last executing test programs:

5m38.235920771s ago: executing program 0 (id=593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@nested_create_vm={0x12d, 0x18, 0x2}, @code={0xa, 0x14, {"0f01c1"}}], 0x2c})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0xc, 0x0, [{0x0, 0x0, 0x0, 0x20, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x1, 0x0, 0x0, 0x206a7, 0x800, 0x7fbae3ff, 0xbfebfbff}, {0x7, 0x0, 0x0, 0x0, 0x21cbf5}, {0x80000000, 0x0, 0x0, 0x80000008}, {0x80000001, 0x0, 0x0, 0x206a7, 0x0, 0x121, 0x2c100800}, {0x80000008, 0x0, 0x0, 0x3028}, {0x40000000, 0x0, 0x0, 0x40000005, 0x7263694d, 0x666f736f, 0x76482074}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x40000002, 0x0, 0x0, 0x10000}, {0x40000003, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff}, {0x40000004, 0x0, 0x0, 0xffffffff, 0xffffffff}, {0x40000005, 0x0, 0x0, 0xffffffff}]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000000, 0x0, 0x1}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m38.234541059s ago: executing program 0 (id=594):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
pwrite64(r0, &(0x7f0000000140)='~', 0x1, 0x3)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0xffffffffee100f4f, 0x6, 0xb, 0xac, 0xffeffffa, 0x0, 0x0, 0x10, 0xff}}, 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0xffffffff, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa0000})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000042c0)=ANY=[@ANYBLOB="ec050000", @ANYRES8, @ANYBLOB="200027bd7000ffdbdf254a0000000800010067000000080003", @ANYRES32=0x0, @ANYBLOB="0c009900001000007f0000001c007580040006000400030004000900040009000400010004000100a40475800400080028011280ec00848004000080a000008008000200010000000a000500505050505050000008000200000000003c0006800800010008000000080001000400000008000200fc0000000800000000000000080002000400000008000200030000000800050008000000340006800800020001000100080002000b0000000800010008000000080000000300000008000200ffffffff080000000000000005000100a60000000800020001000000440000800a00050108021100000000000a000500899c4d496320000011000100f7f8008d095ce73857595902df0000000a000500f53e19b330b0000008000200000400000a000600ffffffffffff000008009e00001900000600f700090400000600f700010600000800dc00010000000a00f500ffffffffffff00000400020078010e800a000300080211000001000019000a004d61c61d7a68e74bcc74770f7b85a32430d6cd27e80000005500080005000000ffffffffd126de2ffd1e8c67e69876f20d0ec0a1ab28d92801dd77fab5a6ccc2582ccbfdc394479d906d6ba8f9985817bf138eaa46cefa4eca163f6363f3e97fe2ccbc6bf1e129d82296c3b9fd0000000a0003000802110000000000080009000a000000100007000600000008000000040000000600050008000000c50008000600000006000000830cf5288f3fcd00b1c953408332348cdb3c5e67c9475ab81bc8636cbf0f257b34e6dab6f7290c7980def6a6949d13df37596730e9b4a1d8d940b6a73e7dd80bb72fad5da84be26de45a18fe297c870a51fba63f00e041784f3daaa32348589d36408cbcdbd782bbf5b251fca94cbfb10d87f26c9f5fa4801e14e212596202b19850daa96ecf812738b58ec86362e5c8f689916413a1135199862e4dcacbe1a83a1817746f696692e15337d06418c21dbc3020826fda6248c0a37a155857ac22ff0dbd0b57e486000000ec0192800800dc0000000000e0017d80b9000000986601911bc7a549ea6a67eeb811794bbc88c22eb57d7500caaf5bf21a8d6cecb6ba756faef08041a58718500cb990027ae22967852bee46650b48a3d5cc76386ea55ce19b6b88fe03bf33464ba44825b7e1c6fab413ab7a0434b3c4ffe0d532732de767bf531045d1d938f88528ce2ac965f5d13d12aae0f28d7167fca02c17ff26767e0fb91cb7925bc16acc7ccb71884ef144a614197c9ac985497e42fae0a38b2473df16b1f99d5b33f8a851e2984804c52a3000000089000000f55ac8322b4155d3e284ba8d138c563b4f2cbd6b0fb8e2a5f98fa55f49bb05d369ba4f8ea03daa23476de436f8dcb0a8ee468ad06727a7a331eee2240b6e7870dc2fc73d9cc42a6e7067590ee6e2cf26dfb01a4295c764201d82ae3dc0dd7775ae5abca224e4899fa6af331bcd8d0888bd18510134534ae2db57ea189abc462cdfb7005ffd00000091000200e230e5ee156041be576147c8f2a55568607552647c92f77907c90031bae2dfdcc2458d90e4b9516aaa87ae75e54303e69d820e59d3eed34f734a59441600e8276408bfa07cfd4f5cb023f44e06beddb9cd80e59b449d0009a7aee6b6ba8c00cd3445fd364559a3be2fc67d421c9cec9031d79301c796bb301af2b035afded20febb3874c6802cd658061d89efe000000040001000400090004000600fc00758010000e800a0003000802110000000000e8000e80c100080081000000bc000000d283086d607f69fe74aa7cfceacfe07b948ceb15d0a130af4613737fbfe114a922168a96638e30839d1670fd23346108ee323c704f6b552dc3af7db8be2a8366209b80807ff056545d7cf756be62d8e3ba4a9f53cadd401d8e0c4335908b2fe63858e0a772a07fab71263e2064fd1d23d6c4458b249a5e668d7fd6ca5673c0ca42ef2e8c6f516375487487ca5580d6ea7146dbbd8db42ce6e8e526c18974e16ace377bd168f8c235252ed5315caee50270ad31610a000000100007000c00000003"], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

5m37.547005431s ago: executing program 0 (id=603):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r3 = fspick(r2, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

5m37.533671468s ago: executing program 0 (id=604):
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x2820c2)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0)

5m37.355621781s ago: executing program 0 (id=607):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'gretap0\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000040))
write(r1, &(0x7f0000000440)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
mkdirat(r1, &(0x7f0000000000)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x348)
write(r2, &(0x7f0000000500)='3', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000080)=0x1, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
truncate(&(0x7f00000000c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x600000000000)
write(r1, &(0x7f00000005c0), 0x0)

5m37.306565729s ago: executing program 0 (id=609):
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020050180000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000700000008000500", @ANYRES32=r1], 0x50}, 0xfe, 0x0, 0x0, 0x48890}, 0x0)

5m22.238060851s ago: executing program 32 (id=609):
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020050180000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000700000008000500", @ANYRES32=r1], 0x50}, 0xfe, 0x0, 0x0, 0x48890}, 0x0)

5m3.757039081s ago: executing program 3 (id=1067):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
r1 = socket(0xa, 0x1, 0x0)
getsockopt$inet_int(r1, 0x0, 0x22, 0x0, &(0x7f0000000200))
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000580)={0x40, 0x1, 0x1, 0x100b0, 0x3, 0x3}, 0x30, 0x1)
r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
r5 = dup(r4)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r10=>0x0)
syz_ublk_setup_queues(r5, r10, &(0x7f0000000340)={0x0, 0x3cff, 0x4000, 0x0, 0x2cd}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226c, 0x40, 0x0, 0x2e3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb05e, 0x2, 0x0, 0x310, 0x0, r6}, <r11=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffe5, 0x0, 0x2, 0x12b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6046, 0x400, 0x1, 0xe3, 0x0, r6}}], 0x4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r12)
ptrace$poke(0x1, r12, &(0x7f0000000000), 0xfffffffefffffffd)
syz_ublk_setup_queues(r5, r10, &(0x7f00000001c0)={0x0, 0xb626, 0x200, 0x10000001, 0x28b, 0x0, r5}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa209, 0x8, 0x0, 0x79, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19f5, 0x800, 0x0, 0x3, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26b6, 0x0, 0x1, 0x36}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3213, 0x100, 0x1, 0x3e4, 0x0, r11}}], 0x4, 0x0, 0x0)
landlock_restrict_self(r3, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ppoll(&(0x7f00000009c0)=[{r0, 0x26e}, {r2, 0x408}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x4]}, 0x8)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="891bb46b891caaaaaaaaaabb86dd6064f9ff080000fffd010000000000000000000000000002ff0200000000000000000000000000012b03000000000000c910ff030000000000000000000000000001c30400000000"], 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r13)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r14, <r15=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r13}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r15}, &(0x7f0000000240), &(0x7f00000002c0)=r13}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r15}, &(0x7f0000000280), &(0x7f0000000400)=r13}, 0x20)
ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000540)=0xff0000)

5m3.690124103s ago: executing program 3 (id=1070):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x204400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000180)={0x0, 0x7f, 0x6c0000, 0x5, 0x0, 0x0, 0x3cb1a3ee, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota'])
r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0xee00, 0x0)
mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/self/root/dev/kmsg\x00', 0x1, 0x0)
ioctl(r4, 0x7fef, &(0x7f00000001c0)="3cfb6c2c3279587e75d63d0ea5ab794e61a4c459d11e06feedc44237a783ab3c3b5df2474140004ff0e1db58e093e06bd0cb22b345b356b48aa4")
read(r3, &(0x7f0000000600)=""/1024, 0x400)
write(r4, &(0x7f0000000600)='\x00'/1024, 0x400)
r5 = dup(r1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x75, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="0f20d835080000000f22d836660f38804dc4f3470f5dd264f0832374672e440f01cb660fc736f246a566b832000f00d80f01f866baf80cb89859908eef66bafc0cb80c000000ef", 0x47}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5m3.526539569s ago: executing program 3 (id=1074):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a00010071756575650000001c0002800600034000040000060001400000000006000240000400000900010073797a300000"], 0x84}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e6576650000600002800500"], 0x90}}, 0x4048084) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x1ff}}]})

5m3.467511856s ago: executing program 3 (id=1075):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f0000000000)={0x101, 0x0, 0x3b, 0x0, 0x7f9})

5m3.407705023s ago: executing program 3 (id=1077):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r3})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
close(0x3)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}})

5m2.988151413s ago: executing program 3 (id=1083):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0xfc, 0x0, 0x0, 0x0, "3bad90732d8c59f7"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000400)='./file0\x00', 0x128)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x100005, 0xa}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="9321000000d00000140012800b0001006272696467650000000002800800290041fa0020"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40010}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xfd74, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m2.921671459s ago: executing program 33 (id=1083):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0xfc, 0x0, 0x0, 0x0, "3bad90732d8c59f7"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000400)='./file0\x00', 0x128)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x100005, 0xa}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="9321000000d00000140012800b0001006272696467650000000002800800290041fa0020"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40010}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xfd74, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m53.005311377s ago: executing program 2 (id=2447):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xb}}}, 0x20}}, 0x0)
close(r0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x1, 0x5c07, {0x4, 0x1}, {0x16, 0x2}, @const={0x4, {0x7, 0x7, 0x4, 0x9a}}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x9000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0x50000, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0x4, 0xd, 0x4, 0x6, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x58000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x7, 0x5, 0x5, 0xe]})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x4, 0x4, 0x5, '\x00', 0xfffffffffffff7fe})
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x1}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0xfd, 0x9, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xef, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0x8d, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x3, 0x5, '\x00', 0x10}, {0x39, 0x4, 0x4, '\x00', 0x8}, {0x9, 0x2, 0x0, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x83}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}})
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8)

2m52.806846349s ago: executing program 2 (id=2477):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000131401010000"], 0x18}, 0x1, 0x0, 0x0, 0x20048840}, 0x0)

2m52.804138765s ago: executing program 2 (id=2478):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a050200000000000000000100f4000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

2m52.714237895s ago: executing program 2 (id=2480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x201, 0x6000006, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0xc080)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>0xffffffffffffffff}}, './file0\x00'})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000300)={[0x6, 0x7, 0x7fffffffffffffff, 0x8, 0x3, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x7, 0x8, 0x7, 0x401, 0x6, 0x1, 0x4], 0xffffffff, 0x90})
socket$inet6_sctp(0xa, 0x801, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0xfffffffb, 0x9}, {0x3, 0x1000}], r2}, 0x18, 0x1)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0)
read(r3, &(0x7f0000000000)=""/149, 0xaa)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
setxattr$security_capability(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v2={0x2000000, [{0xe, 0x2}, {0x7fffffff, 0x1}]}, 0x14, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000035c0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x69, @empty, 0x3}, 0x1c, &(0x7f00000032c0)=[{&(0x7f0000000100)="fe", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="a1d19d00020000000504030001000000ffff000000ab3b72f79897db74ee6bb507b0fb5c7a82862417c8d4a464ce82880e3651b8b711a79624c83b3d4c6165fda118534a0200000000000000be55d5627b0a3a9a", @ANYRES32=0x0], 0x20, 0x4080}], 0x1, 0x884)

2m52.541806219s ago: executing program 2 (id=2481):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x4, @void}, 0x10)

2m50.260903215s ago: executing program 2 (id=2512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0xffffffffffffffe3, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080804}, 0x48004)

2m50.217979349s ago: executing program 34 (id=2512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0xffffffffffffffe3, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080804}, 0x48004)

54.20044397s ago: executing program 5 (id=3998):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r1, 0x80, 0x72, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000)
r2 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00')
r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x509)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)

54.124873951s ago: executing program 5 (id=3999):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000000c0)}, 0x20)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000700)={0x1, 0x0, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%ps    \x00'}, 0x20)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./bus\x00'}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f0000000900)}, 0x20)
socket$kcm(0xa, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@udp=r7}, 0x20)
connect$unix(r7, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="180000e70300000000000000ff07000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000955a000004000000186500000c000000000000000100010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000c30700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000185000000f000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f8500000006000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x8, 0xa5, &(0x7f0000000600)=""/165, 0xc1000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xd6d2, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r2, r3, r4, r5, 0x1, r10, r11], 0x0, 0x10, 0x8}, 0x94)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0x10, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
creat(&(0x7f0000000100)='./bus\x00', 0x100)
mount$tmpfs(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000ec0), 0x2010008, &(0x7f0000001040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]})
syz_emit_ethernet(0x1a, &(0x7f0000000340)={@local, @dev, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x1, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0xf4, 0x1, '\x00\x00'}}}}}, 0x0)

54.117009302s ago: executing program 5 (id=4001):
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x4}, {0xffbd, 0xff46}}}}, 0x11)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(r2)
r3 = inotify_init1(0x800)
fcntl$setstatus(r2, 0x4, 0x2c00)
r4 = gettid()
fcntl$setown(r2, 0x8, r4)
fcntl$setsig(r3, 0xa, 0xe)
inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
rmdir(&(0x7f0000000100)='./control\x00')
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008844}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

53.481301396s ago: executing program 5 (id=4013):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x40002021, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xea)

53.122477527s ago: executing program 5 (id=4018):
socket$packet(0x11, 0x2, 0x300)
socket$kcm(0x11, 0x3, 0x0)

52.674930525s ago: executing program 5 (id=4026):
socket$inet6_udp(0xa, 0x2, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {0x0, 0x3}, {}, @ext={0x0, 0x0}}], 0x1c)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
dup3(r3, r2, 0x80000)
fcntl$setstatus(r2, 0x4, 0x2400)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000))

52.600327533s ago: executing program 35 (id=4026):
socket$inet6_udp(0xa, 0x2, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {0x0, 0x3}, {}, @ext={0x0, 0x0}}], 0x1c)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
dup3(r3, r2, 0x80000)
fcntl$setstatus(r2, 0x4, 0x2400)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000))

44.372588204s ago: executing program 7 (id=4176):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x0, 0x3})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket(0x11, 0x3, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000e40)={[0xfffffffffffffff9, 0xe34, 0x1, 0xfffffffffffffffc, 0x6, 0x1, 0x1000, 0x1000000000008, 0x7d, 0x0, 0x0, 0xc, 0x8000000000000002, 0x1, 0x1fffffffffffe, 0x4], 0x50000, 0x1806c5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

43.831894073s ago: executing program 7 (id=4182):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd6400fddbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040)
syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000440)=@ethtool_cmd={0x9, 0x2, 0x8f, 0x9, 0x7f, 0x2, 0x81, 0x7, 0x5, 0x62, 0xa, 0x2002, 0x0, 0x1, 0x6, 0x1002, [0x3d6b, 0x443f]}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r6 = getpid()
fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r6})
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r7=>0x0)
fcntl$setown(r2, 0x8, r7)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
fcntl$setlease(r2, 0x400, 0x2)

43.708687509s ago: executing program 7 (id=4185):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_READ_SNR(r0, 0x80026f48, &(0x7f00000004c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='proc/self/root/sys/bus/usb/drivers/whiteheat\x00', 0x0, 0x0)

43.66599176s ago: executing program 7 (id=4186):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000)
madvise(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x9)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket(0x200000000000011, 0x4000000000080002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000200)=0xff01, 0x2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f00002ef000/0x2000)=nil, 0x2000, 0x17)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000})

43.606626033s ago: executing program 7 (id=4187):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4b8, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4a4, 0x1, [@m_skbedit={0x6c, 0x1b, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x8d9, 0x86, 0x2, 0x6, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x10001, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4b8}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef)

43.093715067s ago: executing program 7 (id=4195):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc091}, 0x4008040)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080)
r2 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2})
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) (async)
r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7)
fcntl$addseals(r4, 0x409, 0x8) (async)
fcntl$addseals(r4, 0x409, 0x8)
fallocate(r4, 0x3, 0x9100, 0x3) (async)
fallocate(r4, 0x3, 0x9100, 0x3)
syz_open_procfs(0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_usb_disconnect(0xffffffffffffffff)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r5, &(0x7f0000000080)='transport=hoop,nqn=n', 0x14) (async)
write(r5, &(0x7f0000000080)='transport=hoop,nqn=n', 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x8, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x2, 0x0, 0x7fff0001}]})

43.035747843s ago: executing program 36 (id=4195):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc091}, 0x4008040)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080)
r2 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2})
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) (async)
r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7)
fcntl$addseals(r4, 0x409, 0x8) (async)
fcntl$addseals(r4, 0x409, 0x8)
fallocate(r4, 0x3, 0x9100, 0x3) (async)
fallocate(r4, 0x3, 0x9100, 0x3)
syz_open_procfs(0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_usb_disconnect(0xffffffffffffffff)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r5, &(0x7f0000000080)='transport=hoop,nqn=n', 0x14) (async)
write(r5, &(0x7f0000000080)='transport=hoop,nqn=n', 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x8, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x2, 0x0, 0x7fff0001}]})

26.14197956s ago: executing program 8 (id=4422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000908000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

26.067727822s ago: executing program 8 (id=4423):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x21}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x20020, &(0x7f0000000300)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75", @ANYBLOB="4b9047ecccef269fac3852b664c12017a5c96300a052483993d906df89890ec1b2de8083719a0879534b29782bbd1ef335521a9065bb899178c7eb22ab1d4615e08342c885eb7944f1499d1be559e33d4b5903d3c85e4e46315686dd15acfebbef15762dd23ac307ef70c4bdc448245aee97477a95f78028c650d43d507bffb301dad68f88223dce89b4a285b5ee83576cc1dabbe0e1fe45d0573a8d67aa1cb012d04c2f972d8558eee03d4430", @ANYRESHEX=r0, @ANYRES8=r0])
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r4], 0x48}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fffffffffffffff)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
close_range(r7, r7, 0x0)
write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x3e)
getdents64(r1, &(0x7f0000000100)=""/134, 0x86)
getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/180, 0xb4)

25.13820025s ago: executing program 8 (id=4425):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0x90000000, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f0000000040)=[0x6, 0x2])
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000000)={0xc0000000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r7})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r8, 0x26, 0x0, 0x7fffffff, &(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000000)={0x600, 0x1000000})
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8)

23.265862068s ago: executing program 8 (id=4439):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7000000}, 0x48)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)

23.041165157s ago: executing program 8 (id=4442):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r0])
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)={[{}, {@subsystem='blkio'}]})
r3 = socket$netlink(0x10, 0x3, 0x4)
fsetxattr$trusted_overlay_upper(r1, &(0x7f00000004c0), &(0x7f0000000540)={0x0, 0xfb, 0x27, 0x0, 0x5, "b01cd6eda214002f43999079387df014", "bbf14449947207015c48ccf2b244f358c4a2"}, 0x27, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
write(r4, &(0x7f0000000600)="321ca0cccf5e6e0c662837a4e27e4cab57c29db0035165f7a3e3d206bc5a4692536db9f41eb438031ae82d1330057a083e50220715b0dc0dc0379867c1a70d5cf60b02c45d248d2b286713f1d103424d93f7701c7399c820b7c7ef88677ef7eafe0dac26dc85630bd30360dcb995b080fbb8fe082c74a76d582c5ee52e4e46fb49928a45e1618425ffc079f0a304812ac4951587098ee0950bd4b000e16aed506b1852c75f5b140b25c9158cd89f4115c775888a4136c342f55835238f0d2fcf17f677e981fb186ab13691c6072fdd1976acebc46fde2c200b87a4314444b600e6e0d7c37a3178", 0xe7)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x7c, 0x24, 0x4, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x10, 0x9}, {0xffff, 0xe}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc7, 0x3, 0x6, 0x8a7, 0x2, 0x6, 0x80000000, 0x7}}, {0x12, 0x2, [0x6, 0x4, 0xfffa, 0xfff9, 0x7, 0xfffe, 0x4477]}}, {{0x1c, 0x1, {0x0, 0x1d, 0xc, 0x6, 0x2, 0x6, 0x9, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200050e0}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="8000", 0x2, 0x40, &(0x7f0000000780)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @random="e8e458faf802"}, 0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7, 0x2c}, {0x2, 0x8}, {0x9, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x74}, @TCA_RATE={0x6, 0x5, {0xf6, 0x7}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x5, 0x7fffffff}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r7 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x8001, @dev, 0x5}, 0x1c)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560211820fffff5bab4e210200000058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd000000100002000400080004000000224e0000", 0x58}], 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000008c0)="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", 0x5a9}], 0x1}}], 0x2, 0x119e75c40673edef)

22.932155013s ago: executing program 8 (id=4445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xfffff3ee, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)

7.826319875s ago: executing program 37 (id=4445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xfffff3ee, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)

7.703196312s ago: executing program 6 (id=4564):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="000b02000000026544bcdf72c6454549cbf5f77998198192ce8548b7a4d2b7"], 0x0}, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$EVIOCGMASK(r6, 0x5b02, 0x0)

4.556970383s ago: executing program 6 (id=4597):
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000780)='romfs\x00', 0x40802, 0x0)

4.486414951s ago: executing program 6 (id=4599):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4d0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4bc, 0x1, [@m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x3, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x8d9, 0x86, 0x2, 0x6, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x10001, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4d0}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef)

1.593694688s ago: executing program 6 (id=4616):
r0 = socket$kcm(0x10, 0x2, 0x0)
memfd_create(&(0x7f0000000040)='security.selinux\x00\xab', 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d80000001400810d4e81f782db44b9040a11080211000000040000a118000280fec9201114000e1208000f0100810401a80016ea1f000640c9201114c92011148ed08734843cb12b00000803600cfab9c14dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146bffa07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adb", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40804)

1.545664312s ago: executing program 4 (id=4618):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)}, 0x1, 0x0, 0x0, 0x10011}, 0x24002094)

1.535867447s ago: executing program 6 (id=4619):
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x131040d, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f00000004c0), 0x48, 0x820b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000600)={{&(0x7f0000000400)=[{0x4, 0xba7, 0x784ecba0, {0xf, 0x8}, 0x5d, 0x3}, {0xff, 0xb7, 0x1, {0x5, 0x10}, 0x4, 0x6f967142, 0x4}, {0x1, 0x1000, 0x8, {0x5, 0x2}, 0xac4, 0xee44, 0x2}, {0x7, 0x9, 0x8, {0x7, 0x9}, 0x9, 0x5, 0x51}], 0x4, 0x40, 0x1, 0x40}, {&(0x7f0000000500)=[{0x6, 0x1}, {0x1, 0x5}], 0x2, 0x10, 0x9, 0x5}, {&(0x7f0000000540)=[0x4, 0x7ff, 0x1], 0x3, 0x8, 0x7, 0x1fdc}, {&(0x7f0000000580)=[{0xd77, 0x10001, 0xad, 0xfe89, 0x3}], 0x1, 0x28, 0xfffe, 0x8}, {&(0x7f00000005c0)=[0x1, 0x4, 0x2, 0x9], 0x4, 0x8, 0x81, 0x40}})
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x4040, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x4000009, 0x7fffffff, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef)
write(r0, &(0x7f0000000100)="d11c8fa9f21979c7a41a3ad5250b1da96e22f96c197fc220165a67ac7acf5204825eb31dc2f718d56a52e42bd1f94adffd83f8b7423bb65243d984413549e5296e10b7dbc11bd1e72dbe338e0a18e16b8b1e85e412a1931da787a71dcda1dcf4e5923b6bffba517b6f416d4390073532c71fb0aa1ce547af17289a5b2650504b4c55642cb76b7773f75f54e7073385ea5fd13fbd2c1fdd41f78e19ea1972c1938adb4ddd865a0c9088e7141f3d96d0f5fcaca2fb79499aa0863fe4f2b443fed29a00", 0xc2)

1.487335185s ago: executing program 4 (id=4622):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getpeername$unix(r0, 0x0, 0x0)
r1 = fanotify_init(0x1a, 0x800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40000040, @mcast2, 0x8}, 0x1c)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r5, 0xc0186443, &(0x7f0000000200)={0x0, 0x0, {0x30, 0x0, 0x0}})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r1, 0x441, 0x4800001a, r6, 0x0)
fanotify_mark(r1, 0x1, 0x20, r6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
getpeername$unix(r0, 0x0, 0x0) (async)
fanotify_init(0x1a, 0x800) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) (async)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40000040, @mcast2, 0x8}, 0x1c) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) (async)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x8) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r5, 0xc0186443, &(0x7f0000000200)={0x0, 0x0, {0x30, 0x0, 0x0}}) (async)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) (async)
fanotify_mark(r1, 0x441, 0x4800001a, r6, 0x0) (async)
fanotify_mark(r1, 0x1, 0x20, r6, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)

1.235757933s ago: executing program 4 (id=4626):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, 0x0, 0x0)
getsockopt$netlink(r3, 0x10e, 0x9, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa5, 0xe, 0x2, 0x8, 0x1, 0x8001, 0x6, 0x8}}, {0x14, 0x2, [0x2, 0x0, 0x2, 0x9, 0xb, 0x5, 0x3, 0x9]}}, {{0x1c, 0x1, {0xa, 0x4, 0x23f, 0x3, 0x2, 0x7, 0x80c, 0x5}}, {0xe, 0x2, [0x3, 0x8000, 0x3d9, 0xd4b, 0xfffe]}}, {{0x1c, 0x1, {0x36, 0x3, 0x4d77, 0x0, 0x2, 0x3e7, 0x7, 0x6}}, {0x10, 0x2, [0x3, 0x100, 0x800, 0x9, 0x952, 0x401]}}, {{0x1c, 0x1, {0x3, 0xd, 0x81, 0x1, 0x2, 0x50000, 0x2, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x4}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000, 0x2, &(0x7f00001dc000/0x3000)=nil)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x4, 0xfc, 0x2, 0xff, 0x3, 0x1e00}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x2c}}, 0x0)
r13 = dup2(r10, r11)
connect$unix(r13, &(0x7f0000000100)=@abs, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, 0xffffffffffffffff, 0xdaca6000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty}, 0x1c)
madvise(&(0x7f0000366000/0x4000)=nil, 0x4000, 0x9)

1.227425984s ago: executing program 6 (id=4627):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
syz_usb_connect(0x1, 0xd51, &(0x7f0000000740)=ANY=[@ANYRES32=r0], &(0x7f0000001740)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x250, 0x2, 0x79, 0x2, 0x8, 0x40}, 0x13d, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0xc0a}}, {0x87, &(0x7f0000001680)=@string={0x87, 0x3, "86fc052473496bc3afadcec8af85211b6e11d39101bb663fea5e09c71a9a4001d6e42e7a49de3c7b02f0f86b9a251387c05b062c12fc48ca1fa1f9a0d8a0781c2b52721df521fca41129419a1a359ae0d51bd543bd21372be5cdfafc906997c246eec2a9a0191ce500d7f596e03c71f51e6ddc19e43cb37e8481f47abf1293c441b8603f5c"}}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x48)
openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0xd)
r4 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)=ANY=[], 0x38}}, 0x6404481c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00')
socket$inet6_sctp(0xa, 0x1, 0x84)

1.1096552s ago: executing program 9 (id=4629):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x321400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='0', 0x1)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000004c0)={0x1, 0x4, 0xa})
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0xe800000000000000, 0xe000, 0xfffffffffffffffd, 0x0, 0x11})
r4 = socket(0x2b, 0x3, 0x8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a30000000001400028006000100f5020000050002000600000008000500000000002c000480080001001c000001200002800c000100706f8369637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0)
write$char_usb(r3, &(0x7f0000000540)="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", 0xfd)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.061579206s ago: executing program 1 (id=4631):
r0 = socket$kcm(0x10, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
getgroups(0x2, &(0x7f0000000840)=[0xee01, <r1=>0xffffffffffffffff])
setresgid(r1, 0x0, 0x0)
setregid(0x0, 0x0)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$CDROMREADAUDIO(r2, 0x5392, &(0x7f0000000000)={@lba=0xb, 0x1, 0x0, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000683000/0x4000)=nil, 0x4000, 0x1)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap$usbmon(&(0x7f00009a7000/0x4000)=nil, 0x4000, 0x5, 0x100010, r3, 0x9)
sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040)

1.048341306s ago: executing program 4 (id=4632):
r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3f, 0x2, 0x0, 0x0, "ce6012e198d4a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364a614b8e4c12138a77d4bd62ca783"}}, 0x80}, 0x1, 0x0, 0x0, 0x48485}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x4004010)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
r6 = socket(0x2000000000000021, 0x2, 0x2)
shutdown(r6, 0x2)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='[:::/', 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000200)={0x0, 0xa, 0x1})
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff2d7faa67aa4500d1300000fdff00019078ac1e0001ac0014ee978c3b38aa0300907848010000450000000065000000891400ac1414aa000000000000000000"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r8 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000180)={0x11, 0x18, r9, 0x1, 0xb}, 0x14)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x784, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[], 0x2c}}, 0x0)

995.160714ms ago: executing program 9 (id=4633):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x810003, 0x0, 0x8, 0xff7ffff4}, 0x10)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0xd, @raw_data="0910d1cdacb161a34e539b8033ab0200e858d0b8265ff08ca886c0543e7c784619384b22caf782c9ed7ade616a716b9b113fd429f1aa3061dc2e34dc7f22d89f01d17ffa2b04e43b48b129b34ae06be13f0d077c51acdc7db67ad673fb7b3174780e677e1e040247fa10ef1071e8aaff14d69ad27fb3eb30c8cb1436832d0dba161e601b6513d3eae8c2ab233bcbaed962c63f09236ccafe66a084007bf82f9b60a9dbab37bb9754024121e9345f56298ef8488e4ffa56a50f0c091c96d7bf00340a9ead71ea98c8"})
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b00000000000000080009000d000000", 0x24)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x810003, 0x0, 0x8, 0xff7ffff4}, 0x10) (async)
openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0xd, @raw_data="0910d1cdacb161a34e539b8033ab0200e858d0b8265ff08ca886c0543e7c784619384b22caf782c9ed7ade616a716b9b113fd429f1aa3061dc2e34dc7f22d89f01d17ffa2b04e43b48b129b34ae06be13f0d077c51acdc7db67ad673fb7b3174780e677e1e040247fa10ef1071e8aaff14d69ad27fb3eb30c8cb1436832d0dba161e601b6513d3eae8c2ab233bcbaed962c63f09236ccafe66a084007bf82f9b60a9dbab37bb9754024121e9345f56298ef8488e4ffa56a50f0c091c96d7bf00340a9ead71ea98c8"}) (async)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b00000000000000080009000d000000", 0x24) (async)

988.834499ms ago: executing program 9 (id=4634):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x80800)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x9, 0x810004, 0x0, 0xffff7ffffffffffd, 0x800000ffffffff, 0x105, 0xc9, 0x3, 0x7, 0x33, 0x2000000000000807, 0x3, 0x200000003, 0x6, 0x8, 0x40], 0x8000000})
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

863.963994ms ago: executing program 1 (id=4635):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x1, 0x40000004}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
syz_io_uring_setup(0x5739, &(0x7f0000000280)={0x0, 0x1, 0x10100, 0x0, 0x32e}, 0x0, 0x0, &(0x7f0000000000))

863.608544ms ago: executing program 1 (id=4636):
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040))

764.216427ms ago: executing program 1 (id=4637):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4d0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4bc, 0x1, [@m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x3, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x8d9, 0x86, 0x2, 0x6, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x10001, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4d0}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef)

763.807482ms ago: executing program 9 (id=4638):
r0 = socket$inet6(0xa, 0x80002, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c00018006000100020000004bdf26a3ae0101eeceb661d66e1669aef9580d945666171044c6ae11f8bba06b19576265c7eabc326023081b752d0cbdd76f79a86d74c9199da4d5d365645c2b768dcd5fffc2c348e33ef2056363714a80934c9b9f74cd8523e4c9b7cb982788fd51301a0fc617c1d790985f5029d5cf4082d7376adbc5bc15c0ae87dc9e2c37386dc799fd2482"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
close(r3) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async, rerun: 64)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) (async, rerun: 64)
r5 = dup2(r4, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0x0, 0x26, 0x0, 0x0, 0xdc23}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, <r6=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r6, 0x4) (async, rerun: 64)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x29b01, 0x0) (rerun: 64)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) (async, rerun: 64)
ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000040)) (rerun: 64)
writev(r7, &(0x7f0000000740)=[{&(0x7f0000000680)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a25d70e26103e294b7894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}], 0x1)
close(r7)
listen(r4, 0x6f6)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
mlockall(0x7) (async)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x9, 0x1b, 0x5, 0x2, 0x6, 0xfff}) (async)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r9, &(0x7f0000000080), 0x1c)

688.318671ms ago: executing program 9 (id=4639):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)="c1e220d8", 0x4}, 0x1, 0x0, 0x0, 0x10011}, 0x24002094)

411.606206ms ago: executing program 4 (id=4640):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x8070fd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}})

411.084876ms ago: executing program 1 (id=4641):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45e00644091d70c8}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)
unlink(&(0x7f0000000040)='./file0\x00') (async)
unlink(&(0x7f0000000040)='./file0\x00')
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r5, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r5, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2e9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xa0}}, 0x200000c0)

410.754712ms ago: executing program 9 (id=4642):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
close_range(r5, 0xffffffffffffffff, 0x0) (async)
ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000000))

1.535036ms ago: executing program 4 (id=4643):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_hv_synic_set_msr/enable\x00', 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='usbip-vudc.0', 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2004}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

0s ago: executing program 1 (id=4644):
syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1b, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)

kernel console output (not intermixed with test programs):

8116] veth1_macvtap: entered promiscuous mode
[  369.055466][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.057959][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.060285][T14236] usb 9-1: device descriptor read/64, error -71
[  369.060609][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.065536][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.067957][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.070470][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.074135][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.076532][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.078955][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.081520][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.084061][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.086435][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.088857][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.091479][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.092184][T18116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.093984][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.098704][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.101255][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.103651][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.106084][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.108499][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.111267][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.113764][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.116754][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.119155][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.122123][T18116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.123441][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.127570][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.130103][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.132616][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.134996][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.137362][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.139875][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.144035][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.146424][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  369.293557][ T8464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.297924][ T8464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.315501][T14906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.318352][T14906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.321024][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.332149][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.339604][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.345703][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.360188][T14236] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  369.400092][ T5745] usb 11-1: new high-speed USB device number 27 using dummy_hcd
[  369.512467][T14236] usb 9-1: device descriptor read/64, error -71
[  369.538720][T18301] __nla_validate_parse: 2 callbacks suppressed
[  369.538734][T18301] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3964'.
[  369.550018][ T5745] usb 11-1: Using ep0 maxpacket: 8
[  369.557188][ T5745] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  369.564920][ T5745] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  369.568147][ T5745] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  369.571645][ T5745] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  369.579804][ T5745] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  369.586409][ T5745] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.623160][T14236] usb usb9-port1: attempt power cycle
[  369.798183][ T5745] usb 11-1: GET_CAPABILITIES returned 0
[  369.803749][ T5745] usbtmc 11-1:16.0: can't read capabilities
[  369.951739][T18322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3971'.
[  369.960299][T14236] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  369.978724][   T42] audit: type=1400 audit(1786169317.441:1375): avc:  denied  { setopt } for  pid=18323 comm="syz.1.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  369.991021][   T42] audit: type=1400 audit(1786169317.461:1376): avc:  denied  { create } for  pid=18323 comm="syz.1.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  369.998085][   T42] audit: type=1400 audit(1786169317.461:1377): avc:  denied  { read } for  pid=18323 comm="syz.1.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  370.000477][ T5094] Bluetooth: hci0: command tx timeout
[  370.006003][T14236] usb 9-1: device descriptor read/8, error -71
[  370.019508][ T5745] usb 11-1: USB disconnect, device number 27
[  370.043057][   T42] audit: type=1400 audit(1786169317.511:1378): avc:  denied  { write } for  pid=18323 comm="syz.1.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  370.058670][   T42] audit: type=1800 audit(1786169317.521:1379): pid=18326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3973" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  370.062605][T18326] batman_adv: batadv0: Adding interface: dummy0
[  370.068157][T18326] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.078236][T18326] batman_adv: batadv0: Interface activated: dummy0
[  370.138551][T18329] fuse: Bad value for 'fd'
[  370.168636][T18332] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3975'.
[  370.270136][T14236] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  370.290417][T14236] usb 9-1: device descriptor read/8, error -71
[  370.383944][T18350] overlayfs: failed to resolve './file0': -2
[  370.410678][T14236] usb usb9-port1: unable to enumerate USB device
[  370.559526][T18358] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  370.561183][T18360] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3982'.
[  370.586986][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3982'.
[  370.645048][T18369] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3987'.
[  370.651514][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3986'.
[  370.655999][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3986'.
[  370.784119][T14236] IPVS: starting estimator thread 0...
[  370.880127][T18386] IPVS: using max 45 ests per chain, 108000 per kthread
[  371.180283][ T5745] usb 11-1: new high-speed USB device number 28 using dummy_hcd
[  371.340102][ T5745] usb 11-1: Using ep0 maxpacket: 8
[  371.344344][ T5745] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  371.348362][ T5745] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  371.353232][ T5745] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  371.357316][ T5745] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.363467][ T5745] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  371.367591][ T5745] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.470708][T18399] fuse: fd is not a fuse device
[  371.575227][ T5745] usb 11-1: GET_CAPABILITIES returned 0
[  371.577161][ T5745] usbtmc 11-1:16.0: can't read capabilities
[  371.657300][T18403] tmpfs: Bad value for 'mpol'
[  371.750143][T18411] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4003'.
[  371.775944][T18397] FAULT_INJECTION: forcing a failure.
[  371.775944][T18397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.780445][T18397] CPU: 0 UID: 0 PID: 18397 Comm: syz.6.3996 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  371.780465][T18397] Tainted: [L]=SOFTLOCKUP
[  371.780469][T18397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  371.780476][T18397] Call Trace:
[  371.780481][T18397]  <TASK>
[  371.780486][T18397]  dump_stack_lvl+0x100/0x190
[  371.780506][T18397]  should_fail_ex.cold+0x5/0xa
[  371.780521][T18397]  _copy_to_user+0x32/0xd0
[  371.780540][T18397]  simple_read_from_buffer+0xcb/0x170
[  371.780553][T18397]  proc_fail_nth_read+0x1af/0x230
[  371.780571][T18397]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  371.780588][T18397]  ? rw_verify_area+0xce/0x6d0
[  371.780605][T18397]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  371.780621][T18397]  vfs_read+0x1e4/0xb40
[  371.780638][T18397]  ? __pfx_vfs_read+0x10/0x10
[  371.780654][T18397]  ? __fget_files+0x215/0x3d0
[  371.780668][T18397]  ? __fget_files+0x21f/0x3d0
[  371.780682][T18397]  ksys_read+0x12a/0x250
[  371.780698][T18397]  ? __pfx_ksys_read+0x10/0x10
[  371.780718][T18397]  do_syscall_64+0x115/0x870
[  371.780731][T18397]  ? clear_bhb_loop+0x40/0x90
[  371.780745][T18397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.780756][T18397] RIP: 0033:0x7f8a4155e84e
[  371.780766][T18397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  371.780777][T18397] RSP: 002b:00007f8a42478fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  371.780788][T18397] RAX: ffffffffffffffda RBX: 00007f8a424796c0 RCX: 00007f8a4155e84e
[  371.780795][T18397] RDX: 000000000000000f RSI: 00007f8a424790a0 RDI: 0000000000000005
[  371.780801][T18397] RBP: 00007f8a42479090 R08: 0000000000000000 R09: 0000000000000000
[  371.780807][T18397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.780814][T18397] R13: 00007f8a41826038 R14: 00007f8a41825fa0 R15: 00007ffd71269ac8
[  371.780828][T18397]  </TASK>
[  371.788261][ T5745] usb 11-1: USB disconnect, device number 28
[  371.820346][T14188] net_ratelimit: 52 callbacks suppressed
[  371.820363][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  371.904665][T18418] 0: reclassify loop, rule prio 0, protocol 03
[  371.960114][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  372.070636][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  372.070881][ T5094] Bluetooth: hci0: command tx timeout
[  372.180142][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  372.290028][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  372.310009][ T5828] usb 11-1: new high-speed USB device number 29 using dummy_hcd
[  372.400375][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  372.479119][ T5828] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.491749][ T5828] usb 11-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[  372.495369][ T5828] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.500793][ T5828] usb 11-1: Product: syz
[  372.502254][ T5828] usb 11-1: Manufacturer: syz
[  372.510111][ T5828] usb 11-1: SerialNumber: syz
[  372.510359][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  372.514755][ T5828] symbolserial 11-1:1.0: symbol converter detected
[  372.527603][ T5828] usb 11-1: symbol converter now attached to ttyUSB0
[  372.540148][ T5821] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  372.620095][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  372.690523][ T5821] usb 9-1: Using ep0 maxpacket: 8
[  372.693387][ T5821] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  372.696534][ T5821] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  372.699661][ T5821] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  372.704427][ T5821] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  372.708583][ T5821] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  372.712446][ T5821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.730223][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  372.794050][ T5828] usb 11-1: USB disconnect, device number 29
[  372.814227][ T5828] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  372.817835][T18457] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4020'.
[  372.823824][ T5828] symbolserial 11-1:1.0: device disconnected
[  372.919787][ T5821] usb 9-1: GET_CAPABILITIES returned 0
[  372.921803][ T5821] usbtmc 9-1:16.0: can't read capabilities
[  373.121991][ T5503] usb 9-1: USB disconnect, device number 36
[  373.153689][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.283882][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  373.294934][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  373.298514][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  373.304154][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  373.329166][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  373.337488][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.509469][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.623231][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.813365][T18500] F2FS-fs: Conflicting test_dummy_encryption options
[  373.958537][T18478] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.961739][T18478] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.964595][T18478] bridge_slave_0: entered allmulticast mode
[  373.969358][T18478] bridge_slave_0: entered promiscuous mode
[  373.998686][T18478] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.001797][T18478] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.003995][T18478] bridge_slave_1: entered allmulticast mode
[  374.008191][T18478] bridge_slave_1: entered promiscuous mode
[  374.020930][   T13] bridge_slave_1: left allmulticast mode
[  374.022743][   T13] bridge_slave_1: left promiscuous mode
[  374.026920][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.037266][   T13] bridge_slave_0: left allmulticast mode
[  374.039106][   T13] bridge_slave_0: left promiscuous mode
[  374.041148][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.141946][T18519] loop4: detected capacity change from 0 to 2640
[  374.148705][T18519] buffer_io_error: 6 callbacks suppressed
[  374.148722][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.166672][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.172464][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.175932][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.182251][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.185158][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.188150][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.193268][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.199554][T18519] ldm_validate_partition_table(): Disk read failed.
[  374.203601][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.206916][T18519] Buffer I/O error on dev loop4, logical block 0, async page read
[  374.210235][T18519] Dev loop4: unable to read RDB block 0
[  374.212526][T18519]  loop4: unable to read partition table
[  374.215035][T18519] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  374.251278][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  374.282783][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.314101][   T13] bond0 (unregistering): Released all slaves
[  374.336828][T18478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.344234][T18478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.349998][   T24] usb 11-1: new high-speed USB device number 30 using dummy_hcd
[  374.368682][T18478] team0: Port device team_slave_0 added
[  374.373347][T18478] team0: Port device team_slave_1 added
[  374.386543][T18478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.388907][T18478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  374.398172][T18478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  374.409593][T18478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  374.414198][T18478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  374.424678][T18478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  374.458295][T18478] hsr_slave_0: entered promiscuous mode
[  374.460696][T18478] hsr_slave_1: entered promiscuous mode
[  374.463097][T18478] debugfs: 'hsr0' already exists in 'hsr'
[  374.465333][T18478] Cannot create hsr debugfs directory
[  374.500148][   T24] usb 11-1: Using ep0 maxpacket: 8
[  374.503880][   T24] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  374.507509][   T24] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  374.512011][   T24] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  374.516564][   T24] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  374.521706][   T24] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  374.525484][   T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.738342][   T24] usb 11-1: GET_CAPABILITIES returned 0
[  374.742129][   T24] usbtmc 11-1:16.0: can't read capabilities
[  374.827386][T18551] __nla_validate_parse: 1 callbacks suppressed
[  374.827404][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4046'.
[  374.930947][T18551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4046'.
[  374.941212][   T13] hsr_slave_0: left promiscuous mode
[  374.944460][   T24] usb 11-1: USB disconnect, device number 30
[  374.953429][   T13] hsr_slave_1: left promiscuous mode
[  374.960189][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.978416][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.983605][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.001459][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  375.005235][   T13] batman_adv: batadv0: Interface deactivated: dummy0
[  375.007451][   T13] batman_adv: batadv0: Removing interface: dummy0
[  375.016580][   T13] veth1_macvtap: left promiscuous mode
[  375.018623][   T13] veth0_macvtap: left promiscuous mode
[  375.021371][   T13] veth1_vlan: left promiscuous mode
[  375.023490][   T13] veth0_vlan: left promiscuous mode
[  375.209067][   T13] team0 (unregistering): Port device team_slave_1 removed
[  375.222975][   T13] team0 (unregistering): Port device team_slave_0 removed
[  375.419803][T18561] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4048'.
[  375.443935][ T5094] Bluetooth: hci0: command tx timeout
[  375.530073][T18478] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  375.559113][T18478] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.563565][T18478] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  375.569749][T18568] loop4: detected capacity change from 0 to 2640
[  375.573390][T18568] ldm_validate_partition_table(): Disk read failed.
[  375.578326][T18478] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.581109][T18568] Dev loop4: unable to read RDB block 0
[  375.583453][T18478] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  375.583919][T18568]  loop4: unable to read partition table
[  375.588069][T18568] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  375.609712][T18478] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  375.615759][T18478] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  375.626547][ T5144] ldm_validate_partition_table(): Disk read failed.
[  375.628752][ T5144] Dev loop4: unable to read RDB block 0
[  375.632679][ T5144]  loop4: unable to read partition table
[  375.636169][T18478] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  375.639681][T18575] overlayfs: failed to resolve './file1/file0': -2
[  375.664434][ T5144] ldm_validate_partition_table(): Disk read failed.
[  375.681580][ T5144] Dev loop4: unable to read RDB block 0
[  375.683487][ T5144]  loop4: unable to read partition table
[  375.761228][T18568] netlink: 'syz.6.4050': attribute type 1 has an invalid length.
[  375.763885][T18568] netlink: 31940 bytes leftover after parsing attributes in process `syz.6.4050'.
[  375.799693][T18478] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.809142][T18478] 8021q: adding VLAN 0 to HW filter on device team0
[  375.816114][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.818727][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.833244][ T5144] ldm_validate_partition_table(): Disk read failed.
[  375.834933][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.835385][ T5144] Dev loop4: unable to read RDB block 0
[  375.837575][ T8457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.839381][ T5144]  loop4: unable to read partition table
[  375.852203][T18595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4056'.
[  375.977683][T18603] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4059'.
[  376.085364][T18610] tipc: Started in network mode
[  376.087025][T18610] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711
[  376.090650][T18610] tipc: Enabled bearer <udp:syz0>, priority 10
[  376.128361][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'.
[  376.160049][T14236] usb 11-1: new high-speed USB device number 31 using dummy_hcd
[  376.167446][T18617] hsr_slave_1 (unregistering): left promiscuous mode
[  376.289166][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4064'.
[  376.293622][T18624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4064'.
[  376.318020][T18478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.321925][T14236] usb 11-1: Using ep0 maxpacket: 8
[  376.329411][T14236] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  376.334714][T14236] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  376.337983][T14236] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  376.344003][T14236] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  376.351259][T14236] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  376.360487][T14236] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  376.365145][T14236] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.377412][T18636] loop4: detected capacity change from 0 to 2640
[  376.390336][T18636] ldm_validate_partition_table(): Disk read failed.
[  376.395546][T18636] Dev loop4: unable to read RDB block 0
[  376.397407][T18636]  loop4: unable to read partition table
[  376.410053][T18636] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  376.522934][T18642] netlink: 'syz.4.4067': attribute type 1 has an invalid length.
[  376.529716][T18644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4068'.
[  376.571382][T18478] veth0_vlan: entered promiscuous mode
[  376.581059][T14236] usb 11-1: usb_control_msg returned -32
[  376.583595][T14236] usbtmc 11-1:16.0: can't read capabilities
[  376.589400][T18642] bond1: (slave gretap1): making interface the new active one
[  376.599699][T18642] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  376.624484][T18478] veth1_vlan: entered promiscuous mode
[  376.677521][ T5094] Bluetooth: hci5: Malformed LE Event: 0x0d
[  376.683591][T18649] file system registered
[  376.699800][   T42] audit: type=1400 audit(1786169324.161:1380): avc:  denied  { mount } for  pid=18648 comm="syz.4.4070" name="/" dev="functionfs" ino=88640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1
[  376.706478][T18649] read descriptors
[  376.714382][T18649] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility.
[  376.742118][T18649] ufs: You didn't specify the type of your ufs filesystem
[  376.742118][T18649] 
[  376.742118][T18649] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  376.742118][T18649] 
[  376.742118][T18649] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  376.818645][T18478] veth0_macvtap: entered promiscuous mode
[  376.823831][T18478] veth1_macvtap: entered promiscuous mode
[  376.835259][T18478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.849603][T18478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.872073][   T42] audit: type=1400 audit(1786169324.341:1381): avc:  denied  { unmount } for  pid=16346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1
[  376.891394][T16346] ffs_data_put(): freeing
[  377.054182][ T9266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.056761][ T9266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.076271][ T9604] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.098047][T14236] tipc: Node number set to 4269801502
[  377.105278][T14906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.109385][T14906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.114035][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.127826][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.160642][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.187511][   T12] net_ratelimit: 59 callbacks suppressed
[  377.187525][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  377.209739][T18681] 8021q: adding VLAN 0 to HW filter on device bond6
[  377.225254][T18681] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  377.300065][T18687] fuse: Unknown parameter 'ft'
[  377.300332][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  377.337721][T18691] 0: reclassify loop, rule prio 0, protocol 03
[  377.420260][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  377.510281][ T5094] Bluetooth: hci0: command tx timeout
[  377.530375][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  377.640737][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  377.764285][T18726] syzkaller0: entered promiscuous mode
[  377.766071][T18726] syzkaller0: entered allmulticast mode
[  377.770268][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  377.900306][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  377.928157][T18744] 0: reclassify loop, rule prio 0, protocol 03
[  378.010537][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  378.858918][   T42] audit: type=1800 audit(1786169326.321:1382): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4114" name="use" dev="configfs" ino=89488 res=0 errno=0
[  378.926954][   T24] usb 11-1: USB disconnect, device number 31
[  379.105994][T18815] hpfs: hpfs_map_sector(): read error
[  379.198616][T18821] sctp: [Deprecated]: syz.6.4122 (pid 18821) Use of struct sctp_assoc_value in delayed_ack socket option.
[  379.198616][T18821] Use struct sctp_sack_info instead
[  379.297781][T18832] syzkaller0: entered promiscuous mode
[  379.299603][T18832] syzkaller0: entered allmulticast mode
[  379.306012][T18832] netlink: 'syz.6.4127': attribute type 5 has an invalid length.
[  379.308793][   T42] audit: type=1400 audit(1786169326.771:1383): avc:  denied  { getopt } for  pid=18833 comm="syz.4.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  379.425176][T18842] Bluetooth: MGMT ver 1.23
[  379.565977][   T42] audit: type=1400 audit(1786169327.031:1384): avc:  denied  { execute } for  pid=18862 comm="syz.4.4138" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  379.590092][ T5094] Bluetooth: hci0: command tx timeout
[  379.890737][T18883] __nla_validate_parse: 17 callbacks suppressed
[  379.890769][T18883] netlink: 232 bytes leftover after parsing attributes in process `syz.7.4145'.
[  379.896243][T18881] 9pnet_virtio: no channels available for device syz
[  379.996444][T18885] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4146'.
[  380.006255][T18889] input: syz0 as /devices/virtual/input/input26
[  380.116203][T18898] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4151'.
[  380.270944][   T24] usb 12-1: new full-speed USB device number 2 using dummy_hcd
[  380.433888][   T24] usb 12-1: config 0 has an invalid interface number: 8 but max is 0
[  380.438955][   T24] usb 12-1: config 0 has no interface number 0
[  380.443923][   T24] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  380.454021][   T24] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  380.463592][   T24] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  380.472958][   T24] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  380.480061][   T24] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  380.487509][   T24] usb 12-1: Product: syz
[  380.489545][   T24] usb 12-1: SerialNumber: syz
[  380.496715][   T24] usb 12-1: config 0 descriptor??
[  380.501599][   T24] cm109 12-1:0.8: invalid payload size 0, expected 4
[  380.505017][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input27
[  380.614225][T18917] xt_TPROXY: Can be used only with -p tcp or -p udp
[  380.707020][T18928] loop4: detected capacity change from 0 to 2640
[  380.708603][T18889] Invalid source name
[  380.709718][T18928] buffer_io_error: 86 callbacks suppressed
[  380.709729][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.720396][T18889] UBIFS error (pid: 18889): cannot open "/dev/sg0", error -22
[  380.725330][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.743845][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.750408][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.759155][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.763809][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.768354][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.778399][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.785265][T18928] ldm_validate_partition_table(): Disk read failed.
[  380.788834][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.789082][T18889] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4148'.
[  380.793720][T18928] Buffer I/O error on dev loop4, logical block 0, async page read
[  380.799301][T18928] Dev loop4: unable to read RDB block 0
[  380.802060][T18928]  loop4: unable to read partition table
[  380.804668][    C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.804871][ T1044] usb 12-1: USB disconnect, device number 2
[  380.807325][    C2] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  380.813145][T18928] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  380.826714][ T1044] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  380.947211][T18939] comedi comedi3: dt2817: a I/O base address must be specified
[  380.976893][T18939] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  380.988842][T18947] netlink: 'syz.1.4166': attribute type 3 has an invalid length.
[  380.991600][T18947] netlink: 'syz.1.4166': attribute type 1 has an invalid length.
[  381.085836][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.088568][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.091239][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.091696][T18956] netlink: 'syz.1.4168': attribute type 1 has an invalid length.
[  381.093721][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.099094][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.102176][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.108815][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.111521][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.114039][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.116489][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.118843][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.121346][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.123695][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.126033][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.128361][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.130884][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.132068][T18956] 8021q: adding VLAN 0 to HW filter on device bond7
[  381.133229][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.138375][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.140971][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.143426][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.145931][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.148362][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.150971][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.153594][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.156042][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.158496][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.161070][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.164140][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.166543][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.168935][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.171441][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.173851][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.176251][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.178652][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.181249][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.183673][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.186053][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.188482][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.192137][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.194657][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.197045][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.199459][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.201999][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.204455][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.206889][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.209258][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.211767][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.214172][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.216474][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.218898][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.221371][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.223787][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.227234][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.229756][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.232177][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.235072][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.237431][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.239747][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.242318][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.244754][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.247148][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.249608][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.252078][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.254399][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.257042][ T5094] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  381.680087][ T5094] Bluetooth: hci0: command tx timeout
[  381.934942][T19015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4183'.
[  381.999153][T19012] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  382.170974][T19029] blktrace: Concurrent blktraces are not allowed on loop4
[  382.191444][   T42] audit: type=1400 audit(1786169329.651:1385): avc:  denied  { unmount } for  pid=18478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  382.270158][ T5821] usb 11-1: new high-speed USB device number 32 using dummy_hcd
[  382.270312][ T5814] net_ratelimit: 39 callbacks suppressed
[  382.270326][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  382.380040][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  382.491266][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  382.516273][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4189'.
[  382.520374][   T42] audit: type=1800 audit(1786169329.991:1386): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4189" name="p_volume_present" dev="configfs" ino=91166 res=0 errno=0
[  382.564994][T19041] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0
[  382.600137][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  382.615004][T19048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4193'.
[  382.618242][T19048] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4193'.
[  382.710640][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  382.774461][ T5842] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.803047][T19058] loop4: detected capacity change from 0 to 2640
[  382.806143][T19058] ldm_validate_partition_table(): Disk read failed.
[  382.808242][T19058] Dev loop4: unable to read RDB block 0
[  382.810815][T19058]  loop4: unable to read partition table
[  382.812715][T19058] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  382.820298][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  382.870970][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.885440][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.890934][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.920669][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.927863][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.931710][ T5842] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.972156][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  383.007408][T19081] xt_connbytes: Forcing CT accounting to be enabled
[  383.009647][T19081] xt_CT: You must specify a L4 protocol and not use inversions on it
[  383.014692][T19076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4203'.
[  383.094693][ T5842] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.127142][ T5814] bond5: (slave bridge4): failed to get link speed/duplex
[  383.241708][T19100] random: crng reseeded on system resumption
[  383.259476][ T5842] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.290211][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  383.450257][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  383.495739][ T5842] bridge_slave_1: left allmulticast mode
[  383.497595][ T5842] bridge_slave_1: left promiscuous mode
[  383.499545][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.504082][ T5842] bridge_slave_0: left allmulticast mode
[  383.506637][ T5842] bridge_slave_0: left promiscuous mode
[  383.509737][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.654436][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.689511][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  383.722526][ T5842] bond0 (unregistering): Released all slaves
[  383.762737][T19060] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.765317][T19060] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.767800][T19060] bridge_slave_0: entered allmulticast mode
[  383.771304][T19060] bridge_slave_0: entered promiscuous mode
[  383.784680][T19060] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.789636][T19060] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.802596][T19060] bridge_slave_1: entered allmulticast mode
[  383.807601][T19060] bridge_slave_1: entered promiscuous mode
[  383.837584][T19060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.844805][T19060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.870951][T19060] team0: Port device team_slave_0 added
[  383.924229][T19060] team0: Port device team_slave_1 added
[  383.948255][T19060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.951222][T19060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.961530][T19060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.967849][T19060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.970847][T19060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.981883][T19060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.208470][T19060] hsr_slave_0: entered promiscuous mode
[  384.214372][T19060] hsr_slave_1: entered promiscuous mode
[  384.254646][T19143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4218'.
[  384.272393][T19143] netlink: 'syz.1.4218': attribute type 10 has an invalid length.
[  384.279061][ T5842] hsr_slave_0: left promiscuous mode
[  384.286366][ T5842] hsr_slave_1: left promiscuous mode
[  384.288551][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.290895][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.297907][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.302018][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.313300][ T5842] veth1_macvtap: left promiscuous mode
[  384.315128][ T5842] veth0_macvtap: left promiscuous mode
[  384.317712][ T5842] veth1_vlan: left promiscuous mode
[  384.319864][ T5842] veth0_vlan: left promiscuous mode
[  384.549174][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  384.560327][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  384.697433][T19143] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.701046][T19143] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.724243][T19143] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.727329][T19143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.730658][T19143] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.733663][T19143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.748183][T19143] bridge0: entered promiscuous mode
[  384.752119][T19143] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  384.792939][T19149] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:5095:21ff:feba:4120 error=-28
[  384.964966][T19131] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  384.967025][T19131] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  385.052353][ T5094] Bluetooth: hci0: command tx timeout
[  385.094636][T19131] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  385.109977][T19131] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  385.169237][T19131] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  385.192011][T19060] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  385.199248][T19131] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  385.202137][T19060] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  385.202197][T19131] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  385.206221][T19060] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  385.214365][T19060] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  385.217517][T19060] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  385.219690][T19131] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  385.224722][T19149] infiniband syz1: set active
[  385.225529][T19060] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  385.232882][T19149] infiniband syz1: added bridge_slave_1
[  385.236881][T19060] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  385.247488][T19060] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  385.289987][T19149] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  385.303634][T19149] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  385.313853][T19149] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  385.330301][T19187] IPv6: Can't replace route, no match found
[  385.332657][T19060] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.347170][T19060] 8021q: adding VLAN 0 to HW filter on device team0
[  385.354395][T19149] RDS/IB: syz1: added
[  385.355756][T19149] smc: adding ib device syz1 with port count 1
[  385.359437][T19149] smc:    ib device syz1 port 1 has no pnetid
[  385.371308][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.373820][ T8468] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.391203][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.393500][ T8468] bridge0: port 2(bridge_slave_1) entered forwarding state
ÐÓã2[  385.543171][   T42] audit: type=1400 audit(1786693620.992:1387): avc:  denied  { ioctl } for  pid=19195 comm="syz.6.4226" path="/417/file0/file0" dev="fuse" ino=67 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  385.569061][T19200] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4227'.
[  385.944643][T19060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.106858][T19060] veth0_vlan: entered promiscuous mode
[  386.115274][T19060] veth1_vlan: entered promiscuous mode
[  386.136621][T19060] veth0_macvtap: entered promiscuous mode
[  386.145534][T19060] veth1_macvtap: entered promiscuous mode
[  386.157818][T19060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.166283][T19060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.241139][ T5786] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.252892][ T5786] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.303043][ T8453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.306143][ T8453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.331578][ T5094] Bluetooth: hci5: command 0x0406 tx timeout
[  386.348058][ T8453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.356924][ T8453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.422525][ T5786] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.425532][ T5786] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.536390][T19226] xt_hashlimit: size too large, truncated to 1048576
[  386.676978][T19236] 9pnet_virtio: no channels available for device syz
[  386.783291][T19247] netlink: 'syz.8.4236': attribute type 5 has an invalid length.
[  386.786593][T19247] netlink: 232 bytes leftover after parsing attributes in process `syz.8.4236'.
[  386.808012][T19249] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000003'
[  386.880306][T19256] [U] 
[  386.893105][T19245] nbd4: detected capacity change from 0 to 63
[  386.897777][T19251] block nbd4: NBD_DISCONNECT
[  386.899578][T19251] block nbd4: Disconnected due to user request.
[  386.940423][T19251] block nbd4: shutting down sockets
[  386.982145][T19261] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  386.986073][   T42] audit: type=1400 audit(1786693622.421:1388): avc:  denied  { mounton } for  pid=19260 comm="syz.4.4240" path="/237/debug/tracing/trace_pipe" dev="tracefs" ino=4478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  387.138455][ T5094] Bluetooth: hci3: command 0x0c1a tx timeout
[  387.218254][ T5094] Bluetooth: hci0: command 0x040f tx timeout
[  387.272243][   T42] audit: type=1400 audit(1786693622.709:1389): avc:  denied  { write } for  pid=19272 comm="syz.8.4243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  387.315558][T19275] xt_policy: neither incoming nor outgoing policy selected
[  387.319572][ T5786] net_ratelimit: 19 callbacks suppressed
[  387.319586][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  387.404735][T19282] openvswitch: netlink: IP tunnel dst address not specified
[  387.429868][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  387.520464][   T10] usb 13-1: new full-speed USB device number 2 using dummy_hcd
[  387.543210][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  387.671773][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  387.693403][   T10] usb 13-1: config index 0 descriptor too short (expected 28277, got 36)
[  387.696290][   T10] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  387.703573][   T10] usb 13-1: config 0 has no interfaces?
[  387.705364][   T10] usb 13-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  387.714227][   T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.721138][   T10] usb 13-1: config 0 descriptor??
[  387.740105][T19289] loop5: detected capacity change from 0 to 7
[  387.743290][T19289] Dev loop5: unable to read RDB block 7
[  387.745761][T19289]  loop5: AHDI p2
[  387.747338][T19289] loop5: partition table partially beyond EOD, truncated
[  387.777950][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'.
[  387.792920][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  387.869583][   T42] audit: type=1400 audit(1786693623.295:1390): avc:  denied  { watch } for  pid=19296 comm="syz.4.4249" path="/proc/612/fdinfo" dev="proc" ino=92838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  387.903422][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  387.930578][T19302] 0: reclassify loop, rule prio 0, protocol 03
[  387.935318][   T10] usb 13-1: USB disconnect, device number 2
[  388.014050][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  388.125205][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  388.129449][T19311] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  388.149431][ T5094] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  388.154195][T19313] overlayfs: failed to resolve './file1': -2
[  388.218186][T19320] netlink: 'syz.1.4256': attribute type 10 has an invalid length.
[  388.224314][T19320] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4256'.
[  388.305006][   T42] audit: type=1400 audit(1786693623.731:1391): avc:  denied  { connect } for  pid=19327 comm="syz.6.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  388.439050][ T5094] Bluetooth: hci5: command 0x0406 tx timeout
[  388.506387][T19346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4266'.
[  388.580732][T19351] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4268'.
[  388.675431][   T42] audit: type=1400 audit(1786693624.099:1392): avc:  denied  { read } for  pid=19357 comm="syz.1.4271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  389.243004][ T5094] Bluetooth: hci3: command 0x0c1a tx timeout
[  389.313940][ T5094] Bluetooth: hci0: command 0x040f tx timeout
[  389.319413][T19342] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  389.321796][T19342] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  389.324221][T19342] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  389.387182][ T5094] Bluetooth: hci0: unexpected event for opcode 0x2041
[  389.433302][T19369] udc dummy_udc.0: failed to start g1: -19
[  389.441402][T19369] UDC core: g1: couldn't find an available UDC or it's busy
[  389.556321][   T42] audit: type=1326 audit(1786693624.982:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19381 comm="syz.6.4279" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a4159e019 code=0x0
[  390.236057][T19424] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  390.254758][T19421] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  390.257539][T19421] overlayfs: missing 'lowerdir'
[  390.262971][T19424] overlayfs: missing 'lowerdir'
[  390.268698][T19421] fuse: Unknown parameter 'f`'
[  390.384447][   T42] audit: type=1326 audit(1786693625.796:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.1.4287" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e879e019 code=0x0
[  390.403839][T19441] netlink: 232 bytes leftover after parsing attributes in process `syz.8.4289'.
[  390.567296][   T42] audit: type=1800 audit(1786693625.965:1395): pid=19448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4291" name="file1" dev="overlay" ino=2307 res=0 errno=0
[  390.587441][T19438] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  390.590167][   T42] audit: type=1400 audit(1786693625.985:1396): avc:  denied  { read } for  pid=19447 comm="syz.6.4291" path="socket:[93533]" dev="sockfs" ino=93533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  390.685205][ T5094] Bluetooth: hci5: command 0x0406 tx timeout
[  390.719006][T19438] 8021q: adding VLAN 0 to HW filter on device bond1
[  390.722556][T19461] MTRR 0 not used
[  390.736392][T19438] 8021q: adding VLAN 0 to HW filter on device hsr1
[  390.856471][T19470] [U] 
[  390.857461][T19470] [U] 
[  390.858577][T19470] [U] 
[  390.859662][T19470] [U] 
[  390.861258][T19470] [U] 
[  390.862312][T19470] [U] 
[  390.863387][T19470] [U] 
[  390.864287][T19470] [U] 
[  390.871053][T19470] [U] 
[  390.872041][T19470] [U] 
[  390.873094][T19470] [U] 
[  390.874158][T19470] [U] 
[  390.884958][T19470] [U] 
[  390.885891][T19470] [U] 
[  390.886767][T19470] [U] 
[  390.887738][T19470] [U] 
[  390.934660][T19469] [U] 
[  390.987785][T19486] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4297'.
[  391.355571][T19503] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  391.408668][ T5094] Bluetooth: hci3: command 0x0c1a tx timeout
[  391.599140][T19508] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  392.395202][ T9604] net_ratelimit: 36 callbacks suppressed
[  392.395218][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  392.418739][T19583] input: syz0 as /devices/virtual/input/input29
[  392.493034][T19592] tipc: Started in network mode
[  392.494677][T19592] tipc: Node identity e61af35622b1, cluster identity 4711
[  392.497497][T19592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.500989][T19592] syzkaller0: MTU too low for tipc bearer
[  392.502937][T19592] tipc: Disabling bearer <eth:syzkaller0>
[  392.505963][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  392.509047][T19222] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  392.514484][T19222] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  392.527237][T19222] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  392.530380][T19222] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  392.532784][T19222] rtc rtc0: __rtc_set_alarm: err=-22
[  392.535722][   T42] audit: type=1400 audit(1786693627.931:1397): avc:  denied  { override_creds } for  pid=19596 comm="syz.8.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  392.619346][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  392.727669][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  392.817237][T19615] 0: reclassify loop, rule prio 0, protocol 03
[  392.838177][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  392.863166][T19620] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4328'.
[  392.956713][T19622] Bluetooth: MGMT ver 1.23
[  392.959186][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  393.010608][T19622] kvm: kvm [19621]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000019) = 0x1
[  393.070087][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  393.089578][T19631] netlink: 'syz.4.4332': attribute type 1 has an invalid length.
[  393.151578][T19631] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  393.177309][T19635] tipc: Started in network mode
[  393.179521][T19635] tipc: Node identity aa7184701e29, cluster identity 4711
[  393.182894][T19635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.188174][T19635] syzkaller0: MTU too low for tipc bearer
[  393.192671][T19635] tipc: Disabling bearer <eth:syzkaller0>
[  393.208044][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4332'.
[  393.214293][T19631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4332'.
[  393.220922][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  393.269667][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4335'.
[  393.339966][T19650] netlink: 'syz.1.4336': attribute type 2 has an invalid length.
[  393.374978][T19650] : entered promiscuous mode
[  393.392475][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  393.573755][   T42] audit: type=1400 audit(1786693628.964:1398): avc:  denied  { unmount } for  pid=16346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  393.852548][T19720] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4352'.
[  393.852972][T19716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4350'.
[  393.912860][T19722] 9pnet_virtio: no channels available for device syz
[  393.931553][T19722] CIFS: iocharset name too long
[  393.954319][T19722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=338 sclass=netlink_route_socket pid=19722 comm=syz.4.4353
[  393.999462][T19725] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  394.005458][T19725] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  394.093865][T19733] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4358'.
[  394.236849][T19741] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4361'.
[  394.487590][T19753] overlayfs: failed to resolve './file1': -2
[  394.507531][   T42] audit: type=1400 audit(1786693629.888:1399): avc:  denied  { map } for  pid=19754 comm="syz.6.4366" path="/proc/1177/oom_score_adj" dev="proc" ino=93958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  394.527065][   T42] audit: type=1400 audit(1786693629.888:1400): avc:  denied  { execute } for  pid=19754 comm="syz.6.4366" path="/proc/1177/oom_score_adj" dev="proc" ino=93958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  394.649279][T19770] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  394.707108][T19774] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4372'.
[  394.990238][   T42] audit: type=1400 audit(1786693630.365:1401): avc:  denied  { write } for  pid=19780 comm="syz.1.4375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  395.098534][T19789] fuse: fd is not a fuse device
[  395.203152][T19795] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer.
[  395.673433][T19837] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  395.804497][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  395.813386][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  395.816498][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  395.819756][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  395.822430][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  395.879267][T19857] "syz.6.4392" (19857) uses obsolete ecb(arc4) skcipher
[  395.951012][   T42] audit: type=1400 audit(1786693631.329:1402): avc:  denied  { read } for  pid=19856 comm="syz.6.4392" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  395.958200][   T42] audit: type=1400 audit(1786693631.329:1403): avc:  denied  { open } for  pid=19856 comm="syz.6.4392" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  395.979169][   T42] audit: type=1400 audit(1786693631.329:1404): avc:  denied  { ioctl } for  pid=19856 comm="syz.6.4392" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  396.009783][T13403] bond0: (slave syz_tun): Releasing backup interface
[  396.112495][T19874] overlayfs: failed to resolve './file0': -2
[  396.221498][ T5786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.339257][T19891] netlink: 'syz.8.4397': attribute type 11 has an invalid length.
[  396.403627][ T5786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.444298][T19894] 9p: Bad value for 'version'
[  396.561740][ T5786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.570786][T19897] netlink: 'syz.4.4399': attribute type 9 has an invalid length.
[  396.698702][ T5786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.704806][T19902] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4400'.
[  396.792517][   T42] audit: type=1800 audit(1786693632.163:1405): pid=19909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4401" name="UDC" dev="configfs" ino=96414 res=0 errno=0
[  396.795485][T19909] udc dummy_udc.0: failed to start g1: -19
[  396.804091][T19909] UDC core: g1: couldn't find an available UDC or it's busy
[  396.841339][T19851] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.841669][T19851] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.841803][T19851] bridge_slave_0: entered allmulticast mode
[  396.843980][T19851] bridge_slave_0: entered promiscuous mode
[  396.880152][T19851] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.883903][T19851] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.884054][T19851] bridge_slave_1: entered allmulticast mode
[  396.888974][T19851] bridge_slave_1: entered promiscuous mode
[  396.999602][T19851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.091073][T19851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.142634][T19851] team0: Port device team_slave_0 added
[  397.154800][T19851] team0: Port device team_slave_1 added
[  397.198904][T19851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.203572][T19851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.220422][T19851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.281493][T19940] CIFS: VFS: bad security option: krb5iý
[  397.299114][T19851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.301328][T19851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.319892][T19851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.401152][T19940] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4404'.
[  397.404743][T19851] hsr_slave_0: entered promiscuous mode
[  397.409165][T19851] hsr_slave_1: entered promiscuous mode
[  397.414264][T19851] debugfs: 'hsr0' already exists in 'hsr'
[  397.416257][T19851] Cannot create hsr debugfs directory
[  397.424214][ T5786] bridge_slave_1: left allmulticast mode
[  397.426055][ T5786] bridge_slave_1: left promiscuous mode
[  397.440354][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.446786][ T5786] bridge_slave_0: left allmulticast mode
[  397.448850][ T5786] bridge_slave_0: left promiscuous mode
[  397.450648][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.606966][T19955] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4406'.
[  397.662593][ T5786] bond3 (unregistering): (slave geneve2): Releasing active interface
[  397.706021][ T5786] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  397.742271][ T5786] bridge0 (unregistering): left promiscuous mode
[  397.754461][ T5786] bond0 (unregistering): left promiscuous mode
[  397.756917][ T5786] bond_slave_0: left promiscuous mode
[  397.759095][ T5786] bond_slave_1: left promiscuous mode
[  397.762474][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.802301][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.841866][ T5786] bond0 (unregistering): Released all slaves
[  397.847425][ T5786] bond1 (unregistering): Released all slaves
[  397.857764][ T5786] bond2 (unregistering): Released all slaves
[  397.868918][ T5786] bond3 (unregistering): Released all slaves
[  397.876027][ T5786] bond4 (unregistering): Released all slaves
[  397.883293][ T5786] bond5 (unregistering): Released all slaves
[  397.897066][ T5786] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  397.922725][ T5786] bond6 (unregistering): Released all slaves
[  397.930984][ T5786] bond7 (unregistering): Released all slaves
[  397.933336][ T5094] Bluetooth: hci2: command tx timeout
[  398.081356][ T9604] net_ratelimit: 28 callbacks suppressed
[  398.081371][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  398.229873][ T5786] : left promiscuous mode
[  398.269054][T19964] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4409'.
[  398.293736][   T12] bond5: (slave bridge4): failed to get link speed/duplex
[  398.330212][ T5786] tipc: Disabling bearer <udp:syz0>
[  398.333974][ T5786] tipc: Left network mode
[  398.365457][T19222] usb 11-1: new full-speed USB device number 33 using dummy_hcd
[  398.484968][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  398.495478][T19222] usb 11-1: device descriptor read/64, error -71
[  398.561959][T19976] can: request_module (can-proto-5) failed.
[  398.590648][T19975] ima: policy update failed
[  398.592432][   T42] audit: type=1802 audit(1786693633.952:1406): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.4414" res=0 errno=0
[  398.656611][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  398.739563][T19222] usb 11-1: new full-speed USB device number 34 using dummy_hcd
[  398.784296][T19984] 0: reclassify loop, rule prio 0, protocol 03
[  398.807272][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  398.877425][T19222] usb 11-1: device descriptor read/64, error -71
[  398.938426][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  399.000799][T19222] usb usb11-port1: attempt power cycle
[  399.050142][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  399.178603][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  399.187215][ T5786] batadv0: left promiscuous mode
[  399.196978][ T5786] hsr_slave_0: left promiscuous mode
[  399.199918][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.203043][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.207024][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.212820][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.237789][ T5786] veth1_macvtap: left promiscuous mode
[  399.243604][ T5786] veth0_macvtap: left promiscuous mode
[  399.246022][ T5786] veth1_vlan: left promiscuous mode
[  399.248252][ T5786] veth0_vlan: left promiscuous mode
[  399.266627][T20010] netlink: 232 bytes leftover after parsing attributes in process `syz.8.4417'.
[  399.304081][   T24] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51)
[  399.349600][   T42] audit: type=1400 audit(1786693634.697:1407): avc:  denied  { ioctl } for  pid=20011 comm="syz.8.4418" path="socket:[96614]" dev="sockfs" ino=96614 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  399.371498][T19222] usb 11-1: new full-speed USB device number 35 using dummy_hcd
[  399.392160][T19222] usb 11-1: device descriptor read/8, error -71
[  399.500558][ T5786] team0 (unregistering): Port device team_slave_1 removed
[  399.585973][ T5786] team0 (unregistering): Port device team_slave_0 removed
[  399.605810][ T8468] smc: removing ib device syz1
[  399.652131][T19222] usb 11-1: new full-speed USB device number 36 using dummy_hcd
[  399.682895][T19222] usb 11-1: device descriptor read/8, error -71
[  399.721164][T20024] dlm: Unknown command passed to DLM device : 33
[  399.721164][T20024] 
[  399.763338][ T5503] syz1: Port: 1 Link DOWN
[  399.770869][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4423'.
[  399.787682][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4423'.
[  399.793409][T19222] usb usb11-port1: unable to enumerate USB device
[  399.811049][ T8468] smbdirect: ib_dev[syz1] removed
[  399.848962][T20027] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  399.862462][T20024] syzkaller1: entered promiscuous mode
[  399.866509][T20024] syzkaller1: entered allmulticast mode
[  400.041499][ T5094] Bluetooth: hci2: command tx timeout
[  400.086255][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  400.117862][    C2] vxcan1: j1939_tp_rxtimer: 0xffff88803fe00c00: rx timeout, send abort
[  400.165589][T19851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  400.184673][T19851] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  400.197567][T19851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  400.230129][T19851] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  400.243324][T19851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  400.255680][T19851] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  400.268789][T19851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  400.275235][T19851] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  400.355794][T19851] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.371166][T19851] 8021q: adding VLAN 0 to HW filter on device team0
[  400.384279][T14902] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.387272][T14902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.406364][T14902] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.409337][T14902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.621012][    C2] vxcan1: j1939_tp_rxtimer: 0xffff88803fe03800: rx timeout, send abort
[  400.624620][    C2] vxcan1: j1939_tp_rxtimer: 0xffff88803fe00c00: abort rx timeout. Force session deactivation
[  400.797944][T19851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.834573][T19851] veth0_vlan: entered promiscuous mode
[  400.841831][T19851] veth1_vlan: entered promiscuous mode
[  400.899014][T19851] veth0_macvtap: entered promiscuous mode
[  400.904389][T19851] veth1_macvtap: entered promiscuous mode
[  400.906006][ T5786] IPVS: stop unused estimator thread 0...
[  400.913764][T19851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  400.920354][T19851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  400.926347][ T9604] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.930327][ T9604] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.933660][ T9604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.950060][    T9] usb 13-1: new full-speed USB device number 3 using dummy_hcd
[  400.971324][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.018565][ T8468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.025047][ T8468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.053532][T14902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.056500][T14902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.123226][    T9] usb 13-1: config 0 has an invalid interface number: 8 but max is 0
[  401.127425][    C2] vxcan1: j1939_tp_rxtimer: 0xffff88803fe03800: abort rx timeout. Force session deactivation
[  401.128359][    T9] usb 13-1: config 0 has no interface number 0
[  401.136878][    T9] usb 13-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  401.142209][    T9] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  401.146681][    T9] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  401.153023][    T9] usb 13-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  401.157705][    T9] usb 13-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  401.160934][    T9] usb 13-1: Product: syz
[  401.165225][    T9] usb 13-1: SerialNumber: syz
[  401.169922][    T9] usb 13-1: config 0 descriptor??
[  401.175525][T20050] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4426'.
[  401.175856][    T9] cm109 13-1:0.8: invalid payload size 0, expected 4
[  401.182878][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.8/input/input30
[  401.335902][T20058] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4427'.
[  401.390997][    C0] cm109 13-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  401.406713][T20063] netlink: 'syz.4.4430': attribute type 1 has an invalid length.
[  401.410237][T20063] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4430'.
[  401.414077][T20063] netlink: 'syz.4.4430': attribute type 2 has an invalid length.
[  401.481760][T20063] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  401.497554][T20063] cramfs: wrong magic
[  401.694518][ T5828] usb 11-1: new high-speed USB device number 37 using dummy_hcd
[  401.724620][ T1360] usb 6-1: new low-speed USB device number 31 using dummy_hcd
[  401.821320][T20087] xt_CT: No such helper "netbios-ns"
[  401.848440][ T5828] usb 11-1: Using ep0 maxpacket: 32
[  401.852031][ T5828] usb 11-1: config 0 has no interfaces?
[  401.858158][ T5828] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  401.864350][ T5828] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  401.867835][ T5828] usb 11-1: Product: syz
[  401.869267][ T5828] usb 11-1: Manufacturer: syz
[  401.870853][ T5828] usb 11-1: SerialNumber: syz
[  401.873815][ T5828] usb 11-1: config 0 descriptor??
[  401.888556][ T1360] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.894531][ T1360] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  401.902584][ T1360] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  401.910716][ T1360] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  401.918249][ T1360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.921573][ T5828] usb 13-1: USB disconnect, device number 3
[  401.922783][    C0] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71
[  401.925850][    C0] cm109 13-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  401.932147][T20070] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  401.935606][ T1360] hub 6-1:1.0: bad descriptor, ignoring hub
[  401.939752][ T1360] hub 6-1:1.0: probe with driver hub failed with error -5
[  401.944537][ T1360] cdc_wdm 6-1:1.0: skipping garbage
[  401.947504][ T5828] cm109 13-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  401.948862][ T1360] cdc_wdm 6-1:1.0: skipping garbage
[  401.969506][ T1360] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  401.973455][ T1360] cdc_wdm 6-1:1.0: Unknown control protocol
[  402.052625][T20101] binder: BINDER_SET_CONTEXT_MGR already set
[  402.054728][T20101] binder: 20099:20101 ioctl 4018620d 200000000180 returned -16
[  402.088953][ T1360] usb 11-1: USB disconnect, device number 37
[  402.117060][ T5094] Bluetooth: hci2: command tx timeout
[  402.224673][T20111] __nla_validate_parse: 1 callbacks suppressed
[  402.224692][T20111] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4437'.
[  402.256621][T20112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  402.260182][ T1044] usb 6-1: USB disconnect, device number 31
[  402.434556][   T42] audit: type=1400 audit(1786693637.769:1408): avc:  denied  { write } for  pid=20113 comm="syz.4.4438" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  402.451002][T20119] 9pnet_virtio: no channels available for device syz
[  402.746928][T20132] fuse: Unknown parameter '000000000000000000000x0000000000000005'
[  402.752367][T20132] cgroup: subsys name conflicts with all
[  402.806728][T20132] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  403.213495][   T13] net_ratelimit: 25 callbacks suppressed
[  403.213512][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  403.324148][ T9604] bond5: (slave bridge4): failed to get link speed/duplex
[  403.434879][   T13] bond5: (slave bridge4): failed to get link speed/duplex
[  403.545387][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  403.629553][   T42] audit: type=1400 audit(1786693638.962:1409): avc:  denied  { view } for  pid=20138 comm="syz.1.4446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  403.656589][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  403.689234][T20142] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4447'.
[  403.766864][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  403.877306][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  403.988016][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  404.098613][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  404.209080][ T5094] Bluetooth: hci2: command tx timeout
[  404.209194][ T5786] bond5: (slave bridge4): failed to get link speed/duplex
[  405.325719][T20114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  405.432576][T20159] program syz.1.4453 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  405.458023][   T42] audit: type=1400 audit(1786693640.781:1410): avc:  denied  { connect } for  pid=20165 comm="syz.6.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  405.528677][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4458'.
[  405.538170][T20171] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4457'.
[  405.630205][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4457'.
[  405.768074][ T5503] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  405.919008][ T5503] usb 6-1: Using ep0 maxpacket: 32
[  405.929846][ T5503] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  405.938760][ T5503] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  405.941969][ T5503] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  405.945020][ T5503] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  405.948225][ T5503] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  405.966124][ T5503] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  405.971214][ T5503] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  405.974639][ T5503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.981654][ T5503] usb 6-1: config 0 descriptor??
[  406.022521][T20187] binder: 20186:20187 ioctl c0306201 200000000480 returned -22
[  406.026232][T20187] tmpfs: Bad value for 'mpol'
[  406.157953][   T42] audit: type=1400 audit(1786693641.468:1411): avc:  denied  { nlmsg_write } for  pid=20190 comm="syz.6.4464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  406.189867][ T5503] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  406.195007][ T5503] usb 6-1: USB disconnect, device number 32
[  406.199331][ T5503] usblp0: removed
[  406.439261][T20197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  406.449756][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4467'.
[  406.466028][T20197] bridge0: port 3(macvlan2) entered blocking state
[  406.468600][T20197] bridge0: port 3(macvlan2) entered disabled state
[  406.471897][T20197] macvlan2: entered allmulticast mode
[  406.484867][T20197] macvlan2: left allmulticast mode
[  406.501437][T20201] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  406.643438][T20170] 9pnet_virtio: no channels available for device syz
[  407.186853][ T5821] usb 11-1: new high-speed USB device number 38 using dummy_hcd
[  407.210036][T20222] read descriptors
[  407.265545][T20228] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  407.331274][T19851] ffs_data_put(): freeing
[  407.346296][ T5821] usb 11-1: Using ep0 maxpacket: 16
[  407.350809][ T5821] usb 11-1: config 0 has no interfaces?
[  407.353462][ T5821] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  407.357627][ T5821] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.363307][ T5821] usb 11-1: config 0 descriptor??
[  407.644091][T20214] syzkaller0: entered promiscuous mode
[  407.646400][T20214] syzkaller0: entered allmulticast mode
[  407.839989][    T9] usb 11-1: USB disconnect, device number 38
[  407.852519][T20240] 9pnet_virtio: no channels available for device syz
[  407.857585][   T42] audit: type=1400 audit(1786693643.158:1412): avc:  denied  { lock } for  pid=20239 comm="syz.1.4478" path="socket:[96091]" dev="sockfs" ino=96091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  407.867894][T20240] syz.1.4478: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  407.875350][T20240] CPU: 2 UID: 0 PID: 20240 Comm: syz.1.4478 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  407.875371][T20240] Tainted: [L]=SOFTLOCKUP
[  407.875390][T20240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  407.875400][T20240] Call Trace:
[  407.875422][T20240]  <TASK>
[  407.875428][T20240]  dump_stack_lvl+0x100/0x190
[  407.875464][T20240]  warn_alloc.cold+0x94/0xa8
[  407.875491][T20240]  ? __pfx_warn_alloc+0x10/0x10
[  407.875517][T20240]  ? register_lock_class+0x40/0x560
[  407.875536][T20240]  ? kasan_save_stack+0x3f/0x50
[  407.875557][T20240]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  407.875576][T20240]  ? xskq_create+0x52/0x1d0
[  407.875603][T20240]  ? xsk_setsockopt+0x743/0xab0
[  407.875614][T20240]  ? do_sock_setsockopt+0xf3/0x1d0
[  407.875637][T20240]  ? __sys_setsockopt+0x195/0x220
[  407.875650][T20240]  ? __x64_sys_setsockopt+0xbd/0x160
[  407.875668][T20240]  ? do_syscall_64+0x115/0x870
[  407.875681][T20240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.875695][T20240]  ? xskq_create+0xfb/0x1d0
[  407.875706][T20240]  __vmalloc_node_range_noprof+0x136c/0x1630
[  407.875729][T20240]  ? xskq_create+0xfb/0x1d0
[  407.875746][T20240]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  407.875765][T20240]  ? kasan_save_track+0x14/0x30
[  407.875778][T20240]  ? __kasan_kmalloc+0xaa/0xb0
[  407.875792][T20240]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  407.875811][T20240]  ? xskq_create+0xfb/0x1d0
[  407.875823][T20240]  vmalloc_user_noprof+0x9e/0xe0
[  407.875839][T20240]  ? xskq_create+0xfb/0x1d0
[  407.875850][T20240]  xskq_create+0xfb/0x1d0
[  407.875863][T20240]  xsk_setsockopt+0x743/0xab0
[  407.875874][T20240]  ? __pfx_xsk_setsockopt+0x10/0x10
[  407.875885][T20240]  ? find_held_lock+0x2b/0x80
[  407.875894][T20240]  ? __fget_files+0x215/0x3d0
[  407.875914][T20240]  ? selinux_socket_setsockopt+0x6a/0x80
[  407.875955][T20240]  ? __pfx_xsk_setsockopt+0x10/0x10
[  407.875968][T20240]  do_sock_setsockopt+0xf3/0x1d0
[  407.875987][T20240]  __sys_setsockopt+0x195/0x220
[  407.876003][T20240]  __x64_sys_setsockopt+0xbd/0x160
[  407.876018][T20240]  ? do_syscall_64+0x90/0x870
[  407.876032][T20240]  ? lockdep_hardirqs_on+0x78/0x100
[  407.876046][T20240]  do_syscall_64+0x115/0x870
[  407.876059][T20240]  ? clear_bhb_loop+0x40/0x90
[  407.876074][T20240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.876087][T20240] RIP: 0033:0x7fc50ad9e019
[  407.876097][T20240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.876108][T20240] RSP: 002b:00007fc50bcd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  407.876125][T20240] RAX: ffffffffffffffda RBX: 00007fc50b025fa0 RCX: 00007fc50ad9e019
[  407.876134][T20240] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  407.876142][T20240] RBP: 00007fc50ae3500c R08: 0000000000000029 R09: 0000000000000000
[  407.876149][T20240] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  407.876157][T20240] R13: 00007fc50b026038 R14: 00007fc50b025fa0 R15: 00007fffaa143578
[  407.876171][T20240]  </TASK>
[  407.876209][T20240] Mem-Info:
[  407.980796][T20240] active_anon:6754 inactive_anon:394 isolated_anon:0
[  407.980796][T20240]  active_file:3859 inactive_file:27714 isolated_file:0
[  407.980796][T20240]  unevictable:768 dirty:197 writeback:0
[  407.980796][T20240]  slab_reclaimable:13618 slab_unreclaimable:107420
[  407.980796][T20240]  mapped:23818 shmem:892 pagetables:6045
[  407.980796][T20240]  sec_pagetables:307 bounce:0
[  407.980796][T20240]  kernel_misc_reclaimable:0
[  407.980796][T20240]  free:429315 free_pcp:11344 free_cma:0
[  408.004951][T20240] Node 0 active_anon:26944kB inactive_anon:1360kB active_file:15340kB inactive_file:89608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:49212kB dirty:788kB writeback:0kB shmem:2032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17248kB pagetables:10320kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  408.016726][T20240] Node 1 active_anon:72kB inactive_anon:216kB active_file:96kB inactive_file:21248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:46060kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:13860kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  408.030307][T20240] Node 0 DMA free:15284kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  408.039231][T20240] lowmem_reserve[]: 0 1225 1225 1225 1225
[  408.043301][T20240] Node 0 DMA32 free:300732kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26860kB inactive_anon:1360kB active_file:15340kB inactive_file:89608kB unevictable:1536kB writepending:784kB zspages:0kB present:2080628kB managed:1255184kB mlocked:0kB bounce:0kB free_pcp:41216kB local_pcp:17296kB free_cma:0kB
[  408.054690][T20240] lowmem_reserve[]: 0 0 0 0 0
[  408.056340][T20240] Node 1 Normal free:1401244kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72kB inactive_anon:216kB active_file:96kB inactive_file:21248kB unevictable:1536kB writepending:0kB zspages:5516kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:4956kB local_pcp:2048kB free_cma:0kB
[  408.066771][T20240] lowmem_reserve[]: 0 0 0 0 0
[  408.068495][T20240] Node 0 DMA: 5*4kB (U) 6*8kB (UE) 7*16kB (UE) 6*32kB (U) 7*64kB (UE) 5*128kB (UE) 4*256kB (UE) 3*512kB (UE) 3*1024kB (UE) 4*2048kB (U) 0*4096kB = 15284kB
[  408.074195][T20240] Node 0 DMA32: 223*4kB (UE) 735*8kB (UME) 314*16kB (UE) 1129*32kB (UE) 702*64kB (UME) 422*128kB (UME) 247*256kB (UME) 107*512kB (UME) 25*1024kB (UM) 5*2048kB (UM) 0*4096kB = 300724kB
[  408.080105][T20240] Node 1 Normal: 525*4kB (UM) 523*8kB (UME) 487*16kB (UME) 443*32kB (UME) 383*64kB (UME) 349*128kB (UM) 257*256kB (UME) 174*512kB (UM) 92*1024kB (UME) 7*2048kB (UME) 254*4096kB (UM) = 1401244kB
[  408.086361][T20240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.089514][T20240] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  408.093363][T20240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.096472][T20240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  408.099473][T20240] 33421 total pagecache pages
[  408.101332][T20240] 957 pages in swap cache
[  408.102819][T20240] Free swap  = 105672kB
[  408.104266][T20240] Total swap = 124996kB
[  408.105633][T20240] 1048443 pages RAM
[  408.106841][T20240] 0 pages HighMem/MovableOnly
[  408.108832][T20240] 285336 pages reserved
[  408.110216][T20240] 0 pages cma reserved
[  408.115886][T20242] kvm: user requested TSC rate below hardware speed
[  408.173976][T20246] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4480'.
[  408.209761][T20248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4481'.
[  408.308925][T20262] dvmrp0: entered allmulticast mode
[  408.352373][T20207] net_ratelimit: 35 callbacks suppressed
[  408.352398][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  408.412637][T20271] sctp: [Deprecated]: syz.1.4488 (pid 20271) Use of struct sctp_assoc_value in delayed_ack socket option.
[  408.412637][T20271] Use struct sctp_sack_info instead
[  408.425558][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4488'.
[  408.429341][T20271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4488'.
[  408.462751][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  408.479253][   T42] audit: type=1400 audit(1786693643.775:1413): avc:  denied  { mounton } for  pid=20274 comm="syz.1.4490" path="/proc/60/cgroup" dev="proc" ino=98596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  408.573362][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  408.664129][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4493'.
[  408.684465][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  408.799871][T20292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4495'.
[  408.803954][T20292] netlink: 'syz.1.4495': attribute type 10 has an invalid length.
[  408.844636][T20292] macvlan1: entered promiscuous mode
[  408.846386][T20292] macvlan1: entered allmulticast mode
[  408.850520][T20292] veth1_vlan: entered allmulticast mode
[  408.862499][T20292] bond0: (slave macvlan1): Enslaving as an active interface with an up link
[  408.876306][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  408.974769][   T42] audit: type=1400 audit(1786693644.272:1414): avc:  denied  { append } for  pid=20296 comm="syz.1.4496" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  408.978574][T20297] binder: BC_ATTEMPT_ACQUIRE not supported
[  408.986400][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  408.989570][T20297] binder: 20296:20297 ioctl c0306201 200000000000 returned -22
[  408.994256][   T42] audit: type=1400 audit(1786693644.282:1415): avc:  denied  { map } for  pid=20296 comm="syz.1.4496" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  409.009928][   T42] audit: type=1400 audit(1786693644.282:1416): avc:  denied  { execute } for  pid=20296 comm="syz.1.4496" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  409.055990][T20298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4496'.
[  409.111517][T20299] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  409.115752][T20299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16881 sclass=netlink_route_socket pid=20299 comm=syz.1.4496
[  409.121031][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  409.226705][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  409.347272][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  409.468807][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  409.789516][ T5821] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  409.951553][ T5821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.958950][ T5821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.967387][ T5821] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  409.980487][ T5821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.986238][ T5821] usb 9-1: config 0 descriptor??
[  410.410550][ T5821] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[  410.418720][ T5821] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[  410.430579][ T5821] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0009/input/input31
[  410.464413][ T5821] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[  410.630979][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4503'.
[  410.742363][ T1044] usb 9-1: USB disconnect, device number 37
[  411.156195][T20338] binder: BINDER_SET_CONTEXT_MGR already set
[  411.158866][T20338] binder: 20337:20338 ioctl 4018620d 200000000100 returned -16
[  411.474634][T20361] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4513'.
[  411.573505][   T42] audit: type=1400 audit(1786693646.859:1417): avc:  denied  { relabelto } for  pid=20368 comm="syz.4.4517" name="syz1" dev="cgroup2" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  411.582744][T20371] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001
[  411.633082][   T42] audit: type=1400 audit(1786693646.918:1418): avc:  denied  { write } for  pid=20368 comm="syz.4.4517" name="syz1" dev="cgroup2" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  411.661480][   T42] audit: type=1400 audit(1786693646.948:1419): avc:  denied  { add_name } for  pid=20368 comm="syz.4.4517" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  411.672439][   T42] audit: type=1400 audit(1786693646.958:1420): avc:  denied  { create } for  pid=20368 comm="syz.4.4517" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  411.700309][T20376] bond2 (unregistering): Released all slaves
[  411.701728][T20374] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  411.708697][T20374] qnx6: wrong signature (magic) in superblock #1.
[  411.711379][T20374] qnx6: unable to read the first superblock
[  411.770834][T20379] 9p: Unknown Cache mode or invalid value fscacÿ+dg°–ëÀJàºø¥he
[  412.107239][T20395] input input32: cannot allocate more than FF_MAX_EFFECTS effects
[  412.171908][ T5828] usb 11-1: new high-speed USB device number 39 using dummy_hcd
[  412.285572][T20403] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4529'.
[  412.322615][ T5828] usb 11-1: device descriptor read/64, error -71
[  412.332023][T20404] xt_cgroup: xt_cgroup: no path or classid specified
[  412.351782][T20406] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  412.563656][ T5828] usb 11-1: new high-speed USB device number 40 using dummy_hcd
[  412.664441][ T1360] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  412.694421][ T5828] usb 11-1: device descriptor read/64, error -71
[  412.805199][ T5828] usb usb11-port1: attempt power cycle
[  412.814919][ T1360] usb 6-1: Using ep0 maxpacket: 8
[  412.819884][ T1360] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  412.825983][ T1360] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  412.831051][ T1360] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  412.837496][ T1360] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  412.843300][ T1360] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  412.851206][ T1360] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  412.857512][ T1360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.095699][ T1360] usb 6-1: usb_control_msg returned -32
[  413.099004][ T1360] usbtmc 6-1:16.0: can't read capabilities
[  413.158968][ T5828] usb 11-1: new high-speed USB device number 41 using dummy_hcd
[  413.205843][ T5828] usb 11-1: device descriptor read/8, error -71
[  413.418174][T20205] net_ratelimit: 35 callbacks suppressed
[  413.418197][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  413.472160][ T5828] usb 11-1: new high-speed USB device number 42 using dummy_hcd
[  413.488793][ T5828] usb 11-1: device descriptor read/8, error -71
[  413.532116][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  413.600656][ T5828] usb usb11-port1: unable to enumerate USB device
[  413.639382][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  413.751694][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  413.817088][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4531'.
[  413.860257][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  413.970710][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  414.081676][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  414.191832][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  414.302410][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  414.412861][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  415.519101][ T1044] usb 6-1: USB disconnect, device number 33
[  415.960409][ T1044] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  416.116240][ T1044] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  416.120936][ T1044] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.124246][ T1044] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.128151][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  416.131572][ T1044] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.134518][ T1044] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.138122][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  416.141255][ T1044] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.144056][ T1044] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.147399][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  416.150282][ T1044] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.153247][ T1044] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.156682][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  416.159538][ T1044] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.163745][ T1044] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.167263][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  416.170134][ T1044] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.173030][ T1044] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.176538][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  416.179513][ T1044] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.182559][ T1044] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.186168][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  416.189429][ T1044] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.192374][ T1044] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.195928][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  416.199889][ T1044] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  416.202937][ T1044] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  416.205655][ T1044] usb 6-1: Product: syz
[  416.207070][ T1044] usb 6-1: Manufacturer: syz
[  416.208624][ T1044] usb 6-1: SerialNumber: syz
[  416.211702][ T1044] usb 6-1: config 0 descriptor??
[  416.219178][ T1044] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  416.423540][ T1044] usb 6-1: USB disconnect, device number 34
[  416.429093][ T1044] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  416.567819][T20450] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4543'.
[  416.638438][T20455] IPv6: NLM_F_CREATE should be specified when creating new route
[  416.678313][T20452] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4544'.
[  416.714716][T20452] 9pnet_virtio: no channels available for device syz
[  416.987125][T20473] cgroup: subsys name conflicts with all
[  417.091254][T20478] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4553'.
[  417.608144][ T1044] usb 9-1: new full-speed USB device number 38 using dummy_hcd
[  417.765062][T20494] syzkaller0: entered promiscuous mode
[  417.767405][T20494] syzkaller0: entered allmulticast mode
[  417.771443][ T1044] usb 9-1: config 0 has no interfaces?
[  417.773518][ T1044] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  417.780712][ T1044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.784773][ T1044] usb 9-1: config 0 descriptor??
[  417.916670][T20498] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4560'.
[  418.160946][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  418.170844][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  418.177967][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  418.182434][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  418.183214][T20519] xt_limit: Overflow, try lower: 271964/0
[  418.187445][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  418.317167][T20490] NFSD: Failed to start, no listeners configured.
[  418.462280][T20205] net_ratelimit: 35 callbacks suppressed
[  418.462293][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  418.484441][ T5821] usb 11-1: new high-speed USB device number 43 using dummy_hcd
[  418.604726][T20543] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4568'.
[  418.630840][T20543] bond2: (slave batadv0): Device is not bonding slave
[  418.633593][T20543] bond2: option active_slave: invalid value (batadv0)
[  418.634851][ T5821] usb 11-1: Using ep0 maxpacket: 8
[  418.641730][ T5821] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  418.643140][T20543] bond2 (unregistering): Released all slaves
[  418.645981][ T5821] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  418.649796][ T5821] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  418.652941][ T5821] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  418.656594][ T5821] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  418.661236][ T5821] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  418.667107][ T5821] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.693866][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  418.752440][ T1044] usb 9-1: USB disconnect, device number 38
[  418.776056][T20543] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20003
[  418.865833][T20514] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.868979][T20514] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.872071][T20514] bridge_slave_0: entered allmulticast mode
[  418.881516][ T5821] usb 11-1: usb_control_msg returned -32
[  418.885891][ T5821] usbtmc 11-1:16.0: can't read capabilities
[  418.891013][T20514] bridge_slave_0: entered promiscuous mode
[  418.902010][T20514] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.905946][T20514] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.909207][T20514] bridge_slave_1: entered allmulticast mode
[  418.915012][T20514] bridge_slave_1: entered promiscuous mode
[  418.970929][T20514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.978118][T20514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.012600][T20514] team0: Port device team_slave_0 added
[  419.023306][T20514] team0: Port device team_slave_1 added
[  419.044005][T20514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.046895][T20514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.057116][T20514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.063372][T20514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.066921][T20514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.077511][T20514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.118437][T20514] hsr_slave_0: entered promiscuous mode
[  419.121634][T20514] hsr_slave_1: entered promiscuous mode
[  419.124331][T20514] debugfs: 'hsr0' already exists in 'hsr'
[  419.126638][T20514] Cannot create hsr debugfs directory
[  419.216847][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  419.266284][ T1360] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  419.310244][T20514] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  419.314969][T20514] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  419.319420][T20514] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  419.330272][T20514] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  419.334516][T20514] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  419.345307][T20514] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  419.351068][T20514] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  419.370906][T20514] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  419.387907][T20556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4570'.
[  419.396170][T20555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4570'.
[  419.406170][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  419.418774][ T1360] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  419.424310][ T1360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.428263][ T1360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.442576][ T1360] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.447722][ T1360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.455508][ T1360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.463268][ T1360] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.468446][ T1360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.474002][ T1360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.480368][T20514] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.483917][ T1360] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.491595][ T1360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.495133][ T1360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.497657][T20567] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4572'.
[  419.502315][ T1360] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.505690][ T1360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.508812][ T1360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.512250][ T1360] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.515164][ T1360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.518103][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  419.521413][T20514] 8021q: adding VLAN 0 to HW filter on device team0
[  419.525947][ T1360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.527008][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.529652][ T1360] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.531568][ T8459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.534669][ T1360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.539244][ T1360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.542680][ T1360] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.545681][ T1360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.548700][ T1360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.552039][ T1360] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.555747][ T1360] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  419.559686][ T1360] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  419.564127][ T1360] usb 6-1: Product: syz
[  419.566441][ T1360] usb 6-1: Manufacturer: syz
[  419.567448][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.568602][ T1360] usb 6-1: SerialNumber: syz
[  419.570631][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.573357][ T1360] usb 6-1: config 0 descriptor??
[  419.581758][ T1360] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1
[  419.627477][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  419.738863][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  419.780972][ T1360] usb 6-1: USB disconnect, device number 35
[  419.784908][ T1360] yurex 6-1:0.0: USB YUREX #1 now disconnected
[  419.848474][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  419.905933][T20514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.000089][ T5842] bond5: (slave bridge4): failed to get link speed/duplex
[  420.057411][T20514] veth0_vlan: entered promiscuous mode
[  420.065402][T20514] veth1_vlan: entered promiscuous mode
[  420.083937][T20514] veth0_macvtap: entered promiscuous mode
[  420.089162][T20514] veth1_macvtap: entered promiscuous mode
[  420.097811][T20514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.104915][T20514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.150367][T20207] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.154599][T20207] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.176483][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  420.181358][T20207] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.189413][T20207] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.221992][ T5748] Bluetooth: hci4: command tx timeout
[  420.253133][T14901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.255846][T14901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.269253][T14901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.274071][T14901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.504439][T20606] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4580'.
[  420.609205][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4581'.
[  420.615340][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4581'.
[  420.636301][T20616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20616 comm=syz.1.4583
[  420.731188][T20620] bridge0: port 2(bridge_slave_1) entered listening state
[  420.736505][T20620] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.739862][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4585'.
[  420.744985][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4585'.
[  420.778630][T20627] comedi comedi3: dt2817: a I/O base address must be specified
[  420.857064][T20635] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4592'.
[  420.874049][T20632] syzkaller0: create flow: hash 1567167065 index 1
[  420.991481][T20642] syzkaller0: delete flow: hash 1567167065 index 1
[  421.200835][ T5885] usb 11-1: USB disconnect, device number 43
[  421.240664][T20654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=20654 comm=syz.9.4596
[  421.324028][T20661] 9pnet_fd: p9_fd_create_unix (20661): problem connecting socket: ./file1: -2
[  421.324646][   T42] audit: type=1400 audit(1786693656.563:1421): avc:  denied  { mounton } for  pid=20660 comm="syz.9.4598" path="/8/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  421.787946][   T42] audit: type=1400 audit(1786693657.031:1422): avc:  denied  { read } for  pid=20679 comm="syz.1.4602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  422.300313][ T5748] Bluetooth: hci4: command tx timeout
[  422.824895][T20703] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4610'.
[  422.988659][T20705] hid-generic 0003:0627:0001.0001: pid 20705 passed too short report
[  424.096009][T20705] netlink: 'syz.1.4611': attribute type 3 has an invalid length.
[  424.137858][T20205] net_ratelimit: 6 callbacks suppressed
[  424.137873][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  424.190861][T20710] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  424.211460][T20712] netlink: 'syz.4.4614': attribute type 21 has an invalid length.
[  424.267236][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  424.387701][ T5748] Bluetooth: hci4: command tx timeout
[  424.407804][T20205] bond5: (slave bridge4): failed to get link speed/duplex
[  424.578762][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  424.594290][T20748] syzkaller0: entered promiscuous mode
[  424.596150][T20748] syzkaller0: entered allmulticast mode
[  424.701711][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  424.804139][   T42] audit: type=1400 audit(1786693660.028:1423): avc:  denied  { shutdown } for  pid=20763 comm="syz.4.4632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  424.819519][T20207] bond5: (slave bridge4): failed to get link speed/duplex
[  424.822083][T20769] __nla_validate_parse: 6 callbacks suppressed
[  424.822094][T20769] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4631'.
[  424.859685][ T5885] usb 11-1: new low-speed USB device number 44 using dummy_hcd
[  424.901374][T20772] netlink: 'syz.9.4634': attribute type 21 has an invalid length.
[  424.905538][T20772] netlink: 'syz.9.4634': attribute type 6 has an invalid length.
[  424.909372][T20772] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4634'.
[  424.930174][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  424.990677][ T5885] usb 11-1: device descriptor read/64, error -71
[  425.040599][T14188] bond5: (slave bridge4): failed to get link speed/duplex
[  425.048101][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4638'.
[  425.052526][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4638'.
[  425.056992][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4638'.
[  425.062434][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4638'.
[  425.065472][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4638'.
[  425.068395][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4638'.
[  425.071744][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4638'.
[  425.074880][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4638'.
[  425.147255][T20207] bond_slave_1: left promiscuous mode
[  425.164319][   T42] audit: type=1400 audit(1786693660.387:1424): avc:  denied  { create } for  pid=20790 comm="syz.1.4641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  425.241292][ T5885] usb 11-1: new low-speed USB device number 45 using dummy_hcd
[  425.371694][ T5885] usb 11-1: device descriptor read/64, error -71
[  425.379041][T20207] bond5 (unregistering): (slave bridge4): Removing an active aggregator
[  425.388995][T20207] bond5 (unregistering): (slave bridge4): Releasing backup interface
[  425.391603][T20207] bond5 (unregistering): (slave bridge4): the permanent HWaddr of slave - ca:a4:3c:fd:5f:5a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  425.429194][T20207] bond5 (unregistering): (slave bridge5): Releasing backup interface
[  425.480197][T20207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.483577][ T5885] usb usb11-port1: attempt power cycle
[  425.504619][T20207] bond0 (unregistering): Released all slaves
[  425.510109][T20207] bond1 (unregistering): Released all slaves
[  425.519461][T20207] bond2 (unregistering): (slave lo): Releasing active interface
[  425.563490][T20207] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  425.569440][T20207] bond2 (unregistering): Released all slaves
[  425.581301][T20207] bond3 (unregistering): Released all slaves
[  425.593247][T20207] bond4 (unregistering): Released all slaves
[  425.601743][T20207] bond5 (unregistering): Released all slaves
[  425.613315][T20207] bond6 (unregistering): (slave macvlan1): Releasing backup interface
[  425.674436][T20207] bond6 (unregistering): Released all slaves
[  425.701354][T20791] 8021q: adding VLAN 0 to HW filter on device bond2
[  425.718628][T20792] bond2: (slave hsr0): The slave device specified does not support setting the MAC address
[  425.722247][T20792] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  425.728681][T20792] bond2: (slave hsr0): Error -22 calling dev_set_mtu
[  425.800163][   T42] audit: type=1400 audit(1786693661.014:1425): avc:  denied  { unlink } for  pid=19851 comm="syz-executor" name="file0" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  425.855769][ T5885] usb 11-1: new low-speed USB device number 46 using dummy_hcd
[  425.860076][T20804] ==================================================================
[  425.863421][T20804] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320
[  425.866924][T20804] Read of size 64 at addr ffffffff9ba57400 by task syz.4.4643/20804
[  425.871859][T20804] 
[  425.872846][T20804] CPU: 3 UID: 0 PID: 20804 Comm: syz.4.4643 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.872877][T20804] Tainted: [L]=SOFTLOCKUP
[  425.872885][T20804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  425.872911][T20804] Call Trace:
[  425.872934][T20804]  <TASK>
[  425.872942][T20804]  dump_stack_lvl+0x100/0x190
[  425.873030][T20804]  print_report+0x13d/0x4b0
[  425.873074][T20804]  ? __virt_addr_valid+0x239/0x430
[  425.873140][T20804]  ? usb_copy_descriptors+0x18d/0x320
[  425.873164][T20804]  kasan_report+0xdf/0x1c0
[  425.873214][T20804]  ? usb_copy_descriptors+0x18d/0x320
[  425.873241][T20804]  kasan_check_range+0x10f/0x1e0
[  425.873267][T20804]  __asan_memcpy+0x23/0x60
[  425.873285][T20804]  usb_copy_descriptors+0x18d/0x320
[  425.873309][T20804]  usb_assign_descriptors+0xd2/0x470
[  425.873334][T20804]  f_audio_bind+0x243a/0x3950
[  425.873366][T20804]  ? __pfx_f_audio_bind+0x10/0x10
[  425.873391][T20804]  usb_add_function+0x219/0x890
[  425.873417][T20804]  configfs_composite_bind+0xd83/0x1960
[  425.873446][T20804]  gadget_bind_driver+0x28c/0xbf0
[  425.873466][T20804]  ? __pfx_gadget_bind_driver+0x10/0x10
[  425.873484][T20804]  really_probe+0x241/0xa60
[  425.873539][T20804]  __driver_probe_device+0x20e/0x450
[  425.873559][T20804]  driver_probe_device+0x4a/0x140
[  425.873577][T20804]  __driver_attach+0x21f/0x5b0
[  425.873597][T20804]  ? __pfx___driver_attach+0x10/0x10
[  425.873618][T20804]  bus_for_each_dev+0x13e/0x1d0
[  425.873636][T20804]  ? __pfx_bus_for_each_dev+0x10/0x10
[  425.873653][T20804]  ? bus_add_driver+0x2b5/0x5b0
[  425.873674][T20804]  bus_add_driver+0x305/0x5b0
[  425.873695][T20804]  driver_register+0x1e2/0x360
[  425.873718][T20804]  usb_gadget_register_driver_owner+0x132/0x210
[  425.873745][T20804]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  425.873769][T20804]  configfs_write_iter+0x302/0x4e0
[  425.873804][T20804]  vfs_write+0x6ac/0x1050
[  425.873847][T20804]  ? __pfx_configfs_write_iter+0x10/0x10
[  425.873870][T20804]  ? __pfx_vfs_write+0x10/0x10
[  425.873900][T20804]  ksys_write+0x12a/0x250
[  425.873928][T20804]  ? __pfx_ksys_write+0x10/0x10
[  425.873960][T20804]  do_syscall_64+0x115/0x870
[  425.874007][T20804]  ? clear_bhb_loop+0x40/0x90
[  425.874031][T20804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.874051][T20804] RIP: 0033:0x7f239a39e019
[  425.874069][T20804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.874089][T20804] RSP: 002b:00007f239b2b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  425.874125][T20804] RAX: ffffffffffffffda RBX: 00007f239a625fa0 RCX: 00007f239a39e019
[  425.874139][T20804] RDX: 000000000000000c RSI: 0000200000000540 RDI: 0000000000000005
[  425.874150][T20804] RBP: 00007f239a43500c R08: 0000000000000000 R09: 0000000000000000
[  425.874163][T20804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.874176][T20804] R13: 00007f239a626038 R14: 00007f239a625fa0 R15: 00007fff51157e48
[  425.874195][T20804]  </TASK>
[  425.874202][T20804] 
[  425.905017][ T5885] usb 11-1: device descriptor read/8, error -71
[  425.906681][T20804] The buggy address belongs to the variable:
[  425.906693][T20804]  ac_header_desc+0x0/0x40
[  425.998170][T20804] 
[  425.999203][T20804] The buggy address belongs to the physical page:
[  426.001706][T20804] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba57
[  426.005177][T20804] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  426.008283][T20804] raw: 00fff00000002000 ffffea00006e95c8 ffffea00006e95c8 0000000000000000
[  426.011481][T20804] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  426.014955][T20804] page dumped because: kasan: bad access detected
[  426.017574][T20804] page_owner info is not present (never set?)
[  426.020060][T20804] 
[  426.021043][T20804] Memory state around the buggy address:
[  426.023351][T20804]  ffffffff9ba57300: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9
[  426.026653][T20804]  ffffffff9ba57380: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9
[  426.029838][T20804] >ffffffff9ba57400: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9
[  426.032666][T20804]                       ^
[  426.034390][T20804]  ffffffff9ba57480: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9
[  426.037614][T20804]  ffffffff9ba57500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9
[  426.040806][T20804] ==================================================================
[  426.049922][T20804] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  426.052992][T20804] CPU: 3 UID: 0 PID: 20804 Comm: syz.4.4643 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  426.057531][T20804] Tainted: [L]=SOFTLOCKUP
[  426.059322][T20804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  426.063432][T20804] Call Trace:
[  426.064789][T20804]  <TASK>
[  426.065968][T20804]  dump_stack_lvl+0x100/0x190
[  426.067981][T20804]  vpanic+0x552/0x970
[  426.069638][T20804]  ? __pfx_vpanic+0x10/0x10
[  426.071494][T20804]  ? irqentry_exit+0x24d/0xa00
[  426.073462][T20804]  ? usb_copy_descriptors+0x18d/0x320
[  426.075663][T20804]  panic+0xd1/0xe0
[  426.077189][T20804]  ? __pfx_panic+0x10/0x10
[  426.078986][T20804]  ? check_panic_on_warn+0x1f/0x90
[  426.081074][T20804]  check_panic_on_warn.cold+0x19/0x34
[  426.083302][T20804]  end_report.part.0+0x3a/0x90
[  426.085213][T20804]  kasan_report.cold+0xe/0x18
[  426.087118][T20804]  ? usb_copy_descriptors+0x18d/0x320
[  426.089267][T20804]  kasan_check_range+0x10f/0x1e0
[  426.091288][T20804]  __asan_memcpy+0x23/0x60
[  426.093091][T20804]  usb_copy_descriptors+0x18d/0x320
[  426.095223][T20804]  usb_assign_descriptors+0xd2/0x470
[  426.097361][T20804]  f_audio_bind+0x243a/0x3950
[  426.099307][T20804]  ? __pfx_f_audio_bind+0x10/0x10
[  426.101374][T20804]  usb_add_function+0x219/0x890
[  426.103393][T20804]  configfs_composite_bind+0xd83/0x1960
[  426.105580][T20804]  gadget_bind_driver+0x28c/0xbf0
[  426.107615][T20804]  ? __pfx_gadget_bind_driver+0x10/0x10
[  426.109872][T20804]  really_probe+0x241/0xa60
[  426.111757][T20804]  __driver_probe_device+0x20e/0x450
[  426.113760][T20804]  driver_probe_device+0x4a/0x140
[  426.115683][T20804]  __driver_attach+0x21f/0x5b0
[  426.117590][T20804]  ? __pfx___driver_attach+0x10/0x10
[  426.119728][T20804]  bus_for_each_dev+0x13e/0x1d0
[  426.121678][T20804]  ? __pfx_bus_for_each_dev+0x10/0x10
[  426.123722][T20804]  ? bus_add_driver+0x2b5/0x5b0
[  426.125507][T20804]  bus_add_driver+0x305/0x5b0
[  426.127415][T20804]  driver_register+0x1e2/0x360
[  426.129300][T20804]  usb_gadget_register_driver_owner+0x132/0x210
[  426.131878][T20804]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  426.134072][T20804]  configfs_write_iter+0x302/0x4e0
[  426.136198][T20804]  vfs_write+0x6ac/0x1050
[  426.138032][T20804]  ? __pfx_configfs_write_iter+0x10/0x10
[  426.140349][T20804]  ? __pfx_vfs_write+0x10/0x10
[  426.142298][T20804]  ksys_write+0x12a/0x250
[  426.143993][T20804]  ? __pfx_ksys_write+0x10/0x10
[  426.145920][T20804]  do_syscall_64+0x115/0x870
[  426.147768][T20804]  ? clear_bhb_loop+0x40/0x90
[  426.149708][T20804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.152119][T20804] RIP: 0033:0x7f239a39e019
[  426.153882][T20804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.160767][T20804] RSP: 002b:00007f239b2b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  426.164064][T20804] RAX: ffffffffffffffda RBX: 00007f239a625fa0 RCX: 00007f239a39e019
[  426.166999][T20804] RDX: 000000000000000c RSI: 0000200000000540 RDI: 0000000000000005
[  426.169930][T20804] RBP: 00007f239a43500c R08: 0000000000000000 R09: 0000000000000000
[  426.172910][T20804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  426.176007][T20804] R13: 00007f239a626038 R14: 00007f239a625fa0 R15: 00007fff51157e48
[  426.179169][T20804]  </TASK>
[  426.181052][T20804] Kernel Offset: disabled
[  426.182751][T20804] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:44:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81b78de3 RDX=ffff88802e0d2540
RSI=ffffffff81b7c4ec RDI=ffff88802e0d2540 RBP=ffffffff9b6fcef0 RSP=ffffc900016ef438
R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000
R12=0000000000000003 R13=0000000000000003 R14=ffff88806a43c4c0 R15=0000000000000000
RIP=ffffffff81b7c4ed RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5dd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c337d96 CR3=0000000033fb6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000808 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000002082001
Opmask04=00000000fffffff7 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556598718dd0 0000556598718dd0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005565986f8a60
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556598700f40
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f402b5f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffff00000000ff
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 08064b544a540107 0514170109050a4b
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 540a0b0d0301164b 54171106000a4b54
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961660064657373 65636f727020756c 6c2520716573006e 6f69746974726170
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c443230302c 4332303000776673 2c322c3100323831 3d5145534b534944
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d0d004a5b4e 110f110c000f050c 005145534b534944
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30737562646e2f 30303a3231303049 5043412f6d726f66 74616c702f736563
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000081 000000006b636f6c 7370616300003000 317761726469682f
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556598715810 ffffffffffffffac 00007f402b4bfd6a 00007fff27742378
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65bb7fdfd3 fffffffffffffffc 822b7f75ff7fff6f ffffffff37f6fbfc
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c36392c45382c43 382c41382c39382c 38382c37382c3638 2c35382c34382c33
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556598706910 0000000000000051 00004e4f53414552
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000010 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eaf2540
RSI=ffffffff81b57ece RDI=ffff88801eaf2540 RBP=0000000000000001 RSP=ffffc90000177df8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000
RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ed8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f1c2117b730 CR3=000000000e994000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fec0fc00 Opmask01=0000000000000000 Opmask02=0000000001010037 Opmask03=0000000000082080
Opmask04=00000000fffffff7 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055659870cea0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055659870ecf0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f402b5f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000006d726f6674
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64643101fc157e04 64643101fc153044
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64643101fc15304c 64643101fc15304c
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d372f37627375 2f322e6463685f79 6d6d75642f6d726f 6674616c702f7365
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005565987158c8 00005565987158c8 0000000000000041 6c2f6b636f6c6200
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 422c44422c43422c 42422c41422c3942 2c38422c37422c34 422c33422c32422c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31422c30422c4441 2c36412c35412c34 412c33412c31412c 46392c45392c3839
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c36392c45382c43 382c41382c39382c 38382c37382c3638 2c35382c34382c33
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff88802de09a00 RCX=dffffc0000000000 RDX=1ffff11005bc1345
RSI=1ffffffff2183dd5 RDI=ffff8880275f0000 RBP=00000000fffffffb RSP=ffffc900072cf8e8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000041 R11=0000000000000000
R12=0000000000000100 R13=ffff88802de09a28 R14=ffffffff90c1eea8 R15=ffffffff90c1eda0
RIP=ffffffff89842253 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1f08419300 ffffffff 00c00000
GS =0000 ffff8880d5fd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fc50bb556c8 CR3=0000000028002000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000291 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=b30986b134489692 5e5689e24bce4306 b30986b134489692 5e5689e24bce4306 b30986b134489692 5e5689e24bce4306 b30986b134489692 5e5689e24bce4306
ZMM18=e1372d938c4a8c87 5c2e4ba4385ab5d6 e1372d938c4a8c87 5c2e4ba4385ab5d6 e1372d938c4a8c87 5c2e4ba4385ab5d6 e1372d938c4a8c87 5c2e4ba4385ab5d6
ZMM19=5a1f000000000000 0000000000000004 5a1f000000000000 0000000000000003 5a1f000000000000 0000000000000002 5a1f000000000000 0000000000000001
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=998431a4998431a4 998431a4998431a4 998431a4998431a4 998431a4998431a4 998431a4998431a4 998431a4998431a4 998431a4998431a4 998431a4998431a4
ZMM22=c2f23558c2f23558 c2f23558c2f23558 c2f23558c2f23558 c2f23558c2f23558 c2f23558c2f23558 c2f23558c2f23558 c2f23558c2f23558 c2f23558c2f23558
ZMM23=d05ddcb0d05ddcb0 d05ddcb0d05ddcb0 d05ddcb0d05ddcb0 d05ddcb0d05ddcb0 d05ddcb0d05ddcb0 d05ddcb0d05ddcb0 d05ddcb0d05ddcb0 d05ddcb0d05ddcb0
ZMM24=dafcfc0cdafcfc0c dafcfc0cdafcfc0c dafcfc0cdafcfc0c dafcfc0cdafcfc0c dafcfc0cdafcfc0c dafcfc0cdafcfc0c dafcfc0cdafcfc0c dafcfc0cdafcfc0c
ZMM25=4b843b6e4b843b6e 4b843b6e4b843b6e 4b843b6e4b843b6e 4b843b6e4b843b6e 4b843b6e4b843b6e 4b843b6e4b843b6e 4b843b6e4b843b6e 4b843b6e4b843b6e
ZMM26=fcc79bf4fcc79bf4 fcc79bf4fcc79bf4 fcc79bf4fcc79bf4 fcc79bf4fcc79bf4 fcc79bf4fcc79bf4 fcc79bf4fcc79bf4 fcc79bf4fcc79bf4 fcc79bf4fcc79bf4
ZMM27=5a3ef4f95a3ef4f9 5a3ef4f95a3ef4f9 5a3ef4f95a3ef4f9 5a3ef4f95a3ef4f9 5a3ef4f95a3ef4f9 5a3ef4f95a3ef4f9 5a3ef4f95a3ef4f9 5a3ef4f95a3ef4f9
ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=d2140000d2140000 d2140000d2140000 d2140000d2140000 d2140000d2140000 d2140000d2140000 d2140000d2140000 d2140000d2140000 d2140000d2140000
info registers vcpu 3

CPU#3
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff85a393f0 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc90004967158
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666652
R12=0000000000000000 R13=0000000000000020 R14=fffffbfff37417ba R15=dffffc0000000000
RIP=ffffffff85a39417 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f239b2b76c0 ffffffff 00c00000
GS =0000 ffff8880d60d8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fc50bcd8ff8 CR3=000000005ca25000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000291 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51158336
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51158336 00007fff5115833c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f239a4355ef
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f239a43562f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f239a435793
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f239a435621
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f239a5f25f8 00007f239a5f25c8 00007f239a5f2600 00007f239a5f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000