last executing test programs:

2m10.893453463s ago: executing program 2 (id=52):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4080080)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00')
getdents64(r1, &(0x7f0000001ec0)=""/142, 0x8e)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r3, &(0x7f0000000000)=""/65, 0x41, 0x7bdb)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = openat(r4, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x7b) (async)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r6, &(0x7f0000000680)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x2) (async)
openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000c900000085000085100000fdffffff852000000200000018450000fcfffbff00000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xed, &(0x7f0000000400)=""/237, 0x41100, 0x22, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x7, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r1, r2, r3, r5], &(0x7f00000006c0)=[{0x1, 0x4, 0x5, 0x6}, {0x0, 0x1, 0x1, 0xc}], 0x10, 0x8001}, 0x94) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a0000060900020073797a31000000000900010073797a310000000058000380540000800c00018006000100d103000044000b802c000180090001006c61737400"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) (rerun: 32)

2m10.310868703s ago: executing program 2 (id=57):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r5, &(0x7f0000008d40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
setns(0xc9, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r9, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0)
munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
close_range(r10, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0)

2m10.02651952s ago: executing program 2 (id=59):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000240))
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_delete(r2)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
userfaultfd(0x80001)
r7 = io_uring_setup(0x13b5, &(0x7f0000000140)={0x0, 0x911c, 0x40, 0x3, 0x2fa})
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0x14, &(0x7f0000000080)={0x5, 0x0, 0x4, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000bc0)=""/182, 0xb6}], 0x0}, 0x20)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x5001})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="01051c00100014000600402400000064000008899078e000000209e5d8779400054d44003b20fffff2c200000f5bffffffff000093ba838ad925ab504e4e97493b920006000000ab00000007000000006bb8436c845686a0f81b8504165f84172ff0e033467a"], 0xba)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x5c0, 0x470, 0x390, 0xffffffff, 0x470, 0x470, 0x528, 0x528, 0xffffffff, 0x528, 0x528, 0x5, &(0x7f0000000180), {[{{@ip={@rand_addr=0x64010102, @empty, 0x0, 0xff000000, 'pimreg\x00', 'veth1\x00', {0xff}, {}, 0x0, 0x0, 0x1}, 0x0, 0x2a0, 0x2d8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x9a1}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x1000, @gre_key=0x9}}}}, {{@ip={@private=0xa010100, @private=0xa010102, 0xffffffff, 0xff, 'veth0_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x88, 0x2, 0x20}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, @ipv6=@mcast1, @port=0x4e20, @gre_key=0x8}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x7}}, @common=@socket0={{0x20}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0xa, 0x3}}}, {{@ip={@private=0xa010100, @private=0xa010102, 0xff000000, 0xff, 'tunl0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x3b25cebaf08e84e1, 0x0, 0x4}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @gre_key=0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x620)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)

2m9.843244778s ago: executing program 2 (id=60):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="87000000001b0000000000000000040000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000050000000300"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f0564362e670fc774d7ad660f381ebd0010660f3a2037290f20e06635080000000f22e00f06660fe7080f20e06635010000000f22e0b807000f00d866660f388232", 0x43}], 0xaaaaaaaaaaaab12, 0x7d, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a480000000e0a050000000000000000000a0000050900010073797a31000000001c0003800c00008008000340000000020c0000800800034000000002090002"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040)
setns(0xc9, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000900)={&(0x7f0000000340)=0x6, 0x1, &(0x7f00000005c0)=[{}, {}, {}, {}], &(0x7f00000008c0)}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100001042dbd74000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b02060025210000240012800b0001006970766c616e0000140002800600020001000000060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x20005841}, 0x0)
r8 = socket(0x10, 0x802, 0x0)
write(r8, &(0x7f0000000240)="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", 0xfc) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_deladdr={0x58, 0x15, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x20, 0xe, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x338}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x0, 0x1ff}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x125c}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0)

2m9.708910333s ago: executing program 0 (id=64):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-serpent-sse2,tgr160-generic)\x00'}, 0x58)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0)

2m9.63676079s ago: executing program 2 (id=67):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5)
syz_clone(0x200111, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r2, 0x40104d04, &(0x7f0000000200)="4ba69c")
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
setns(0xc9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050800000000000000002e00000008000700", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a004f0016891daabb4f0000"], 0x34}}, 0xc840)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m9.636321565s ago: executing program 0 (id=68):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x20000000000000f8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000ffff000008000000070000000000000016428771ae76d5f017090dd6f1a8b4a7fd5739003aab531eb1dd23db193f56c97413eec1ff804a50922902f2b780fc60210cfc4c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, 0x0, 0x4000000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r2, &(0x7f0000000400)="7aff347be80c53a493ad14753305c8421329be7aee4b2bdadb1e4d1d47a004580d5cc4ff205a58b0413a675ef86960f8b91187e4318a03e4c3b7d14066420c3185b227a916dab6e3402bea11299febf312057d5de1ca74880ed44b720c1d3fe85bfc99a91bee218945ed706d70ea9f34ea56b10a7efb875a5ab02fcbfb470273295c418c65ad7d87b22b1946124c0c7e3eccf69fec61b1987ef949d7754613a2f8ca600b5edd40f0b7f938ceaa"}, 0x20)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffda5, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228, 0x8}}, 0x34}}, 0x10)

2m9.569989734s ago: executing program 0 (id=69):
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @device_b, @broadcast, @from_mac=@broadcast, {0x3, 0xffe}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x26, @void}, 0x1e)

2m9.436254314s ago: executing program 2 (id=73):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setns(0xc9, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
sysinfo(&(0x7f0000000000)=""/196)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff)
write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r4, r4, 0x0, 0x9)
socket(0x2a, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
close(0x4)

2m9.016228587s ago: executing program 0 (id=78):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0xc50, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc20, 0x2, [@TCA_FLOW_POLICE={0xc1c, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc78}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4b0, 0x4, 0x3a, 0xffffffff, 0x6, 0x7, 0x58, 0xfff, 0x0, 0x6, 0x8, 0x8, 0x5, 0x2, 0xbf, 0x728f62ec, 0x9, 0x7, 0x0, 0x2, 0x80000000, 0x9, 0x5, 0xd, 0x2, 0xfca, 0x126, 0x8, 0x0, 0x200, 0x5, 0x8, 0x8, 0xe, 0xd06, 0x8, 0x1a, 0xd, 0x7, 0x1, 0xa, 0x2, 0x0, 0x5, 0x800, 0x7, 0x4, 0xfffffff9, 0x9, 0xa, 0x4, 0x800, 0x0, 0x9, 0x3, 0x6, 0x753d, 0x1, 0x5, 0x962, 0x92, 0x6, 0xffffff91, 0x480, 0x10000, 0x0, 0x7, 0x8, 0x5, 0x234, 0xfffffff9, 0x0, 0x5, 0x0, 0x9, 0x6, 0x0, 0x2, 0x0, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0xafa, 0x3, 0x5, 0x3f3d, 0x4, 0x6, 0x19, 0x8, 0xffff, 0x8, 0xa54, 0xe, 0x8f, 0x1, 0x100, 0x400, 0x8, 0x1, 0xe, 0x7, 0x3ff, 0x7, 0x3, 0x9, 0x40, 0xb, 0x5, 0x3, 0x593000, 0x0, 0x3, 0x1, 0x3, 0x3caf, 0x100, 0x8, 0x7ff, 0x1000, 0x81, 0x7, 0x1, 0x9, 0x80000001, 0x8bcf, 0x80000001, 0x7, 0x8001, 0xfffffffa, 0x1, 0x3, 0xffff77d3, 0x6, 0x4, 0x6, 0xbb04, 0x8001, 0x5, 0x0, 0x5, 0xa979, 0x8, 0xfff, 0x68, 0x3, 0x1, 0x9, 0xf07e, 0x1bea, 0x6, 0x1, 0x6, 0x3ff, 0x8, 0x3, 0x5, 0x10001, 0x80, 0x3, 0x2, 0x100, 0x9, 0x1, 0x0, 0x8, 0x7df5, 0x2, 0x2, 0x9, 0x844, 0x6, 0x2, 0x7, 0x2, 0x5, 0x8, 0x0, 0xffffff00, 0x7, 0x2, 0x30, 0xff, 0x6, 0x8, 0x9, 0x3, 0x7, 0x4, 0x8, 0x2, 0xfe7b, 0x7fff, 0x7, 0xef4, 0x6c, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x8000, 0x200, 0x10, 0x81, 0x1, 0x2, 0xfff, 0xf, 0x10, 0x1, 0x0, 0x1, 0x35, 0xfad7, 0x7c09, 0x2400, 0x5, 0x2, 0x6000000, 0x8e, 0x5, 0xffffffff, 0x11e9, 0x2, 0x8, 0xf202, 0x6, 0xffffff98, 0x80, 0x80000000, 0x3, 0x8000, 0xc6, 0x7, 0x362a, 0x1ff, 0x2, 0x5, 0x3, 0x6, 0x6f7c, 0x7, 0xf, 0x40, 0x8, 0xff, 0x1ff, 0x7, 0x3d3c, 0x3, 0x7f, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ff, 0xfffffffe, 0x3, 0x40000000, 0x6000000, 0x5, 0x23, 0xffffffff, 0x0, 0x2, 0x0, 0x3, 0x5, 0x8, 0x3, 0x279, 0x6, 0x4, 0x86, 0x4, 0x0, 0x444, 0x4, 0x4ac, 0x5, 0x200, 0x7, 0x2, 0x10, 0x2ab, 0xfffff522, 0x3, 0x8, 0x7ff, 0x6, 0xffff4fc2, 0x401, 0x1, 0x7, 0xd02, 0x80000000, 0xff, 0xffff, 0xe74, 0xffffffff, 0xc3b, 0x8, 0x3, 0x8, 0x7, 0x8000, 0x0, 0x0, 0x37b0, 0x1c80c, 0x9, 0x7, 0x6, 0x7, 0x7fffffff, 0x5, 0x9, 0xffffffff, 0x2, 0x1e, 0x4, 0x9, 0x4, 0x0, 0x42e2, 0x5b5, 0x0, 0x3, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1, 0x5, 0x0, 0x7, 0x1, 0x0, 0x2, 0x3, 0x0, 0x10000, 0x2, 0x10000, 0x2, 0x7, 0x3, 0xb, 0x10000, 0x2, 0xb606, 0xfffffffe, 0xffff, 0x7, 0x81, 0x4, 0x9, 0x4, 0x2, 0x7, 0x6, 0x3, 0x3ff, 0x48, 0x4, 0xc, 0x4, 0x80, 0x100, 0x4, 0x80000001, 0x800, 0x81, 0x3, 0x100, 0x8af, 0x3, 0x3ff, 0x7fff, 0x2, 0x0, 0x1, 0x6, 0x888d, 0xfffff000, 0x7, 0xfff, 0x9, 0x8, 0x3, 0x6, 0x0, 0x653, 0x4, 0x81, 0xadc, 0xfffffffa, 0x0, 0x2, 0x6, 0x10, 0x1, 0x5, 0x1, 0x3, 0x8, 0x4793133a, 0x10001, 0x9, 0x671, 0xffffa6ef, 0x7f, 0x0, 0x80000000, 0x8, 0x6b21, 0xe0, 0x7fff, 0xef66, 0x0, 0x8, 0x2, 0x3, 0x4b8, 0x7, 0x4b, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4, 0xbdc, 0x8, 0x9, 0x6, 0x10c, 0x9, 0x5, 0x1000, 0x9, 0x7, 0x0, 0x1, 0x5, 0xf, 0x2, 0x1ff, 0x5, 0x8001, 0x2f5, 0x7, 0x200, 0x3, 0x80, 0x6, 0x2, 0x8, 0x1, 0x40, 0x7fff, 0x5, 0x8b08, 0xffffffff, 0xfffffff8, 0x5d8b74c3, 0x8000, 0x10, 0x3e, 0x2, 0x7, 0x6, 0x8001, 0xfffffffa, 0x401, 0xff, 0x1000, 0x7, 0x40, 0x7, 0x7e, 0x9, 0x7, 0x1, 0x79e, 0x862, 0x7f, 0x8, 0x1, 0x2, 0x1, 0x0, 0x7, 0x8, 0xfff, 0xfffffff7, 0x1000, 0x8c6, 0x8, 0xae1, 0x1, 0x40000000, 0x9805, 0x3, 0x6, 0xe49, 0x4e, 0xb, 0x8, 0x200]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7f, 0x8, 0x8, 0xfffffffb, 0x1000, 0x8, 0x1000, 0x9, 0x2, 0x3, 0x397, 0x9, 0x7ff, 0x101, 0x6a5, 0xf, 0x3, 0x8000000, 0x2, 0x400, 0x9, 0xfffffff9, 0x9, 0xf, 0x2, 0x1, 0x1, 0x9, 0x7, 0x1, 0x3, 0x4884, 0x5, 0x8, 0x6, 0x0, 0x100, 0x4, 0x3, 0xa9c3, 0x4, 0x8, 0x3, 0x5, 0x7, 0xb189, 0x0, 0x8, 0x200, 0xfffffffa, 0x100, 0x0, 0x4, 0x6, 0x6, 0xe99f, 0x2, 0x800, 0x6, 0x200, 0x4, 0x96a, 0x6, 0x101, 0x7, 0x6, 0x6, 0x5d, 0x9, 0x8, 0xdce7, 0x7, 0x7, 0x5, 0x5, 0x7ae, 0xa284, 0x7fffffff, 0x100, 0x6, 0x5, 0x4, 0x8000, 0xd, 0x80, 0x8, 0xfffff688, 0x7, 0x1, 0x1, 0xd85, 0x9, 0x7ff, 0x80, 0x1, 0xfffffff8, 0x8, 0x5, 0x6, 0x81, 0x7, 0x6, 0x7ff, 0x7ff, 0xf, 0x5, 0x1, 0x20000, 0xff, 0x1, 0xa19, 0x10001, 0x6, 0x3, 0x1, 0x7, 0x2, 0x3, 0x8, 0x9, 0xfffffffb, 0x40, 0x7, 0x1000, 0x0, 0x4, 0x7ff, 0x4, 0x8, 0x5, 0x3f2, 0x1, 0x8e, 0x6708, 0x5, 0x1, 0xa8f, 0x6, 0xbeb0, 0x9, 0x0, 0x3, 0x7, 0x1, 0x2, 0xd, 0x7, 0x6de0373e, 0x0, 0x0, 0x114, 0x4, 0x6, 0x5, 0xffff, 0x5f06, 0x8, 0x7, 0x26a, 0x971a, 0x8, 0x5, 0x7fff, 0x3e, 0x3, 0x0, 0x2, 0x7, 0x5, 0x4, 0x2, 0x7, 0x7, 0x3, 0xa789, 0x2, 0x0, 0xffffffff, 0x1, 0x6, 0x4, 0x2, 0x8, 0x40, 0x0, 0x4, 0x4, 0xe45, 0x8, 0x4, 0x0, 0x800, 0xfffffff8, 0x7, 0x101, 0x6, 0x7, 0xc, 0x0, 0x8, 0x5, 0x40, 0x6, 0xce, 0x0, 0x1, 0x3, 0x3474, 0x0, 0x1, 0x321, 0xfffffffa, 0x3, 0x6, 0x0, 0xcd, 0xffffe260, 0x5, 0x7f, 0xfffffffd, 0x4, 0xffffffff, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x429, 0x7, 0x8000, 0x10001, 0x4a, 0x1, 0x8, 0x5, 0x4, 0x8, 0x80, 0x3a, 0x7fffffff, 0xb, 0xffff, 0x20, 0x2, 0x5, 0x101, 0x1, 0x1, 0x1, 0x583a, 0x2, 0x80, 0x2, 0xffff8000, 0x1]}]}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000002c0)={0x81, 0x0, 0xfffffffffffffff8, 0x1, "93b5958bb1c08c9ce2b907310b16d90a70e74d38595c21383cb345503e138b70b340a8de93ca882be065961828baf2bd4d6212fe3b084036bec8e1ce358e3a0c57b3686c0db2e159aef57b477606ede4af000e9ee0cb5b623686e79f995b4b111855c27ff0553a6d26"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0xc50, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc20, 0x2, [@TCA_FLOW_POLICE={0xc1c, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc78}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4b0, 0x4, 0x3a, 0xffffffff, 0x6, 0x7, 0x58, 0xfff, 0x0, 0x6, 0x8, 0x8, 0x5, 0x2, 0xbf, 0x728f62ec, 0x9, 0x7, 0x0, 0x2, 0x80000000, 0x9, 0x5, 0xd, 0x2, 0xfca, 0x126, 0x8, 0x0, 0x200, 0x5, 0x8, 0x8, 0xe, 0xd06, 0x8, 0x1a, 0xd, 0x7, 0x1, 0xa, 0x2, 0x0, 0x5, 0x800, 0x7, 0x4, 0xfffffff9, 0x9, 0xa, 0x4, 0x800, 0x0, 0x9, 0x3, 0x6, 0x753d, 0x1, 0x5, 0x962, 0x92, 0x6, 0xffffff91, 0x480, 0x10000, 0x0, 0x7, 0x8, 0x5, 0x234, 0xfffffff9, 0x0, 0x5, 0x0, 0x9, 0x6, 0x0, 0x2, 0x0, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0xafa, 0x3, 0x5, 0x3f3d, 0x4, 0x6, 0x19, 0x8, 0xffff, 0x8, 0xa54, 0xe, 0x8f, 0x1, 0x100, 0x400, 0x8, 0x1, 0xe, 0x7, 0x3ff, 0x7, 0x3, 0x9, 0x40, 0xb, 0x5, 0x3, 0x593000, 0x0, 0x3, 0x1, 0x3, 0x3caf, 0x100, 0x8, 0x7ff, 0x1000, 0x81, 0x7, 0x1, 0x9, 0x80000001, 0x8bcf, 0x80000001, 0x7, 0x8001, 0xfffffffa, 0x1, 0x3, 0xffff77d3, 0x6, 0x4, 0x6, 0xbb04, 0x8001, 0x5, 0x0, 0x5, 0xa979, 0x8, 0xfff, 0x68, 0x3, 0x1, 0x9, 0xf07e, 0x1bea, 0x6, 0x1, 0x6, 0x3ff, 0x8, 0x3, 0x5, 0x10001, 0x80, 0x3, 0x2, 0x100, 0x9, 0x1, 0x0, 0x8, 0x7df5, 0x2, 0x2, 0x9, 0x844, 0x6, 0x2, 0x7, 0x2, 0x5, 0x8, 0x0, 0xffffff00, 0x7, 0x2, 0x30, 0xff, 0x6, 0x8, 0x9, 0x3, 0x7, 0x4, 0x8, 0x2, 0xfe7b, 0x7fff, 0x7, 0xef4, 0x6c, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x8000, 0x200, 0x10, 0x81, 0x1, 0x2, 0xfff, 0xf, 0x10, 0x1, 0x0, 0x1, 0x35, 0xfad7, 0x7c09, 0x2400, 0x5, 0x2, 0x6000000, 0x8e, 0x5, 0xffffffff, 0x11e9, 0x2, 0x8, 0xf202, 0x6, 0xffffff98, 0x80, 0x80000000, 0x3, 0x8000, 0xc6, 0x7, 0x362a, 0x1ff, 0x2, 0x5, 0x3, 0x6, 0x6f7c, 0x7, 0xf, 0x40, 0x8, 0xff, 0x1ff, 0x7, 0x3d3c, 0x3, 0x7f, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ff, 0xfffffffe, 0x3, 0x40000000, 0x6000000, 0x5, 0x23, 0xffffffff, 0x0, 0x2, 0x0, 0x3, 0x5, 0x8, 0x3, 0x279, 0x6, 0x4, 0x86, 0x4, 0x0, 0x444, 0x4, 0x4ac, 0x5, 0x200, 0x7, 0x2, 0x10, 0x2ab, 0xfffff522, 0x3, 0x8, 0x7ff, 0x6, 0xffff4fc2, 0x401, 0x1, 0x7, 0xd02, 0x80000000, 0xff, 0xffff, 0xe74, 0xffffffff, 0xc3b, 0x8, 0x3, 0x8, 0x7, 0x8000, 0x0, 0x0, 0x37b0, 0x1c80c, 0x9, 0x7, 0x6, 0x7, 0x7fffffff, 0x5, 0x9, 0xffffffff, 0x2, 0x1e, 0x4, 0x9, 0x4, 0x0, 0x42e2, 0x5b5, 0x0, 0x3, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1, 0x5, 0x0, 0x7, 0x1, 0x0, 0x2, 0x3, 0x0, 0x10000, 0x2, 0x10000, 0x2, 0x7, 0x3, 0xb, 0x10000, 0x2, 0xb606, 0xfffffffe, 0xffff, 0x7, 0x81, 0x4, 0x9, 0x4, 0x2, 0x7, 0x6, 0x3, 0x3ff, 0x48, 0x4, 0xc, 0x4, 0x80, 0x100, 0x4, 0x80000001, 0x800, 0x81, 0x3, 0x100, 0x8af, 0x3, 0x3ff, 0x7fff, 0x2, 0x0, 0x1, 0x6, 0x888d, 0xfffff000, 0x7, 0xfff, 0x9, 0x8, 0x3, 0x6, 0x0, 0x653, 0x4, 0x81, 0xadc, 0xfffffffa, 0x0, 0x2, 0x6, 0x10, 0x1, 0x5, 0x1, 0x3, 0x8, 0x4793133a, 0x10001, 0x9, 0x671, 0xffffa6ef, 0x7f, 0x0, 0x80000000, 0x8, 0x6b21, 0xe0, 0x7fff, 0xef66, 0x0, 0x8, 0x2, 0x3, 0x4b8, 0x7, 0x4b, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4, 0xbdc, 0x8, 0x9, 0x6, 0x10c, 0x9, 0x5, 0x1000, 0x9, 0x7, 0x0, 0x1, 0x5, 0xf, 0x2, 0x1ff, 0x5, 0x8001, 0x2f5, 0x7, 0x200, 0x3, 0x80, 0x6, 0x2, 0x8, 0x1, 0x40, 0x7fff, 0x5, 0x8b08, 0xffffffff, 0xfffffff8, 0x5d8b74c3, 0x8000, 0x10, 0x3e, 0x2, 0x7, 0x6, 0x8001, 0xfffffffa, 0x401, 0xff, 0x1000, 0x7, 0x40, 0x7, 0x7e, 0x9, 0x7, 0x1, 0x79e, 0x862, 0x7f, 0x8, 0x1, 0x2, 0x1, 0x0, 0x7, 0x8, 0xfff, 0xfffffff7, 0x1000, 0x8c6, 0x8, 0xae1, 0x1, 0x40000000, 0x9805, 0x3, 0x6, 0xe49, 0x4e, 0xb, 0x8, 0x200]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7f, 0x8, 0x8, 0xfffffffb, 0x1000, 0x8, 0x1000, 0x9, 0x2, 0x3, 0x397, 0x9, 0x7ff, 0x101, 0x6a5, 0xf, 0x3, 0x8000000, 0x2, 0x400, 0x9, 0xfffffff9, 0x9, 0xf, 0x2, 0x1, 0x1, 0x9, 0x7, 0x1, 0x3, 0x4884, 0x5, 0x8, 0x6, 0x0, 0x100, 0x4, 0x3, 0xa9c3, 0x4, 0x8, 0x3, 0x5, 0x7, 0xb189, 0x0, 0x8, 0x200, 0xfffffffa, 0x100, 0x0, 0x4, 0x6, 0x6, 0xe99f, 0x2, 0x800, 0x6, 0x200, 0x4, 0x96a, 0x6, 0x101, 0x7, 0x6, 0x6, 0x5d, 0x9, 0x8, 0xdce7, 0x7, 0x7, 0x5, 0x5, 0x7ae, 0xa284, 0x7fffffff, 0x100, 0x6, 0x5, 0x4, 0x8000, 0xd, 0x80, 0x8, 0xfffff688, 0x7, 0x1, 0x1, 0xd85, 0x9, 0x7ff, 0x80, 0x1, 0xfffffff8, 0x8, 0x5, 0x6, 0x81, 0x7, 0x6, 0x7ff, 0x7ff, 0xf, 0x5, 0x1, 0x20000, 0xff, 0x1, 0xa19, 0x10001, 0x6, 0x3, 0x1, 0x7, 0x2, 0x3, 0x8, 0x9, 0xfffffffb, 0x40, 0x7, 0x1000, 0x0, 0x4, 0x7ff, 0x4, 0x8, 0x5, 0x3f2, 0x1, 0x8e, 0x6708, 0x5, 0x1, 0xa8f, 0x6, 0xbeb0, 0x9, 0x0, 0x3, 0x7, 0x1, 0x2, 0xd, 0x7, 0x6de0373e, 0x0, 0x0, 0x114, 0x4, 0x6, 0x5, 0xffff, 0x5f06, 0x8, 0x7, 0x26a, 0x971a, 0x8, 0x5, 0x7fff, 0x3e, 0x3, 0x0, 0x2, 0x7, 0x5, 0x4, 0x2, 0x7, 0x7, 0x3, 0xa789, 0x2, 0x0, 0xffffffff, 0x1, 0x6, 0x4, 0x2, 0x8, 0x40, 0x0, 0x4, 0x4, 0xe45, 0x8, 0x4, 0x0, 0x800, 0xfffffff8, 0x7, 0x101, 0x6, 0x7, 0xc, 0x0, 0x8, 0x5, 0x40, 0x6, 0xce, 0x0, 0x1, 0x3, 0x3474, 0x0, 0x1, 0x321, 0xfffffffa, 0x3, 0x6, 0x0, 0xcd, 0xffffe260, 0x5, 0x7f, 0xfffffffd, 0x4, 0xffffffff, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x429, 0x7, 0x8000, 0x10001, 0x4a, 0x1, 0x8, 0x5, 0x4, 0x8, 0x80, 0x3a, 0x7fffffff, 0xb, 0xffff, 0x20, 0x2, 0x5, 0x101, 0x1, 0x1, 0x1, 0x583a, 0x2, 0x80, 0x2, 0xffff8000, 0x1]}]}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000002c0)={0x81, 0x0, 0xfffffffffffffff8, 0x1, "93b5958bb1c08c9ce2b907310b16d90a70e74d38595c21383cb345503e138b70b340a8de93ca882be065961828baf2bd4d6212fe3b084036bec8e1ce358e3a0c57b3686c0db2e159aef57b477606ede4af000e9ee0cb5b623686e79f995b4b111855c27ff0553a6d26"}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$sock(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) (async)
ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async)
socket(0x200000000000011, 0x2, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040)) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
socket$unix(0x1, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)

2m8.940161381s ago: executing program 0 (id=79):
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x3a512d250812dd54)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) (async)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "8b1500", 0x40, 0x0, 0xff, @private0, @remote, {[@dstopts={0x2f, 0x7, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x8, {0x3, 0x0, 0xf, 0x5}}, @jumbo={0xc2, 0x4, 0x909}]}]}}}}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
setresuid(0x0, 0xee00, 0x0) (async)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) (async)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000004000000800000000100000000000000fbc63d518a1eca4d6c1e45d40fce64e793893640242836e2c5b51059615174e8441467ff8abdf9d1893d6f9bfa8d1425cf24545d06508f407a13700f7999cd3553fdf4206ec008e022a7a83ca2d28cd5553630754e9b80f8454a3e8ebb10c47f3adad273568a46cebcd8169a1e98bb6eafbb20452f0a4f710a7fbe7edcd978c423138dcdf80956e746ba1e3d226e5bde94d60bd2d34398e269ddcc374c830cd783f3702be5d479872ab90fd355c04b4f885f844c00"/214, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r4, &(0x7f00000005c0), &(0x7f0000000740)=""/218, 0x4}, 0x20) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r5, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, &(0x7f00000004c0), 0x8) (async)
capget(&(0x7f0000000300)={0x20071026, r6}, &(0x7f0000000640)={0x100, 0x6, 0x2f, 0x4, 0x2, 0x4a}) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000002, 0x8010, r8, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[]) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, 0x0, 0x0}, 0x20)

2m8.86114895s ago: executing program 0 (id=80):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0) (async)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000440)=[@nested_load_code={0x12e, 0x5a, {0x2, "430f18820000000026f2afc42139d22d00000000c744240010010000c744240203d61615ff1c2466baa000ed66ba4200b054ee0f3766b895008ee8410f22d60f01c1"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x2000082, 0xfea}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5f3, 0x1, 0x14}}], 0xd2})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_init) (async)
getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000200)=""/65, &(0x7f0000000040)=0x41)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000540)="8f8860cf0d90000000000f01be0030000048b800000000008000000f23c80f21f835040070000f23f8b805000000b9300000000f01d92e460f0966baf80cb838d1bc8aef66bafc0ced0f01c566b8e3008ee0c74424005e000000c744240202000000ff1c24b9800000c00f3235001000000f30", 0x73}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r6=>0x0}, &(0x7f00000003c0)=0xc) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x66) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "1bee7acceb419df7", "b33cdb74eb899202203de4405872d39283cbaa9b5a503ee6e9014339b7aef850", "344745b9", "6c9ad2066f0b1807"}, 0x38) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r7, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) (async)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
recvfrom(r7, &(0x7f0000000140)=""/146, 0x92, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000400))

1m54.229971725s ago: executing program 32 (id=73):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setns(0xc9, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
sysinfo(&(0x7f0000000000)=""/196)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff)
write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r4, r4, 0x0, 0x9)
socket(0x2a, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
close(0x4)

1m53.812865469s ago: executing program 33 (id=80):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0) (async)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000440)=[@nested_load_code={0x12e, 0x5a, {0x2, "430f18820000000026f2afc42139d22d00000000c744240010010000c744240203d61615ff1c2466baa000ed66ba4200b054ee0f3766b895008ee8410f22d60f01c1"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x2000082, 0xfea}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5f3, 0x1, 0x14}}], 0xd2})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_init) (async)
getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000200)=""/65, &(0x7f0000000040)=0x41)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000540)="8f8860cf0d90000000000f01be0030000048b800000000008000000f23c80f21f835040070000f23f8b805000000b9300000000f01d92e460f0966baf80cb838d1bc8aef66bafc0ced0f01c566b8e3008ee0c74424005e000000c744240202000000ff1c24b9800000c00f3235001000000f30", 0x73}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r6=>0x0}, &(0x7f00000003c0)=0xc) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x66) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "1bee7acceb419df7", "b33cdb74eb899202203de4405872d39283cbaa9b5a503ee6e9014339b7aef850", "344745b9", "6c9ad2066f0b1807"}, 0x38) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r7, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) (async)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
recvfrom(r7, &(0x7f0000000140)=""/146, 0x92, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000400))

1m50.900352362s ago: executing program 3 (id=186):
r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1})
r4 = syz_open_dev$media(&(0x7f00000000c0), 0x4, 0xe8840)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100)=[{<r5=>0x80000000}], 0x0})
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000140)={r5, 0x0, 0x0}) (async)
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r7, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6ec4, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="03a5fff1abec"}]}, 0x34}, 0x1, 0x0, 0x0, 0x842}, 0x4000000) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x29, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in=@remote, 0x0, 0x3, 0x400, 0x0, 0x2, 0x0, 0x80, 0x32}, {0xa5, 0x7, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x200, 0x3, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) (async)
prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={<r11=>0x0, 0x2, 0x7f}, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r11, 0x4}, &(0x7f00000000c0)=0x8)

1m50.840205227s ago: executing program 3 (id=187):
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

1m50.778911036s ago: executing program 3 (id=189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'erspan0\x00', <r1=>0x0}) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xe, 0xd}, {0x1, 0x2}, {0x6, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0)

1m50.640417325s ago: executing program 3 (id=191):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x141400, 0x100)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @empty, 0xa}, 0x1c)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x141400, 0x100) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @empty, 0xa}, 0x1c) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) (async)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async)

1m49.858007712s ago: executing program 3 (id=193):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r0=>0x0})
r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/icmp\x00') (async)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) (async)
read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020)

1m49.584867425s ago: executing program 3 (id=195):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_deladdr={0x58, 0x15, 0x100, 0x70bd2c, 0x25dfdbfe, {0x2, 0x18, 0x90, 0xc8, r1}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LABEL={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x215}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24040005)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0)
sendfile(r3, r3, 0x0, 0xc)

1m49.488262782s ago: executing program 34 (id=195):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_deladdr={0x58, 0x15, 0x100, 0x70bd2c, 0x25dfdbfe, {0x2, 0x18, 0x90, 0xc8, r1}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LABEL={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x215}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24040005)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0)
sendfile(r3, r3, 0x0, 0xc)

1m39.350487479s ago: executing program 4 (id=281):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)

1m39.073142101s ago: executing program 4 (id=283):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r2, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0))
socket$inet(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
rename(&(0x7f0000000000)='./dev/sda1\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20443, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, 0x0, 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f00000000c0)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')

1m38.529004662s ago: executing program 4 (id=287):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c17c10d8c744240004000000c7442402ab5e9cd2c7442406000000000f011424c4e219a68a10800000c4c17e5b2f0f01112e650f32c4e3b15e650000c4e1bfd00a660fc7b12a9800000fc77e04"}], 0x1, 0x6d, 0x0, 0x49)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0xf000000)

1m38.069339584s ago: executing program 4 (id=291):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0x5)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x2000)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$selinux_validatetrans(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x2ea02, 0x19) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x2ea02, 0x19)
write(r2, &(0x7f0000000140)='1\n', 0x2)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYRES64, @ANYRESHEX=r0, @ANYRES8=r2, @ANYRES16=r0, @ANYBLOB="b9609b02e780c2a84d20d9de0251ca04ae81e8af140731b139390a4678ca018785c7734bfafcfc01a269fe3ba54bdb0db31becd2346b5549cedee49ff5c1b98756d2fc29d34511597afb24772b134d15d92c9e5b8f55939b7b324f47c8dfbee09b7b3fde9b40a43f1206ff02915dcfbf16ef1561dbe80edd24883534add7805fee4c22fba42500a35282be2efa4f37714c685d15960ad041719ed6827668347d63645d03af4a51cc5017fc20ece79fa538bd7d72ecdf5b09f70c1c4c3927bbfe154ed9bb2a32470a5a27b6134c50a8ab42af1415608324cee5edb47fae6c39fec30f19efded949a737a139786725e3852a173f88454a6dedd5984e54db58f17bbc1265791282fd4a9be061c7b833e3f5fec56fa7143b823d9bdcd045277fb132699ab6bc30c49bfc7f6cda96f9418dfb125bcefef5cca52e24bbd87add9897b1c3e56a039107c225faa0f17f4d0ebaa1e167a6047e0669ae1aa146d15b877c5827280be430b84b7523fb0fe33fd720cebcbe1d2f1691fae55be677eeb69e9c3025e62ac9541133abe1f73f80d0e413dd90855556af9e7d7741613f73cfd4f32f77ed9afc82fb7bab608d06c9c4e29cdd26b922fa60cfa9c29fc9ca075cc8f42e91d8d5988dbffba1e6f95d330af980e92be0cf0b845a2575d405da2a61322c9fbdf47304a070a58552bc455e9dc473128e6c6dad4d75057acb6f9e845453481282b97b604966c20f91049550dee4af349c3bb0d75f2695c3a52944b07584e2713402ca640187c796d7a203963d3471d621913e4879274644ff8939b99508f1b59d5eb8dfc65ca3008e7f35c82e1aa9d7dfe95ce1d10e313ccba58db1b881b074027d6a8d8540aeb6cff37f4922258c2bd910d81feb616985af2d4288ad415ea6962f09182c13939c4f59211d3a92ac4f4b11b85e35aa5b0189c5963542896b6ab08caf299cc0f7f77265d86b871ceacc5c164829521696f7deb0d4cfa883c238586597bd3b040fbbc89ecb5c642b870b1da63ab0809b9d20291b2d0b0b8a586f364ddc743185fd77f79233d47a98a379081b0a0a0f70b21723293fbbc7d141d676ec6f1df89f415591c78f8a6bf3f881cf002b6740a56fb91cad51cf7899e2c48375f7db09a631efeb5b3c90011d30252148172ae82655ad838c22b202763234e53a811c22c3ce7de53901a1df798d1bcddde6fd2a33497898ddd41120209666ea45626e63cf59cc1d2d6c46e59b76af3972257fc9077e49939f39a6c8d358f5c58fcd09e3875ee8f18ac43bca3b3c7102642efee5d241b85827d4ffb6d2437035b6154a66f7cf56a27b44e443fd2a4dd256912d2f066f1298b83733f2047411f567fa79e29d8cbaf3ee9314a7c8517ff67695ad4f35ea6ba1408d82fb015cadf147708fc2b4477e18699cfdef1e68e8f58ca48b12aefc3fd8370503a96dc81b67a3188c058b1c12a42af2039e63ae688f98e7cfeca261e11f5ccfeb5260218a59a598b9273c4656b379e05bc8f8830ea552807c352e1c05f4c6869dc32ebded19944db89b8eaba869c9eabf767589c1a153e8ce92283d99ed84be55f4278b10d5483d3063ec43da7d2d2db2f5cf5532a29b1cc295f992fef561dee1cbc70daab103d62606909e56ec963576db39aa798604d8463029cb5e712b445943bbf0d9d0ba44f55b88d2d0378df0031960a923599197e75997349bfc2f2dfd65f4712dcb3ce4166edebc3e0618025a597e2f4e21ce87e6da4b223be735764155066fe8ae008fc2c0e3d239c5c35ec714a751a8bfaaa5a5391eb6d044ae9edf865b891875a4b5404c0aa56fa4b1a28d1f933a2531b0cd6aa39b82fbc279fa9a87619b06ce275622d4fc5d2a7febb83417da6b3f3094551855c45c7072e085ebe52168b95b81c6b20233a61497289b003666a7c609249e5d284da5cfd1a985b290b84b00ad1070e16ed47ecf617d0e2949eda85a1001af7ed5d3a65f88cefda64cd894d8a79a762668c6e87e5a32f2dffffcec2ef3c92ebf4c5b3d22e20e4938ed0d6e90b40720fb0affa7b19873cc23d2d1d7bdb7b7b86e29a5006aad0c9e1024b0c79369bc00fbb6b26451c968751299dba3aa9ff0bbae1eed274fdd3fbfcb2eb173f5deeed76b6d393314c6ac70407c9278714cddff7494029b2a6199c315995818865fd4f40c9d0875584b8993e2dcb1a95b6f06d2e546bb1d3e27dce5949194a42f8d2c29af082f5575e9568da163d9e0927d63d4a658bf67ff6b0c6db33574875d87a12318cd9c4375d90fde750a4e095d46000dd960fe727e4b9d2b446dff810e6921b0a4e8455f49f9c3ad24163e20db9994df5d83d0b59d2b306961896b7702ffa8bad7ba1c2a59d96829c59ecfe6392a2816ab5485ccdd45e0d0b50dbdea06c34181c94df804a7eccdcdc0ad77cf0fe39dd6b3234799953656c8c14b5ee1ac05f4e71c5b6c7f7e98dbbe94e079e2692e867f96f449b15ab3a74a41d9a68655ae7617c23ebc4313e613b69a05d82bfaf9b73508943998a53f0a05b4fc6d6c482c91d25afd66d2d3b8519ddd75437c7218f6bc4da3d1a371877886f8d64ede7598541c41c303f923572a363e13c1e3c6fe141203fa2b6b3dab5f97e3a7d3c18e930c2695892af92cc3c9d4825b861c47072d475c36836c872378ee65d093667f01fc4159e4066d1730ed2b4bd7a724b3be368b53406a4022c3f35e3485b245ee02efb7b459e1fa3489e464803cf4aaa89655c1109b178c9c3a5e540fe6078942bbf1da19dffa996406e0e0061bb583f32a629eaa17f2c7d551717f5d78f9777c20547e4587a117fa12448012aef3b8f1aeb572bdf001cb084c95810a6c74518904a4ace75dddc80b8ca5874a3dc6d57a1edc35641e7cdf26212f4ca4a87368df021ab240073ceb31190c2ed885d32a23ffe500fbfffed180df5762c18d3cd7e52f18f2720008236dd9fd8a1fd47af97d6554023a2eeb53d76317f564ef87b6c1b5d67f7f3d2e3f31ea1ba014761f440e6c9281ba9825545ac686df6edb730d7b1bfb39e465abdbb810b65acb167aeed685d4e18814014595f31582bde07cd7b2dfe7e5948396e02a785195c10e6544c252d7960f73c1e06541f7989af5c4513249b96e8eacde8c66ab18d35f5ef064d042c8cb3a175179e40231254d069dc3ec14db0686f0773cc199fe95969b99d4101100b201153d3f422b7ba6097d26f5b89a698c2dd91a5ba471765a20da52ae7cb11b50006d29bb0dec5c5a950727cd98bca0a6825c2224cbf3eef0f91b77834c7cd9cdd687a0d22187e1cd793666803018e7025b687f7c695c9eeb423b6fa6056caeafe7bcb162d614243f64c65bcfa7f37d1641f772fe39eb19b2fa3c1b82b078ebde14b9d6d37f3cefcf9c81e268719f3fed7e216af80dac646454b157e52572d849dcb6091c633196af3019f5ef862aa215a58c0d249cc02a53967ec343d5c6f1ebdfbfeed48b8a10343c94cff4d8cf786d1f396ceea42f1579f321120b595f9016a5111965b0de9a7ea4f2c46f66cc8422af418569a9d22d7cfcf52b508222a02f47f13099ffb4f7321b48e188d700c8b40ce20f71c82790fce2fe28ce8c0e5c79284466b79503c58641276495696d8c342ffb068ec1eecc63764a8a1af7fb5b4abd7523f8753d734c69f392f4a4a0fb1e55789e9be46608f37c6def582ee58ba5f25c3487c8ffdda958b68cf9aaaa18960cc584bdef7c9c6e7c2b9bd5ee8429e134bdd698206937be5a6ea4fa84ca2b2be651a407ec8b6bc85570ab0668569f3aec7cf2ebd8640f25f191883d143e654a49e5d976f661bbb683ab127354da2ddc4490dfe588b3b58e431d3584f9ab4671290dff20bea72a24aa5cd9de606a513305448ec7b42a0e8455672e8d275598757b50edd275673865951ee19bf53bad0c36b1861b5dbe55eb5c79ccdd2f6a0734b2ddd25b12504ab941808da3dbae96d728cdc375b3c0bf2af1a7505a18457dea2607d1cc63aed624e4318c34d73238c74b8174eb90f3131a6a130e772ed201e13a34b2e59173d309e703c8a206a452fd3392b8e1c7600c1171a362a8f39772b87f0db8d9f93f5afe84aa6408abc5fb1903368092aa4bd73176a3f834928e2aac3d57e2a18c0f5a31d9d2f2f0775d9701b38723c58fce59e4febcf0dc1e5058fba36cf95c47764f516160388ea9c3ed4c07fb47b08a1aa0207cdf7aba67d2f16ed3b78f19d0a165b0ca5e9fe5fde48a5a2affe17e5cae77c7a68dc54b7e9f57cf54703d9b74188e6335ac4c5400ff9e752b846d50030c16697e8a0d68c59750539844d523db8711eb6920bca1a32055e7f4a0b15de52285864e10746573541cb51194bb67a5c939b24c04b2a9b9a85c22fc406d81aafd2c7a17a9a1f2005c54e808d1eb1dbdbe6f0f0f95649199cf0249d36bceb19989a6ee51c88b9fa3cf585fe042048108575def109971efb74f119bfde6c44ddcbec59b26e83fce7637f92b1409c4428077af4e7c01bdf02fedd9e822614f57dfff5bc3246cc79691737bec7a5222082b97c2d652ed151fc1a9f54b58d7f4c25c251fa808ed5ae238c259f9118cb9362c27891c4b17b5693e90b3252ca950af830760c01f6f5924af291070acce07ce0ac876cc3752932da11dda444c475c16ff833e80f4beea6193664ae85a05fa64b1bfc29a1491fd6243f27495e378295dd6911655089ea5b64dea917ef4f4c06f050f4730e328eed5cfc48721fa9f5c7092b34d8e197b92d9fe511ed773e912e2e8e362c198f844962eae688b998fed49dc12a9cc89dc7293fba104b426a6c6e002e343e76fde6c664e39a7802da3b8b741c8824f9660f38934343938a2ceb227fcb2e3aacdb21d1700aefe45ad89f45535939119618b78ecc231cf141dd446e1cbb20843c6ec0fcd3ae470ae7f3234ea6838a93479b49608b73462755810b0ed01b623a4526cf605a833dc5c2f921f63820459ffc0444b47f7693df07c0e4bdcbfdd3939921260d181472ac3f7cf93969d63ac7489282eb27dfa197db145a3a38c4fd49fe12c4c942480b251e4a1b6857f52df3e798f4b65343461474c7391faff3c42e1b3a883a29ad744bb7ed5731d1d7cd7edbda8736d752794dc92383ad0892117833b66cf92d89dc6495be03915effe4ce14ca5600a2e7f0201cf6fb2c8d0eefd13ec467d16b45088f954d804ac03876a91f8e343e0ba6befb815e80b5d817a7bce534909ad32905635780f4f5d25292dfa536fa51e735597071698a7b114a5a3a1afc61c12bcc47aa27feb85e06a72a05a0c528cb29c934351f183b33d41c628b9cdeba34d57c9cf5f5b1d5e8cacc7524a8d923a6c3ca15ff165f4d59fda3252d6007e347b34d0515f52cc662adb1aa05da55aa8f144fc34a4161ad8bf2e5f3afe629e48f05b73467154a607ffc9acf7dc8d3b0f85567d7ac4de9ed8e3ad086e2b562ef88af6e75a8df19d2314025ffd62500dcc33ccab47f18a85a47de594490f3f51d6158a506ce023ee4e3a53c8a10c4125c863f82286204f5645ebd4b29961734a08a3fca214e579f9cd895ae64306b292fcca0146cf7ded154709bb4ab74ebae7b913a5428dea5871599d11cf09944ae52208fe5068c91f8af2374088ebc6f39806d3cddce0309603e183c4bd722d7d225917b3c079a04946cb88c4ad5a103979b8dbeb431470f5a93bf405c415bf19c175d8819101722d0d455b3f8f7220fcaaaa3b1b3be60c7a5a490b336c4bb461796af7ac03e46e3399ad32dde45d674ab427e3d6b5abb3d74a0441f8d793b3b3f8a6ff24"], 0x48)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) (async)
ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000fcff00012a0c000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r9 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r10 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r11, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x2}}, 0x30)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r7, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r7, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r3, 0xffffffffffffffff, 0x2c}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r3, 0xffffffffffffffff, 0x2c}, 0x20)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f00000001c0), 0x10) (async)
connect$can_bcm(r12, &(0x7f00000001c0), 0x10)
setsockopt$sock_int(r12, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4)
recvmmsg(r12, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x9528}], 0x1, 0x10022, 0x0)
setsockopt$sock_int(r12, 0x1, 0x23, &(0x7f0000000040), 0x4)

1m37.028489596s ago: executing program 4 (id=301):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
r1 = userfaultfd(0x80801)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc)
getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000)
r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1})
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x103, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0xffffff95, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0xc1e, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x3, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0xffffffff, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x3, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x5, 0x401, 0x74db, 0x400000, 0x9, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0x7, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0xffff8000, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x7, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0x2, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xcd46, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x4, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x5, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0x4, 0x9, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0xf, 0x435, 0x7fffffff, 0x2, 0xe, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0xfffffe01, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x5, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0xaf, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0x4, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x8000004, 0x6, 0x0, {0x9, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0xd, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
r8 = syz_clone(0x100000, &(0x7f0000000100)="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", 0xc00, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_ENCODED_READ(r7, 0x80809440, &(0x7f0000000f80)={&(0x7f0000000f40)=[{&(0x7f0000000d80)="22b613c21d87a83d9d46ee133df707d9df7fb47d833cd570d8a5c75ba557f8d4a2a0bf074405364c78a973e122852a06fe5b6299d1fd483c2479c63fc450d97618da99575a447d85451181100e0cc4d2d916468424216cac207fa007af72b491c3944462f285c3289f2f8e4e4aa7d253590c2f042df11438f235", 0x7a}, {&(0x7f0000000e00)="2466f17fbf9b59aed18dc1701ed05a0c1d727dd5dadf3fbc07082b7e0dbf6c956061e0f12671043422a715c544f90e4777ca1ba545ac450c14fcce057d61fcc8fd5434bc147fc4aa4ecf3ad9fe3b09af3ec217e5dd18993632ab1a619c57333cc6dc64d50aad0469a2d454eb1d382e8412d7d54c7aaa87934f770e2f", 0x7c}, {&(0x7f0000000e80)="e3b3fe0d3d1d9443b722", 0xa}, {&(0x7f0000000ec0)="2f80bde4fdec9b6abc719d2c86ce746c273cc8c34e30ef0c074e0e39920bf01af5fb8d157b48c4f9992a834640f949eb78269460347d368a0083f1fa808f327993818e3e3725e78e227c", 0x4a}], 0x4, 0x9, 0x0, 0x0, 0x7e0, 0x6, 0x1, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
setgid(0x0)
process_vm_writev(r8, &(0x7f0000004180)=[{&(0x7f0000003cc0)=""/115, 0x73}], 0x1, &(0x7f0000004240)=[{&(0x7f0000004200)=""/12, 0xc}], 0x1, 0x0)
fcntl$lock(r5, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x100000001, 0x8, r8})
write(r0, &(0x7f0000000000)='7', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))

1m36.025863987s ago: executing program 4 (id=306):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85320, &(0x7f00000000c0)={0x80})
prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
r2 = openat$ndctl0(0xffffffffffffff9c, 0x0, 0x24441, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x0, 0x6}]})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='.'], 0x14)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000600)={0x0, @reserved})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)

1m20.908367668s ago: executing program 35 (id=306):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85320, &(0x7f00000000c0)={0x80})
prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
r2 = openat$ndctl0(0xffffffffffffff9c, 0x0, 0x24441, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x0, 0x6}]})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='.'], 0x14)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000600)={0x0, @reserved})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)

1m9.580368634s ago: executing program 5 (id=495):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x8, 0x87, 0xffffffff, 0x40})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) (async)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000140)={{0x47, 0x8000}, 0x8}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

1m9.480380585s ago: executing program 5 (id=496):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141243, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r3], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "9fddd1d423dd8ed57fb5a9ea65ac83344f13b12a606fc0c7", "8e4dc42175fb73d10af31ed8e4c97724ae16c313345e48955ed23c689c58b2bb"}}}}, 0x6a)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014000780050015000c0000000800084000000090050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x37fffd, 0x8, 0x8, 0x4, 0x4, 0x8000], 0x1, 0x3c4210})
r8 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10)
write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x114, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x6c}}}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f63bfdb15e5b9b4b2f1a9f17cd6fee9d3d26f16847b8b58ee408e20bf2a5414b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bb4c4cb91f6d401cae1b6f40596c0280"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7a0053a4d87be7359399ffbaca2fe97137c5ddf5f3fa0fad417703245c9a2239"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="092c900372a4f2a03884dabe53eae102"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9b079a4b4cecef3b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a331ff3fe7f87f91e3442657399e95fefb1506e55b88be46"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6dfca0912322c2b4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a00e72e2a10c11f211c82aecf6244c12"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "de711ab833fbeacc"}]}]}, 0x114}}, 0x4000000)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m8.628167676s ago: executing program 5 (id=502):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), r1)
sendmsg$NET_DM_CMD_START(r1, 0x0, 0x20000800)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x409, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffd12}, 0x1, 0x0, 0x0, 0x4002}, 0x20004000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$ublk_chdev(0x0, 0x0, 0x480502)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r4}}, 0x30)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000380)={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0xe)
sendmsg$AUDIT_USER(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c000000ed03010025bd7000fedbdf250809000000bb19f3e217efc1b3c86678e937630e9cb3c939ab2fa397073c769c065c43c5e4c4abe14ee3d4d04c8d4a18e20269866951e768a1c3604c7510a4b297bd627a0ecea5d564a7e27c9ed718d647ffa047f3293974c30000001de3618c10"], 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x801)
r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00')
getdents64(r7, &(0x7f0000000080)=""/95, 0x5f)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r8, &(0x7f00000004c0)={0xa, 0x2, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r4, 0x9dff7ffc}}, 0x4d)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xd, '\x00', 0x6, 0xffffff67, 0x7ff, 0x3}}}}]}, 0x48}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r10, &(0x7f0000000040)='system_u:object_r:audisp_exec_t:s0\x00', 0xfffffef0)
r11 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r9, @ANYBLOB="080004"], 0x50}}, 0x0)

1m8.469522967s ago: executing program 5 (id=505):
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)='e', 0x1}], 0x2, 0x3) (async)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1) (async)
setns(0xc9, 0x0)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
listen(r5, 0xda8d) (async)
accept$inet(r5, 0x0, 0x0) (async)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x103)

1m8.17821683s ago: executing program 5 (id=508):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
r1 = userfaultfd(0x80801)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc)
getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000)
r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1})
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x103, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0xffffff95, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0xc1e, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x3, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0xffffffff, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x3, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x5, 0x401, 0x74db, 0x400000, 0x9, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0x7, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0xffff8000, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x7, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0x2, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xcd46, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x4, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x5, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0x4, 0x9, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0xf, 0x435, 0x7fffffff, 0x2, 0xe, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0xfffffe01, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x5, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0xaf, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0x4, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x8000004, 0x6, 0x0, {0x9, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0xd, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
r8 = syz_clone(0x100000, &(0x7f0000000100)="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", 0xc00, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_ENCODED_READ(r7, 0x80809440, &(0x7f0000000f80)={&(0x7f0000000f40)=[{&(0x7f0000000d80)="22b613c21d87a83d9d46ee133df707d9df7fb47d833cd570d8a5c75ba557f8d4a2a0bf074405364c78a973e122852a06fe5b6299d1fd483c2479c63fc450d97618da99575a447d85451181100e0cc4d2d916468424216cac207fa007af72b491c3944462f285c3289f2f8e4e4aa7d253590c2f042df11438f235", 0x7a}, {&(0x7f0000000e00)="2466f17fbf9b59aed18dc1701ed05a0c1d727dd5dadf3fbc07082b7e0dbf6c956061e0f12671043422a715c544f90e4777ca1ba545ac450c14fcce057d61fcc8fd5434bc147fc4aa4ecf3ad9fe3b09af3ec217e5dd18993632ab1a619c57333cc6dc64d50aad0469a2d454eb1d382e8412d7d54c7aaa87934f770e2f", 0x7c}, {&(0x7f0000000e80)="e3b3fe0d3d1d9443b722", 0xa}, {&(0x7f0000000ec0)="2f80bde4fdec9b6abc719d2c86ce746c273cc8c34e30ef0c074e0e39920bf01af5fb8d157b48c4f9992a834640f949eb78269460347d368a0083f1fa808f327993818e3e3725e78e227c", 0x4a}], 0x4, 0x9, 0x0, 0x0, 0x7e0, 0x6, 0x1, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
setgid(0x0)
process_vm_writev(r8, &(0x7f0000004180)=[{&(0x7f0000003cc0)=""/115, 0x73}], 0x1, &(0x7f0000004240)=[{&(0x7f0000004200)=""/12, 0xc}], 0x1, 0x0)
fcntl$lock(r5, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x100000001, 0x8, r8})
write(r0, &(0x7f0000000000)='7', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))

1m7.457999683s ago: executing program 5 (id=512):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
userfaultfd(0x800)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0xbd746080ad707b60)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
write(r1, &(0x7f0000000000)='7', 0x1) (async)
userfaultfd(0x800) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) (async)
pipe2$9p(&(0x7f00000000c0), 0xbd746080ad707b60) (async)
dup(r3) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}}) (async)

52.23326776s ago: executing program 36 (id=512):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
userfaultfd(0x800)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0xbd746080ad707b60)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
write(r1, &(0x7f0000000000)='7', 0x1) (async)
userfaultfd(0x800) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) (async)
pipe2$9p(&(0x7f00000000c0), 0xbd746080ad707b60) (async)
dup(r3) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}}) (async)

6.435637963s ago: executing program 7 (id=928):
munmap(&(0x7f0000182000/0x2000)=nil, 0x2000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7040fedbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="09000000f1470d000094"], 0x24}, 0x1, 0x0, 0x0, 0x2004a0a0}, 0x18)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e)
close(0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
close(0x3)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x3)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x403, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffd, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0xb, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x4, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000000, 0x0, 0x2, 0x0, 0x3, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x8, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffff8, 0x1, 0x8, 0x4, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x5, 0x0, 0x100000000]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x14, &(0x7f0000000cc0)={{0x1}, 0x0, 0x0}, 0x20)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000ffdbdf250600000014000800"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000)
write$tun(r1, &(0x7f0000000040)=ANY=[], 0xb2)

6.079546758s ago: executing program 7 (id=931):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x4, 0x700000000000000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x403, 0x6})
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf2510000000140001"], 0x28}}, 0x4000080)
syz_usb_disconnect(r0)
ioctl(r1, 0xc4c85513, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
syz_usb_ep_read(r0, 0x7, 0xcc, &(0x7f0000000500)=""/204)
mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@sha1={0x1, "c1129c3ff1ce5e51f15e8ebc45e90cbd8f743113"}, 0x15, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0308000000000000000007000000090001"], 0xc8}}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x24)
write$binfmt_script(r5, &(0x7f0000000740)={'#! ', './file0/file0', [{0x20, '/dev/vcs\x00'}, {0x20, '/dev/snd/controlC#\x00'}, {0x20, '%!\\:]'}, {0x20, '!-*'}, {0x20, '%\x00\b\x00\x00'}, {0x20, '$$%'}, {0x20, '\xd9\x98\xa5*.(&/%'}, {0x20, 'lowerdir'}], 0xa, "067e2a64f311b1cccaed8201b22af8bd71211b7941702b3e6c5993c890533d8e6d280bd9426b4a8f4098d5eceb81f9878b9eb54773c2aa4eeec8ecb904eb379501267c8e05f2a3483eeeab26250deab4fd46a322dd5d9679eef1f9ae10d6ac320fa0163691d693551d9dfc2222b6cfbc51018d8f1270cc577af274063048a5c3"}, 0xd6)

4.137570471s ago: executing program 7 (id=948):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfffe}, {0xfff2, 0x8}, {0x10, 0x6}}}, 0x24}}, 0x2000c085)
accept4$vsock_stream(r1, 0x0, 0x0, 0x800)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
rt_sigprocmask(0x2, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r4=>0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = dup3(r3, r5, 0x80000)
r7 = dup(r6)
read(r7, &(0x7f00000014c0)=""/4096, 0x1000)
timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r6, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x91a, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0xfffffffffffffffd, 0x3, 0xab], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r11, @ANYBLOB="0100000002"], 0x40)

2.629050813s ago: executing program 1 (id=960):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0x850003d1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
vmsplice(r0, &(0x7f0000003740)=[{&(0x7f0000000040)="0ab5cc43c69b5bb2c80246399a8645dffab1", 0x12}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="c0555c92100325ad251bc48bc15d0b24ba1273d51f845b138b8d452188e07715ef0b60a9ee377c919f5d95d62612db3b43ef72beca06f3aa31094df78ad51fa11df0fa0f3a66438c41ff70d39af0c57dfd20b9763e27c75f6cf874d407f4837493737a1ef784847dc0e4", 0x6a}, {&(0x7f00000033c0)="12786255fc2271a7c376aa18d0a57100250af1c7005dba5451f299f89d27", 0x1e}, {&(0x7f0000003400)="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", 0xfa}, {&(0x7f0000003500)="406ed49fb11d3c563e48eef0aa58caf123650a6391e3f52a567ded1edf4caec6ccfd7d111623ecfecf30daa91970ecf28c0af0f229c2fe0f32e5d4c87f6abe5a6852defa9f619c118461955b3a6e68e125e3a729cecd288f155f319d0469f9690342287678b773bd1807258c4f6efd98b5d72b7faeef99452921aad7ba14ea2ec9b2164de899ba097d85357ab42a690971d182343ffa4f1aa150d0066fa9", 0x9e}, {&(0x7f00000035c0)="2178970253f2c2ef9f4d14b364fbf8b57a6ba494308692de61a8d014c8343330c90dc4bd0ef2c89a1416444153f05de95249f4adfb7feb5208f983976fad0e53", 0x40}, {&(0x7f0000003600)="5a3fe181bfcb26070f5757c33c965564c7a5d0206499f15ce46671cd651088e7b75953f5dc972ac2cc51cd1e28168e76bca1184c90a58b7b31aac89e8b142a8761b29d6c687d444c8ad7c082cec080", 0x4f}, {&(0x7f0000003680)="9d0bf653b4586afe9896109f82534825e56fb7f65c7ee14f102f5b8d5cd0c29fbe5666d6532f54d796039a20d2a40ab62a30fe08358225dd68dbd8dff6a57b2c0de98a6d529ad09b634e907c0ea0e3c345f359ba73539f64a09612a51d768328fae0d61e532e76d1cdef03cd9df8ffa11894979d081e6e9e36acb38aa93276cedf2cbbc8fbb5484d4b", 0x89}], 0x9, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2)
pread64(r2, &(0x7f0000001300)=""/4118, 0x1016, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x22)

2.448599056s ago: executing program 1 (id=961):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xe, {"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", 0x1000}}, 0x1006)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5)
openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)

2.320168233s ago: executing program 1 (id=963):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000040)=0x5, 0x4)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000c, 0x2010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_usb_control_io$hid(r3, 0x0, 0x0)
ioctl(r4, 0xc4c85513, &(0x7f0000000200))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7f, 0x7fffffff, {<r5=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0x73})
sched_setscheduler(r5, 0x3, &(0x7f0000000080)=0xd)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

1.724419128s ago: executing program 8 (id=967):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async)

1.72408645s ago: executing program 6 (id=968):
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040))
read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8402, &(0x7f0000000180)=ANY=[@ANYRES32=r0])
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x17c, 0x1a, 0x1, 0xfffffffd, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@local, 0xfffc}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x4}, {0x3}, {0x0, 0x7}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x89, 0x1, {{'sha1\x00'}, 0x208, "3cbfd71c56bfe9361d559cf01c6654b099b32c0048344c16247c6463bfd17cae07092b5aa016ff5cecaf65f2a3f2b0bf5e52a5f316c7b7fa43647ee9c90faa33e5"}}]}, 0x17c}}, 0x8000)

1.570313187s ago: executing program 8 (id=969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x20004034}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x60002)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
ioctl$IOC_PR_CLEAR(r4, 0x401070cd, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r7 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000280)=0x60, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r8=>0x0)
r9 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x40)
ioctl$SG_GET_SCSI_ID(r9, 0x2276, &(0x7f0000000180))
connect$nfc_llcp(r7, &(0x7f0000000340)={0x27, r8, 0x0, 0x5, 0x3, 0x9, "a661876c4ecd163a86ae4064c0d9f94ee28a8a0bf8ecea7098c8a77f66752724df6e12890a5d5f6b16afb441f7a966ff4ee2808985bfaf43af83ea5f4b3927", 0x1e}, 0x60)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42404}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

1.497536536s ago: executing program 8 (id=970):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8d7892585e9ee32bea1f2f80081de153", 0x10)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x2c, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', <r5=>0x0, 0x2f, 0x7, 0x7f, 0x2, 0x3a, @empty, @remote, 0x40, 0x20, 0x9e7, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r6=>0x0, 0x4, 0xd4, 0x4, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8000, 0x7, 0xffff0000, 0xffd}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', <r7=>0x0, 0x80, 0x700, 0x7fffffff, 0x3ff, {{0x8, 0x4, 0x0, 0x5, 0x20, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @empty, {[@timestamp={0x44, 0xc, 0x1e, 0x0, 0x4, [0x143d, 0x1]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', <r8=>0x0})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={<r9=>0x0, @loopback, @initdev}, &(0x7f00000006c0)=0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vcan0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000800)={'wg1\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', <r14=>0x0, 0x4, 0x0, 0x1, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x7800, 0x0, 0x8}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000900)=<r15=>0x0, &(0x7f0000000940)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', <r16=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', <r17=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vcan0\x00', <r18=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', <r19=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', <r20=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[0x0, 0x0], ""/16, <r21=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x0, 0x6d, &(0x7f0000000b80)=[{}, {}], 0x10, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', <r22=>0x0, 0x4, 0xb, 0x3, 0x2, 0x20, @loopback, @mcast2, 0x6022950bdb78885, 0x8000, 0x8, 0x3}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r23=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl0\x00', <r24=>0x0, 0x8, 0x700, 0x9, 0x101, {{0xf, 0x4, 0x2, 0x2b, 0x3c, 0x65, 0x0, 0xae, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0xfc, [@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @rand_addr=0x64010101, @remote]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000018c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001000)={0x878, r2, 0xa, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6ed}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x100, 0xf7, 0x6, 0x7}, {0x9, 0x73, 0xab, 0x7}, {0x7, 0x2}, {0x4, 0x1, 0x7, 0x6}, {0xf001, 0x2, 0x9, 0x8}, {0xa, 0x2, 0x9, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x69a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r9}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r12}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x4, 0x66, 0x2, 0x8}, {0x0, 0x8, 0x9, 0x5}, {0x0, 0xd, 0x1}, {0x3, 0x3, 0x6, 0x6}, {0xe, 0x3, 0x7f, 0xfffffffd}, {0x2, 0xfa, 0x40, 0x6}, {0x7fff, 0x8, 0x8, 0x6}]}}}]}}, {{0x8, 0x1, r16}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r17}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x75e}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r19}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r21}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000000)
r25 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001940), r1)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001980)={0xcc, r25, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x44, 0x0, 0x300, 0x7, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xea}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda1f}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd6}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800)

1.495994845s ago: executing program 6 (id=971):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
setresgid(0x0, 0xee00, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r4)
r5 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000200)='stat\x00')
pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.36051948s ago: executing program 8 (id=972):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x200000180, 0x2, 0x29, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x3, 0x9, 0xbd9], 0x9000, 0x4f100})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]})
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000400)={"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"})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x40000000002004cb, 0x0, 0xa7c, 0x9, 0x20000008, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2800, 0x8)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xeeee3001, 0x8, 0x8, 0x9, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x2000, 0x3, 0x0, 0x3f, 0x5, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x9000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x9, 0x5}, {0x60000, 0x8000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0x1, 0xdddd0000, 0xf, 0x3, 0x12, 0x7, 0x4, 0x8, 0xdc, 0x9, 0xf7, 0x97}, {0x200000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0x6, 0x82, 0x9, 0x1, 0x7}, {0x8080000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x80a0000, 0x4000, 0xa, 0x5, 0xcd, 0x31, 0xff, 0x9, 0x2, 0x2c, 0xb0, 0x1}, {0xffff1000, 0x30}, {0x26000, 0x7}, 0x80000021, 0x0, 0x50000, 0x2024, 0x2, 0x0, 0xb000, [0x6800000000000000, 0x5, 0x2, 0x8]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

969.568697ms ago: executing program 7 (id=973):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000440)=[@nested_load_code={0x12e, 0x4f, {0x3, "470f320fbc094298640f01c90f01c3660f72f4b2650f0666baf80cb80c1d8582ef66bafc0cb800000080efb9de0a00000f32f20f1b6e76"}}], 0x4f})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000002900000004000000880000000000000014000000000000002900000008000000030000000000000030"], 0x60}}], 0x1, 0xff97)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/vmcoreinfo', 0x26102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x9, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67728b75705f69643d89d9f1540a375fd4bbcc36b8e0bc82017b1f79cd929642bcc662478910703a79a8f5dfdd36229c79c1ecf200fd34d57c4f017fe3ec3a7d5e", @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'])
r10 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220})
pipe2$watch_queue(&(0x7f0000000200), 0x80)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000280)=0x1)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ptrace(0x10, r5)
ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
getpeername(r4, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000540)=0x80)

610.26645ms ago: executing program 8 (id=974):
syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa1faaaaaaaa000000000000000101000040030200009654fbe74030022f076bd78f8ec6f3245be9b3c058a814e16d7e637dadccfa8739c2591eef80c10b88a171a62c026d845fa33a3acd002a4c3f2753aa95f7bf7285c3912d2d3952148899500c865e9dc342d32e05c13e8381e06e6378b7cf3474d16b00"/140], 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[<r0=>0x0, 0x0, 0x0, 0x0, <r1=>0x0], 0x5})
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, r0, 0x0, r1, 0x0, 0x0], 0x7, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x1000})

609.250081ms ago: executing program 6 (id=975):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r0}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000d8001000010402000000ed28bd4900000000", @ANYRES32=0x0, @ANYBLOB="88420000000000001c0016801800018014000b00000000000000000005000000000000001400030067656e65766531000000000000000000"], 0x50}}, 0x26040090)

540.202984ms ago: executing program 7 (id=976):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="ed980341b6c7936002ea05056275e3a123517e0b4be60287603fb9f433e9bb1a10319cfd1d51a2fda681c5e067c36e7ec11012fb86065a2bc962cd6eaf593d88ab82c9269df137b2b5bf8513046af8d68aca9de8103bf33f3cf3de8f149de46bd33fd13a4551db758cc713fb242efef45e1412494d7734a23869db5e017ed2fed16236fa4de97d8433d7e3d8100d5f888dfa864d5394a31170bf98047eff5b56ae3d358bd3d85f7a58aa0fed42ccdea71941dae891fa88d49f0a93846d8756060abf7ac4dd3a4a6188a56b478c84ba", 0xcf}, {&(0x7f0000000340)}], 0x2)
r2 = socket(0x10, 0x803, 0x0)
timer_create(0x8, 0x0, &(0x7f0000000000)=<r3=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}}, &(0x7f0000000180))
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81, 0x1, 0x6}}}, 0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804)

532.955372ms ago: executing program 8 (id=977):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r1, 0x2cb25000)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000004c0)={0xd, &(0x7f00000001c0)=[{0x20, '\x00', @st={0x4, [{0x3, @uvalue=0x20000ba85}, {0x2, @svalue=0x8}, {0x1, @svalue=0xb9}, {0x1, @svalue=0x2}]}, 0x1}]})
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000100)={0xe, {0x3, 0x6, 0x13, 0xf, "f5853b06ac2619aae39557a546fd88"}}, 0x1b)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x840, 0x104)
ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x2, 0x1, 0x5, 0x81, 0x7, 0x852b})
madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9)

479.630293ms ago: executing program 6 (id=978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0}) (async)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x8}, 0x1c)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async, rerun: 64)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 64)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_TTL={0x5, 0x8, 0x20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_TTL={0x5, 0x8, 0xe5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xfff7}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x94}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

320.404419ms ago: executing program 6 (id=979):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101602, 0x0)
write$tun(r1, &(0x7f0000002300)={@val={0x0, 0x9000}, @void, @ipv6=@icmpv6={0x5, 0x6, "cc0ff4", 0x8, 0x3a, 0x1, @mcast1, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xdb, 0xb}}}}, 0x34)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @connect}, {0x80, 0x5, 0x0, 0x0, @tick, {}, {}, @result={0xfff}}, {0x10, 0x80, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x93}, @control={0xfd}}, {0x86, 0x0, 0x0, 0xf9, @tick=0xe0, {0x0, 0x80}, {}, @time=@time={0x40, 0x1ff}}], 0x70)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000002700)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x1, 0x4}, {0x7, 0x7fff}}}}, 0x11)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x5e, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4004004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x10680}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)

244.292841ms ago: executing program 1 (id=980):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x50, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x55, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', r0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)

177.049452ms ago: executing program 7 (id=981):
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
prlimit64(r0, 0x7, &(0x7f0000000080)={0x9290}, &(0x7f00000000c0)) (async)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='wusb3801 0x4', 0xc)

176.696136ms ago: executing program 1 (id=982):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001a00)={0x2020}, 0x2020)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x16, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x8, 0x6, 0xc, 0x9, 0x9}, @alu={0x5c5030a1d0f31d74, 0x0, 0x0, 0x0, 0x9, 0x80, 0x8}, @jmp={0x5, 0x0, 0x1, 0x2, 0xb, 0x6, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3}, @alu={0x4, 0x1, 0x3, 0xa, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94)

444.194µs ago: executing program 6 (id=983):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x10) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000100)=[<r4=>0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x1, 0x7})
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r7=>r6, r4, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r8=>0x0, 0x0, <r9=>0x0], &(0x7f0000000300), 0x3, r7})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r9, r8, r9], &(0x7f00000003c0), 0x0, 0x2})

0s ago: executing program 1 (id=984):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000180)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0xe26)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x10201, 0x3, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000340)={@remote, @mcast1, @mcast1, 0x10004, 0x6, 0x2, 0x100, 0x4, 0x82d1818d})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f000071f000/0x3000)=nil, 0x3000, 0x10)
r9 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00008f3000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, 0x0})
r11 = socket$inet6(0xa, 0x80001, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00e00000010000000000000000000000000000000000fe8000000000000000a6e95c46e00000000000002ffe880000000000000000000000000101ff0200000000000000000000000000014e2100000000ffff0200a0e42b00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000fe88000000000000000000000000000100000000000000000a0030202e000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000fdffffffffffffff0000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000001000000040000000000000000000000000000000000000000000000000040000000000000000ffffffff040000000201000300000000ff"], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8)
getsockopt$bt_hci(r11, 0x0, 0x61, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x28)
ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x4, 0x0, 0x31237648, 0x80006, 0x1, 0x80}, {0x4000000a, 0x5, 0x1, 0x9, 0xfffffc01, 0x5, 0x2a22}]})
syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')

kernel console output (not intermixed with test programs):

default+0x29e/0x360
[  120.757554][ T8170]  ? __pfx_elevator_set_default+0x10/0x10
[  120.757591][ T8170]  ? disk_register_independent_access_ranges+0x24e/0x3b0
[  120.757621][ T8170]  blk_register_queue+0x48e/0x630
[  120.757652][ T8170]  __add_disk+0x7dd/0xf10
[  120.757710][ T8170]  add_disk_fwnode+0x118/0x480
[  120.757742][ T8170]  add_mtd_blktrans_dev+0xd0b/0x1520
[  120.757780][ T8170]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[  120.757828][ T8170]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  120.757857][ T8170]  ? mtdblock_add_mtd+0x4a/0x270
[  120.757891][ T8170]  mtdblock_add_mtd+0x1cc/0x270
[  120.757919][ T8170]  blktrans_notify_add+0xa2/0xf0
[  120.757945][ T8170]  add_mtd_device+0xb6d/0x1820
[  120.757972][ T8170]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  120.757997][ T8170]  ? __pfx_add_mtd_device+0x10/0x10
[  120.758026][ T8170]  mtd_add_partition+0x376/0x6a0
[  120.758052][ T8170]  ? __pfx_mtd_add_partition+0x10/0x10
[  120.758075][ T8170]  ? __might_fault+0xc5/0x140
[  120.758101][ T8170]  ? __might_fault+0xc5/0x140
[  120.758139][ T8170]  mtdchar_blkpg_ioctl+0x207/0x250
[  120.758164][ T8170]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[  120.758213][ T8170]  mtdchar_ioctl+0x1670/0x1fd0
[  120.758251][ T8170]  ? __pfx_mtdchar_ioctl+0x10/0x10
[  120.758280][ T8170]  ? lock_acquire+0x1d1/0x380
[  120.758301][ T8170]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[  120.758334][ T8170]  ? rcu_is_watching+0x13/0xc0
[  120.758357][ T8170]  ? trace_contention_end+0x126/0x160
[  120.758381][ T8170]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[  120.758408][ T8170]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  120.758424][ T8170]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  120.758448][ T8170]  ? __pfx___mutex_lock+0x10/0x10
[  120.758472][ T8170]  ? __fget_files+0x34/0x3d0
[  120.758515][ T8170]  mtdchar_unlocked_ioctl+0xb0/0xf0
[  120.758542][ T8170]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[  120.758572][ T8170]  __x64_sys_ioctl+0x18e/0x210
[  120.758593][ T8170]  do_syscall_64+0x123/0x790
[  120.758618][ T8170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.758639][ T8170] RIP: 0033:0x7f255fb9e159
[  120.758656][ T8170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.758674][ T8170] RSP: 002b:00007f2560b21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  120.758695][ T8170] RAX: ffffffffffffffda RBX: 00007f255fe25fa0 RCX: 00007f255fb9e159
[  120.758707][ T8170] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000006
[  120.758718][ T8170] RBP: 00007f255fc35024 R08: 0000000000000000 R09: 0000000000000000
[  120.758730][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.758740][ T8170] R13: 00007f255fe26038 R14: 00007f255fe25fa0 R15: 00007fff7c219f08
[  120.758768][ T8170]  </TASK>
[  121.284153][   T43] audit: type=1400 audit(1788899392.598:660): avc:  denied  { write } for  pid=8188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.495591][   T43] audit: type=1400 audit(1788899392.808:661): avc:  denied  { write } for  pid=8195 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.615545][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'.
[  121.661509][ T8205] netlink: 'syz.7.516': attribute type 1 has an invalid length.
[  121.870682][ T5883] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  121.990040][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  122.031368][ T5883] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  122.032571][ T5883] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  122.032599][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  122.032613][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  122.032628][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  122.032642][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  122.032662][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.042177][ T5883] usb 6-1: config 0 descriptor??
[  122.042857][ T8206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  122.106314][   T43] audit: type=1400 audit(1788899393.418:662): avc:  denied  { write } for  pid=8209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.144718][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.7.517'.
[  122.358274][   T43] audit: type=1400 audit(1788899393.668:663): avc:  denied  { write } for  pid=8217 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.481774][ T5883] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  122.606847][ T8223] overlayfs: failed to resolve './file0': -2
[  122.671979][ T8200] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  122.678128][ T5883] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  122.766452][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.780349][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.784414][ T8234] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  122.935240][   T43] audit: type=1400 audit(1788899394.248:664): avc:  denied  { lock } for  pid=8239 comm="syz.6.523" path="socket:[31237]" dev="sockfs" ino=31237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  123.083302][ T8246] can: request_module (can-proto-0) failed.
[  123.493097][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.7.525'.
[  123.668064][ T8266] netlink: 104 bytes leftover after parsing attributes in process `syz.7.526'.
[  123.934298][ T8273] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  123.940608][ T8273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.940653][ T8273] IPv6: NLM_F_CREATE should be set when creating new route
[  123.992318][ T7705] usb 6-1: reset high-speed USB device number 17 using dummy_hcd
[  124.063316][   T65] Bluetooth: hci2: command tx timeout
[  124.074084][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.075874][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.221770][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.224968][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.528'.
[  124.224986][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.528'.
[  124.252793][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.410202][    T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  124.544535][    T9] usb 12-1: device descriptor read/64, error -71
[  124.561407][   T13] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.561472][   T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.561535][   T13] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.561574][   T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.561624][   T13] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.561696][   T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.561743][   T13] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.561781][   T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.769335][   T43] kauditd_printk_skb: 6 callbacks suppressed
[  124.769495][   T43] audit: type=1400 audit(1788899396.078:671): avc:  denied  { write } for  pid=8285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.790029][    T9] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  124.809562][  T850] usb 6-1: USB disconnect, device number 17
[  124.951026][    T9] usb 12-1: device descriptor read/64, error -71
[  125.010469][   T43] audit: type=1400 audit(1788899396.328:672): avc:  denied  { write } for  pid=8293 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.061043][    T9] usb usb12-port1: attempt power cycle
[  125.410172][    T9] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  125.430367][    T9] usb 12-1: device descriptor read/8, error -71
[  125.666194][   T43] audit: type=1400 audit(1788899396.978:673): avc:  denied  { read } for  pid=8300 comm="syz.1.531" path="socket:[31311]" dev="sockfs" ino=31311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  125.680068][    T9] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  125.710938][    T9] usb 12-1: device descriptor read/8, error -71
[  125.754319][   T43] audit: type=1400 audit(1788899397.068:674): avc:  denied  { write } for  pid=8302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.821143][   T43] audit: type=1400 audit(1788899397.138:675): avc:  denied  { write } for  pid=8306 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.831659][    T9] usb usb12-port1: unable to enumerate USB device
[  125.928781][   T43] audit: type=1400 audit(1788899397.238:676): avc:  denied  { write } for  pid=8309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.006766][   T43] audit: type=1400 audit(1788899397.318:677): avc:  denied  { write } for  pid=8312 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.395544][   T43] audit: type=1400 audit(1788899397.708:678): avc:  denied  { getopt } for  pid=8328 comm="syz.6.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  126.461501][    C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  126.520587][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.534'.
[  126.664730][ T8333] vlan2: entered promiscuous mode
[  126.664829][ T8333] bridge0: entered promiscuous mode
[  126.762099][ T8337] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  126.943737][ T8339] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  127.118436][ T8350] gre1: entered allmulticast mode
[  127.298370][   T43] audit: type=1400 audit(1788899398.608:679): avc:  denied  { connect } for  pid=8353 comm="syz.1.541" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  127.321670][   T43] audit: type=1400 audit(1788899398.638:680): avc:  denied  { bind } for  pid=8353 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  127.570014][ T5847] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  127.720519][ T5847] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  127.736644][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.736695][ T5847] usb 6-1: Product: syz
[  127.736735][ T5847] usb 6-1: Manufacturer: syz
[  127.736766][ T5847] usb 6-1: SerialNumber: syz
[  127.912014][  T850] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  128.143394][ T8378] misc userio: The device must be registered before sending interrupts
[  128.171084][ T5847] usb 6-1: USB disconnect, device number 18
[  128.371270][ T8385] FAULT_INJECTION: forcing a failure.
[  128.371270][ T8385] name failslab, interval 1, probability 0, space 0, times 0
[  128.371366][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.7.547 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  128.371403][ T8385] Tainted: [L]=SOFTLOCKUP
[  128.371409][ T8385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  128.371418][ T8385] Call Trace:
[  128.371424][ T8385]  <TASK>
[  128.371431][ T8385]  dump_stack_lvl+0x100/0x190
[  128.371458][ T8385]  should_fail_ex.cold+0x5/0xa
[  128.371480][ T8385]  should_failslab+0xc2/0x120
[  128.371501][ T8385]  __kmalloc_noprof+0xfc/0x840
[  128.371515][ T8385]  ? rcu_is_watching+0x13/0xc0
[  128.371535][ T8385]  ? tomoyo_realpath_from_path+0xb6/0x690
[  128.371556][ T8385]  tomoyo_realpath_from_path+0xb6/0x690
[  128.371600][ T8385]  tomoyo_path_number_perm+0x23c/0x580
[  128.371625][ T8385]  ? tomoyo_path_number_perm+0x22e/0x580
[  128.371649][ T8385]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  128.371679][ T8385]  ? __lock_acquire+0x5c0/0x1f40
[  128.371706][ T8385]  ? __fget_files+0x34/0x3d0
[  128.371725][ T8385]  ? find_held_lock+0x2b/0x80
[  128.371745][ T8385]  ? hook_file_ioctl_common+0x140/0x440
[  128.371768][ T8385]  ? __fget_files+0x21f/0x3d0
[  128.371789][ T8385]  security_file_ioctl+0xd3/0x230
[  128.371806][ T8385]  __x64_sys_ioctl+0xb7/0x210
[  128.371822][ T8385]  do_syscall_64+0x123/0x790
[  128.371851][ T8385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.371866][ T8385] RIP: 0033:0x7f0b7279e159
[  128.371882][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.371896][ T8385] RSP: 002b:00007f0b73672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  128.371913][ T8385] RAX: ffffffffffffffda RBX: 00007f0b72a26180 RCX: 00007f0b7279e159
[  128.371922][ T8385] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  128.371931][ T8385] RBP: 00007f0b73672090 R08: 0000000000000000 R09: 0000000000000000
[  128.371939][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.371948][ T8385] R13: 00007f0b72a26218 R14: 00007f0b72a26180 R15: 00007ffc0e812e28
[  128.371968][ T8385]  </TASK>
[  128.378227][ T8385] ERROR: Out of memory at tomoyo_realpath_from_path.
[  128.944336][  T850] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  128.944571][  T850] ath9k_htc: Failed to initialize the device
[  128.956806][ T5847] usb 6-1: ath9k_htc: USB layer deinitialized
[  129.100791][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'.
[  129.155924][ T8395] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  130.037169][ T8419] FAULT_INJECTION: forcing a failure.
[  130.037169][ T8419] name failslab, interval 1, probability 0, space 0, times 0
[  130.037236][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.1.556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  130.037274][ T8419] Tainted: [L]=SOFTLOCKUP
[  130.037281][ T8419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  130.037291][ T8419] Call Trace:
[  130.037298][ T8419]  <TASK>
[  130.037305][ T8419]  dump_stack_lvl+0x100/0x190
[  130.037344][ T8419]  should_fail_ex.cold+0x5/0xa
[  130.037368][ T8419]  should_failslab+0xc2/0x120
[  130.037396][ T8419]  __kmalloc_noprof+0xfc/0x840
[  130.037415][ T8419]  ? __pfx_dynamic_dname+0x10/0x10
[  130.037449][ T8419]  ? tomoyo_encode2+0xfb/0x3c0
[  130.037471][ T8419]  tomoyo_encode2+0xfb/0x3c0
[  130.037491][ T8419]  tomoyo_encode+0x29/0x50
[  130.037506][ T8419]  tomoyo_realpath_from_path+0x18c/0x690
[  130.037532][ T8419]  tomoyo_path_number_perm+0x23c/0x580
[  130.037556][ T8419]  ? tomoyo_path_number_perm+0x22e/0x580
[  130.037578][ T8419]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  130.037608][ T8419]  ? __lock_acquire+0x5c0/0x1f40
[  130.037659][ T8419]  ? __fget_files+0x34/0x3d0
[  130.037679][ T8419]  ? find_held_lock+0x2b/0x80
[  130.037708][ T8419]  ? hook_file_ioctl_common+0x140/0x440
[  130.037732][ T8419]  ? __fget_files+0x21f/0x3d0
[  130.037752][ T8419]  security_file_ioctl+0xd3/0x230
[  130.037768][ T8419]  __x64_sys_ioctl+0xb7/0x210
[  130.037785][ T8419]  do_syscall_64+0x123/0x790
[  130.037813][ T8419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.037828][ T8419] RIP: 0033:0x7f194db9e159
[  130.037844][ T8419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.037858][ T8419] RSP: 002b:00007f194eb25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  130.037873][ T8419] RAX: ffffffffffffffda RBX: 00007f194de25fa0 RCX: 00007f194db9e159
[  130.037883][ T8419] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  130.037891][ T8419] RBP: 00007f194eb25090 R08: 0000000000000000 R09: 0000000000000000
[  130.037900][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.037909][ T8419] R13: 00007f194de26038 R14: 00007f194de25fa0 R15: 00007fffca0dc108
[  130.037930][ T8419]  </TASK>
[  130.038092][ T8419] ERROR: Out of memory at tomoyo_realpath_from_path.
[  130.492462][   T43] kauditd_printk_skb: 9 callbacks suppressed
[  130.492524][   T43] audit: type=1400 audit(1788899401.808:690): avc:  denied  { setopt } for  pid=8440 comm="syz.6.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  130.524698][ T8439] overlayfs: failed to resolve './file0': -2
[  130.607740][   T43] audit: type=1400 audit(1788899401.918:691): avc:  denied  { ioctl } for  pid=8447 comm="syz.7.563" path="socket:[31733]" dev="sockfs" ino=31733 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  130.666026][ T8448] jffs2: notice: (8448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found.
[  130.699160][ T8449] netlink: 32 bytes leftover after parsing attributes in process `syz.7.563'.
[  130.707101][   T65] Bluetooth: min 23399 > max 3
[  130.713938][ T8450] i2c i2c-0: delete_device: Can't find device in list
[  130.775448][ T8448] overlayfs: failed to resolve './file1': -2
[  130.789246][   T43] audit: type=1400 audit(1788899402.098:692): avc:  denied  { remove_name } for  pid=8446 comm="syz.6.564" name="bus" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  130.796963][   T43] audit: type=1400 audit(1788899402.098:693): avc:  denied  { rename } for  pid=8446 comm="syz.6.564" name="bus" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  130.804514][   T43] audit: type=1400 audit(1788899402.118:694): avc:  denied  { rmdir } for  pid=8446 comm="syz.6.564" name=2E02 dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  130.937861][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.6.564'.
[  131.286336][ T8459] FAULT_INJECTION: forcing a failure.
[  131.286336][ T8459] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  131.287166][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.7.566 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.287190][ T8459] Tainted: [L]=SOFTLOCKUP
[  131.287194][ T8459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  131.287200][ T8459] Call Trace:
[  131.287205][ T8459]  <TASK>
[  131.287211][ T8459]  dump_stack_lvl+0x100/0x190
[  131.287231][ T8459]  should_fail_ex.cold+0x5/0xa
[  131.287247][ T8459]  _copy_to_user+0x32/0xd0
[  131.287266][ T8459]  simple_read_from_buffer+0xcb/0x170
[  131.287281][ T8459]  proc_fail_nth_read+0x1af/0x230
[  131.287294][ T8459]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  131.287309][ T8459]  ? rw_verify_area+0xce/0x6d0
[  131.287325][ T8459]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  131.287338][ T8459]  vfs_read+0x1e4/0xb40
[  131.287349][ T8459]  ? lock_acquire+0x1d1/0x380
[  131.287360][ T8459]  ? __fget_files+0x34/0x3d0
[  131.287373][ T8459]  ? __pfx_vfs_read+0x10/0x10
[  131.287383][ T8459]  ? find_held_lock+0x2b/0x80
[  131.287398][ T8459]  ? __fget_files+0x215/0x3d0
[  131.287413][ T8459]  ? __fget_files+0x21f/0x3d0
[  131.287430][ T8459]  ksys_read+0x12a/0x250
[  131.287440][ T8459]  ? __pfx_ksys_read+0x10/0x10
[  131.287450][ T8459]  ? kvm_on_user_return+0x1a5/0x250
[  131.287467][ T8459]  do_syscall_64+0x123/0x790
[  131.287483][ T8459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.287495][ T8459] RIP: 0033:0x7f0b7275e98e
[  131.287505][ T8459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  131.287515][ T8459] RSP: 002b:00007f0b736b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  131.287526][ T8459] RAX: ffffffffffffffda RBX: 00007f0b736b46c0 RCX: 00007f0b7275e98e
[  131.287533][ T8459] RDX: 000000000000000f RSI: 00007f0b736b40a0 RDI: 0000000000000006
[  131.287540][ T8459] RBP: 00007f0b736b4090 R08: 0000000000000000 R09: 0000000000000000
[  131.287546][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.287552][ T8459] R13: 00007f0b72a26038 R14: 00007f0b72a25fa0 R15: 00007ffc0e812e28
[  131.287566][ T8459]  </TASK>
[  131.614163][ T8477] SELinux:  Context system_u:object_r:modules_conf_t:s0 is not valid (left unmapped).
[  131.618904][   T43] audit: type=1400 audit(1788899402.928:695): avc:  denied  { relabelto } for  pid=8468 comm="syz.1.568" name="159" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modules_conf_t:s0"
[  131.618975][   T43] audit: type=1400 audit(1788899402.928:696): avc:  denied  { associate } for  pid=8468 comm="syz.1.568" name="159" dev="tmpfs" ino=914 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_conf_t:s0"
[  131.640188][   T43] audit: type=1400 audit(1788899402.948:697): avc:  denied  { name_bind } for  pid=8468 comm="syz.1.568" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  131.739396][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.572'.
[  131.853931][ T8477] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  131.855691][ T8477] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  132.192978][   T65] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  132.549919][ T5847] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  132.609455][   T43] audit: type=1400 audit(1788899403.918:698): avc:  denied  { module_load } for  pid=8512 comm="syz.1.579" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[  132.620528][ T8513] kernel read not supported for file /policy (pid: 8513 comm: syz.1.579)
[  132.682344][   T43] audit: type=1400 audit(1788899403.998:699): avc:  denied  { execute } for  pid=8512 comm="syz.1.579" path="/dev/audio1" dev="devtmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  132.701822][ T5847] usb 12-1: Using ep0 maxpacket: 32
[  132.702816][ T5847] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  132.708435][ T5847] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.708464][ T5847] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.708491][ T5847] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.722755][ T5847] usb 12-1: config 0 descriptor??
[  132.780020][   T65] Bluetooth: hci2: command tx timeout
[  132.869101][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[  132.869264][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  132.996373][ T8522] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  133.161803][ T5847] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0
[  133.206187][   T65] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  133.435704][ T7705] usb 12-1: USB disconnect, device number 6
[  133.483452][ T8536] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  133.632789][ T8541] db_root: cannot open: 	
[  133.884781][ T8551] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  133.885999][ T8551] overlayfs: failed to set xattr on upper
[  133.886009][ T8551] overlayfs: ...falling back to redirect_dir=nofollow.
[  133.886017][ T8551] overlayfs: ...falling back to index=off.
[  133.886023][ T8551] overlayfs: ...falling back to uuid=null.
[  134.816058][ T8593] jffs2: notice: (8593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 1 orphan) found.
[  134.865926][ T8593] overlayfs: failed to resolve './file1': -2
[  134.921791][ T8596] binder: 8595:8596 ioctl c0306201 200000000080 returned -14
[  135.027312][ T8604] No control pipe specified
[  135.291263][ T8610] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  135.291332][ T8610] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  135.291654][ T8610] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[  135.422172][ T8615] FAULT_INJECTION: forcing a failure.
[  135.422172][ T8615] name failslab, interval 1, probability 0, space 0, times 0
[  135.422303][ T8615] CPU: 2 UID: 0 PID: 8615 Comm: syz.7.609 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.422344][ T8615] Tainted: [L]=SOFTLOCKUP
[  135.422352][ T8615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  135.422363][ T8615] Call Trace:
[  135.422370][ T8615]  <TASK>
[  135.422378][ T8615]  dump_stack_lvl+0x100/0x190
[  135.422412][ T8615]  should_fail_ex.cold+0x5/0xa
[  135.422439][ T8615]  should_failslab+0xc2/0x120
[  135.422464][ T8615]  __kmalloc_noprof+0xfc/0x840
[  135.422484][ T8615]  ? trace_kmalloc+0xeb/0x110
[  135.422506][ T8615]  ? lsm_blob_alloc+0x68/0x90
[  135.422534][ T8615]  lsm_blob_alloc+0x68/0x90
[  135.422558][ T8615]  security_sk_alloc+0x2d/0x290
[  135.422587][ T8615]  sk_prot_alloc+0x12a/0x2a0
[  135.422623][ T8615]  sk_alloc+0x36/0xe80
[  135.422643][ T8615]  __netlink_create+0x5e/0x2c0
[  135.422669][ T8615]  ? __wake_up+0x3f/0x60
[  135.422699][ T8615]  netlink_create+0x29b/0x610
[  135.422724][ T8615]  ? __pfx_rtnetlink_bind+0x10/0x10
[  135.422758][ T8615]  __sock_create+0x339/0x860
[  135.422789][ T8615]  __sys_socket+0x14d/0x260
[  135.422817][ T8615]  ? __pfx___sys_socket+0x10/0x10
[  135.422866][ T8615]  __x64_sys_socket+0x72/0xb0
[  135.422893][ T8615]  ? lockdep_hardirqs_on+0x7d/0x110
[  135.422917][ T8615]  do_syscall_64+0x123/0x790
[  135.422943][ T8615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.422962][ T8615] RIP: 0033:0x7f0b7279e159
[  135.422979][ T8615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.422998][ T8615] RSP: 002b:00007f0b736b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  135.423017][ T8615] RAX: ffffffffffffffda RBX: 00007f0b72a25fa0 RCX: 00007f0b7279e159
[  135.423029][ T8615] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[  135.423040][ T8615] RBP: 00007f0b72835024 R08: 0000000000000000 R09: 0000000000000000
[  135.423053][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.423065][ T8615] R13: 00007f0b72a26038 R14: 00007f0b72a25fa0 R15: 00007ffc0e812e28
[  135.423091][ T8615]  </TASK>
[  135.500723][   T43] kauditd_printk_skb: 12 callbacks suppressed
[  135.500735][   T43] audit: type=1400 audit(1788899406.818:712): avc:  denied  { unmount } for  pid=6768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  135.576569][   T43] audit: type=1400 audit(1788899406.888:713): avc:  denied  { write } for  pid=8614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.658614][   T43] audit: type=1400 audit(1788899406.968:714): avc:  denied  { write } for  pid=8622 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  136.454155][ T5741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  136.467182][ T5741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  136.470947][ T5741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  136.474861][ T5741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  136.480638][ T5741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  137.302450][ T5784] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.468530][ T8667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.478144][   T43] audit: type=1400 audit(1788899408.788:715): avc:  denied  { ioctl } for  pid=8663 comm="syz.7.621" path="/63/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  137.496799][ T8667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.524668][ T5784] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.623937][ T5784] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.741139][ T5784] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.804732][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.804904][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.805016][ T8634] bridge_slave_0: entered allmulticast mode
[  137.809177][ T8634] bridge_slave_0: entered promiscuous mode
[  137.831406][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.831630][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.832148][ T8634] bridge_slave_1: entered allmulticast mode
[  137.833561][ T8634] bridge_slave_1: entered promiscuous mode
[  137.903931][ T8634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.920144][ T8634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.977858][ T8634] team0: Port device team_slave_0 added
[  137.988375][ T8634] team0: Port device team_slave_1 added
[  138.124839][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.124997][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.125015][ T8634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.204527][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.204576][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.204625][ T8634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.217397][ T5885] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  138.257099][   T43] audit: type=1400 audit(1788899409.568:716): avc:  denied  { map } for  pid=8690 comm="syz.7.630" path="socket:[34071]" dev="sockfs" ino=34071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  138.268848][   T43] audit: type=1400 audit(1788899409.578:717): avc:  denied  { read } for  pid=8690 comm="syz.7.630" path="socket:[34071]" dev="sockfs" ino=34071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  138.284672][   T43] audit: type=1400 audit(1788899409.598:718): avc:  denied  { ioctl } for  pid=8690 comm="syz.7.630" path="socket:[34071]" dev="sockfs" ino=34071 ioctlcmd=0x6f3e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  138.379115][ T5885] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  138.390729][ T5885] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  138.394534][ T5885] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  138.398911][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  138.402803][ T5885] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  138.402832][ T5885] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  138.414561][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  138.418316][ T5885] usb 6-1: Product: syz
[  138.420644][ T7705] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  138.420657][ T5885] usb 6-1: Manufacturer: syz
[  138.438034][ T5885] cdc_wdm 6-1:1.0: skipping garbage
[  138.440558][ T5885] cdc_wdm 6-1:1.0: skipping garbage
[  138.451761][ T5885] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  138.454599][ T5885] cdc_wdm 6-1:1.0: Unknown control protocol
[  138.533739][ T5784] bond0 (unregistering): Released all slaves
[  138.536781][ T5784] bond1 (unregistering): Released all slaves
[  138.550122][   T65] Bluetooth: hci4: command tx timeout
[  138.558405][ T5784] bond2 (unregistering): Released all slaves
[  138.571159][ T7705] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  138.572196][ T7705] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  138.573120][ T7705] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  138.574962][ T7705] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.574981][ T7705] usb 11-1: Product: syz
[  138.574992][ T7705] usb 11-1: Manufacturer: syz
[  138.575004][ T7705] usb 11-1: SerialNumber: syz
[  138.596056][ T1513] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  138.623481][ T7705] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected
[  138.639286][ T8634] hsr_slave_0: entered promiscuous mode
[  138.640193][   T43] audit: type=1400 audit(1788899409.948:719): avc:  denied  { read write } for  pid=8680 comm="syz.1.625" name="cdc-wdm0" dev="devtmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  138.640237][   T43] audit: type=1400 audit(1788899409.948:720): avc:  denied  { open } for  pid=8680 comm="syz.1.625" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  138.640918][ T7705] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  138.663971][ T8634] hsr_slave_1: entered promiscuous mode
[  138.668650][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.668798][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.669101][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.669117][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.669506][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.669522][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.669770][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.669786][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.670017][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.670033][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.670218][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.670228][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.670411][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.670420][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.670596][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.670605][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.670791][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.670800][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.670997][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  138.671006][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  138.675096][ T7705] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  138.678783][ T8634] debugfs: 'hsr0' already exists in 'hsr'
[  138.678804][ T8634] Cannot create hsr debugfs directory
[  138.722193][ T5847] usb 6-1: USB disconnect, device number 19
[  138.722319][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  138.761371][ T1513] usb 12-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  138.765245][ T1513] usb 12-1: config 1 has an invalid interface number: 3 but max is 0
[  138.765285][ T1513] usb 12-1: config 1 has no interface number 0
[  138.774467][ T1513] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.774518][ T1513] usb 12-1: Product: syz
[  138.774558][ T1513] usb 12-1: Manufacturer: syz
[  138.774588][ T1513] usb 12-1: SerialNumber: syz
[  138.806390][ T5784] tipc: Disabling bearer <eth:team0>
[  138.816942][ T5784] tipc: Left network mode
[  138.853617][ T1513] usb 12-1: 3:1 : does not exist
[  138.856827][ T1513] usb 12-1: 3:2 : does not exist
[  139.041917][ T1513] usb 12-1: USB disconnect, device number 7
[  139.067412][   T43] audit: type=1400 audit(1788899410.378:721): avc:  denied  { write } for  pid=8697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.297764][ T5784] hsr_slave_0: left promiscuous mode
[  139.303673][ T5784] hsr_slave_1: left promiscuous mode
[  139.325584][ T8696] netlink: 32 bytes leftover after parsing attributes in process `syz.6.628'.
[  139.329634][ T5784] veth1_macvtap: left promiscuous mode
[  139.333865][ T5784] veth0_macvtap: left promiscuous mode
[  139.337355][ T5784] veth1_vlan: left promiscuous mode
[  139.594349][ T5784] team0 (unregistering): Port device vlan0 removed
[  139.795783][ T8713] overlayfs: failed to resolve '/000000005': -2
[  139.993202][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.636'.
[  139.993265][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.7.636'.
[  139.993711][ T8717] netlink: 'syz.7.636': attribute type 19 has an invalid length.
[  140.077877][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14
[  140.280014][ T5840] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.280235][ T5840] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.280293][ T5840] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.280337][ T5840] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.299320][ T8634] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  140.327528][ T8634] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  140.333508][ T8634] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  140.358254][ T8634] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  140.362900][ T8634] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  140.381610][ T8689] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110
[  140.399616][ T8634] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  140.412824][ T8634] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  140.421674][  T850] usb 11-1: USB disconnect, device number 9
[  140.441236][ T8634] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  140.534006][  T850] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  140.599032][   T43] kauditd_printk_skb: 8 callbacks suppressed
[  140.599181][   T43] audit: type=1400 audit(1788899411.908:730): avc:  denied  { write } for  pid=8723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.611789][ T8734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'.
[  140.611810][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'.
[  140.619501][  T850] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  140.623658][   T65] Bluetooth: hci4: command tx timeout
[  140.636373][ T8634] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.644856][  T850] ti_usb_3410_5052 11-1:2.0: device disconnected
[  140.654088][ T8634] 8021q: adding VLAN 0 to HW filter on device team0
[  140.684428][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.684539][ T8319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.699527][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.699641][ T8319] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.787501][   T43] audit: type=1400 audit(1788899412.098:731): avc:  denied  { write } for  pid=8737 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.912645][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15
[  141.115667][ T8746] overlayfs: failed to resolve './file0': -2
[  141.117005][   T43] audit: type=1400 audit(1788899412.428:732): avc:  denied  { mounton } for  pid=8744 comm="syz.1.640" path="/174/mnt/bus" dev="sda1" ino=8199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  141.150705][ T8748] cgroup: Unknown subsys name 'cpuset'
[  141.161279][ T8748] xt_socket: unknown flags 0x48
[  141.164992][   T43] audit: type=1400 audit(1788899412.478:733): avc:  denied  { map } for  pid=8755 comm="syz.6.641" path="socket:[34354]" dev="sockfs" ino=34354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  141.228087][   T43] audit: type=1400 audit(1788899412.538:734): avc:  denied  { write } for  pid=8753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.353303][   T43] audit: type=1400 audit(1788899412.648:735): avc:  denied  { write } for  pid=8760 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.421793][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16
[  141.428226][   T43] audit: type=1400 audit(1788899412.738:736): avc:  denied  { bind } for  pid=8765 comm="syz.7.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  141.440052][   T43] audit: type=1400 audit(1788899412.748:737): avc:  denied  { listen } for  pid=8765 comm="syz.7.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  141.440141][   T43] audit: type=1400 audit(1788899412.748:738): avc:  denied  { accept } for  pid=8765 comm="syz.7.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  141.510894][   T43] audit: type=1400 audit(1788899412.818:739): avc:  denied  { setattr } for  pid=8767 comm="syz.1.643" name="ttyprintk" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  141.516732][ T8770] tipc: Started in network mode
[  141.516753][ T8770] tipc: Node identity 2000004, cluster identity 4711
[  141.516765][ T8770] tipc: Node number set to 33554436
[  141.679111][ T8634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.016754][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17
[  142.494578][ T8634] veth0_vlan: entered promiscuous mode
[  142.520557][ T8634] veth1_vlan: entered promiscuous mode
[  142.607313][ T8634] veth0_macvtap: entered promiscuous mode
[  142.638184][ T8634] veth1_macvtap: entered promiscuous mode
[  142.685939][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.699304][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.699414][ T8834] overlay: Unknown parameter 'fsuuid'
[  142.703189][   T65] Bluetooth: hci4: command tx timeout
[  142.721412][ T5833] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.721497][ T5833] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.721835][ T5833] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.721935][ T5833] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.798541][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'.
[  143.021419][ T8319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.021536][ T8319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.090520][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.090593][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.310001][ T8834] overlayfs: failed to resolve './file0/file1': -2
[  143.512088][ T8858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8858 comm=syz.6.655
[  143.709510][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.8.613'.
[  144.207433][ T8881] FAULT_INJECTION: forcing a failure.
[  144.207433][ T8881] name failslab, interval 1, probability 0, space 0, times 0
[  144.222262][ T8881] CPU: 0 UID: 0 PID: 8881 Comm: syz.6.660 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.222316][ T8881] Tainted: [L]=SOFTLOCKUP
[  144.222324][ T8881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  144.222335][ T8881] Call Trace:
[  144.222341][ T8881]  <TASK>
[  144.222348][ T8881]  dump_stack_lvl+0x100/0x190
[  144.222379][ T8881]  should_fail_ex.cold+0x5/0xa
[  144.222404][ T8881]  should_failslab+0xc2/0x120
[  144.222426][ T8881]  __kmalloc_noprof+0xfc/0x840
[  144.222442][ T8881]  ? rcu_is_watching+0x13/0xc0
[  144.222464][ T8881]  ? tomoyo_realpath_from_path+0xb6/0x690
[  144.222489][ T8881]  tomoyo_realpath_from_path+0xb6/0x690
[  144.222513][ T8881]  tomoyo_path_number_perm+0x23c/0x580
[  144.222538][ T8881]  ? tomoyo_path_number_perm+0x22e/0x580
[  144.222564][ T8881]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  144.222598][ T8881]  ? __lock_acquire+0x5c0/0x1f40
[  144.222626][ T8881]  ? __fget_files+0x34/0x3d0
[  144.222646][ T8881]  ? find_held_lock+0x2b/0x80
[  144.222690][ T8881]  ? hook_file_ioctl_common+0x140/0x440
[  144.222717][ T8881]  ? __fget_files+0x21f/0x3d0
[  144.222740][ T8881]  security_file_ioctl+0xd3/0x230
[  144.222758][ T8881]  __x64_sys_ioctl+0xb7/0x210
[  144.222776][ T8881]  do_syscall_64+0x123/0x790
[  144.222801][ T8881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.222819][ T8881] RIP: 0033:0x7ff85879e159
[  144.222834][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.222850][ T8881] RSP: 002b:00007ff8596ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.222869][ T8881] RAX: ffffffffffffffda RBX: 00007ff858a25fa0 RCX: 00007ff85879e159
[  144.222880][ T8881] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000007
[  144.222889][ T8881] RBP: 00007ff8596ed090 R08: 0000000000000000 R09: 0000000000000000
[  144.222899][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.222909][ T8881] R13: 00007ff858a26038 R14: 00007ff858a25fa0 R15: 00007ffffd11ec18
[  144.222933][ T8881]  </TASK>
[  144.261470][ T8881] ERROR: Out of memory at tomoyo_realpath_from_path.
[  144.275121][ T8891] ip6t_hbh: unknown flags 83
[  144.666138][ T8902] netlink: 132 bytes leftover after parsing attributes in process `syz.6.665'.
[  144.695421][ T8903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62480 sclass=netlink_route_socket pid=8903 comm=syz.1.664
[  144.779060][ T8906] IPVS: set_ctl: invalid protocol: 46 172.20.20.26:20003
[  144.782277][   T65] Bluetooth: hci4: command tx timeout
[  144.809208][ T8898] syzkaller0: entered promiscuous mode
[  144.809293][ T8898] syzkaller0: entered allmulticast mode
[  145.228477][ T8915] netlink: 59 bytes leftover after parsing attributes in process `syz.8.667'.
[  146.446953][ T8938] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  146.467719][ T8938] cramfs: wrong magic
[  146.472695][ T8940] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  146.515497][ T8940] cramfs: wrong magic
[  148.510954][   T43] kauditd_printk_skb: 12 callbacks suppressed
[  148.511082][   T43] audit: type=1400 audit(1788899419.828:752): avc:  denied  { bind } for  pid=8955 comm="syz.7.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  148.538541][ T8959] overlayfs: failed to resolve './file0': -2
[  148.759162][ T8978] xt_limit: Overflow, try lower: 0/0
[  148.808583][ T8978] input: syz0 as /devices/virtual/input/input10
[  148.808658][ T8978] input: failed to attach handler leds to device input10, error: -6
[  148.951824][   T43] audit: type=1400 audit(1788899420.268:753): avc:  denied  { ioctl } for  pid=8990 comm="syz.7.684" path="socket:[36173]" dev="sockfs" ino=36173 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  148.953854][ T7705] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  148.977635][   T43] audit: type=1400 audit(1788899420.288:754): avc:  denied  { setopt } for  pid=8990 comm="syz.7.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  148.977723][   T43] audit: type=1400 audit(1788899420.288:755): avc:  denied  { lock } for  pid=8990 comm="syz.7.684" path="socket:[36173]" dev="sockfs" ino=36173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  149.039612][   T43] audit: type=1400 audit(1788899420.348:756): avc:  denied  { read write } for  pid=8992 comm="syz.7.686" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  149.039708][   T43] audit: type=1400 audit(1788899420.348:757): avc:  denied  { open } for  pid=8992 comm="syz.7.686" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  149.110560][ T7705] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  149.111569][ T7705] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  149.111587][ T7705] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  149.111600][ T7705] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66
[  149.111628][ T7705] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  149.111645][ T7705] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  149.114357][ T7705] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  149.114375][ T7705] usb 11-1: Product: syz
[  149.114385][ T7705] usb 11-1: Manufacturer: syz
[  149.163039][ T8999] overlayfs: failed to resolve './file0': -2
[  149.175234][ T7705] cdc_wdm 11-1:1.0: skipping garbage
[  149.175301][ T7705] cdc_wdm 11-1:1.0: skipping garbage
[  149.189769][ T7705] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  149.190071][ T7705] cdc_wdm 11-1:1.0: Unknown control protocol
[  149.279099][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[  149.396597][   T43] audit: type=1400 audit(1788899420.708:758): avc:  denied  { ioctl } for  pid=8974 comm="syz.6.681" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3104 ioctlcmd=0x541e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  149.461089][   T43] audit: type=1400 audit(1788899420.778:759): avc:  denied  { ioctl } for  pid=9013 comm="syz.8.692" path="socket:[36283]" dev="sockfs" ino=36283 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  149.534122][ T8324] IPVS: starting estimator thread 0...
[  149.620057][ T9024] IPVS: using max 27 ests per chain, 64800 per kthread
[  149.785262][ T9031] program syz.1.696 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.791889][   T43] audit: type=1400 audit(1788899421.108:760): avc:  denied  { ioctl } for  pid=9028 comm="syz.1.696" path="socket:[36373]" dev="sockfs" ino=36373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  149.938966][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.698'.
[  150.058712][ T9040] overlayfs: failed to resolve './file0': -2
[  150.134559][   T43] audit: type=1326 audit(1788899421.448:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.7.702" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b7279e159 code=0x0
[  150.166917][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.701'.
[  151.463241][ T9062] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  151.711372][   T50] usb 11-1: USB disconnect, device number 10
[  151.906265][ T9077] FAULT_INJECTION: forcing a failure.
[  151.906265][ T9077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.906386][ T9077] CPU: 2 UID: 0 PID: 9077 Comm: syz.6.710 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  151.906414][ T9077] Tainted: [L]=SOFTLOCKUP
[  151.906421][ T9077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  151.906432][ T9077] Call Trace:
[  151.906439][ T9077]  <TASK>
[  151.906447][ T9077]  dump_stack_lvl+0x100/0x190
[  151.906493][ T9077]  should_fail_ex.cold+0x5/0xa
[  151.906519][ T9077]  _copy_from_user+0x2e/0xd0
[  151.906553][ T9077]  memdup_user+0x6b/0xe0
[  151.906598][ T9077]  strndup_user+0x78/0xe0
[  151.906629][ T9077]  __x64_sys_fsopen+0x9e/0x220
[  151.906650][ T9077]  do_syscall_64+0x123/0x790
[  151.906681][ T9077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.906701][ T9077] RIP: 0033:0x7ff85879e159
[  151.906717][ T9077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.906735][ T9077] RSP: 002b:00007ff8596ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  151.906755][ T9077] RAX: ffffffffffffffda RBX: 00007ff858a25fa0 RCX: 00007ff85879e159
[  151.906767][ T9077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  151.906778][ T9077] RBP: 00007ff8596ed090 R08: 0000000000000000 R09: 0000000000000000
[  151.906789][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.906801][ T9077] R13: 00007ff858a26038 R14: 00007ff858a25fa0 R15: 00007ffffd11ec18
[  151.906825][ T9077]  </TASK>
[  152.525395][ T9094] xt_hashlimit: size too large, truncated to 1048576
[  152.577881][ T9097] �x9�: renamed from bridge_slave_0 (while UP)
[  153.158356][ T9117] FAULT_INJECTION: forcing a failure.
[  153.158356][ T9117] name failslab, interval 1, probability 0, space 0, times 0
[  153.158493][ T9117] CPU: 2 UID: 0 PID: 9117 Comm: syz.8.720 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  153.158519][ T9117] Tainted: [L]=SOFTLOCKUP
[  153.158526][ T9117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  153.158536][ T9117] Call Trace:
[  153.158543][ T9117]  <TASK>
[  153.158550][ T9117]  dump_stack_lvl+0x100/0x190
[  153.158580][ T9117]  should_fail_ex.cold+0x5/0xa
[  153.158606][ T9117]  should_failslab+0xc2/0x120
[  153.158627][ T9117]  __kmalloc_cache_noprof+0x91/0x6d0
[  153.158654][ T9117]  ? alloc_fs_context+0x57/0xf40
[  153.158683][ T9117]  alloc_fs_context+0x57/0xf40
[  153.158707][ T9117]  ? __get_fs_type+0xe3/0x200
[  153.158734][ T9117]  __x64_sys_fsopen+0xed/0x220
[  153.158753][ T9117]  do_syscall_64+0x123/0x790
[  153.158783][ T9117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.158801][ T9117] RIP: 0033:0x7fb191b9e159
[  153.158815][ T9117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.158831][ T9117] RSP: 002b:00007fb192a35028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  153.158848][ T9117] RAX: ffffffffffffffda RBX: 00007fb191e25fa0 RCX: 00007fb191b9e159
[  153.158860][ T9117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  153.158870][ T9117] RBP: 00007fb192a35090 R08: 0000000000000000 R09: 0000000000000000
[  153.158881][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.158891][ T9117] R13: 00007fb191e26038 R14: 00007fb191e25fa0 R15: 00007fff4f1a3d48
[  153.158915][ T9117]  </TASK>
[  153.235230][ T9120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer.
[  153.337786][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.8.722'.
[  153.484788][ T9130] No such timeout policy "syz1"
[  153.492835][ T9130] loop5: detected capacity change from 0 to 7
[  153.527041][ T9130] Dev loop5: unable to read RDB block 7
[  153.547184][ T9130]  loop5: unable to read partition table
[  153.550108][ T9130] loop5: partition table beyond EOD, truncated
[  153.553299][ T9130] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  153.587457][ T9136] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  153.587531][ T9136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.607018][   T43] kauditd_printk_skb: 6 callbacks suppressed
[  153.607089][   T43] audit: type=1400 audit(1788899424.918:768): avc:  denied  { write } for  pid=9129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.746877][ T9146] ceph: No source
[  153.755666][   T43] audit: type=1400 audit(1788899425.068:769): avc:  denied  { write } for  pid=9145 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  153.871697][ T9154] FAULT_INJECTION: forcing a failure.
[  153.871697][ T9154] name failslab, interval 1, probability 0, space 0, times 0
[  153.877836][ T9154] CPU: 0 UID: 0 PID: 9154 Comm: syz.7.730 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  153.877878][ T9154] Tainted: [L]=SOFTLOCKUP
[  153.877884][ T9154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  153.877893][ T9154] Call Trace:
[  153.877899][ T9154]  <TASK>
[  153.877906][ T9154]  dump_stack_lvl+0x100/0x190
[  153.877935][ T9154]  should_fail_ex.cold+0x5/0xa
[  153.877959][ T9154]  should_failslab+0xc2/0x120
[  153.877978][ T9154]  __kmalloc_cache_noprof+0x91/0x6d0
[  153.878000][ T9154]  ? __kasan_kmalloc+0xaa/0xb0
[  153.878018][ T9154]  ? hpfs_init_fs_context+0x49/0x8a0
[  153.878043][ T9154]  hpfs_init_fs_context+0x49/0x8a0
[  153.878071][ T9154]  alloc_fs_context+0x60c/0xf40
[  153.878098][ T9154]  __x64_sys_fsopen+0xed/0x220
[  153.878114][ T9154]  do_syscall_64+0x123/0x790
[  153.878136][ T9154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.878153][ T9154] RIP: 0033:0x7f0b7279e159
[  153.878167][ T9154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.878182][ T9154] RSP: 002b:00007f0b736b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  153.878198][ T9154] RAX: ffffffffffffffda RBX: 00007f0b72a25fa0 RCX: 00007f0b7279e159
[  153.878208][ T9154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  153.878216][ T9154] RBP: 00007f0b736b4090 R08: 0000000000000000 R09: 0000000000000000
[  153.878225][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.878233][ T9154] R13: 00007f0b72a26038 R14: 00007f0b72a25fa0 R15: 00007ffc0e812e28
[  153.878254][ T9154]  </TASK>
[  153.978265][ T9159] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  154.018256][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.734'.
[  154.035841][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.734'.
[  154.160269][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.7.733'.
[  154.236943][ T9159] cramfs: checking physical address 0x000000002b420000 for linear cramfs image
[  154.245483][ T9159] cramfs: wrong magic
[  154.258500][ T9159] cramfs: wrong magic
[  154.316272][ T9182] netlink: 'syz.6.737': attribute type 3 has an invalid length.
[  154.376248][   T43] audit: type=1400 audit(1788899425.688:770): avc:  denied  { connect } for  pid=9183 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  154.424301][   T43] audit: type=1800 audit(1788899425.738:771): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.738" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0
[  154.463937][ T9191] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 273071 out of range (51000000..2150000000)
[  154.558614][   T43] audit: type=1400 audit(1788899425.868:772): avc:  denied  { append } for  pid=9194 comm="syz.7.740" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  154.582560][   T43] audit: type=1400 audit(1788899425.898:773): avc:  denied  { name_bind } for  pid=9194 comm="syz.7.740" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  154.866439][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.742'.
[  155.023621][   T43] audit: type=1800 audit(1788899426.338:774): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.745" name="file0" dev="overlay" ino=940 res=0 errno=0
[  155.085308][ T9217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56315 sclass=netlink_route_socket pid=9217 comm=syz.6.745
[  155.112386][ T9221] loop7: detected capacity change from 0 to 7
[  155.118525][   T43] audit: type=1400 audit(1788899426.428:775): avc:  denied  { write } for  pid=9219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.186093][   T43] audit: type=1400 audit(1788899426.498:776): avc:  denied  { create } for  pid=9216 comm="syz.6.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  155.194078][   T43] audit: type=1400 audit(1788899426.508:777): avc:  denied  { bind } for  pid=9216 comm="syz.6.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  155.272705][ T9221] Dev loop7: unable to read RDB block 7
[  155.272774][ T9221]  loop7: unable to read partition table
[  155.272945][ T9221] loop7: partition table beyond EOD, truncated
[  155.274438][ T9221] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  155.571911][ T9246] capability: warning: `syz.6.752' uses 32-bit capabilities (legacy support in use)
[  155.711195][ T9253] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  155.890018][   T25] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  156.023083][   T25] usb 13-1: device descriptor read/64, error -71
[  156.165231][ T9278] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  156.173339][ T9278] bond2: (slave lo): Enslaving as an active interface with an up link
[  156.176155][ T9278] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  156.192859][ T9284] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  156.261056][   T25] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  156.329457][ T9295] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  156.379911][    T9] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  156.390156][   T25] usb 13-1: device descriptor read/64, error -71
[  156.402531][ T9299] syz_tun: entered allmulticast mode
[  156.415209][ T9300] pim6reg: entered allmulticast mode
[  156.424596][ T9302] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  156.474223][ T9300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9300 comm=syz.6.767
[  156.502135][   T25] usb usb13-port1: attempt power cycle
[  156.525218][ T9300] syz_tun (unregistering): left allmulticast mode
[  156.531649][    T9] usb 12-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  156.537035][    T9] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.537122][    T9] usb 12-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  156.552726][    T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.552780][    T9] usb 12-1: Product: syz
[  156.552820][    T9] usb 12-1: Manufacturer: syz
[  156.552849][    T9] usb 12-1: SerialNumber: syz
[  156.576483][    T9] usb-storage 12-1:1.0: USB Mass Storage device detected
[  156.598835][    T9] usb-storage 12-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  156.602584][    T9] scsi host6: usb-storage 12-1:1.0
[  156.696612][ T9299] infiniband syz1: set down
[  156.696688][ T9299] infiniband syz1: added veth1
[  156.733065][ T9299] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  156.733157][ T9299] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  156.733192][ T9299] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  156.788545][ T9299] RDS/IB: syz1: added
[  156.797267][ T9299] smc: adding ib device syz1 with port count 1
[  156.800410][ T9299] smc:    ib device syz1 port 1 has no pnetid
[  156.840664][  T850] usb 12-1: USB disconnect, device number 8
[  156.842169][   T25] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[  156.861139][   T25] usb 13-1: device descriptor read/8, error -71
[  157.100319][   T25] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[  157.120451][   T25] usb 13-1: device descriptor read/8, error -71
[  157.230435][   T25] usb usb13-port1: unable to enumerate USB device
[  157.509465][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'.
[  157.577264][ T9322] can0: slcan on ttynull.
[  157.588090][ T9322] netlink: 92 bytes leftover after parsing attributes in process `syz.7.772'.
[  157.638956][  T850] libceph: connect (2)0.0.0.0:6789 error -22
[  157.644121][  T850] libceph: ceph_tcp_connect failed: -22
[  157.644138][  T850] libceph: mon0 (2)0.0.0.0:6789 connect error
[  157.649212][  T850] libceph: connect (2)0.0.0.0:6789 error -22
[  157.649312][  T850] libceph: ceph_tcp_connect failed: -22
[  157.649319][  T850] libceph: mon0 (2)0.0.0.0:6789 connect error
[  157.732862][ T9321] can0 (unregistered): slcan off ttynull.
[  157.900352][   T25] libceph: connect (2)0.0.0.0:6789 error -22
[  157.900530][   T25] libceph: ceph_tcp_connect failed: -22
[  157.900575][   T25] libceph: mon0 (2)0.0.0.0:6789 connect error
[  158.106974][ T9332] cifs: Unknown parameter 'lowerdir'
[  158.213428][ T9336] FAULT_INJECTION: forcing a failure.
[  158.213428][ T9336] name failslab, interval 1, probability 0, space 0, times 0
[  158.213493][ T9336] CPU: 2 UID: 0 PID: 9336 Comm: syz.6.777 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  158.213556][ T9336] Tainted: [L]=SOFTLOCKUP
[  158.213563][ T9336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  158.213572][ T9336] Call Trace:
[  158.213579][ T9336]  <TASK>
[  158.213585][ T9336]  dump_stack_lvl+0x100/0x190
[  158.213629][ T9336]  should_fail_ex.cold+0x5/0xa
[  158.213655][ T9336]  should_failslab+0xc2/0x120
[  158.213681][ T9336]  kmem_cache_alloc_noprof+0x92/0x6a0
[  158.213698][ T9336]  ? d_instantiate+0x8a/0xb0
[  158.213722][ T9336]  ? alloc_empty_file+0x5b/0x1c0
[  158.213747][ T9336]  alloc_empty_file+0x5b/0x1c0
[  158.213769][ T9336]  alloc_file_pseudo+0x183/0x290
[  158.213792][ T9336]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  158.213816][ T9336]  ? _raw_spin_unlock+0x28/0x50
[  158.213839][ T9336]  ? alloc_fd+0x471/0x7a0
[  158.213862][ T9336]  __anon_inode_getfile+0xe8/0x280
[  158.213883][ T9336]  __anon_inode_getfd+0x5c/0xe0
[  158.213906][ T9336]  __x64_sys_fsopen+0x190/0x220
[  158.213924][ T9336]  do_syscall_64+0x123/0x790
[  158.213947][ T9336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.213965][ T9336] RIP: 0033:0x7ff85879e159
[  158.213978][ T9336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.213994][ T9336] RSP: 002b:00007ff8596ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  158.214012][ T9336] RAX: ffffffffffffffda RBX: 00007ff858a25fa0 RCX: 00007ff85879e159
[  158.214022][ T9336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  158.214034][ T9336] RBP: 00007ff8596ed090 R08: 0000000000000000 R09: 0000000000000000
[  158.214044][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.214053][ T9336] R13: 00007ff858a26038 R14: 00007ff858a25fa0 R15: 00007ffffd11ec18
[  158.214076][ T9336]  </TASK>
[  158.410391][  T850] libceph: connect (2)0.0.0.0:6789 error -22
[  158.410606][  T850] libceph: ceph_tcp_connect failed: -22
[  158.410781][  T850] libceph: mon0 (2)0.0.0.0:6789 connect error
[  158.494159][ T9345] netlink: 'syz.6.780': attribute type 30 has an invalid length.
[  158.701452][ T9320] ceph: No mds server is up or the cluster is laggy
[  158.709244][ T9358] FAULT_INJECTION: forcing a failure.
[  158.709244][ T9358] name failslab, interval 1, probability 0, space 0, times 0
[  158.710679][ T9358] CPU: 2 UID: 0 PID: 9358 Comm: syz.8.786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  158.710725][ T9358] Tainted: [L]=SOFTLOCKUP
[  158.710732][ T9358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  158.710744][ T9358] Call Trace:
[  158.710750][ T9358]  <TASK>
[  158.710756][ T9358]  dump_stack_lvl+0x100/0x190
[  158.710801][ T9358]  should_fail_ex.cold+0x5/0xa
[  158.710824][ T9358]  should_failslab+0xc2/0x120
[  158.710846][ T9358]  kmem_cache_alloc_noprof+0x92/0x6a0
[  158.710868][ T9358]  ? security_file_alloc+0x34/0x2c0
[  158.710891][ T9358]  security_file_alloc+0x34/0x2c0
[  158.710910][ T9358]  init_file+0x95/0x480
[  158.710931][ T9358]  alloc_empty_file+0x79/0x1c0
[  158.710954][ T9358]  alloc_file_pseudo+0x183/0x290
[  158.710977][ T9358]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  158.711001][ T9358]  ? _raw_spin_unlock+0x28/0x50
[  158.711018][ T9358]  ? alloc_fd+0x471/0x7a0
[  158.711042][ T9358]  __anon_inode_getfile+0xe8/0x280
[  158.711062][ T9358]  __anon_inode_getfd+0x5c/0xe0
[  158.711087][ T9358]  __x64_sys_fsopen+0x190/0x220
[  158.711105][ T9358]  do_syscall_64+0x123/0x790
[  158.711127][ T9358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.711146][ T9358] RIP: 0033:0x7fb191b9e159
[  158.711162][ T9358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.711180][ T9358] RSP: 002b:00007fb192a35028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  158.711198][ T9358] RAX: ffffffffffffffda RBX: 00007fb191e25fa0 RCX: 00007fb191b9e159
[  158.711212][ T9358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  158.711220][ T9358] RBP: 00007fb192a35090 R08: 0000000000000000 R09: 0000000000000000
[  158.711232][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.711242][ T9358] R13: 00007fb191e26038 R14: 00007fb191e25fa0 R15: 00007fff4f1a3d48
[  158.711263][ T9358]  </TASK>
[  158.808624][   T43] kauditd_printk_skb: 22 callbacks suppressed
[  158.808689][   T43] audit: type=1326 audit(1788899430.118:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.7.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7279e159 code=0x7ffc0000
[  158.808744][   T43] audit: type=1326 audit(1788899430.118:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.7.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7279e159 code=0x7ffc0000
[  158.820810][   T43] audit: type=1326 audit(1788899430.128:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.7.787" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b7279e159 code=0x7ffc0000
[  158.820858][   T43] audit: type=1326 audit(1788899430.128:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.7.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7279e159 code=0x7ffc0000
[  158.820887][   T43] audit: type=1326 audit(1788899430.128:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.7.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7279e159 code=0x7ffc0000
[  158.820914][   T43] audit: type=1326 audit(1788899430.128:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.7.787" exe="/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0b7279e159 code=0x7ffc0000
[  158.848671][   T43] audit: type=1400 audit(1788899430.148:806): avc:  denied  { kexec_image_load } for  pid=9359 comm="syz.7.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  159.030586][ T9374] sd 0:0:0:0: PR command failed: 1026
[  159.030672][ T9374] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  159.030705][ T9374] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  159.130598][ T9375] loop4: detected capacity change from 0 to 524287964
[  159.150448][ T9375] kvm [9373]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6
[  159.515541][ T9356] nvme nvme0: failed to connect socket: -512
[  159.684097][ T9366] nvme_fabrics: missing parameter 'transport=%s'
[  159.696487][ T9366] nvme_fabrics: missing parameter 'nqn=%s'
[  160.067609][ T9362] kexec: Could not allocate control_code_buffer
[  160.080171][   T25] usb 13-1: new high-speed USB device number 6 using dummy_hcd
[  160.233192][   T25] usb 13-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  160.239721][   T25] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  160.239928][   T25] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  160.251165][   T25] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.251215][   T25] usb 13-1: Product: syz
[  160.251254][   T25] usb 13-1: Manufacturer: syz
[  160.251284][   T25] usb 13-1: SerialNumber: syz
[  160.371035][   T43] audit: type=1400 audit(1788899431.678:807): avc:  denied  { bind } for  pid=9409 comm="syz.7.796" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  160.488677][   T25] usblp 13-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  160.667315][ T9415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=9415 comm=syz.6.798
[  160.687548][   T43] audit: type=1400 audit(1788899431.998:808): avc:  denied  { read write } for  pid=9386 comm="syz.8.791" name="lp0" dev="devtmpfs" ino=3129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  160.698372][   T43] audit: type=1400 audit(1788899432.018:809): avc:  denied  { open } for  pid=9386 comm="syz.8.791" path="/dev/usb/lp0" dev="devtmpfs" ino=3129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  161.027658][ T9428] No source specified
[  161.405009][ T9442] comedi comedi4: bad chanlist[0]=0x0000ddb7 chan=56759 range length=2
[  161.599749][ T9443] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[  161.688592][ T9443] pci 0000:00:00.0: Adding to iommu group 0
[  161.720687][ T9445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8089 sclass=netlink_route_socket pid=9445 comm=syz.7.808
[  161.768887][ T9443] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[  161.772646][ T9443] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[  161.791648][ T9443] pci 0000:00:1f.0: Adding to iommu group 8
[  161.830740][ T9443] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[  161.902651][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.809'.
[  161.902725][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.809'.
[  161.903044][ T9450] netlink: 'syz.7.809': attribute type 19 has an invalid length.
[  161.904518][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.809'.
[  161.904533][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.809'.
[  162.086115][ T9454] overlayfs: failed to resolve './file0': -2
[  162.714150][ T9469] netlink: 'syz.1.815': attribute type 2 has an invalid length.
[  162.714230][ T9469] netlink: 220 bytes leftover after parsing attributes in process `syz.1.815'.
[  162.791674][ T6120] e1000 0000:00:06.0 eth0: Reset adapter
[  162.954219][ T1513] usb 13-1: USB disconnect, device number 6
[  163.017834][ T1513] usblp0: removed
[  163.120818][ T9482] loop0: detected capacity change from 0 to 3904
[  163.154219][ T9466] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[  163.199022][ T9482] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  163.199076][ T9482] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[  163.199112][ T9482] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  163.199159][ T9482]  loop0:
[  163.252886][   T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  163.421698][ T9491] overlayfs: failed to resolve './file0': -2
[  163.549929][ T1513] usb 13-1: new full-speed USB device number 7 using dummy_hcd
[  163.609772][ T5883] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[  163.748099][ T1513] usb 13-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  163.752229][ T1513] usb 13-1: unable to read config index 0 descriptor/start: -71
[  163.752250][ T1513] usb 13-1: can't read configurations, error -71
[  163.852726][   T43] kauditd_printk_skb: 11 callbacks suppressed
[  163.854951][   T43] audit: type=1400 audit(1788899435.168:821): avc:  denied  { write } for  pid=9509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  163.926037][   T43] audit: type=1400 audit(1788899435.238:822): avc:  denied  { write } for  pid=9512 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  164.029213][   T43] audit: type=1400 audit(1788899435.338:823): avc:  denied  { write } for  pid=9514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  164.088710][   T43] audit: type=1400 audit(1788899435.398:824): avc:  denied  { write } for  pid=9517 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  164.195119][   T43] audit: type=1400 audit(1788899435.508:825): avc:  denied  { write } for  pid=9519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  164.266779][   T43] audit: type=1400 audit(1788899435.578:826): avc:  denied  { write } for  pid=9522 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.501092][ T6120] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  168.744276][ T5840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.747942][ T5840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.828649][ T5840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.828732][ T5840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.918729][ T5840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.918821][ T5840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.991586][ T5840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.991681][ T5840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.143792][ T5840] bridge_slave_1: left allmulticast mode
[  169.143859][ T5840] bridge_slave_1: left promiscuous mode
[  169.144048][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.160531][ T5840] bridge_slave_0: left allmulticast mode
[  169.164124][ T5840] bridge_slave_0: left promiscuous mode
[  169.166748][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.313929][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.319090][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.325506][ T5840] bond0 (unregistering): Released all slaves
[  169.330857][ T5840] bond1 (unregistering): Released all slaves
[  169.406837][   T43] audit: type=1400 audit(1788899440.708:827): avc:  denied  { write } for  pid=9533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.507390][   T43] audit: type=1400 audit(1788899440.818:828): avc:  denied  { write } for  pid=9536 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.573424][ T5445] 8021q: adding VLAN 0 to HW filter on device eth20
[  169.696199][   T43] audit: type=1400 audit(1788899441.008:829): avc:  denied  { write } for  pid=9540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.784447][ T5840] hsr_slave_0: left promiscuous mode
[  169.787044][ T5840] hsr_slave_1: left promiscuous mode
[  169.787758][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.787771][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.800225][   T43] audit: type=1400 audit(1788899441.118:830): avc:  denied  { write } for  pid=9543 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.800991][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.801005][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.816734][ T5840] veth1_macvtap: left promiscuous mode
[  169.816798][ T5840] veth0_macvtap: left promiscuous mode
[  169.816933][ T5840] veth1_vlan: left promiscuous mode
[  169.816970][ T5840] veth0_vlan: left promiscuous mode
[  170.052863][ T5840] team0 (unregistering): Port device team_slave_1 removed
[  170.078295][ T5840] team0 (unregistering): Port device team_slave_0 removed
[  170.208394][ T5445] 8021q: adding VLAN 0 to HW filter on device eth18
[  170.260038][   T43] audit: type=1400 audit(1788899441.578:831): avc:  denied  { write } for  pid=9546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.373747][   T43] audit: type=1400 audit(1788899441.688:832): avc:  denied  { write } for  pid=9549 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.531450][   T43] audit: type=1400 audit(1788899441.848:833): avc:  denied  { write } for  pid=9552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.582891][   T43] audit: type=1400 audit(1788899441.898:834): avc:  denied  { write } for  pid=9555 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.648993][ T5445] 8021q: adding VLAN 0 to HW filter on device eth19
[  170.747036][   T43] audit: type=1400 audit(1788899442.058:835): avc:  denied  { write } for  pid=9558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.814020][   T43] audit: type=1400 audit(1788899442.128:836): avc:  denied  { write } for  pid=9561 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.879318][ T5445] 8021q: adding VLAN 0 to HW filter on device eth21
[  173.152814][ T9578] xt_l2tp: v2 sid > 0xffff: 4294967294
[  173.224326][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.241326][ T9578] bridge_slave_0 (unregistering): left allmulticast mode
[  173.245998][ T9578] bridge_slave_0 (unregistering): left promiscuous mode
[  173.249162][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.514646][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.832'.
[  173.593927][ T9610] bond1: Invalid ad_actor_system MAC address.
[  173.599572][ T9610] bond1: option ad_actor_system: invalid value (65541)
[  173.627577][ T9610] bond1 (unregistering): Released all slaves
[  173.878029][ T9618] vlan3: entered promiscuous mode
[  173.878082][ T9618] bridge0: entered promiscuous mode
[  173.896789][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.835'.
[  174.487052][ T9643] bond0: entered promiscuous mode
[  174.493047][ T9643] bond_slave_0: entered promiscuous mode
[  174.493292][ T9643] bond_slave_1: entered promiscuous mode
[  174.515797][ T9643] batadv0: entered promiscuous mode
[  174.522764][ T9643] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  174.522853][ T9643] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  174.529528][ T9643] hsr1: entered promiscuous mode
[  174.566201][   T43] kauditd_printk_skb: 9 callbacks suppressed
[  174.566308][   T43] audit: type=1400 audit(1788899445.878:846): avc:  denied  { write } for  pid=9648 comm="syz.7.840" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  174.570815][ T9643] 8021q: adding VLAN 0 to HW filter on device hsr1
[  174.642253][ T9651] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  174.652953][ T9643] bond0: left promiscuous mode
[  174.655551][ T9643] bond_slave_0: left promiscuous mode
[  174.658496][ T9643] bond_slave_1: left promiscuous mode
[  174.668039][ T9643] batadv0: left promiscuous mode
[  174.680288][ T9649] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  174.716748][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.841'.
[  174.773134][   T43] audit: type=1400 audit(1788899446.088:847): avc:  denied  { setopt } for  pid=9661 comm="syz.8.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  174.856660][ T9668] input: syz0 as /devices/virtual/input/input11
[  174.967611][ T9676] netlink: 44 bytes leftover after parsing attributes in process `syz.7.848'.
[  174.969616][ T9676] netlink: 56 bytes leftover after parsing attributes in process `syz.7.848'.
[  174.969748][ T9677] netlink: 56 bytes leftover after parsing attributes in process `syz.7.848'.
[  175.079647][ T9683] xt_policy: output policy not valid in PREROUTING and INPUT
[  175.085234][ T7705] usb 13-1: new high-speed USB device number 9 using dummy_hcd
[  175.164885][   T43] audit: type=1400 audit(1788899446.478:848): avc:  denied  { mount } for  pid=9684 comm="syz.7.850" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  175.178641][   T43] audit: type=1400 audit(1788899446.488:849): avc:  denied  { write } for  pid=9684 comm="syz.7.850" name="tracing_on" dev="tracefs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  175.188120][   T43] audit: type=1400 audit(1788899446.488:850): avc:  denied  { open } for  pid=9684 comm="syz.7.850" path="/130/dir0/tracing_on" dev="tracefs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  175.217944][ T9691] xt_policy: output policy not valid in PREROUTING and INPUT
[  175.229594][ T9686] ipvlan2: entered allmulticast mode
[  175.229688][ T9686] batadv_slave_1: entered allmulticast mode
[  175.237824][ T9686] batman_adv: batadv0: Adding interface: ipvlan2
[  175.238563][ T9686] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  175.238591][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.238607][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.238619][ T9686] batman_adv: batadv0: Interface activated: ipvlan2
[  175.251898][ T7705] usb 13-1: Using ep0 maxpacket: 8
[  175.262098][ T7705] usb 13-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  175.278200][ T7705] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.286232][ T7705] usb 13-1: config 0 descriptor??
[  175.293086][ T9695] ip6t_srh: unknown srh match flags  45F8
[  175.299249][ T7705] usb 13-1: probing VID:PID(0424:012C)   
[  175.303994][ T7705] usb 13-1: vub300 testing BULK IN EndPoint(0) 81
[  175.308567][ T7705] usb 13-1: vub300 testing BULK OUT EndPoint(1) 02
[  175.308634][ T7705] usb 13-1: vub300 testing BULK IN EndPoint(2) 83
[  175.308669][ T7705] usb 13-1: vub300 testing BULK OUT EndPoint(3) 04
[  175.308703][ T7705] usb 13-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  175.496698][   T43] audit: type=1400 audit(1788899446.808:851): avc:  denied  { write } for  pid=9696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.600174][   T43] audit: type=1400 audit(1788899446.918:852): avc:  denied  { unmount } for  pid=7675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  175.718492][   T43] audit: type=1400 audit(1788899447.028:853): avc:  denied  { write } for  pid=9708 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.727859][ T7705] usb 13-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  175.788519][ T9709] pimreg: entered allmulticast mode
[  175.803585][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'.
[  175.803649][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'.
[  175.917587][   T43] audit: type=1400 audit(1788899447.228:854): avc:  denied  { create } for  pid=9719 comm="syz.7.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  175.928485][ T7705] usb 13-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  175.942170][   T43] audit: type=1400 audit(1788899447.248:855): avc:  denied  { connect } for  pid=9719 comm="syz.7.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  176.680577][ T9738] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  176.819100][ T9743] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  176.819263][ T9743] qnx6: wrong signature (magic) in superblock #1.
[  176.835991][ T9743] qnx6: unable to read the first superblock
[  176.982175][ T9747] CUSE: unknown device info ""
[  176.982216][ T9747] CUSE: unknown device info ""
[  176.982338][ T9747] CUSE: unknown device info ""
[  176.982363][ T9747] CUSE: unknown device info ""
[  176.982387][ T9747] CUSE: DEVNAME unspecified
[  177.047241][ T9750] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  177.047282][ T9750] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  177.056059][ T9750] vhci_hcd vhci_hcd.0: Device attached
[  177.063511][ T9752] vhci_hcd: cannot find the pending unlink 77
[  177.131756][ T9752] vhci_hcd: connection closed
[  177.132190][ T5833] vhci_hcd vhci_hcd.7: stop threads
[  177.132251][ T5833] vhci_hcd vhci_hcd.7: release socket
[  177.132292][ T5833] vhci_hcd vhci_hcd.7: disconnect device
[  177.906218][ T9741] raw-gadget.0 gadget.8: fail, usb_ep_queue returned -108
[  177.958523][ T9670] raw-gadget.0 gadget.8: fail, usb_ep_queue returned -108
[  178.065304][ T9790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9790 comm=syz.7.873
[  178.117262][ T9793] netlink: 88 bytes leftover after parsing attributes in process `syz.7.874'.
[  178.173184][ T9786] nfs4: Bad value for 'source'
[  178.328659][ T9805] FAULT_INJECTION: forcing a failure.
[  178.328659][ T9805] name fail_futex, interval 1, probability 0, space 0, times 0
[  178.328740][ T9805] CPU: 0 UID: 0 PID: 9805 Comm: syz.1.877 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  178.328778][ T9805] Tainted: [L]=SOFTLOCKUP
[  178.328786][ T9805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  178.328797][ T9805] Call Trace:
[  178.328803][ T9805]  <TASK>
[  178.328811][ T9805]  dump_stack_lvl+0x100/0x190
[  178.328839][ T9805]  should_fail_ex.cold+0x5/0xa
[  178.328863][ T9805]  get_futex_key+0x1d0/0x14f0
[  178.328888][ T9805]  ? __pfx_get_futex_key+0x10/0x10
[  178.328915][ T9805]  futex_wake+0xf4/0x5e0
[  178.328964][ T9805]  ? __pfx_futex_wake+0x10/0x10
[  178.328987][ T9805]  ? kasan_quarantine_put+0x104/0x240
[  178.329007][ T9805]  ? putname+0xb1/0x110
[  178.329027][ T9805]  ? kmem_cache_free+0x127/0x6c0
[  178.329056][ T9805]  do_futex+0x2b2/0x440
[  178.329081][ T9805]  ? __pfx_do_futex+0x10/0x10
[  178.329101][ T9805]  ? __pfx_do_sys_openat2+0x10/0x10
[  178.329129][ T9805]  __x64_sys_futex+0x34f/0x4d0
[  178.329153][ T9805]  ? __x64_sys_openat+0x12d/0x210
[  178.329190][ T9805]  ? __pfx___x64_sys_futex+0x10/0x10
[  178.329224][ T9805]  do_syscall_64+0x123/0x790
[  178.329250][ T9805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.329268][ T9805] RIP: 0033:0x7f194db9e159
[  178.329284][ T9805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.329299][ T9805] RSP: 002b:00007f194eb250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  178.329316][ T9805] RAX: ffffffffffffffda RBX: 00007f194de25fa8 RCX: 00007f194db9e159
[  178.329328][ T9805] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f194de25fac
[  178.329338][ T9805] RBP: 00007f194de25fa0 R08: 0000000000000001 R09: 0000000000000000
[  178.329348][ T9805] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  178.329359][ T9805] R13: 00007f194de26038 R14: 00007fffca0dc020 R15: 00007fffca0dc108
[  178.329383][ T9805]  </TASK>
[  178.435148][ T9805] FAULT_INJECTION: forcing a failure.
[  178.435148][ T9805] name failslab, interval 1, probability 0, space 0, times 0
[  178.435310][ T9805] CPU: 0 UID: 0 PID: 9805 Comm: syz.1.877 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  178.435349][ T9805] Tainted: [L]=SOFTLOCKUP
[  178.435356][ T9805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  178.435365][ T9805] Call Trace:
[  178.435371][ T9805]  <TASK>
[  178.435379][ T9805]  dump_stack_lvl+0x100/0x190
[  178.435408][ T9805]  should_fail_ex.cold+0x5/0xa
[  178.435431][ T9805]  should_failslab+0xc2/0x120
[  178.435453][ T9805]  __kmalloc_noprof+0xfc/0x840
[  178.435469][ T9805]  ? rcu_is_watching+0x13/0xc0
[  178.435493][ T9805]  ? tomoyo_realpath_from_path+0xb6/0x690
[  178.435517][ T9805]  tomoyo_realpath_from_path+0xb6/0x690
[  178.435542][ T9805]  tomoyo_path_number_perm+0x23c/0x580
[  178.435567][ T9805]  ? tomoyo_path_number_perm+0x22e/0x580
[  178.435592][ T9805]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  178.435642][ T9805]  ? __pfx_futex_wait+0x10/0x10
[  178.435674][ T9805]  ? __lock_acquire+0x5c0/0x1f40
[  178.435701][ T9805]  ? __fget_files+0x34/0x3d0
[  178.435720][ T9805]  ? find_held_lock+0x2b/0x80
[  178.435740][ T9805]  ? hook_file_ioctl_common+0x140/0x440
[  178.435766][ T9805]  ? __fget_files+0x21f/0x3d0
[  178.435786][ T9805]  security_file_ioctl+0xd3/0x230
[  178.435808][ T9805]  __x64_sys_ioctl+0xb7/0x210
[  178.435828][ T9805]  do_syscall_64+0x123/0x790
[  178.435852][ T9805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.435870][ T9805] RIP: 0033:0x7f194db9e159
[  178.435886][ T9805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.435902][ T9805] RSP: 002b:00007f194eb25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  178.435919][ T9805] RAX: ffffffffffffffda RBX: 00007f194de25fa0 RCX: 00007f194db9e159
[  178.435930][ T9805] RDX: 0000200000000000 RSI: 000000004020ae46 RDI: 0000000000000008
[  178.435940][ T9805] RBP: 00007f194dc35024 R08: 0000000000000000 R09: 0000000000000000
[  178.435948][ T9805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.435958][ T9805] R13: 00007f194de26038 R14: 00007f194de25fa0 R15: 00007fffca0dc108
[  178.435980][ T9805]  </TASK>
[  178.437822][ T9805] ERROR: Out of memory at tomoyo_realpath_from_path.
[  178.787809][ T5885] usb 13-1: USB disconnect, device number 9
[  178.968014][ T5885] USB vub300 remote SDIO host controller[0] now disconnected
[  179.326190][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.887'.
[  179.335448][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.887'.
[  179.339589][ T9841] netlink: 'syz.7.887': attribute type 12 has an invalid length.
[  179.534919][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.891'.
[  179.535003][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.891'.
[  179.831034][ T9863] syzkaller0: entered promiscuous mode
[  179.833871][ T9863] syzkaller0: entered allmulticast mode
[  179.841796][ T9860] PF_CAN: dropped non conform CAN skbuff: dev type 820, len 65487
[  179.997999][ T9867] FAULT_INJECTION: forcing a failure.
[  179.997999][ T9867] name failslab, interval 1, probability 0, space 0, times 0
[  180.003152][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.6.895 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.003200][ T9867] Tainted: [L]=SOFTLOCKUP
[  180.003208][ T9867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  180.003220][ T9867] Call Trace:
[  180.003226][ T9867]  <TASK>
[  180.003234][ T9867]  dump_stack_lvl+0x100/0x190
[  180.003263][ T9867]  should_fail_ex.cold+0x5/0xa
[  180.003289][ T9867]  should_failslab+0xc2/0x120
[  180.003311][ T9867]  __kmalloc_cache_noprof+0x91/0x6d0
[  180.003336][ T9867]  ? io_uring_setup.cold+0x6c/0x1cde
[  180.003349][ T9867]  io_uring_setup.cold+0x6c/0x1cde
[  180.003361][ T9867]  ? lock_acquire+0x1d1/0x380
[  180.003372][ T9867]  ? avc_has_perm_noaudit+0x56/0x3b0
[  180.003387][ T9867]  ? __pfx_io_uring_setup+0x10/0x10
[  180.003403][ T9867]  ? find_held_lock+0x2b/0x80
[  180.003426][ T9867]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  180.003447][ T9867]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  180.003480][ T9867]  ? xfd_validate_state+0x129/0x190
[  180.003497][ T9867]  __x64_sys_io_uring_setup+0xc2/0x170
[  180.003510][ T9867]  do_syscall_64+0x123/0x790
[  180.003529][ T9867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.003545][ T9867] RIP: 0033:0x7ff85879e159
[  180.003561][ T9867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.003580][ T9867] RSP: 002b:00007ff8596ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  180.003606][ T9867] RAX: ffffffffffffffda RBX: 00007ff858a25fa0 RCX: 00007ff85879e159
[  180.003616][ T9867] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a
[  180.003624][ T9867] RBP: 00007ff858835024 R08: 0000000000000000 R09: 0000000000000000
[  180.003631][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.003638][ T9867] R13: 00007ff858a26038 R14: 00007ff858a25fa0 R15: 00007ffffd11ec18
[  180.003654][ T9867]  </TASK>
[  180.105058][ T9870] xt_nfacct: accounting object `syz0' does not exist
[  180.277567][ T9874] netlink: 76 bytes leftover after parsing attributes in process `syz.6.897'.
[  180.297641][ T9874] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  180.560504][ T9884] overlayfs: missing 'lowerdir'
[  180.571484][ T9886] syz_tun: entered allmulticast mode
[  180.587951][ T9890] syz_tun: left allmulticast mode
[  180.932981][   T43] kauditd_printk_skb: 11 callbacks suppressed
[  180.933074][   T43] audit: type=1400 audit(1788899452.248:867): avc:  denied  { transfer } for  pid=9911 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  181.029416][ T9922] netlink: 'syz.1.913': attribute type 13 has an invalid length.
[  181.037037][ T9916] ip6tnl2: entered allmulticast mode
[  181.052794][ T9922] gretap0: refused to change device tx_queue_len
[  181.052863][ T9922] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  181.053945][ T5784] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  181.054085][ T5784] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  181.073255][   T43] audit: type=1400 audit(1788899452.388:868): avc:  denied  { mount } for  pid=9920 comm="syz.1.913" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  181.091443][ T7705] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  181.115793][   T43] audit: type=1400 audit(1788899452.428:869): avc:  denied  { write } for  pid=9918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.277112][   T43] audit: type=1400 audit(1788899452.588:870): avc:  denied  { write } for  pid=9930 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.301392][ T7705] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  181.351979][ T7705] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  181.602795][   T43] audit: type=1400 audit(1788899452.918:871): avc:  denied  { write } for  pid=9944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.638761][ T9954] netlink: 236 bytes leftover after parsing attributes in process `syz.1.921'.
[  181.706493][ T9956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=800 sclass=netlink_route_socket pid=9956 comm=syz.8.922
[  181.717415][   T43] audit: type=1400 audit(1788899453.028:872): avc:  denied  { write } for  pid=9957 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.852684][   T43] audit: type=1400 audit(1788899453.168:873): avc:  denied  { mount } for  pid=9963 comm="syz.8.924" name="/" dev="hugetlbfs" ino=41301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  181.855826][   T43] audit: type=1400 audit(1788899453.168:874): avc:  denied  { remount } for  pid=9963 comm="syz.8.924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  181.916473][   T43] audit: type=1400 audit(1788899453.228:875): avc:  denied  { unmount } for  pid=8634 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  181.923430][   T43] audit: type=1400 audit(1788899453.228:876): avc:  denied  { write } for  pid=9958 comm="syz.7.923" name="/" dev="9p" ino=74743271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  181.993334][ T9968] syzkaller1: entered promiscuous mode
[  181.993369][ T9968] syzkaller1: entered allmulticast mode
[  182.204272][ T9978] netlink: 'syz.8.927': attribute type 26 has an invalid length.
[  182.267750][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.928'.
[  182.334605][ T9983] sg_write: data in/out 3237084/136 bytes for SCSI command 0x0-- guessing data in;
[  182.334605][ T9983]    program syz.7.928 not setting count and/or reply_len properly
[  182.361232][ T9989] FAULT_INJECTION: forcing a failure.
[  182.361232][ T9989] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.361314][ T9989] CPU: 2 UID: 0 PID: 9989 Comm: syz.8.929 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  182.361353][ T9989] Tainted: [L]=SOFTLOCKUP
[  182.361360][ T9989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  182.361371][ T9989] Call Trace:
[  182.361377][ T9989]  <TASK>
[  182.361384][ T9989]  dump_stack_lvl+0x100/0x190
[  182.361434][ T9989]  should_fail_ex.cold+0x5/0xa
[  182.361459][ T9989]  _copy_from_user+0x2e/0xd0
[  182.361485][ T9989]  load_msg+0x253/0x4a0
[  182.361506][ T9989]  do_msgrcv+0x209/0x16f0
[  182.361524][ T9989]  ? __pfx_do_msg_fill+0x10/0x10
[  182.361543][ T9989]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  182.361568][ T9989]  ? __pfx_do_msgrcv+0x10/0x10
[  182.361590][ T9989]  ? __pfx___x64_sys_timer_create+0x10/0x10
[  182.361616][ T9989]  ? xfd_validate_state+0x129/0x190
[  182.361643][ T9989]  ? do_syscall_64+0x123/0x790
[  182.361664][ T9989]  do_syscall_64+0x123/0x790
[  182.361686][ T9989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.361705][ T9989] RIP: 0033:0x7fb191b9e159
[  182.361721][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.361737][ T9989] RSP: 002b:00007fb192a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046
[  182.361754][ T9989] RAX: ffffffffffffffda RBX: 00007fb191e25fa0 RCX: 00007fb191b9e159
[  182.361766][ T9989] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000
[  182.361777][ T9989] RBP: 00007fb191c35024 R08: 0000000000004800 R09: 0000000000000000
[  182.361788][ T9989] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  182.361799][ T9989] R13: 00007fb191e26038 R14: 00007fb191e25fa0 R15: 00007fff4f1a3d48
[  182.361822][ T9989]  </TASK>
[  182.730490][  T850] usb 12-1: new high-speed USB device number 9 using dummy_hcd
[  182.881923][  T850] usb 12-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  182.884668][  T850] usb 12-1: config 1 has an invalid interface number: 3 but max is 0
[  182.884688][  T850] usb 12-1: config 1 has no interface number 0
[  182.889428][  T850] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.889448][  T850] usb 12-1: Product: syz
[  182.889460][  T850] usb 12-1: Manufacturer: syz
[  182.889470][  T850] usb 12-1: SerialNumber: syz
[  182.943429][  T850] usb 12-1: 3:1 : does not exist
[  182.943525][  T850] usb 12-1: 3:2 : does not exist
[  183.002683][T10026] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  183.210258][T10037] xt_IDLETIMER: timeout value is too big
[  183.677168][   T10] usb 12-1: USB disconnect, device number 9
[  183.757311][ T9994] FAULT_INJECTION: forcing a failure.
[  183.757311][ T9994] name failslab, interval 1, probability 0, space 0, times 0
[  183.757415][ T9994] CPU: 2 UID: 0 PID: 9994 Comm: syz.7.931 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  183.757444][ T9994] Tainted: [L]=SOFTLOCKUP
[  183.757451][ T9994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  183.757462][ T9994] Call Trace:
[  183.757469][ T9994]  <TASK>
[  183.757476][ T9994]  dump_stack_lvl+0x100/0x190
[  183.757508][ T9994]  should_fail_ex.cold+0x5/0xa
[  183.757536][ T9994]  should_failslab+0xc2/0x120
[  183.757560][ T9994]  kmem_cache_alloc_noprof+0x92/0x6a0
[  183.757579][ T9994]  ? __x64_sys_futex+0x358/0x4d0
[  183.757623][ T9994]  ? do_getname+0x35/0x390
[  183.757655][ T9994]  do_getname+0x35/0x390
[  183.757685][ T9994]  __x64_sys_unlinkat+0xa0/0x130
[  183.757712][ T9994]  do_syscall_64+0x123/0x790
[  183.757738][ T9994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.757756][ T9994] RIP: 0033:0x7f0b7279e159
[  183.757773][ T9994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.757791][ T9994] RSP: 002b:00007f0b736b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  183.757809][ T9994] RAX: ffffffffffffffda RBX: 00007f0b72a25fa0 RCX: 00007f0b7279e159
[  183.757822][ T9994] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  183.757834][ T9994] RBP: 00007f0b72835024 R08: 0000000000000000 R09: 0000000000000000
[  183.757845][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.757855][ T9994] R13: 00007f0b72a26038 R14: 00007f0b72a25fa0 R15: 00007ffc0e812e28
[  183.757879][ T9994]  </TASK>
[  184.235943][T10070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'.
[  184.427844][T10082] loop5: detected capacity change from 0 to 7
[  184.444961][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.445207][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.455603][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.455740][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.465045][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.465176][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.474533][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.474639][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.482288][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.482346][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.487218][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.487280][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.487418][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.487477][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.487512][T10082] ldm_validate_partition_table(): Disk read failed.
[  184.487610][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.487659][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.487775][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.487824][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.488049][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  184.488102][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  184.504030][T10082] Dev loop5: unable to read RDB block 0
[  184.513236][T10082]  loop5: unable to read partition table
[  184.513429][T10082] loop5: partition table beyond EOD, truncated
[  184.513465][T10082] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  184.598939][T10084] MINIX-fs: blocksize too small for device
[  184.750413][T10096] EXT4-fs (nbd8): unable to read superblock
[  184.801140][   T50] usb 12-1: new low-speed USB device number 10 using dummy_hcd
[  184.951109][   T50] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  184.956293][   T50] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  184.956377][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  184.956416][   T50] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.956452][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  184.956489][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  184.982686][   T50] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  184.982760][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  184.982807][   T50] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  184.982844][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  184.982881][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  185.006085][   T50] usb 12-1: config 168 descriptor has 1 excess byte, ignoring
[  185.009775][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  185.010406][   T50] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  185.010431][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  185.010452][   T50] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  185.011093][   T10] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  185.035879][T10098] netlink: 'syz.8.952': attribute type 1 has an invalid length.
[  185.043751][   T50] usb 12-1: string descriptor 0 read error: -22
[  185.046627][   T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.080382][   T50] adutux 12-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  185.090671][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.8.953'.
[  185.096747][T10102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10102 comm=syz.8.953
[  185.170377][   T10] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  185.171321][   T10] usb 11-1: config 0 has no interfaces?
[  185.171349][   T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.181215][   T10] usb 11-1: config 0 descriptor??
[  185.249363][T10106] netlink: 'syz.8.955': attribute type 4 has an invalid length.
[  185.267668][T10109] FAULT_INJECTION: forcing a failure.
[  185.267668][T10109] name failslab, interval 1, probability 0, space 0, times 0
[  185.267777][T10109] CPU: 0 UID: 0 PID: 10109 Comm: syz.8.955 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  185.267818][T10109] Tainted: [L]=SOFTLOCKUP
[  185.267826][T10109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  185.267838][T10109] Call Trace:
[  185.267844][T10109]  <TASK>
[  185.267852][T10109]  dump_stack_lvl+0x100/0x190
[  185.267882][T10109]  should_fail_ex.cold+0x5/0xa
[  185.267908][T10109]  should_failslab+0xc2/0x120
[  185.267931][T10109]  __kmalloc_noprof+0xfc/0x840
[  185.267950][T10109]  ? tomoyo_encode2+0xfb/0x3c0
[  185.267975][T10109]  tomoyo_encode2+0xfb/0x3c0
[  185.267998][T10109]  tomoyo_encode+0x29/0x50
[  185.268015][T10109]  tomoyo_realpath_from_path+0x18c/0x690
[  185.268040][T10109]  tomoyo_path_number_perm+0x23c/0x580
[  185.268074][T10109]  ? tomoyo_path_number_perm+0x22e/0x580
[  185.268105][T10109]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  185.268133][T10109]  ? __pfx_futex_wait+0x10/0x10
[  185.268166][T10109]  ? __lock_acquire+0x5c0/0x1f40
[  185.268196][T10109]  ? __fget_files+0x34/0x3d0
[  185.268217][T10109]  ? find_held_lock+0x2b/0x80
[  185.268239][T10109]  ? hook_file_ioctl_common+0x140/0x440
[  185.268263][T10109]  ? __fget_files+0x21f/0x3d0
[  185.268285][T10109]  security_file_ioctl+0xd3/0x230
[  185.268303][T10109]  __x64_sys_ioctl+0xb7/0x210
[  185.268323][T10109]  do_syscall_64+0x123/0x790
[  185.268347][T10109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.268365][T10109] RIP: 0033:0x7fb191b9e159
[  185.268381][T10109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.268397][T10109] RSP: 002b:00007fb1929d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  185.268436][T10109] RAX: ffffffffffffffda RBX: 00007fb191e26270 RCX: 00007fb191b9e159
[  185.268448][T10109] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 000000000000003e
[  185.268459][T10109] RBP: 00007fb191c35024 R08: 0000000000000000 R09: 0000000000000000
[  185.268470][T10109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.268479][T10109] R13: 00007fb191e26308 R14: 00007fb191e26270 R15: 00007fff4f1a3d48
[  185.268504][T10109]  </TASK>
[  185.283477][T10109] ERROR: Out of memory at tomoyo_realpath_from_path.
[  185.420075][    C2] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  185.470759][   T10] usb 11-1: USB disconnect, device number 11
[  185.492785][T10118] fuse: Bad value for 'rootmode'
[  185.997078][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.8.959'.
[  186.192100][   T43] kauditd_printk_skb: 23 callbacks suppressed
[  186.194850][   T43] audit: type=1400 audit(1788899457.508:900): avc:  denied  { append } for  pid=10142 comm="syz.6.962" name="uprobe_events" dev="tracefs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  186.218530][T10143] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  186.272654][T10143] cramfs: wrong magic
[  186.557984][   T65] Bluetooth: hci0: unexpected event for opcode 0x203c
[  186.610018][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  186.716573][   T43] audit: type=1400 audit(1788899458.028:901): avc:  denied  { accept } for  pid=10154 comm="syz.6.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  186.771004][   T10] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  186.775035][   T10] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[  186.775051][   T10] usb 6-1: config 1 has no interface number 0
[  186.779776][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.779791][   T10] usb 6-1: Product: syz
[  186.779798][   T10] usb 6-1: Manufacturer: syz
[  186.779862][   T10] usb 6-1: SerialNumber: syz
[  186.833210][   T10] usb 6-1: 3:1 : does not exist
[  186.833270][   T10] usb 6-1: 3:2 : does not exist
[  187.247366][T10170] binder: 10168:10170 ioctl c0306201 2000000001c0 returned -14
[  187.319633][T10172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  187.505879][ T5103] usb 12-1: USB disconnect, device number 10
[  187.596101][T10172] kvm: requested 23466 ns i8254 timer period limited to 200000 ns
[  187.610226][   T10] usb 6-1: USB disconnect, device number 20
[  187.833665][T10177] fuseblk: Unknown parameter '��������0x0000000000000008'
[  188.010703][   T43] audit: type=1400 audit(1788899459.328:902): avc:  denied  { wake_alarm } for  pid=10186 comm="syz.7.976" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  188.033962][T10187] netlink: 'syz.7.976': attribute type 1 has an invalid length.
[  188.113598][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.114679][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.114793][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.114891][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.117418][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.117521][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.117621][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.117714][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.117813][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.6.978
[  188.319240][T10199] dlm: no locking on control device
[  188.335883][   T65] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  188.358943][T10202] wusb3801 0-0004: supply vbus not found, using dummy regulator
[  188.6017
** replaying previous printk message **
[  188.601722][T10194] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x61f pfn:0x401df
[  188.601781][T10194] memcg:ffff88802bb74200
[  188.601815][T10194] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  188.601856][T10194] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000
[  188.601891][T10194] raw: 000000000000061f 0000000000000000 00000001ffffffff ffff88802bb74200
[  188.601918][T10194] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping))
[  188.601946][T10194] page_owner tracks the page as allocated
[  188.601967][T10194] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10194, tgid 10188 (syz.8.977), ts 188601678461
[  188.602014][T10194]  post_alloc_hook+0xfd/0x120
[  188.602056][T10194]  get_page_from_freelist+0x110d/0x35d0
[  188.602099][T10194]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  188.602142][T10194]  alloc_pages_mpol+0x201/0x550
[  188.602179][T10194]  folio_alloc_noprof+0x22/0x250
[  188.602219][T10194]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  188.602254][T10194]  filemap_alloc_folio_noprof+0x5e/0x80
[  188.602287][T10194]  page_cache_ra_order+0x539/0xed0
[  188.602322][T10194]  filemap_fault+0x1943/0x3130
[  188.602360][T10194]  __do_fault+0x10b/0x440
[  188.602392][T10194]  do_fault+0xb3f/0x1830
[  188.602426][T10194]  __handle_mm_fault+0x150b/0x2f60
[  188.602468][T10194]  handle_mm_fault+0x363/0xa20
[  188.602493][T10194]  __get_user_pages+0x8ae/0x2c30
[  188.602511][T10194]  populate_vma_page_range+0x267/0x3f0
[  188.602532][T10194]  __mm_populate+0x107/0x3a0
[  188.602551][T10194] page last free pid 10211 tgid 10211 ts 188578813064 stack trace:
[  188.602564][T10194]  __free_frozen_pages+0x79f/0x10f0
[  188.602585][T10194]  __kasan_populate_vmalloc+0x1ea/0x210
[  188.602601][T10194]  alloc_vmap_area+0x95d/0x2bb0
[  188.602618][T10194]  __get_vm_area_node+0x1ed/0x350
[  188.602636][T10194]  __vmalloc_node_range_noprof+0x268/0x1420
[  188.602656][T10194]  __vmalloc_node_noprof+0xad/0xf0
[  188.602676][T10194]  copy_process+0x803/0x8370
[  188.602692][T10194]  kernel_clone+0x176/0x9d0
[  188.602709][T10194]  __do_sys_clone3+0x214/0x290
[  188.602724][T10194]  do_syscall_64+0x123/0x790
[  188.602743][T10194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.602887][T10194] ------------[ cut here ]------------
[  188.602895][T10194] kernel BUG at mm/filemap.c:858!
[  188.602914][T10194] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  188.692252][T10194] CPU: 0 UID: 0 PID: 10194 Comm: syz.8.977 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  188.697594][T10194] Tainted: [L]=SOFTLOCKUP
[  188.698983][T10194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  188.702166][T10194] RIP: 0010:__filemap_add_folio+0x108b/0x1370
[  188.704103][T10194] Code: 61 bf ff 48 c7 c6 80 d0 fe 8b 4c 89 ef e8 2d fc 12 00 90 0f 0b e8 b5 61 bf ff 48 c7 c6 e0 d0 fe 8b 4c 89 ef e8 16 fc 12 00 90 <0f> 0b e8 9e 61 bf ff 48 c7 c6 60 d1 fe 8b 4c 89 ef e8 ff fb 12 00
[  188.711210][T10194] RSP: 0018:ffffc900041ff398 EFLAGS: 00010283
[  188.713641][T10194] RAX: 000000000001486e RBX: 0000000000000000 RCX: ffffc90028f21000
[  188.714751][T10202] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04
[  188.719762][T10194] RDX: 0000000000080000 RSI: ffffffff825fac08 RDI: ffff888035a6aa44
[  188.723052][T10194] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000000
[  188.726355][T10194] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002
[  188.729670][T10194] R13: ffffea00010077c0 R14: 0000000000000000 R15: 1ffff9200083fe9f
[  188.732878][T10194] FS:  00007fb192a146c0(0000) GS:ffff8880d5b5d000(0000) knlGS:0000000000000000
[  188.736424][T10194] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.739062][T10194] CR2: 00007ff8596ebfa8 CR3: 0000000058255000 CR4: 0000000000352ef0
[  188.742377][T10194] Call Trace:
[  188.743770][T10194]  <TASK>
[  188.745011][T10194]  ? lock_acquire+0x1d1/0x380
[  188.746965][T10194]  ? __pfx___filemap_add_folio+0x10/0x10
[  188.749154][T10194]  filemap_add_folio+0x1d8/0x6a0
[  188.751147][T10194]  ? __pfx_filemap_add_folio+0x10/0x10
[  188.753331][T10194]  ? __pfx___css_rstat_updated+0x10/0x10
[  188.755588][T10194]  page_cache_ra_order+0x602/0xed0
[  188.757266][T10194]  filemap_fault+0x1943/0x3130
[  188.759111][T10194]  ? __pfx_filemap_fault+0x10/0x10
[  188.760859][T10194]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[  188.762740][T10194]  ? find_held_lock+0x2b/0x80
[  188.764247][T10194]  ? __pfx_filemap_map_pages+0x10/0x10
[  188.766007][T10194]  __do_fault+0x10b/0x440
[  188.767399][T10194]  do_fault+0xb3f/0x1830
[  188.768851][T10194]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  188.770884][T10194]  ? __pfx_do_fault+0x10/0x10
[  188.772406][T10194]  ? pgd_none+0x9f/0xe0
[  188.773767][T10194]  ? __pfx_pgd_none+0x10/0x10
[  188.775302][T10194]  ? find_held_lock+0x2b/0x80
[  188.776818][T10194]  __handle_mm_fault+0x150b/0x2f60
[  188.778506][T10194]  ? __pfx___handle_mm_fault+0x10/0x10
[  188.780260][T10194]  ? __pfx_mt_find+0x10/0x10
[  188.781781][T10194]  handle_mm_fault+0x363/0xa20
[  188.783335][T10194]  __get_user_pages+0x8ae/0x2c30
[  188.784927][T10194]  ? __pfx_mt_find+0x10/0x10
[  188.786421][T10194]  ? __pfx___get_user_pages+0x10/0x10
[  188.788174][T10194]  populate_vma_page_range+0x267/0x3f0
[  188.790153][T10194]  ? __pfx_populate_vma_page_range+0x10/0x10
[  188.792097][T10194]  ? __pfx_find_vma_intersection+0x10/0x10
[  188.793962][T10194]  __mm_populate+0x107/0x3a0
[  188.795454][T10194]  ? __pfx___mm_populate+0x10/0x10
[  188.797106][T10194]  ? up_write+0x2dc/0x5b0
[  188.798567][T10194]  vm_mmap_pgoff+0x441/0x470
[  188.800297][T10194]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  188.802111][T10194]  ? __fget_files+0x215/0x3d0
[  188.803634][T10194]  ? __fget_files+0x21f/0x3d0
[  188.805166][T10194]  ksys_mmap_pgoff+0x3cb/0x610
[  188.806721][T10194]  ? kcov_ioctl+0x17a/0x760
[  188.808194][T10194]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  188.810190][T10194]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  188.812061][T10194]  __x64_sys_mmap+0x125/0x190
[  188.813780][T10194]  do_syscall_64+0x123/0x790
[  188.815665][T10194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.818077][T10194] RIP: 0033:0x7fb191b9e159
[  188.819635][T10194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.826728][T10194] RSP: 002b:00007fb192a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  188.829657][T10194] RAX: ffffffffffffffda RBX: 00007fb191e26090 RCX: 00007fb191b9e159
[  188.832834][T10194] RDX: 0000000000000007 RSI: 0000000000b36000 RDI: 0000200000000000
[  188.835392][T10194] RBP: 00007fb191c35024 R08: 0000000000000004 R09: 000000002cb25000
[  188.837960][T10194] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000
[  188.840443][T10194] R13: 00007fb191e26128 R14: 00007fb191e26090 R15: 00007fff4f1a3d48
[  188.842974][T10194]  </TASK>
[  188.843983][T10194] Modules linked in:
[  188.845628][T10194] ---[ end trace 0000000000000000 ]---
[  188.84783
** replaying previous printk message **
[  188.847832][T10188] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x61d pfn:0x401dd
[  188.847868][T10188] memcg:ffff88802bb74200
[  188.847891][T10188] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  188.847928][T10188] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000
[  188.847958][T10188] raw: 000000000000061d 0000000000000000 00000001ffffffff ffff88802bb74200
[  188.847981][T10188] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping))
[  188.848007][T10188] page_owner tracks the page as allocated
[  188.848028][T10188] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10188, tgid 10188 (syz.8.977), ts 188847811442
[  188.848069][T10188]  post_alloc_hook+0xfd/0x120
[  188.848108][T10188]  get_page_from_freelist+0x110d/0x35d0
[  188.848147][T10188]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  188.848185][T10188]  alloc_pages_mpol+0x201/0x550
[  188.848219][T10188]  folio_alloc_noprof+0x22/0x250
[  188.848255][T10188]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  188.848287][T10188]  filemap_alloc_folio_noprof+0x5e/0x80
[  188.848304][T10188]  page_cache_ra_order+0x539/0xed0
[  188.848321][T10188]  filemap_fault+0x1943/0x3130
[  188.848339][T10188]  __do_fault+0x10b/0x440
[  188.848352][T10188]  do_fault+0x585/0x1830
[  188.848368][T10188]  __handle_mm_fault+0x150b/0x2f60
[  188.848387][T10188]  handle_mm_fault+0x363/0xa20
[  188.848406][T10188]  do_user_addr_fault+0x59c/0x12f0
[  188.848425][T10188]  exc_page_fault+0x6f/0xd0
[  188.848441][T10188]  asm_exc_page_fault+0x26/0x30
[  188.848461][T10188] page last free pid 10211 tgid 10211 ts 188578803262 stack trace:
[  188.848472][T10188]  __free_frozen_pages+0x79f/0x10f0
[  188.848491][T10188]  __kasan_populate_vmalloc+0x164/0x210
[  188.848505][T10188]  alloc_vmap_area+0x95d/0x2bb0
[  188.848521][T10188]  __get_vm_area_node+0x1ed/0x350
[  188.848537][T10188]  __vmalloc_node_range_noprof+0x268/0x1420
[  188.848554][T10188]  __vmalloc_node_noprof+0xad/0xf0
[  188.848571][T10188]  copy_process+0x803/0x8370
[  188.848586][T10188]  kernel_clone+0x176/0x9d0
[  188.848601][T10188]  __do_sys_clone3+0x214/0x290
[  188.848616][T10188]  do_syscall_64+0x123/0x790
[  188.848633][T10188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.848762][T10188] ------------[ cut here ]------------
[  188.848768][T10188] kernel BUG at mm/filemap.c:858!
[  188.848784][T10188] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI
[  188.942845][T10188] CPU: 0 UID: 0 PID: 10188 Comm: syz.8.977 Tainted: G      D      L      syzkaller #0 PREEMPT(full) 
[  188.947238][T10188] Tainted: [D]=DIE, [L]=SOFTLOCKUP
[  188.949292][T10188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  188.953267][T10188] RIP: 0010:__filemap_add_folio+0x108b/0x1370
[  188.955695][T10188] Code: 61 bf ff 48 c7 c6 80 d0 fe 8b 4c 89 ef e8 2d fc 12 00 90 0f 0b e8 b5 61 bf ff 48 c7 c6 e0 d0 fe 8b 4c 89 ef e8 16 fc 12 00 90 <0f> 0b e8 9e 61 bf ff 48 c7 c6 60 d1 fe 8b 4c 89 ef e8 ff fb 12 00
[  188.963621][T10188] RSP: 0018:ffffc900040af7d0 EFLAGS: 00010293
[  188.966156][T10188] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  188.969411][T10188] RDX: ffff888033c20000 RSI: ffffffff825fac08 RDI: ffff888033c204c4
[  188.972362][T10188] RBP: 0000000000112cc0 R08: 0000000000000005 R09: 0000000000000000
[  188.975506][T10188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002
[  188.978701][T10188] R13: ffffea0001007740 R14: 0000000000000000 R15: 1ffff92000815f26
[  188.981756][T10188] FS:  0000555576cee500(0000) GS:ffff8880d5b5d000(0000) knlGS:0000000000000000
[  188.985080][T10188] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.987834][T10188] CR2: 00007ff8596ebfa8 CR3: 0000000058255000 CR4: 0000000000352ef0
[  188.991197][T10188] Call Trace:
[  188.992594][T10188]  <TASK>
[  188.993806][T10188]  ? memcg1_check_events+0x59/0x590
[  188.995745][T10188]  ? __pfx___filemap_add_folio+0x10/0x10
[  188.997890][T10188]  filemap_add_folio+0x1d8/0x6a0
[  188.999921][T10188]  ? __pfx_filemap_add_folio+0x10/0x10
[  189.002103][T10188]  ? __pfx___css_rstat_updated+0x10/0x10
[  189.004233][T10188]  page_cache_ra_order+0x602/0xed0
[  189.006335][T10188]  filemap_fault+0x1943/0x3130
[  189.008304][T10188]  ? __pfx_filemap_fault+0x10/0x10
[  189.010468][T10188]  __do_fault+0x10b/0x440
[  189.012340][T10188]  do_fault+0x585/0x1830
[  189.014167][T10188]  ? __pfx_filemap_map_pages+0x10/0x10
[  189.016436][T10188]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  189.019032][T10188]  ? __pfx_do_fault+0x10/0x10
[  189.020973][T10188]  ? pgd_none+0x9f/0xe0
[  189.022589][T10188]  ? __pfx_pgd_none+0x10/0x10
[  189.024430][T10188]  ? lock_acquire+0x1d1/0x380
[  189.026380][T10188]  __handle_mm_fault+0x150b/0x2f60
[  189.028532][T10188]  ? lock_vma_under_rcu+0x11d/0x590
[  189.030735][T10188]  ? __pfx___handle_mm_fault+0x10/0x10
[  189.033075][T10188]  ? lock_vma_under_rcu+0x17c/0x590
[  189.035186][T10188]  handle_mm_fault+0x363/0xa20
[  189.037220][T10188]  do_user_addr_fault+0x59c/0x12f0
[  189.039365][T10188]  exc_page_fault+0x6f/0xd0
[  189.041166][T10188]  asm_exc_page_fault+0x26/0x30
[  189.043188][T10188] RIP: 0033:0x7fb191b6e770
[  189.045044][T10188] Code: fa 08 73 36 48 83 ea 04 73 e0 83 fa fd 7c 10 8a 0e 74 0a 0f b7 74 16 02 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 <c5> fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48
[  189.052820][T10188] RSP: 002b:00007fff4f1a3ea8 EFLAGS: 00010206
[  189.055348][T10188] RAX: 0000200000000080 RBX: 0000000000000004 RCX: 000000000000003f
[  189.058618][T10188] RDX: 000000000000001c RSI: 0000001b2f320084 RDI: 0000200000000080
[  189.061958][T10188] RBP: fffffffffffffffe R08: 0000001b2f720000 R09: 0000000000000001
[  189.065027][T10188] R10: 7fffffffffffffe3 R11: 0000000000000009 R12: 00007fff4f1a3fd0
[  189.067983][T10188] R13: 00007fb191e2609c R14: 000000000002de0a R15: 00007fff4f1a3fb0
[  189.070919][T10188]  </TASK>
[  189.072192][T10188] Modules linked in:
[  189.074570][T10188] ---[ end trace 0000000000000000 ]---
[  189.076924][T10194] RIP: 0010:__filemap_add_folio+0x108b/0x1370
[  189.081084][T10194] Code: 61 bf ff 48 c7 c6 80 d0 fe 8b 4c 89 ef e8 2d fc 12 00 90 0f 0b e8 b5 61 bf ff 48 c7 c6 e0 d0 fe 8b 4c 89 ef e8 16 fc 12 00 90 <0f> 0b e8 9e 61 bf ff 48 c7 c6 60 d1 fe 8b 4c 89 ef e8 ff fb 12 00
[  189.094155][T10194] RSP: 0018:ffffc900041ff398 EFLAGS: 00010283
[  189.094249][T10194] RAX: 000000000001486e RBX: 0000000000000000 RCX: ffffc90028f21000
[  189.094279][T10194] RDX: 0000000000080000 RSI: ffffffff825fac08 RDI: ffff888035a6aa44
[  189.094308][T10194] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000000
[  189.094337][T10194] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002
[  189.094364][T10194] R13: ffffea00010077c0 R14: 0000000000000000 R15: 1ffff9200083fe9f
[  189.094394][T10194] FS:  00007fb192a146c0(0000) GS:ffff8880d5d5d000(0000) knlGS:0000000000000000
[  189.094445][T10194] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.094499][T10194] CR2: 00007f194de27dac CR3: 0000000058255000 CR4: 0000000000352ef0
[  189.094555][T10194] Kernel panic - not syncing: Fatal exception
[  189.127426][T10194] Kernel Offset: disabled
[  189.129254][T10194] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:04:18  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b043a5 RDI=ffffffff9bc67ca0 RBP=ffffffff9bc67c60 RSP=ffffc900041feb38
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d5043
R12=0000000000000000 R13=000000000000005d R14=000000000000000d R15=ffffc900041fee50
RIP=ffffffff85b043cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb192a146c0 ffffffff 00c00000
GS =0000 ffff8880d5b5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff8596ebfa8 CR3=0000000058255000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffd11f106
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffd11f106 00007ffffd11f10c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff858835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff858835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8588357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff858835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000031647261632f 6972642f7665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000012475142400c 4a51470c5546470c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8589f25f8 00007ff8589f25c8 00007ff8589f2600 00007ff8589f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f69cb00
RSI=ffffffff81b6be9e RDI=ffff88801f69cb00 RBP=0000000000000001 RSP=ffffc90000187df8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000
RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5c5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c28995d CR3=000000000eb96000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000280001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d86614f80 0000003000000018
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff00eff666
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff00eff666 00007fff00eff66c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d85835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d85835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d858357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d85835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d859f25f8 00007f7d859f25c8 00007f7d859f2600 00007f7d859f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81ff5193 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff8880299c0000 RBP=ffff88806a443c80 RSP=ffffc9000cdcf898
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002
R12=ffffed10053382b3 R13=0000000000000003 R14=ffffed100d488791 R15=0000000000000001
RIP=ffffffff820c1110 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5d5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f194e95da08 CR3=000000004d1b1000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b7355d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0e813316
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0e813316 00007ffc0e81331c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b72835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b72835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b728357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b72835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006563697665645f 77656e2f302d6332 692f736563697665 642f6332692f7375
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b729f25f8 00007f0b729f25c8 00007f0b729f2600 00007f0b729f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f698000
RSI=ffffffff81b6be9e RDI=ffff88801f698000 RBP=0000000000000003 RSP=ffffc900001a7df8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=0000000000000000
RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5e5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f3465d446f1 CR3=000000000eb96000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000101 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=00000000ffffff7f Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564645786220 0000564645786220
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056464576e730
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34661f1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737325353605f483 7373253052442f59
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 228a834b4351f8f7 7373737617172400
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6166303030306e 65762c3638783a65 7079743a75706300 5341494c41444f00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 505c5b0d0d0d0d53 584b110b05450758 4d444907484d5e00 5341494c41444f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432302c34343230 2c363132302c4530 32302c433032302c 423032302c413032
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c314132302c3238 32302c463532302c 443532302c423532 302c413532302c41
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c302c30302c 302c30302c302c30 002c302c30302c30 2c302c2c302c3530
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000