcf280: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  481.524428][ T7354] ==================================================================
[  481.527178][ T7354] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  481.529470][ T7354] CPU: 3 UID: 0 PID: 7354 Comm: kworker/u32:21 Not tainted syzkaller #0 PREEMPT(full) 
[  481.532477][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  481.535946][ T7354] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[  481.538257][ T7354] Call Trace:
[  481.539354][ T7354]  <TASK>
[  481.540317][ T7354]  dump_stack_lvl+0x3d/0x1f0
[  481.541813][ T7354]  vpanic+0x6e8/0x7a0
[  481.543075][ T7354]  ? __pfx_vpanic+0x10/0x10
[  481.544479][ T7354]  ? xfrm_state_find+0x7401/0x84c0
[  481.546083][ T7354]  panic+0xca/0xd0
[  481.547246][ T7354]  ? __pfx_panic+0x10/0x10
[  481.548620][ T7354]  ? check_panic_on_warn+0x1f/0xb0
[  481.550219][ T7354]  check_panic_on_warn+0xab/0xb0
[  481.551743][ T7354]  end_report+0x107/0x170
[  481.553076][ T7354]  kasan_report+0xee/0x110
[  481.554484][ T7354]  ? xfrm_state_find+0x7401/0x84c0
[  481.556107][ T7354]  xfrm_state_find+0x7401/0x84c0
[  481.557692][ T7354]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  481.559630][ T7354]  ? __pfx_xfrm_state_find+0x10/0x10
[  481.561321][ T7354]  ? save_trace+0x4e/0x380
[  481.562743][ T7354]  ? add_lock_to_list+0x9d/0x130
[  481.564321][ T7354]  ? __lock_acquire+0xb97/0x1ce0
[  481.565907][ T7354]  xfrm_resolve_and_create_bundle+0x4cd/0x3740
[  481.567866][ T7354]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  481.569944][ T7354]  ? xfrm_policy_lookup_bytype+0x994/0x1a10
[  481.571823][ T7354]  ? xfrm_policy_lookup_bytype+0x104/0x1a10
[  481.573689][ T7354]  ? dst_release+0x266/0x340
[  481.575154][ T7354]  ? rt_set_nexthop.constprop.0+0x500/0x12e0
[  481.577053][ T7354]  ? dst_alloc+0xc0/0x1a0
[  481.578445][ T7354]  ? xfrm_expand_policies.constprop.0+0x252/0x6a0
[  481.580457][ T7354]  xfrm_lookup_with_ifid+0x51d/0x1e40
[  481.582163][ T7354]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  481.583996][ T7354]  ? ip_route_output_key_hash+0x16b/0x2e0
[  481.585786][ T7354]  xfrm_lookup_route+0x3b/0x200
[  481.587338][ T7354]  ip_route_output_flow+0x11e/0x150
[  481.588976][ T7354]  send4+0x54d/0x1080
[  481.590253][ T7354]  ? __pfx_send4+0x10/0x10
[  481.591667][ T7354]  ? __alloc_skb+0x200/0x380
[  481.593151][ T7354]  ? __pfx___alloc_skb+0x10/0x10
[  481.594725][ T7354]  wg_socket_send_skb_to_peer+0x18f/0x210
[  481.596512][ T7354]  wg_socket_send_buffer_to_peer+0x148/0x1a0
[  481.598408][ T7354]  wg_packet_send_handshake_initiation+0x225/0x360
[  481.600444][ T7354]  ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10
[  481.602660][ T7354]  ? __lock_acquire+0xb97/0x1ce0
[  481.604294][ T7354]  wg_packet_handshake_send_worker+0x1c/0x30
[  481.606231][ T7354]  process_one_work+0x9cc/0x1b70
[  481.607803][ T7354]  ? __pfx_process_one_work+0x10/0x10
[  481.609491][ T7354]  ? assign_work+0x1a0/0x250
[  481.610951][ T7354]  worker_thread+0x6c8/0xf10
[  481.612463][ T7354]  ? __pfx_worker_thread+0x10/0x10
[  481.614129][ T7354]  kthread+0x3c2/0x780
[  481.615434][ T7354]  ? __pfx_kthread+0x10/0x10
[  481.616926][ T7354]  ? rcu_is_watching+0x12/0xc0
[  481.618455][ T7354]  ? __pfx_kthread+0x10/0x10
[  481.619924][ T7354]  ret_from_fork+0x56a/0x730
[  481.621380][ T7354]  ? __pfx_kthread+0x10/0x10
[  481.622846][ T7354]  ret_from_fork_asm+0x1a/0x30
[  481.624354][ T7354]  </TASK>
[  481.626123][ T7354] Kernel Offset: disabled
[  481.627504][ T7354] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:17:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000080000 RBX=00002000003e50c0 RCX=ffffc90027ef1000 RDX=0000000000080000
RSI=ffffffff84e40529 RDI=ffffffff8c163380 RBP=0000000000000038 RSP=ffffc90005647a58
R8 =1525ca5b0a5321be R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000
R12=ffffc90005647d98 R13=ffffc90005647aa8 R14=ffffc90005647b90 R15=ffffc90005647aa8
RIP=ffffffff85160070 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f85cf8c96c0 ffffffff 00c00000
GS =0000 ffff8880d66b2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00002000003e5030 CR3=00000000340b8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000030b9 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c1fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555628fefbc 00005555628fe770
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555628fe28f 00005555628fde30
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060c718008800400 00000a1006000000 0810060601749a00 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001000000800128a 0800000800010000 0c08060a016aa400 0800021000561000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c80040003e88a08 000fffffffffffff 0401c70800080149 aa010800020103ec
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000fffffffff ffff040010000008 00029ef408000100 000608060c010dde
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100041080a2a580 0800010000000806 06011ab200080000 030010000fffffff
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0400100000 0800029ef4080001 00000608060c010d de5c80040003e88a
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000fffffffffff ff0401c708000801 49aa010800020103 ec00100000080012
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a08000008000100 000c08060a016aa4 0008000210005610 00060c7180088004
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88805ea3ba00 RCX=0000000000000100 RDX=0000000000000001
RSI=0000000000000002 RDI=ffff88805ea3ba02 RBP=dffffc0000000000 RSP=ffffc9000562f6e0
R8 =0000000000000001 R9 =ffff88806a53b294 R10=ffff88805ea3ba03 R11=0000000000000000
R12=0000000000007e54 R13=0000000000000000 R14=ffff88806a53b280 R15=ffffed100bd47740
RIP=ffffffff8b978ae8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f85cf8a86c0 ffffffff 00c00000
GS =0000 ffff8880d67b2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000179000 CR3=00000000340b8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c1fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555628fefbc 00005555628fe770
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555628fe28f 00005555628fde30
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060c718008800400 00000a1006000000 0810060601749a00 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001000000800128a 0800000800010000 0c08060a016aa400 0800021000561000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c80040003e88a08 000fffffffffffff 0401c70800080149 aa010800020103ec
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000fffffffff ffff040010000008 00029ef408000100 000608060c010dde
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100041080a2a580 0800010000000806 06011ab200080000 030010000fffffff
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0400100000 0800029ef4080001 00000608060c010d de5c80040003e88a
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000fffffffffff ff0401c708000801 49aa010800020103 ec00100000080012
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a08000008000100 000c08060a016aa4 0008000210005610 00060c7180088004
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000080000 RBX=0000000000000001 RCX=ffffc900296d3000 RDX=0000000000080000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000737f648 RSP=ffffc9000737f4f8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=1ffff92000e6fea8 R13=0000000000000000 R14=0000000000000001 R15=ffff888025ef4978
RIP=ffffffff81bb98c0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007ff0cd40c6c0 ffffffff 00c01300
GS =0000 ffff8880d68b2000 ffffffff 00c01300
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00002000000bd038 CR3=000000003b0c0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf5e7b966
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf5e7b966 00007ffcf5e7b96c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cc612e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cc612e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cc612e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cc612e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cc612ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cc612fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 803566e0200f300f 320fc0000080b966 13f67354280f0000 40003d80380f662e
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8a66a2be0220f00 0000803566e0200f 300f320fc0000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000040003d80380f 662e67ec00a0ba18 06b2f30f66659a1c 0f0f300f00000800
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8564c115 RDI=ffffffff9b118160 RBP=ffffffff9b118120 RSP=ffffc9000164ecd8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035333754
R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b118120 R15=ffffffff8564c0b0
RIP=ffffffff8564c13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
GS =0000 ffff8880d69b2000 ffffffff 00c09300 DPL=0 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000003b0c0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7b68d93e07dc52b 8b263207b3309402
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 edc3300657f71327 70c35c6820a971b6
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 898947b48e8a060e 76f0cb8b66c2d787
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 572bc14a8a505cde bcc32abd1c276ccc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ae320e8cc20035d c9fdfd22538ab696
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 608a8ce782f66ebd 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4347b3f4dcd5d84c 3ebbdac4d4c8d0be
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c08d372d00000000 4c29a45e1560efcc
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3179caee69de3fbf eca5d7d11646dab4
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 339b52be4bd6dc4b 927a9e40bbcfca10
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000