last executing test programs:

26.353136324s ago: executing program 0 (id=86):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x6, 0x4000000}, 0x10) (async)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async, rerun: 64)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async, rerun: 64)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r3)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x64, r4, 0x1, 0x4000, 0x1, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x200}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000040)={'binder1\x00'})

26.273273163s ago: executing program 0 (id=87):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl(r0, 0x0, &(0x7f00000001c0)="5cb5bdd1a171fccb1428539935238772cedb62895c38e699d46cb39f6c")
vmsplice(r0, &(0x7f0000000600)=[{&(0x7f0000000680)="70341c634ec2ab85989032dd8ae4e18966256b06d4fbca00030efb33baa5f5f5a447d97fe2e3474d6da080a92f32edc74256b85844cd1812bf8eced880fb05a7aaa380b977aa2624423f68e47f2cc7fa123592575a958b556ac7510203c08dff558b2b104e7543fd48ce963749c02d0980bdee343a64b8dcc87a0bd24d1ed34e14f3bc5da61c09d1a954100811c3e44053ae98825e474af858760f3a1a071e166e58daac505249ad953e7669e091889b1e95450e96645cdf0dd97372bb976fff769c453571c117e4", 0xc8}, {&(0x7f0000000280)="24a52ccb9e5b6fb3a716dcd4396e752571d09ba846d4bd4ad328ce11a9d9123842080421b6dc893cfc7a9dacfba452d8e6a13cda2bea75a1c1018501eef909a28ec478d519d8ec78e7eae4b247fe10dbf06ed4ae74a2110fcf957a09027f69aaeb18df2becff3bb234f58f3a05ac531d6a5e9f509a37adea649bd4a3c558b5c720bb062224479616e788361473a29700174e0e0e42f5085e77ff638897e0", 0x9e}, {&(0x7f0000000340)}, {&(0x7f0000000380)="c2c42cffde7e1a6795ad2c5405eacfeb216c671f74bb69f75cb0d9afe7b0d7e8a7816fce83049cbeb2c8a7db8958ef3d7fc1f5b84b373f6557f6721f4b6fe0bd38f5561039fb784a203308a298a5e079cdb98653b439e71851ffd15d9133a0675e3f9caeff65314e3b700614c8c806224536910b990048aaaee2d9fc52c196e1cb177a82786f335be59b9483dc0152ecc3f9ffe5fdfabf8df986a6fb9fb6a27c5c230f9f816022776ae512d3a438a2b41fad83ae3eaf1af563a56e38ee3a69e66a8cc60c804064fea828f7ed1b22e716c85b12b721", 0xd5}, {&(0x7f0000000480)="2c2f3f15014c1d7e7d383597fe4394cc4cdd", 0x12}, {&(0x7f0000000180)="c5fece925864f964aa1ff79884bba77fd14ce4495c7cbabddfc5e35faa", 0x1d}, {&(0x7f0000000500)="748afb30987467610f3373ca648ca5dbfc4fc5305d7a0a9dace2c2c568d5362ed68437d8972d7724c06442d37cb6eb7fb130e3b57e924b0228452e2ac101f2318c5bb51fea4fb4544d13e0c294d01e4775230bfcdf13c420675faf3f7592efc940ec58d2e9f98ba8ba8d18f2c4e0cb0ba4aaaf07ee7c52fcfa551c6e03f78f810e258bac4675f3ce136ae14a400325f213175adfad5023f127d3cab9e0f12311fd636d8aed0a583e0e7c61569e9ad3fa19b73626a2f3f9684411437706a0d4843779d004400f8e612ac51a835363d9cbdf0989e3af", 0xd5}], 0x7, 0x4)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x480019, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00')

26.273009848s ago: executing program 0 (id=88):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000f00040000010096196dac90cb11e3e0d368381400d60041d100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00')
pread64(r1, &(0x7f0000000300)=""/111, 0x6f, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x4, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0x3)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000008000000d52c0000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000010000000100"/28], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)='%pI4   \x00'}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000440)='./file0\x00', r5}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000003c0)=[0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0x4f, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x32, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

26.202548883s ago: executing program 0 (id=89):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) (rerun: 64)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32)
close(r1) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @broadcast}) (async, rerun: 64)
writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) (async, rerun: 64)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00')
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x48, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, @in6={0xa, 0x4e20, 0x8, @private2, 0x2}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x4, @private2, 0x1}, @in={0x2, 0x4e23, @private=0xa010100}], 0xb4) (async)
r5 = eventfd2(0x3ff, 0x1)
read$snddsp(r5, &(0x7f0000005b80)=""/113, 0x71) (async)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0xff06, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async, rerun: 64)
read$FUSE(r2, &(0x7f00000061c0)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020) (rerun: 64)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r6, @ANYBLOB=',gid=', @ANYRESHEX=r7, @ANYBLOB="1fa5e3cd00"/17]) (async)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x8) (async)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async, rerun: 32)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 32)
r10 = getpid()
r11 = syz_pidfd_open(r10, 0x0)
setns(r11, 0x68000080)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c298a289e47091", 0xd}], 0x2) (async)
read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020)

26.031230875s ago: executing program 0 (id=91):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, 0x63, 0xffffffffffffff62, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00')
pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

25.802331967s ago: executing program 0 (id=96):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x200)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x1, 0xb57})
r1 = fsopen(&(0x7f0000000080)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, r0)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0xbe, &(0x7f0000000100)="53bf431d482fb042571a164299af7e302401626fea9631beb9e004c98ac226aefead21d21743a98e5739b4ce3fc67e00a76f3daa6ecbc7548f674c3e37e7741760e7ad9511059f769f86eb6d0cde38143a3343ccf6aacef965e43f5a5746e527b2f06ec4a4144833d930e711357addcfd5702734398fda4e8a2483fd0c32a21879f1c9124c6ddf3fc5fc2fbc8c422607562d432b2c7ed9945797e26d9f9dbade64d4ccd74b7fbc981c42b5ab011d8e9928056c0e7199a27cd17f0ebcd690", 0x0, 0x1}, {0x186, 0x2a, &(0x7f00000001c0)="f8b5427777f5200516f8a7f159bcf88406a289dc12e1b6394e4257d2c654333c47dc44084c4ff4b03def", 0x1}, {0x63d, 0x66, &(0x7f0000000200)="c8c90567ca673f41072596355c74d51e93a77aedff5d0052af8b0e1c3d1d8a2e3653fa0352d5cd299a5c51efa3d6ce4551c23f1645e1b4a733b1f2e9e676d3e4e5230b9c91af4e0c2b7b6083d0e222d5d971b7a1533d98831e66683cec4e2dc710358beec803", 0x2}]})
r2 = fsmount(r1, 0x0, 0x2)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000340)={0xf73, "46fe5383c500ae544fd83bd87716abcfc90c8e46805e05642644cf02ade4662a", <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000380))
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000003c0)={0x1, <r4=>0x0})
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000400)={0xfffffffffffffffb, r4})
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000440)={0x5, 0x800000000000000})
poll(&(0x7f0000000480)=[{r3, 0x42}, {r2, 0x431}, {r5, 0x8080}, {r1, 0x2090}, {r1, 0x20}, {r1, 0x1000}, {r2}], 0x7, 0x5)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000004c0))
read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x100010, r5, 0xb13f5000)
open$dir(&(0x7f0000002540)='./file0\x00', 0x4100, 0xb6)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000002580)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002600), r6)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x30, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x86}]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x8004)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000002740)=@attr_other={0x0, 0x0, 0x40, &(0x7f0000002700)=0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000002780))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000027c0)={<r8=>0x0, 0x1, r3})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000002800)={<r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002840)={<r10=>0x0, 0x1, r6})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000002880)={<r11=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000002900)={&(0x7f00000028c0)=[r8, r9, r10, r11], 0x0, 0x4, 0x7})
ioctl$VIDIOC_ENCODER_CMD(r6, 0xc028564d, &(0x7f0000002940)={0x2, 0x1, [0x4, 0x400, 0x0, 0x0, 0x80000001, 0x9, 0x2, 0x8]})
r12 = fsopen(&(0x7f0000002980)='ocfs2_dlmfs\x00', 0x0)
fremovexattr(r12, &(0x7f00000029c0)=@random={'os2.', '(\x00'})

25.758801919s ago: executing program 32 (id=96):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x200)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x1, 0xb57})
r1 = fsopen(&(0x7f0000000080)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, r0)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0xbe, &(0x7f0000000100)="53bf431d482fb042571a164299af7e302401626fea9631beb9e004c98ac226aefead21d21743a98e5739b4ce3fc67e00a76f3daa6ecbc7548f674c3e37e7741760e7ad9511059f769f86eb6d0cde38143a3343ccf6aacef965e43f5a5746e527b2f06ec4a4144833d930e711357addcfd5702734398fda4e8a2483fd0c32a21879f1c9124c6ddf3fc5fc2fbc8c422607562d432b2c7ed9945797e26d9f9dbade64d4ccd74b7fbc981c42b5ab011d8e9928056c0e7199a27cd17f0ebcd690", 0x0, 0x1}, {0x186, 0x2a, &(0x7f00000001c0)="f8b5427777f5200516f8a7f159bcf88406a289dc12e1b6394e4257d2c654333c47dc44084c4ff4b03def", 0x1}, {0x63d, 0x66, &(0x7f0000000200)="c8c90567ca673f41072596355c74d51e93a77aedff5d0052af8b0e1c3d1d8a2e3653fa0352d5cd299a5c51efa3d6ce4551c23f1645e1b4a733b1f2e9e676d3e4e5230b9c91af4e0c2b7b6083d0e222d5d971b7a1533d98831e66683cec4e2dc710358beec803", 0x2}]})
r2 = fsmount(r1, 0x0, 0x2)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000340)={0xf73, "46fe5383c500ae544fd83bd87716abcfc90c8e46805e05642644cf02ade4662a", <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000380))
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000003c0)={0x1, <r4=>0x0})
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000400)={0xfffffffffffffffb, r4})
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000440)={0x5, 0x800000000000000})
poll(&(0x7f0000000480)=[{r3, 0x42}, {r2, 0x431}, {r5, 0x8080}, {r1, 0x2090}, {r1, 0x20}, {r1, 0x1000}, {r2}], 0x7, 0x5)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000004c0))
read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x100010, r5, 0xb13f5000)
open$dir(&(0x7f0000002540)='./file0\x00', 0x4100, 0xb6)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000002580)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002600), r6)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x30, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x86}]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x8004)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000002740)=@attr_other={0x0, 0x0, 0x40, &(0x7f0000002700)=0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000002780))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000027c0)={<r8=>0x0, 0x1, r3})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000002800)={<r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000002840)={<r10=>0x0, 0x1, r6})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000002880)={<r11=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000002900)={&(0x7f00000028c0)=[r8, r9, r10, r11], 0x0, 0x4, 0x7})
ioctl$VIDIOC_ENCODER_CMD(r6, 0xc028564d, &(0x7f0000002940)={0x2, 0x1, [0x4, 0x400, 0x0, 0x0, 0x80000001, 0x9, 0x2, 0x8]})
r12 = fsopen(&(0x7f0000002980)='ocfs2_dlmfs\x00', 0x0)
fremovexattr(r12, &(0x7f00000029c0)=@random={'os2.', '(\x00'})

10.259463589s ago: executing program 2 (id=250):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.256171497s ago: executing program 2 (id=251):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x39)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xa1a) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00 \x00', @ANYRES16=r4, @ANYBLOB="02002cbd70100400000005000000040009000200000000001900ac1414bb08000b00020000001c000100070000000500120008000000"], 0x3c}}, 0x20) (async)
r6 = socket$kcm(0x2, 0xa, 0x2) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x2) (async)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x805c}, 0x4000000)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x14}, 0x1, 0x3000000}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c00000062f204fe3f3fc73a1b9841e0b4d6489b24c55eefd430dca616c3b8e73bfc75ffcad8db48156af0b2bfcd6fa4b6b2a7d06dd26eb717bb99648de40f0cb8d150a960cef8458835cef3c60dc1108ba7600b9cd230d612c93d114ec0c1bb9c06b808c7f5a34ff97f263c4fe84873c291b35c3808befbc14a16f291f1fcaf11003caa3158d0ca0b77af6b5e359acc96a152d6e1c84ba60d503d7e1c2fb753537244d3a86dfbb440a1216c7dc0d8cb634752ba9049b172d1581eaf54c60f9d3119", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25060000000c001000ffffffff0000000006001a004e2400000c001600060000000000000006001b004e200000080019007f000001050022000000000006001a004e2400000500050001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async)
r9 = socket(0x27, 0x6, 0x3)
getsockopt$nfc_llcp(r9, 0x29, 0x24, 0x0, 0x20000011) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x309)
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="03000800010000000000140000004500801600000000000198780a010100ac1414aa04049078000000652b00450000000000001000110000ac1414aa7f00e5d70978de0ac2b9c5cf8245fa5f90be525b97eb39d80b6016e9e65e0a34bdd7019b7b8686349b3a6d237cc1394619e4ff323f6021c1da8ffafbf415f435733d8f28137f2f0d18f5fe63165a40bd3b1d428ef0774b5e4d6536baf6be2714435b7211e5b72efde3533196d3c540cc7c897d116bdf59d4fcfcb44c4b50b5e604b2520619137527c04c0304510fd6a0876a3842e037f7b9599fb33c3fc0c3cef02c0e7e81a127917d9b5ddc936521049af1b71c0d4e6caad20646e734bbaf18e7f1e3264e392d2a"], 0xfdef) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c000c6472ee5625d44db4722fae01e0dea7849268025bc918f39eb615119d78cf7496e920b37efc87c41bed043d1a2f33b13701fd7e6409984ed6c39ddb45f7a105caa644a1f3964d10275426184aeab0879a206aa1e95af78df20bcc7f5c39af"])

10.172575372s ago: executing program 2 (id=254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
dup2(r3, r2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xd0, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd0}}, 0x166b1ab5eb710134)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="288b18c09f9aec590806000108"], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@dellinkprop={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10008}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0)

10.172274697s ago: executing program 2 (id=255):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}]}]}, 0x34}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r7, 0x305}, 0x14}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r10 = open_tree(r8, &(0x7f0000000000)='\x00', 0x89901)
move_mount(r10, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000b0000bfa30000000000000703000000feffff7a0af0fff8ffff1991a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0af2fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6d6c1d69f2ffcaa10350e11cb97c8adf1bc9a0c4ceceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556b84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000029a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e05005bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae20bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

10.102382127s ago: executing program 2 (id=256):
ioperm(0x3, 0x4, 0x1000008)
fanotify_init(0x1200, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0xa, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000000))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0)
capset(0x0, &(0x7f0000000040))
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x10001)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000040)=0x9c)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req3={0xeca, 0xfffffff8, 0x0, 0x6, 0x1c0, 0x6, 0xf}, 0x1c)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x80000001, 0x1, 0x80000001, 0x5, 0x8, 0x1, 0x7, 0x7, 0x9, 0x7ff, 0x2, 0x5, 0x8001, 0x1, 0x3579d6dc, 0x1, 0x200, 0x6, 0x7, 0x1, 0x5, 0xf0000000, 0x2, 0x8, 0xaa5, 0x40000, 0x5, 0xffff, 0xb45b, 0xfffffffb, 0x10, 0x9, 0x2, 0x4, 0xffff, 0x10, 0xfffffffe, 0x4, 0x1, 0xaa, 0x80, 0x4, 0x3e, 0x0, 0x8, 0x3, 0x6, 0x7ff, 0x3ff, 0x80000001, 0x4, 0xfd8, 0xb, 0xfffff9b2, 0x6, 0x1, 0x5d4f, 0x3, 0x1, 0x5, 0x6, 0x5, 0x3, 0xda08, 0x0, 0x7f, 0x7, 0x0, 0xb5, 0x6, 0xfffffff9, 0x4, 0xe66a, 0xfff, 0x48a, 0xfffffffa, 0x80000001, 0xfe, 0x87be, 0x4, 0x3, 0x81, 0x8, 0x3, 0xffffff80, 0x3000, 0xfff, 0x0, 0x6, 0x8000, 0xe, 0x1, 0x2, 0xed, 0xf32, 0xa86, 0x6, 0x7ff, 0x2, 0x81, 0x10000, 0x400, 0x7, 0xfffffffb, 0xf, 0x8, 0x4, 0x8, 0x101, 0x7, 0x1, 0x9, 0x10, 0x8, 0x40, 0x1, 0x0, 0x7, 0xb, 0x7, 0x73, 0x7, 0x2, 0x40, 0x5, 0xfffffffd, 0x6], "682e8e927719a4de5942081aca91755a96da89554ec75a890e8f401e51fddc4180992053e0a8e91f8d44e808f018a83196f608032898ca0f07e4875df4ad411ffd52795e4ca1c9f15a6086c6ad72cd08afa76082388f16aeaadecf89e5c717aaf00b627324574c3f761a42c03c0a4c5316bbfc76b0be36beb41022cf74a17829e60bc9bbfbbc478cb65662553951e7f1f02ea9230897e6b839bd3614d79406bc33a46dc532e82556b1c531a9f278fc32869eff0936d33e512a08f82b67ffcf82bad37d9b5db68aefdcc809e33d5f37d71b7a087bedb4f9b3411fbf281e"}})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r8, &(0x7f0000002a00)={0xa, 0x0, 0x6, @mcast1, 0x6}, 0x1c)

9.862330281s ago: executing program 2 (id=261):
r0 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000040)={@lba=0x4, 0x1, 0x39, &(0x7f0000000400)=""/57})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newtaction={0x7c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x68, 0x1, [@m_bpf={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3a, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3, 0x2, 0x9, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

9.84060342s ago: executing program 33 (id=261):
r0 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000040)={@lba=0x4, 0x1, 0x39, &(0x7f0000000400)=""/57})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newtaction={0x7c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x68, 0x1, [@m_bpf={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3a, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3, 0x2, 0x9, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

4.76287965s ago: executing program 5 (id=305):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async)
unshare(0x68040200)
r1 = socket$inet6(0xa, 0x2, 0x3a) (async, rerun: 64)
write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x401, 0x0, 0x0, {{}, {0x0, 0x2}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
listen(r2, 0xfffffffe) (async)
r5 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x765d77d49445b667, &(0x7f0000000080)=0x83fc, 0x4) (async)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x2242}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x844) (async)
r10 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) (async)
close(r5) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x24) (async)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='ufs\x00', 0x8007, 0x0) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=0x4005) (async)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d001, 0x0)
ioctl$PPPIOCSFLAGS1(r11, 0x40047459, &(0x7f00000001c0)=0x2000)

4.693132294s ago: executing program 5 (id=306):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10)
close(r2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0}, 0x20)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000000)="2d000000010001", 0x7)
write(r8, &(0x7f00000000c0)="521926fe6350d36001254c0e47eecf9bf90b54a64164e6d2bd64b0842e9920884afb9bde2232a38de72db85375dac4d424745d6a685aa0fcde3aa187b0e72ef5045a11af57f30c780e9dc0893c67713b4bafdec23db23271afa7519b385efb9e76d03d78e0c5dcbf", 0x68) (async)
write(r8, &(0x7f00000000c0)="521926fe6350d36001254c0e47eecf9bf90b54a64164e6d2bd64b0842e9920884afb9bde2232a38de72db85375dac4d424745d6a685aa0fcde3aa187b0e72ef5045a11af57f30c780e9dc0893c67713b4bafdec23db23271afa7519b385efb9e76d03d78e0c5dcbf", 0x68)

4.687027159s ago: executing program 5 (id=307):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x40c, 0x0, 0x4, 0x7fff0000}, {0x6, 0x5, 0x1, 0x401}, {0x1, 0x7, 0x0, 0xa4}]})
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5}, 0x10)
syz_extract_tcp_res$synack(&(0x7f0000000100)={<r6=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000180c200000288a83e008100000086dd600a84350014060000000000000000000000000000910001fe8000000000000000000000000000aacf010000", @ANYRES32=0x41424344, @ANYRES32=r6, @ANYBLOB="5004000090780000"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0)
fcntl$setlease(r7, 0x403, 0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x40, 0x9)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r8, &(0x7f0000000200)='V', 0x1)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="910dd2925871fa8b3137"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
close_range(r1, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYBLOB="f97dc16666f8d5d8f62fa2c55d7c76b0bb19915caf8bfd6d790f2131019b6ac1f25604aace94de7d048e62e91fbfbdf8c88fea18da4549f13c80f0d45dab553042b7615d690cab411ebe9aeba09fe2112fd6d501fbfe4a4b84c3717082ef7624c555f64b7b6ba90a39bc44df922650853e9d5ca6656ceb90427bfffd7f8dfcfd7e8cea7c81cf478655e76e021c797587d6143c7b7d32755238cfca57fbd7873e8aa0f265b86b448ce1e54b21566050a483782ca90f899dbb31e02ee8ce4d01cfb5f78aca591e5dc1a91becb600e39341c8720d554501c8500db032621bdbc9813b308820d74f241494e7b4d1f50bd9c1f8b3beb603a6ca3dcdfdca2d9dc2fedc3c77aa132ff5bf8fdf45614c1b7857c7cc6d6b7bdcf953fc869d865d63b47488d8b8aa7b8ffa5646cb3c8acd7ff9fbb4ad07077c9d34b8852f0c162d51029c9f9234ad784eb254621b2da5324903a0e586b708c3f90c0a63e04fcbff070adf3ecd105f4294d01e2cf10f91134e1a210b625855aeee6ee6c7529fbf8753766585b988c637e8b1886229ceba998b05c6a9a9b3b319473cd52f953b1938dd43dba3b0970b5befb94b91f8fb969b79e6daa4d41bd5078c293d505096663f156ac9081d334d9404145aeaad81b66dbe3e903af98a", @ANYRESDEC=r2, @ANYRES8, @ANYRES64=r0, @ANYRES32=r2, @ANYRESDEC=r0, @ANYBLOB="50efa1f6bf77b131638a7548c9685ca70213234ac5af492b6c9903f3ddebfb97df82f663a18fba0bb9aea8b3cf93b078d4ffc29fef2c2971a3dc465a7fbf91ef7fb6a95ede5524cbd7a8931ca9b7ae3458c1e3d49f0e436042b1dedb22179a10d218c4697dc3b17ef3249a9de2df981a905c90d4a822e130d63f3d5803fec7543091d96d76857fb12dd8ea5b588324858d012b862b06dc33d1eddeb23b44", @ANYRESOCT=r1, @ANYRES8=r1])
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1000, '\x00', 0x0, r7, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11, <r12=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ppoll(&(0x7f0000000140)=[{r0, 0x1007}], 0x1, 0x0, 0x0, 0x0)

2.08108239s ago: executing program 1 (id=353):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000200), &(0x7f0000000200)=@udp=r1}, 0x20)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492728, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x80000, 0x90)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x3e90c0, 0x2, 0x10}, 0x18)
linkat(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00', 0x1400)

2.08006156s ago: executing program 1 (id=354):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r1, 0x4bfb, &(0x7f00000002c0))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x88, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004050}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

2.079462061s ago: executing program 1 (id=355):
r0 = socket$inet6(0xa, 0x2, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000408016a0003000002060002408914000005000300010000005a08499d57cf92f589a19211c99ec726435f1e6c9b151449f672fb938daba41b9717dfe70d78e3f7b78e41df9e1c1cbdb60bfd18f80f8dc34b18e07800d01ce37ac869900d0c9d4ddfb624"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48080)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb2, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)

1.933045975s ago: executing program 1 (id=356):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.923434404s ago: executing program 1 (id=358):
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x12c) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) (async)
r1 = fanotify_init(0x8, 0x400)
fanotify_mark(r1, 0x1, 0x4800003a, r0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0)
poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0)
memfd_secret(0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
inotify_init1(0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r3 = getpid()
socket$nl_route(0x10, 0x3, 0x0) (async)
process_vm_readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/48, 0x30}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000540)=""/176, 0xb0}], 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x8a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async)
mkdirat(r2, &(0x7f0000000480)='./bus/file0\x00', 0x109)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mkdir(&(0x7f0000000400)='./file0/file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async, rerun: 32)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async, rerun: 32)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) (async)
socket(0x26, 0x0, 0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1.862406787s ago: executing program 1 (id=359):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x6, 0x4})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x20000)
ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/227)
write(r0, &(0x7f0000000180), 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
syz_usb_connect$cdc_ncm(0x3, 0x81, &(0x7f0000000240)={{0x12, 0x1, 0x403, 0x2, 0x0, 0x0, 0xcf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x9, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "8f63f944ec"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x0, 0x84}, {0x6, 0x24, 0x1a, 0x4, 0x22}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x1, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x6, 0xff}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x7f, 0x9, 0x3, 0x8, 0x5}, 0x1f, &(0x7f0000000340)={0x5, 0xf, 0x1f, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x89, 0x7fff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x6, 0xbf}]}, 0xa, [{0xee, &(0x7f0000000380)=@string={0xee, 0x3, "c8322a99df365e6b7c20f4bf7be5c3e8b0578da2ed1222d0fe5beaf95ded4a7f3c4050d07fa14265e6878003271c87aaefb5a57def3633ab26b4294fc2b8a7c43c256b4365efd49e2a663cf35f1ed0cda06836aef08910a06103606ed14ebf92e684a32813b345b12ef2643573898785896f75327ff375ee7f0bf1ddd1e8f5587767fd06e8cfdff79acc5666e13914ce9f8001aae1da9b4accb02b4045a894b68cffb1d3c4bc2a9502c8bfedee73cc7e4d24873a5911b469b01b33f72f01aaa88413a05367f63a2393f74dccfd1c6af9a59265eee25e73176c715332a9e3e22c67b2e23c7ee327695f04a5d6"}}, {0xd, &(0x7f0000000480)=@string={0xd, 0x3, "195070c4c5b627a9e77306"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x7c, &(0x7f0000000580)=@string={0x7c, 0x3, "346fa708d70e54ae3469170e84555a55814cac19368e4c8c181e314fe69940df0e5dbd9590a6b28007170ee8f992eb743f5ace0255ceb63dcad548b31f684ae47bdc2a6d03cdc58b6a652f31123d102810b3b746ab2d78fe3ee91c67c8b6f2ee0a1b7abd3e98581dc20927a2aa4ec8f6ef1dea47f60c09ec814c"}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x8a, &(0x7f0000000640)=@string={0x8a, 0x3, "de8d6841e6d219b5ac26ba8423e126fd4f5d88b6ed32f5fcc921fe2ce1469eb72b61e2a2d0c7a7c1c2f775f0690bdf2b49a18dedbe5a3f9a2e95d11ae80f92579831e565080481e0c598b10253d967d284e62b71d89a3337b8858a9aca5b79f1175edb64903af440c1a2606951b500bb393b00d52265b3be4cc917c4f808446d52ff2c12f8f73493"}}, {0xae, &(0x7f0000000700)=@string={0xae, 0x3, "350e5e2e767fd477f24387fc84e7924dc4c52e2734ecab18ac29760f8081e8178fff5ac2c370784f3b19397326b2a2ef48e705d915f7990a9208724cff9ea84ff8fc1e2d7eb389741bbcbdd3ff5033f90e0ea23f081bc27d7b2a6c3748583453f0a3fac065b5e0c8b1becc1f9985fca216d21397b9c4b0b1be71c09d04d7c72f68309c003eac380f873a4f639dafcb2484e5866b21ab4749d4b79825ddd444dd103803ed9fea6a275a361df4"}}, {0x87, &(0x7f00000007c0)=@string={0x87, 0x3, "17d1091a8a834636c13da11664b01183dbe9bd7a6bfa33a884838ba6724d4d1f899213c98fbf276499e40b7c42b42fcd2438de06d1a8e3dd5e7b7b1ab315d202d033b2683caa7da6785411b3c052e88bff913a501c960c9d8999827d7f263adfa66290d85a6201dfa425c47b680ffbacc86b04e32deaa0a7c57ae7d445370fc07773601b50"}}]})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000940)={<r3=>r2, 0x5c5, 0x9661, 0xfff})
ioctl$KVM_CAP_HYPERV_SEND_IPI(r3, 0x4068aea3, &(0x7f0000000980))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/stat\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000a40)=0x200000)
r5 = fcntl$getown(r4, 0x9)
rt_tgsigqueueinfo(0x0, r5, 0x27, &(0x7f0000000a80)={0xf, 0x8, 0xfffffff8})
write$char_usb(r3, &(0x7f0000000b00)="9b45bdac734efce16bbc39da08c8300ddd12070bcf9a8f602594a7a27a7190ba7725bb51cc4c5e31a9462a962f741dd9f09b807cf21c6163050aa823face85509ac1a8a26f8a9e2173f00b1d20b12d1ad54056fa04bd41a6eae3cda9617be297c31fb5249b8e7d4f323480d3ffa1b22a48bb4932fd3416", 0x77)
ioctl$CDROMSUBCHNL(r4, 0x530b, &(0x7f0000000b80)={0x3, 0x3, 0x7, 0x0, 0xe0, 0x3, @lba=0x3, @lba=0xfff})
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000bc0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000c40)={0x18, r6, 0x4, 0x0, &(0x7f0000000c00)=[{0x4, 0x7f}, {0x5, 0x8}, {0xffff, 0x40}, {0x5, 0xf76e}]})
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000c80))
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000cc0))
syz_io_uring_setup(0x44e, &(0x7f0000000d00)={0x0, 0x3f68, 0x20, 0x2, 0x156, 0x0, r3}, &(0x7f0000000d80), &(0x7f0000000dc0))
ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000e00)={0x0, 0x7, "0f99be432e19ea0b6d1a3ee3b4781fad77d91b58ac249f147a07ac2187bf4938", 0x6, 0x4, 0xcc4, 0x2, 0x7, 0x100, 0x3, 0x100, [0xcb8, 0x3, 0xd, 0x9]})
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
syz_open_dev$char_usb(0xc, 0xb4, 0x7)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4)
sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x54, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xcf0a4c83f726b852}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x54}}, 0x20040481)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0))
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001140)={0x0, 0x5, 0x80, 0xfffe, 0x2d, 0x4, &(0x7f0000001100)="0370999e2f05edf9052f6b06c78bd487c24dc3fc4197fbbe52d81ef96249a3859da0a8e29095a8016c57051d9f"})

461.320967ms ago: executing program 4 (id=372):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
unshare(0x22020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'], 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe83, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000002540))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x9, 0x0, 0xfffffff9, 0x9}, {0x7fff, 0x7, 0x3, 0xd06a}}}, 0x0, 0x600)

460.683999ms ago: executing program 4 (id=373):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000003100)="0f20e0450f00906d4b000066f30f0966baa00066ed0f01d1440f07c4423af7a60648000066ba4200b86b000000efc4639168aa000000007cb9ca0a0000b8a6154811ba29988a2f0f30", 0x49}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

382.291109ms ago: executing program 3 (id=374):
r0 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
madvise(&(0x7f000003a000/0x3000)=nil, 0x3000, 0x6e)
r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90c, 0x40001)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000140)={0x1, "6ec6e5747d8d069d21ace3cd340b35bd9d32bbcb922917daae2e605d708d9d360805000000c0cf7229c9ed976454b4ebf8f65a0592e4273e2c65cc9f450e5803c70ced4a55d6abed1eb29935da4db9c9fba532fd384f36e0c9e31a8f7d0063587bc9ba06da51be4c70ade5fe11b2b4081723e04fa87c70e33678d8fd08a53491cc28f592db6a6e8f591e999d8c23a94214d26ea94c80907fd21436c921429864c5d3e3075b92091fe9f6039a117b81b8999cf6d10a9c928b81dee0063b9c4cb5f39921a666ed34d205ab70a1a5b500405491e1ad4b76e875f3482b14fdd794e2a3d09877a12175868787000000000000000000000000004000"})
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702)
mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x40000)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
madvise(&(0x7f000003a000/0x3000)=nil, 0x3000, 0x6e) (async)
syz_open_dev$usbfs(&(0x7f0000000840), 0x90c, 0x40001) (async)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000140)={0x1, "6ec6e5747d8d069d21ace3cd340b35bd9d32bbcb922917daae2e605d708d9d360805000000c0cf7229c9ed976454b4ebf8f65a0592e4273e2c65cc9f450e5803c70ced4a55d6abed1eb29935da4db9c9fba532fd384f36e0c9e31a8f7d0063587bc9ba06da51be4c70ade5fe11b2b4081723e04fa87c70e33678d8fd08a53491cc28f592db6a6e8f591e999d8c23a94214d26ea94c80907fd21436c921429864c5d3e3075b92091fe9f6039a117b81b8999cf6d10a9c928b81dee0063b9c4cb5f39921a666ed34d205ab70a1a5b500405491e1ad4b76e875f3482b14fdd794e2a3d09877a12175868787000000000000000000000000004000"}) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) (async)
mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r2, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x40000) (async)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r0, 0x0, 0x0) (async)

302.992282ms ago: executing program 4 (id=375):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00') (async)
chmod(&(0x7f0000000040)='./file0\x00', 0xae3663be869f751f) (async)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x1}}]})

302.671208ms ago: executing program 5 (id=376):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

300.673272ms ago: executing program 4 (id=377):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

300.416625ms ago: executing program 5 (id=378):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101540, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x800455cc, 0x0)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000200)=""/147) (async)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r2, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000300)=0x9)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000540)=@x86={0x3, 0x5, 0xbf, 0x0, 0xffff0001, 0x81, 0x4, 0x0, 0x18, 0x9, 0x9, 0x8, 0x0, 0x80000000, 0xc, 0x4, 0x5, 0xff, 0x7, '\x00', 0x7, 0x6})
ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000040)) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (async)
chdir(&(0x7f0000000140)='./bus\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)

300.182177ms ago: executing program 4 (id=379):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="e8", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async)
sendto$inet(r0, &(0x7f0000000280)='p', 0x1, 0x0, 0x0, 0x0) (async)
shutdown(r0, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x4, 0x1, 0x0, "8ca348250000000000000000000000000000000008000000000000004000"})

243.215023ms ago: executing program 4 (id=380):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @remote}})
r4 = fsopen(&(0x7f0000000000)='zonefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
creat(&(0x7f0000000080)='./bus\x00', 0x0) (async)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @remote}}) (async)
fsopen(&(0x7f0000000000)='zonefs\x00', 0x1) (async)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)

243.075014ms ago: executing program 3 (id=381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x784}}]}, 0x44}}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

173.124373ms ago: executing program 3 (id=382):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) (async)
mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000340))
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
ioctl(r1, 0x8b1a, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (rerun: 32)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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", @ANYBLOB="8503d43b78014c0596d84a56985ea47516d045ac1a1f3d775235b0293c282434155a8acc83378659b19c115096dacbbf674732905a27bcfd58b35f9fb4701bef1f7428db156a4ca44641a650082bbe668df49808b7967e706cb7aaa86734e88fa72581bfc09a65ecd3a2ecdce6dbcf38530aa06633fb81308b3d017a16fb14d92c9cc99dad85fffbb6c137d1e780888f13874a58b609e91b6301e161aaafeffee3fbea1071621b45fcb4e12cc5602ef5bd9bdb0532f221e3e102c23cbca83a50a800050a15934f9768353d14809fb746d05eebc41c301afa3bfc627c19ab5b7d9c8bfcf3b18d00000000", @ANYBLOB="05005300010000001400040001007468315f6d616376746170fc000008000500028296c15545bc46a86abaf030a8db92780805b7df6f8593a1f25116d4bc2d6330b51d721e55c61dde3f141a4a9f4f9815ea608ac1471764a7d96794311095c24914009efa6a95653fb93495616b30500dbf07bd23618b53eb79c9dd237e5f4cbbfe145d877d06d7541f20f70cc953caecb4d2af01"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x10)

171.818202ms ago: executing program 5 (id=383):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0xa, 0x1, 0x0, @local}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1}, {0x2}, {0x6}]})
mkdir(0x0, 0x0)

113.005621ms ago: executing program 3 (id=384):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003f40), r4)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000003fc0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf253b00000008000300", @ANYRES32, @ANYBLOB="0400870042003300309c0f0008021100000008021100"], 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x4044840)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x90, 0x0, 0xfc}, 0x9c)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x2, 0xf}, 0x8)
r8 = socket(0x22, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x1c, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a00e5ffffff000000000000080019006e28d0d2429cfbcfc045960f7c45844c8438acd49ab3ec3dee52c47202dfd8ed280d477d88b543e80afb87bff54dc9b6115ae52f82651ef3b682781daf12bee45c4e4a393c050d5e21aee84a1c7227a6c81d5a4a0ce3ef2bac9047e3f554d268b028", @ANYRES32=0x0, @ANYBLOB="0800100000000000"], 0x2c}}, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002600), 0x101, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r12=>0x0})
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r13, r12, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)

2.561385ms ago: executing program 3 (id=385):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) (async)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x10, {0x8, 0xffffffff}, 0xd0, 0x9}})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0002fdff1f0001000000010000000000000002410000001000137564703a73797a3000000000d6876eae43bbb9dd34d38a70dca9188510022a538e88c8159bf3544906628ed348"], 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x24004040)

0s ago: executing program 3 (id=386):
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0})
r0 = syz_io_uring_setup(0x26c0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
write$UHID_CREATE2(r3, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r4, 0x1000)
r5 = io_uring_setup(0x524e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1c0})
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f3839f00f00940000baf80c66b83816a78d66efbafc0c66b80000c0fe66ef642e660f3882a0e06764260f01c80f87d49cf00fc70828b8000000000f23d00f21f86635200000070f23f80f7f3366b92902000066b80000010066ba000000000f30", 0x62}], 0x1, 0x0, 0x0, 0x0)
unshare(0x20000400)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x47)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r10], 0x14)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
write$binfmt_script(r6, &(0x7f0000000380)={'#! ', './file0'}, 0xb)
close_range(r5, 0xffffffffffffffff, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[   30.600212][   T39] audit: type=1400 audit(1731111709.188:81): avc:  denied  { rlimitinh } for  pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   30.607001][   T39] audit: type=1400 audit(1731111709.188:82): avc:  denied  { siginh } for  pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   31.513959][   T39] audit: type=1400 audit(1731111710.118:83): avc:  denied  { read } for  pid=5343 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   31.519745][   T39] audit: type=1400 audit(1731111710.118:84): avc:  denied  { append } for  pid=5343 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   31.525309][   T39] audit: type=1400 audit(1731111710.118:85): avc:  denied  { open } for  pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   31.531044][   T39] audit: type=1400 audit(1731111710.118:86): avc:  denied  { getattr } for  pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
Warning: Permanently added '[localhost]:28344' (ED25519) to the list of known hosts.
[   31.672276][   T39] audit: type=1400 audit(1731111710.278:87): avc:  denied  { name_bind } for  pid=5858 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   33.328603][ T5860] cgroup: Unknown subsys name 'net'
[   33.456060][ T5860] cgroup: Unknown subsys name 'cpuset'
[   33.459399][ T5860] cgroup: Unknown subsys name 'rlimit'
[   33.612908][ T5869] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   34.184299][ T5860] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   35.732963][   T39] kauditd_printk_skb: 17 callbacks suppressed
[   35.732978][   T39] audit: type=1400 audit(1731111714.338:105): avc:  denied  { execmem } for  pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   35.877182][   T39] audit: type=1400 audit(1731111714.488:106): avc:  denied  { create } for  pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   35.882627][   T39] audit: type=1400 audit(1731111714.488:107): avc:  denied  { read write } for  pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   35.889136][   T39] audit: type=1400 audit(1731111714.488:108): avc:  denied  { open } for  pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   35.895808][   T39] audit: type=1400 audit(1731111714.488:109): avc:  denied  { ioctl } for  pid=5937 comm="syz-executor" path="socket:[897]" dev="sockfs" ino=897 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   35.898547][   T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   35.906614][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   35.909323][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   35.911821][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   35.927410][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   35.929897][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   35.932383][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   35.934740][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   35.937494][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   35.939520][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   35.941742][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   35.943986][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   35.946234][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   35.949606][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   35.950479][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   35.951668][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   35.954360][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   35.955079][   T39] audit: type=1400 audit(1731111714.568:110): avc:  denied  { read } for  pid=5941 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   35.955316][   T39] audit: type=1400 audit(1731111714.568:111): avc:  denied  { open } for  pid=5941 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   35.959323][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   35.962720][   T39] audit: type=1400 audit(1731111714.568:112): avc:  denied  { mounton } for  pid=5941 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   35.972640][   T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   35.972967][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   35.973233][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   35.973408][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   35.985620][   T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   35.987857][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   36.075441][   T39] audit: type=1400 audit(1731111714.688:113): avc:  denied  { module_request } for  pid=5941 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   36.108748][ T5941] chnl_net:caif_netlink_parms(): no params data found
[   36.171869][ T5946] chnl_net:caif_netlink_parms(): no params data found
[   36.221025][ T5937] chnl_net:caif_netlink_parms(): no params data found
[   36.235497][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.238503][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.241210][ T5941] bridge_slave_0: entered allmulticast mode
[   36.244764][ T5941] bridge_slave_0: entered promiscuous mode
[   36.266715][ T5945] chnl_net:caif_netlink_parms(): no params data found
[   36.273522][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.275339][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.277201][ T5941] bridge_slave_1: entered allmulticast mode
[   36.279178][ T5941] bridge_slave_1: entered promiscuous mode
[   36.329999][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.332011][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.334008][ T5946] bridge_slave_0: entered allmulticast mode
[   36.336029][ T5946] bridge_slave_0: entered promiscuous mode
[   36.368952][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.371551][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.373462][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.375505][ T5946] bridge_slave_1: entered allmulticast mode
[   36.377513][ T5946] bridge_slave_1: entered promiscuous mode
[   36.418154][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.437255][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.439778][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.441615][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.443494][ T5945] bridge_slave_0: entered allmulticast mode
[   36.446240][ T5945] bridge_slave_0: entered promiscuous mode
[   36.449108][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.451031][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.452927][ T5945] bridge_slave_1: entered allmulticast mode
[   36.455779][ T5945] bridge_slave_1: entered promiscuous mode
[   36.483059][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.509630][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.511561][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.513540][ T5937] bridge_slave_0: entered allmulticast mode
[   36.515782][ T5937] bridge_slave_0: entered promiscuous mode
[   36.519828][ T5941] team0: Port device team_slave_0 added
[   36.529795][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.533559][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.536405][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.538345][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.540264][ T5937] bridge_slave_1: entered allmulticast mode
[   36.542316][ T5937] bridge_slave_1: entered promiscuous mode
[   36.553267][ T5941] team0: Port device team_slave_1 added
[   36.564917][ T5946] team0: Port device team_slave_0 added
[   36.594579][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.604829][ T5946] team0: Port device team_slave_1 added
[   36.609106][ T5945] team0: Port device team_slave_0 added
[   36.621683][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.632480][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.634427][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.640968][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.646549][ T5945] team0: Port device team_slave_1 added
[   36.662324][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.664288][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.670774][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.681970][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.683810][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.690347][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.695136][ T5937] team0: Port device team_slave_0 added
[   36.700067][ T5937] team0: Port device team_slave_1 added
[   36.708829][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.710664][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.718217][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.732421][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.734895][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.741526][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.745173][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.747120][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.753701][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.782508][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.784837][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.791556][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.796421][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.798368][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.805703][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.825981][ T5946] hsr_slave_0: entered promiscuous mode
[   36.827933][ T5946] hsr_slave_1: entered promiscuous mode
[   36.841186][ T5941] hsr_slave_0: entered promiscuous mode
[   36.843078][ T5941] hsr_slave_1: entered promiscuous mode
[   36.844950][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.847085][ T5941] Cannot create hsr debugfs directory
[   36.893512][ T5945] hsr_slave_0: entered promiscuous mode
[   36.895678][ T5945] hsr_slave_1: entered promiscuous mode
[   36.897495][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.899486][ T5945] Cannot create hsr debugfs directory
[   36.920248][ T5937] hsr_slave_0: entered promiscuous mode
[   36.922227][ T5937] hsr_slave_1: entered promiscuous mode
[   36.924302][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.926808][ T5937] Cannot create hsr debugfs directory
[   37.076183][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.080138][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.083128][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.086679][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.108770][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.112138][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.115915][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.120512][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.122591][ T5941] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.124875][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.126729][ T5941] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.129882][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.149554][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.155966][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.158746][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.173784][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.177383][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.181864][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.209004][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.218563][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.222125][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.225902][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.238920][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.254641][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   37.269396][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.271346][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.286635][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.289239][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.306510][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.311050][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.315811][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.328518][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[   37.335297][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.336227][   T39] audit: type=1400 audit(1731111715.948:114): avc:  denied  { sys_module } for  pid=5941 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   37.337786][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.351888][ T5946] 8021q: adding VLAN 0 to HW filter on device team0
[   37.359846][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.361914][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.364870][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.366715][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.373238][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.375213][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.385682][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.403265][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[   37.408648][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.410489][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.419429][ T5937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.422098][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.435036][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.436909][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.441944][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.455965][ T5945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.458705][ T5945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.475328][ T5941] veth0_vlan: entered promiscuous mode
[   37.482574][ T5941] veth1_vlan: entered promiscuous mode
[   37.492589][ T5941] veth0_macvtap: entered promiscuous mode
[   37.498921][ T5941] veth1_macvtap: entered promiscuous mode
[   37.510276][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.515513][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.520643][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.525089][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.530503][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.532949][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.535576][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.537820][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.559128][ T5946] veth0_vlan: entered promiscuous mode
[   37.570849][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.575951][ T5946] veth1_vlan: entered promiscuous mode
[   37.592003][ T5946] veth0_macvtap: entered promiscuous mode
[   37.601957][ T5937] veth0_vlan: entered promiscuous mode
[   37.607483][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.609621][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.609920][ T5937] veth1_vlan: entered promiscuous mode
[   37.614488][ T5946] veth1_macvtap: entered promiscuous mode
[   37.632163][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.634646][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.641082][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.645675][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.649507][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.658860][ T5945] veth0_vlan: entered promiscuous mode
[   37.661360][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.665141][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.669543][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.672210][ T5937] veth0_macvtap: entered promiscuous mode
[   37.676173][ T5937] veth1_macvtap: entered promiscuous mode
[   37.681429][ T5945] veth1_vlan: entered promiscuous mode
[   37.683335][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   37.686151][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.690470][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.692681][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.695251][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.700859][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.704520][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.707666][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.710569][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.713782][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.720846][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.724029][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.726554][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.729253][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.732823][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.748136][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.750492][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.752750][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.755501][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.762995][ T5945] veth0_macvtap: entered promiscuous mode
[   37.767994][ T5945] veth1_macvtap: entered promiscuous mode
[   37.789125][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.791664][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.795644][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.798356][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.800914][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.803538][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.806737][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.809297][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.812474][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.815996][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.817962][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.820761][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.823386][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.826209][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.829203][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.831650][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.834482][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.837557][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.847552][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.849778][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.851942][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.854141][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.858880][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.861033][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.872644][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.875184][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.890372][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.892536][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.908023][ T6010] netlink: 'syz.3.4': attribute type 8 has an invalid length.
[   37.910138][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   37.913043][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.917912][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.945928][ T6012] binder: BC_ACQUIRE_RESULT not supported
[   37.948363][ T6012] binder: 6011:6012 ioctl c0306201 200002c0 returned -22
[   37.950899][ T6012] binder: 6011:6012 ioctl 7a7 20000040 returned -22
[   37.973923][ T5985] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   37.986924][ T6014] loop7: detected capacity change from 0 to 16384
[   37.999700][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   38.007418][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   38.025379][   T64] Bluetooth: hci3: command tx timeout
[   38.025386][ T5940] Bluetooth: hci0: command tx timeout
[   38.034034][ T5940] Bluetooth: hci2: command tx timeout
[   38.034319][   T64] Bluetooth: hci1: command tx timeout
[   38.136828][ T5985] usb 7-1: too many configurations: 9, using maximum allowed: 8
[   38.140410][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.142738][ T5985] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.146045][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0
[   38.149335][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.151659][ T5985] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.154615][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0
[   38.157920][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.160210][ T5985] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.163001][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0
[   38.165618][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.168706][ T5985] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.171458][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0
[   38.174560][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.176842][ T5985] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.179601][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0
[   38.181992][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.184504][ T6018] loop7: detected capacity change from 16384 to 0
[   38.187377][ T5985] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.190511][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0
[   38.194491][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.196926][ T5985] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.199730][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0
[   38.203046][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.205856][ T5985] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.209378][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0
[   38.220775][ T5985] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   38.223106][ T5985] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   38.226104][ T5985] usb 7-1: Product: syz
[   38.227709][ T5985] usb 7-1: Manufacturer: syz
[   38.229340][ T5985] usb 7-1: SerialNumber: syz
[   38.232023][ T5985] usb 7-1: config 0 descriptor??
[   38.239014][ T5985] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[   38.412305][ T6025] evm: overlay not supported
[   38.451706][ T6028] input: syz0 as /devices/virtual/input/input5
[   38.465951][ T5985] usb 7-1: USB disconnect, device number 2
[   38.470260][ T5985] yurex 7-1:0.0: USB YUREX #0 now disconnected
[   38.599275][ T6033] vfat: Unknown parameter '�eΤ½οH™ψ|πΜ�ΘΟ—β2^Ο1π¦ UδGΙ€�.©”'Τ§Rάέ`¬ΗW‡2Δ£ό’ΤƞΣ'
[   39.206367][ T6035] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   39.291606][ T6052] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   39.318444][ T6049] kvm: emulating exchange as write
[   39.332284][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'.
[   39.342103][ T6057] openvswitch: netlink: Missing key (keys=40, expected=100)
[   39.488707][ T6072] overlayfs: missing 'lowerdir'
[   39.493578][ T6072] overlayfs: failed to resolve './file1': -2
[   39.552129][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'.
[   39.588655][ T6077] tipc: Started in network mode
[   39.590047][ T6077] tipc: Node identity 42bdf6c1a2ad, cluster identity 4711
[   39.592046][ T6077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   39.611195][ T6077] tipc: Resetting bearer <eth:syzkaller0>
[   39.616916][ T6077] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.621376][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'.
[   39.623780][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'.
[   39.628058][ T6077] netlink: 'syz.2.23': attribute type 18 has an invalid length.
[   39.648779][ T6076] tipc: Resetting bearer <eth:syzkaller0>
[   40.105872][   T64] Bluetooth: hci1: command tx timeout
[   40.105950][ T5940] Bluetooth: hci2: command tx timeout
[   40.106025][ T5942] Bluetooth: hci3: command tx timeout
[   40.106054][ T5942] Bluetooth: hci0: command tx timeout
[   40.109240][ T6064] delete_channel: no stack
[   40.215856][ T6087] vfat: Unknown parameter '�eΤ½οH™ψ|πΜ�ΘΟ—β2^Ο1π¦ UδGΙ€�.©”'Τ§Rάέ`¬ΗW‡2Δ£ό’ΤƞΣ'
[   40.349523][ T6076] tipc: Disabling bearer <eth:syzkaller0>
[   40.442878][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'.
[   40.452004][ T6111] netlink: 48 bytes leftover after parsing attributes in process `syz.2.32'.
[   40.456936][ T6111] capability: warning: `syz.2.32' uses 32-bit capabilities (legacy support in use)
[   41.010031][   T39] kauditd_printk_skb: 152 callbacks suppressed
[   41.010040][   T39] audit: type=1400 audit(1731111719.618:267): avc:  denied  { getopt } for  pid=6128 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   41.042722][ T6131] 9pnet_fd: Insufficient options for proto=fd
[   41.163676][   T39] audit: type=1400 audit(1731111719.768:268): avc:  denied  { search } for  pid=5661 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.169794][   T39] audit: type=1400 audit(1731111719.778:269): avc:  denied  { read } for  pid=5661 comm="dhcpcd" name="n103" dev="tmpfs" ino=2043 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.175402][   T39] audit: type=1400 audit(1731111719.778:270): avc:  denied  { open } for  pid=5661 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2043 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.181084][   T39] audit: type=1400 audit(1731111719.778:271): avc:  denied  { getattr } for  pid=5661 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2043 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   41.489338][   T39] audit: type=1400 audit(1731111720.098:272): avc:  denied  { read } for  pid=6145 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.496875][   T39] audit: type=1400 audit(1731111720.098:273): avc:  denied  { open } for  pid=6145 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.503750][   T39] audit: type=1400 audit(1731111720.098:274): avc:  denied  { getattr } for  pid=6145 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.504816][ T6148] netlink: 'syz.0.41': attribute type 1 has an invalid length.
[   41.510797][   T39] audit: type=1400 audit(1731111720.108:275): avc:  denied  { write } for  pid=6142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.512337][ T6148] netlink: 'syz.0.41': attribute type 2 has an invalid length.
[   41.519280][   T39] audit: type=1400 audit(1731111720.108:276): avc:  denied  { add_name } for  pid=6142 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.554766][ T6152] capability: warning: `syz.0.43' uses deprecated v2 capabilities in a way that may be insecure
[   41.577101][ T6155] program syz.3.42 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   41.654720][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'.
[   41.657669][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.47'.
[   41.734242][  T829] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   41.780507][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.50'.
[   41.784049][   T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   41.844001][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   41.846521][ T6185] block device autoloading is deprecated and will be removed.
[   41.985072][ T6183] md2: using deprecated bitmap file support
[   41.988150][ T6183] md2: error: failed to get bitmap file
[   42.064134][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   42.114058][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   42.184316][ T5940] Bluetooth: hci2: command tx timeout
[   42.184394][   T64] Bluetooth: hci1: command tx timeout
[   42.184654][ T5954] Bluetooth: hci3: command tx timeout
[   42.254062][   T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   42.284178][   T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   42.303995][ T5989] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   42.354083][   T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   42.384005][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   42.434789][ T5989] usb 6-1: device descriptor read/64, error -71
[   42.464042][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   42.504489][    C2] Illegal XDP return value 16128 on prog  (id 15) dev bond_slave_0, expect packet loss!
[   42.684039][ T5989] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   42.730728][ T6248] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   42.736934][ T6248] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   42.815889][ T5989] usb 6-1: device descriptor read/64, error -71
[   42.862937][ T6262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2927474123 (5854948246 ns) > initial count (1287066782 ns). Using initial count to start timer.
[   42.924276][ T5989] usb usb6-port1: attempt power cycle
[   43.142047][ T6293] net veth1_virt_wifi virt_wifi0: invalid flags given to default FDB implementation
[   43.148249][ T6293] binder: Bad value for 'max'
[   43.273946][ T5989] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   43.297460][ T5989] usb 6-1: device descriptor read/8, error -71
[   43.301155][ T6298] __nla_validate_parse: 1 callbacks suppressed
[   43.301164][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'.
[   43.354292][ T6302] openvswitch: netlink: nsh attribute has 883 unknown bytes.
[   43.356301][ T6302] openvswitch: netlink: Actions may not be safe on all matching packets
[   43.359841][ T6301] openvswitch: netlink: nsh attribute has 883 unknown bytes.
[   43.361749][ T6301] openvswitch: netlink: Actions may not be safe on all matching packets
[   43.543915][ T5989] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   43.574474][ T5989] usb 6-1: device descriptor read/8, error -71
[   43.686600][ T5989] usb usb6-port1: unable to enumerate USB device
[   43.730937][ T6325] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   44.098091][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.101360][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.104263][ T5954] Bluetooth: hci0: command tx timeout
[   44.105800][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.108292][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.110368][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   44.112282][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.166306][ T6343] FAULT_INJECTION: forcing a failure.
[   44.166306][ T6343] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   44.171224][ T6343] CPU: 1 UID: 0 PID: 6343 Comm: syz.3.100 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0
[   44.174049][ T6343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   44.176826][ T6343] Call Trace:
[   44.177720][ T6343]  <TASK>
[   44.178504][ T6343]  dump_stack_lvl+0x16c/0x1f0
[   44.179762][ T6343]  should_fail_ex+0x497/0x5b0
[   44.181009][ T6343]  _copy_from_user+0x2e/0xd0
[   44.182225][ T6343]  move_addr_to_kernel+0x68/0x160
[   44.183560][ T6343]  __sys_connect+0xb4/0x180
[   44.184758][ T6343]  ? __pfx___sys_connect+0x10/0x10
[   44.186104][ T6343]  ? __pfx_ksys_write+0x10/0x10
[   44.187394][ T6343]  __x64_sys_connect+0x72/0xb0
[   44.188647][ T6343]  ? lockdep_hardirqs_on+0x7c/0x110
[   44.190041][ T6343]  do_syscall_64+0xcd/0x250
[   44.191253][ T6343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.192797][ T6343] RIP: 0033:0x7f274257e719
[   44.193924][ T5989] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   44.193954][ T6343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.193966][ T6343] RSP: 002b:00007f2743397038 EFLAGS: 00000246
[   44.194457][ T6334] chnl_net:caif_netlink_parms(): no params data found
[   44.204213][ T6343]  ORIG_RAX: 000000000000002a
[   44.205442][ T6343] RAX: ffffffffffffffda RBX: 00007f2742735f80 RCX: 00007f274257e719
[   44.207524][ T6343] RDX: 000000000000001c RSI: 0000000020002a00 RDI: 0000000000000003
[   44.209569][ T6343] RBP: 00007f2743397090 R08: 0000000000000000 R09: 0000000000000000
[   44.211637][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.213686][ T6343] R13: 0000000000000000 R14: 00007f2742735f80 R15: 00007fff0c2d61e8
[   44.215727][ T6343]  </TASK>
[   44.250371][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.252310][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.255177][ T6334] bridge_slave_0: entered allmulticast mode
[   44.257230][ T6334] bridge_slave_0: entered promiscuous mode
[   44.260840][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.262791][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.265068][ T5954] Bluetooth: hci1: command tx timeout
[   44.266482][ T6334] bridge_slave_1: entered allmulticast mode
[   44.268777][ T6334] bridge_slave_1: entered promiscuous mode
[   44.274453][   T64] Bluetooth: hci3: command tx timeout
[   44.293149][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.296719][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.318969][ T6334] team0: Port device team_slave_0 added
[   44.321447][ T6334] team0: Port device team_slave_1 added
[   44.341767][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.343599][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.350802][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.358313][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.360102][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.364378][ T5989] usb 7-1: too many configurations: 9, using maximum allowed: 8
[   44.367266][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.370164][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   44.376393][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   44.380286][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.383538][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   44.387080][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   44.391324][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.394435][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   44.397524][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   44.401116][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.404977][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   44.408219][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   44.409429][ T6334] hsr_slave_0: entered promiscuous mode
[   44.411819][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.415360][ T6334] hsr_slave_1: entered promiscuous mode
[   44.415907][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   44.419226][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   44.419318][ T6334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.421986][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.425397][ T6334] Cannot create hsr debugfs directory
[   44.427127][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   44.430589][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   44.433389][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.436179][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   44.438510][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   44.441560][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.444127][ T5989] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   44.446470][ T5989] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   44.449148][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0
[   44.452709][ T5989] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   44.455543][ T5989] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   44.457907][ T5989] usb 7-1: Product: syz
[   44.459048][ T5989] usb 7-1: Manufacturer: syz
[   44.460271][ T5989] usb 7-1: SerialNumber: syz
[   44.462865][ T5989] usb 7-1: config 0 descriptor??
[   44.470314][ T5989] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[   44.477797][ T6369] FAULT_INJECTION: forcing a failure.
[   44.477797][ T6369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.481312][ T6369] CPU: 3 UID: 0 PID: 6369 Comm: syz.3.108 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0
[   44.484027][ T6369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   44.487153][ T6369] Call Trace:
[   44.488034][ T6369]  <TASK>
[   44.488823][ T6369]  dump_stack_lvl+0x16c/0x1f0
[   44.490065][ T6369]  should_fail_ex+0x497/0x5b0
[   44.491334][ T6369]  _copy_to_user+0x32/0xd0
[   44.492509][ T6369]  simple_read_from_buffer+0xd0/0x160
[   44.493914][ T6369]  proc_fail_nth_read+0x198/0x270
[   44.495238][ T6369]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   44.496687][ T6369]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   44.498132][ T6369]  vfs_read+0x1df/0xbe0
[   44.499239][ T6369]  ? __fget_files+0x23a/0x3f0
[   44.500473][ T6369]  ? fdget_pos+0x24c/0x360
[   44.501641][ T6369]  ? __pfx_lock_release+0x10/0x10
[   44.502948][ T6369]  ? trace_lock_acquire+0x14a/0x1d0
[   44.503796][ T6334] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   44.504320][ T6369]  ? __pfx_vfs_read+0x10/0x10
[   44.504343][ T6369]  ? __pfx___mutex_lock+0x10/0x10
[   44.504357][ T6369]  ? __fget_files+0x244/0x3f0
[   44.504374][ T6369]  ksys_read+0x12f/0x260
[   44.504388][ T6369]  ? __pfx_ksys_read+0x10/0x10
[   44.504405][ T6369]  do_syscall_64+0xcd/0x250
[   44.504416][ T6369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.504431][ T6369] RIP: 0033:0x7f274257d15c
[   44.516096][ T6369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[   44.521074][ T6369] RSP: 002b:00007f2743397030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   44.523278][ T6369] RAX: ffffffffffffffda RBX: 00007f2742735f80 RCX: 00007f274257d15c
[   44.525327][ T6369] RDX: 000000000000000f RSI: 00007f27433970a0 RDI: 0000000000000004
[   44.527383][ T6369] RBP: 00007f2743397090 R08: 0000000000000000 R09: 0000000000000000
[   44.529418][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.531443][ T6369] R13: 0000000000000000 R14: 00007f2742735f80 R15: 00007fff0c2d61e8
[   44.533489][ T6369]  </TASK>
[   44.535825][ T6334] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   44.540230][ T6334] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   44.545688][ T6334] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   44.557557][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.559510][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.559786][ T6373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   44.559935][ T6371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   44.559965][ T6372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   44.560354][ T6373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   44.561476][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.571795][ T6334] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.599789][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.607578][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.610536][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.622084][ T6334] 8021q: adding VLAN 0 to HW filter on device team0
[   44.626899][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.628747][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.634384][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.636757][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.638757][ T6377] sctp: [Deprecated]: syz.3.110 (pid 6377) Use of int in max_burst socket option deprecated.
[   44.638757][ T6377] Use struct sctp_assoc_value instead
[   44.676017][   T62] usb 7-1: USB disconnect, device number 3
[   44.679418][   T62] yurex 7-1:0.0: USB YUREX #0 now disconnected
[   44.720915][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.811815][ T6334] veth0_vlan: entered promiscuous mode
[   44.816072][ T6334] veth1_vlan: entered promiscuous mode
[   44.825742][ T6334] veth0_macvtap: entered promiscuous mode
[   44.828316][ T6401] netem: incorrect gi model size
[   44.830176][ T6334] veth1_macvtap: entered promiscuous mode
[   44.832116][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'.
[   44.839712][ T6401] netlink: 'syz.3.114': attribute type 1 has an invalid length.
[   44.841731][ T6401] netlink: 9308 bytes leftover after parsing attributes in process `syz.3.114'.
[   44.844107][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'.
[   44.844666][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.849122][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.851613][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.854636][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.857347][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.859942][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.862418][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.865206][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.865880][ T6403] netlink: 'syz.3.115': attribute type 1 has an invalid length.
[   44.868493][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.869854][ T6403] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.115'.
[   44.872807][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.875409][ T6403] netlink: 'syz.3.115': attribute type 1 has an invalid length.
[   44.876700][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.876707][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.884215][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.886685][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.889290][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.891788][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.894540][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.897944][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.905268][ T6334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.907548][ T6334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.909772][ T6334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.912060][ T6334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.935430][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.937578][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.947290][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.949261][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.215078][ T6441] syz.2.127 uses obsolete (PF_INET,SOCK_PACKET)
[   45.217115][ T6441] syzkaller1: entered promiscuous mode
[   45.218599][ T6441] syzkaller1: entered allmulticast mode
[   45.404604][ T6451] process 'syz.2.129' launched '/dev/fd/3' with NULL argv: empty string added
[   45.548902][ T6455] veth1_virt_wifi: entered allmulticast mode
[   45.694021][   T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   45.803913][    T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   45.846150][   T25] usb 7-1: too many configurations: 9, using maximum allowed: 8
[   45.849057][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   45.851352][   T25] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   45.854210][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[   45.856608][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   45.858863][   T25] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   45.861604][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[   45.865461][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   45.867768][   T25] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   45.870519][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[   45.872912][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   45.875305][   T25] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   45.878088][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[   45.880504][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   45.882782][   T25] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   45.885606][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[   45.887935][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   45.890215][   T25] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   45.892987][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[   45.895651][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   45.897977][   T25] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   45.900738][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[   45.903127][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   45.905575][   T25] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   45.908401][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[   45.911506][   T25] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   45.913880][   T25] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   45.916014][   T25] usb 7-1: Product: syz
[   45.917092][   T25] usb 7-1: Manufacturer: syz
[   45.918300][   T25] usb 7-1: SerialNumber: syz
[   45.921071][   T25] usb 7-1: config 0 descriptor??
[   45.925828][   T25] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[   45.953957][    T8] usb 9-1: Using ep0 maxpacket: 32
[   45.958330][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   45.961182][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   45.964140][    T8] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   45.966526][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.970066][    T8] usb 9-1: config 0 descriptor??
[   45.972486][ T6455] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   45.976016][    T8] hub 9-1:0.0: USB hub found
[   46.019307][   T39] kauditd_printk_skb: 111 callbacks suppressed
[   46.019317][   T39] audit: type=1400 audit(1731111724.628:388): avc:  denied  { create } for  pid=6459 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   46.033346][   T39] audit: type=1400 audit(1731111724.638:389): avc:  denied  { getopt } for  pid=6456 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   46.128372][ T6453] openvswitch: netlink: Key type 1282 is out of range max 32
[   46.177248][    T8] hub 9-1:0.0: config failed, can't read hub descriptor (err -22)
[   46.185112][   T64] Bluetooth: hci2: command tx timeout
[   46.226629][   T39] audit: type=1400 audit(1731111724.838:390): avc:  denied  { read } for  pid=6475 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.256725][   T39] audit: type=1400 audit(1731111724.868:391): avc:  denied  { name_connect } for  pid=6478 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   46.343988][ T5989] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   46.494583][ T5989] usb 6-1: too many configurations: 9, using maximum allowed: 8
[   46.497947][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   46.500809][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   46.504648][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.507631][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   46.510445][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   46.514134][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.517101][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   46.520018][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   46.523626][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.526970][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   46.530023][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   46.533782][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.537517][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   46.540989][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   46.544962][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.548009][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   46.550954][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   46.554620][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.557631][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   46.560507][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   46.563311][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.565924][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   46.568255][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   46.571016][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   46.576205][ T5989] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   46.578774][ T5989] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   46.580915][ T5989] usb 6-1: Product: syz
[   46.582019][ T5989] usb 6-1: Manufacturer: syz
[   46.583230][ T5989] usb 6-1: SerialNumber: syz
[   46.586034][ T5989] usb 6-1: config 0 descriptor??
[   46.591905][ T5989] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1
[   46.643397][    T8] usbhid 9-1:0.0: can't add hid device: -71
[   46.645153][    T8] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[   46.665287][    T8] usb 9-1: USB disconnect, device number 2
[   47.176647][ T6492] cgroup: Need name or subsystem set
[   47.212577][   T39] audit: type=1400 audit(1731111725.818:392): avc:  denied  { setopt } for  pid=6487 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   47.217674][   T39] audit: type=1400 audit(1731111725.828:393): avc:  denied  { connect } for  pid=6487 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   47.222664][   T39] audit: type=1400 audit(1731111725.828:394): avc:  denied  { name_connect } for  pid=6487 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[   47.418024][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   47.425209][   T39] audit: type=1400 audit(1731111726.038:395): avc:  denied  { search } for  pid=5343 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   47.564531][    T9] usb 9-1: Using ep0 maxpacket: 8
[   47.567893][    T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   47.571398][    T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   47.575029][    T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   47.578361][    T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   47.582708][    T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   47.586096][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.793761][   T39] audit: type=1400 audit(1731111726.398:396): avc:  denied  { append } for  pid=6490 comm="syz.4.140" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   47.797480][ T6492] netlink: 240 bytes leftover after parsing attributes in process `syz.4.140'.
[   47.802775][ T6492] netlink: 100 bytes leftover after parsing attributes in process `syz.4.140'.
[   47.807205][    T9] usb 9-1: GET_CAPABILITIES returned 0
[   47.808703][    T9] usbtmc 9-1:16.0: can't read capabilities
[   47.975674][   T39] audit: type=1400 audit(1731111726.588:397): avc:  denied  { create } for  pid=6495 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   48.185285][    C2] usb 7-1: yurex_control_callback - control failed: -2
[   48.188408][  T829] usb 6-1: USB disconnect, device number 6
[   48.190367][   T25] usb 7-1: USB disconnect, device number 4
[   48.195159][    T9] usb 9-1: USB disconnect, device number 3
[   48.197317][   T25] yurex 7-1:0.0: USB YUREX #0 now disconnected
[   48.204814][  T829] yurex 6-1:0.0: USB YUREX #1 now disconnected
[   48.275682][   T64] Bluetooth: hci2: command tx timeout
[   48.333944][ T5989] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   48.463925][ T5989] usb 8-1: device descriptor read/64, error -71
[   48.703973][ T5989] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   48.819975][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'.
[   48.824319][ T6527] netlink: 'syz.1.154': attribute type 10 has an invalid length.
[   48.830492][ T6527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   48.834968][ T6527] netlink: 'syz.1.154': attribute type 10 has an invalid length.
[   48.844147][ T5989] usb 8-1: device descriptor read/64, error -71
[   48.863436][ T6527] team0: Port device wlan1 added
[   48.885999][ T6533] Error parsing options; rc = [-22]
[   48.956165][ T5989] usb usb8-port1: attempt power cycle
[   48.978857][ T6547] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[   49.124450][    T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[   49.253992][   T62] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   49.275210][    T9] usb 9-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   49.277824][    T9] usb 9-1: config 1 interface 0 has no altsetting 0
[   49.280995][    T9] usb 9-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.40
[   49.283104][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.285314][    T9] usb 9-1: Product: syz
[   49.286317][    T9] usb 9-1: Manufacturer: β²δ°˜θ΄ ξ©ζ‹†ε¬Ύξš’κΉ‰λΌ™οžƒλ΅ΆιΉ ε†βŠ’α‚―γ°«λ‘Šθ—΄κ°‰ξœšδ†žο“”ΜŠδœΆξ�₯δ“»γŒˆα―­βšΌζ½¦α�λ’Ίκ€΄ηŠλ„«νžŒβ₯ŒαΆ†οŸŸη€­ε‰‘εͺ¬ΰ°½ι›•ΟΆκ”ε…‹κ‰΅ΞζΊ’θ‡šμ¬Šι£«λ¬ΨΆξΌ‡ν–¨οƒΈλ™₯煁ξ�ο²ˆθ˜ε†”δ”κ›¬μ—μ½œοΌ“μŠŒλΉο‘γ΄”θ ―ίžθ³¬κΏͺ娇κ°�膋晝罇缆턿ﺧγƒͺ猸㴨ζͺŸλ›€θ—ΌεΌ“ζƒ λ ŒκΆνŸι²βŽ‘ↄ烕摖μ�ͺ
[   49.293618][    T9] usb 9-1: SerialNumber: syz
[   49.296674][ T5989] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   49.314661][ T5989] usb 8-1: device descriptor read/8, error -71
[   49.383979][   T62] usb 7-1: device descriptor read/64, error -71
[   49.553938][ T5989] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   49.574294][ T5989] usb 8-1: device descriptor read/8, error -71
[   49.623939][   T62] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   49.684064][ T5989] usb usb8-port1: unable to enumerate USB device
[   49.708166][    T9] usbhid 9-1:1.0: can't add hid device: -71
[   49.709577][    T9] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[   49.717394][    T9] usb 9-1: USB disconnect, device number 4
[   49.753991][   T62] usb 7-1: device descriptor read/64, error -71
[   49.870383][   T62] usb usb7-port1: attempt power cycle
[   50.213961][   T62] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   50.235247][   T62] usb 7-1: device descriptor read/8, error -71
[   50.236671][ T6559] netlink: 48 bytes leftover after parsing attributes in process `syz.1.163'.
[   50.254145][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   50.337701][ T6563] warning: `syz.4.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.344107][   T64] Bluetooth: hci2: command tx timeout
[   50.467924][ T6569] tty tty4: ldisc open failed (-12), clearing slot 3
[   50.504862][   T62] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   50.524340][   T62] usb 7-1: device descriptor read/8, error -71
[   50.637721][   T62] usb usb7-port1: unable to enumerate USB device
[   50.676371][ T6577] mmap: syz.1.168 (6577) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   50.702131][  T207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.786770][  T207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.800272][ T6582] binder: 6581:6582 ioctl c0306201 20000240 returned -22
[   50.844489][  T207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.916907][  T207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.986664][  T207] bridge_slave_1: left allmulticast mode
[   50.988422][  T207] bridge_slave_1: left promiscuous mode
[   50.990534][  T207] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.996836][  T207] bridge_slave_0: left allmulticast mode
[   50.998318][  T207] bridge_slave_0: left promiscuous mode
[   50.999843][  T207] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.123405][ T6593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6593 comm=syz.3.173
[   51.256924][  T207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.264096][  T207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.268737][  T207] bond0 (unregistering): Released all slaves
[   51.274565][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.277481][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.281810][ T6593] netlink: 'syz.3.173': attribute type 1 has an invalid length.
[   51.291523][ T6593] bond1: entered promiscuous mode
[   51.292898][ T6593] bond1: entered allmulticast mode
[   51.307690][   T39] kauditd_printk_skb: 28 callbacks suppressed
[   51.307699][   T39] audit: type=1400 audit(1731111729.918:426): avc:  denied  { ioctl } for  pid=6596 comm="syz.4.174" path="socket:[12137]" dev="sockfs" ino=12137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   51.311002][ T6593] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.326468][ T6594] 8021q: adding VLAN 0 to HW filter on device batadv1
[   51.329275][ T6594] bond1: (slave batadv1): making interface the new active one
[   51.331238][ T6594] batadv1: entered promiscuous mode
[   51.332684][ T6594] batadv1: entered allmulticast mode
[   51.337426][ T6594] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   51.394492][   T39] audit: type=1400 audit(1731111729.998:427): avc:  denied  { read } for  pid=6607 comm="syz.4.177" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   51.400972][   T39] audit: type=1400 audit(1731111729.998:428): avc:  denied  { open } for  pid=6607 comm="syz.4.177" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   51.407562][   T39] audit: type=1400 audit(1731111730.008:429): avc:  denied  { ioctl } for  pid=6607 comm="syz.4.177" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   51.416711][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.177'.
[   51.446976][ T6615] gfs2: gfs2 mount does not exist
[   51.449855][   T39] audit: type=1400 audit(1731111730.058:430): avc:  denied  { map } for  pid=6613 comm="syz.4.178" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   51.456114][   T39] audit: type=1400 audit(1731111730.058:431): avc:  denied  { execute } for  pid=6613 comm="syz.4.178" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   51.568030][  T207] hsr_slave_0: left promiscuous mode
[   51.570023][  T207] hsr_slave_1: left promiscuous mode
[   51.571929][  T207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.574557][  T207] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.578067][  T207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.580197][  T207] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.596990][  T207] veth1_macvtap: left promiscuous mode
[   51.598726][  T207] veth0_macvtap: left promiscuous mode
[   51.600260][  T207] veth1_vlan: left promiscuous mode
[   51.601808][  T207] veth0_vlan: left promiscuous mode
[   51.634022][ T5939] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   51.693221][   T39] audit: type=1400 audit(1731111730.298:432): avc:  denied  { shutdown } for  pid=6626 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   51.786416][ T5939] usb 8-1: Using ep0 maxpacket: 8
[   51.787075][   T39] audit: type=1400 audit(1731111730.398:433): avc:  denied  { listen } for  pid=6633 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   51.788833][ T5939] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   51.803361][ T5939] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   51.805043][ T6640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6640 comm=syz.4.182
[   51.805986][ T5939] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   51.807300][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6641 comm=syz.4.182
[   51.807314][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6641 comm=syz.4.182
[   51.807323][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6641 comm=syz.4.182
[   51.807333][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6641 comm=syz.4.182
[   51.807342][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6641 comm=syz.4.182
[   51.807351][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6641 comm=syz.4.182
[   51.807361][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6641 comm=syz.4.182
[   51.807370][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6641 comm=syz.4.182
[   51.837770][ T5939] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   51.841057][ T5939] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   51.841627][   T39] audit: type=1400 audit(1731111730.448:434): avc:  denied  { create } for  pid=6642 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   51.843372][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.848486][   T39] audit: type=1400 audit(1731111730.448:435): avc:  denied  { write } for  pid=6642 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   52.065375][ T5939] usb 8-1: GET_CAPABILITIES returned 0
[   52.067041][ T5939] usbtmc 8-1:16.0: can't read capabilities
[   52.196988][  T207] team0 (unregistering): Port device team_slave_1 removed
[   52.250618][  T207] team0 (unregistering): Port device team_slave_0 removed
[   52.427667][   T64] Bluetooth: hci2: command tx timeout
[   52.673079][   T62] usb 8-1: USB disconnect, device number 6
[   52.713102][ T6661] tipc: Started in network mode
[   52.715716][ T6661] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   52.720265][ T6661] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   52.724224][ T6661] tipc: Enabled bearer <udp:syz1>, priority 10
[   52.763339][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.769053][ T6668] bond0: (slave rose0): Enslaving as an active interface with an up link
[   52.784890][ T6668] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   52.785464][ T6673] netlink: 'syz.1.193': attribute type 9 has an invalid length.
[   52.790320][ T6668] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   52.797146][ T6668] vhci_hcd vhci_hcd.0: Device attached
[   52.797723][ T6673] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.193'.
[   52.814915][ T6674] vhci_hcd: connection closed
[   52.823106][   T45] vhci_hcd: stop threads
[   52.825876][   T45] vhci_hcd: release socket
[   52.827073][   T45] vhci_hcd: disconnect device
[   52.829832][ T6671] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002
[   52.909582][ T6697] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   53.002876][ T6709] random: crng reseeded on system resumption
[   53.032493][ T6712] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.325174][ T6747] input: syz1 as /devices/virtual/input/input7
[   53.693944][ T5989] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   53.724574][  T829] tipc: Node number set to 1
[   53.848792][ T6796] netlink: 'syz.2.212': attribute type 3 has an invalid length.
[   53.851091][ T6796] netlink: 9814 bytes leftover after parsing attributes in process `syz.2.212'.
[   53.856004][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.859641][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.861190][ T6796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.212'.
[   53.863262][ T5989] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[   53.869776][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.869856][ T6796] netlink: 'syz.2.212': attribute type 10 has an invalid length.
[   53.872916][ T5989] usb 6-1: config 0 descriptor??
[   53.880541][ T6796] team0: Failed to send options change via netlink (err -105)
[   53.882546][ T6796] team0: Port device netdevsim0 added
[   53.884908][   T11] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   53.888343][ T6796] netlink: 'syz.2.212': attribute type 10 has an invalid length.
[   53.892967][ T6796] team0: Failed to send options change via netlink (err -105)
[   53.895530][ T6796] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   53.898700][ T6796] team0: Port device netdevsim0 removed
[   53.901502][ T6796] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   54.009007][ T6805] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[   54.009435][ T6803] IPVS: stopping backup sync thread 6805 ...
[   54.027105][ T6803] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   54.129606][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.217'.
[   54.138231][ T6812] input: syz0 as /devices/virtual/input/input8
[   54.140089][ T6812] input: failed to attach handler leds to device input8, error: -6
[   54.242628][ T6825] ip6t_srh: unknown srh invflags 7D00
[   54.287305][ T5989] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:28BD:0933.0002/input/input9
[   54.358618][ T5989] uclogic 0003:28BD:0933.0002: input,hidraw1: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0
[   54.504031][   T64] Bluetooth: hci2: command tx timeout
[   54.951722][ T6832] netlink: 'syz.3.223': attribute type 1 has an invalid length.
[   54.953795][ T6832] netlink: 224 bytes leftover after parsing attributes in process `syz.3.223'.
[   55.055221][ T6834] netlink: 32 bytes leftover after parsing attributes in process `syz.3.224'.
[   56.061883][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'.
[   56.064691][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'.
[   56.183943][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[   56.183960][ T6808] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   56.583931][   T64] Bluetooth: hci2: command tx timeout
[   57.053915][ T6808] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   57.060051][ T6808] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   57.064642][ T6808] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   57.066290][ T6808] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   57.069613][ T6808] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   57.072436][ T6808] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   57.074169][ T6808] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   57.076712][ T6808] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   57.079485][ T6808] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   57.081250][ T6808] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   57.083591][ T6808] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   57.109753][  T829] usb 6-1: USB disconnect, device number 7
[   57.157700][   T39] kauditd_printk_skb: 18 callbacks suppressed
[   57.157711][   T39] audit: type=1400 audit(1731111735.768:454): avc:  denied  { mount } for  pid=6824 comm="syz.4.221" name="/" dev="autofs" ino=13121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   57.194719][   T39] audit: type=1400 audit(1731111735.808:455): avc:  denied  { unmount } for  pid=6334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   57.254836][ T6862] Bluetooth: MGMT ver 1.23
[   57.256494][   T39] audit: type=1400 audit(1731111735.868:456): avc:  denied  { write } for  pid=6860 comm="syz.3.231" path="socket:[13881]" dev="sockfs" ino=13881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   58.264050][ T5954] Bluetooth: hci0: command 0x0c1a tx timeout
[   59.143984][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout
[   59.144005][   T64] Bluetooth: hci2: Opcode 0x2046 failed: -110
[   59.154019][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   59.154103][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout
[   59.222777][   T39] audit: type=1400 audit(1731111737.828:457): avc:  denied  { bind } for  pid=6876 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   59.229594][   T39] audit: type=1400 audit(1731111737.838:458): avc:  denied  { write } for  pid=6876 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   59.321831][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'.
[   59.333668][   T39] audit: type=1400 audit(1731111737.938:459): avc:  denied  { read } for  pid=6882 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   59.346376][ T6891] netlink: 'syz.3.241': attribute type 10 has an invalid length.
[   59.348468][ T6893] netlink: 92 bytes leftover after parsing attributes in process `syz.2.240'.
[   59.351736][ T6893] netlink: 56 bytes leftover after parsing attributes in process `syz.2.240'.
[   59.358060][ T6891] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   59.370154][ T6891] netlink: 'syz.3.241': attribute type 10 has an invalid length.
[   59.379444][ T6891] team0: Port device wlan1 added
[   59.444763][   T39] audit: type=1400 audit(1731111738.048:460): avc:  denied  { mounton } for  pid=6911 comm="syz.3.246" path="/proc/218/cgroup" dev="proc" ino=13169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   59.504977][   T39] audit: type=1400 audit(1731111738.118:461): avc:  denied  { write } for  pid=6927 comm="syz.3.252" name="/" dev="9p" ino=37617739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   59.511192][   T39] audit: type=1400 audit(1731111738.118:462): avc:  denied  { add_name } for  pid=6927 comm="syz.3.252" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   59.517566][   T39] audit: type=1400 audit(1731111738.118:463): avc:  denied  { create } for  pid=6927 comm="syz.3.252" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   59.528262][ T6928] netfs: Couldn't get user pages (rc=-14)
[   59.536901][ T6928] netlink: 'syz.3.252': attribute type 3 has an invalid length.
[   59.538940][ T6928] netlink: 196520 bytes leftover after parsing attributes in process `syz.3.252'.
[   59.571735][ T6932] netlink: 'syz.2.254': attribute type 9 has an invalid length.
[   59.573965][ T6932] netlink: 134640 bytes leftover after parsing attributes in process `syz.2.254'.
[   59.596869][ T6936] netlink: 68 bytes leftover after parsing attributes in process `syz.2.255'.
[   59.604248][ T6936] Κό: entered promiscuous mode
[   59.902692][ T6956] program syz.1.262 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   59.913215][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.999246][   T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.009079][   T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.011965][   T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.012955][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.016925][   T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.019167][   T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   60.021530][   T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.081071][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.100750][ T6964] chnl_net:caif_netlink_parms(): no params data found
[   60.140192][   T11] bond0: (slave netdevsim0): Releasing backup interface
[   60.144604][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.168231][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.170283][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.172871][ T6964] bridge_slave_0: entered allmulticast mode
[   60.177759][ T6964] bridge_slave_0: entered promiscuous mode
[   60.180361][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.182377][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.184794][ T6964] bridge_slave_1: entered allmulticast mode
[   60.186823][ T6964] bridge_slave_1: entered promiscuous mode
[   60.205722][ T6964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.209467][ T6964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.233269][ T6964] team0: Port device team_slave_0 added
[   60.245698][ T6964] team0: Port device team_slave_1 added
[   60.276534][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.278661][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.285900][ T6964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.293714][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.297536][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.306569][ T6964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.344293][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[   60.359388][ T6964] hsr_slave_0: entered promiscuous mode
[   60.361296][ T6964] hsr_slave_1: entered promiscuous mode
[   60.363143][ T6964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.365801][ T6964] Cannot create hsr debugfs directory
[   60.385116][   T11] bridge_slave_1: left allmulticast mode
[   60.387080][   T11] bridge_slave_1: left promiscuous mode
[   60.390788][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.396200][   T11] bridge_slave_0: left allmulticast mode
[   60.398190][   T11] bridge_slave_0: left promiscuous mode
[   60.400803][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.679426][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.683552][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.687898][   T11] bond0 (unregistering): Released all slaves
[   60.693094][   T11] bond1 (unregistering): Released all slaves
[   60.699357][ T6988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'.
[   60.765496][   T11] Κό: left promiscuous mode
[   60.805551][ T7002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.811326][ T7002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.839210][   T11] tipc: Left network mode
[   60.869225][ T6964] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   60.872823][ T6964] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   60.876339][ T6964] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   60.879248][ T6964] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   60.907296][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.913807][ T6964] 8021q: adding VLAN 0 to HW filter on device team0
[   60.920022][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.921904][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.951286][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.953899][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.015186][   T11] hsr_slave_0: left promiscuous mode
[   61.019037][   T11] hsr_slave_1: left promiscuous mode
[   61.020751][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.022659][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.027752][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.029660][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.046664][   T11] veth1_macvtap: left promiscuous mode
[   61.048210][   T11] veth0_macvtap: left promiscuous mode
[   61.049631][   T11] veth1_vlan: left promiscuous mode
[   61.051011][   T11] veth0_vlan: left promiscuous mode
[   61.223963][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[   61.223997][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout
[   61.608991][   T11] team0 (unregistering): Port device team_slave_1 removed
[   61.671376][   T11] team0 (unregistering): Port device team_slave_0 removed
[   62.105824][ T5954] Bluetooth: hci1: command tx timeout
[   62.178888][ T7021] netlink: 'syz.3.274': attribute type 8 has an invalid length.
[   62.184039][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'.
[   62.228370][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.356255][ T6964] veth0_vlan: entered promiscuous mode
[   62.360406][ T6964] veth1_vlan: entered promiscuous mode
[   62.368060][ T7039] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[   62.377465][ T6964] veth0_macvtap: entered promiscuous mode
[   62.380439][ T6964] veth1_macvtap: entered promiscuous mode
[   62.386398][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.389011][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.391470][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.395177][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.397668][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.400307][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.403528][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.406732][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.409381][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.411990][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.414715][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.417152][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.419771][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.423806][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.430646][ T6964] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.432845][ T6964] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.435091][ T6964] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.437301][ T6964] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.466234][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.468340][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.476789][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.478744][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.513523][   T39] kauditd_printk_skb: 16 callbacks suppressed
[   62.513534][   T39] audit: type=1400 audit(1731111741.118:480): avc:  denied  { map } for  pid=7046 comm="syz.5.263" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   62.522078][   T39] audit: type=1400 audit(1731111741.128:481): avc:  denied  { call } for  pid=7046 comm="syz.5.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   62.529304][   T68] tipc: Subscription rejected, illegal request
[   62.531161][   T39] audit: type=1400 audit(1731111741.128:482): avc:  denied  { connect } for  pid=7046 comm="syz.5.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.536242][   T39] audit: type=1400 audit(1731111741.138:483): avc:  denied  { write } for  pid=7046 comm="syz.5.263" path="socket:[15709]" dev="sockfs" ino=15709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.565499][   T39] audit: type=1400 audit(1731111741.178:484): avc:  denied  { bind } for  pid=7052 comm="syz.5.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   62.570132][   T39] audit: type=1400 audit(1731111741.178:485): avc:  denied  { write } for  pid=7052 comm="syz.5.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   62.613927][   T62] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   62.744028][   T62] usb 6-1: device descriptor read/64, error -71
[   62.984086][   T62] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   62.986746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.021968][   T39] audit: type=1400 audit(1731111741.628:486): avc:  denied  { watch } for  pid=7111 comm="syz.3.286" path="/86/file1" dev="autofs" ino=16602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[   63.117129][   T62] usb 6-1: device descriptor read/64, error -71
[   63.218001][   T39] audit: type=1400 audit(1731111741.828:487): avc:  denied  { read } for  pid=7117 comm="syz.3.287" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   63.224690][  T828] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   63.231624][   T62] usb usb6-port1: attempt power cycle
[   63.231728][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'.
[   63.233160][   T39] audit: type=1400 audit(1731111741.828:488): avc:  denied  { open } for  pid=7117 comm="syz.3.287" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   63.247507][ T7118] nbd: socks must be embedded in a SOCK_ITEM attr
[   63.271543][ T7121] netlink: 'syz.3.288': attribute type 8 has an invalid length.
[   63.274272][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'.
[   63.304831][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout
[   63.307263][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout
[   63.385629][  T828] usb 10-1: Using ep0 maxpacket: 32
[   63.389519][  T828] usb 10-1: config 0 has no interfaces?
[   63.391479][  T828] usb 10-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[   63.394877][  T828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.397731][  T828] usb 10-1: config 0 descriptor??
[   63.541557][   T39] audit: type=1400 audit(1731111742.148:489): avc:  denied  { sys_chroot } for  pid=7123 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[   63.584029][   T62] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   63.605369][   T62] usb 6-1: device descriptor read/8, error -71
[   63.605943][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.611316][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.614846][  T828] usb 10-1: USB disconnect, device number 2
[   63.754020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   63.863943][   T62] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   63.884958][   T62] usb 6-1: device descriptor read/8, error -71
[   64.004269][   T62] usb usb6-port1: unable to enumerate USB device
[   64.128570][ T7148] Zero length message leads to an empty skb
[   64.177136][ T7151] [U] 
[   64.193989][ T5954] Bluetooth: hci1: command tx timeout
[   64.240422][ T7161] netlink: 'syz.5.297': attribute type 8 has an invalid length.
[   64.436650][ T7177] /dev/sr0: Can't open blockdev
[   64.565571][ T7176] /dev/sr0: Can't open blockdev
[   64.653738][ T5989] IPVS: starting estimator thread 0...
[   64.754030][ T7201] IPVS: using max 36 ests per chain, 86400 per kthread
[   64.787604][ T7204] __nla_validate_parse: 1 callbacks suppressed
[   64.787616][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.302'.
[   65.324149][  T828] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   65.394668][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout
[   65.455644][ T7230] block device autoloading is deprecated and will be removed.
[   65.474348][  T828] usb 10-1: too many configurations: 9, using maximum allowed: 8
[   65.478191][  T828] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   65.480663][  T828] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   65.483575][  T828] usb 10-1: config 0 interface 0 has no altsetting 0
[   65.486410][  T828] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   65.489063][  T828] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   65.491885][  T828] usb 10-1: config 0 interface 0 has no altsetting 0
[   65.494852][  T828] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   65.497212][  T828] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   65.500061][  T828] usb 10-1: config 0 interface 0 has no altsetting 0
[   65.512282][  T828] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   65.514693][  T828] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   65.517666][  T828] usb 10-1: config 0 interface 0 has no altsetting 0
[   65.520105][  T828] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   65.523769][  T828] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   65.527071][  T828] usb 10-1: config 0 interface 0 has no altsetting 0
[   65.529593][  T828] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   65.531938][  T828] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   65.535591][  T828] usb 10-1: config 0 interface 0 has no altsetting 0
[   65.538080][  T828] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   65.540466][  T828] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   65.543298][  T828] usb 10-1: config 0 interface 0 has no altsetting 0
[   65.546676][  T828] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   65.549036][  T828] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   65.552096][  T828] usb 10-1: config 0 interface 0 has no altsetting 0
[   65.555611][  T828] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   65.558486][  T828] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   65.560684][  T828] usb 10-1: Product: syz
[   65.561810][  T828] usb 10-1: Manufacturer: syz
[   65.563055][  T828] usb 10-1: SerialNumber: syz
[   65.574224][  T828] usb 10-1: config 0 descriptor??
[   65.580046][  T828] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[   65.993073][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.999291][ T7261] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   66.046246][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.314'.
[   66.258942][ T7279] netlink: 'syz.4.318': attribute type 10 has an invalid length.
[   66.261019][ T7279] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.318'.
[   66.264114][ T5954] Bluetooth: hci1: command tx timeout
[   66.313912][ T5989] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   66.427470][ T7298] netlink: 120 bytes leftover after parsing attributes in process `syz.4.323'.
[   66.430836][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'.
[   66.465959][ T5989] usb 6-1: too many configurations: 9, using maximum allowed: 8
[   66.469649][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   66.472214][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   66.475476][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.478060][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   66.480350][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   66.483147][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.494717][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   66.497063][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   66.500014][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.505221][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   66.507569][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   66.510412][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.525362][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   66.527715][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   66.530474][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.545026][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   66.547488][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   66.550237][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.552728][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   66.555126][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   66.557966][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.575306][ T5989] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   66.577778][ T5989] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   66.580568][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.584208][ T5989] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   66.586644][ T5989] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   66.588788][ T5989] usb 6-1: Product: syz
[   66.589877][ T5989] usb 6-1: Manufacturer: syz
[   66.591091][ T5989] usb 6-1: SerialNumber: syz
[   66.598809][ T5989] usb 6-1: config 0 descriptor??
[   66.603470][ T5989] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1
[   66.630788][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.633540][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.636143][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.638853][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.641413][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.644166][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.647586][ T7304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.650701][ T7304] batadv_slave_0: entered promiscuous mode
[   66.716438][ T7310] overlayfs: failed to clone lowerpath
[   66.806073][ T5989] usb 6-1: USB disconnect, device number 12
[   66.808632][ T5989] yurex 6-1:0.0: USB YUREX #1 now disconnected
[   66.838734][ T7325] dummy0: entered promiscuous mode
[   66.840919][ T7325] dummy0: left promiscuous mode
[   66.947367][ T7327] trusted_key: syz.4.335 sent an empty control message without MSG_MORE.
[   66.997398][ T7334] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8
[   67.098189][ T7342] =======================================================
[   67.098189][ T7342] WARNING: The mand mount option has been deprecated and
[   67.098189][ T7342]          and is ignored by this kernel. Remove the mand
[   67.098189][ T7342]          option from the mount to silence this warning.
[   67.098189][ T7342] =======================================================
[   67.156196][ T7344] syzkaller1: entered promiscuous mode
[   67.157865][ T7344] syzkaller1: entered allmulticast mode
[   67.287363][ T7348] netlink: 'syz.4.343': attribute type 8 has an invalid length.
[   67.289444][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'.
[   67.315039][ T7350] omfs: Invalid superblock (0)
[   67.360218][ T7354] netlink: 'syz.3.346': attribute type 5 has an invalid length.
[   67.362264][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'.
[   67.468035][ T7363] random: crng reseeded on system resumption
[   67.609198][ T7368] TCP: TCP_TX_DELAY enabled
[   67.694479][ T7377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.355'.
[   67.877980][    C2] usb 10-1: yurex_control_callback - control failed: -2
[   68.114013][  T828] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   68.135509][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'.
[   68.141789][ T7399] fuse: Bad value for 'fd'
[   68.167376][   T39] kauditd_printk_skb: 38 callbacks suppressed
[   68.167385][   T39] audit: type=1400 audit(1731111746.778:528): avc:  denied  { listen } for  pid=7401 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   68.200478][ T7405] hfsplus: invalid gid specified
[   68.202425][ T7405] hfsplus: unable to parse mount options
[   68.220783][   T39] audit: type=1400 audit(1731111746.828:529): avc:  denied  { create } for  pid=7403 comm="syz.3.363" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   68.225752][ T7404] 9pnet_fd: Insufficient options for proto=fd
[   68.243999][  T828] usb 6-1: device descriptor read/64, error -71
[   68.257128][ T7407] SET target dimension over the limit!
[   68.261776][   T39] audit: type=1400 audit(1731111746.868:530): avc:  denied  { write } for  pid=7396 comm="syz.4.360" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   68.343909][ T5954] Bluetooth: hci1: command tx timeout
[   68.408612][ T7421] selinux_netlink_send: 7 callbacks suppressed
[   68.408623][ T7421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7421 comm=syz.3.366
[   68.483893][  T828] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   68.613931][  T828] usb 6-1: device descriptor read/64, error -71
[   68.724051][  T828] usb usb6-port1: attempt power cycle
[   69.074303][  T828] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   69.075555][ T7434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   69.087129][   T39] audit: type=1400 audit(1731111747.698:531): avc:  denied  { setattr } for  pid=7433 comm="syz.4.370" name="file0" dev="overlay" ino=37617751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   69.092974][   T39] audit: type=1400 audit(1731111747.698:532): avc:  denied  { create } for  pid=7433 comm="syz.4.370" name="#10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.098460][   T39] audit: type=1400 audit(1731111747.698:533): avc:  denied  { associate } for  pid=7433 comm="syz.4.370" name="#10" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.104158][   T39] audit: type=1400 audit(1731111747.698:534): avc:  denied  { setattr } for  pid=7433 comm="syz.4.370" name="#10" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.109911][   T39] audit: type=1400 audit(1731111747.698:535): avc:  denied  { write } for  pid=7433 comm="syz.4.370" name="#10" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.115575][  T828] usb 6-1: device descriptor read/8, error -71
[   69.117299][   T39] audit: type=1400 audit(1731111747.698:536): avc:  denied  { rename } for  pid=7433 comm="syz.4.370" name="#10" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.122766][   T39] audit: type=1400 audit(1731111747.698:537): avc:  denied  { reparent } for  pid=7433 comm="syz.4.370" name="#10" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.373895][  T828] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   69.404176][   T62] usb 10-1: USB disconnect, device number 3
[   69.406311][  T828] usb 6-1: device descriptor read/8, error -71
[   69.408254][   T62] yurex 10-1:0.0: USB YUREX #0 now disconnected
[   69.484406][ T7458] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   69.514220][  T828] usb usb6-port1: unable to enumerate USB device
[   69.575597][ T7476] hfs: can't find a HFS filesystem on dev nullb0
[   69.636076][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'.
[   69.800919][ T7485] BUG: kernel NULL pointer dereference, address: 0000000000000000
[   69.802985][ T7485] #PF: supervisor instruction fetch in kernel mode
[   69.805274][ T7485] #PF: error_code(0x0010) - not-present page
[   69.807687][ T7485] PGD 2fc04067 P4D 2fc04067 PUD 49591067 PMD 0 
[   69.809301][ T7485] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI
[   69.810925][ T7485] CPU: 2 UID: 0 PID: 7485 Comm: syz.3.386 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0
[   69.813523][ T7485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   69.816198][ T7485] RIP: 0010:0x0
[   69.817078][ T7485] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   69.819003][ T7485] RSP: 0018:ffffc900046179c8 EFLAGS: 00010283
[   69.820510][ T7485] RAX: 0000000000000ac4 RBX: 0000000000000000 RCX: ffffc90006d11000
[   69.822458][ T7485] RDX: 0000000000040000 RSI: ffffea00014ee980 RDI: ffff888024496700
[   69.824435][ T7485] RBP: ffffea00014ee980 R08: 0000000000000007 R09: 0000000000000000
[   69.826351][ T7485] R10: 0000000000000000 R11: ffffffff961c9e08 R12: 1ffff920008c2f3a
[   69.828352][ T7485] R13: ffff888024496700 R14: 0000000000000000 R15: dffffc0000000000
[   69.830311][ T7485] FS:  00007f27433976c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
[   69.832692][ T7485] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.834321][ T7485] CR2: ffffffffffffffd6 CR3: 000000004e4ae000 CR4: 0000000000352ef0
[   69.836341][ T7485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   69.838306][ T7485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   69.840303][ T7485] Call Trace:
[   69.841129][ T7485]  <TASK>
[   69.841886][ T7485]  ? __die+0x1e/0x60
[   69.842942][ T7485]  ? page_fault_oops+0x3b6/0xb80
[   69.844296][ T7485]  ? __pfx_page_fault_oops+0x10/0x10
[   69.845697][ T7485]  ? __pfx___lock_acquire+0x10/0x10
[   69.847075][ T7485]  ? __pfx_lock_release+0x10/0x10
[   69.848381][ T7485]  ? do_user_addr_fault+0xa90/0x13f0
[   69.849786][ T7485]  ? rcu_is_watching+0x12/0xc0
[   69.851051][ T7485]  ? exc_page_fault+0x5c/0xc0
[   69.852280][ T7485]  ? asm_exc_page_fault+0x26/0x30
[   69.853717][ T7485]  filemap_read_folio+0xc6/0x2a0
[   69.855069][ T7485]  ? __pfx_filemap_read_folio+0x10/0x10
[   69.856511][ T7485]  ? __filemap_get_folio+0x2a5/0xaf0
[   69.858181][ T7485]  do_read_cache_folio+0x263/0x5c0
[   69.859952][ T7485]  freader_get_folio+0x337/0x8e0
[   69.861546][ T7485]  freader_fetch+0xc2/0x5f0
[   69.862723][ T7485]  ? mt_find+0x4c8/0xa20
[   69.863808][ T7485]  __build_id_parse.isra.0+0xed/0x7a0
[   69.865183][ T7485]  ? __pfx___build_id_parse.isra.0+0x10/0x10
[   69.867204][ T7485]  ? __pfx_find_vma+0x10/0x10
[   69.868776][ T7485]  do_procmap_query+0xd62/0x1030
[   69.870312][ T7485]  ? __pfx_do_procmap_query+0x10/0x10
[   69.872060][ T7485]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[   69.873909][ T7485]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[   69.875840][ T7485]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   69.877990][ T7485]  ? selinux_file_ioctl+0x180/0x270
[   69.879478][ T7485]  ? selinux_file_ioctl+0xb4/0x270
[   69.880812][ T7485]  procfs_procmap_ioctl+0x7d/0xb0
[   69.882107][ T7485]  ? __pfx_procfs_procmap_ioctl+0x10/0x10
[   69.883601][ T7485]  __x64_sys_ioctl+0x18f/0x220
[   69.884808][ T7485]  do_syscall_64+0xcd/0x250
[   69.885982][ T7485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.887502][ T7485] RIP: 0033:0x7f274257e719
[   69.888653][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.893528][ T7485] RSP: 002b:00007f2743397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   69.895801][ T7485] RAX: ffffffffffffffda RBX: 00007f2742735f80 RCX: 00007f274257e719
[   69.897861][ T7485] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000006
[   69.900052][ T7485] RBP: 00007f27425f139e R08: 0000000000000000 R09: 0000000000000000
[   69.902048][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.904070][ T7485] R13: 0000000000000000 R14: 00007f2742735f80 R15: 00007fff0c2d61e8
[   69.906057][ T7485]  </TASK>
[   69.906858][ T7485] Modules linked in:
[   69.907885][ T7485] CR2: 0000000000000000
[   69.908961][ T7485] ---[ end trace 0000000000000000 ]---
[   69.910356][ T7485] RIP: 0010:0x0
[   69.911264][ T7485] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   69.913174][ T7485] RSP: 0018:ffffc900046179c8 EFLAGS: 00010283
[   69.914745][ T7485] RAX: 0000000000000ac4 RBX: 0000000000000000 RCX: ffffc90006d11000
[   69.916814][ T7485] RDX: 0000000000040000 RSI: ffffea00014ee980 RDI: ffff888024496700
[   69.918966][ T7485] RBP: ffffea00014ee980 R08: 0000000000000007 R09: 0000000000000000
[   69.921167][ T7485] R10: 0000000000000000 R11: ffffffff961c9e08 R12: 1ffff920008c2f3a
[   69.923193][ T7485] R13: ffff888024496700 R14: 0000000000000000 R15: dffffc0000000000
[   69.925230][ T7485] FS:  00007f27433976c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
[   69.927536][ T7485] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.929224][ T7485] CR2: ffffffffffffffd6 CR3: 000000004e4ae000 CR4: 0000000000352ef0
[   69.931263][ T7485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   69.933287][ T7485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   69.935870][ T7485] Kernel panic - not syncing: Fatal exception
[   69.938169][ T7485] Kernel Offset: disabled
[   69.939548][ T7485] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:22:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000099784 RBX=0000000000000000 RCX=ffffffff8b237429 RDX=ffffed100d4c7026
RSI=ffffffff8bd1b340 RDI=ffffffff816477bc RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20
R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000
R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5848 R15=0000000000000000
RIP=ffffffff8b23880f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f02df0bd6c0 CR3=000000004bba8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006d635f616d6472 2f646e6162696e69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f223b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f2248
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f2242
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f2256
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f22dc
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f23ba
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f818570c488 00007f818570c480 00007f818570c478 00007f818570c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f818626d100 00007f818570c440 00007f8185700004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f818570c498 00007f818570c490 00007f818570c488 00007f818570c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000007ab8c RBX=0000000000000001 RCX=ffffffff8b237429 RDX=ffffed100d4e7026
RSI=ffffffff8bd1b340 RDI=ffffffff816477bc RBP=ffffed1003b55910 RSP=ffffc90000187e08
R8 =0000000000000000 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000
R12=0000000000000001 R13=ffff88801daac880 R14=ffffffff905f5848 R15=0000000000000000
RIP=ffffffff8b23880f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffdc9d20cb8 CR3=000000002cc08000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3aab7960 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f223b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f2248
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f2242
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f2256
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f22dc
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81855f23ba
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff850b8a45 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc90004617278
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023
R12=0000000000000000 R13=000000000000003a R14=ffffffff850b89e0 R15=0000000000000000
RIP=ffffffff850b8a6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f27433976c0 ffffffff 00c01300
GS =0000 ffff88806a800000 ffffffff 00c01300
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000004e4ae000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2743396f90 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27425f22dc
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27425f23ba
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffffffff8ed25bb0 RCX=ffffffff8496d777 RDX=ffff8880257ca440
RSI=ffffffff8496d384 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90005c2eaa8
R8 =0000000000000005 R9 =0000000000000019 R10=0000000000000010 R11=ffff88802a390030
R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000010 R15=ffff88802a390000
RIP=ffffffff818d7b91 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f56eddf66c0 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f2743355d58 CR3=000000004e774000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe176dd800 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56ef9f223b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56ef9f2248
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56ef9f2242
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56ef9f2256
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56ef9f22dc
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56ef9f23ba
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000