last executing test programs:

5m44.156246139s ago: executing program 32 (id=312):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="616464723d3132372e522e302e312c706f72743d323034392c6d6f756e74706faec04d7c30e1d12c70726f746f3d7463702c6d6f756e7470726f746f3d7463702c6e6fadea636b2c74696d656f3d31302c72657472616e733d31002c00"])
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2})
ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x1, 0x2, 0x6, 0x8}, {0x9, 0x40, 0x10, 0x269f}]})
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
write$P9_RAUTH(r3, &(0x7f0000000300)={0x14, 0x67, 0x1, {0x8, 0x3, 0x2}}, 0x14)

5m20.901691969s ago: executing program 33 (id=217):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0xe)
fchdir(r2)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x2)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)

5m3.195674214s ago: executing program 34 (id=374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$mtd(&(0x7f00000000c0), 0x0, 0x80001)
ioctl$OTPSELECT(r1, 0x80044d0d, &(0x7f00000008c0)=0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', <r4=>0x0})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020}, 0x2020)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0x20, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {0x16, 0xfff2}, {0xfff1, 0xfff3}, {0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)

4m41.360934557s ago: executing program 35 (id=902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, &(0x7f0000000180)="13"})
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}, <r8=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
r9 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f00000001c0)={0x4})
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, &(0x7f0000000040)={0x0, 0x1, 0x100, 0x9, 0x5, 0xdc5})
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r12, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r11, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008800}, 0x400c001)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x2000800)

4m31.564109341s ago: executing program 36 (id=967):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001463da45df0ca553615c0e76a6a9a7c23ea1ca8c21104cae8ea787cea787025eeaa9b6b8a7"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000f3ffffff182000006888c5fa6506dc1b9ed2aa097dcee1b408de83eb8d", @ANYRES32=r2, @ANYBLOB="000000000000000071008b01000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) (async)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0xfd}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4m28.380358041s ago: executing program 37 (id=849):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x1, 0x3, 0x4})
r3 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe)
keyctl$read(0xb, r3, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000004c0)=@multiplanar_mmap={0x2473, 0x2, 0x4, 0x2, 0x2, {}, {0x3, 0x8, 0x2, 0x0, 0x2, 0x2, "7ac466bd"}, 0x8, 0x1, {0x0}, 0x1000, 0x0, r4})
getsockopt(r0, 0x6, 0x9, &(0x7f0000000000)=""/23, &(0x7f0000000100)=0x17)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000180)={0xa, 0x4e20, 0x80020, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x440e0)

3m9.841415946s ago: executing program 7 (id=1459):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
r6 = epoll_create(0x1)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r6, r2, &(0x7f0000000040)={0x4000001a}})
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f0000001ff0)={0x1d, r8}, 0x10)
sendmsg$can_raw(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x44041}, 0x84841)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0x0], 0x0, 0x2, 0x1, 0x1}}, 0x40)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x10000000})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000000", @ANYRES32=r10, @ANYBLOB="0315000000000000240012075ab908cb92e0a465766500001400028008000200ffffffff05009ae8dc66fefff6e42100ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m9.77565894s ago: executing program 7 (id=1463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94)
mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mmap$xdp(&(0x7f00002fb000/0x1000)=nil, 0x1000, 0x2000003, 0x4000010, r2, 0x80000000)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)

3m9.658577095s ago: executing program 7 (id=1467):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='f', 0x1)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x10001, 0x8000000}, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000140)='add 1-1', 0x7)
write(r3, &(0x7f0000000180)='add 2', 0x5)
write(r3, &(0x7f00000001c0), 0x0)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000240)='add 5-', 0x6)
write(r3, &(0x7f0000000280), 0x0)
write(r3, &(0x7f00000002c0), 0x0)
write(r3, &(0x7f0000000300), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x1, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x5, 0x2d7, 0x7d, 0x8000000000000010, 0x5, 0x100000000, 0x9, 0x2401, 0x2, 0x2, 0x18d], 0xeeee8000, 0x201e87})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010700ffffffc400000052"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m9.445523504s ago: executing program 7 (id=1471):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x40305839, 0x0)
r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x8000000, 0x0, 0xd}, 0x0, 0x8, 0x0)
r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r9=>0x0)
r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2)
syz_ublk_setup_queues(r10, r9, &(0x7f0000000280)={0x0, 0xd601, 0x0, 0x0, 0x391}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbc22, 0x1, 0x1, 0x26, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x285e, 0x4, 0x2, 0x121, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63fe, 0x2, 0x2, 0x175, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b7, 0x40000, 0x2, 0x87, 0x0, r3}}], 0x4, &(0x7f0000003080)={0x2e, 0x6, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, r8, '\x00', {0x3, 0x888, 0x0, 0x0}}, 0x0)
syz_ublk_setup_queues(r10, r9, &(0x7f0000000700), &(0x7f0000000800)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a46}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x10000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x0, 0x0, 0x380}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00))
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r12 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r13=>0x0})
fgetxattr(r12, &(0x7f0000000040)=@random={'trusted.', 'geneve0\x00'}, &(0x7f0000000080)=""/16, 0x10)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r13, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4000000}, 0x40000)

3m9.368088975s ago: executing program 7 (id=1474):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000e39d633754293e1710158c2524070000007b0a"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000006c0)={0x48, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)
execveat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0)

3m8.952617743s ago: executing program 7 (id=1479):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write$cgroup_pid(r0, &(0x7f00000001c0), 0x12)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r2 = socket(0x28, 0x5, 0x0) (rerun: 32)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async)
listen(r2, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0xfff5, 0x0}, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) (async)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x8, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x401, 0x4, 0x5, 0xfffffffa}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008014}, 0x0)

3m8.913873941s ago: executing program 38 (id=1479):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write$cgroup_pid(r0, &(0x7f00000001c0), 0x12)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r2 = socket(0x28, 0x5, 0x0) (rerun: 32)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async)
listen(r2, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0xfff5, 0x0}, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) (async)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x8, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x401, 0x4, 0x5, 0xfffffffa}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008014}, 0x0)

3m0.896554927s ago: executing program 8 (id=1566):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff})
fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
setresgid(0xee00, 0xee01, 0x0)
setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="0180c200ac0e2c2c7e765c94698d9ccc37ad0043aaaaaaaaaabb080045380078006600000f11907864010102e00000014e244e2000649078df6262e6020000000300000003000000d87fe7e6e5e19ffa655cf00998620af559ea1efc80d6146ce5a7ad774de67dbdf1fdfa4c5de2312510f58ea6e852139afb7ddb0df024d5e927a48942544332a0b17e3bd0b59b25c095fec874"], 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x40, 0x1, 0xc, 0x0, 0x4, 0x0, 0x11, 0x4, 0x80, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r6, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c010000", @ANYRESHEX=r3, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x48004}, 0x810)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@empty, 0x1234, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0xffffffffffffefff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x80000000, 0xfffffffffffffffc}, {0xfffffffffffffffc}, {0xba}, 0xfffffffe, 0x3504, 0x2, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x400}]}, 0xf8}}, 0x0)
syz_emit_ethernet(0x184, &(0x7f0000000500)={@local, @remote, @val={@val={0x88a8, 0x2, 0x1, 0xcb3}, {0x8100, 0x2, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x16e, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "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"}}}}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x3a)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000000), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

3m0.055822203s ago: executing program 8 (id=1580):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
r4 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xca6, @local, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x107, 0x1, 'd'}], 0x18}, 0x0)
close(r4)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x6})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000140)=[{0x5, 0x3, 0xf8, 0x0, @time, {}, {0x0, 0x1}, @result={0x0, 0x125cbcea}}], 0x1c)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]})
r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000540))
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x2000000000000, 0x8010002})
mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1000, 0x3)

2m59.868929084s ago: executing program 8 (id=1583):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000100", @ANYRES64=r1, @ANYBLOB="000000002f1c060008001b000000"], 0x28}}, 0x0)
close(0x3)

2m59.699443288s ago: executing program 8 (id=1587):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d05, &(0x7f0000000900)="0000010000000000000001")
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), &(0x7f0000000280)='./bus\x00', 0x6, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0)

2m59.603096908s ago: executing program 8 (id=1589):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000380)="ee", 0x1, 0x4091, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @local, 0x9}, 0x1c)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=r4], 0xa8}, 0x1, 0x0, 0x0, 0x40088d0}, 0x24000840)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x27}})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00')
preadv(r6, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/173, 0xad}], 0x1, 0x809, 0x401)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r6, 0x1f, &(0x7f00000003c0)={0x28, 0x48, 0x0, r7, &(0x7f00000002c0)="dbe61b2e3968b62049e19b9e39f1855e482ed4ef2169a1202933cee679529afdd5ef0e40fa16d9dc8c72e6c775764183373022f153aaad50b5bb32a5cc5d48ef0bcb205d3b251265e0f9f8b27460d61c78154de687f282b75f63eebb6d7c1c907d8a2d8cf53d0a239ba400660873c0029235da1bce7f3b401a4a6d7d2c7a1c1eb7269b7141f34806ee29030f612e1c7fdbaee09b", 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r8, 0x4}}, 0x1)
accept4$bt_l2cap(r5, 0x0, 0x0, 0x0)
r9 = landlock_create_ruleset(&(0x7f0000000000)={0x8005, 0x5, 0x2, 0xec2, 0x4, 0x2}, 0x30, 0x1)
r10 = syz_open_dev$media(&(0x7f0000000040), 0xffffffffffffffff, 0x42)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000080)={0x10000, r10}, 0x1)

2m58.620980507s ago: executing program 8 (id=1596):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="fe889074d0", 0x5}], 0x1)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0xa, 0x1c, 0x14, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8539f3d3289737f0374c72a964a0244797e1f0a6ca7f040000000000000072fd29f35239d200", "24431a1e77a68e174f00", [0x10000000009, 0x400]}})
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40)

2m58.559671248s ago: executing program 39 (id=1596):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="fe889074d0", 0x5}], 0x1)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0xa, 0x1c, 0x14, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8539f3d3289737f0374c72a964a0244797e1f0a6ca7f040000000000000072fd29f35239d200", "24431a1e77a68e174f00", [0x10000000009, 0x400]}})
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40)

2m43.290219796s ago: executing program 1 (id=1839):
mknod(0x0, 0x4, 0x6) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
creat(&(0x7f0000000000)='./file0\x00', 0x15e)

2m43.221710744s ago: executing program 1 (id=1840):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9a, 0x41}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040040}, 0x24009004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x2, 0x40, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x50)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000380)=""/90)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x6110a6}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf4, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x25}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1c}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8010}, 0x840)
r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000050)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x9c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff8001, 0xb}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "512941fa8bd19191808543b45c2185796c2a97623ec3a7f2"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x9c}}, 0x80)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000a80), 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r7, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040044}, 0x20000040)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x104, r0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffffd, 0x47}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "37f38e741c0b58749e680a668611e9d40339c08ec9f31c3e"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ad08db87fe995281f0fe1cc0a8769f7ca912ab6943ca44e7"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e68a2ea9bbaeadbb0a3ec91f895b999dca62b87cfd99651"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9aff28f96374ea6540201daaf38d9076bcd9729912c62d8d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "50dfe489fe58b554fba9a9101985ca176d2890ed670cd458"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4090)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000f40)=@int=0x9, 0x4)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004)
getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000f80)={<r10=>0x0, 0x1}, &(0x7f0000000fc0)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001000)={r10, 0x1, 0x7d, 0x4}, 0x10)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001140)={'wpan0\x00'})
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfe000, 0x2, 0x0, 0x1}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x78, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000018}, 0x20040080)

2m43.103799626s ago: executing program 1 (id=1843):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x32, 0x6, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x6, [0x6, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x7f}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x6}]}, 0x38)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x795}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x8084)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x141100, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7d}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x811)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x42, 0x80, [@supported_rates={0x1, 0x1, [{0x18}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x6, @device_a, 0x9, @value=@device_b, 0x3, 0x1, @broadcast, 0x8e2}}, @tim={0x5, 0xa, {0x40, 0xdf, 0x6, "78b383a702b6dc"}}, @mesh_id={0x72, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4008841)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r5, 0x8010aebc, &(0x7f0000000480)={0xffffffff, 0x4000})
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000004c0)={<r6=>0xffffffffffffffff})
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000540)=0x100000, 0x4)
syz_open_dev$loop(&(0x7f0000000580), 0x8, 0x292400)
preadv2(r0, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000000840)=""/181, 0xb5}], 0x5, 0x1ff, 0x7fff, 0xb)
prlimit64(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000980))
r7 = socket$inet_sctp(0x2, 0x8f9368c91919c39, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000009c0)={0x0, 0x8}, &(0x7f0000000a00)=0x8)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000840}, 0x4040000)
ioctl$SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000000b80))
ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000bc0))
sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x27}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
close(r7)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d80), 0x80000, 0x0)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f00000012c0)={&(0x7f0000000dc0)=0x9, 0x1, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001280)})

2m43.028884029s ago: executing program 1 (id=1844):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
getrandom(&(0x7f0000000900)=""/4096, 0x1000, 0x3)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000817000/0x1000)=nil, 0x1000, 0x10)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
chdir(&(0x7f0000000080)='./file0\x00')
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r3 = fanotify_init(0x81, 0x40000)
fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0)
read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
modify_ldt$write(0x1, &(0x7f0000000040)={0x9, 0x1000, 0x1000}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
modify_ldt$write(0x1, &(0x7f0000000080)={0xd15c, 0x0, 0x4000, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x10)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m42.859218443s ago: executing program 1 (id=1850):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, 0x0)

2m42.39634802s ago: executing program 1 (id=1857):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x101, 0x0, 0x2080, {0x30000, 0x3000, {}, 0x1, 0x6}, {"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", "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"}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12bc}, 0x1, 0x0, 0x0, 0x40000020}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2m42.309530268s ago: executing program 40 (id=1857):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x101, 0x0, 0x2080, {0x30000, 0x3000, {}, 0x1, 0x6}, {"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", "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"}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12bc}, 0x1, 0x0, 0x0, 0x40000020}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2m13.950502995s ago: executing program 4 (id=2385):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2) (async)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000d10000/0x2000)=nil, 0x2000}, 0x1})

2m13.950294618s ago: executing program 4 (id=2387):
r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r0, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f})

2m13.868074084s ago: executing program 4 (id=2389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
time(&(0x7f0000000000))
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xbacf, {0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x10, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

2m13.794517179s ago: executing program 4 (id=2390):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
tee(r0, r0, 0x3, 0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x2)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r8, r8)
setpgid(0x0, r8)
creat(&(0x7f0000000000)='./file0\x00', 0x16)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r3, 0x4, 0x0, @val=@netkit={@void, @value=r7}}, 0x1c)
r9 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/543], 0x6)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20200, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r11=>0x0)
io_submit(r11, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r10, &(0x7f0000000340)="8b", 0x47f, 0x6}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='bdev\x00', 0xa8014, 0x0)

2m13.613381145s ago: executing program 4 (id=2395):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x2, @loopback, 0x6}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000440), 0x1000a)
sendfile(r0, r1, &(0x7f0000000080)=0x3, 0xffff)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8001100)
socket$inet6_icmp_raw(0xa, 0x3, 0x87) (async)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x2, @loopback, 0x6}, 0x1c) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) (async)
write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) (async)
sendfile(r0, r1, &(0x7f0000000080)=0x3, 0xffff) (async)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) (async)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8001100) (async)

2m13.399316277s ago: executing program 4 (id=2399):
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16=<r0=>0xffffffffffffffff, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32)
r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
syz_emit_ethernet(0x46, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0xc, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x0, 0x0, @void}}}}}}}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x34}, 0x28)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "504245096ad3d8b2"}}}, 0xe) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1c, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r7, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0x79, 0x59, ""/89}, &(0x7f00000000c0)=0x79, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r9=>0x0}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async)
ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000300)) (async, rerun: 64)
r12 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) (async)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r11, 0xc0805841, &(0x7f0000000180)={0xffffffff, 0x5, 0x3, 0xff, 0x8001}) (async, rerun: 64)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9, @ANYBLOB="08000ac60007353f000000206c36f1bf80deb3033dfe20212e745d95866c807b80ef40711072fe8ebb87fff998b4aa4c47dd9a912f07ce92", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) (rerun: 64)

2m13.291327066s ago: executing program 41 (id=2399):
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16=<r0=>0xffffffffffffffff, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32)
r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
syz_emit_ethernet(0x46, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0xc, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x0, 0x0, @void}}}}}}}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x34}, 0x28)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "504245096ad3d8b2"}}}, 0xe) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1c, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r7, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0x79, 0x59, ""/89}, &(0x7f00000000c0)=0x79, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r9=>0x0}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async)
ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000300)) (async, rerun: 64)
r12 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) (async)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r11, 0xc0805841, &(0x7f0000000180)={0xffffffff, 0x5, 0x3, 0xff, 0x8001}) (async, rerun: 64)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9, @ANYBLOB="08000ac60007353f000000206c36f1bf80deb3033dfe20212e745d95866c807b80ef40711072fe8ebb87fff998b4aa4c47dd9a912f07ce92", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) (rerun: 64)

55.231244956s ago: executing program 5 (id=3228):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24002805}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x2}, 0xdd3c})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@md0, 0x0, &(0x7f00000001c0)={0x8e8, 0x9, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c0a})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}})

55.230531659s ago: executing program 5 (id=3229):
r0 = fsopen(&(0x7f0000000000)='vfat\x00', 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
fchdir(r2)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
lseek(r2, 0x10001, 0x2)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x193801, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000100)={"32a0c45006828c8bf17a590ac921c5277f5e97706bd2030b0ba46823ca83", 0x1, 0x2, 0x401, 0x1, 0xfffffffd, 0x7, 0xfff, 0x6, [0x2, 0xe, 0x4e, 0x8001, 0x7, 0x3, 0x1, 0x401, 0x9, 0x1, 0x64e, 0x400, 0x6, 0x400, 0x1, 0x7, 0xff, 0x2, 0xfffffffc]})
syz_emit_ethernet(0xa5, &(0x7f00000001c0)={@local, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0xff, 'S', "c12099", 0x600, "ba649a8a75cbc2d0693ea3d92e08e9e54ea8c3aefbc6f1fea05682560a29fb4f221c0afbe1647ba8c3c070516ce85f8c5982f3548560c273ea4d78ac50c3febf36982d2f35d5eec4bc2f562d448ac2246508d44b8f25669bcf60747699e6f5ee7a3ca6cffdc5357105f6d2bf1a4be0b93d7355bc3fc48f7829b470b1b12d6e427ceb13c7e9ca538452296f"}}}}}, &(0x7f0000000280)={0x0, 0x3, [0x4bc, 0xab2, 0x2bd, 0x5ca]})
r4 = geteuid()
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x11, &(0x7f0000000340)={[{@xino_on}, {@uuid_on}, {@userxattr}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0xf}}, {@permit_directio}, {@uid_gt={'uid>', r4}}, {@dont_appraise}]})
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000400)={0x3, 0xffffffff, 0x8})
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000440)=0x10040, 0x4)
ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000480)=0x3)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_G_PRIORITY(r6, 0x80045643, 0x1)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000500)="5f1f66f60224", 0x6}, {&(0x7f0000000540)="8505c894244594087662a4c225568522613ed9d86148b3957b62a9d43189ca2452a6805cf9232ce8ec58aee8f1d9ddec5be9f069608c64f06ba2e19474055b2a7228bf0f445847af", 0x48}, {&(0x7f00000005c0)="e98fb8e42e8f7452b19e92e9a9f038c9c812503ba6285f4835c91476b79afe42b6754a", 0x23}], 0x3, 0xfffffff3, 0x1)
ioctl$FE_SET_FRONTEND_TUNE_MODE(r5, 0x6f51, &(0x7f0000000640)=0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x690, 0x0, 0x370, 0xffffffff, 0x168, 0x0, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, &(0x7f00000006c0), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'tunl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x62, 0x94, 0x5, 0x19}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x5, 0x4, 0x2, 0x7fffffff, 0xab, 0x81, 0x6ef}}, @common=@srh={{0x30}, {0x687ab55b56622d8, 0xa0, 0x9a, 0x1, 0x4, 0x608, 0xd7}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x12, @ipv4=@loopback, @ipv6=@remote, @port=0x4e22, @port=0x4e24}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'netdevsim0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0xf7, 0x5, 0x2c}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x15, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0xdde, @gre_key=0xb}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, '|W'}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x923b, @port=0x4e23}}}, {{@ipv6={@empty, @empty, [0xffffff00, 0xffff00, 0xff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'lo\x00', 'pimreg\x00', {}, {0xff}, 0x3b, 0x8f, 0x4, 0x36}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "af11", 0x1}}, @common=@rt={{0x138}, {0x5, [0xfffffff6, 0x4], 0x7, 0x8, 0x4, [@loopback, @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x16}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0xb}, @private2], 0xb}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x16, @ipv6=@mcast2, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x65, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0)
r7 = accept4$alg(r5, 0x0, 0x0, 0x80000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'pim6reg\x00'})
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000e80)={0x7, @raw_data="4ff774b6a44468486650e8003935afad8d0852b89952a27895ab728c565d35d8a77ab1ab4d3c2efe6443abbee03838fada01186f53a0b485ebce7b5ae4eafc225dfdb8b2ad0e2deabf0e3a0ba3261fc805bc34d5273bfced4f1d0a6facc94718cf46bbc2d6ab605e4c6122f29d05c8309aae223dcc3dc57050cb1d816093fee8daee6066f602d11ef2f9540d3cbda7dc28dd90c05ba3fbb2a7d24e35ef7c6e1a423fc71764918843c83d62b7eb1fa7e6ad69d2375d6ac9c7d92fafd71b0b53d422749eb7ca7ff871"})
setxattr$security_capability(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), &(0x7f0000001000)=@v1={0x1000000, [{0x10, 0x7b}]}, 0xc, 0x3)
ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000001040)={0x10001, 0xfffff801, {<r8=>0x0}, {r4}, 0x7, 0x3})
syz_open_procfs$namespace(r8, &(0x7f0000001080)='ns/user\x00')
mount$afs(&(0x7f00000010c0)=@cell={0x25, 'syz1:', 'syz0', '.backup'}, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140), 0x8000, &(0x7f0000001180)={[{@dyn}], [{@obj_type={'obj_type', 0x3d, 'uuid=on'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fscontext'}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001280)={0x0, @in6={{0xa, 0x4e20, 0x8, @private0, 0x1}}, 0x3, 0x62, 0x3, 0x6, 0x30, 0x5, 0x1}, 0x9c)

55.098743497s ago: executing program 5 (id=3231):
mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003b0009002bbd7000fddbc72512"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='gfs2\x00', 0x8080, &(0x7f00000001c0)='discard')
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002180)='coredump_filter\x00')
read$FUSE(r4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8804}, 0x4088d)
bind$netlink(r3, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x0, &(0x7f0000000140)}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r7 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x49, @none, 0x3000, 0x242b58f3aab0523f}, 0xe)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r8, 0x5)
write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000580080008"], 0x4a)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
write$P9_RVERSION(r10, 0x0, 0xfffffcd9)
close_range(r9, 0xffffffffffffffff, 0x0)

54.774227218s ago: executing program 5 (id=3235):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x3cf043, 0xd7)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffffef00042f0000000000000000000000000000000000ff020000000000000000000000000001000088be000890780000000000"], 0x0)
r2 = socket(0x1f, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000740)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='system.sockprotoname\x00', &(0x7f0000000640)=""/127, 0x7f)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = mmap$IORING_OFF_PBUF_RING(0x0, 0xffffffff, 0x2000009, 0x4000010, r0, 0x81a2e792)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r4, 0x0, &(0x7f00000006c0)=@IORING_OP_FTRUNCATE={0x37, 0x4, 0x0, r2, 0x5, 0x0, 0x0, 0x0, 0x1, {0x0, r5}})
getsockopt$inet6_int(r3, 0x29, 0x12, 0x0, &(0x7f0000000040))
getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, &(0x7f00000003c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042bbd70df25180000000a00060008021100000000000a001a0008021100000000000a00060008021100000000000a000600ffffffffffff00000a0006000802110000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20008014)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r8 = fanotify_init(0xf00, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x4)
fanotify_mark(r8, 0x1, 0x5000003a, r7, 0x0)
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x6)
r10 = open(&(0x7f0000000780)='./file0\x00', 0x2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r10, &(0x7f00000002c0)='./file0\x00', 0x2)
read$FUSE(r8, &(0x7f0000000f40)={0x2020}, 0x2020)

54.63748576s ago: executing program 5 (id=3237):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32=r0, @ANYRES16=0x0], 0x254}, 0x1, 0x0, 0x0, 0x80}, 0x0)

54.63538149s ago: executing program 5 (id=3239):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1)
read(r2, 0x0, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x240100c2)
fsetxattr$security_ima(r3, &(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB="b075"], 0x2, 0x1)

51.939384172s ago: executing program 0 (id=3259):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16b9e}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1}]}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16b9e}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1}]}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) (async)

51.016023932s ago: executing program 0 (id=3268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002740)={&(0x7f00000003c0)=[{0x8, 0xf401, 0x10a, &(0x7f0000000f00)="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"}], 0x1})
ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0x20, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) (async)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002740)={&(0x7f00000003c0)=[{0x8, 0xf401, 0x10a, &(0x7f0000000f00)="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"}], 0x1}) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0x20, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) (async)

50.699714311s ago: executing program 0 (id=3265):
r0 = socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x800)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x3, 0x1, 0x2}) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x14}, {0xc000400000000001}], 0x1, 0x2}}, @common=@hl={{0x28}, {0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x8})

50.646013752s ago: executing program 0 (id=3267):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x800)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0xf7)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='file drivers/md/raid5.c +', 0x19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)='md0', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r5, &(0x7f0000000300)='raid5', 0x5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r6, &(0x7f0000000380)='4', 0x1)
r7 = openat(r2, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0)
write(r7, &(0x7f0000000400), 0x0)
write(0xffffffffffffffff, &(0x7f0000000480)='1:0', 0x3)
write(0xffffffffffffffff, &(0x7f0000000600)="acdd364858c473051721138afec28642682664fcb076859529b8293aa31e3de2d3e1aef920156e833bfa10b4992943de490ffe8e0c5d2241ac6d0c175c9dfb8ad76c7e5d6cba71827d87798c8ac81ac971fa611b1a3cb609c9b85517286154e20649a173a2c00ecc84ced696cf72051478917b253166258c5c52deb376fa4585563318b1aaf7becfe1d2c03b7e48e36a17b83b0c5c9e898e5fc29ab508544442d922df9b9f4642a8b26e49967cc09bf56612a21fad20a363616c97ffff3dbc97d2635f15854d0e243d9bf97793ec4128791b4896b9b60a50efa441ea5bfa36", 0xdf)
write(0xffffffffffffffff, &(0x7f0000000500)='1:2', 0x3)
write(0xffffffffffffffff, &(0x7f0000000540)='1:3', 0x3)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r8, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

50.388975818s ago: executing program 0 (id=3271):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x28f, 0x1001, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000340)={0x3, r2, 0x5c2, 0xffffffff, 0xb, 0x1fd, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000000)={0x2, r2, 0x7, 0x4, 0x0, 0x1, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:gpg_helper_exec_t:s0\x00', 0x27, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)="653a6d795f726561645f6d737231202d12725236bdb1a498e4c59cb27a1671339a254188fb2a8b47b404f1a79012dbca52da81eadc8cb45d0e4e833ca479b79b6342a3b4a9b5173ce58618a56e1feff1f6244756447e17c5e5a6572f05a63ec937b5ddecc77d9cef151bf6bca020274bb65e1ee739a0588a618a79be47d707824b", 0x81)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

50.163753649s ago: executing program 0 (id=3273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/ACPI0012:00/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='ACPI0012:00\x00', 0xc)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100))
read(r1, &(0x7f0000000040)=""/136, 0x88)

38.099701627s ago: executing program 42 (id=3239):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1)
read(r2, 0x0, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x240100c2)
fsetxattr$security_ima(r3, &(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB="b075"], 0x2, 0x1)

33.990340022s ago: executing program 43 (id=3273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/ACPI0012:00/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='ACPI0012:00\x00', 0xc)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100))
read(r1, &(0x7f0000000040)=""/136, 0x88)

9.958570591s ago: executing program 6 (id=3471):
r0 = syz_ublk_setup_io_uring(0x70f, &(0x7f0000000000)={0x0, 0x7378, 0x80, 0x3, 0x253}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f00000002c0)={0x80000, 0x8, 0x12be, 0x0, &(0x7f0000000200)={&(0x7f0000000140)="38518e988e393ff6a663bbbde2bc425938e15ba38443fd8066ce22ceccc32f31c818bcffdd8d3561e91f4dfb78cb31dcc60e3a2ecd4478a4c8c72fa8c18bf222ac033c2fad886684282c6a2be39512671340c231645ed68fd04ef4746398d5655cca65118f86ee3c2e495ae89e4bc52c81e4201cc1a96b40d055847d387173c0c60dbccbc68d64a46dfea3ce4f94a4c4d41dcdf1ef7ce2caac860dfbbb2210b72bdb3599b124e638a96d1bdbecd75763bf", 0xb1, 0x28000000, 0x0, 0x8}, &(0x7f0000000280)={&(0x7f0000000240)="b8b9332f476ae4da8bc20812b1c3ef", 0xf, 0x0, 0x50, 0x30}, {0x2, 0x4, 0x4}, 0x5, 0x8}, 0x1)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, <r4=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000000400)={0x6, 0x1, '\x00', @zc_export={r3}}, 0x0)
landlock_restrict_self(r4, 0x2)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x2, 0x53, "7945fed4c8351b40696f6236d2be4641c8543eee22fb15de458b3a017deb7b4fabf8011c82b5dcd2b64cc8a4b2c4fe81af9d5646014b90f209f57cdbc43a68cbc0bf88f9c82357437ff2ba8e122f44da84e225"})
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000000580)={0x3, 0x0, '\x00', @zc_export={r0}}, 0x0)
openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000600), 0x80800, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000640)=0x8)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000006c0)=@attr_other={0x0, 0x0, 0x8, &(0x7f0000000680)=0x4})
syz_clone(0x10a80, &(0x7f0000000700)="040852892418a464fb7457300a16a1e319a54870c2da1ac43632ca7520aa88f8b8936671837bac377e880101939840007e52f676219e98cabab21eaf8cb7c6a6ee04b88ad485c20464649a510eadfcff3f2b62e515e75962cc6a62c3c4ab753eb2", 0x61, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="802623da75859b5c4976981b4ea18cd328cbf8170004b19feb7b6543015970ade001cdc55e5bde91e676ee6cf5d38dda4e828557fd465264cd4f6b16d7820de5300eaf2eeef28ad25fafc8b8d80eff35f578bfd8a1196885d20fa2757022af1a8f3a43f2fd0c3267530279f05204834aec6dff36bebe02c7e686d07dad0102274afdb71f9f09cd1eef7259d6cbc5b5")
r5 = syz_io_uring_complete(r1, r2)
ioctl$CDROMRESUME(r5, 0x5302)
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f00000008c0)={0x7e7, 0x100, 0xab8}, 0xc)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r4, 0x10ee2000)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000900)={0xfffffffd, 0xc5, 0xda, 0xd, 0xd17c4b81, 0x0, 0x7})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6)
ioctl$COMEDI_SUBDINFO(r4, 0x80486402, &(0x7f0000000980))
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000a00)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}})
ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000a40)={0x0, 0x80})
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a80), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
ioctl$FE_GET_INFO(r5, 0x80a86f3d, &(0x7f0000000b00))
setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000bc0)='[\x00', 0x2)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)

9.801746045s ago: executing program 6 (id=3475):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x4f89a66f80a8de43, 0x109031, 0xffffffffffffffff, 0x10000000)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff940200000200000040000000000000000000200000000000000000002d8f38000300feff0500030001000000030000002dffffffffffffff06"], 0xe8)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x4, 0x1, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x4f89a66f80a8de43, 0x109031, 0xffffffffffffffff, 0x10000000) (async)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff940200000200000040000000000000000000200000000000000000002d8f38000300feff0500030001000000030000002dffffffffffffff06"], 0xe8) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x4, 0x1, 0x20002f7}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) (async)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)

9.682246551s ago: executing program 6 (id=3478):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
listen(0xffffffffffffffff, 0x5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.97116268s ago: executing program 3 (id=3488):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9300c000819"], 0x11)
syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60fca33f00087300fe800000000000000000000000000000fe8000000000000000000000000000aa5c00010000000000684aada4c1773afde2db94f2fdee9cb60732da8a7d97697f86bd872aa2ac89541eaae72b6b4b4d3bca9667c27674fac15b6d8c17a65b99818d53d2ce551ebeb526528d9d94063cca45204f81cce26826823387e9a40a4c7e8087d75fd96ea41260d2337bcd4ea5358047eab6134860a20357facfe926"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0)
socket$inet6(0xa, 0x2, 0x2) (async)
socket$inet6(0xa, 0x2, 0x2)

8.808298743s ago: executing program 3 (id=3492):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x7a, 0x2})
close(r1)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x28, 0x0, [0xfffffffb, 0x1ff, 0xbb, 0x4, 0x2, 0x1, 0x2, 0xfffffffe, 0x9, 0xc00, 0xffffff3f, 0x9, 0x6, 0x8000008, 0xfffffff7, 0x5]}], r4, 0x1, 0x1, 0x48}}, 0x20)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x22882)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_crypto(0x10, 0x3, 0x15)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000bef573fe82f6f67608000300", @ANYRES32=r10], 0x74}}, 0x0)
socket$kcm(0x2, 0x5, 0x106)
connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x6, @broadcast}, 0x4, 0x0, 0x1, 0x1}}, 0x2e)

8.351213249s ago: executing program 3 (id=3495):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '&.^'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044000}, 0x40084)
r3 = socket(0x2c, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x5e, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x20, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0})
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0)
r5 = syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x0)
ioctl$MEMERASE(r5, 0x40084d02, &(0x7f0000000080)={0x1, 0x1})
ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000340))

8.230968024s ago: executing program 3 (id=3497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x70bd2c, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3e8b}]}, 0x38}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xff000000, 0xff]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041891}, 0x0)

8.135268385s ago: executing program 3 (id=3498):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x9a7, 0x0, 0xfffffffffffffffe}]})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0x4, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x2, 0xae0, 0x6362, 0xd03, 0xffffffff, 0x7fffffff}, [@TCA_NETEM_RATE64={0xeae112c686a9f525, 0x8, 0xab4c98fa7074023c}, @TCA_NETEM_CORR={0x10, 0x1, {0x408, 0xa0, 0x1}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x20004890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50)
close(0x3)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8, r8}, 0x4)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x0, 0x7000, 0x2, 0x1, 0x8})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="000000000000000079000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe27}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r10, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffe})
write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)
preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

6.038056267s ago: executing program 6 (id=3501):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'sit0\x00', <r2=>r1, 0x40, 0x7800, 0x3, 0x8, {{0x24, 0x4, 0x1, 0x32, 0x90, 0x68, 0x0, 0xf1, 0x23, 0x0, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x7c, 0xffffffffffffffff, [{0x7, 0x3, 'x'}, {0x6, 0x12, "2db80a8a9cd6d339c877627bd5f8aae7"}, {0x7, 0xa, "d0aaa5f28a691d01"}, {0x6, 0xe, "bdbff14a49bdee0db62b68a3"}, {0x6, 0x10, "23fec9e8d94cfb14520fc4fec5c0"}, {0x2, 0xd, "bca7f61b662d2cf5b6a747"}, {0x6, 0x8, "4c311a6d1710"}, {0x0, 0x11, "a08eb83b036937506aad0b7a8a5d67"}, {0x7, 0x9, "0a838ca0f7a008"}, {0x2, 0xa, "651ac37cfb4b5242"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x40, 0x700, 0x100, 0x5, {{0xf, 0x4, 0x0, 0x1e, 0x3c, 0x67, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x1e, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x8001}, {@local, 0x7fff}]}, @rr={0x7, 0x13, 0x72, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x35}, @loopback]}]}}}}})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000001480)={&(0x7f0000001280)=[{0x2, 0x0, 0x9, 0x3, 0xfffffffffffffff9, 0x7fffffff, 0x6, 0xfff}, {0x3, 0x0, 0x4, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x72f, 0x410870d2}, {0x1, 0x0, 0x3, 0xfffffffffffffff7, 0x2, 0x2, 0x5, 0x4}, {0x0, 0x0, 0x0, 0xad6, 0x1, 0x5, 0x2}, {0x1, 0x0, 0x1ff, 0x401, 0xb510, 0x69f7c25f, 0xffffffffffffff40, 0x5e}, {0x0, 0x0, 0x6, 0x0, 0x1, 0x4, 0x2, 0x6}, {0x1, 0x0, 0x7, 0x2, 0xfffffffffffffff7, 0x4, 0x497a, 0x514}, {0x2, 0x0, 0x5, 0x7f, 0x3, 0x4, 0xff, 0x7ecf8b81}, {0x0, 0x0, 0x1ff, 0x8, 0xffff, 0x5, 0x0, 0x6}], 0x9, 0x38, 0x1, 0x2})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000014c0)={0x200000, 0x15000, 0x1})
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001500)='/dev/comedi2\x00', 0x480, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521)
ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, &(0x7f0000001540))
ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f0000001580)={0x21, 0x192, 0x1000000, 0xd, 0x4be})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x58, r6, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'sit0\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040080}, 0x10)
syz_emit_ethernet(0x26, &(0x7f0000001740)={@remote, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x2, 0x1, 0x2}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "5083b943704cd5ce"}}}}, &(0x7f0000001780)={0x0, 0x1, [0xd44, 0xd2c, 0x794, 0xc71]})
lsetxattr$security_selinux(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), &(0x7f0000001840)='system_u:object_r:tty_device_t:s0\x00', 0x22, 0x0)
mount$tmpfs(0x0, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0), 0x880000, &(0x7f0000001900)={[{@usrquota}, {@huge_never}, {@inode32}], [{@hash}]})
read$FUSE(r3, &(0x7f0000001940)={0x2020, 0x0, <r7=>0x0}, 0x2020)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003980)={0x0, <r8=>0x0}, &(0x7f00000039c0)=0xc)
getgroups(0x3, &(0x7f0000003a00)=[<r9=>0xee01, 0x0, 0xee00])
write$FUSE_ENTRY(r3, &(0x7f0000003a40)={0x90, 0xfffffffffffffffe, r7, {0x3, 0x2, 0xcc, 0xb, 0x23836804, 0x65c, {0x2, 0x6, 0x4, 0x6, 0x40, 0x9, 0x3, 0x4f0, 0x7, 0x4000, 0x9, r8, r9, 0x2}}}, 0x90)
r10 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r10, 0x89e1, &(0x7f0000003b00)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback})
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000003b40)={0x29, 0x6, 0x0, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x38)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000003b80)={{0x1000, 0x8000000, 0x3, 0x8, 0x5, 0xff, 0x2, 0x5, 0x7, 0xf0, 0x8, 0xba}, {0x10000, 0x25000, 0x6, 0x0, 0xf9, 0xc, 0xf, 0xb4, 0x40, 0x3, 0x2, 0x8}, {0x58000, 0xe000, 0xe, 0x4, 0x0, 0x9, 0xff, 0x7d, 0x0, 0x4, 0xc, 0x5}, {0xc000, 0x80d9002, 0xa, 0x5, 0x6, 0x0, 0x7, 0x4, 0x1, 0x6, 0x9, 0xa4}, {0xfec00000, 0xa000, 0x10, 0x0, 0x6, 0xe7, 0x84, 0xc, 0x2, 0x2, 0x3, 0x8}, {0x1dddf4001, 0xffffffff, 0x8, 0x81, 0x9, 0x9b, 0x40, 0x0, 0x9, 0x5, 0xff, 0xfa}, {0x5f1deba916521e3, 0x1, 0x0, 0x9, 0x5, 0x3, 0x5, 0xc, 0x6, 0xfa, 0x8, 0x60}, {0x0, 0x3000, 0x0, 0xf, 0x6, 0x0, 0x1, 0x90, 0x0, 0xff, 0xee, 0x2}, {0xfec00000, 0x5}, {0xe000, 0x8}, 0x80000001, 0x0, 0xd3036c5c701fdc59, 0x200080, 0xc, 0x8800, 0x3000, 0x1, [0x7, 0x6, 0xa17f, 0x3]})
recvfrom(r0, &(0x7f0000003cc0)=""/183, 0xb7, 0x100, 0x0, 0x0)
socket(0x15, 0xa, 0xffff)
sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xff}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xce}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xed}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9e}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000)

1.573343131s ago: executing program 6 (id=3503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x101}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x50f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x10000, 0xf60]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x36c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x0, 0xb, 0x4, 0x453, 0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x275}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x4, 0x4, 0x47, 0x7, 0x4, 0x9, 0x7]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x3, 0x5768]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x357}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ae}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x200}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x46e}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20044010}, 0x4) (async)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r1, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async)
r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x208283, 0x40) (async)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)

1.498884712s ago: executing program 3 (id=3504):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000800407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)

1.498154657s ago: executing program 6 (id=3505):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x604680, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x849c6, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7ffffffffffffffd)
setns(0xc9, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd26, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x28})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x128, 0x0, 0x0, 0x0, 0x8, 0x56e, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x5, 0xa0, 0x1, {0x22, 0x82a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xd, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xa4, 0x80, 0x2, 0x8, 0x2}, 0x4b, &(0x7f0000000100)={0x5, 0xf, 0x4b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6bdbeb90faca25413ad2889457c6623b"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0xe, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0x200, 0xf0f, 0x7ff, [0x3f00, 0xc0, 0x30, 0xff000f, 0xff1fbf, 0xff3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0xe, 0x8000}]}, 0x1, [{0x101, &(0x7f0000000280)=ANY=[@ANYBLOB="0103138ecabd7091a432cf0c25a66b579b9e9eeabf969e0f3a78763031ee7c1c9a6e37223fea19390e69a1040924880c8f2a0c0bcc9b8893789786d18778b9ca875a80a5ff6bbc0bea8156377a1cb8b438f4e30f1ac4bc950582b9b0024707bd2bfd5890401dcad4a4e0c172bf1bb601ea37e1256a07d1667d6d3b8192bfe8d71631ca5aa07274d69a84986df603db12526bb4bc20ea16fde1af5a9f19414326eeca47bf98993ea87e145790803ab7dfaea0626a79fc54ded9ee8a81514078c221aab9c5462e818f89808d02554438af3d18f70a985954914adc3408cca7227433f3a1bf821df59fd2644816661ea9a5cb43c06a034c750f1a9edd254d4cd105b5"]}]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
dup(r6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x12, &(0x7f0000000340)='debug')
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x201a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.082594725s ago: executing program 9 (id=3516):
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) (async)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x400002, 0xb0, 0x20}, 0x18)
mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), &(0x7f0000000280)='./bus\x00', 0x6, 0x1) (async)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), &(0x7f0000000280)='./bus\x00', 0x6, 0x1)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0)

997.629227ms ago: executing program 9 (id=3517):
r0 = inotify_init()
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x40)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
clock_gettime(0xd10dae85e4692df3, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x20004018)
sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="f89a80daf220bef0c77ba00b0c79d63f85c8df9554dee3cc691e955e53da37a64c40f64ce5bf5f442bcb1c3b81ac281fee390b386f288fe3d3fa973d5351d93e7860cc2ab0011f0a2b534b461b6682fe855bf2de93d19974a266ec0f0740bd08743f2c69e831a35859ea852c8aea3be21d0a7ecc774147ea30e6ed298ad914025d697526df5bd518f31b7299263a6fcafe139813c0c72df369433b0ab706cda9f474df28c3ef0be8665adca82e481e673a45709f0b0c1fe6e34f04c4a9dc3ba7a92b35235221ab96202a952d529e053c", 0xd0}, {&(0x7f0000000440)="c9eb957af6ae72845d51cf2f31a3db15fdb80df4bd76233752076e223de34f5e02a6f97cdb5d7c1e4013fbbd82dda4601c7e67b745ed7c3e1c4a8281d0c43b89f60d09131e3afa5890e0f03ba72a55416dff2301fdb6cc7d4475277f54e59d69fe93742679f01dd692a697a38965d0bde1881c308e2c90067c15976115a383e5", 0x80}], 0x2}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x3ba, @mcast2, 0x2}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000540)="e80633bad745321014b696e54ccd417891b231c61b2232dd62fcf6f146d73528684c36587a6a3e20823bb4dc3fd1b3851968167edd516827442db927e1f80950274eb538f6ffed0bff3c4f6ea5543cef2f31410bd9a49a227cd325c39620cd119b8133f6c22c7e2fce21f0cc122c482e6275c05bcfb97f0dc1b4d67835cef46097742240ab0e5e55462a2755c9b20810dc7b276fb875faa877feaef3b6adf6daf3399af5bf619bf8421724f1f5bc746d6d16f34c0ffd57c082750b0b73985c62e898e7b6ae00757cef62cbbf01e89b85171f838ee22b24efe0868fa98b3ebe9d24fdb977b645e0f09f67beab222534fb675aaf235ed7", 0xf6}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x258}}], 0x2, 0x8000)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0xffff, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0xfddf, 0x0, 0x8000000}, {0x1ff, 0x7, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x140, 0x0, 0x6}, {0x0, 0x0, 0x2000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xde5}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x1, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5, 0x2}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x6, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001}, {}, {0x400000, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x7}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {0x6}, {0xfffffffd, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffd, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x9}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x1, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x3, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {0x2}, {0x1}, {0x4}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000800}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r4, 0x58, &(0x7f0000000600)}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
recvmsg$unix(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000001240)=""/90, 0x5a}], 0x2, &(0x7f0000001300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10000)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffd17, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0xfffffffffffffd63, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0xe, 0xfff1}, {0xc, 0xd}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x8}]}, 0x38}}, 0x20048840)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0xa}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d6c8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)

870.769922ms ago: executing program 9 (id=3518):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x10a0, 0x8, 0x0, 0x0}}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x183082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c3})
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000))
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000300)={{0x3, 0x5, 0x100, 0x5}, [{0x59, 0x1fd, 0xa0, 0x41}]})
r2 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000080), 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)='d', 0x1)
ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000400))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x2a}}}}, ["", "", ""]}, 0x28}}, 0x80)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x3f})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)

571.896352ms ago: executing program 2 (id=3520):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00')
pread64(r0, &(0x7f00000024c0)=""/4122, 0x101a, 0x1000000000000095)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3)
open$dir(&(0x7f00000002c0)='./file0/file1\x00', 0x101000, 0x48)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') (async)
pread64(r0, &(0x7f00000024c0)=""/4122, 0x101a, 0x1000000000000095) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) (async)
open$dir(&(0x7f00000002c0)='./file0/file1\x00', 0x101000, 0x48) (async)

571.297558ms ago: executing program 2 (id=3521):
ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x9, 0xffff67bb, 0x80000000})
syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x880) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x880)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000080)={0x5, 0x1})
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x20}, 0xc)
ioctl$TCXONC(r1, 0x540a, 0x1) (async)
ioctl$TCXONC(r1, 0x540a, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002180)={{{@in=@multicast1, @in=@remote, 0x4e20, 0x3, 0x4e20, 0x0, 0x2, 0x80, 0x0, 0x8, r2, r3}, {0x3, 0x15, 0x5, 0x6, 0x8, 0x2a, 0x100, 0x3}, {0x6, 0x4, 0x0, 0xf399}, 0x4, 0x6e6bb6, 0x1, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d3, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x3, 0x0, 0x4, 0x122, 0x7, 0x4}}, 0xe8) (async)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002180)={{{@in=@multicast1, @in=@remote, 0x4e20, 0x3, 0x4e20, 0x0, 0x2, 0x80, 0x0, 0x8, r2, r3}, {0x3, 0x15, 0x5, 0x6, 0x8, 0x2a, 0x100, 0x3}, {0x6, 0x4, 0x0, 0xf399}, 0x4, 0x6e6bb6, 0x1, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d3, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x3, 0x0, 0x4, 0x122, 0x7, 0x4}}, 0xe8)
close_range(r1, r0, 0x0) (async)
close_range(r1, r0, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000002280)=""/98)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000002300)={0x6, 0xfff, 0x1})
ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000002340))
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000002380)={<r5=>0x0, 0x0, 0x7, 0x8, 0x6, 0x5}, &(0x7f00000023c0)=0x14)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000002400)={r5, 0x2, 0x0, 0x3, 0x8, 0x400}, &(0x7f0000002440)=0x14)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0)
syz_open_procfs(r4, &(0x7f0000002480)='net/rt_acct\x00') (async)
r6 = syz_open_procfs(r4, &(0x7f0000002480)='net/rt_acct\x00')
syz_open_dev$mtd(&(0x7f00000024c0), 0x4, 0x90042)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000002500))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002540), 0x1, 0x0) (async)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002540), 0x1, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000002580))
fallocate(r6, 0x40, 0x7, 0x9) (async)
fallocate(r6, 0x40, 0x7, 0x9)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000025c0)={{0xa, 0x4e24, 0x6ccd, @mcast2, 0x7}, {0xa, 0x4e24, 0x401, @mcast2, 0xaae1}, 0x1, {[0x50d, 0x7, 0x1ffc42dd, 0x4, 0xe, 0x3, 0x9, 0x9]}}, 0x5c) (async)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000025c0)={{0xa, 0x4e24, 0x6ccd, @mcast2, 0x7}, {0xa, 0x4e24, 0x401, @mcast2, 0xaae1}, 0x1, {[0x50d, 0x7, 0x1ffc42dd, 0x4, 0xe, 0x3, 0x9, 0x9]}}, 0x5c)
ioctl$TIOCSCTTY(r7, 0x540e, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002680), r6) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080)
timer_create(0x7, &(0x7f0000002900)={0x0, 0x20, 0x1, @thr={&(0x7f00000027c0)="e7329d987696025636f39b6f5e4df492a8f3ec42ebdb2582439df6758d31d7c385f6654b51073fd2020fc29deff4f1c58262f05d729afbb6873d7e7e54a27dc6608e816dca48e48da5e396067ffcc1f6c98c3b770816d435c6c3bd9ee0d2b283a5d1a1cd528bd94258347f54deb3c3b1d29a6d49c6052b6cc4f478ccf0422fbfaf86a18079862f6f9d08dee31164cdd9b596ea48d2fad60abc038ce522a6e49e685a7c2f779cd004818adb4fe98e251c9afb72a583aa7374d0cadf6a63610d39f799bf80b61d0926c7b7598f2db9d0b67eeb7af84b047c5cf223", &(0x7f00000028c0)="92fccfc2b697a790ae1a36dab4f2892a"}}, &(0x7f0000002940))
ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000002980))
ioctl$FE_SET_VOLTAGE(r1, 0x6f43, &(0x7f00000029c0)=0x1)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

480.899858ms ago: executing program 9 (id=3522):
mkdir(&(0x7f0000000100)='./file0\x00', 0x11c)
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x5, [0x6, 0x200, 0x8, 0x2, 0x4]}, &(0x7f0000000100)=0x12)
linkat(r2, &(0x7f0000000300)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1400)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='vxfs\x00', 0x11, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0xd, 0x6, {0x9, @udp_ip6_spec={@empty, @loopback, 0x4e24, 0x4e22, 0x7}, {0x0, @broadcast, 0xa, 0x0, [0xb, 0xff]}, @udp_ip4_spec={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4e24, 0x1}, {0x0, @empty, 0x1, 0x6, [0x400, 0x1]}, 0x8, 0xfb000000}, 0x8, [0x9, 0x4, 0x2, 0x80000001, 0xe60c, 0x1, 0x7fff, 0x154]}})
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000180)=0x4, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@can_delroute={0x20, 0x19, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x40004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0100ff1f00000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8)
bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, &(0x7f0000000100)=0x2, 0x4)
write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000380)={0x14}, 0x14)

336.035286ms ago: executing program 2 (id=3523):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000040)='./bus\x00', 0x49)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffffd, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x200048d4}, 0x4008094)

260.702976ms ago: executing program 9 (id=3524):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xd, 0x1f, &(0x7f0000000400)="c20b1e67cf6f747b491940c26e9d86c2826bdb8a0c49ec60efdc2de4da239c", 0xb, 0x1, 0x4c4a, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f0000000180))
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)

260.289109ms ago: executing program 2 (id=3525):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1) (async)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x10003}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x70bd27, 0x25dfdc01, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffaf}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004801}, 0x3400c012)

98.45733ms ago: executing program 2 (id=3526):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@getchain={0x23, 0x66, 0xfcd66a900070b359, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f00000000c0)="4336fecc", 0x4}], 0x2) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c000800080008000101"], 0x134}}, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) (async)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) (async)
sendmsg$inet_sctp(r3, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000180)="a899f74f989841055550eba16518caa9b1ec1800b4dcd963c9fb9e49b780b41c73bd3e2f912daf89ef51822ca10128c5beeae975095e641ae47ff2b68b9e7d769b8b922de6fa0eceb69b8abb73cc91c9fd12c265636278db936043325a4d38623eae3a9ce3efdfb994a61b4e6dce517d286665d50df9651c1bd9991200cb043186ff0e137c1f76744afee0867e1e0c33e2", 0x2a000}], 0x10000019, 0x0, 0x0, 0x28004085}, 0x4040) (async)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x84)

418.173µs ago: executing program 2 (id=3527):
r0 = socket(0x1e, 0x1, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000240)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
r8 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r14=>0x0})
socket(0x10, 0x3, 0x0) (async)
r15 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)
pwritev2(r0, &(0x7f00000013c0)=[{&(0x7f0000000040)="2dab40fcf145dbeb21d51c87", 0xc}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="4eb638e324e5bf48c4efba6891df85dbac45aa19a8fbbf4ba961090e4674ce2445e019c68f770aa0d7335991ff4f0bcecdaef97a5aff2570b75bf6902061b4742212a4f931f456097ff4c1b80a02978a5dc12a3480a7bf1fb5739c7051063b8c608f4fef8b7b2ba35259c95e3af0bb99b239234c581a9f6ce47718f252d6140b0fad6ec4c4de2a77b2cd4c1f09ce039e7bea4b595776d18655800b05ca67670791300ebfbab7bc12727e10c39998620d4fe0f26790554d57c3a90fccbaeb8b4f6749cbec5f563b948c6ea5b8136455092b955c7d7d3e1dbfcd", 0xd9}, {&(0x7f0000001180)}, {&(0x7f00000011c0)="80b526681b8b61e4b9a9cb246c94a57dff6823739ea96dc2f8cf7c70737a94664033af31bbdd1ada6c3d9b8a6bd29679c9edffd440c3b0e3de2855b332038bf65cb34dc5447c7c22bd2b384cd09e6e8480d0d4eff85dca48ab5357db796238d40d446c8d4420c005c0f6f85d163fe613f5d6da8a21b9d3179b344b77a51b1183f62d87fd8f1295640ea36ef58996cfd66c282b89bafadfb8c28a2962c19b9c9acb04a2b89e56286022a555591f6323830db8faf5dd0b40660ddb759c7d976695e30335d4038abf12556452dceb77b9cb119288808a59b02623e1b6103b10b88420fef0189991a678b82e", 0xea}, {&(0x7f00000012c0)="800f702a84d237944b52df75e455ec8ab3327c2b980dd9c83f5e2406ad7047c997c8a932483846fd8e87428cdd6642031b285b068272bd2f2fc88bbf45092faf08f2b77a17ab5f7ffc69a6ca69f3c88b109566f0c172d8f9e1807fca6f3154c8521ff6e85f9517c1c2808ecb03de05fe025dda24b25a90310e0bed0f4db641c482609b7003ebcbfd350327962a779676419ec062ac0fbdae07791bdc8aeeb30985a1ec303bd8a0a58bd2e00e70ac7c3cfe64f41b4d41f1183104808ff5e4ba6111a66a687afd1d139d7c98177e9be67a811898", 0xd3}], 0x6, 0x0, 0x40000, 0x8)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x4000000}}, 0x10)

0s ago: executing program 9 (id=3528):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000001c0)={0xffffffff, 0x5, [{0x800, 0x0, 0x7ff}, {0x8}, {0x6, 0x0, 0x4}, {0x2, 0x0, 0xffffffff}, {0x7e, 0x0, 0x9}, {0x5}, {0x8, 0x0, 0xac}, {0x6, 0x0, 0x6}, {0xf9, 0x0, 0x3}, {0x4, 0x0, 0x40}, {0x8, 0x0, 0x1}, {0x28, 0x0, 0x200}, {0x3, 0x0, 0x4}, {0x2, 0x0, 0x1}, {0xf19, 0x0, 0x5}, {0x8, 0x0, 0xffff}]})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/97) (async)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x51, 0x400002)
ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f0000000380)) (async)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ufs\x00', 0x204001, 0x0)

kernel console output (not intermixed with test programs):

ice number 16
[  326.825244][T16732] tmpfs: Bad value for 'mpol'
[  326.885368][T16734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2904'.
[  326.889994][T16734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2904'.
[  326.901793][ T6985] usb 14-1: new high-speed USB device number 7 using dummy_hcd
[  326.920337][T16736] i8042 kbd 00:00: in use; can't configure
[  327.027246][T16743] netlink: 'syz.5.2908': attribute type 1 has an invalid length.
[  327.043596][T16743] 8021q: adding VLAN 0 to HW filter on device bond2
[  327.053023][T16743] bond2: (slave geneve2): making interface the new active one
[  327.057156][T16743] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  327.061651][ T6985] usb 14-1: Using ep0 maxpacket: 8
[  327.065334][ T6985] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.069153][ T6985] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.074780][ T6985] usb 14-1: config 0 interface 0 has no altsetting 0
[  327.077149][ T6985] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  327.080345][ T6985] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.096120][ T6985] usb 14-1: config 0 descriptor??
[  327.243401][ T8098] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  327.371720][    C2] openvswitch: cpu_id mismatch with handler threads
[  327.381721][T16753] loop5: detected capacity change from 0 to 7
[  327.388783][T16753]  loop5: p3 p4
[  327.390432][T16753] loop5: partition table partially beyond EOD, truncated
[  327.410837][ T8098] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  327.415916][ T8098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.420873][ T8098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.432705][ T8098] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  327.442421][ T8098] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  327.446632][ T8098] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  327.452912][ T8098] usb 7-1: Manufacturer: syz
[  327.458740][ T8098] usb 7-1: config 0 descriptor??
[  327.538911][ T6985] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[  327.541286][ T6985] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[  327.547003][ T6985] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[  327.549357][ T6985] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[  327.551589][ T6985] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[  327.554317][ T6985] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0
[  327.578986][T16758] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  327.684341][T16762] netlink: 'syz.5.2914': attribute type 5 has an invalid length.
[  327.861210][ T6985] usb 14-1: USB disconnect, device number 7
[  327.903102][ T8098] appleir 0003:05AC:8243.0017: unknown main item tag 0x0
[  327.913131][ T8098] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  328.579346][ T5743] Bluetooth: hci1: command tx timeout
[  328.611428][T16773] netlink: 'syz.0.2916': attribute type 1 has an invalid length.
[  328.614765][T16773] netlink: 'syz.0.2916': attribute type 12 has an invalid length.
[  328.622578][T16773] i2c i2c-1: dtv_property_process_set: SET cmd 0x62d943eb undefined
[  328.677711][T16779] binder: 16778:16779 ioctl 40046210 0 returned -14
[  328.918589][T16793] netlink: 'syz.0.2923': attribute type 4 has an invalid length.
[  329.655854][T16800] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  329.659561][T16800] cramfs: wrong magic
[  329.901911][T16826] netlink: 'syz.0.2933': attribute type 2 has an invalid length.
[  330.034894][ T5741] Bluetooth: hci3: hardware error 0x8e
[  330.113726][ T5526] libceph: connect (1)[c::]:6789 error -22
[  330.115985][T16845] netlink: 'syz.9.2937': attribute type 2 has an invalid length.
[  330.116436][ T5526] libceph: mon0 (1)[c::]:6789 connect error
[  330.130206][ T5526] libceph: connect (1)[c::]:6789 error -22
[  330.132979][ T5526] libceph: mon0 (1)[c::]:6789 connect error
[  330.157520][T16852] ceph: No mds server is up or the cluster is laggy
[  330.448033][T16873] IPVS: length: 72 != 24
[  330.536917][ T9769] usb 7-1: USB disconnect, device number 17
[  330.748434][T16893] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer.
[  330.755612][T16893] kvm: apic: phys broadcast and lowest prio
[  330.759978][T16893] sysfs: Unknown parameter ''
[  330.790752][T16898] netlink: 'syz.5.2949': attribute type 2 has an invalid length.
[  330.889519][T16902] netlink: 'syz.9.2951': attribute type 21 has an invalid length.
[  331.112710][ T5822] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  331.200242][T16911] macvtap0: entered allmulticast mode
[  331.202071][T16911] veth0_macvtap: entered allmulticast mode
[  331.276932][ T5822] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  331.281283][ T5822] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.288333][ T5822] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.292397][ T5822] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  331.298791][ T5822] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  331.300688][T16916] nbd: must specify an index to disconnect
[  331.302465][ T5822] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  331.313016][ T5822] usb 10-1: Manufacturer: syz
[  331.323830][ T5822] usb 10-1: config 0 descriptor??
[  331.392928][   T42] kauditd_printk_skb: 351 callbacks suppressed
[  331.392947][   T42] audit: type=1400 audit(1785957947.547:37382): avc:  denied  { egress } for  pid=19 comm="migration/0" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  331.395005][T16918] smpboot: CPU 1 is now offline
[  331.396561][   T42] audit: type=1400 audit(1785957947.547:37383): avc:  denied  { sendto } for  pid=19 comm="migration/0" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  331.422745][   T42] audit: type=1400 audit(1785957947.566:37384): avc:  denied  { prog_load } for  pid=16917 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  331.430728][   T42] audit: type=1400 audit(1785957947.566:37385): avc:  denied  { bpf } for  pid=16917 comm="syz.0.2956" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  331.440533][   T42] audit: type=1400 audit(1785957947.566:37386): avc:  denied  { perfmon } for  pid=16917 comm="syz.0.2956" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  331.458471][   T42] audit: type=1400 audit(1785957947.575:37387): avc:  denied  { create } for  pid=16917 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  331.465594][   T42] audit: type=1400 audit(1785957947.575:37388): avc:  denied  { connect } for  pid=16917 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  331.475248][   T42] audit: type=1400 audit(1785957947.622:37389): avc:  denied  { allowed } for  pid=16917 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  331.496354][   T42] audit: type=1400 audit(1785957947.632:37390): avc:  denied  { bpf } for  pid=16917 comm="syz.0.2956" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  331.502779][   T42] audit: type=1400 audit(1785957947.632:37391): avc:  denied  { prog_run } for  pid=16917 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  331.527791][T16930] netlink: 'syz.2.2959': attribute type 2 has an invalid length.
[  331.531208][T16930] __nla_validate_parse: 8 callbacks suppressed
[  331.531219][T16930] netlink: 151 bytes leftover after parsing attributes in process `syz.2.2959'.
[  331.642330][T16932] kvm: pic: single mode not supported
[  331.642348][T16932] kvm: pic: level sensitive irq not supported
[  331.728071][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2963'.
[  331.768730][ T5822] appleir 0003:05AC:8243.0018: unknown main item tag 0x0
[  331.778562][ T5822] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  331.890104][T16953] batman_adv: batadv0: Adding interface: veth0
[  331.896088][T16953] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.908731][T16953] batman_adv: batadv0: Interface activated: veth0
[  331.915909][T16953] program syz.2.2966 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  331.944014][T16954] tmpfs: Bad value for 'mpol'
[  331.988317][T16955] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  331.991509][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.996342][T16955] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.000215][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.004468][T16955] batman_adv: batadv0: Interface deactivated: veth0
[  332.007339][T16955] batman_adv: batadv0: Removing interface: veth0
[  332.244546][ T5741] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  332.904938][T16971] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2972'.
[  332.912814][T16971] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2972'.
[  332.916118][T16971] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2972'.
[  332.984447][T16976] netlink: 'syz.0.2969': attribute type 2 has an invalid length.
[  332.988425][T16976] netlink: 151 bytes leftover after parsing attributes in process `syz.0.2969'.
[  333.049236][T16983] netlink: 'syz.2.2975': attribute type 5 has an invalid length.
[  333.049250][T16980] netlink: 'syz.2.2975': attribute type 5 has an invalid length.
[  333.204903][T16990] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration
[  333.212048][T16991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2978'.
[  333.215996][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2978'.
[  333.220857][T16991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2978'.
[  333.220861][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2978'.
[  333.316076][T16998] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  333.384625][T17002] uprobe: syz.9.2983:17002 failed to unregister, leaking uprobe
[  333.412338][T17005] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000
[  333.549908][T17009] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  333.555528][T17009] bond2 (unregistering): Released all slaves
[  334.056035][T17030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  334.057417][T17032] overlayfs: regular lower layers cannot follow data lower layers
[  334.311930][T17048] fuse: Unknown parameter 'rvr+ms �����Z�ײ�÷�Gf�W(�5�Ġ��x�煝�`F����+p]��"Bɵp�۟�\�����f���2�'
[  334.350204][ T5822] usb 10-1: USB disconnect, device number 21
[  335.072460][T17064] ima: rule for LSM 'u' is undefined
[  335.143351][T17064] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  335.148055][T17063] ima: policy update failed
[  335.229573][T17074] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  335.386886][ T9769] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  335.569578][ T9769] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  335.576284][ T9769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.588963][ T9769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.596991][ T9769] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  335.609446][ T9769] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  335.616029][ T9769] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  335.621144][ T9769] usb 5-1: Manufacturer: syz
[  335.643429][ T9769] usb 5-1: config 0 descriptor??
[  335.652413][T17115] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  335.728123][T17118] ubi0: attaching mtd1
[  335.731131][T17118] ubi0: scanning is finished
[  335.732654][T17118] ubi0: empty MTD device detected
[  335.734301][T17118] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  335.805622][T17118] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22
[  335.809222][T17119] ubi0: attaching mtd1
[  335.813339][T17119] ubi0: scanning is finished
[  335.815455][T17119] ubi0: empty MTD device detected
[  335.817137][T17119] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  335.906456][T17119] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22
[  336.078504][ T9769] appleir 0003:05AC:8243.0019: unknown main item tag 0x0
[  336.089100][ T9769] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  336.532090][T17114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  336.745478][   T42] kauditd_printk_skb: 331 callbacks suppressed
[  336.745493][   T42] audit: type=1400 audit(1785957952.554:37723): avc:  denied  { execute } for  pid=17162 comm="syz.5.3025" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=74097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  336.804016][   T42] audit: type=1400 audit(1785957952.610:37724): avc:  denied  { create } for  pid=17166 comm="syz.2.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  336.810746][   T42] audit: type=1400 audit(1785957952.610:37725): avc:  denied  { write } for  pid=17166 comm="syz.2.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  336.817302][   T42] audit: type=1400 audit(1785957952.610:37726): avc:  denied  { read } for  pid=17166 comm="syz.2.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  336.861384][    C2] openvswitch: cpu_id mismatch with handler threads
[  336.865818][   T42] audit: type=1400 audit(1785957952.666:37727): avc:  denied  { write } for  pid=17173 comm="syz.5.3027" name="001" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  336.869557][T17174] usb usb9: usbfs: process 17174 (syz.5.3027) did not claim interface 0 before use
[  336.876073][   T42] audit: type=1400 audit(1785957952.666:37728): avc:  denied  { ioctl } for  pid=17173 comm="syz.5.3027" path="socket:[74100]" dev="sockfs" ino=74100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  336.917332][   T42] audit: type=1400 audit(1785957952.722:37729): avc:  denied  { search } for  pid=17175 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  336.924381][   T42] audit: type=1400 audit(1785957952.722:37730): avc:  denied  { search } for  pid=17175 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  336.932010][   T42] audit: type=1400 audit(1785957952.722:37731): avc:  denied  { search } for  pid=17175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  336.940593][   T42] audit: type=1400 audit(1785957952.722:37732): avc:  denied  { search } for  pid=17175 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.132502][ T8066] syzkaller0: tun_net_xmit 76
[  337.134689][T17186] syzkaller0: create flow: hash 3516747346 index 1
[  337.139709][ T8066] syzkaller0: tun_net_xmit 48
[  337.171211][ T8098] syzkaller0: tun_net_xmit 76
[  337.228255][T17185] syzkaller0: delete flow: hash 3516747346 index 1
[  337.257418][T17192] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0
[  337.260179][T17192] PKCS7: Only support pkcs7_signedData type
[  338.524503][T17219] Bluetooth: hci4: Frame reassembly failed (-84)
[  338.543289][ T8671] Bluetooth: hci4: Frame reassembly failed (-84)
[  338.674020][   T50] usb 5-1: USB disconnect, device number 10
[  340.534738][ T8670] bridge0: port 3(team_slave_1) entered blocking state
[  340.537068][ T8670] bridge0: port 3(team_slave_1) entered forwarding state
[  340.587340][T17228] overlayfs: failed to resolve './file0': -2
[  340.587857][T17226] overlayfs: failed lookup in lower (newroot/166, name='file0', err=-40): overlapping layers
[  340.606631][T17226] overlayfs: failed lookup in lower (newroot/166, name='file0', err=-40): overlapping layers
[  340.607583][T17228] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  340.615074][T17226] overlayfs: failed lookup in lower (newroot/166, name='file0', err=-40): overlapping layers
[  340.711356][ T5741] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  340.733730][T17232] overlayfs: failed lookup in lower (newroot/76, name='file2', err=-40): overlapping layers
[  341.023996][T17254] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  341.046215][T17254] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  341.078799][T17259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=17259 comm=syz.0.3049
[  341.080816][T17260] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  341.113995][ T8098] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  341.234588][   T50] usb 14-1: new high-speed USB device number 8 using dummy_hcd
[  341.297642][ T8098] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  341.309098][ T8098] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.321931][ T8098] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.332926][ T8098] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  341.348911][ T8098] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  341.352140][ T8098] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  341.355656][ T8098] usb 10-1: Manufacturer: syz
[  341.363126][ T8098] usb 10-1: config 0 descriptor??
[  341.371411][   T50] usb 14-1: device descriptor read/64, error -71
[  341.618670][T17268] netlink: 'syz.2.3052': attribute type 5 has an invalid length.
[  341.622315][T17268] __nla_validate_parse: 8 callbacks suppressed
[  341.622326][T17268] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3052'.
[  341.628217][T17268] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3052'.
[  341.631245][T17268] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3052'.
[  341.633459][   T50] usb 14-1: new high-speed USB device number 9 using dummy_hcd
[  341.643216][T17270] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  341.751127][T17275] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  341.777300][   T50] usb 14-1: device descriptor read/64, error -71
[  341.784083][T17278] netlink: 'syz.0.3056': attribute type 1 has an invalid length.
[  341.809413][T17278] 8021q: adding VLAN 0 to HW filter on device bond2
[  341.812417][ T8098] appleir 0003:05AC:8243.001A: unknown main item tag 0x0
[  341.825141][ T8098] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  341.833403][T17278] gretap1: entered promiscuous mode
[  341.891601][T17283] ip_tables: iptables: counters copy to user failed while replacing table
[  341.907192][   T50] usb usb14-port1: attempt power cycle
[  342.112746][   T42] kauditd_printk_skb: 166 callbacks suppressed
[  342.112767][   T42] audit: type=1400 audit(1785957957.579:37899): avc:  denied  { read } for  pid=17293 comm="syz.0.3060" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  342.125854][   T42] audit: type=1400 audit(1785957957.579:37900): avc:  denied  { open } for  pid=17293 comm="syz.0.3060" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  342.137236][   T42] audit: type=1400 audit(1785957957.579:37901): avc:  denied  { ioctl } for  pid=17293 comm="syz.0.3060" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  342.290081][   T50] usb 14-1: new high-speed USB device number 10 using dummy_hcd
[  342.322055][   T50] usb 14-1: device descriptor read/8, error -71
[  342.472331][   T42] audit: type=1400 audit(1785957957.916:37902): avc:  denied  { create } for  pid=17242 comm="syz.5.3045" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  342.481882][   T42] audit: type=1400 audit(1785957957.916:37903): avc:  denied  { ioctl } for  pid=17242 comm="syz.5.3045" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=74284 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  342.588747][   T50] usb 14-1: new high-speed USB device number 11 using dummy_hcd
[  342.610647][   T50] usb 14-1: device descriptor read/8, error -71
[  342.729608][   T50] usb usb14-port1: unable to enumerate USB device
[  343.002964][   T42] audit: type=1400 audit(1785957958.412:37904): avc:  denied  { unmount } for  pid=11951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  343.018797][   T42] audit: type=1400 audit(1785957958.431:37905): avc:  denied  { egress } for  pid=149 comm="kworker/0:2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  343.028627][   T42] audit: type=1400 audit(1785957958.431:37906): avc:  denied  { sendto } for  pid=149 comm="kworker/0:2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  343.050417][T17301] openvswitch: netlink: IP tunnel dst address not specified
[  343.054500][   T42] audit: type=1400 audit(1785957958.459:37907): avc:  denied  { create } for  pid=17300 comm="syz.0.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  343.063100][   T42] audit: type=1400 audit(1785957958.459:37908): avc:  denied  { read } for  pid=5448 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  343.982870][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3070'.
[  344.451231][ T9769] usb 10-1: USB disconnect, device number 22
[  344.459406][T17340] f2fs: Unknown parameter 'grpquotaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  344.721101][T17324] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  344.765353][ T5842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  344.774477][ T5842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  344.787272][ T5842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  344.792138][T17356] syzkaller0: entered promiscuous mode
[  344.793813][T17356] syzkaller0: entered allmulticast mode
[  344.796725][ T5842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  344.813456][ T5842] rtc rtc0: __rtc_set_alarm: err=-22
[  345.025629][ T8098] usb 14-1: new high-speed USB device number 12 using dummy_hcd
[  345.176704][T17370] XFS (loop0): SB validate failed with error -5.
[  345.187307][ T8098] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  345.191978][ T8098] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.197235][ T8098] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.201375][ T8098] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  345.208682][ T8098] usb 14-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  345.212838][ T8098] usb 14-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  345.216543][ T8098] usb 14-1: Manufacturer: syz
[  345.256472][T17383] netlink: 'syz.5.3086': attribute type 2 has an invalid length.
[  345.332768][ T8098] usb 14-1: config 0 descriptor??
[  345.350675][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'.
[  345.370145][T17383] : entered promiscuous mode
[  345.404220][T17384] 8021q: adding VLAN 0 to HW filter on device bond3
[  345.774253][ T8098] appleir 0003:05AC:8243.001B: unknown main item tag 0x0
[  345.793415][ T8098] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[  346.101903][T17417] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  346.163840][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3096'.
[  346.210547][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3098'.
[  346.217629][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3098'.
[  346.226297][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'.
[  346.226349][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'.
[  346.235745][T17425] hsr_slave_0: left promiscuous mode
[  346.243190][T17425] hsr_slave_1: left promiscuous mode
[  347.155125][T17462] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  347.214247][T17469] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  347.352928][T17475] __nla_validate_parse: 1 callbacks suppressed
[  347.352949][T17475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3112'.
[  347.493681][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3115'.
[  347.546327][   T42] kauditd_printk_skb: 219 callbacks suppressed
[  347.546339][   T42] audit: type=1400 audit(1785957962.661:38128): avc:  denied  { validate_trans } for  pid=17480 comm="syz.2.3116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  347.570058][T17438] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  347.574963][   T42] audit: type=1400 audit(1785957962.689:38129): avc:  denied  { create } for  pid=17480 comm="syz.2.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  347.584886][   T42] audit: type=1400 audit(1785957962.698:38130): avc:  denied  { create } for  pid=17480 comm="syz.2.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  347.591733][   T42] audit: type=1400 audit(1785957962.698:38131): avc:  denied  { write } for  pid=17480 comm="syz.2.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  347.627138][   T42] audit: type=1400 audit(1785957962.735:38132): avc:  denied  { create } for  pid=17482 comm="syz.5.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  347.634175][   T42] audit: type=1400 audit(1785957962.735:38133): avc:  denied  { write } for  pid=17482 comm="syz.5.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  347.642811][   T42] audit: type=1400 audit(1785957962.745:38134): avc:  denied  { module_request } for  pid=17482 comm="syz.5.3117" kmod="crypto-echainiv(authenc(hmac(sha512),cbc(des)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  347.676941][   T42] audit: type=1400 audit(1785957962.792:38135): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=50150 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  347.687561][   T42] audit: type=1400 audit(1785957962.801:38136): avc:  denied  { ioctl } for  pid=17482 comm="syz.5.3117" path="socket:[75354]" dev="sockfs" ino=75354 ioctlcmd=0x6e84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  347.774586][ T5842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  347.778993][   T42] audit: type=1400 audit(1785957962.876:38137): avc:  denied  { read } for  pid=17492 comm="syz.5.3118" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  347.782369][ T5842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  347.793468][ T5842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  347.796674][ T5842] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  347.799145][ T5842] rtc rtc0: __rtc_set_alarm: err=-22
[  348.137188][T17508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3123'.
[  348.220509][T17512] netlink: 'syz.0.3125': attribute type 4 has an invalid length.
[  348.267023][T17515] nbd: must specify an index to disconnect
[  348.269217][T17516] overlayfs: failed to resolve './file0': -2
[  348.321167][T17522] futex_wake_op: syz.5.3129 tries to shift op by -1; fix this program
[  348.407274][ T8098] usb 14-1: USB disconnect, device number 12
[  348.430953][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3128'.
[  348.478341][T17528] FAULT_INJECTION: forcing a failure.
[  348.478341][T17528] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  348.509014][T17528] CPU: 2 UID: 0 PID: 17528 Comm: syz.0.3130 Tainted: G             L   N  syzkaller #0 PREEMPT(full) 
[  348.509047][T17528] Tainted: [L]=SOFTLOCKUP, [N]=TEST
[  348.509053][T17528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  348.509062][T17528] Call Trace:
[  348.509081][T17528]  <TASK>
[  348.509088][T17528]  dump_stack_lvl+0x100/0x190
[  348.509208][T17528]  should_fail_ex.cold+0x5/0xa
[  348.509246][T17528]  _copy_from_user+0x2e/0xd0
[  348.509302][T17528]  mmc_ioctl_dvd_auth+0x12d/0x250
[  348.509362][T17528]  ? __pfx_mmc_ioctl_dvd_auth+0x10/0x10
[  348.509382][T17528]  ? lock_acquire+0x1b9/0x370
[  348.509444][T17528]  cdrom_ioctl+0x3200/0x3880
[  348.509463][T17528]  ? __pfx_cdrom_ioctl+0x10/0x10
[  348.509480][T17528]  ? rcu_is_watching+0x12/0xc0
[  348.509515][T17528]  ? trace_rpm_return_int+0x78/0x220
[  348.509575][T17528]  ? rpm_resume+0x7eb/0x1320
[  348.509596][T17528]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  348.509643][T17528]  ? __pfx_rpm_resume+0x10/0x10
[  348.509662][T17528]  ? do_raw_spin_lock+0x128/0x260
[  348.509687][T17528]  ? find_held_lock+0x2b/0x80
[  348.509708][T17528]  ? lockdep_hardirqs_on+0x78/0x100
[  348.509777][T17528]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  348.509798][T17528]  ? __pm_runtime_resume+0xc3/0x170
[  348.509823][T17528]  sr_block_ioctl+0x1ae/0x250
[  348.509868][T17528]  ? __pfx_sr_block_ioctl+0x10/0x10
[  348.509894][T17528]  blkdev_ioctl+0x5ad/0x6f0
[  348.509919][T17528]  ? __pfx_blkdev_ioctl+0x10/0x10
[  348.509946][T17528]  ? selinux_file_ioctl+0x13b/0x290
[  348.509989][T17528]  ? selinux_file_ioctl+0xb6/0x290
[  348.510014][T17528]  ? __pfx_blkdev_ioctl+0x10/0x10
[  348.510039][T17528]  __x64_sys_ioctl+0x18e/0x210
[  348.510087][T17528]  do_syscall_64+0x115/0x870
[  348.510107][T17528]  ? clear_bhb_loop+0x40/0x90
[  348.510129][T17528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.510146][T17528] RIP: 0033:0x7f1b8579e0d9
[  348.510161][T17528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.510177][T17528] RSP: 002b:00007f1b86582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  348.510202][T17528] RAX: ffffffffffffffda RBX: 00007f1b85a25fa0 RCX: 00007f1b8579e0d9
[  348.510214][T17528] RDX: 0000200000000000 RSI: 0000000000005392 RDI: 0000000000000003
[  348.510224][T17528] RBP: 00007f1b86582090 R08: 0000000000000000 R09: 0000000000000000
[  348.510234][T17528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.510244][T17528] R13: 00007f1b85a26038 R14: 00007f1b85a25fa0 R15: 00007ffdfb4bfc38
[  348.510267][T17528]  </TASK>
[  348.658599][T17536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  349.089880][T17574] netlink: zone id is out of range
[  349.094152][T17574] netlink: get zone limit has 4 unknown bytes
[  349.923189][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'.
[  349.926507][T17589] netlink: 'syz.2.3151': attribute type 30 has an invalid length.
[  349.928997][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'.
[  349.935594][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'.
[  349.938401][T17589] netlink: 'syz.2.3151': attribute type 30 has an invalid length.
[  349.941293][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'.
[  349.980490][T17591] syzkaller1: entered promiscuous mode
[  349.982303][T17591] syzkaller1: entered allmulticast mode
[  349.987800][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3152'.
[  350.126871][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3154'.
[  350.144452][T17595] usb usb9: check_ctrlrecip: process 17595 (syz.2.3154) requesting ep 01 but needs 81
[  350.155353][T17595] usb usb9: usbfs: process 17595 (syz.2.3154) did not claim interface 0 before use
[  350.302357][T17604] scsi_dev_info_list_add_str: bad dev info string 'end' '' ''
[  350.473779][T17608] kvm: requested 49447 ns i8254 timer period limited to 200000 ns
[  350.488298][T17608] kvm: requested 195276 ns i8254 timer period limited to 200000 ns
[  350.542995][    C3] bridge0: port 3(syz_tun) entered learning state
[  350.734596][T17633] netlink: 'syz.9.3165': attribute type 1 has an invalid length.
[  350.780701][T17633] 8021q: adding VLAN 0 to HW filter on device bond1
[  350.790247][T17633] veth0_to_bond: left allmulticast mode
[  350.800405][T17633] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  350.807288][T17633] tipc: Started in network mode
[  350.809489][T17633] tipc: Node identity 9, cluster identity 1
[  350.811335][T17633] tipc: Node number set to 9
[  350.904065][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.908090][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.911320][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.917948][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.923018][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.927650][T17641] md: md2 stopped.
[  350.932488][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.943802][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.948253][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.950897][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.953650][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: unknown main item tag 0x0
[  350.992166][   T24] hid-generic 99A1:E260D13B:624ADF33.001C: hidraw0: <UNKNOWN> HID v306f9c.17 Device [] on ��9O�R�)		K��8����S�2c��93;m�������m��f�$[g�~�
[  351.120553][T17646] fido_id[17646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  351.275427][T17660] FAULT_INJECTION: forcing a failure.
[  351.275427][T17660] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  351.280648][T17660] CPU: 2 UID: 0 PID: 17660 Comm: syz.0.3173 Tainted: G             L   N  syzkaller #0 PREEMPT(full) 
[  351.280669][T17660] Tainted: [L]=SOFTLOCKUP, [N]=TEST
[  351.280674][T17660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  351.280682][T17660] Call Trace:
[  351.280688][T17660]  <TASK>
[  351.280695][T17660]  dump_stack_lvl+0x100/0x190
[  351.280800][T17660]  should_fail_ex.cold+0x5/0xa
[  351.280834][T17660]  ? fs_reclaim_acquire+0x70/0x100
[  351.280886][T17660]  should_fail_alloc_page+0xeb/0x140
[  351.280924][T17660]  prepare_alloc_pages+0x1f0/0x5f0
[  351.280948][T17660]  ? kasan_save_track+0x14/0x30
[  351.280970][T17660]  ? __kasan_slab_alloc+0x89/0x90
[  351.280993][T17660]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  351.281013][T17660]  ? sr_block_ioctl+0x1ae/0x250
[  351.281066][T17660]  ? do_syscall_64+0x115/0x870
[  351.281110][T17660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.281129][T17660]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  351.281149][T17660]  ? trace_kmem_cache_alloc+0xdd/0x100
[  351.281165][T17660]  ? __kasan_slab_alloc+0x89/0x90
[  351.281179][T17660]  ? kmem_cache_alloc_noprof+0x2d7/0x6a0
[  351.281192][T17660]  ? bio_associate_blkg+0xcf/0x730
[  351.281235][T17660]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  351.281262][T17660]  ? policy_nodemask+0xed/0x4f0
[  351.281279][T17660]  alloc_pages_mpol+0x1fb/0x540
[  351.281296][T17660]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  351.281312][T17660]  ? __pfx___debug_object_init+0x10/0x10
[  351.281338][T17660]  alloc_pages_noprof+0x1a/0x160
[  351.281355][T17660]  blk_rq_map_kern+0x4d3/0x820
[  351.281381][T17660]  scsi_execute_cmd+0xbb1/0xe70
[  351.281417][T17660]  ? __kernel_text_address+0xd/0x30
[  351.281442][T17660]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  351.281457][T17660]  sr_do_ioctl+0x21a/0x840
[  351.281471][T17660]  ? __pfx_sr_do_ioctl+0x10/0x10
[  351.281480][T17660]  ? __lock_acquire+0x49f/0x1a40
[  351.281503][T17660]  ? kfree+0x22b/0x6c0
[  351.281523][T17660]  sr_packet+0xc4/0x1c0
[  351.281539][T17660]  dvd_do_auth+0x908/0xfb0
[  351.281562][T17660]  ? __pfx_dvd_do_auth+0x10/0x10
[  351.281576][T17660]  ? __might_fault+0xc5/0x140
[  351.281593][T17660]  mmc_ioctl_dvd_auth+0x153/0x250
[  351.281604][T17660]  ? __pfx_mmc_ioctl_dvd_auth+0x10/0x10
[  351.281617][T17660]  ? lock_acquire+0x1b9/0x370
[  351.281631][T17660]  cdrom_ioctl+0x3200/0x3880
[  351.281644][T17660]  ? __pfx_cdrom_ioctl+0x10/0x10
[  351.281655][T17660]  ? rcu_is_watching+0x12/0xc0
[  351.281678][T17660]  ? trace_rpm_return_int+0x78/0x220
[  351.281699][T17660]  ? rpm_resume+0x7eb/0x1320
[  351.281713][T17660]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  351.281734][T17660]  ? __pfx_rpm_resume+0x10/0x10
[  351.281747][T17660]  ? do_raw_spin_lock+0x128/0x260
[  351.281764][T17660]  ? find_held_lock+0x2b/0x80
[  351.281776][T17660]  ? lockdep_hardirqs_on+0x78/0x100
[  351.281790][T17660]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  351.281804][T17660]  ? __pm_runtime_resume+0xc3/0x170
[  351.281820][T17660]  sr_block_ioctl+0x1ae/0x250
[  351.281844][T17660]  ? __pfx_sr_block_ioctl+0x10/0x10
[  351.281870][T17660]  blkdev_ioctl+0x5ad/0x6f0
[  351.281897][T17660]  ? __pfx_blkdev_ioctl+0x10/0x10
[  351.281923][T17660]  ? selinux_file_ioctl+0x13b/0x290
[  351.281959][T17660]  ? selinux_file_ioctl+0xb6/0x290
[  351.281984][T17660]  ? __pfx_blkdev_ioctl+0x10/0x10
[  351.282004][T17660]  __x64_sys_ioctl+0x18e/0x210
[  351.282042][T17660]  do_syscall_64+0x115/0x870
[  351.282063][T17660]  ? clear_bhb_loop+0x40/0x90
[  351.282087][T17660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.282104][T17660] RIP: 0033:0x7f1b8579e0d9
[  351.282119][T17660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.282135][T17660] RSP: 002b:00007f1b86582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  351.282152][T17660] RAX: ffffffffffffffda RBX: 00007f1b85a25fa0 RCX: 00007f1b8579e0d9
[  351.282160][T17660] RDX: 0000200000000000 RSI: 0000000000005392 RDI: 0000000000000003
[  351.282167][T17660] RBP: 00007f1b86582090 R08: 0000000000000000 R09: 0000000000000000
[  351.282173][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.282179][T17660] R13: 00007f1b85a26038 R14: 00007f1b85a25fa0 R15: 00007ffdfb4bfc38
[  351.282194][T17660]  </TASK>
[  351.735937][ T6985] usb 14-1: new full-speed USB device number 13 using dummy_hcd
[  351.786104][T17675] openvswitch: netlink: Actions may not be safe on all matching packets
[  351.827990][T17678] CacheFiles: No cache directory specified
[  351.884584][T17678] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  351.900958][ T6985] usb 14-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  351.906021][ T6985] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4
[  351.921412][ T6985] usb 14-1: config 0 interface 0 has no altsetting 0
[  351.936738][ T6985] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  351.941951][ T6985] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  351.945505][ T6985] usb 14-1: Product: syz
[  351.947296][ T6985] usb 14-1: Manufacturer: syz
[  351.948762][ T6985] usb 14-1: SerialNumber: syz
[  351.954544][ T6985] usb 14-1: config 0 descriptor??
[  351.965451][ T6985] usb 14-1: selecting invalid altsetting 0
[  352.272970][ T5815] usb 14-1: USB disconnect, device number 13
[  352.335753][ T5743] Bluetooth: hci4: command 0x1003 tx timeout
[  352.338252][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  352.720434][T17695] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  352.849568][T17703] loop5: detected capacity change from 0 to 7
[  352.858040][T17703] Dev loop5: unable to read RDB block 7
[  352.859855][T17703]  loop5: AHDI p2
[  352.861109][T17703] loop5: partition table partially beyond EOD, truncated
[  352.896024][   T42] kauditd_printk_skb: 242 callbacks suppressed
[  352.896039][   T42] audit: type=1400 audit(1785957967.667:38380): avc:  denied  { read } for  pid=17702 comm="syz.2.3187" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  352.902167][T17705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.909339][T17703] x_tables: duplicate underflow at hook 1
[  352.913127][   T24] IPVS: starting estimator thread 0...
[  352.922075][   T42] audit: type=1400 audit(1785957967.676:38381): avc:  denied  { open } for  pid=17702 comm="syz.2.3187" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  352.929629][T17707] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0
[  352.937926][   T42] audit: type=1400 audit(1785957967.676:38382): avc:  denied  { ioctl } for  pid=17702 comm="syz.2.3187" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x6401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  352.957085][   T42] audit: type=1400 audit(1785957967.686:38383): avc:  denied  { getopt } for  pid=17702 comm="syz.2.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  352.978054][   T42] audit: type=1400 audit(1785957967.751:38384): avc:  denied  { create } for  pid=17708 comm="syz.2.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  352.996704][   T42] audit: type=1400 audit(1785957967.751:38385): avc:  denied  { ioctl } for  pid=17708 comm="syz.2.3189" path="socket:[76436]" dev="sockfs" ino=76436 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  353.005722][   T42] audit: type=1400 audit(1785957967.751:38386): avc:  denied  { module_request } for  pid=17708 comm="syz.2.3189" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  353.014282][T17706] IPVS: using max 46 ests per chain, 110400 per kthread
[  353.014364][   T42] audit: type=1400 audit(1785957967.761:38387): avc:  denied  { create } for  pid=17708 comm="syz.2.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  353.023095][   T42] audit: type=1400 audit(1785957967.761:38388): avc:  denied  { bind } for  pid=17708 comm="syz.2.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  353.030424][   T42] audit: type=1400 audit(1785957967.761:38389): avc:  denied  { write } for  pid=17708 comm="syz.2.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  353.060863][T11709] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  353.222455][T11709] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  353.226056][T11709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.242421][T11709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.245923][T11709] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  353.255320][T11709] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  353.261438][T11709] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  353.267244][T11709] usb 5-1: Manufacturer: syz
[  353.272977][T11709] usb 5-1: config 0 descriptor??
[  353.638549][T17731] netlink: 'syz.2.3196': attribute type 32 has an invalid length.
[  353.658752][T17736] netlink: 'syz.9.3198': attribute type 1 has an invalid length.
[  353.661718][T17736] __nla_validate_parse: 3 callbacks suppressed
[  353.661728][T17736] netlink: 216 bytes leftover after parsing attributes in process `syz.9.3198'.
[  353.664927][T17731] bond2: Setting coupled_control to off (0)
[  353.668087][T17736] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3198'.
[  353.674243][T17731] bond2: entered promiscuous mode
[  353.737305][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3199'.
[  353.805914][T11709] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  353.860891][T17740] bond3: entered promiscuous mode
[  353.890536][T17740] 8021q: adding VLAN 0 to HW filter on device bond3
[  353.986163][T17743] 8021q: adding VLAN 0 to HW filter on device bond3
[  353.994294][T17743] bond3: (slave sit1): The slave device specified does not support setting the MAC address
[  354.004345][T17743] bond3: (slave sit1): Error -95 calling set_mac_address
[  354.749903][   T24] usb 14-1: new high-speed USB device number 14 using dummy_hcd
[  354.920294][   T24] usb 14-1: Using ep0 maxpacket: 32
[  354.926022][   T24] usb 14-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  354.929012][   T24] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.936563][   T24] usb 14-1: config 0 descriptor??
[  354.949174][   T24] as10x_usb: device has been detected
[  354.958368][   T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  354.970812][   T24] usb 14-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  354.988527][   T24] as10x_usb: error during firmware upload part1
[  354.991224][   T24] Registered device nBox DVB-T Dongle
[  355.316652][   T24] usb 14-1: USB disconnect, device number 14
[  355.410636][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3209'.
[  355.856411][T17795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3214'.
[  355.859886][T17795] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3214'.
[  355.863947][T17795] netlink: 'syz.2.3214': attribute type 6 has an invalid length.
[  355.866533][T17795] netlink: 'syz.2.3214': attribute type 5 has an invalid length.
[  355.869052][T17795] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3214'.
[  355.910115][T17797] netlink: 'syz.2.3215': attribute type 2 has an invalid length.
[  356.035662][   T50] usb 5-1: USB disconnect, device number 11
[  356.185094][T17806] netlink: 'syz.0.3218': attribute type 1 has an invalid length.
[  356.199353][T17806] bond4: option mode: invalid value (10)
[  356.203484][T17806] bond4 (unregistering): Released all slaves
[  356.320657][T17806] netlink: 'syz.0.3218': attribute type 10 has an invalid length.
[  356.323642][T17806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3218'.
[  356.357516][T17813] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  356.361249][T17813] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  356.366509][T17813] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  356.565527][T17818] block device autoloading is deprecated and will be removed.
[  356.606043][T17820] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  356.610522][T17819] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  356.615264][T17820] overlayfs: missing 'lowerdir'
[  356.617016][T17819] overlayfs: missing 'lowerdir'
[  356.744274][T17825] netlink: 'syz.5.3222': attribute type 13 has an invalid length.
[  356.995706][ T5448] veth1_vlan: left promiscuous mode
[  357.527697][   T50] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  357.701433][   T50] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  357.707475][   T24] Unregistered device nBox DVB-T Dongle
[  357.712628][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.720142][   T24] as10x_usb: device has been disconnected
[  357.723219][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.728000][   T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  357.736860][   T50] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  357.740140][   T50] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  357.754322][   T50] usb 7-1: Manufacturer: syz
[  357.774662][   T50] usb 7-1: config 0 descriptor??
[  357.803501][T17858] gfs2: error -5 reading superblock
[  357.954468][T17869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3232'.
[  358.097900][T17877] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3234'.
[  358.225165][   T50] hid_parser_main: 3457 callbacks suppressed
[  358.225198][   T50] appleir 0003:05AC:8243.001E: unknown main item tag 0x0
[  358.255675][   T42] kauditd_printk_skb: 255 callbacks suppressed
[  358.255693][   T42] audit: type=1400 audit(1785957972.692:38645): avc:  denied  { unmount } for  pid=15199 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  358.258669][   T50] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  358.303016][   T42] audit: type=1400 audit(1785957972.692:38646): avc:  denied  { unmount } for  pid=15199 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  358.377713][   T42] audit: type=1400 audit(1785957972.730:38647): avc:  denied  { recv } for  pid=5648 comm="sshd-session" saddr=127.0.0.1 src=50150 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  358.403342][   T42] audit: type=1400 audit(1785957972.814:38648): avc:  denied  { map_create } for  pid=17886 comm="syz.9.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  358.426643][   T42] audit: type=1400 audit(1785957972.814:38649): avc:  denied  { ioctl } for  pid=17886 comm="syz.9.3238" path="socket:[77684]" dev="sockfs" ino=77684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  358.449051][   T42] audit: type=1400 audit(1785957972.842:38650): avc:  denied  { create } for  pid=17886 comm="syz.9.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  358.462321][   T42] audit: type=1400 audit(1785957972.842:38651): avc:  denied  { module_request } for  pid=17886 comm="syz.9.3238" kmod="net-pf-10-proto-3-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  358.471124][   T42] audit: type=1400 audit(1785957972.842:38652): avc:  denied  { create } for  pid=17889 comm="syz.0.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  358.489276][   T42] audit: type=1400 audit(1785957972.842:38653): avc:  denied  { allowed } for  pid=17889 comm="syz.0.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  358.497890][   T42] audit: type=1400 audit(1785957972.861:38654): avc:  denied  { ioctl } for  pid=17844 comm="syz.2.3226" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  358.522103][T17895] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.624197][T17901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.643334][T17901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.830845][ T5842] kernel read not supported for file [fscontext] (pid: 5842 comm: kworker/2:4)
[  358.844462][T17917] net2280 0000:00:00.0: unbind
[  358.846124][T17917] net2280 0000:00:00.0: probe with driver net2280 failed with error -16
[  359.313983][T17928] pim6reg: entered allmulticast mode
[  359.381079][T17930] dlm: Using TCP for communications
[  359.739594][ T9769] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  359.910573][ T9769] usb 5-1: Using ep0 maxpacket: 32
[  359.919515][ T9769] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  359.922796][ T9769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.928610][ T9769] usb 5-1: config 0 descriptor??
[  359.941882][ T9769] as10x_usb: device has been detected
[  359.945483][ T9769] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  359.965230][ T9769] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  359.979229][ T9769] as10x_usb: error during firmware upload part1
[  359.981780][ T9769] Registered device nBox DVB-T Dongle
[  360.153027][ T5842] usb 5-1: USB disconnect, device number 12
[  360.173709][ T5842] Unregistered device nBox DVB-T Dongle
[  360.174652][ T5842] as10x_usb: device has been disconnected
[  360.469219][ T9769] usb 7-1: USB disconnect, device number 18
[  360.827861][T17953] __nla_validate_parse: 3 callbacks suppressed
[  360.827881][T17953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3257'.
[  361.060638][T17961] erspan0: entered promiscuous mode
[  361.075959][T17961] erspan0: entered allmulticast mode
[  361.954817][T17974] program syz.2.3260 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  362.010231][T17978] dlm: Using TCP for communications
[  362.181451][T17993] xt_connbytes: Forcing CT accounting to be enabled
[  362.185729][T17993] xt_CT: You must specify a L4 protocol and not use inversions on it
[  362.279900][T18002] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  362.461522][T18011] syzkaller0: entered promiscuous mode
[  362.465818][T18011] syzkaller0: entered allmulticast mode
[  362.590896][T18015] jffs2: notice: (18015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 4 of xref (0 dead, 4 orphan) found.
[  362.600214][T18015] SELinux:  Context system_u:object_r:gpg_helper_exec_t:s0 is not valid (left unmapped).
[  362.724574][T18023] program syz.9.3274 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  362.728674][T18023] ata1.00: non-matching transfer count (-1459617760/0)
[  363.276768][ T8098] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  363.449448][ T8098] usb 7-1: Using ep0 maxpacket: 32
[  363.453260][ T8098] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  363.458712][ T8098] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.466558][ T8098] usb 7-1: config 0 descriptor??
[  363.490183][ T8098] as10x_usb: device has been detected
[  363.495322][ T8098] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  363.526802][ T8098] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  363.535082][ T8098] as10x_usb: error during firmware upload part1
[  363.537796][ T8098] Registered device nBox DVB-T Dongle
[  363.608611][   T42] kauditd_printk_skb: 1857 callbacks suppressed
[  363.608632][   T42] audit: type=1400 audit(1785957977.699:40512): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  363.634446][   T42] audit: type=1400 audit(1785957977.699:40513): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  363.644990][T11951] audit: audit_backlog=65 > audit_backlog_limit=64
[  363.645823][   T42] audit: type=1400 audit(1785957977.699:40514): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  363.649701][T11951] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  363.664387][T11951] audit: backlog limit exceeded
[  363.667497][T11951] audit: audit_backlog=65 > audit_backlog_limit=64
[  363.670180][T11951] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64
[  363.674413][T11951] audit: backlog limit exceeded
[  363.674421][   T42] audit: type=1400 audit(1785957977.699:40515): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  363.706261][ T8098] usb 7-1: USB disconnect, device number 19
[  363.745795][ T8098] Unregistered device nBox DVB-T Dongle
[  363.746943][ T8098] as10x_usb: device has been disconnected
[  364.051025][T18045] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  364.202044][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'.
[  364.355982][ T5842] usb 14-1: new high-speed USB device number 15 using dummy_hcd
[  364.528745][ T5842] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  364.537595][ T5842] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  364.540744][ T5842] usb 14-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  364.543604][ T5842] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.573420][ T5842] spcp8x5 14-1:1.0: SPCP8x5 converter detected
[  364.586626][ T5842] usb 14-1: SPCP8x5 converter now attached to ttyUSB0
[  365.266023][T18052] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  365.277538][T18052] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  365.280691][T18052] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  365.343108][T18047] netlink: 'syz.9.3281': attribute type 49 has an invalid length.
[  365.385967][T18047] bond0: (slave bond_slave_0): Releasing backup interface
[  365.511429][T18047] bond_slave_0: entered promiscuous mode
[  365.521837][T18047] bond_slave_0: entered allmulticast mode
[  365.620113][T18046] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  365.646574][ T9769] usb 14-1: USB disconnect, device number 15
[  365.666620][ T9769] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  365.680814][ T9769] spcp8x5 14-1:1.0: device disconnected
[  366.140585][  T149] usb 7-1: new low-speed USB device number 20 using dummy_hcd
[  366.322557][  T149] usb 7-1: Invalid ep0 maxpacket: 16
[  366.329544][T18090] X25: diagnostic #104 - 9A 18 5F
[  366.331992][T18090] random: crng reseeded on system resumption
[  366.477912][  T149] usb 7-1: new low-speed USB device number 21 using dummy_hcd
[  366.520458][T18096] libceph: resolve '4' (ret=-3): failed
[  366.528168][T18096] No such timeout policy "syz1"
[  367.199774][  T149] usb 7-1: Invalid ep0 maxpacket: 16
[  367.207244][  T149] usb usb7-port1: attempt power cycle
[  367.572458][  T149] usb 7-1: new low-speed USB device number 22 using dummy_hcd
[  367.594299][  T149] usb 7-1: Invalid ep0 maxpacket: 16
[  367.732827][  T149] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[  367.765232][  T149] usb 7-1: Invalid ep0 maxpacket: 16
[  367.769778][  T149] usb usb7-port1: unable to enumerate USB device
[  368.964335][   T42] kauditd_printk_skb: 12876 callbacks suppressed
[  368.964350][   T42] audit: type=1400 audit(1785957982.705:53245): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  368.983207][   T42] audit: type=1400 audit(1785957982.705:53246): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  368.997651][T11951] audit: audit_backlog=65 > audit_backlog_limit=64
[  369.000440][T11951] audit: audit_lost=55 audit_rate_limit=0 audit_backlog_limit=64
[  369.003855][T11951] audit: backlog limit exceeded
[  369.005004][   T42] audit: type=1400 audit(1785957982.705:53247): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  369.008865][T11951] audit: audit_backlog=65 > audit_backlog_limit=64
[  369.013259][   T42] audit: type=1400 audit(1785957982.705:53248): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  369.016922][T11951] audit: audit_lost=56 audit_rate_limit=0 audit_backlog_limit=64
[  369.022563][   T42] audit: type=1400 audit(1785957982.705:53249): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  369.197949][T18149] befs: (nbd9): unable to read superblock
[  369.411985][T18157] afs: Unknown parameter '��d'
[  369.688988][T18170] bond3: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  369.692053][T18170] bond3: entered allmulticast mode
[  369.695187][T18170] CIFS mount error: No usable UNC path provided in device string!
[  369.695187][T18170] 
[  369.695498][T18171] CIFS mount error: No usable UNC path provided in device string!
[  369.695498][T18171] 
[  369.698526][T18170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  369.813150][T18171] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  369.837467][  T149] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  369.859993][T18174] syzkaller0: entered promiscuous mode
[  369.862447][T18174] syzkaller0: entered allmulticast mode
[  369.918442][T18175] fido_id[18175]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  370.193824][T18182] tipc: Resetting bearer <eth:syz_tun>
[  370.199096][T18183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3305'.
[  370.232326][T18182] bridge0: port 3(syz_tun) entered disabled state
[  370.303775][T18182] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.306375][T18182] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.727161][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.771592][ T5786] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.778311][ T5786] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.783634][ T5786] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.037351][T18203] binder: 18202:18203 unknown command 4294967288
[  371.039759][T18203] binder: 18202:18203 ioctl c0306201 200000000640 returned -22
[  371.184606][ T5822] usb 14-1: new high-speed USB device number 16 using dummy_hcd
[  371.245952][T18206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3312'.
[  371.324242][ T5822] usb 14-1: device descriptor read/64, error -71
[  371.593673][ T5822] usb 14-1: new high-speed USB device number 17 using dummy_hcd
[  371.729316][ T5822] usb 14-1: device descriptor read/64, error -71
[  371.858049][ T5822] usb usb14-port1: attempt power cycle
[  372.221639][ T5822] usb 14-1: new high-speed USB device number 18 using dummy_hcd
[  372.228523][T18213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18213 comm=syz.2.3313
[  372.242765][ T5822] usb 14-1: device descriptor read/8, error -71
[  372.284216][T18221] netlink: 'syz.2.3314': attribute type 12 has an invalid length.
[  372.509781][ T5822] usb 14-1: new high-speed USB device number 19 using dummy_hcd
[  372.532043][ T5822] usb 14-1: device descriptor read/8, error -71
[  372.650786][ T5822] usb usb14-port1: unable to enumerate USB device
[  374.249315][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3316'.
[  374.268927][T18231] overlayfs: missing 'lowerdir'
[  374.315425][   T42] kauditd_printk_skb: 13360 callbacks suppressed
[  374.315438][   T42] audit: type=1400 audit(1785957987.721:66462): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  374.333176][   T42] audit: type=1400 audit(1785957987.721:66463): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  374.347389][   T42] audit: type=1400 audit(1785957987.721:66464): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  374.357138][T11951] audit: audit_backlog=65 > audit_backlog_limit=64
[  374.360508][   T42] audit: type=1400 audit(1785957987.721:66465): avc:  denied  { write } for  pid=11951 comm="syz-executor" name="B" dev="tracefs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  374.367633][T11951] audit: audit_lost=106 audit_rate_limit=0 audit_backlog_limit=64
[  374.370169][T11951] audit: backlog limit exceeded
[  374.372286][T11951] audit: audit_backlog=65 > audit_backlog_limit=64
[  374.374351][T11951] audit: audit_lost=107 audit_rate_limit=0 audit_backlog_limit=64
[  374.376691][T11951] audit: backlog limit exceeded
[  374.846968][T18236] netlink: 'syz.9.3318': attribute type 12 has an invalid length.
[  374.961216][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  374.974731][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  374.979570][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  374.989752][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  374.990214][T18240] fuse: Bad value for 'fd'
[  375.001046][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  375.058951][T18242] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3319'.
[  375.508226][T18238] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.511437][T18238] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.515010][T18238] bridge_slave_0: entered allmulticast mode
[  375.519078][T18238] bridge_slave_0: entered promiscuous mode
[  375.525481][T18238] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.528600][T18238] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.531690][T18238] bridge_slave_1: entered allmulticast mode
[  375.536304][T18238] bridge_slave_1: entered promiscuous mode
[  375.545603][T18223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.646022][T18238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.676816][T18238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.746572][T18238] team0: Port device team_slave_0 added
[  375.761126][T18238] team0: Port device team_slave_1 added
[  375.839397][T18238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.848210][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.873436][T18262] binder: 18261:18262 ioctl c0306201 200000004a40 returned -22
[  375.875628][T18238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.960389][ T8066] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.979216][T18238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.993363][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.011735][T18238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.129796][ T8066] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.171048][T18238] hsr_slave_0: entered promiscuous mode
[  376.176912][T18238] hsr_slave_1: entered promiscuous mode
[  376.213565][ T8066] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.318988][ T8066] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.754665][ T8066] bridge_slave_1: left promiscuous mode
[  376.761842][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.771950][ T8066] bridge_slave_0: left allmulticast mode
[  376.774621][ T8066] bridge_slave_0: left promiscuous mode
[  376.776787][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.919093][T18282] input: syz1 as /devices/virtual/input/input34
[  377.110268][ T8066] bond2 (unregistering): (slave geneve2): Releasing active interface
[  377.161286][ T8066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.174116][ T8066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.198664][ T8066] bond0 (unregistering): Released all slaves
[  377.222265][ T5741] Bluetooth: hci4: command tx timeout
[  377.235347][ T8066] bond1 (unregistering): Released all slaves
[  377.266504][ T8066] bond2 (unregistering): Released all slaves
[  377.293504][ T8066] bond3 (unregistering): Released all slaves
[  377.551998][T18295] tmpfs: Unknown parameter 'grp���D�'
[  377.625332][ T8066] : left promiscuous mode
[  377.969672][ T8066] IPVS: stopping backup sync thread 17707 ...
[  378.109509][T18306] input: syz0 as /devices/virtual/input/input35
[  378.139247][T18306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.266439][T18309] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  378.454687][ T8066] hsr_slave_0: left promiscuous mode
[  378.465002][ T8066] hsr_slave_1: left promiscuous mode
[  378.468831][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.477148][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.499990][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.514785][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.572359][ T8066] veth1_macvtap: left promiscuous mode
[  378.576463][ T8066] veth0_macvtap: left promiscuous mode
[  378.594559][ T8066] veth1_vlan: left promiscuous mode
[  378.596972][ T8066] veth0_vlan: left promiscuous mode
[  379.122474][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.134389][ T8066] team0 (unregistering): Port device team_slave_1 removed
[  379.136378][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.147531][ T8066] team0 (unregistering): Port device team_slave_0 removed
[  379.151377][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.159785][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.166468][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  379.434198][ T5741] Bluetooth: hci4: command tx timeout
[  379.670441][   T42] kauditd_printk_skb: 8463 callbacks suppressed
[  379.670482][   T42] audit: type=1400 audit(1785957992.728:74914): avc:  denied  { write } for  pid=18351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  379.691782][   T42] audit: type=1400 audit(1785957992.737:74915): avc:  denied  { add_name } for  pid=18351 comm="dhcpcd-run-hook" name="resolv.conf.eth17.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  379.743151][T18363] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3345'.
[  379.768397][   T42] audit: type=1400 audit(1785957992.812:74916): avc:  denied  { recv } for  pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=50150 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  379.793376][   T42] audit: type=1400 audit(1785957992.831:74917): avc:  denied  { read } for  pid=18360 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  379.835166][   T42] audit: type=1400 audit(1785957992.831:74918): avc:  denied  { open } for  pid=18360 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  379.851388][   T42] audit: type=1400 audit(1785957992.831:74919): avc:  denied  { getattr } for  pid=18360 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  379.871519][   T42] audit: type=1400 audit(1785957992.840:74920): avc:  denied  { read } for  pid=18362 comm="syz.9.3345" dev="nsfs" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  379.885607][   T42] audit: type=1400 audit(1785957992.840:74921): avc:  denied  { open } for  pid=18362 comm="syz.9.3345" path="net:[4026532461]" dev="nsfs" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  379.907205][   T42] audit: type=1400 audit(1785957992.840:74922): avc:  denied  { create } for  pid=18362 comm="syz.9.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  379.928724][   T42] audit: type=1400 audit(1785957992.849:74923): avc:  denied  { append } for  pid=18362 comm="syz.9.3345" name="cec9" dev="devtmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  380.131671][ T8066] IPVS: stop unused estimator thread 0...
[  380.345975][T18238] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  380.378775][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  380.423568][T18238] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  380.433872][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  380.441005][T18238] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  380.473366][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  380.485186][T18238] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  380.505355][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  380.626422][ T8066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.654997][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10
[  380.882521][ T8066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.900012][T18335] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.903950][T18335] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.907453][T18335] bridge_slave_0: entered allmulticast mode
[  380.911859][T18335] bridge_slave_0: entered promiscuous mode
[  380.917346][T18335] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.923528][T18335] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.927258][T18335] bridge_slave_1: entered allmulticast mode
[  380.933840][T18335] bridge_slave_1: entered promiscuous mode
[  380.964706][T18411] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3351'.
[  380.975282][T18335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.998682][T18335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.061670][ T8066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.105524][T18420] loop5: detected capacity change from 0 to 7
[  381.105728][T18335] team0: Port device team_slave_0 added
[  381.109303][T18420] Dev loop5: unable to read RDB block 7
[  381.111252][T18420]  loop5: AHDI p1
[  381.117380][T18420] loop5: partition table partially beyond EOD, truncated
[  381.124657][T18335] team0: Port device team_slave_1 added
[  381.236114][ T8066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.271481][T18335] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.274656][T18335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.285358][T18335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.290670][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11
[  381.296895][T18238] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.301309][T18335] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.309272][T18335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.328561][T18335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.377678][T18238] 8021q: adding VLAN 0 to HW filter on device team0
[  381.430041][  T222] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.433064][  T222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.485896][ T5741] Bluetooth: hci3: command tx timeout
[  381.491334][T18335] hsr_slave_0: entered promiscuous mode
[  381.497326][T18335] hsr_slave_1: entered promiscuous mode
[  381.501929][T18335] debugfs: 'hsr0' already exists in 'hsr'
[  381.506451][T18335] Cannot create hsr debugfs directory
[  381.557444][  T222] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.559657][  T222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.658011][ T5741] Bluetooth: hci4: command tx timeout
[  381.838090][T18459] netlink: 'syz.9.3360': attribute type 2 has an invalid length.
[  381.887894][ T8066] bridge0: port 3(team_slave_1) entered disabled state
[  381.895738][ T8066] bridge_slave_1: left promiscuous mode
[  381.897635][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.904231][ T8066] bridge_slave_0: left allmulticast mode
[  381.906100][ T8066] bridge_slave_0: left promiscuous mode
[  381.908417][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.932961][ T8066] pim6reg: left allmulticast mode
[  382.251451][ T8066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.259244][ T8066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.263493][ T8066] bond0 (unregistering): Released all slaves
[  382.268972][ T8066] bond1 (unregistering): Released all slaves
[  382.278278][ T8066] bond2 (unregistering): Released all slaves
[  382.287313][ T8066] bond3 (unregistering): Released all slaves
[  382.492978][ T8066] : left promiscuous mode
[  382.517010][T18472] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  382.533236][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3362'.
[  382.587101][T18472] syz_tun: refused to change device tx_queue_len
[  382.599906][ T5815] IPVS: starting estimator thread 0...
[  382.694642][T18474] IPVS: using max 46 ests per chain, 110400 per kthread
[  383.020813][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12
[  383.290538][T18505] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3366'.
[  383.441876][T18512] loop0: detected capacity change from 0 to 11784
[  383.448426][T18512] (syz.2.3367,18512,3):ocfs2_get_sector:1713 ERROR: status = -5
[  383.466621][T18512] (syz.2.3367,18512,3):ocfs2_sb_probe:753 ERROR: status = -5
[  383.481092][T18512] (syz.2.3367,18512,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  383.501042][T18512] (syz.2.3367,18512,3):ocfs2_fill_super:1177 ERROR: status = -5
[  383.517871][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13
[  383.685185][ T8066] hsr_slave_0: left promiscuous mode
[  383.692055][ T8066] hsr_slave_1: left promiscuous mode
[  383.702211][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.708601][ T5741] Bluetooth: hci3: command tx timeout
[  383.716501][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.723589][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.726904][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.746188][ T8066] veth1_macvtap: left promiscuous mode
[  383.748553][ T8066] veth0_macvtap: left promiscuous mode
[  383.750966][ T8066] veth0_vlan: left promiscuous mode
[  383.890181][ T5741] Bluetooth: hci4: command tx timeout
[  383.915332][T18523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.158902][ T8066] team0 (unregistering): Port device team_slave_0 removed
[  384.426949][T18532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3371'.
[  384.431175][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3371'.
[  384.437202][T18532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3371'.
[  384.441091][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3371'.
[  384.599172][T18532] geneve0: entered promiscuous mode
[  384.755748][   T50] usb 14-1: new high-speed USB device number 20 using dummy_hcd
[  384.837371][T18562] netlink: 'syz.2.3375': attribute type 1 has an invalid length.
[  384.937608][   T50] usb 14-1: Using ep0 maxpacket: 32
[  384.949709][   T50] usb 14-1: config index 0 descriptor too short (expected 15270, got 18)
[  384.958490][   T50] usb 14-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  384.965062][   T50] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.968403][   T50] usb 14-1: Product: syz
[  384.970966][   T50] usb 14-1: Manufacturer: syz
[  384.973035][   T50] usb 14-1: SerialNumber: syz
[  384.974992][T18238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.996679][   T50] usb 14-1: config 0 descriptor??
[  385.029902][   T50] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  385.044805][   T50] dvb-usb: bulk message failed: -22 (4/0)
[  385.050685][T18562] bond4: entered promiscuous mode
[  385.052640][   T50] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  385.052781][T18562] 8021q: adding VLAN 0 to HW filter on device bond4
[  385.059381][   T50] dvb-usb: bulk message failed: -22 (5/0)
[  385.065347][   T50] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  385.080534][   T42] kauditd_printk_skb: 291 callbacks suppressed
[  385.080547][   T42] audit: type=1400 audit(1785957997.791:75215): avc:  denied  { egress } for  pid=5822 comm="kworker/2:3" saddr=fe80::1b daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  385.081288][   T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  385.082590][   T42] audit: type=1400 audit(1785957997.791:75216): avc:  denied  { sendto } for  pid=5822 comm="kworker/2:3" saddr=fe80::1b daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  385.093034][   T50] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  385.110866][   T50] usb 14-1: media controller created
[  385.117582][   T42] audit: type=1400 audit(1785957997.819:75217): avc:  denied  { create } for  pid=18561 comm="syz.2.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  385.122111][   T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  385.140954][   T50] usb 14-1: selecting invalid altsetting 3
[  385.143479][   T50] ttusb2: set interface to alts=3 failed
[  385.159974][T18568] veth3: entered allmulticast mode
[  385.170014][   T50] DVB: Unable to find symbol tda10086_attach()
[  385.171956][   T50] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  385.175508][T18568] bond4: (slave veth3): making interface the new active one
[  385.175904][   T50] dvb-usb: bulk message failed: -22 (4/0)
[  385.177926][T18568] veth3: entered promiscuous mode
[  385.179684][   T50] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  385.179744][   T50] dvb-usb: bulk message failed: -22 (5/0)
[  385.186503][   T50] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  385.186778][T18568] bond4: (slave veth3): Enslaving as an active interface with an up link
[  385.189704][   T50] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  385.226123][T18573] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  385.231454][T18573] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  385.244081][   T42] audit: type=1400 audit(1785957997.940:75218): avc:  denied  { read write } for  pid=18539 comm="syz.9.3372" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  385.251647][T18540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.255554][T18540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.258811][   T42] audit: type=1400 audit(1785957997.940:75219): avc:  denied  { open } for  pid=18539 comm="syz.9.3372" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  385.265858][   T42] audit: type=1400 audit(1785957997.940:75220): avc:  denied  { ioctl } for  pid=18539 comm="syz.9.3372" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  385.382738][   T42] audit: type=1400 audit(1785957998.062:75221): avc:  denied  { recv } for  pid=5649 comm="syz-executor" saddr=127.0.0.1 src=50150 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  385.395955][   T42] audit: type=1400 audit(1785957998.062:75222): avc:  denied  { sys_module } for  pid=18238 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  385.415884][   T42] audit: type=1400 audit(1785957998.062:75223): avc:  denied  { read write } for  pid=14837 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  385.425914][   T42] audit: type=1400 audit(1785957998.071:75224): avc:  denied  { open } for  pid=14837 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  385.466473][T18540] dvb-usb: bulk message failed: -22 (7/0)
[  385.487040][T18540] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  385.495119][T18540] ttusb2: i2c transfer failed.
[  385.498341][ T5822] usb 14-1: USB disconnect, device number 20
[  385.542408][ T5822] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  385.557625][ T8066] IPVS: stop unused estimator thread 0...
[  385.561677][T18587] xt_hashlimit: max too large, truncated to 1048576
[  385.577367][T18587] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  385.737579][T18335] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  385.748786][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  385.756335][T18335] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  385.771444][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  385.779350][T18335] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  385.830104][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  385.834487][T18335] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  385.877128][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  385.905149][T18238] veth0_vlan: entered promiscuous mode
[  385.926441][T18238] veth1_vlan: entered promiscuous mode
[  385.942089][ T5741] Bluetooth: hci3: command tx timeout
[  385.991050][T18238] veth0_macvtap: entered promiscuous mode
[  386.019821][T18238] veth1_macvtap: entered promiscuous mode
[  386.029942][T18606] overlayfs: missing 'lowerdir'
[  386.055415][T18238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.075159][T18238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.091589][T18335] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.131218][T18335] 8021q: adding VLAN 0 to HW filter on device team0
[  386.154059][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.157070][ T8674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.175576][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.187524][ T8674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.284348][T15770] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.301619][T15770] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.396268][  T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.403459][  T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.506181][ T8644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.510379][T15770] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.513388][ T8644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.515927][T15770] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.528681][T18628] binder: 18626:18628 ioctl 80106f53 200000000100 returned -22
[  386.804191][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14
[  386.922628][T18335] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.936233][T18659] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3389'.
[  386.947220][T18659] 8021q: VLANs not supported on ip6gre0
[  386.972218][T18335] veth0_vlan: entered promiscuous mode
[  386.982996][T18335] veth1_vlan: entered promiscuous mode
[  387.012702][T18335] veth0_macvtap: entered promiscuous mode
[  387.020427][T18335] veth1_macvtap: entered promiscuous mode
[  387.029380][T18335] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.035540][T18335] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.095956][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.099244][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.102136][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.105057][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.154137][ T5741] Bluetooth: hci3: command tx timeout
[  389.806872][T18636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  389.879613][  T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.887632][  T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.013953][T18671] bridge0: port 3(vlan0) entered blocking state
[  390.016263][T18671] bridge0: port 3(vlan0) entered disabled state
[  390.018879][T18671] vlan0: entered allmulticast mode
[  390.020614][T18671] bridge0: entered allmulticast mode
[  390.022317][T18671] bridge0: entered promiscuous mode
[  390.027003][T18671] vlan0: left allmulticast mode
[  390.031485][T18671] bridge0: left allmulticast mode
[  390.044118][ T5822] bridge0: left promiscuous mode
[  390.066109][  T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.070462][  T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.277347][T18695] fuse: Bad value for 'group_id'
[  390.281114][T18695] fuse: Bad value for 'group_id'
[  390.377540][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15
[  390.431537][   T42] kauditd_printk_skb: 246 callbacks suppressed
[  390.431555][   T42] audit: type=1400 audit(1785958002.797:75471): avc:  denied  { read write } for  pid=15677 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  390.474534][   T42] audit: type=1400 audit(1785958002.806:75472): avc:  denied  { open } for  pid=15677 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  390.507719][   T42] audit: type=1400 audit(1785958002.806:75473): avc:  denied  { ioctl } for  pid=15677 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  390.533769][   T42] audit: type=1400 audit(1785958002.844:75474): avc:  denied  { set_context_mgr } for  pid=18701 comm="syz.3.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  390.555557][   T42] audit: type=1400 audit(1785958002.909:75475): avc:  denied  { create } for  pid=18708 comm="syz.9.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  390.578292][   T42] audit: type=1400 audit(1785958002.919:75476): avc:  denied  { bind } for  pid=18708 comm="syz.9.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  390.592183][   T42] audit: type=1400 audit(1785958002.919:75477): avc:  denied  { name_bind } for  pid=18708 comm="syz.9.3402" src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  390.601247][   T42] audit: type=1400 audit(1785958002.919:75478): avc:  denied  { node_bind } for  pid=18708 comm="syz.9.3402" saddr=172.20.0.1 src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  390.609465][   T42] audit: type=1400 audit(1785958002.928:75479): avc:  denied  { listen } for  pid=18708 comm="syz.9.3402" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  390.618664][   T42] audit: type=1400 audit(1785958002.947:75480): avc:  denied  { prog_load } for  pid=18712 comm="syz.3.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  390.623322][ T9474] libceph: connect (1)[c::]:6789 error -101
[  390.623455][ T9474] libceph: mon0 (1)[c::]:6789 connect error
[  390.629993][ T9474] libceph: connect (1)[c::]:6789 error -101
[  390.634171][ T9474] libceph: mon0 (1)[c::]:6789 connect error
[  390.693910][ T8098] libceph: connect (1)[c::]:6789 error -101
[  390.696392][ T8098] libceph: mon0 (1)[c::]:6789 connect error
[  390.704373][T18680] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3396'.
[  390.711309][T18714] ceph: No mds server is up or the cluster is laggy
[  390.730945][T18719] ceph: No mds server is up or the cluster is laggy
[  390.941284][ T5822] libceph: connect (1)[c::]:6789 error -101
[  390.944146][ T5822] libceph: mon0 (1)[c::]:6789 connect error
[  391.087539][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16
[  391.219582][T18736] nfs: Unknown parameter 'nologk'
[  391.385091][T18745] CIFS: Attempting to mount //127.0.0.1/share
[  391.391020][T18745] CIFS: VFS: Error connecting to socket. Aborting operation.
[  391.394330][T18745] CIFS: VFS: cifs_mount failed w/return code = -4
[  391.642332][T18765] bridge0: port 3(syz_tun) entered blocking state
[  391.644698][T18765] bridge0: port 3(syz_tun) entered listening state
[  391.664526][T18765] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.675971][T18765] 8021q: adding VLAN 0 to HW filter on device team0
[  391.711250][T18763] overlay: filesystem on ./bus not supported as upperdir
[  391.731332][T18765] veth1_vlan: left promiscuous mode
[  391.736838][T18765] veth0_vlan: left promiscuous mode
[  391.744845][T18765] veth0_vlan: entered promiscuous mode
[  391.759626][T18765] veth1_vlan: entered promiscuous mode
[  391.766920][T18765] veth1_macvtap: left promiscuous mode
[  391.770788][T18765] veth0_macvtap: left promiscuous mode
[  391.774772][T18765] veth0_macvtap: entered promiscuous mode
[  391.777834][T18765] veth1_macvtap: entered promiscuous mode
[  391.785772][T18765] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  391.790585][T18765] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  391.798126][T18765] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  391.812251][T18765] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  391.837238][T18765] 8021q: adding VLAN 0 to HW filter on device bond1
[  391.849880][T18765] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  391.854966][T18765] 8021q: adding VLAN 0 to HW filter on device bond2
[  391.861051][T18765] 8021q: adding VLAN 0 to HW filter on device bond3
[  391.912980][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17
[  391.921705][  T849] bond_slave_0: entered promiscuous mode
[  391.927324][  T849] bond_slave_1: entered promiscuous mode
[  391.975981][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.978225][ T8671] bridge0: port 1(bridge_slave_0) entered listening state
[  392.001153][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.003692][ T8671] bridge0: port 2(bridge_slave_1) entered listening state
[  392.898496][T11709] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  393.058724][T11709] usb 11-1: device descriptor read/64, error -71
[  393.315203][T11709] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  393.454454][T11709] usb 11-1: device descriptor read/64, error -71
[  393.574249][T11709] usb usb11-port1: attempt power cycle
[  393.934994][T11709] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  393.967512][T11709] usb 11-1: device descriptor read/8, error -71
[  394.223475][T11709] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  394.245368][T11709] usb 11-1: device descriptor read/8, error -71
[  394.363538][T11709] usb usb11-port1: unable to enumerate USB device
[  395.939696][   T42] kauditd_printk_skb: 145 callbacks suppressed
[  395.939718][   T42] audit: type=1400 audit(1785958007.944:75626): avc:  denied  { recv } for  pid=9675 comm="kworker/2:6" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50150 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  396.086759][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3417'.
[  396.102979][   T42] audit: type=1400 audit(1785958008.094:75627): avc:  denied  { unmount } for  pid=18335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  396.106051][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.126797][   T42] audit: type=1400 audit(1785958008.131:75628): avc:  denied  { read write } for  pid=18335 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  396.161032][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.164997][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.167660][   T42] audit: type=1400 audit(1785958008.140:75629): avc:  denied  { open } for  pid=18335 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  396.171643][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.193799][   T42] audit: type=1400 audit(1785958008.140:75630): avc:  denied  { ioctl } for  pid=18335 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  396.224211][T18810] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3417'.
[  396.228187][   T42] audit: type=1400 audit(1785958008.215:75631): avc:  denied  { read write } for  pid=18814 comm="syz.3.3418" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  396.245113][ T5813] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  396.249282][   T42] audit: type=1400 audit(1785958008.215:75632): avc:  denied  { open } for  pid=18814 comm="syz.3.3418" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  396.283864][   T42] audit: type=1400 audit(1785958008.215:75633): avc:  denied  { mounton } for  pid=18814 comm="syz.3.3418" path="/4/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  396.293801][   T42] audit: type=1400 audit(1785958008.215:75634): avc:  denied  { mount } for  pid=18814 comm="syz.3.3418" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  396.314678][T18815] sd 0:0:0:0: PR command failed: 1026
[  396.315337][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3417'.
[  396.320357][T18815] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  396.323642][   T42] audit: type=1400 audit(1785958008.225:75635): avc:  denied  { create } for  pid=18816 comm="syz.2.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  396.330631][T18815] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  396.411429][T18815] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  396.447106][T18820] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  396.610414][T18832] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3421'.
[  396.687349][T18839] trusted_key: encrypted_key: insufficient parameters specified
[  396.711828][T18839] trusted_key: encrypted_key: insufficient parameters specified
[  397.194216][ T6952] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  397.354760][ T6952] usb 8-1: device descriptor read/64, error -71
[  397.584274][T18874] kvm: pic: non byte read
[  397.587244][T18874] kvm: pic: non byte write
[  397.591148][T18874] kvm: pic: non byte write
[  397.594764][T18874] kvm: pic: non byte write
[  397.598216][T18874] kvm: pic: non byte write
[  397.610436][T18874] kvm: pic: non byte write
[  397.632693][ T6952] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  397.772713][ T6952] usb 8-1: device descriptor read/64, error -71
[  397.889721][ T6952] usb usb8-port1: attempt power cycle
[  398.057837][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3433'.
[  398.109010][T18893] 8021q: adding VLAN 0 to HW filter on device bond2
[  398.137656][T18893] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  398.190068][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3435'.
[  398.198871][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3435'.
[  398.263402][ T6952] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  398.293575][ T6952] usb 8-1: device descriptor read/8, error -71
[  398.562460][ T6952] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  398.586487][ T6952] usb 8-1: device descriptor read/8, error -71
[  398.701624][ T6952] usb usb8-port1: unable to enumerate USB device
[  399.820338][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.833329][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.836868][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.840434][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.843049][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.846077][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.848652][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.851256][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.853799][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  399.864781][T18984] netlink: 'syz.6.3444': attribute type 1 has an invalid length.
[  400.096564][T19004] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3445'.
[  400.343377][T19012] PID 19012 killed due to inadequate hugepage pool
[  400.635240][    C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  400.860551][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3455'.
[  400.887690][T19059] team_slave_0: entered promiscuous mode
[  400.899265][T19059] team_slave_0: left promiscuous mode
[  401.012111][T19046] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3453'.
[  401.330666][   T42] kauditd_printk_skb: 403 callbacks suppressed
[  401.330696][   T42] audit: type=1400 audit(1785958012.997:76039): avc:  denied  { recv } for  pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50150 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  401.380224][   T42] audit: type=1400 audit(1785958013.035:76040): avc:  denied  { search } for  pid=19081 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  401.434210][   T42] audit: type=1400 audit(1785958013.035:76041): avc:  denied  { read } for  pid=5448 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  401.451992][   T42] audit: type=1400 audit(1785958013.091:76042): avc:  denied  { mounton } for  pid=19082 comm="syz.3.3457" path="/12/mnt_trace" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  401.482299][   T42] audit: type=1400 audit(1785958013.091:76043): avc:  denied  { mount } for  pid=19082 comm="syz.3.3457" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  401.500760][   T42] audit: type=1400 audit(1785958013.091:76044): avc:  denied  { search } for  pid=19082 comm="syz.3.3457" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  401.526113][   T42] audit: type=1400 audit(1785958013.091:76045): avc:  denied  { read } for  pid=19082 comm="syz.3.3457" name="trace_pipe" dev="tracefs" ino=3400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  401.554070][   T42] audit: type=1400 audit(1785958013.091:76046): avc:  denied  { open } for  pid=19082 comm="syz.3.3457" path="/12/mnt_trace/trace_pipe" dev="tracefs" ino=3400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  401.587483][   T42] audit: type=1400 audit(1785958013.091:76047): avc:  denied  { read write } for  pid=19082 comm="syz.3.3457" name="vmci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  401.667832][T19095] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  401.694860][T19095] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  401.706014][T18943] audit: audit_backlog=66 > audit_backlog_limit=64
[  401.711691][T19095] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  401.721577][T19095] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  401.729910][T19100] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  402.328299][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3462'.
[  402.345993][T19119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3462'.
[  402.369445][T19122] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  402.415271][T19122] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  402.608102][T19140] tc_dump_action: action bad kind
[  402.625674][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3466'.
[  403.030469][T19161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33049 sclass=netlink_route_socket pid=19161 comm=syz.3.3473
[  403.393031][T19189] dvmrp0: entered allmulticast mode
[  403.671183][T19203] /dev/sg0: Can't lookup blockdev
[  403.711938][T19196] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  403.741020][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3484'.
[  403.758366][T19201] ntfs3(sr0): Primary boot signature is not NTFS.
[  403.784110][T19201] ntfs3(sr0): try to read out of volume at offset 0xf800
[  403.825217][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3485'.
[  403.856209][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3485'.
[  403.859235][T13459] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  403.862999][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  403.885104][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  403.891822][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  403.917021][T19215] kAFS: Can only specify source 'none' with -o dyn
[  404.045533][T19222] input: syz0 as /devices/virtual/input/input36
[  404.113265][T19227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19227 comm=syz.2.3491
[  404.337619][T19239] dummy0: left promiscuous mode
[  404.879219][T19256] syzkaller0: entered promiscuous mode
[  404.881131][T19256] syzkaller0: entered allmulticast mode
[  405.093744][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3499'.
[  405.700780][T11709] usb 14-1: new high-speed USB device number 21 using dummy_hcd
[  405.901973][T11709] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.905709][T11709] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.909345][T11709] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  405.913352][T11709] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  405.924604][T11709] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.950243][T11709] usb 14-1: config 0 descriptor??
[  406.419692][T11709] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  406.756172][   T42] kauditd_printk_skb: 318 callbacks suppressed
[  406.756187][   T42] audit: type=1400 audit(1785958018.069:76364): avc:  denied  { create } for  pid=19263 comm="syz.9.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  406.766406][   T42] audit: type=1400 audit(1785958018.069:76365): avc:  denied  { name_bind } for  pid=19263 comm="syz.9.3500" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  406.784291][   T42] audit: type=1400 audit(1785958018.069:76366): avc:  denied  { node_bind } for  pid=19263 comm="syz.9.3500" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  406.805923][   T42] audit: type=1400 audit(1785958018.107:76367): avc:  denied  { read write } for  pid=18238 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  406.834483][   T42] audit: type=1400 audit(1785958018.107:76368): avc:  denied  { open } for  pid=18238 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  406.857331][   T42] audit: type=1400 audit(1785958018.107:76369): avc:  denied  { ioctl } for  pid=18238 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  406.882161][   T42] audit: type=1400 audit(1785958018.116:76370): avc:  denied  { recv } for  pid=5649 comm="syz-executor" saddr=127.0.0.1 src=50150 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  406.906003][   T42] audit: type=1400 audit(1785958018.172:76371): avc:  denied  { recv } for  pid=8682 comm="kworker/u33:61" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50150 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  406.926759][   T42] audit: type=1400 audit(1785958018.200:76372): avc:  denied  { create } for  pid=19263 comm="syz.9.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  406.948678][   T42] audit: type=1400 audit(1785958018.228:76373): avc:  denied  { shutdown } for  pid=19263 comm="syz.9.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  407.104040][T19270] validate_nla: 28 callbacks suppressed
[  407.104061][T19270] netlink: 'syz.9.3500': attribute type 2 has an invalid length.
[  407.956412][T11709] usb 14-1: reset high-speed USB device number 21 using dummy_hcd
[  410.039571][    C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  411.247975][T19260] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  411.679504][T19328] syzkaller1: entered promiscuous mode
[  411.687268][T19328] syzkaller1: entered allmulticast mode
[  411.716608][ T6952] usb 11-1: new low-speed USB device number 9 using dummy_hcd
[  411.738002][T18065] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  411.845772][T19339] overlayfs: failed to resolve './file1/file0': -2
[  411.874742][T19342] overlayfs: failed to resolve './file0': -2
[  411.878676][ T6952] usb 11-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  411.888608][ T6952] usb 11-1: config 1 interface 0 has no altsetting 0
[  411.894347][ T6952] usb 11-1: string descriptor 0 read error: -22
[  411.899429][ T6952] usb 11-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40
[  411.906814][T18065] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  411.910795][ T6952] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.913775][T18065] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  411.922813][T18065] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.036232][T19350] input: syz0 as /devices/virtual/input/input38
[  412.146832][   T42] kauditd_printk_skb: 104 callbacks suppressed
[  412.146851][   T42] audit: type=1400 audit(1785958023.123:76478): avc:  denied  { read } for  pid=19298 comm="syz.6.3505" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  412.176140][   T42] audit: type=1400 audit(1785958023.132:76479): avc:  denied  { open } for  pid=19298 comm="syz.6.3505" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  412.185720][   T42] audit: type=1400 audit(1785958023.132:76480): avc:  denied  { ioctl } for  pid=19298 comm="syz.6.3505" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  412.194647][T19299] gfs2: Unknown parameter 'debug.�����UD8�'
[  412.195135][T18065] qmi_wwan 8-1:1.0: cdc-wdm1: USB WDM device
[  412.221354][   T42] audit: type=1400 audit(1785958023.141:76481): avc:  denied  { ioctl } for  pid=19301 comm="syz.3.3504" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  412.241224][  T149] usb 14-1: USB disconnect, device number 21
[  412.249410][   T42] audit: type=1400 audit(1785958023.160:76482): avc:  denied  { mounton } for  pid=19298 comm="syz.6.3505" path="/25/file0" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  412.259489][ T5741] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  412.266472][ T5741] CPU: 3 UID: 0 PID: 5741 Comm: kworker/u34:3 Tainted: G             L   N  syzkaller #0 PREEMPT(full) 
[  412.266499][ T5741] Tainted: [L]=SOFTLOCKUP, [N]=TEST
[  412.266513][ T5741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  412.266523][ T5741] Workqueue: hci1 hci_rx_work
[  412.266668][ T5741] Call Trace:
[  412.266683][ T5741]  <TASK>
[  412.266694][ T5741]  dump_stack_lvl+0x100/0x190
[  412.266771][ T5741]  sysfs_warn_dup.cold+0x1c/0x28
[  412.266813][ T5741]  sysfs_create_dir_ns+0x24b/0x2b0
[  412.266856][ T5741]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  412.266869][ T5741]  ? find_held_lock+0x2b/0x80
[  412.266911][ T5741]  ? kobject_add_internal+0x25f/0x930
[  412.266974][ T5741]  ? kobject_add_internal+0x25f/0x930
[  412.267004][ T5741]  ? do_raw_spin_unlock+0x145/0x1e0
[  412.267030][ T5741]  kobject_add_internal+0x2c8/0x930
[  412.267057][ T5741]  kobject_add+0x16a/0x1e0
[  412.267075][ T5741]  ? __pfx_kobject_add+0x10/0x10
[  412.267100][ T5741]  ? class_to_subsys+0x10f/0x150
[  412.267178][ T5741]  ? kobject_put+0xb9/0x640
[  412.267197][ T5741]  ? _raw_spin_unlock+0x28/0x50
[  412.267229][ T5741]  device_add+0x294/0x1970
[  412.267253][ T5741]  ? __pfx_dev_set_name+0x10/0x10
[  412.267267][ T5741]  ? __pfx_device_add+0x10/0x10
[  412.267291][ T5741]  ? mgmt_send_event_skb+0x2fb/0x460
[  412.267311][ T5741]  hci_conn_add_sysfs+0x1a3/0x260
[  412.267335][ T5741]  le_conn_complete_evt+0x11eb/0x1f60
[  412.267354][ T5741]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  412.267373][ T5741]  ? hci_event_packet+0x186/0xcd0
[  412.267390][ T5741]  hci_le_conn_complete_evt+0x23c/0x3a0
[  412.267410][ T5741]  ? skb_pull_data+0x15f/0x1e0
[  412.267473][ T5741]  hci_le_meta_evt+0x34a/0x5f0
[  412.267490][ T5741]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  412.267513][ T5741]  hci_event_packet+0x51c/0xcd0
[  412.267529][ T5741]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  412.267551][ T5741]  ? __pfx_hci_event_packet+0x10/0x10
[  412.267566][ T5741]  ? kcov_remote_start+0x384/0x670
[  412.267595][ T5741]  ? lockdep_hardirqs_on+0x78/0x100
[  412.267614][ T5741]  hci_rx_work+0x451/0xfc0
[  412.267637][ T5741]  process_one_work+0xa23/0x1940
[  412.267663][ T5741]  ? __pfx_process_one_work+0x10/0x10
[  412.267687][ T5741]  ? __pfx_hci_rx_work+0x10/0x10
[  412.267704][ T5741]  worker_thread+0x5ef/0xe50
[  412.267731][ T5741]  ? kthread+0x13a/0x450
[  412.267748][ T5741]  ? __pfx_worker_thread+0x10/0x10
[  412.267765][ T5741]  kthread+0x370/0x450
[  412.267776][ T5741]  ? __pfx_kthread+0x10/0x10
[  412.267789][ T5741]  ret_from_fork+0x72b/0xd50
[  412.267823][ T5741]  ? __pfx_ret_from_fork+0x10/0x10
[  412.267845][ T5741]  ? rcu_is_watching+0x12/0xc0
[  412.267873][ T5741]  ? __switch_to+0x800/0x10f0
[  412.267892][ T5741]  ? __pfx_kthread+0x10/0x10
[  412.267904][ T5741]  ret_from_fork_asm+0x1a/0x30
[  412.267934][ T5741]  </TASK>
[  412.268005][ T5741] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  412.339502][   T42] audit: type=1400 audit(1785958023.188:76483): avc:  denied  { recv } for  pid=19354 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50150 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  412.346017][ T5741] Bluetooth: hci1: failed to register connection device
[  412.377192][   T42] audit: type=1400 audit(1785958023.188:76484): avc:  denied  { read } for  pid=19354 comm="syz.2.3519" dev="nsfs" ino=4026533634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  412.390436][T18065] wwan wwan0: port wwan0qmi0 attached
[  412.419293][   T42] audit: type=1400 audit(1785958023.188:76485): avc:  denied  { open } for  pid=19354 comm="syz.2.3519" path="net:[4026533634]" dev="nsfs" ino=4026533634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  412.453936][   T42] audit: type=1400 audit(1785958023.188:76486): avc:  denied  { create } for  pid=19354 comm="syz.2.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  412.486885][   T42] audit: type=1400 audit(1785958023.197:76487): avc:  denied  { search } for  pid=19343 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.509072][T19367] vxfs: WRONG superblock magic 00000000 at 1
[  412.513069][T19367] vxfs: WRONG superblock magic 00000000 at 8
[  412.515128][T19367] vxfs: can't find superblock.
[  412.533274][ T6952] usbhid 11-1:1.0: can't add hid device: -71
[  412.535339][ T6952] usbhid 11-1:1.0: probe with driver usbhid failed with error -71
[  412.547153][ T6952] usb 11-1: USB disconnect, device number 9
[  412.558969][T19369] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  412.567750][T18065] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 8e:08:90:bc:e5:48
[  412.571447][T19369] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  412.571500][T19369] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  412.583641][T18065] usb 8-1: USB disconnect, device number 18
[  412.587913][T18065] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device
[  412.675818][ T5842] hid (null): report_id 33474 is invalid
[  412.696689][T19376] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode
[  412.700722][T19376] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode
[  412.704273][ T5842] hid-generic 0005:4C4A:5505.0021: collection stack underflow
[  412.712821][T19373] syzkaller0: entered promiscuous mode
[  412.719599][T19373] syzkaller0: entered allmulticast mode
[  412.722831][ T5842] hid-generic 0005:4C4A:5505.0021: item 0 2 0 12 parsing failed
[  412.729327][ T5842] hid-generic 0005:4C4A:5505.0021: probe with driver hid-generic failed with error -22
[  412.770091][T18065] wwan wwan0: port wwan0qmi0 disconnected
[  412.826562][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3526'.
[  412.896945][T19389] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode
[  412.904846][T19389] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode
[  412.917176][T19388] BUG: unable to handle page fault for address: fffffffffffffc10
[  412.919796][T19388] #PF: supervisor read access in kernel mode
[  412.921613][T19394] xt_cluster: node mask cannot exceed total number of nodes
[  412.922248][T19388] #PF: error_code(0x0000) - not-present page
[  412.928668][T19388] PGD e997067 P4D e997067 PUD e999067 PMD 0 
[  412.931183][T19388] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  412.933518][T19388] CPU: 2 UID: 0 PID: 19388 Comm: syz.2.3527 Tainted: G             L   N  syzkaller #0 PREEMPT(full) 
[  412.937924][T19388] Tainted: [L]=SOFTLOCKUP, [N]=TEST
[  412.939959][T19388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  412.944091][T19388] RIP: 0010:strnlen+0x4b/0x80
[  412.945712][T19388] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48
[  412.951733][T19388] RSP: 0018:ffffc9000343f0d8 EFLAGS: 00010246
[  412.953676][T19388] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  412.956405][T19388] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  412.958958][T19388] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  412.961413][T19388] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  412.964220][T19388] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010
[  412.967520][T19388] FS:  00007f55c07896c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000
[  412.970281][T19388] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  412.972348][T19388] CR2: fffffffffffffc10 CR3: 000000004d78b000 CR4: 0000000000352ef0
[  412.974840][T19388] Call Trace:
[  412.975914][T19388]  <TASK>
[  412.976858][T19388]  ? look_up_lock_class+0x64/0x120
[  412.978482][T19388]  trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0
[  412.980655][T19388]  ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10
[  412.982924][T19388]  ? __pfx___might_resched+0x10/0x10
[  412.984642][T19388]  ? __mutex_lock+0x26d/0x1bd0
[  412.986136][T19388]  ieee80211_netdev_setup_tc+0x2c6/0x3e0
[  412.987973][T19388]  ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10
[  412.989951][T19388]  tcf_block_offload_cmd.isra.0+0x1c4/0x310
[  412.991762][T19388]  ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10
[  412.993770][T19388]  ? __pfx_down_write+0x10/0x10
[  412.995329][T19388]  tcf_block_get_ext+0x7ed/0x1950
[  412.996902][T19388]  tcf_block_get+0xa8/0x100
[  412.998350][T19388]  ? __pfx_tcf_block_get+0x10/0x10
[  412.999992][T19388]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  413.001935][T19388]  ? __pfx_qdisc_watchdog+0x10/0x10
[  413.003562][T19388]  ? __hrtimer_setup+0x208/0x330
[  413.005145][T19388]  cake_init+0x306/0xac0
[  413.006504][T19388]  ? lockdep_rtnl_is_held+0x26/0x40
[  413.008152][T19388]  ? __pfx_cake_init+0x10/0x10
[  413.009651][T19388]  qdisc_create+0x47b/0x1060
[  413.011127][T19388]  tc_modify_qdisc+0xdcf/0x2120
[  413.012659][T19388]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  413.014339][T19388]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  413.015980][T19388]  rtnetlink_rcv_msg+0x3c9/0xe90
[  413.017476][T19388]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  413.019176][T19388]  ? ref_tracker_free+0x37e/0x6c0
[  413.020785][T19388]  netlink_rcv_skb+0x159/0x420
[  413.022280][T19388]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  413.023945][T19388]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  413.025538][T19388]  ? netlink_deliver_tap+0x1ae/0xcc0
[  413.027192][T19388]  netlink_unicast+0x585/0x850
[  413.028946][T19388]  ? __pfx_netlink_unicast+0x10/0x10
[  413.030601][T19388]  ? __pfx_sock_has_perm+0x10/0x10
[  413.032259][T19388]  netlink_sendmsg+0x8b0/0xda0
[  413.033778][T19388]  ? __pfx_netlink_sendmsg+0x10/0x10
[  413.035495][T19388]  ? selinux_socket_sendmsg+0x198/0x2f0
[  413.037280][T19388]  ____sys_sendmsg+0xa4d/0xbe0
[  413.038830][T19388]  ? __pfx_netlink_sendmsg+0x10/0x10
[  413.040754][T19388]  ? __pfx_____sys_sendmsg+0x10/0x10
[  413.042452][T19388]  ? __pfx_trace_clock_local+0x10/0x10
[  413.044289][T19388]  ___sys_sendmsg+0x190/0x1e0
[  413.045855][T19388]  ? __pfx____sys_sendmsg+0x10/0x10
[  413.047508][T19388]  ? __lock_acquire+0x49f/0x1a40
[  413.049062][T19388]  __sys_sendmsg+0x160/0x210
[  413.050511][T19388]  ? __pfx___sys_sendmsg+0x10/0x10
[  413.052118][T19388]  do_syscall_64+0x115/0x870
[  413.053594][T19388]  ? clear_bhb_loop+0x40/0x90
[  413.055099][T19388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.056932][T19388] RIP: 0033:0x7f55bf99e0d9
[  413.058335][T19388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.064303][T19388] RSP: 002b:00007f55c0789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.066898][T19388] RAX: ffffffffffffffda RBX: 00007f55bfc25fa0 RCX: 00007f55bf99e0d9
[  413.069370][T19388] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 000000000000000a
[  413.071814][T19388] RBP: 00007f55bfa35024 R08: 0000000000000000 R09: 0000000000000000
[  413.074296][T19388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.076743][T19388] R13: 00007f55bfc26038 R14: 00007f55bfc25fa0 R15: 00007ffe6bc27e28
[  413.079205][T19388]  </TASK>
[  413.080192][T19388] Modules linked in:
[  413.081424][T19388] CR2: fffffffffffffc10
[  413.082728][T19388] ---[ end trace 0000000000000000 ]---
[  413.084441][T19388] RIP: 0010:strnlen+0x4b/0x80
[  413.085920][T19388] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48
[  413.091964][T19388] RSP: 0018:ffffc9000343f0d8 EFLAGS: 00010246
[  413.093905][T19388] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  413.096396][T19388] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  413.098841][T19388] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  413.101196][T19388] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  413.103659][T19388] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010
[  413.106126][T19388] FS:  00007f55c07896c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000
[  413.108853][T19388] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  413.110892][T19388] CR2: fffffffffffffc10 CR3: 000000004d78b000 CR4: 0000000000352ef0
[  413.113377][T19388] Kernel panic - not syncing: Fatal exception
[  413.115895][T19388] Kernel Offset: disabled
[  413.117263][T19388] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:23:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=00007f8b56b64260 RCX=0000000000000120 RDX=0000000000000078
RSI=00000000f1af0b39 RDI=00007ffc8c7c0f40 RBP=00007ffc8c7c0f40 RSP=00007ffc8c7c0eb0
R8 =0000000084a559bf R9 =0000000000000000 R10=00007f8b56b37330 R11=0000000000000000
R12=0000000000000000 R13=00007ffc8c7c0f40 R14=0000000000000000 R15=0000000000000000
RIP=00007f8b56b5260b RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f8b56b37020 CR3=000000003e45e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6f7364765f5f00 6d6f646e61727465
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000007465675f
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b636f6c635f6f73 64765f5f00757063
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eaea540
RSI=ffffffff81b57ece RDI=ffff88801eaea540 RBP=0000000000000001 RSP=ffffc90000177df8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000
RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ed8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055555a06ba28 CR3=000000000e994000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55c075d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6bc28316
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6bc28316 00007ffe6bc2831c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfa35607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfa35647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfa357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfa35639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfbf2600 00007f55bfbf25e0 00007f55bfbf25e8 00007f55bfbf2618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfbf25f8 00007f55bfbf25c8 00007f55bfbf2600 00007f55bfbf25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000003b 0000000000000000 0000000000000000 00000000000173fc
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=000000000000002a RCX=ffffffff81e8b30e RDX=ffff88802a5aa540
RSI=ffffffff81e8b2fc RDI=ffff88802a5aa540 RBP=0000000000000001 RSP=ffffc9000343ec70
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=707573203a465023
R12=1ffff92000687d90 R13=0000000000000000 R14=ffff888026c1ca80 R15=ffffc9000343ed38
RIP=ffffffff81e8b2fe RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f55c07896c0 ffffffff 00c00000
GS =0000 ffff8880d5fd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=fffffffffffffc10 CR3=000000004d78b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6bc28316
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6bc28316 00007ffe6bc2831c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfa35607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfa35647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfa357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfa35639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55bfbf25f8 00007f55bfbf25c8 00007f55bfbf2600 00007f55bfbf25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a306b5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc9000366f3d0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7473756c635f7478
R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b6fe22e R15=ffffffff85a30650
RIP=ffffffff85a306df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4ee96326c0 ffffffff 00c00000
GS =0000 ffff8880d60d8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000000540 CR3=000000005bb79000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc57be99c6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc57be99c6 00007ffc57be99cc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee8835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee8835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee88357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee8835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee89f25f8 00007f4ee89f25c8 00007f4ee89f2600 00007f4ee89f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000c0
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000