last executing test programs:

2m7.633459291s ago: executing program 3 (id=80):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2043)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2d, 0x4, 0x8}}, 0x50)
write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0x0, r3, {0x9, 0x0, 0x7ff, 0x9}}, 0x20)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x11d}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b", 0x8e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x1da}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f075660484", 0xe1}, {0x0}], 0x3}}], 0x2, 0x14042082)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2m7.572169998s ago: executing program 3 (id=82):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0)
ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000880)=@physical={0x0, 0x0, [{0x2, 0x3, 0x2, 0xa, 0x6, 0x0, 0x2, 0x2, 0x3, 0x0, 0x5, 0x3, 0xd0}, {0x6, 0x4, 0x4, 0xe, 0x4, 0x1, 0x0, 0x9, 0x2, 0x1, 0x7, 0x1, 0x4}, {0x4, 0x3, 0x8, 0x0, 0x1, 0x0, 0x1, 0x9, 0x4, 0x0, 0x4, 0xfffffff8, 0x7fff}, {0x5, 0x3, 0xa, 0x7, 0x0, 0x1, 0x3, 0x7, 0xe, 0x1, 0xbb, 0x6, 0x800}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x48, 0x1, 0x0, @remote, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x1234, 0x1}}}}}, 0x0)
ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000080)=0xc8)

2m7.472684138s ago: executing program 3 (id=84):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000e35e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
socket(0x10, 0x803, 0x4) (async)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) (async)
sendto$packet(r1, &(0x7f0000000040)="2717a9", 0x3, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) (async)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x4008050)

2m7.470956613s ago: executing program 3 (id=85):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet(r1, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r3, &(0x7f00000003c0)='0x0104\x00', 0x7)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='super-speed-plus\x00', 0x11)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r5, &(0x7f0000000240)='dummy_udc.0\x00', 0xc)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0db70100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd8}], 0x1}, 0xc0)

2m7.382005331s ago: executing program 3 (id=86):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7ffe}, @broadcast, @device_b, @initial, {0xa, 0x2ce}}, 0x27, @val={0x8c, 0x18, {0xad3, "0ecb5b2ea863", @long="c943328ecb23028659a85b4f2fb44834"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)
r3 = syz_open_dev$media(&(0x7f0000000140), 0x3, 0x100)
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000a00)={{0x80000000, 0x0, 0x6, [0x6, 0x6]}, {0x80000000, 0x0, 0x69edb310c7b022fe, [0x9, 0x2]}, 0x10000000, [0x22, 0x1]})
r4 = syz_socket_connect_nvme_tcp()
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x90, &(0x7f00000001c0)=""/144, 0x0, 0x29}, 0x94)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)
close(r5)
sendto$inet_nvme_pdu(r4, &(0x7f0000000180)=@rsp={{0x5, 0x1, 0x18, 0xdf, 0x3}, {@u64=0x1ff, 0x3, 0x0, 0x8, 0x1}}, 0x80, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, 0x3f, 0x0, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x14, 0x160, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}}, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000200)={0x4})
syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000684000002f90780a010101ac1414aa800090781200183f2500000000000000000000007f0000017f000001516f06c02df09dcc1f46c54d3af6df1da8842c9d8148ab4ce6d80e50ceb0a04eccd5157118c569e847b789a0c6c56317a234649e"], 0x0)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4})
r9 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000100)=@mmap={0x6, 0x3, 0x4, 0x400, 0x7, {0x77359400}, {0x2, 0x8, 0x4, 0x9, 0x2, 0x6f, "000100ff"}, 0x101, 0x1, {}, 0x10000})
ioctl$VIDIOC_REQBUFS(r8, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})

2m7.103349073s ago: executing program 3 (id=88):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}, 0x8000000}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}, 0x8000000}, 0x1c)

2m7.053839952s ago: executing program 32 (id=88):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}, 0x8000000}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}, 0x8000000}, 0x1c)

1m31.849883924s ago: executing program 2 (id=338):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) (async)
bind$tipc(r1, 0x0, 0x0) (async)
close(r1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x6a4, 0x0, 0x2}]}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getpeername$llc(r9, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10) (async)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'batadv_slave_1\x00', {'lo\x00'}, 0x7})
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, 0x40004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0)

1m31.792916987s ago: executing program 2 (id=339):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
read(r1, &(0x7f00000000c0)=""/250, 0xfa)
clock_gettime(0x0, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000340))
clock_gettime(0x0, &(0x7f0000000380)={<r2=>0x0, <r3=>0x0})
write$evdev(r1, &(0x7f00000003c0)=[{{r2, r3/1000+10000}, 0x12, 0x929e, 0x3}, {{0x0, 0x2710}, 0x12, 0x800, 0x8}, {{}, 0x5, 0x0, 0x2}, {{0x0, 0xea60}, 0x4, 0x59c}], 0x60)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3})
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x11)

1m30.903426687s ago: executing program 2 (id=356):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) (async)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000000c0)={0xc, 0x2, 'client1\x00', 0x2, "c95ae175e71e3048", "6fac96a7dc91bdc795482238ee920a2a133c56fce0a3d5b4b86bbc504898a11b", 0x1ff, 0x5}) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x4, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0xfffffffe, 0x0, 0x2000, 0xf407}, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x6, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)

1m30.753375828s ago: executing program 2 (id=360):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0xc0000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)

1m30.752104984s ago: executing program 2 (id=361):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e002503000000000000000007"], 0x28}}, 0x0)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x4)
fchdir(r5)
setns(r5, 0x0)
r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
listen(r6, 0xffffff25)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
syz_emit_ethernet(0x2e, &(0x7f00000008c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb17942376002000002000002f907800000000ffffffff000022eb000c9078e17f0001"], 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001a0001000000514a7dd000000a"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvmmsg$unix(r9, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000000140))
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)

1m30.300912092s ago: executing program 2 (id=366):
r0 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20044000)
socket$kcm(0x10, 0x5, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20044000) (async)

1m30.235701707s ago: executing program 33 (id=366):
r0 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20044000)
socket$kcm(0x10, 0x5, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20044000) (async)

1m9.053245443s ago: executing program 1 (id=649):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "3efe72f3bf818ea09f4cf95d73c3ce3e8de711a7f3de0fc1cb8a24626d1d44910f2236bf9bae103e22391ea3cd172c2ac38179be234f63df3e6f5019535184ef5c39d04cc54c7bdd661cc2ff0d793bbc8433dbbb5ced195489d9389a1b55ef1389ec4f5bdceca542cc3fa739f22d94897c6b9abd311357d25e8ef7df7c43556d8f1107b003a9f87ddfc2dd335207b494877e48ec793e0995c184a0b644a16b065b3f6a987cc6bd06b7a618126a30b9e8aaa05814ca622407b092f3636481d7ab77487609081fb930df46404c837ff3e85d0cb475baf73af4f0702d828e5da37668e8d1396493ae1f100aa9c1fad6965352f36c8c09ad29fc695a266e7b0fd95de6688a99f6dea33f7432f2079339a45bb16c89d66fa2d81feebd0c42e53d9d5abfbacc40912bece541ebb43fc5e30e5724a394a841c9bfa09f08d9cd01d614546e650605921d4c55ad74479948dd4be6086d8f5a0f800461eb7633014de028d6492792cb27ad847037ad678f79e83232f138ab2f0ed350b9ab476d9c9ee41b5c4a96b28cc572f454c4c232aab45f1bc6b0c8caa19fc8c98e598c7891c9fb095ec923afd10c6306f0834d9da98892e9fd24186f446c1f87fced883ab43bcfbe54fc37d70459c049d87030494ebad22dc68cfaf694438ebc70e84a28f63c3b8905effdc87d477c1ddbab9ff5beed93a4d17819344148be913f949635156caf1e4b"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "c42d63f980dfbaa6", "43bc06000000000000000b38150700", "3171fa00", "d23a3ee3389eec27"}, 0x38)
io_uring_enter(r2, 0x1, 0x1, 0x5, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "569142cc91061c00", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0xfffffc44, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e25}]}, 0x24}, 0x1, 0x0, 0x0, 0x60044831}, 0x40080)

1m8.932797344s ago: executing program 1 (id=651):
syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x400400)

1m8.923532603s ago: executing program 1 (id=652):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0)
write$binfmt_misc(r4, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './proc\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
restart_syscall()
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m8.652375086s ago: executing program 1 (id=655):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick, {0xf9}, {}, @ext={0x0, 0x0}}, {0x6, 0x3, 0x9, 0xff, @time={0x9, 0x5}, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xe, 0x7fff}}, {0x8, 0x3, 0xa, 0x4, @time={0x800003, 0x6}, {0xbd, 0x3}, {0xd}, @time=@tick=0x5}], 0x70)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300), 0x80, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
socket$inet6(0xa, 0x80000, 0x148)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async)
write$sndseq(r0, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick, {0xf9}, {}, @ext={0x0, 0x0}}, {0x6, 0x3, 0x9, 0xff, @time={0x9, 0x5}, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xe, 0x7fff}}, {0x8, 0x3, 0xa, 0x4, @time={0x800003, 0x6}, {0xbd, 0x3}, {0xd}, @time=@tick=0x5}], 0x70) (async)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async)
mount$bind(&(0x7f0000000140)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300), 0x80, 0x0) (async)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (async)
socket$inet6(0xa, 0x80000, 0x148) (async)

1m8.497352336s ago: executing program 1 (id=658):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401"], 0x18}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x7, {0x9, 0x7, 0x1, 0x5}})

1m7.791321119s ago: executing program 1 (id=668):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
clock_nanosleep(0x8, 0x1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000000a000200aaaaaaaaaaaa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a83e3ca45663a259e0000000000200000020000800900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000002081c000180090001006d617371000000000c0008140000001100010000000000000000000000000a0000000080000000006b6f00cc1ee09f4343e864e1594e09f812ca924936170d2cdac3ce3a3aa1"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setreuid(0xee00, 0x0)
keyctl$session_to_parent(0x12)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf3, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001740)={&(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x28, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x1, 0x6, 0x1, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x83, &(0x7f0000000380)=""/131, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x7, 0x8001, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001780)=[r7, r0, 0x1, 0x1, r8], &(0x7f00000017c0)=[{0x1, 0x3, 0x10, 0x1}], 0x10, 0xfe000000}, 0x94)
setns(r6, 0x24020000)
r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_pidfd_open(r9, 0x0)
setns(r10, 0x24020000)
socket$netlink(0x10, 0x3, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc000, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r11=>0x0})
bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x1, r11, 0xffffff7e}, 0x10)

1m7.700376318s ago: executing program 34 (id=668):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
clock_nanosleep(0x8, 0x1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000000a000200aaaaaaaaaaaa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a83e3ca45663a259e0000000000200000020000800900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000002081c000180090001006d617371000000000c0008140000001100010000000000000000000000000a0000000080000000006b6f00cc1ee09f4343e864e1594e09f812ca924936170d2cdac3ce3a3aa1"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setreuid(0xee00, 0x0)
keyctl$session_to_parent(0x12)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf3, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001740)={&(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x28, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x1, 0x6, 0x1, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x83, &(0x7f0000000380)=""/131, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x7, 0x8001, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001780)=[r7, r0, 0x1, 0x1, r8], &(0x7f00000017c0)=[{0x1, 0x3, 0x10, 0x1}], 0x10, 0xfe000000}, 0x94)
setns(r6, 0x24020000)
r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_pidfd_open(r9, 0x0)
setns(r10, 0x24020000)
socket$netlink(0x10, 0x3, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc000, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r11=>0x0})
bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x1, r11, 0xffffff7e}, 0x10)

21.551692362s ago: executing program 4 (id=1141):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0)
r1 = dup(r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
accept4(r2, 0x0, 0x0, 0x800)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
ioprio_set$pid(0x2, 0x0, 0x2007)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)

21.478538005s ago: executing program 4 (id=1144):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
get_mempolicy(&(0x7f0000000080), 0x0, 0x6, &(0x7f00007d0000/0x3000)=nil, 0x6)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f00007d2000/0x4000)=nil})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x4000, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x0, 0x8000}, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100))
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f00007d1000/0x4000)=nil})

21.477959341s ago: executing program 4 (id=1146):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001e80)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba5838097ddae0b6c9ed0c8dc5de524ba7be7f3a6a99ac2381", 0x39}], 0x2}, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="05002ecb82497653ce6b00000000000000000600000008000300", @ANYRES64, @ANYBLOB="0500530000000000"], 0x24}}, 0x50)

21.409910513s ago: executing program 4 (id=1147):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x18}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002140), 0x40000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00000018000103000000000000000002000000020000000022000039485aadbac15103fa0960b6c5398efc3b1a8df3f03681000000000000c5d265c50c53b15d16878522ab6cd04ff6aeed"], 0x1c}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000)
waitid$P_PIDFD(0x3, r0, 0x0, 0x4, 0x0)
r2 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000080)={&(0x7f0000000100)={0x2d, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20014081}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000380), 0xb, 0x0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f00000000c0)={0x2, 0x1, 0x2, 0x2, "412d13cc00"})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)={0x121300, 0x10, 0x10}, 0x18)
readlinkat(r5, &(0x7f0000000400)='./file0/../file0/../file0\x00', &(0x7f0000000440)=""/140, 0x8c)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x1, 0x0, ';\"'}]}}}}}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}})
r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40)
ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})
syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bynd=s'])
openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c401cd993e271eda0b10807c173d4af52a598577a28317899f1f4c653b79d843e2b23c2bfd30cf501396c80ea0c1b3f1028ad5b3268663421dfb339036296f2df0bd0fd87926d73e6bbe739c6c517c69cf1b6bf3ba630874f08faae9fd5d735120cfb1b1b9258b2d47c846b51162d07ab38a2e1e11287beeb6fca7e1f073d6e043dfb8c8b71e4e73ade6fe4f4c05e2c0fb0f6101999ed111220fbb2559c9a58c43b6edae5cb90cbbbce20509781c3631a396459f494aa37b41010941d561ca43cd8018d2a91f80547e86e0"])

21.332773435s ago: executing program 4 (id=1150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000080)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x75da}}], 0x38, 0x4048800}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6d9b3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

20.843671288s ago: executing program 4 (id=1163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x4, 0xfc, 0x2, 0xff, 0x3, 0x1e00}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x2c}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x3, 0x3, 0x7, 0xc, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x5, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0x7fffff8}]}}}}}}, 0x42)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x2, 0x4, 0x4, 0xa, 0x500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10)
close_range(r5, r9, 0x0)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000240)='*', 0xfdef}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50)
close(0x3)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="400000000800000002020d00000000000000d8de", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000480), &(0x7f0000000000)=""/6, 0x2}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r10, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000000400)={r3, r4, 0x5, 0x2c, &(0x7f00000003c0)="4d25060462d1e07977cd26b26e65d2a0701494d0d39211f2c2cd25f0b2049663135acb2345ab15631838dfb0", 0x5, 0x3, 0x2, 0x7ff, 0x4, 0x0, 0x6, 'syz0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

20.699797433s ago: executing program 35 (id=1163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x4, 0xfc, 0x2, 0xff, 0x3, 0x1e00}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x2c}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x3, 0x3, 0x7, 0xc, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x5, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0x7fffff8}]}}}}}}, 0x42)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x2, 0x4, 0x4, 0xa, 0x500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10)
close_range(r5, r9, 0x0)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000240)='*', 0xfdef}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50)
close(0x3)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="400000000800000002020d00000000000000d8de", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000480), &(0x7f0000000000)=""/6, 0x2}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r10, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000000400)={r3, r4, 0x5, 0x2c, &(0x7f00000003c0)="4d25060462d1e07977cd26b26e65d2a0701494d0d39211f2c2cd25f0b2049663135acb2345ab15631838dfb0", 0x5, 0x3, 0x2, 0x7ff, 0x4, 0x0, 0x6, 'syz0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

6.352906694s ago: executing program 7 (id=1436):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0))
fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x2, 0x3}, {0x400, 0xf}]}, 0x14, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x90)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r3 = msgget(0x3, 0x184)
msgctl$IPC_RMID(r3, 0x0)
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(r4, r4, r4)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@can_delroute={0x40, 0x19, 0x200, 0x70bd2d, 0x25dfdbf7, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "d83fb5adc84fbcbd"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}}, @CGW_MOD_UID={0x8, 0xe, r4}]}, 0x40}}, 0x0)

6.281457675s ago: executing program 7 (id=1437):
socket$netlink(0x10, 0x3, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100)=0x4debfbbd, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100)=0x4debfbbd, 0x4)
userfaultfd(0x80000) (async)
r1 = userfaultfd(0x80000)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r2, 0x34e5}], 0x1, 0x40)
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})

6.191790762s ago: executing program 7 (id=1438):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x9, 0x0, 0xfbfd, 0x2, 0x0, 0x20, 0x3c, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sync_file_range(r2, 0x7f, 0x3, 0x6) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000001a000100000000000000000081"], 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0)

6.182403186s ago: executing program 7 (id=1440):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000095000000000000003fbea4f379f6c47a7471942380813396f9fe88b234f5addaf1517ad6ab0d48ca20e2f111d9bf22dde58b3dca033290bc0bd89f9844a4953221fdc0dcb9d4d46cc33374dde61971bdbd082249c1e86e180335fd6da959bbd38674562ce005ac1b33e26766"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64)
close(r2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e145755", 0x11}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea", 0x1c}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async, rerun: 64)
r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) (async, rerun: 64)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180))
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', <r8=>0x0, 0x8, 0x7800, 0x6, 0x5068, {{0x9, 0x4, 0x3, 0x31, 0x24, 0x66, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0x81, 0x0, 0x7, [0xfff, 0x3]}, @end]}}}}}) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@fwd={0x6}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x5}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x30, 0x51, 0x0, 0x5f, 0x30]}}, &(0x7f00000003c0)=""/16, 0x50, 0x10, 0x0, 0x6}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000080)=""/5, 0x5, <r10=>0x0, &(0x7f00000002c0)=""/227, 0xe3}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x802, 0x108)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xb, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb74f6416af3ab484}}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', r8, @sock_ops=0x3, r9, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x7, 0x3, 0x2}, 0x10, r10, r1, 0x2, &(0x7f0000000540)=[0x1, 0x1, 0x1, r11], &(0x7f0000000580)=[{0x4, 0x3, 0xa, 0x4}, {0x3, 0x4, 0xd, 0x7}], 0x10, 0xcd1}, 0x94)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd"], 0xcfa4)

5.818202634s ago: executing program 7 (id=1442):
r0 = socket$kcm(0xa, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f0179f8f3420f09420f01c20f2195b8010000000f01c10f226166b81c010f00d8410f20a2660f381d350000000066baf80cb88816398eef66bafc0cb8f09bec1cef", 0x42}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000000)="114353012008ba000000375186dd", 0xe, 0x4008015, &(0x7f00000000c0)={0x11, 0x18, r5, 0x1, 0x7}, 0x14)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r6, &(0x7f0000000140)='off\n\x00', 0x4)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, 0x8)
ptrace(0x10, r7)
ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f0000000100))
write(r6, &(0x7f0000000180)='on\n\x00', 0x3)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
close(0x3)

5.154397774s ago: executing program 7 (id=1448):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x12, 0x2}) (async)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000200)={0xfffffffffffffffc, 0x1, 0x0, 0x4}) (async)
r2 = syz_open_dev$vbi(&(0x7f0000002080), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000002180)={0x5, @raw_data="c1a21ddfb318c2836cfd949038aa7bc75a2f9c13072c603a03b4841d8fe98ad10de911e9cbc86b7cb651f219c89725f226b63d564da1bc6f019b2dd0f38a570ef8d4dbff6c5b1a459a39bc672e08bd6c93c5b41fb7a10026422bf146785806e191787aa8254247b7272378b20f575fe93bf88ab80d88c5e2848aa38b11b936d9208e8cf5b431d6b29ef220e38f2324d80b54468ec244f85480ef5291b18ce48c5651e6cd8bbbbca2c748c4eb3cc5645c4ffe944e1465d85aeb8894bf15db71eb4d4eb61996670a84"}) (async, rerun: 64)
r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) (async)
syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@remote, @remote, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "425909629495fcfb"}}}}, 0x0)

1.512150988s ago: executing program 6 (id=1503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001180)={'wpan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000011c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44044}, 0x20048410)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2, @ANYBLOB="01002cbd7000ffdbdf250c00005f746f5f687372000000038014000380109bb91fc5f6d3fffa0002000000000012e4866331712d6b5808d93756da5ba7ad16e03614aad0f89c31b956143abea30d2940950831158fb7af80363435476086f80df45d46f7de4cdecd89503f92a6e5826e87c01c82324bea7157e123a9270d20292e50f39cd233"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000010)

1.344800933s ago: executing program 6 (id=1506):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0)
write$dsp(r0, &(0x7f00000003c0)="e6", 0x1)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)
close(r0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x50)
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001780))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000001880)={0x60, 0x2, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7, 0x0, 0x0, 0x401, 0x8, 0x61, 0x4, 0x24})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = dup(r4)
getsockname$l2tp(r5, 0x0, &(0x7f0000000e40))
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000040))
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x35, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1})
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055c4e185f80066bad004edc7442402f8ff0000c7442406000000000f011c24", 0x53}], 0x1, 0x1c, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
fsmount(r3, 0x0, 0x2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
rmdir(&(0x7f00000000c0)='./file0\x00')
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00c8"], 0x24}}, 0x0)

1.257818876s ago: executing program 0 (id=1507):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x3, 0x4) (async)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e0000000130001000000000000000000736861332d323234"], 0xe0}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00')
preadv(r4, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$inet(r1, 0x0, 0x40) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010002000f66fcffff7f00000000000000000c000200010000000400000004000b00"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x2000c000) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x5) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000)

1.145420902s ago: executing program 0 (id=1508):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x113)
quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
fsync(r0)
sendmsg$sock(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000140)="fe7dab0f6f7ea743f481af38afbb495a78395aae3e0bd58092f22850c027b2bd", 0x20}, {&(0x7f0000000180)="dd21af2da108e341c79f90bb79629e99680710b72e8ec57c66e94852bec326994dd873627a0fb238b0988830a29d7a6a", 0x30}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="c58a53559badabe533cb8cbda7c35e58390ddf905f1f741a9d5579b04fad267fb2509ffbc912c0b805fbeed7bdde9d5244ec1c9e3e0c539fba9cd38b4e55b645aed07d87e8c2341469ad150de5eea6c442c967f3bec9b947f120323e40260525e7e1e297d5b4ff286ce00bc3d8b66adf18af90eed425f653dede686f871a98f858cbec42fafa2d804b2a17aa67e04b4291abeee4d1dcd3ebeb6853b9", 0x9c}, {&(0x7f00000012c0)="dc617c321b0247dc9c6b3535eb5a733fd3e3b3252e331901dfd6617581cf8938cdf82e1eea7f3a9aea979c2f49d7c9edf388200a82aeea3d23d72a", 0x3b}], 0x5, &(0x7f0000001380)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x30}, 0x8000)
bind$alg(r0, &(0x7f0000001400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70107c05219d040000e2040000000600010005000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000014c0), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000001700)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x18c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xe}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xff}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0xc}, {0x8, 0x15, 0x2c}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x4c081)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0xa0)

1.068656397s ago: executing program 0 (id=1510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0xd, 0x70bd25, 0x25dfdbfd, {0x4}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040082}, 0x4000090)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000200)={0x6, 'vxcan1\x00', {0x1}, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newrule={0x84, 0x20, 0xb0a, 0x70bd2c, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x7, 0xe, 0x0, 0x0, 0x1, 0x14}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x5}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e23}}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
listen(r3, 0x200)
accept4$llc(r3, 0x0, 0x0, 0x80000)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x40000, 0x0)
write(r4, &(0x7f00000001c0)='0', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000edffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200e0000002"], 0x3c}, 0x1, 0x4801000000000000}, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000234000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/215, 0xd7, 0x0, &(0x7f00000005c0)=""/176, 0xb0}, &(0x7f00000006c0)=0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)

1.068222557s ago: executing program 5 (id=1511):
r0 = syz_open_dev$vcsu(&(0x7f0000000580), 0xc4, 0x26ab81)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000b06030000000000000000000200000a0000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x8081)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002080090780003ae020000674ed7008a64d66283faccb62a"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES32], 0x0, 0x43, 0x0, 0x1, 0x40004}, 0x28)
readv(0xffffffffffffffff, &(0x7f0000000ec0)=[{&(0x7f0000000700)=""/230, 0xe6}], 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x9)
socket$alg(0x26, 0x5, 0x0)
capset(0x0, &(0x7f0000000500)={0x1, 0x2, 0x0, 0xfbfffffd, 0xfffffffd, 0x2})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$VT_DISALLOCATE(r5, 0x4bfb)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='cramfs\x00', 0x20040, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000140)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
write(r6, &(0x7f0000000180), 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000280)={0x4})
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0)
recvmsg(r7, &(0x7f0000000340)={0x0, 0x1b, &(0x7f0000003300)=[{&(0x7f00000010c0)=""/4087, 0xff7}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/89, 0x59}, {&(0x7f00000003c0)=""/219, 0xcd}, {&(0x7f0000003240)=""/13, 0xd}, {&(0x7f0000003280)=""/39, 0x27}], 0x6}, 0x2140)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000200)="303030303a30035130322d2af4385bb00095375aa44240fa999928c48f3607000000abaa423c108da917b0792489a043e445683226f69f64ce6390326aaf9cf2acbdec78618d8171673fa16647318554a53662aa7f7291fee5bc33894eced7ce6238", 0x62)
accept(r1, 0x0, 0x0)

988.549402ms ago: executing program 5 (id=1512):
r0 = syz_kvm_add_vcpu$x86(0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000006000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000080)="640fbaec2b0f4b72042ef70d78b8f2184d000fc73d0f09f20f22580f22060f01cf67650f1a5de6", 0x27}], 0x1, 0x1, 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x761) (async)
r5 = open(&(0x7f0000000400)='./file0\x00', 0x80002, 0x1ae)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x16) (async, rerun: 64)
write$binfmt_misc(r5, &(0x7f0000000040)="dd5c24662b", 0x5) (rerun: 64)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2204000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x76f2b80}}]}}) (async, rerun: 64)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) (async)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000004c0)={0x1, 0x0, @pic={0xa4, 0x9, 0xe, 0x3, 0x0, 0x4, 0x81, 0x0, 0x6, 0xfb, 0x81, 0x8, 0x0, 0x2, 0xd, 0xb}}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (rerun: 32)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (rerun: 64)

956.261003ms ago: executing program 5 (id=1513):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r0, 0xc0106440, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000080)})
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10080800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xffff8000}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24008114)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000240)={0xc, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000280)={0xc, r2})
ioctl$FICLONE(r1, 0x40049409, r0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x430, 0x3f4, 0x201, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0x17, [0x8, 0x7, 0x400, 0x49, 0x81, 0x3, 0xb6e, 0x8, 0x401, 0xf4, 0x1, 0x7, 0x715, 0xc, 0x3, 0x4, 0x8, 0x3, 0x81, 0x6, 0x1, 0x8, 0x0, 0xb3, 0x95d, 0xfff, 0x2, 0x7, 0x2, 0xce, 0xc9d, 0x1, 0x9, 0xe, 0x1, 0xffff, 0x0, 0xa, 0x6, 0x8, 0x9, 0x3ff, 0x1, 0x8, 0x3, 0x9, 0x40, 0x1, 0x3, 0x5, 0x100, 0x1, 0x5000, 0x9, 0x9, 0x7fffffff, 0xac19, 0xc42, 0x1, 0x7ff, 0x0, 0x1, 0xff, 0xa], [0x6, 0x4, 0x5, 0x5, 0x5, 0x4, 0x40, 0x3d1, 0x3, 0x1, 0xfffffffa, 0x3, 0x4, 0x9, 0x8001, 0xfffff180, 0x0, 0x5c0, 0x6, 0xdb67, 0x5, 0x1, 0x7, 0x1, 0x10, 0x8c3a, 0xfff, 0x1, 0x1, 0x5, 0x400, 0x2, 0x4, 0x80000001, 0x4, 0x0, 0x400, 0x6, 0x8, 0x8000, 0xd1, 0x4, 0x40, 0x80000000, 0x9, 0x75cc9f06, 0x9343, 0x0, 0x3ff, 0x3, 0x200, 0x101, 0x6, 0x1, 0x100, 0x1000, 0x5, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x10000, 0x8], [0x6, 0x7fff, 0x3a, 0x14920fff, 0x7fffffff, 0x1, 0x40, 0x0, 0x8, 0x5, 0x40, 0x8, 0x0, 0xf, 0x3, 0x8, 0x2fa, 0x8, 0xfffffffa, 0x9, 0x80000001, 0xea9, 0x5, 0x3ff, 0x3, 0x0, 0x502, 0x9, 0x1, 0xffc0000, 0x7, 0x3, 0x7, 0x200, 0x7, 0x8, 0x7, 0x2, 0x1, 0x4, 0x80000000, 0x9, 0x6d4, 0xf, 0x5a, 0x445d, 0x6, 0x0, 0x8c, 0x9a, 0x6, 0x0, 0x9, 0x8, 0x8, 0x7, 0x3245ca2b, 0x9, 0x9, 0xcb2, 0x4, 0x6, 0x8000, 0x80000000], [0x8001, 0x52fecd91, 0x7, 0xfffffffa, 0x6, 0x3, 0x0, 0x7fffffff, 0x4, 0x7fffffff, 0x1000, 0x3, 0x401, 0x1, 0x0, 0x1ff, 0x3, 0x0, 0x5, 0x5, 0x6, 0x7, 0x4, 0x1, 0x1, 0xf, 0x2, 0x3, 0x5, 0x9, 0x7, 0x3ab, 0x10001, 0x6, 0x5b72, 0x3, 0x9, 0x100, 0x30221e95, 0x7, 0x24f, 0x10001, 0x6, 0x9a3, 0x0, 0x4, 0x2, 0x1, 0x10001, 0x1, 0x2, 0x5, 0x8, 0x7, 0x6, 0x5, 0x8, 0xa08, 0x80000001, 0x1, 0x26, 0x5, 0x1], 0xe, [']-\x00', '/dev/iommu\x00']}, ["", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x24008010)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r3=>r1, {<r4=>r1}}, './file0\x00'})
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000800)={0xd, 0x3, 0x1})
ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000880)={@msf={0x1e, 0x19, 0x9}, 0x2, 0xb, &(0x7f0000000840)=""/11})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x18, r5, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xa727ecee41bbaaf9}, 0x20004040)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a40), r3)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x54}}, 0x891)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r7, 0xd00, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004088}, 0x10)
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r9=>r8, {0x5, 0x29b6}}, './file0\x00'})
ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000d40)=0x80)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r3)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r10, 0x208, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20411080}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001040), 0x10)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000001280)={&(0x7f0000001240)=[{&(0x7f0000001080)="65fe87e2ee973b7090adc3cd757c6c69cd77c7a079b8e88e740f1aa19d207ee1cc36da57d64ebfadf588e3", 0x2b}, {&(0x7f00000010c0)="935f9dfb8f6add65dd510d4e1ee03929a0499785f4a6571146758c335ee9c6db0765776a772c29b14fecc9a6a7d47147de89ceaffbd714bdcc", 0x39}, {&(0x7f0000001100)="2025e8d8", 0x4}, {&(0x7f0000001140)="a111a818f2685551a9e5a88f710ccf6f2712f5426180e209f5c6b1bf516b00fec69d4dda28a69aef5f9efbfb6dc460b2c4a47526d6ba0a1a652b317951bb82e6c6a474e4867de376139688ac748e3ad8126e1e3a37422c1719de35a02918fa3a3736d0a3b1d6dc7e3128bd5d8c529704491e51dfafb7d1c01e12fcb83b5b4f048544eec5c62462412568b895f7d8fd0901f2c272abaf3dfae5405573e345b097ef4f48d623b33e77d8dfd86e4b2243fd1702196c3a08a3c24772d2776e2dea76e106ccf477692cc4ebc52e1ec2e37f5eaad3922f36e732617f6df20a50d548c94bf4973b", 0xe4}], 0x4, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x88c9})
recvfrom(r9, &(0x7f0000001300)=""/189, 0xbd, 0x40000000, &(0x7f00000013c0)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80)
ioctl$CDROMREADCOOKED(r4, 0x5315, &(0x7f0000001440))
r11 = accept$phonet_pipe(r9, &(0x7f0000001ec0), &(0x7f0000001f00)=0x10)
bind(r11, &(0x7f0000001f40)=@x25, 0x80)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000002080)={&(0x7f0000002040)=[0x0, 0x0], 0x2})

863.421341ms ago: executing program 5 (id=1514):
r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x80000) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x4f89a66f80a8de43, 0x109031, 0xffffffffffffffff, 0x10000000) (async)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff940200000200000040000000000000000000200000000000000000002d8f38000300feff0500030001000000030000002dffffffffffffff06"], 0xe8)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r2 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) (async)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000100), 0x4) (async)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0xc, 0x21})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) (async)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) (async)
r6 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80)
ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}})

546.916741ms ago: executing program 5 (id=1515):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351", 0x800, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
quotactl_fd$Q_GETINFO(r2, 0x1, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x3c, r4, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040000)

544.48718ms ago: executing program 6 (id=1516):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x6, 0x7, 0x10000, 0x6, 0x2, 0x0, 0x7fffffef}, 0x1c)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000380)=0x5, 0x4)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064d1, &(0x7f0000000080)={0x0, 0x0, 0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0)
fcntl$notify(r1, 0x402, 0x2)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000440)=[{0x28, '\x00', @buffer={"fa3ac6db3cbdf073aa9bb3538ad53a2725a4ab497c0877807ea35faf5c6a1cc5", 0x20}, 0x5}]})

335.313834ms ago: executing program 5 (id=1517):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x6}, 0x2)
socketpair(0x1, 0x2, 0x1, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x3}, 0x2)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

335.004238ms ago: executing program 6 (id=1518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

218.40942ms ago: executing program 6 (id=1519):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$igmp(0x2, 0x3, 0x2) (async)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) (async)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1\x00', <r4=>0x0}) (async)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
close_range(r0, r3, 0x2) (async)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r6=>0x0})
setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) (async)
sendmsg$can_raw(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x1, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000026000506", @ANYRESHEX=r7, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x44011) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r8, &(0x7f00000021c0), &(0x7f00000022c0)=""/136}, 0x20) (async)
recvmmsg(r7, &(0x7f0000007700), 0x318, 0xfc0, 0x0) (async)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) (async)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac000000000101040000000000000000020000072400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1414aa08000200ac1414bb08000740000000000c000d8008000240000000003c0018"], 0xac}}, 0x0)

217.924199ms ago: executing program 0 (id=1520):
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}], 0x18}}], 0x2, 0x40800)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000240000000000000001f"], 0x14}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setns(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r4, &(0x7f0000000100), 0x12)
listen(r4, 0x1)
write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x161200, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf2501000000050004000200000008000600ac1414bb08000b00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}}, 0x20008000)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="440f7912430f00d5f3f65eeac401f8ae5fc3c46249a633b8010000000f01d9c4623693f7570f0f01c3713866b8b6008ed0", 0x31}], 0x1, 0x12, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000440)="0fc71aeaae4eb8000f01bde8007a5f3e3e3667f30f1efa660f38803d0f411f65260f2301650f0052040f07", 0x2b}], 0x1, 0x68, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65)

144.310895ms ago: executing program 6 (id=1521):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x14)
truncate(&(0x7f0000000180)='./sys\x00', 0xc3a)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0)
write(r4, &(0x7f00000001c0)='vhcd.0\x00\x00\x00\x00\x00', 0xe2c36ef7972c319e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x14) (async)
truncate(&(0x7f0000000180)='./sys\x00', 0xc3a) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async)
write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) (async)
write(r4, &(0x7f00000001c0)='vhcd.0\x00\x00\x00\x00\x00', 0xe2c36ef7972c319e) (async)

74.671697ms ago: executing program 0 (id=1522):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x16, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000140))
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000340)={0x0, 0xffff, 0x7})
write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e190987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b68090890e0878f0e1ac6e7049b3146959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5670500000000000000ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006)
connect$bt_rfcomm(r5, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r8 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4)
getsockopt$WPAN_SECURITY(r9, 0x0, 0x1, 0x0, &(0x7f0000000180))
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x3)
readv(r8, &(0x7f0000000700)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1)
close_range(r0, r3, 0x0)

0s ago: executing program 0 (id=1523):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x0, 0x2b, "", [{{0x9, 0x4, 0x0, 0x13, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xdba3, 0x2f4, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x0, 0x2b, "", [{{0x9, 0x4, 0x0, 0x13, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xdba3, 0x2f4, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00')
read$FUSE(r1, &(0x7f0000001380)={0x2020}, 0x2020)
preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a00)='0', 0x1)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0xa, 0x300) (async)
r3 = socket$packet(0x11, 0xa, 0x300)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0x9, 0x4, 0x41, 0xf17, 0xf}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0x80000000, 0x800, 0x1, 0x4}}]}}}]}, 0x78}}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x48}, 0x0) (async)
sendmsg$inet(r7, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x48}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0)=0x100000001, 0x4)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0x0, &(0x7f0000000080)={0x7f, 0x1, 0x1, 0x2})
openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x40000, 0x80}, 0x18)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085520, &(0x7f0000000000)={0x0, 0x7fffffff})
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000380)=@usbdevfs_connect={0x800}) (async)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000380)=@usbdevfs_connect={0x800})

kernel console output (not intermixed with test programs):

recated SCSI ioctl, please convert it to SG_IO
[  105.099518][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  105.270697][ T5843] usb 6-1: Using ep0 maxpacket: 8
[  105.278348][ T5843] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  105.283343][ T5843] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.291170][ T5843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.297475][ T5843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  105.302842][ T7692] vcan0 speed is unknown, defaulting to 1000
[  105.305475][ T5843] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.313897][ T5843] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  105.319478][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.532537][ T5843] usb 6-1: usb_control_msg returned -32
[  105.534794][ T5843] usbtmc 6-1:16.0: can't read capabilities
[  105.539421][   T40] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  105.540795][ T7704] loop7: detected capacity change from 0 to 16384
[  105.659587][ T7709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.427'.
[  105.695264][   T40] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  105.704157][   T40] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.706859][   T40] usb 10-1: Product: syz
[  105.708245][   T40] usb 10-1: Manufacturer: syz
[  105.710519][   T40] usb 10-1: SerialNumber: syz
[  105.731755][ T7711] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  105.819652][ T5745] Bluetooth: hci1: command tx timeout
[  105.971431][   T40] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  105.981877][   T40] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  105.999579][   T40] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  106.011875][   T40] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  106.049149][   T40] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  106.070920][   T40] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[  106.111774][   T40] usb 10-1: USB disconnect, device number 2
[  106.310700][ T7750] usbtmc 6-1:16.0: usb_control_msg returned -32
[  106.450400][ T7756] bond1 (unregistering): Released all slaves
[  106.478713][ T7759] overlayfs: failed to resolve './file1': -2
[  106.679804][ T7763] netlink: 72 bytes leftover after parsing attributes in process `syz.0.442'.
[  106.711522][ T7766] netlink: 'syz.5.441': attribute type 2 has an invalid length.
[  106.714047][ T7766] netlink: 224 bytes leftover after parsing attributes in process `syz.5.441'.
[  106.739138][ T7766] syzkaller0: entered promiscuous mode
[  106.741158][ T7766] syzkaller0: entered allmulticast mode
[  106.751974][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.441'.
[  106.880410][ T7779] ptrace attach of "/syz-executor exec"[5738] was attempted by ""[7779]
[  106.886921][ T7776] devtmpfs: Cannot change global quota limit on remount
[  106.940745][ T7781] bridge1: entered promiscuous mode
[  107.009084][ T7787] overlayfs: workdir and upperdir must be separate subtrees
[  107.070808][   T42] kauditd_printk_skb: 257 callbacks suppressed
[  107.070840][   T42] audit: type=1400 audit(1785627988.863:2295): avc:  denied  { map_create } for  pid=7791 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  107.084496][   T42] audit: type=1400 audit(1785627988.873:2296): avc:  denied  { create } for  pid=7791 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  107.093170][   T42] audit: type=1400 audit(1785627988.883:2297): avc:  denied  { ioctl } for  pid=7791 comm="syz.1.450" path="socket:[21328]" dev="sockfs" ino=21328 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  107.103384][   T42] audit: type=1400 audit(1785627988.883:2298): avc:  denied  { read } for  pid=7791 comm="syz.1.450" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  107.121745][ T7794] netlink: 'syz.4.451': attribute type 2 has an invalid length.
[  107.127313][   T42] audit: type=1400 audit(1785627988.883:2299): avc:  denied  { open } for  pid=7791 comm="syz.1.450" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  107.149945][   T42] audit: type=1400 audit(1785627988.883:2300): avc:  denied  { ioctl } for  pid=7791 comm="syz.1.450" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  107.163392][   T42] audit: type=1400 audit(1785627988.883:2301): avc:  denied  { write } for  pid=7791 comm="syz.1.450" name="comedi2" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  107.175242][   T42] audit: type=1400 audit(1785627988.883:2302): avc:  denied  { open } for  pid=7791 comm="syz.1.450" path="/dev/comedi2" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  107.186849][   T42] audit: type=1400 audit(1785627988.883:2303): avc:  denied  { ioctl } for  pid=7791 comm="syz.1.450" path="/dev/comedi2" dev="devtmpfs" ino=1303 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  107.200067][   T42] audit: type=1400 audit(1785627988.923:2305): avc:  denied  { connect } for  pid=7791 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  107.286307][ T7808] ipt_rpfilter: unknown options
[  107.401791][ T7815] kernel read not supported for file /file0 (pid: 7815 comm: syz.1.460)
[  107.419665][ T7821] netlink: 'syz.0.461': attribute type 8 has an invalid length.
[  107.433287][ T7823] netlink: 'syz.0.461': attribute type 8 has an invalid length.
[  107.734710][ T7837] i2c i2c-0: Invalid 7-bit I2C address 0x00
[  107.901615][ T5745] Bluetooth: hci1: command tx timeout
[  109.055338][ T7845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7845 comm=syz.1.467
[  109.104949][ T7851] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  109.115533][ T7851] VFS: Can't find a romfs filesystem on dev nullb0.
[  109.115533][ T7851] 
[  109.181753][ T7863] syz1: rxe_newlink: already configured on vcan0
[  109.267077][ T7872] jffs2: Unknown parameter '"(ü%'
[  109.322491][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[  109.328157][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'.
[  109.473050][ T7070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.476501][ T7070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.584130][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'.
[  109.653219][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.486'.
[  109.664683][ T7902] trusted_key: encrypted_key: insufficient parameters specified
[  109.769537][ T7904] syzkaller0: entered promiscuous mode
[  110.645621][ T5843] IPVS: starting estimator thread 0...
[  110.727581][ T7929] CacheFiles: Empty directory specified
[  110.749473][ T7925] IPVS: using max 31 ests per chain, 74400 per kthread
[  111.478581][ T7949] syzkaller0: entered promiscuous mode
[  111.481120][ T7949] syzkaller0: entered allmulticast mode
[  111.529139][ T7954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'.
[  111.698353][ T7962] netlink: 'syz.4.503': attribute type 4 has an invalid length.
[  111.726005][ T7964] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  112.076887][ T7985] comedi comedi4: bad chanlist[0]=0x1000000b chan=11 range length=2
[  112.080065][   T42] kauditd_printk_skb: 164 callbacks suppressed
[  112.080087][   T42] audit: type=1400 audit(1785627993.873:2469): avc:  denied  { ioctl } for  pid=7984 comm="syz.5.510" path="socket:[23964]" dev="sockfs" ino=23964 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  112.102134][   T42] audit: type=1400 audit(1785627993.893:2470): avc:  denied  { create } for  pid=7988 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  112.108911][   T42] audit: type=1400 audit(1785627993.893:2471): avc:  denied  { setopt } for  pid=7988 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  112.119458][   T42] audit: type=1400 audit(1785627993.893:2472): avc:  denied  { perfmon } for  pid=7988 comm="syz.5.511" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  112.140661][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.511'.
[  112.147419][   T42] audit: type=1400 audit(1785627993.933:2473): avc:  denied  { bpf } for  pid=7988 comm="syz.5.511" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  112.151415][ T7990] ipt_ECN: cannot use operation on non-tcp rule
[  112.160531][   T42] audit: type=1400 audit(1785627993.943:2474): avc:  denied  { read } for  pid=7988 comm="syz.5.511" dev="nsfs" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  112.175848][   T42] audit: type=1400 audit(1785627993.943:2475): avc:  denied  { open } for  pid=7988 comm="syz.5.511" path="net:[4026533198]" dev="nsfs" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  112.183437][ T7994] netlink: 'syz.1.512': attribute type 10 has an invalid length.
[  112.199180][ T7994] team0 (unregistering): Port device team_slave_0 removed
[  112.202915][   T42] audit: type=1400 audit(1785627993.993:2476): avc:  denied  { create } for  pid=7996 comm="syz.5.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  112.210952][ T7994] team0 (unregistering): Port device team_slave_1 removed
[  112.239485][   T42] audit: type=1400 audit(1785627994.003:2477): avc:  denied  { create } for  pid=7996 comm="syz.5.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  112.242890][ T7998] ufs: You didn't specify the type of your ufs filesystem
[  112.242890][ T7998] 
[  112.242890][ T7998] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  112.242890][ T7998] 
[  112.242890][ T7998] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  112.245746][   T42] audit: type=1400 audit(1785627994.003:2478): avc:  denied  { write } for  pid=7996 comm="syz.5.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  112.321447][ T8006] tipc: Enabling <eth:lo> not permitted
[  112.324172][ T8006] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  112.413297][ T8021] netlink: 'syz.5.517': attribute type 23 has an invalid length.
[  113.375360][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  113.383320][ T8074] batadv0: entered promiscuous mode
[  113.389109][ T8074] macsec1: entered promiscuous mode
[  113.391085][ T8074] macsec1: entered allmulticast mode
[  113.392795][ T8074] batadv0: entered allmulticast mode
[  113.395390][ T8074] 8021q: adding VLAN 0 to HW filter on device macsec1
[  113.398332][ T8074] batadv0: left allmulticast mode
[  113.401269][ T8074] batadv0: left promiscuous mode
[  113.596282][ T8081] netlink: 44 bytes leftover after parsing attributes in process `syz.1.535'.
[  113.651842][ T8088] netlink: 'syz.1.537': attribute type 7 has an invalid length.
[  113.786650][ T8097] netlink: 104 bytes leftover after parsing attributes in process `syz.0.540'.
[  114.205326][ T8130] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  114.225054][ T8130] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  114.330543][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'.
[  114.335164][ T8143] bond1: (slave veth0_to_bond): Releasing backup interface
[  114.371777][ T8142] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.546689][ T8160] netlink: 'syz.0.556': attribute type 1 has an invalid length.
[  114.568826][ T8160] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.591798][ T8160] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  114.650821][ T8173] ptrace attach of "/syz-executor exec"[6181] was attempted by ""[8173]
[  114.702978][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'.
[  114.742526][ T8183] netlink: 872 bytes leftover after parsing attributes in process `syz.0.563'.
[  114.746570][ T8183] netlink: 872 bytes leftover after parsing attributes in process `syz.0.563'.
[  114.895884][ T8191] netlink: 'syz.4.566': attribute type 8 has an invalid length.
[  115.108506][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'.
[  116.260676][ T8229] syz.4.576 (8229): drop_caches: 2
[  116.393291][ T8243] i2c i2c-0: delete_device: Can't parse I2C address
[  117.327760][   T42] kauditd_printk_skb: 313 callbacks suppressed
[  117.327777][   T42] audit: type=1400 audit(1785627999.113:2792): avc:  denied  { bpf } for  pid=8266 comm="syz.4.589" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  117.340641][   T42] audit: type=1400 audit(1785627999.123:2793): avc:  denied  { perfmon } for  pid=8266 comm="syz.4.589" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  117.347472][   T42] audit: type=1400 audit(1785627999.123:2794): avc:  denied  { prog_run } for  pid=8266 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  117.350231][ T8267] netlink: 'syz.4.589': attribute type 10 has an invalid length.
[  117.357590][ T8267] syz_tun: entered promiscuous mode
[  117.366388][ T8267] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  117.386941][   T42] audit: type=1400 audit(1785627999.173:2795): avc:  denied  { map_create } for  pid=8268 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  117.396289][   T42] audit: type=1400 audit(1785627999.173:2796): avc:  denied  { map_read map_write } for  pid=8268 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  117.410236][ T8269] __nla_validate_parse: 1 callbacks suppressed
[  117.410253][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'.
[  117.421476][   T42] audit: type=1400 audit(1785627999.213:2797): avc:  denied  { create } for  pid=8270 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  117.430735][   T42] audit: type=1400 audit(1785627999.223:2798): avc:  denied  { ioctl } for  pid=8270 comm="syz.4.591" path="socket:[24227]" dev="sockfs" ino=24227 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  117.440623][ T8269] hsr_slave_1 (unregistering): left promiscuous mode
[  117.443025][   T42] audit: type=1400 audit(1785627999.233:2799): avc:  denied  { mmap_zero } for  pid=8270 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  117.452899][   T42] audit: type=1400 audit(1785627999.243:2800): avc:  denied  { allowed } for  pid=8270 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  117.460481][   T42] audit: type=1400 audit(1785627999.253:2801): avc:  denied  { map } for  pid=8270 comm="syz.4.591" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  117.517211][ T8274] netlink: 'syz.0.592': attribute type 1 has an invalid length.
[  117.527980][ T8274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.592687][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.598910][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.647522][ T8287] netlink: 92 bytes leftover after parsing attributes in process `syz.4.596'.
[  117.726995][ T8291] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  117.767019][ T8295] netlink: 'syz.4.599': attribute type 1 has an invalid length.
[  117.769970][ T8295] netlink: 'syz.4.599': attribute type 2 has an invalid length.
[  117.982518][ T8304] gadgetfs: bound to dummy_udc driver
[  118.205509][ T8314] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  118.219663][   T40] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  118.222715][    C2] gadgetfs: connected
[  118.226063][   T40] gadgetfs: disconnected
[  118.335147][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'.
[  118.341424][ T8319] netlink: 'syz.1.607': attribute type 27 has an invalid length.
[  118.353188][ T8319] bond0: (slave bond_slave_1): Releasing backup interface
[  118.369827][    C2] gadgetfs: connected
[  118.373010][   T40] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  118.376446][   T40] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  118.381008][   T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.387599][    C2] gadgetfs: configuration #1
[  118.730452][ T8324] netlink: 76 bytes leftover after parsing attributes in process `syz.0.609'.
[  118.733720][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'.
[  118.773867][ T8304] gadgetfs: suspended from state 3
[  118.779812][ T8304] gadgetfs: disconnected
[  118.781826][ T6215] usb 5-1: USB disconnect, device number 8
[  118.862278][ T8329] could not allocate digest TFM handle sha256-avx
[  119.049737][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.619'.
[  119.200634][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.624'.
[  119.227144][ T8366] overlayfs: failed to clone upperpath
[  119.234569][ T8374] netlink: 'syz.1.625': attribute type 29 has an invalid length.
[  119.239540][ T8374] netlink: 'syz.1.625': attribute type 29 has an invalid length.
[  119.245157][ T8374] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  119.417869][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'.
[  119.494381][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'.
[  119.515104][ T8399] binfmt_misc: register: failed to install interpreter file ./file1
[  120.107426][ T8409] ipt_rpfilter: unknown options
[  120.198283][ T8411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51712 sclass=netlink_route_socket pid=8411 comm=syz.4.637
[  120.396182][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  120.576956][ T8437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8437 comm=syz.1.646
[  120.587491][ T8438] netlink: 'syz.1.646': attribute type 1 has an invalid length.
[  120.601913][ T8438] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.648570][ T8447] xt_CT: You must specify a L4 protocol and not use inversions on it
[  120.657098][ T8447] tls_set_device_offload: netdev not found
[  120.684127][ T8450] bond2: (slave syz_tun): Removing an active aggregator
[  120.690495][   T12] bond2: Warning: Found an uninitialized port
[  120.694614][ T8450] bond2: (slave syz_tun): Releasing backup interface
[  120.704844][ T8450] bridge_slave_0: left allmulticast mode
[  120.707677][ T8450] bridge_slave_0: left promiscuous mode
[  120.710784][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.717835][ T8450] bridge_slave_1: left allmulticast mode
[  120.720919][ T8450] bridge_slave_1: left promiscuous mode
[  120.722920][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.734591][ T8450] bond0: (slave bond_slave_0): Releasing backup interface
[  120.751006][ T8450] bond0: (slave bond_slave_1): Releasing backup interface
[  120.772117][ T8450] team0: Port device team_slave_0 removed
[  120.787896][ T8450] team0: Port device team_slave_1 removed
[  120.792924][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.795445][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.803874][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.806881][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.811806][ T8450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  120.902305][ T8468] (syz.5.647,8468,2):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  120.906788][ T8468] (syz.5.647,8468,2):ocfs2_fill_super:1177 ERROR: status = -22
[  121.502536][ T5637] vcan0 speed is unknown, defaulting to 1000
[  121.666506][ T8514] netlink: 'syz.5.665': attribute type 1 has an invalid length.
[  121.777328][ T8522] netlink: 'syz.5.666': attribute type 11 has an invalid length.
[  121.829985][ T5843] usb 6-1: USB disconnect, device number 6
[  122.153122][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.158373][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.162937][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.171851][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.180840][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.297116][ T8549] 8021q: VLANs not supported on gre0
[  122.394999][   T42] kauditd_printk_skb: 239 callbacks suppressed
[  122.395016][   T42] audit: type=1400 audit(1785628004.183:3041): avc:  denied  { create } for  pid=8548 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  122.408327][   T42] audit: type=1400 audit(1785628004.193:3042): avc:  denied  { getopt } for  pid=8548 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  122.423130][   T42] audit: type=1400 audit(1785628004.213:3043): avc:  denied  { bpf } for  pid=8548 comm="syz.4.677" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  122.466121][ T8556] __nla_validate_parse: 7 callbacks suppressed
[  122.466140][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'.
[  122.470452][ T8534] vcan0 speed is unknown, defaulting to 1000
[  122.479787][ T5637] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  122.512383][   T42] audit: type=1400 audit(1785628004.303:3044): avc:  denied  { read } for  pid=5448 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  122.556852][   T42] audit: type=1400 audit(1785628004.343:3045): avc:  denied  { create } for  pid=8559 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  122.573661][   T42] audit: type=1400 audit(1785628004.353:3046): avc:  denied  { getopt } for  pid=8559 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  122.585332][ T5813] bridge_slave_1: left allmulticast mode
[  122.587620][ T5813] bridge_slave_1: left promiscuous mode
[  122.589717][   T42] audit: type=1400 audit(1785628004.363:3047): avc:  denied  { search } for  pid=5448 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.590397][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.605947][ T5813] bridge_slave_0: left allmulticast mode
[  122.606490][   T42] audit: type=1400 audit(1785628004.363:3048): avc:  denied  { search } for  pid=5448 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.609492][ T5813] bridge_slave_0: left promiscuous mode
[  122.614582][   T42] audit: type=1400 audit(1785628004.363:3049): avc:  denied  { search } for  pid=5448 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.614608][   T42] audit: type=1400 audit(1785628004.363:3050): avc:  denied  { read } for  pid=5448 comm="dhcpcd" name="n40" dev="tmpfs" ino=4043 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  122.633306][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.652177][ T5637] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  122.655776][ T5637] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  122.660211][ T5637] usb 10-1: config 0 interface 0 has no altsetting 0
[  122.665278][ T5637] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  122.669081][ T5637] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  122.674174][ T5637] usb 10-1: Product: syz
[  122.676112][ T5637] usb 10-1: Manufacturer: syz
[  122.678170][ T5637] usb 10-1: SerialNumber: syz
[  122.700031][ T5637] usb 10-1: config 0 descriptor??
[  122.705257][ T5637] hub 10-1:0.0: bad descriptor, ignoring hub
[  122.707959][ T5637] hub 10-1:0.0: probe with driver hub failed with error -5
[  122.721349][ T5637] usb 10-1: selecting invalid altsetting 0
[  122.825910][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.834696][ T5813] bond0 (unregistering): Released all slaves
[  122.866598][ T5813] bond1 (unregistering): Released all slaves
[  122.881093][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'.
[  122.989557][ T8580] netlink: 'syz.4.685': attribute type 1 has an invalid length.
[  122.992393][ T8580] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.685'.
[  122.995665][ T8580] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.685'.
[  122.997360][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.015691][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.118794][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10
[  123.230735][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.233435][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.235898][ T8534] bridge_slave_0: entered allmulticast mode
[  123.243146][ T8534] bridge_slave_0: entered promiscuous mode
[  123.263979][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.270658][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.276652][ T8534] bridge_slave_1: entered allmulticast mode
[  123.283975][ T8534] bridge_slave_1: entered promiscuous mode
[  123.298221][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.329889][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.357773][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11
[  123.365170][ T8534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.375736][ T8534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.449626][ T5843] usb 10-1: USB disconnect, device number 3
[  123.500817][ T8534] team0: Port device team_slave_0 added
[  123.512346][ T8534] team0: Port device team_slave_1 added
[  123.565394][ T5813] hsr_slave_0: left promiscuous mode
[  123.567894][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.571746][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.747420][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.749883][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.758185][ T8534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.762688][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.764974][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.773016][ T8534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.800200][ T8534] hsr_slave_0: entered promiscuous mode
[  123.803502][ T8534] hsr_slave_1: entered promiscuous mode
[  123.806511][ T8534] debugfs: 'hsr0' already exists in 'hsr'
[  123.808949][ T8534] Cannot create hsr debugfs directory
[  123.951789][ T5811] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.962106][ T5811] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.964738][ T5811] netdevsim netdevsim10 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.967698][ T5811] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.968864][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'.
[  124.002813][ T8620] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.011818][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12
[  124.028762][ T8620] bond3: (slave hsr0): The slave device specified does not support setting the MAC address
[  124.035644][ T8620] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  124.041477][ T8620] bond3: (slave hsr0): Error -22 calling dev_set_mtu
[  124.158308][ T8534] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  124.177048][ T8534] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  124.180669][ T8534] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  124.188813][ T8534] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  124.198476][ T8534] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  124.209810][ T8534] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  124.216592][ T8534] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  124.222844][ T5745] Bluetooth: hci0: command tx timeout
[  124.239701][ T8534] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  124.298750][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13
[  124.338373][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.351134][ T8534] 8021q: adding VLAN 0 to HW filter on device team0
[  124.360948][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.363471][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.374205][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.376600][ T7484] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.478039][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.697'.
[  124.643003][ T8695] bond0: (slave syz_tun): Releasing backup interface
[  124.648454][ T8700] tmpfs: Unknown parameter '00000000000000000004'
[  124.655315][ T8695] bridge_slave_0: left allmulticast mode
[  124.658121][ T8695] bridge_slave_0: left promiscuous mode
[  124.662817][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.671884][ T8695] bridge_slave_1: left allmulticast mode
[  124.674421][ T8695] bridge_slave_1: left promiscuous mode
[  124.677003][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.688436][ T8695] bond0: (slave bond_slave_0): Releasing backup interface
[  124.702115][ T8695] bond0: (slave bond_slave_1): Releasing backup interface
[  124.720914][ T8695] team0: Port device team_slave_0 removed
[  124.729849][ T8695] team0: Port device team_slave_1 removed
[  124.733004][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.736028][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.742214][ T8695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.745349][ T8695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.750409][ T8695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  124.758447][ T8702] netlink: 'syz.0.705': attribute type 20 has an invalid length.
[  124.762641][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'.
[  124.780548][ T8702] netlink: 'syz.0.705': attribute type 20 has an invalid length.
[  124.783186][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'.
[  124.866511][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[  124.903260][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.909754][ T5813] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.914006][ T5813] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.930086][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.936175][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.093131][ T8534] veth0_vlan: entered promiscuous mode
[  125.100574][ T8534] veth1_vlan: entered promiscuous mode
[  125.119419][ T5637] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  125.130406][ T8534] veth0_macvtap: entered promiscuous mode
[  125.136509][ T8534] veth1_macvtap: entered promiscuous mode
[  125.152892][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.162138][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.210690][ T5784] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.214303][ T5784] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.225435][ T5784] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.232174][ T5784] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.235951][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'.
[  125.280487][ T7083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.280855][ T5637] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.283874][ T7083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.291507][ T5637] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  125.298367][ T5637] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  125.303319][ T5637] usb 10-1: Product: syz
[  125.305158][ T5637] usb 10-1: Manufacturer: syz
[  125.307155][ T5637] usb 10-1: SerialNumber: syz
[  125.323874][ T7083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.327182][ T7083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.412704][ T8734] usb usb1: usbfs: process 8734 (syz.6.676) did not claim interface 0 before use
[  125.501435][ T8739] fuse: Bad value for 'fd'
[  125.535591][ T5637] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  125.786861][    C3] usblp0: nonzero write bulk status received: -71
[  125.793924][ T6235] usb 10-1: USB disconnect, device number 4
[  125.803925][ T6235] usblp0: removed
[  126.078835][ T8808] unsupported nla_type 4111
[  126.102815][ T8808] vcan0 speed is unknown, defaulting to 1000
[  126.299617][ T5745] Bluetooth: hci0: command tx timeout
[  126.377350][ T8832] veth0_vlan: entered allmulticast mode
[  126.412645][ T8833] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  128.381206][ T5745] Bluetooth: hci0: command tx timeout
[  130.459719][ T5745] Bluetooth: hci0: command tx timeout
[  132.952932][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  134.788403][   T42] kauditd_printk_skb: 312 callbacks suppressed
[  134.788417][   T42] audit: type=1400 audit(1785628016.573:3363): avc:  denied  { search } for  pid=8838 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.798189][   T42] audit: type=1400 audit(1785628016.573:3364): avc:  denied  { search } for  pid=8838 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.805208][   T42] audit: type=1400 audit(1785628016.573:3365): avc:  denied  { search } for  pid=8838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.812495][   T42] audit: type=1400 audit(1785628016.573:3366): avc:  denied  { search } for  pid=8838 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.819723][   T42] audit: type=1400 audit(1785628016.583:3367): avc:  denied  { read } for  pid=8839 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.826516][   T42] audit: type=1400 audit(1785628016.583:3368): avc:  denied  { read open } for  pid=8839 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.834501][   T42] audit: type=1400 audit(1785628016.583:3369): avc:  denied  { getattr } for  pid=8839 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.842028][   T42] audit: type=1400 audit(1785628016.593:3370): avc:  denied  { write } for  pid=8838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.850495][   T42] audit: type=1400 audit(1785628016.593:3371): avc:  denied  { add_name } for  pid=8838 comm="dhcpcd-run-hook" name="resolv.conf.eth10.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.857917][   T42] audit: type=1400 audit(1785628016.593:3372): avc:  denied  { create } for  pid=8838 comm="dhcpcd-run-hook" name="resolv.conf.eth10.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  147.854814][   T42] kauditd_printk_skb: 13 callbacks suppressed
[  147.854832][   T42] audit: type=1400 audit(1785628029.643:3386): avc:  denied  { create } for  pid=8862 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  147.867149][ T8867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8867 comm=syz.5.736
[  147.873977][   T42] audit: type=1400 audit(1785628029.643:3387): avc:  denied  { allowed } for  pid=8862 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  147.882297][   T42] audit: type=1400 audit(1785628029.653:3388): avc:  denied  { read write } for  pid=8864 comm="syz.6.735" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  147.892356][   T42] audit: type=1400 audit(1785628029.653:3389): avc:  denied  { open } for  pid=8864 comm="syz.6.735" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  147.902088][   T42] audit: type=1400 audit(1785628029.653:3390): avc:  denied  { mounton } for  pid=8864 comm="syz.6.735" path="/5/file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  147.912074][   T42] audit: type=1400 audit(1785628029.653:3391): avc:  denied  { create } for  pid=8862 comm="syz.0.734" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  147.921262][   T42] audit: type=1400 audit(1785628029.653:3392): avc:  denied  { name_bind } for  pid=8862 comm="syz.0.734" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  147.932579][   T42] audit: type=1400 audit(1785628029.653:3393): avc:  denied  { ioctl } for  pid=8862 comm="syz.0.734" path="socket:[25348]" dev="sockfs" ino=25348 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  147.943052][   T42] audit: type=1400 audit(1785628029.653:3394): avc:  denied  { ioctl } for  pid=8862 comm="syz.0.734" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26742 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  147.953973][ T8868] Invalid ioctl command number [0 >= 10]
[  147.954790][   T42] audit: type=1400 audit(1785628029.663:3395): avc:  denied  { create } for  pid=8865 comm="syz.5.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  148.277236][ T8902] Set syz1 is full, maxelem 2 reached
[  148.309802][ T6331] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  148.469549][ T6331] usb 11-1: Using ep0 maxpacket: 32
[  148.478248][ T6331] usb 11-1: unable to get BOS descriptor or descriptor too short
[  148.489683][ T6331] usb 11-1: string descriptor 0 read error: -22
[  148.499503][ T6331] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  148.503346][ T6331] usb 11-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3
[  148.535067][ T6331] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  148.543108][ T6331] dw2102: su3000_power_ctrl: 1, initialized 0
[  148.551338][ T6331] dvb-usb: bulk message failed: -22 (2/0)
[  148.578209][ T6331] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  148.590173][ T6331] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  148.600240][ T6331] usb 11-1: media controller created
[  148.602669][ T6331] dvb-usb: bulk message failed: -22 (6/0)
[  148.604666][ T6331] dw2102: i2c transfer failed.
[  148.606372][ T6331] dvb-usb: bulk message failed: -22 (6/0)
[  148.608251][ T6331] dw2102: i2c transfer failed.
[  148.611438][ T6331] dvb-usb: bulk message failed: -22 (6/0)
[  148.616017][ T6331] dw2102: i2c transfer failed.
[  148.618843][ T6331] dvb-usb: bulk message failed: -22 (6/0)
[  148.622068][ T6331] dw2102: i2c transfer failed.
[  148.623652][ T6331] dvb-usb: bulk message failed: -22 (6/0)
[  148.625467][ T6331] dw2102: i2c transfer failed.
[  148.626973][ T6331] dvb-usb: bulk message failed: -22 (6/0)
[  148.628771][ T6331] dw2102: i2c transfer failed.
[  148.630805][ T6331] dvb-usb: MAC address: 02:02:02:02:02:02
[  148.637650][ T6331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  148.656351][ T6331] dvb-usb: bulk message failed: -22 (3/0)
[  148.658982][ T6331] dw2102: command 0x0e transfer failed.
[  148.662135][ T6331] dvb-usb: bulk message failed: -22 (3/0)
[  148.663976][ T6331] dw2102: command 0x0e transfer failed.
[  148.954089][ T8959] __nla_validate_parse: 7 callbacks suppressed
[  148.954107][ T8959] netlink: 256 bytes leftover after parsing attributes in process `syz.5.760'.
[  148.961579][ T8959] unsupported nlmsg_type 40
[  148.971141][ T6331] dvb-usb: bulk message failed: -22 (3/0)
[  148.973807][ T6331] dw2102: command 0x0e transfer failed.
[  148.977300][ T6331] dvb-usb: bulk message failed: -22 (3/0)
[  148.980076][ T6331] dw2102: command 0x0e transfer failed.
[  148.982565][ T6331] dvb-usb: bulk message failed: -22 (1/0)
[  148.985907][ T6331] dw2102: command 0x51 transfer failed.
[  149.015182][ T6331] DVB: Unable to find symbol ds3000_attach()
[  149.026804][ T6331] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  149.099502][ T6331] rc_core: IR keymap rc-su3000 not found
[  149.103405][ T6331] Registered IR keymap rc-empty
[  149.110094][ T6331] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0
[  149.117929][ T6331] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input8
[  149.123767][ T8968] netlink: 484 bytes leftover after parsing attributes in process `syz.0.763'.
[  149.150819][ T6331] dvb-usb: schedule remote query interval to 150 msecs.
[  149.154034][ T6331] dw2102: su3000_power_ctrl: 0, initialized 1
[  149.156578][ T6331] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  149.168404][ T6331] usb 11-1: USB disconnect, device number 2
[  149.230052][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  149.239560][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'.
[  149.244371][ T6331] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  149.292137][ T8977] input: syz1 as /devices/virtual/input/input9
[  149.375475][ T8981] netlink: 'syz.5.767': attribute type 58 has an invalid length.
[  149.404233][ T8981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8981 comm=syz.5.767
[  149.412994][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.415908][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.421189][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.424259][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.427282][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.433073][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.437908][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.441594][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.444708][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.447807][ T5637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  149.456350][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'.
[  149.462471][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'.
[  149.467353][ T5637] hid-generic 0000:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [Á“ƽZÄæwÇý[baÿ–é|\rnÀ)A¼#6”oÒ¯ô?•ða Iü¸äãs„Ö5hVõ3ñ®(;éò
[  149.467353][ T5637] ãÑ�ƒPÔ$zÉ·‡X$©·à˜w[SÖì–ÀRìÑeÑzx—ÞuñS r»œÏláì[µ5l'˜ZC@] on 
[  149.477707][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'.
[  149.557732][ T8984] fido_id[8984]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  149.571213][ T6331] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  149.655798][ T8988] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  149.674139][ T8990] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  149.740743][ T6331] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[  149.748518][ T6331] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  149.759362][ T6331] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  149.762483][ T6331] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  149.765321][ T6331] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.774017][ T8953] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  149.777505][ T6331] cyberjack 11-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  149.783209][ T6331] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  149.979744][ T6235] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  150.005747][ T8953] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  150.015497][ T8953] bond1 (unregistering): Released all slaves
[  150.084269][ T5814] usb 11-1: USB disconnect, device number 3
[  150.098115][ T5814] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  150.108790][ T5814] cyberjack 11-1:1.0: device disconnected
[  150.131086][ T6235] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  150.149429][ T6235] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.153422][ T6235] usb 10-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  150.158310][ T6235] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  150.165507][ T6235] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  150.169786][ T6235] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.173616][ T6235] usb 10-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  150.177665][ T6235] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  150.185520][ T6235] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  150.190499][ T6235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.193689][ T6235] usb 10-1: Product: syz
[  150.195438][ T6235] usb 10-1: Manufacturer: syz
[  150.197368][ T6235] usb 10-1: SerialNumber: syz
[  150.215428][ T6235] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected
[  150.226759][ T6235] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  150.237176][ T6235] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  150.412055][ T8992] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb
[  150.420192][ T6235] usb 10-1: USB disconnect, device number 5
[  150.434439][ T6235] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  150.445149][ T6235] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  150.450703][ T6235] ti_usb_3410_5052 10-1:2.0: device disconnected
[  150.665670][ T8996] netlink: 'syz.6.771': attribute type 2 has an invalid length.
[  150.819682][ T8998] netlink: 'syz.6.772': attribute type 5 has an invalid length.
[  151.053618][ T9011] 9pnet_virtio: no channels available for device syz
[  151.059900][ T9010] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  151.303932][ T9031] kernel read not supported for file /sg0 (pid: 9031 comm: syz.6.783)
[  151.334293][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.784'.
[  151.548794][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.786'.
[  151.554949][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.6.786'.
[  151.692876][ T9044] ip6t_srh: unknown srh invflags 4000
[  151.886306][ T9052] netlink: 'syz.6.791': attribute type 39 has an invalid length.
[  152.465783][ T9091] fuse: Bad value for 'fd'
[  152.615271][ T9091] SELinux: failed to load policy
[  152.744516][ T9133] sch_tbf: peakrate 6 is lower than or equals to rate 666 !
[  152.947444][   T42] kauditd_printk_skb: 344 callbacks suppressed
[  152.947461][   T42] audit: type=1400 audit(1786676610.728:3740): avc:  denied  { kexec_image_load } for  pid=9151 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  152.961969][   T42] audit: type=1400 audit(1786676610.748:3741): avc:  denied  { setopt } for  pid=9151 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  152.963518][ T9153] overlayfs: failed to resolve './file2': -2
[  152.972170][ T9152] overlayfs: failed to resolve './file2': -2
[  152.974644][   T42] audit: type=1400 audit(1786676610.748:3742): avc:  denied  { accept } for  pid=9151 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  152.986012][   T42] audit: type=1400 audit(1786676610.748:3743): avc:  denied  { write } for  pid=9151 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  152.995721][   T42] audit: type=1400 audit(1786676610.748:3744): avc:  denied  { read } for  pid=9151 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  153.003797][ T9155] syzkaller1: tun_chr_ioctl cmd 1074025677
[  153.005839][ T9155] syzkaller1: linktype set to 776
[  153.026152][   T42] audit: type=1400 audit(1786676610.808:3745): avc:  denied  { append } for  pid=9154 comm="syz.5.818" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  153.036492][   T42] audit: type=1400 audit(1786676610.818:3746): avc:  denied  { name_bind } for  pid=9156 comm="syz.0.819" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  153.046398][   T42] audit: type=1400 audit(1786676610.818:3747): avc:  denied  { node_bind } for  pid=9156 comm="syz.0.819" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  153.119299][ T9161] openvswitch: netlink: Actions may not be safe on all matching packets
[  153.164364][   T42] audit: type=1400 audit(1786676610.948:3748): avc:  denied  { read } for  pid=9165 comm="syz.6.823" name="v4l-subdev0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  153.179774][   T42] audit: type=1400 audit(1786676610.948:3749): avc:  denied  { open } for  pid=9165 comm="syz.6.823" path="/dev/v4l-subdev0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  153.328683][ T9179] input: syz0 as /devices/virtual/input/input10
[  153.389431][ T9185] openvswitch: netlink: Flow actions attr not present in new flow.
[  153.392838][ T9185] batadv_slave_1: entered promiscuous mode
[  153.398078][ T9184] batadv_slave_1: left promiscuous mode
[  153.613597][ T9203] SELinux: failed to load policy
[  153.642620][ T9211] trusted_key: encrypted_key: keylen parameter is missing
[  153.954897][ T5890] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  154.087719][ T5890] usb 10-1: device descriptor read/64, error -71
[  154.345254][ T5890] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  154.489838][ T5890] usb 10-1: device descriptor read/64, error -71
[  154.495432][ T9254] __nla_validate_parse: 11 callbacks suppressed
[  154.495448][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.849'.
[  154.566901][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.849'.
[  154.569991][ T9256] nbd: device at index 64 is going down
[  154.620099][ T5890] usb usb10-port1: attempt power cycle
[  154.672512][ T8895] udevd[8895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  154.679071][ T8895] udevd[8895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  154.690085][ T9269] 9pnet_virtio: no channels available for device syz
[  154.694148][ T9269] overlayfs: failed to clone upperpath
[  154.702897][ T9269] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  154.896362][ T9288] loop9: detected capacity change from 0 to 7
[  154.984313][ T5890] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  155.005711][ T5890] usb 10-1: device descriptor read/8, error -71
[  155.123541][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'.
[  155.262862][ T5890] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  155.276353][ T9288] Dev loop9: unable to read RDB block 7
[  155.283699][ T9288]  loop9: unable to read partition table
[  155.285720][ T9288] loop9: partition table beyond EOD, truncated
[  155.287792][ T9288] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ	œëÜ%õ«`Éæ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  155.304474][ T5890] usb 10-1: device descriptor read/8, error -71
[  155.368750][ T9316] syzkaller0: entered promiscuous mode
[  155.370912][ T9316] syzkaller0: entered allmulticast mode
[  155.380246][ T9318] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'.
[  155.404947][ T9318] fuse: fd is not a fuse device
[  155.417205][ T5890] usb usb10-port1: unable to enumerate USB device
[  155.466242][ T9327] netlink: 'syz.4.869': attribute type 10 has an invalid length.
[  155.475081][ T9327] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  155.812195][ T9373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.881'.
[  155.904531][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.882'.
[  155.941936][ T9383] CIFS: Unable to determine destination address
[  156.009619][ T9387] SET target dimension over the limit!
[  156.113424][ T9399] xt_recent: Unsupported userspace flags (000000b2)
[  156.600244][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'.
[  156.626931][ T9413] hsr_slave_1 (unregistering): left promiscuous mode
[  156.826896][ T5814] usb 11-1: new low-speed USB device number 4 using dummy_hcd
[  156.959006][ T5814] usb 11-1: device descriptor read/64, error -71
[  156.978023][ T9431] netlink: 'syz.4.899': attribute type 10 has an invalid length.
[  157.110451][ T9450] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  157.163722][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.5.906'.
[  157.205464][ T5814] usb 11-1: new low-speed USB device number 5 using dummy_hcd
[  157.338971][ T5814] usb 11-1: device descriptor read/64, error -71
[  157.454024][ T5814] usb usb11-port1: attempt power cycle
[  157.532248][ T9472] netlink: 68 bytes leftover after parsing attributes in process `syz.5.913'.
[  157.690720][   T40] libceph: connect (1)[c::]:6789 error -101
[  157.702064][   T40] libceph: mon0 (1)[c::]:6789 connect error
[  157.706422][   T40] libceph: connect (1)[c::]:6789 error -101
[  157.709595][   T40] libceph: mon0 (1)[c::]:6789 connect error
[  157.784741][ T9476] ceph: No mds server is up or the cluster is laggy
[  157.824872][ T5814] usb 11-1: new low-speed USB device number 6 using dummy_hcd
[  157.843689][ T5814] usb 11-1: device descriptor read/8, error -71
[  158.010257][ T9487] vcan0 speed is unknown, defaulting to 1000
[  158.097603][ T5814] usb 11-1: new low-speed USB device number 7 using dummy_hcd
[  158.118794][ T5814] usb 11-1: device descriptor read/8, error -71
[  158.160812][ T1135] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  158.162077][   T42] kauditd_printk_skb: 238 callbacks suppressed
[  158.162092][   T42] audit: type=1400 audit(1786676615.808:3988): avc:  denied  { create } for  pid=9495 comm="syz.0.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  158.166332][ T1135] ata1: failed to read log page 10h (errno=-5)
[  158.178742][ T1135] ata1.00: exception Emask 0x1 SAct 0x40 SErr 0x0 action 0x0
[  158.183821][ T1135] ata1.00: irq_stat 0x40000000
[  158.185361][ T1135] ata1.00: failed command: WRITE FPDMA QUEUED
[  158.189696][ T1135] ata1.00: cmd 61/58:30:de:08:10/00:00:00:00:00/40 tag 6 ncq dma 45056 out
[  158.189696][ T1135]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  158.204761][ T1135] ata1.00: status: { DRDY }
[  158.211677][ T9506] /dev/sg0: Can't lookup blockdev
[  158.212181][   T42] audit: type=1400 audit(1786676615.857:3989): avc:  denied  { mounton } for  pid=9503 comm="syz.5.921" path="/102/bus" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  158.215707][ T1135] ata1.00: configured for UDMA/100
[  158.222229][ T1135] ata1: EH complete
[  158.228945][   T42] audit: type=1400 audit(1786676615.867:3990): avc:  denied  { name_bind } for  pid=9496 comm="syz.4.920" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  158.232395][ T5814] usb usb11-port1: unable to enumerate USB device
[  158.303130][   T42] audit: type=1400 audit(1786676615.935:3991): avc:  denied  { read } for  pid=9516 comm="syz.5.924" dev="nsfs" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  158.310965][   T42] audit: type=1400 audit(1786676615.945:3992): avc:  denied  { open } for  pid=9516 comm="syz.5.924" path="net:[4026533198]" dev="nsfs" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  158.321071][   T42] audit: type=1400 audit(1786676615.945:3993): avc:  denied  { create } for  pid=9516 comm="syz.5.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  158.329062][   T42] audit: type=1400 audit(1786676615.945:3994): avc:  denied  { create } for  pid=9518 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.337060][   T42] audit: type=1400 audit(1786676615.945:3995): avc:  denied  { write } for  pid=9518 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.338124][ T9517] vlan2: entered promiscuous mode
[  158.344945][   T42] audit: type=1400 audit(1786676615.945:3996): avc:  denied  { nlmsg_write } for  pid=9518 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.348162][ T9517] hsr0: entered promiscuous mode
[  158.353607][   T42] audit: type=1400 audit(1786676615.964:3997): avc:  denied  { watch watch_reads } for  pid=9518 comm="syz.4.925" path="/241" dev="tmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  158.356594][ T9517] vlan2: entered allmulticast mode
[  158.365256][ T9517] hsr0: entered allmulticast mode
[  158.366930][ T9517] hsr_slave_0: entered allmulticast mode
[  158.368528][ T9517] hsr_slave_1: entered allmulticast mode
[  158.371654][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'.
[  158.418083][ T9524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  158.430825][ T9524] befs: (nullb0): No write support. Marking filesystem read-only
[  158.442415][ T9524] befs: (nullb0): invalid magic header
[  158.555384][ T9534] netlink: 'syz.4.929': attribute type 1 has an invalid length.
[  158.586848][ T9534] bond4: entered promiscuous mode
[  158.590300][ T9534] 8021q: adding VLAN 0 to HW filter on device bond4
[  158.605041][ T9534] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  158.610168][ T9534] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  158.614299][ T9534] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  158.625765][ T9534] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  158.654377][ T9539] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  158.658374][ T9539] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  158.663523][ T9539] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  158.767785][ T9548] xfs: Unknown parameter 'norecovery-vsock'
[  158.937574][ T5890] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  158.967979][ T6331] IPVS: starting estimator thread 0...
[  159.037678][ T9578] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0
[  159.062128][ T9572] IPVS: using max 46 ests per chain, 110400 per kthread
[  159.091915][ T5890] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  159.095421][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  159.098383][ T5890] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  159.102230][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0
[  159.109093][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  159.112226][ T5890] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  159.116738][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0
[  159.119665][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  159.123982][ T5890] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  159.127505][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0
[  159.130535][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  159.134111][ T5890] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  159.137543][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0
[  159.140384][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  159.143498][ T5890] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  159.146885][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0
[  159.149747][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  159.153285][ T5890] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  159.157445][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0
[  159.160301][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  159.163236][ T5890] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  159.167378][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0
[  159.170454][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  159.173504][ T5890] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  159.176903][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0
[  159.181012][ T5890] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  159.184553][ T5890] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  159.187305][ T5890] usb 10-1: Product: syz
[  159.188648][ T5890] usb 10-1: Manufacturer: syz
[  159.190138][ T5890] usb 10-1: SerialNumber: syz
[  159.190546][ T9590] fuse: fd is not a fuse device
[  159.195383][ T5890] usb 10-1: config 0 descriptor??
[  159.202931][ T5890] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[  159.204774][ T9590] ip6erspan0: entered allmulticast mode
[  159.414123][ T6331] usb 10-1: USB disconnect, device number 10
[  159.426556][ T6331] yurex 10-1:0.0: USB YUREX #0 now disconnected
[  159.489368][ T9613] netlink: 'syz.0.952': attribute type 4 has an invalid length.
[  159.706897][ T9627] 9pnet_virtio: no channels available for device syz
[  159.721513][ T9627] input: syz0 as /devices/virtual/input/input11
[  159.765437][ T9631] __nla_validate_parse: 8 callbacks suppressed
[  159.765454][ T9631] netlink: 104 bytes leftover after parsing attributes in process `syz.6.959'.
[  159.817819][ T9638] veth0_to_bond: entered allmulticast mode
[  159.926306][ T9644] netlink: 184 bytes leftover after parsing attributes in process `syz.6.964'.
[  160.047812][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.119755][ T9663] netlink: 172 bytes leftover after parsing attributes in process `syz.0.970'.
[  160.209511][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  160.343300][ T9700] 9pnet_virtio: no channels available for device syz
[  160.904488][ T9726] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  161.020381][ T9676] vcan0 speed is unknown, defaulting to 1000
[  161.309002][ T9757] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.996'.
[  161.312876][ T9757] openvswitch: netlink: Message has 512 unknown bytes.
[  161.380349][ T9759] XFS (nbd5): SB validate failed with error -5.
[  161.495380][ T9774] bond0: entered promiscuous mode
[  161.497107][ T9774] bond_slave_0: entered promiscuous mode
[  161.499271][ T9774] bond_slave_1: entered promiscuous mode
[  161.509019][ T9774] bond0: left promiscuous mode
[  161.510857][ T9774] bond_slave_0: left promiscuous mode
[  161.513234][ T9774] bond_slave_1: left promiscuous mode
[  161.763042][ T9780] team0 (unregistering): Port device team_slave_0 removed
[  161.773707][ T9780] team0 (unregistering): Port device team_slave_1 removed
[  161.932251][ T9802] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  161.937459][ T9802] netlink: 'syz.6.1009': attribute type 4 has an invalid length.
[  161.946103][ T9802] netlink: 'syz.6.1009': attribute type 4 has an invalid length.
[  161.957666][ T9802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9802 comm=syz.6.1009
[  161.971893][ T9802] netlink: 'syz.6.1009': attribute type 21 has an invalid length.
[  162.056834][ T9812] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1013'.
[  162.073910][ T9812] bond1: Removing last ns target with arp_interval on
[  162.109596][ T9816] batadv_slave_1: entered promiscuous mode
[  162.114830][ T9814] batadv_slave_1: left promiscuous mode
[  162.173904][ T9822] rdma_op ffff888059a409f0 conn xmit_rdma 0000000000000000
[  162.241645][ T9827] x_tables: ip_tables: sctp.0 match: invalid size 296 (kernel) != (user) 344
[  162.246050][ T9827] netlink: 'syz.6.1018': attribute type 10 has an invalid length.
[  162.259996][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  162.263626][ T9827] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  162.270729][ T9827] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1018'.
[  162.285657][ T9827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.291910][ T9827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.296786][ T9827] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  162.303629][ T9827] bond0 (unregistering): Released all slaves
[  162.452413][ T9842] ISOFS: Unable to identify CD-ROM format.
[  162.687905][ T9851] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  162.723279][ T9854] 9pnet_virtio: no channels available for device syz
[  163.044551][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1031'.
[  163.048250][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1031'.
[  163.081740][   T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.086098][   T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.091148][   T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.099650][   T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.202766][ T9883] FAULT_INJECTION: forcing a failure.
[  163.202766][ T9883] name fail_futex, interval 1, probability 0, space 0, times 1
[  163.207405][ T9883] CPU: 3 UID: 0 PID: 9883 Comm: syz.5.1036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.207425][ T9883] Tainted: [L]=SOFTLOCKUP
[  163.207429][ T9883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.207448][ T9883] Call Trace:
[  163.207466][ T9883]  <TASK>
[  163.207470][ T9883]  dump_stack_lvl+0x100/0x190
[  163.207571][ T9883]  should_fail_ex.cold+0x5/0xa
[  163.207596][ T9883]  get_futex_key+0x1d2/0x14f0
[  163.207642][ T9883]  ? __pfx_get_futex_key+0x10/0x10
[  163.207665][ T9883]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  163.207713][ T9883]  ? hrtimer_try_to_cancel.part.0+0x194/0x600
[  163.207752][ T9883]  futex_wake+0xf4/0x5e0
[  163.207772][ T9883]  ? futex_wait+0x11e/0x370
[  163.207793][ T9883]  ? __pfx_futex_wake+0x10/0x10
[  163.207819][ T9883]  do_futex+0x2b2/0x440
[  163.207845][ T9883]  ? __pfx_do_futex+0x10/0x10
[  163.207868][ T9883]  ? ktime_get+0x22c/0x320
[  163.207883][ T9883]  ? lockdep_hardirqs_on+0x78/0x100
[  163.207899][ T9883]  __x64_sys_futex+0x34f/0x4d0
[  163.207917][ T9883]  ? __pfx___x64_sys_futex+0x10/0x10
[  163.207942][ T9883]  do_syscall_64+0x115/0x870
[  163.207961][ T9883]  ? clear_bhb_loop+0x40/0x90
[  163.207983][ T9883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.208002][ T9883] RIP: 0033:0x7fb13e59e019
[  163.208017][ T9883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.208033][ T9883] RSP: 002b:00007ffe72f1bc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  163.208062][ T9883] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb13e59e019
[  163.208073][ T9883] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb13e825fa8
[  163.208083][ T9883] RBP: 0000000000001ec8 R08: 0000000000000004 R09: 0000000000000000
[  163.208094][ T9883] R10: 00007fb13e825fa0 R11: 0000000000000246 R12: 0000000000000000
[  163.208104][ T9883] R13: 00007fb13e825fac R14: 00007fb13e825fa8 R15: 00007fb13e825fa0
[  163.208135][ T9883]  </TASK>
[  163.208165][ T9883] FAULT_INJECTION: forcing a failure.
[  163.208165][ T9883] name fail_futex, interval 1, probability 0, space 0, times 0
[  163.276873][ T9883] CPU: 3 UID: 0 PID: 9883 Comm: syz.5.1036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.276891][ T9883] Tainted: [L]=SOFTLOCKUP
[  163.276894][ T9883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.276901][ T9883] Call Trace:
[  163.276905][ T9883]  <TASK>
[  163.276909][ T9883]  dump_stack_lvl+0x100/0x190
[  163.276928][ T9883]  should_fail_ex.cold+0x5/0xa
[  163.276942][ T9883]  get_futex_key+0x1d2/0x14f0
[  163.276959][ T9883]  ? __pfx_get_futex_key+0x10/0x10
[  163.276978][ T9883]  futex_wake+0xf4/0x5e0
[  163.276988][ T9883]  ? futex_wait+0x11e/0x370
[  163.277000][ T9883]  ? __pfx_futex_wake+0x10/0x10
[  163.277016][ T9883]  do_futex+0x2b2/0x440
[  163.277032][ T9883]  ? __pfx_do_futex+0x10/0x10
[  163.277047][ T9883]  ? ktime_get+0x22c/0x320
[  163.277060][ T9883]  ? lockdep_hardirqs_on+0x78/0x100
[  163.277075][ T9883]  __x64_sys_futex+0x34f/0x4d0
[  163.277092][ T9883]  ? __pfx___x64_sys_futex+0x10/0x10
[  163.277113][ T9883]  do_syscall_64+0x115/0x870
[  163.277131][ T9883]  ? clear_bhb_loop+0x40/0x90
[  163.277144][ T9883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.277155][ T9883] RIP: 0033:0x7fb13e59e019
[  163.277166][ T9883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.277177][ T9883] RSP: 002b:00007ffe72f1bc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  163.277188][ T9883] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb13e59e019
[  163.277195][ T9883] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb13e825fa8
[  163.277201][ T9883] RBP: 0000000000000094 R08: 0000000000000001 R09: 0000000000000000
[  163.277207][ T9883] R10: 00007fb13e825fa0 R11: 0000000000000246 R12: 0000000000000000
[  163.277213][ T9883] R13: 00007fb13e825fac R14: 00007fb13e825fa8 R15: 00007fb13e825fa0
[  163.277227][ T9883]  </TASK>
[  163.351142][   T42] kauditd_printk_skb: 302 callbacks suppressed
[  163.351202][   T42] audit: type=1400 audit(1786676620.891:4300): avc:  denied  { unmount } for  pid=7380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  163.372591][   T42] audit: type=1400 audit(1786676620.910:4301): avc:  denied  { read } for  pid=9885 comm="syz.5.1037" name="binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  163.376284][ T9886] binder: 9885:9886 ioctl 806c4120 200000000200 returned -22
[  163.380709][   T42] audit: type=1400 audit(1786676620.910:4302): avc:  denied  { open } for  pid=9885 comm="syz.5.1037" path="/dev/binderfs/binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  163.390592][   T42] audit: type=1400 audit(1786676620.910:4303): avc:  denied  { ioctl } for  pid=9885 comm="syz.5.1037" path="/dev/binderfs/binder0" dev="binder" ino=12 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  163.398203][   T42] audit: type=1400 audit(1786676620.910:4304): avc:  denied  { set_context_mgr } for  pid=9885 comm="syz.5.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  163.404519][   T42] audit: type=1400 audit(1786676620.910:4305): avc:  denied  { map } for  pid=9885 comm="syz.5.1037" path="/dev/binderfs/binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  163.412149][   T42] audit: type=1400 audit(1786676620.920:4306): avc:  denied  { call } for  pid=9885 comm="syz.5.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  163.417993][   T42] audit: type=1400 audit(1786676620.950:4307): avc:  denied  { ioctl } for  pid=9887 comm="syz.5.1038" path="socket:[29340]" dev="sockfs" ino=29340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.425592][   T42] audit: type=1400 audit(1786676620.950:4308): avc:  denied  { bind } for  pid=9887 comm="syz.5.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.431651][   T42] audit: type=1400 audit(1786676620.950:4309): avc:  denied  { setopt } for  pid=9887 comm="syz.5.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.731293][ T9903] xt_NFQUEUE: number of total queues is 0
[  163.777492][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1044'.
[  163.780515][ T9911] netlink: 'syz.6.1044': attribute type 11 has an invalid length.
[  163.798333][ T9911] netlink: 'syz.6.1044': attribute type 11 has an invalid length.
[  163.803316][ T5813] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.806844][ T5813] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.824873][   T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.828898][   T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.933045][ T9929] 9pnet_virtio: no channels available for device syz
[  164.090971][ T9954] fuse: Bad value for 'fd'
[  164.109337][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.117798][ T9919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9919 comm=syz.6.1048
[  164.146060][ T9963] overlayfs: failed to resolve './bus': -2
[  164.209881][ T9960] hsr_slave_0: left promiscuous mode
[  164.216055][ T9960] hsr_slave_1: left promiscuous mode
[  164.242998][ T9977] 9p: Bad value for 'dfltgid'
[  164.245014][ T9977] 9p: Bad value for 'dfltgid'
[  164.287840][ T9979] netlink: 'syz.4.1066': attribute type 2 has an invalid length.
[  164.756757][T10023] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  164.806299][T10033] xt_hashlimit: size too large, truncated to 1048576
[  164.949235][T10049] netlink: 'syz.6.1084': attribute type 1 has an invalid length.
[  164.989511][T10049] 8021q: adding VLAN 0 to HW filter on device bond2
[  164.995152][T10049] bond0: (slave bond2): making interface the new active one
[  164.999044][T10049] bond0: (slave bond2): Enslaving as an active interface with an up link
[  165.020119][T10050] 8021q: adding VLAN 0 to HW filter on device bond3
[  165.025257][T10050] bond0: (slave bond3): Enslaving as a backup interface with an up link
[  165.038044][T10049] bond0: (slave gretap1): Enslaving as a backup interface with an up link
[  165.116051][T10063] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.150932][T10065] macsec0: entered promiscuous mode
[  165.152902][T10065] macsec0: entered allmulticast mode
[  165.154917][T10065] veth1_macvtap: entered allmulticast mode
[  165.527399][T10083] netlink: 'syz.6.1091': attribute type 21 has an invalid length.
[  165.586044][T10084] __nla_validate_parse: 34 callbacks suppressed
[  165.586057][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1091'.
[  165.840724][T10099] SELinux:  Context system_u:object_r: is not valid (left unmapped).
[  165.902403][T10104] 9pnet_virtio: no channels available for device syz
[  165.935276][T10108] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.067218][T10116] overlayfs: failed to clone upperpath
[  166.073200][T10116] overlayfs: failed to resolve '/frontend#': -2
[  166.225913][T10133] syz.4.1106 (10133) used greatest stack depth: 19120 bytes left
[  166.314470][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1109'.
[  166.317846][T10140] 9pnet_virtio: no channels available for device syz
[  166.331640][T10146] fuse: Invalid rootmode
[  166.377123][T10148] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1111'.
[  166.377879][T10146] use of bytesused == 0 is deprecated and will be removed in the future,
[  166.386198][T10146] use the actual size instead.
[  166.494873][T10159] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1114'.
[  166.506970][T10160] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1114'.
[  166.777474][T10178] vcan0 speed is unknown, defaulting to 1000
[  167.053771][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1122'.
[  167.079522][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1122'.
[  167.119981][T10211] sctp: [Deprecated]: syz.6.1124 (pid 10211) Use of int in max_burst socket option deprecated.
[  167.119981][T10211] Use struct sctp_assoc_value instead
[  168.009042][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1134'.
[  168.083812][T10252] vxcan0: tx address claim with dlc 0
[  168.126624][T10253] SELinux: ebitmap start bit (1279) is not a multiple of the map unit size (64)
[  168.129837][T10253] SELinux:  invalid class
[  168.134150][T10253] SELinux: failed to load policy
[  168.137173][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'.
[  168.146181][T10256] WARNING! power/level is deprecated; use power/control instead
[  168.165704][T10258] tipc: Can't bind to reserved service type 2
[  168.331147][T10276] fuse: Bad value for 'fd'
[  168.452483][   T42] kauditd_printk_skb: 311 callbacks suppressed
[  168.452513][   T42] audit: type=1400 audit(1786676625.904:4621): avc:  denied  { mount } for  pid=10285 comm="syz.6.1151" name="/" dev="overlay" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  168.524156][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1152'.
[  168.564625][   T42] audit: type=1400 audit(1786676626.022:4622): avc:  denied  { create } for  pid=10292 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  168.575779][   T42] audit: type=1400 audit(1786676626.022:4623): avc:  denied  { connect } for  pid=10292 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  168.583736][   T42] audit: type=1400 audit(1786676626.022:4624): avc:  denied  { bpf } for  pid=10292 comm="syz.5.1154" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  168.593269][   T42] audit: type=1400 audit(1786676626.022:4625): avc:  denied  { perfmon } for  pid=10292 comm="syz.5.1154" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  168.614230][   T42] audit: type=1400 audit(1786676626.072:4626): avc:  denied  { mount } for  pid=10300 comm="syz.5.1155" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  168.692888][   T42] audit: type=1400 audit(1786676626.151:4627): avc:  denied  { create } for  pid=10307 comm="syz.5.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  168.702493][   T42] audit: type=1400 audit(1786676626.151:4628): avc:  denied  { connect } for  pid=10307 comm="syz.5.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  168.713915][   T42] audit: type=1400 audit(1786676626.161:4629): avc:  denied  { create } for  pid=10307 comm="syz.5.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  168.726878][   T42] audit: type=1400 audit(1786676626.161:4630): avc:  denied  { bind } for  pid=10307 comm="syz.5.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  168.751177][T10312] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  168.767814][ T9557] bond0: (slave syz_tun): Releasing backup interface
[  168.815281][T10313] vxcan1: entered promiscuous mode
[  168.882352][T10312] vxcan1: entered promiscuous mode
[  169.053810][ T5784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.060095][ T5784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.089567][T10343] netlink: 'syz.5.1166': attribute type 11 has an invalid length.
[  169.095500][T10346] bond0: (slave netdevsim1): Releasing backup interface
[  169.155417][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  169.164041][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  169.175802][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  169.182306][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  169.186359][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  169.245457][ T5784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.250843][ T5784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.272811][T10365] netlink: 'syz.5.1172': attribute type 10 has an invalid length.
[  169.372600][ T5448] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.415416][ T5784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.419609][ T5784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.422521][T10384] 9pnet_virtio: no channels available for device syz
[  169.518314][T10351] vcan0 speed is unknown, defaulting to 1000
[  169.549957][ T5784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.554136][ T5784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.688712][ T5814] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  169.788357][ T5784] netdevsim netdevsim10 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.793413][ T5784] netdevsim netdevsim10 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.830391][ T5814] usb 11-1: device descriptor read/64, error -71
[  169.847764][T10396] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  169.889619][ T5784] netdevsim netdevsim10 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.894326][ T5784] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.922941][T10405] netlink: 'syz.5.1178': attribute type 1 has an invalid length.
[  169.946707][T10405] 8021q: adding VLAN 0 to HW filter on device bond2
[  169.973321][T10405] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  170.029837][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14
[  170.073208][ T5814] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  170.103862][T10351] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.110057][T10351] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.117209][T10351] bridge_slave_0: entered allmulticast mode
[  170.123443][T10351] bridge_slave_0: entered promiscuous mode
[  170.128256][T10351] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.131315][T10351] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.133995][T10420] fuse: Bad value for 'fd'
[  170.134456][T10351] bridge_slave_1: entered allmulticast mode
[  170.138072][T10420] netlink: 'syz.5.1181': attribute type 10 has an invalid length.
[  170.139866][T10351] bridge_slave_1: entered promiscuous mode
[  170.217013][T10351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.219968][ T5814] usb 11-1: device descriptor read/64, error -71
[  170.333060][ T5814] usb usb11-port1: attempt power cycle
[  170.422983][ T5784] bond0 (unregistering): Released all slaves
[  170.428338][ T5784] bond1 (unregistering): Released all slaves
[  170.435968][ T5784] bond2 (unregistering): Released all slaves
[  170.445005][ T5784] bond3 (unregistering): Released all slaves
[  170.455612][ T5784] bond4 (unregistering): Released all slaves
[  170.462336][T10448] netlink: 'syz.5.1184': attribute type 21 has an invalid length.
[  170.465587][T10448] netlink: 'syz.5.1184': attribute type 7 has an invalid length.
[  170.474712][T10351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.492325][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15
[  170.505409][T10445] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  170.512966][T10445] bond1: (slave macvlan3): making interface the new active one
[  170.517516][T10445] bond1: (slave macvlan3): Enslaving as an active interface with an up link
[  170.521656][ T6215] bond_slave_0: entered promiscuous mode
[  170.526620][ T6215] bond_slave_1: entered promiscuous mode
[  170.552721][T10351] team0: Port device team_slave_0 added
[  170.591717][T10351] team0: Port device team_slave_1 added
[  170.643769][ T5784] tipc: Left network mode
[  170.644907][T10351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.648533][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.658821][T10351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.665117][T10351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.668064][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.680714][T10351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.681019][ T5814] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  170.717108][T10351] hsr_slave_0: entered promiscuous mode
[  170.719284][T10351] hsr_slave_1: entered promiscuous mode
[  170.737152][ T5814] usb 11-1: device descriptor read/8, error -71
[  170.837423][T10460] can: request_module (can-proto-0) failed.
[  170.865492][T10460] __nla_validate_parse: 4 callbacks suppressed
[  170.865510][T10460] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1190'.
[  170.983672][ T5814] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  170.994959][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16
[  171.008329][ T5814] usb 11-1: device descriptor read/8, error -71
[  171.079213][T10477] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  171.083776][T10477] overlayfs: missing 'lowerdir'
[  171.125400][ T5814] usb usb11-port1: unable to enumerate USB device
[  171.139410][T10351] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  171.154416][T10351] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  171.161826][T10351] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  171.167820][T10351] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  171.177095][T10351] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  171.187762][T10351] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  171.204449][ T5784] hsr_slave_0: left promiscuous mode
[  171.222256][ T5784] veth1_macvtap: left promiscuous mode
[  171.224491][ T5784] veth0_macvtap: left promiscuous mode
[  171.227509][ T5784] veth1_vlan: left promiscuous mode
[  171.229727][ T5784] veth0_vlan: left promiscuous mode
[  171.298059][ T5745] Bluetooth: hci3: command tx timeout
[  171.609403][ T7084] smc: removing ib device syz1
[  171.626092][T10351] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  171.638982][T10351] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  171.645802][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17
[  171.647686][ T7084] smbdirect: ib_dev[syz1] removed
[  171.650792][ T5844] vcan0 speed is unknown, defaulting to 1000
[  171.655066][ T5844] syz1: Port: 1 Link DOWN
[  171.771319][T10351] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.798652][T10351] 8021q: adding VLAN 0 to HW filter on device team0
[  171.801065][T10509] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1202'.
[  171.807620][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.809935][ T8752] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.813802][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'.
[  171.820251][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.822647][ T8755] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.985117][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18
[  172.137571][T10530] macsec0: entered promiscuous mode
[  172.140058][T10530] macsec0: entered allmulticast mode
[  172.141842][T10530] veth1_macvtap: entered allmulticast mode
[  172.188650][T10351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.319695][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19
[  172.413270][ T5784] IPVS: stop unused estimator thread 0...
[  172.418997][T10351] veth0_vlan: entered promiscuous mode
[  172.432587][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1211'.
[  172.436120][T10351] veth1_vlan: entered promiscuous mode
[  172.471980][T10351] veth0_macvtap: entered promiscuous mode
[  172.477857][T10351] veth1_macvtap: entered promiscuous mode
[  172.489886][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'.
[  172.493408][T10351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.500816][T10351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.529476][T10575] IPv6: Can't replace route, no match found
[  172.568218][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1217'.
[  172.572424][T10575] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  172.597700][T10579] netlink: 'syz.6.1217': attribute type 10 has an invalid length.
[  172.608060][T10579] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.614282][T10584] netlink: 'syz.0.1219': attribute type 1 has an invalid length.
[  172.650995][ T5784] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.681241][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.684172][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.695598][ T7095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.701432][ T7095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.712343][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.766099][ T7077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.769494][ T7077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.865483][T10579] infiniband syz1: set down
[  172.867178][T10579] infiniband syz1: added bridge_slave_1
[  172.881251][T10579] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  172.886000][T10579] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  172.891263][T10579] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  172.908768][T10579] RDS/IB: syz1: added
[  172.910167][T10579] smc: adding ib device syz1 with port count 1
[  172.913027][T10579] smc:    ib device syz1 port 1 has no pnetid
[  172.993967][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1227'.
[  173.047439][T10615] befs: (nullb0): No write support. Marking filesystem read-only
[  173.051361][T10615] befs: (nullb0): invalid magic header
[  173.398267][ T5745] Bluetooth: hci3: command tx timeout
[  173.476317][T10626] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  173.525180][   T42] kauditd_printk_skb: 281 callbacks suppressed
[  173.525196][   T42] audit: type=1400 audit(1786676630.928:4912): avc:  denied  { prog_run } for  pid=10625 comm="syz.6.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  173.548059][   T42] audit: type=1400 audit(1786676630.948:4913): avc:  denied  { search } for  pid=10625 comm="syz.6.1230" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  173.564033][   T42] audit: type=1400 audit(1786676630.968:4914): avc:  denied  { create } for  pid=10627 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  173.573969][   T42] audit: type=1400 audit(1786676630.977:4915): avc:  denied  { write } for  pid=10627 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  173.583800][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'.
[  173.583852][   T42] audit: type=1400 audit(1786676630.977:4916): avc:  denied  { read } for  pid=10627 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  173.583901][   T42] audit: type=1400 audit(1786676630.987:4917): avc:  denied  { ioctl } for  pid=10627 comm="syz.5.1231" path="socket:[33322]" dev="sockfs" ino=33322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  173.607128][   T42] audit: type=1400 audit(1786676630.987:4918): avc:  denied  { create } for  pid=10627 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  173.614821][   T42] audit: type=1400 audit(1786676630.987:4919): avc:  denied  { bind } for  pid=10627 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  173.622472][   T42] audit: type=1400 audit(1786676630.987:4920): avc:  denied  { setopt } for  pid=10627 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  173.630117][   T42] audit: type=1400 audit(1786676630.987:4921): avc:  denied  { accept } for  pid=10627 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  173.683548][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1233'.
[  173.687297][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1233'.
[  173.915934][T10661] netlink: 'syz.5.1243': attribute type 30 has an invalid length.
[  173.916996][T10662] netlink: 'syz.5.1243': attribute type 30 has an invalid length.
[  174.306577][T10712] sctp: [Deprecated]: syz.0.1258 (pid 10712) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.306577][T10712] Use struct sctp_sack_info instead
[  174.312257][T10714] netlink: 'syz.6.1259': attribute type 1 has an invalid length.
[  174.331735][T10714] 8021q: adding VLAN 0 to HW filter on device bond5
[  174.358604][T10714] bond5: (slave dummy0): making interface the new active one
[  174.362601][T10714] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  174.369175][T10714] netlink: 'syz.6.1259': attribute type 10 has an invalid length.
[  174.372815][T10714] dummy0: entered promiscuous mode
[  174.376638][T10714] bond5: (slave dummy0): Releasing active interface
[  174.409846][T10714] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  175.498986][ T5745] Bluetooth: hci3: command tx timeout
[  175.515433][T10777] netlink: 'syz.5.1276': attribute type 1 has an invalid length.
[  175.517365][T10778] netlink: 'syz.5.1276': attribute type 1 has an invalid length.
[  175.548393][T10777] 8021q: adding VLAN 0 to HW filter on device bond3
[  175.568370][T10780] e1000e 0000:00:02.0 eth1: removed PHC
[  175.578033][T10778] bond3: (slave gretap1): making interface the new active one
[  175.585615][T10778] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  175.694135][T10798] JFS: charset not found
[  175.760860][T10780] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  175.996690][T10824] fuse: Bad value for 'fd'
[  176.003414][T10825] fuse: fd is not a fuse device
[  176.325286][T10853] __nla_validate_parse: 4 callbacks suppressed
[  176.325303][T10853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1292'.
[  176.624507][T10881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.628019][T10881] batadv_slave_1: entered promiscuous mode
[  176.694836][T10889] block nbd6: not configured, cannot reconfigure
[  177.212525][T10919] syzkaller0: entered promiscuous mode
[  177.214855][T10919] syzkaller0: entered allmulticast mode
[  177.531909][T10934] bridge_slave_0: left allmulticast mode
[  177.535984][T10934] bridge_slave_0: left promiscuous mode
[  177.541332][T10934] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.550551][T10934] bridge_slave_1: left allmulticast mode
[  177.552778][T10934] bridge_slave_1: left promiscuous mode
[  177.555480][T10934] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.556195][T10936] 9pnet_virtio: no channels available for device syz
[  177.570259][T10934] bond0: (slave bond_slave_0): Releasing backup interface
[  177.580668][T10934] bond0: (slave bond_slave_1): Releasing backup interface
[  177.593511][ T5745] Bluetooth: hci3: command tx timeout
[  177.594842][T10934] team0: Port device team_slave_0 removed
[  177.602895][T10934] team0: Port device team_slave_1 removed
[  177.606814][T10934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.609785][T10934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.618912][T10934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.621789][T10934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.627557][T10934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  177.646793][T10938] team0: Mode changed to "loadbalance"
[  177.652529][T10937] team0: Unable to change to the same mode the team is in
[  177.674180][ T8791] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  177.708077][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.711304][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.715876][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.719185][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.722306][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.727417][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.730573][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.733770][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.737277][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.740513][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.743676][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.747285][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.750406][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.753550][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.758172][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.762783][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.766697][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.769766][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.772765][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.776468][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.779555][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.782279][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.785917][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.788798][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944afbd0 returned -22
[  177.791991][T10948] binder: 10947:10948 ioctl 4020ae46 7f93944af8d0 returned -22
[  177.819362][T10948] netlink: 'syz.7.1312': attribute type 1 has an invalid length.
[  177.820421][    C2] vcan0: j1939_tp_rxtimer: 0xffff88804a010400: rx timeout, send abort
[  177.822467][T10948] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1312'.
[  177.830304][    C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88804a010400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  177.848096][ T8791] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.857830][ T8791] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.867880][ T8791] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.885485][ T8791] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.889620][ T8791] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.919683][ T8791] usb 11-1: config 0 descriptor??
[  177.923660][T10960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10960 comm=syz.5.1315
[  178.099912][T10978] Invalid source name
[  178.101563][T10978] UBIFS error (pid: 10978): cannot open "./file0", error -22
[  178.216536][T10992] input: syz1 as /devices/virtual/input/input12
[  178.357221][ T8791] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  178.457309][T11007] overlayfs: failed to clone upperpath
[  178.558331][T11021] 9pnet_virtio: no channels available for device syz
[  178.565788][T11019] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  178.569987][T11019] overlayfs: failed to set xattr on upper
[  178.572631][T11019] overlayfs: ...falling back to redirect_dir=nofollow.
[  178.575327][T11019] overlayfs: ...falling back to index=off.
[  178.577367][T11019] overlayfs: ...falling back to uuid=null.
[  178.580124][   T42] kauditd_printk_skb: 406 callbacks suppressed
[  178.580134][   T42] audit: type=1400 audit(1786676635.937:5328): avc:  denied  { mount } for  pid=11018 comm="syz.0.1331" name="/" dev="overlay" ino=36280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  178.595702][   T42] audit: type=1400 audit(1786676635.957:5329): avc:  denied  { create } for  pid=11023 comm="syz.5.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  178.596563][T11019] overlayfs: cleanup of 'bus/work' failed (-13)
[  178.603956][   T42] audit: type=1400 audit(1786676635.957:5330): avc:  denied  { bind } for  pid=11023 comm="syz.5.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  178.606799][T11019] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  178.614928][   T42] audit: type=1400 audit(1786676635.957:5331): avc:  denied  { node_bind } for  pid=11023 comm="syz.5.1332" src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  178.624976][T11019] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  178.626657][   T42] audit: type=1400 audit(1786676635.957:5332): avc:  denied  { listen } for  pid=11023 comm="syz.5.1332" lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  178.630186][T11019] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[  178.638782][   T42] audit: type=1400 audit(1786676635.957:5333): avc:  denied  { name_bind } for  pid=11023 comm="syz.5.1332" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  178.638829][   T42] audit: type=1400 audit(1786676635.957:5334): avc:  denied  { node_bind } for  pid=11023 comm="syz.5.1332" saddr=::ffff:0.0.0.0 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  178.638872][   T42] audit: type=1400 audit(1786676635.967:5335): avc:  denied  { prog_load } for  pid=11023 comm="syz.5.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  178.638907][   T42] audit: type=1400 audit(1786676635.967:5336): avc:  denied  { prog_run } for  pid=11023 comm="syz.5.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  178.658025][   T42] audit: type=1400 audit(1786676636.016:5337): avc:  denied  { create } for  pid=11029 comm="syz.5.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  178.774058][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1336'.
[  178.824934][T11043] vxcan3: entered promiscuous mode
[  179.078069][T11069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.244754][T11077] openvswitch: netlink: Flow key attribute not present in set flow.
[  179.250251][T11077] openvswitch: netlink: Flow key attribute not present in set flow.
[  179.254098][T11077] openvswitch: netlink: Flow key attribute not present in set flow.
[  179.258149][T11077] openvswitch: netlink: Flow key attribute not present in set flow.
[  179.261361][T11077] openvswitch: netlink: Flow key attribute not present in set flow.
[  179.269475][T11077] openvswitch: netlink: Flow key attribute not present in set flow.
[  179.272817][T11077] openvswitch: netlink: Flow key attribute not present in set flow.
[  179.625118][T11093] netlink: 'syz.6.1344': attribute type 3 has an invalid length.
[  179.628046][T11093] netlink: 'syz.6.1344': attribute type 1 has an invalid length.
[  179.630665][T11093] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1344'.
[  179.688402][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1345'.
[  179.692565][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1345'.
[  179.699439][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1345'.
[  179.703400][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1345'.
[  179.845565][T11116] netlink: 'syz.0.1349': attribute type 10 has an invalid length.
[  179.849226][T11116] syz_tun: entered promiscuous mode
[  179.855299][T11116] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  179.868042][T11119] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1350'.
[  179.884693][T11120] xt_TCPMSS: Only works on TCP SYN packets
[  179.884814][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1350'.
[  179.939300][T11130] /dev/nullb0: Can't lookup blockdev
[  179.941145][T11128] overlay: Unknown parameter 'func'
[  179.969024][T11130] net_ratelimit: 26 callbacks suppressed
[  179.969043][T11130] openvswitch: netlink: IP tunnel TTL not specified.
[  180.067220][T11143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  180.077235][T11149] fuse: fd is not a fuse device
[  180.169152][T11160] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  180.171701][T11160] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  180.187319][T11160] vhci_hcd vhci_hcd.0: Device attached
[  180.221519][T11160] vhci_hcd vhci_hcd.0: port 0 already used
[  180.224761][T11162] vhci_hcd: connection closed
[  180.239544][ T5784] vhci_hcd vhci_hcd.7: stop threads
[  180.246853][ T5784] vhci_hcd vhci_hcd.7: release socket
[  180.250210][ T5784] vhci_hcd vhci_hcd.7: disconnect device
[  180.346411][ T5828] usb 11-1: USB disconnect, device number 12
[  180.376718][T11186] fuse: fd is not a fuse device
[  180.417637][T11190] 9pnet_virtio: no channels available for device syz
[  180.477520][T11193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.780156][T11221] netlink: 'syz.5.1380': attribute type 7 has an invalid length.
[  180.897266][T11229] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value
[  180.916523][T11230] erofs (device loop7): cannot find valid erofs superblock
[  181.071243][T11246] netlink: 'syz.0.1389': attribute type 2 has an invalid length.
[  181.245065][T11263] netlink: 'syz.0.1393': attribute type 11 has an invalid length.
[  181.305285][T11266] netlink: 'syz.0.1394': attribute type 12 has an invalid length.
[  181.443329][T11280] 9pnet_fd: Insufficient options for proto=fd
[  181.559854][T11288] __nla_validate_parse: 7 callbacks suppressed
[  181.559866][T11288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1402'.
[  181.658363][T11296] overlayfs: failed to clone upperpath
[  181.665372][T11298] nfs: Unknown parameter './file0'
[  181.783445][T11302] fuse: fd is not a fuse device
[  182.040339][T11326] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer.
[  182.156620][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1414'.
[  182.199377][T11337] netlink: 'syz.0.1415': attribute type 10 has an invalid length.
[  182.204916][T11337] netlink: 'syz.0.1415': attribute type 10 has an invalid length.
[  182.208459][T11337] netlink: 'syz.0.1415': attribute type 10 has an invalid length.
[  182.259694][T11340] syzkaller0: entered promiscuous mode
[  182.262083][T11340] syzkaller0: entered allmulticast mode
[  182.363633][T11351] cgroup: No subsys list or none specified
[  182.370648][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  182.374222][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  182.538358][T11360] overlayfs: failed to clone upperpath
[  182.550489][T11360] overlayfs: failed to clone lowerpath
[  182.851387][T11387] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  183.516499][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1438'.
[  183.645372][   T42] kauditd_printk_skb: 231 callbacks suppressed
[  183.645405][   T42] audit: type=1400 audit(1786676640.976:5569): avc:  denied  { search } for  pid=11431 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.671084][   T42] audit: type=1400 audit(1786676640.976:5570): avc:  denied  { search } for  pid=11431 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.680335][   T42] audit: type=1400 audit(1786676640.976:5571): avc:  denied  { search } for  pid=11431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.695230][   T42] audit: type=1400 audit(1786676640.976:5572): avc:  denied  { search } for  pid=11431 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.713003][   T42] audit: type=1400 audit(1786676640.986:5573): avc:  denied  { read } for  pid=11432 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.723058][   T42] audit: type=1400 audit(1786676640.986:5574): avc:  denied  { read open } for  pid=11432 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.733742][   T42] audit: type=1400 audit(1786676640.986:5575): avc:  denied  { getattr } for  pid=11432 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.744699][   T42] audit: type=1400 audit(1786676641.006:5576): avc:  denied  { write } for  pid=11431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.756811][   T42] audit: type=1400 audit(1786676641.006:5577): avc:  denied  { add_name } for  pid=11431 comm="dhcpcd-run-hook" name="resolv.conf.eth14.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  183.768679][   T42] audit: type=1400 audit(1786676641.076:5578): avc:  denied  { write } for  pid=11434 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  184.017517][T11450] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1443'.
[  184.081679][T11446] smpboot: CPU 1 is now offline
[  184.095877][T11455] netlink: 344 bytes leftover after parsing attributes in process `syz.5.1443'.
[  184.106790][T11452] sctp: [Deprecated]: syz.7.1442 (pid 11452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.106790][T11452] Use struct sctp_sack_info instead
[  184.230584][T11446] smpboot: CPU 3 is now offline
[  184.349964][T11452] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  184.405312][T11452] smpboot: Booting Node 0 Processor 3 APIC 0x3
[  184.476480][T11473] netlink: 580 bytes leftover after parsing attributes in process `syz.6.1446'.
[  184.593383][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1449'.
[  184.730788][T11496] validate_nla: 48 callbacks suppressed
[  184.730804][T11496] netlink: 'syz.5.1451': attribute type 11 has an invalid length.
[  184.737172][T11496] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1451'.
[  185.336761][T11556] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  185.763466][T11574] fuse: fd is not a fuse device
[  185.766436][T11574] fuse: fd is not a fuse device
[  186.036989][T11601] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.040127][T11601] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.087581][T11601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  186.093057][T11601] 8021q: adding VLAN 0 to HW filter on device bond1
[  186.098126][T11601] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.107496][T11601] 8021q: adding VLAN 0 to HW filter on device bond4
[  186.121509][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.124521][ T8755] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.177862][ T6235] syz1: Port: 1 Link ACTIVE
[  186.293326][T11615] IPv6: sit1: Disabled Multicast RS
[  186.319118][T11618] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  186.510441][T11626] can: request_module (can-proto-0) failed.
[  187.363164][T11659] netlink: 'syz.0.1487': attribute type 16 has an invalid length.
[  187.382467][T11659] netlink: 'syz.0.1487': attribute type 17 has an invalid length.
[  187.439547][T11665] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  187.472692][T11659] syz_tun: left promiscuous mode
[  187.549503][T11659] macsec0: left promiscuous mode
[  187.551897][T11659] macsec0: left allmulticast mode
[  187.554178][T11659] veth1_macvtap: left allmulticast mode
[  187.561983][T11659] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  187.565801][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  187.570747][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  187.588933][T11659] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.594425][T11659] bridge1: left promiscuous mode
[  187.599782][T11659] mac80211_hwsim hwsim2 »»»»»»: entered promiscuous mode
[  187.619477][T11659] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  187.971388][T11683] netlink: 'syz.0.1494': attribute type 1 has an invalid length.
[  187.977856][T11683] PKCS8: Unsupported PKCS#8 version
[  188.003953][T11683] bridge0: port 1(netdevsim0) entered blocking state
[  188.010350][T11683] bridge0: port 1(netdevsim0) entered disabled state
[  188.016692][T11683] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  188.028719][T11699] __nla_validate_parse: 5 callbacks suppressed
[  188.028735][T11699] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1498'.
[  188.113059][T11683] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  188.286719][T11708] bond3: entered promiscuous mode
[  188.570737][T11734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1508'.
[  188.595829][T11736] trusted_key: syz.5.1509 sent an empty control message without MSG_MORE.
[  188.648730][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1506'.
[  188.822024][   T42] kauditd_printk_skb: 230 callbacks suppressed
[  188.822040][   T42] audit: type=1400 audit(1786676646.133:5809): avc:  denied  { mmap_zero } for  pid=11751 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  188.838452][   T42] audit: type=1400 audit(1786676646.153:5810): avc:  denied  { allowed } for  pid=11751 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  188.849030][   T42] audit: type=1400 audit(1786676646.163:5811): avc:  denied  { create } for  pid=11751 comm="syz.5.1514" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  189.218483][   T42] audit: type=1400 audit(1786676646.532:5812): avc:  denied  { create } for  pid=11758 comm="syz.6.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  189.232274][   T42] audit: type=1400 audit(1786676646.532:5813): avc:  denied  { setopt } for  pid=11758 comm="syz.6.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  189.257026][   T42] audit: type=1400 audit(1786676646.532:5814): avc:  denied  { read write } for  pid=11758 comm="syz.6.1516" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  189.258120][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1516'.
[  189.268770][   T42] audit: type=1400 audit(1786676646.532:5815): avc:  denied  { open } for  pid=11758 comm="syz.6.1516" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  189.281445][   T42] audit: type=1400 audit(1786676646.552:5816): avc:  denied  { setopt } for  pid=11758 comm="syz.6.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  189.284806][T11760] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  189.289573][   T42] audit: type=1400 audit(1786676646.552:5817): avc:  denied  { read } for  pid=11758 comm="syz.6.1516" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  189.306100][   T42] audit: type=1400 audit(1786676646.552:5818): avc:  denied  { open } for  pid=11758 comm="syz.6.1516" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  189.576477][T11776] vhci_hcd vhci_hcd.0: remove, state 4
[  189.584160][T11776] usb usb38: USB disconnect, device number 1
[  189.716751][T11776] vhci_hcd vhci_hcd.0: USB bus 38 deregistered
[  189.718778][ T5813] vhci_hcd vhci_hcd.0: stop threads
[  189.723213][ T5813] vhci_hcd vhci_hcd.0: release socket
[  189.731624][ T5813] vhci_hcd vhci_hcd.0: disconnect device
[  189.742541][ T5813] vhci_hcd vhci_hcd.0: stop threads
[  189.744899][ T5813] vhci_hcd vhci_hcd.0: release socket
[  189.747169][ T5813] vhci_hcd vhci_hcd.0: disconnect device
[  189.750757][T11776] vhci_hcd vhci_hcd.0: remove, state 4
[  189.753184][T11776] usb usb37: USB disconnect, device number 1
[  189.754982][ T5813] ==================================================================
[  189.759266][ T5813] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60
[  189.763186][ T5813] Read of size 1 at addr ffff88802b5b06c8 by task kworker/u32:4/5813
[  189.767467][ T5813] 
[  189.769673][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/u32:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  189.769719][ T5813] Tainted: [L]=SOFTLOCKUP
[  189.769725][ T5813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  189.769750][ T5813] Workqueue: usbip_event event_handler
[  189.769796][ T5813] Call Trace:
[  189.769819][ T5813]  <TASK>
[  189.769825][ T5813]  dump_stack_lvl+0x100/0x190
[  189.769896][ T5813]  print_report+0x13d/0x4b0
[  189.769928][ T5813]  ? __virt_addr_valid+0x239/0x430
[  189.769979][ T5813]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  189.769994][ T5813]  kasan_report+0xdf/0x1c0
[  189.770033][ T5813]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  189.770051][ T5813]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  189.770066][ T5813]  __kasan_check_byte+0x36/0x50
[  189.770087][ T5813]  lock_acquire+0x132/0x370
[  189.770106][ T5813]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  189.770124][ T5813]  ? _raw_spin_lock_irqsave+0x52/0x60
[  189.770142][ T5813]  _raw_spin_lock_irqsave+0x3a/0x60
[  189.770159][ T5813]  ? event_handler+0x21e/0x570
[  189.770174][ T5813]  event_handler+0x21e/0x570
[  189.770189][ T5813]  process_one_work+0xa23/0x1940
[  189.770212][ T5813]  ? __pfx_process_one_work+0x10/0x10
[  189.770235][ T5813]  ? __pfx_event_handler+0x10/0x10
[  189.770253][ T5813]  worker_thread+0x5ef/0xe50
[  189.770273][ T5813]  ? __pfx_worker_thread+0x10/0x10
[  189.770291][ T5813]  ? kthread+0x13a/0x450
[  189.770308][ T5813]  ? __pfx_worker_thread+0x10/0x10
[  189.770356][ T5813]  kthread+0x370/0x450
[  189.770372][ T5813]  ? __pfx_kthread+0x10/0x10
[  189.770389][ T5813]  ret_from_fork+0x72b/0xd50
[  189.770414][ T5813]  ? __pfx_ret_from_fork+0x10/0x10
[  189.770439][ T5813]  ? __switch_to+0x800/0x10f0
[  189.770458][ T5813]  ? __pfx_kthread+0x10/0x10
[  189.770475][ T5813]  ret_from_fork_asm+0x1a/0x30
[  189.770507][ T5813]  </TASK>
[  189.770513][ T5813] 
[  189.842408][ T5813] Allocated by task 1:
[  189.844463][ T5813]  kasan_save_stack+0x30/0x50
[  189.846444][ T5813]  kasan_save_track+0x14/0x30
[  189.848602][ T5813]  __kasan_kmalloc+0xaa/0xb0
[  189.850255][ T5813]  __kmalloc_noprof+0x322/0x820
[  189.852623][ T5813]  __usb_create_hcd+0x5e/0xac0
[  189.854543][ T5813]  vhci_hcd_probe+0x1a5/0x4e0
[  189.856588][ T5813]  platform_probe+0x106/0x1d0
[  189.858700][ T5813]  really_probe+0x241/0xa60
[  189.860594][ T5813]  __driver_probe_device+0x20e/0x450
[  189.862453][ T5813]  driver_probe_device+0x4a/0x140
[  189.864450][ T5813]  __device_attach_driver+0x1df/0x320
[  189.866551][ T5813]  bus_for_each_drv+0x159/0x1e0
[  189.869079][ T5813]  __device_attach+0x1e4/0x4d0
[  189.871079][ T5813]  device_initial_probe+0xaf/0xd0
[  189.873296][ T5813]  bus_probe_device+0x64/0x160
[  189.875490][ T5813]  device_add+0x121d/0x1970
[  189.877710][ T5813]  platform_device_add+0x35a/0x800
[  189.879914][ T5813]  platform_device_register_full+0x5cf/0x830
[  189.882447][ T5813]  vhci_hcd_init+0x1a1/0x2f0
[  189.884455][ T5813]  do_one_initcall+0x11d/0x700
[  189.886752][ T5813]  kernel_init_freeable+0x6ea/0x7b0
[  189.889598][ T5813]  kernel_init+0x1f/0x1e0
[  189.891440][ T5813]  ret_from_fork+0x72b/0xd50
[  189.893406][ T5813]  ret_from_fork_asm+0x1a/0x30
[  189.895465][ T5813] 
[  189.896490][ T5813] Freed by task 11776:
[  189.898030][ T5813]  kasan_save_stack+0x30/0x50
[  189.899935][ T5813]  kasan_save_track+0x14/0x30
[  189.902060][ T5813]  kasan_save_free_info+0x3b/0x70
[  189.904648][ T5813]  __kasan_slab_free+0x5f/0x80
[  189.906743][ T5813]  kfree+0x22b/0x6c0
[  189.908945][ T5813]  usb_put_hcd+0x149/0x1f0
[  189.910993][ T5813]  vhci_hcd_remove+0xb5/0x1b0
[  189.913196][ T5813]  platform_remove+0x5f/0x80
[  189.915255][ T5813]  device_remove+0xcb/0x180
[  189.917565][ T5813]  device_release_driver_internal+0x44e/0x620
[  189.920676][ T5813]  unbind_store+0xf8/0x110
[  189.922664][ T5813]  drv_attr_store+0x74/0xb0
[  189.924699][ T5813]  sysfs_kf_write+0xf2/0x150
[  189.926784][ T5813]  kernfs_fop_write_iter+0x3e0/0x5f0
[  189.929113][ T5813]  vfs_write+0x6ac/0x1050
[  189.931252][ T5813]  ksys_write+0x12a/0x250
[  189.933313][ T5813]  do_syscall_64+0x115/0x870
[  189.935741][ T5813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.938276][ T5813] 
[  189.938639][T11776] vhci_hcd vhci_hcd.0: USB bus 37 deregistered
[  189.939244][ T5813] Last potentially related work creation:
[  189.939253][ T5813]  kasan_save_stack+0x30/0x50
[  189.947088][ T5813]  kasan_record_aux_stack+0xa7/0xc0
[  189.949292][ T5813]  insert_work+0x36/0x230
[  189.950952][ T5813]  __queue_work+0x9bc/0x12b0
[  189.952970][ T5813]  queue_work_on+0x1a9/0x1e0
[  189.954858][ T5813]  usb_hcd_giveback_urb+0x330/0x4a0
[  189.957027][ T5813]  unlink1+0x418/0x510
[  189.958599][ T5813]  usb_hcd_unlink_urb+0x131/0x210
[  189.960981][ T5813]  usb_kill_urb+0x121/0x320
[  189.962989][ T5813]  hub_quiesce+0x1e9/0x320
[  189.965242][ T5813]  hub_suspend+0x4ab/0x9e0
[  189.967194][ T5813]  usb_suspend_both+0x288/0x950
[  189.969108][ T5813]  usb_runtime_suspend+0x49/0x120
[  189.971129][ T5813]  __rpm_callback+0xc8/0x620
[  189.973326][ T5813]  rpm_callback+0x16a/0x1b0
[  189.975572][ T5813]  rpm_suspend+0x2f4/0x11a0
[  189.977932][ T5813]  __pm_runtime_suspend+0xba/0x1a0
[  189.980299][ T5813]  usb_runtime_idle+0x7e/0x90
[  189.982570][ T5813]  rpm_idle+0x322/0x790
[  189.984074][ T5813]  pm_runtime_work+0x120/0x150
[  189.986085][ T5813]  process_one_work+0xa23/0x1940
[  189.988072][ T5813]  worker_thread+0x5ef/0xe50
[  189.989959][ T5813]  kthread+0x370/0x450
[  189.991715][ T5813]  ret_from_fork+0x72b/0xd50
[  189.993567][ T5813]  ret_from_fork_asm+0x1a/0x30
[  189.995514][ T5813] 
[  189.996764][ T5813] Second to last potentially related work creation:
[  189.999803][ T5813]  kasan_save_stack+0x30/0x50
[  190.001382][ T5813]  kasan_record_aux_stack+0xa7/0xc0
[  190.003850][ T5813]  insert_work+0x36/0x230
[  190.006182][ T5813]  __queue_work+0x9bc/0x12b0
[  190.008274][ T5813]  queue_work_on+0x1a9/0x1e0
[  190.010533][ T5813]  usb_hcd_giveback_urb+0x3b8/0x4a0
[  190.012527][ T5813]  usb_hcd_submit_urb+0xab7/0x2150
[  190.014604][ T5813]  usb_submit_urb+0x827/0x19b0
[  190.016636][ T5813]  usb_start_wait_urb+0x10e/0x580
[  190.018782][ T5813]  usb_control_msg+0x328/0x4b0
[  190.020622][ T5813]  hub_suspend+0x826/0x9e0
[  190.022290][ T5813]  usb_suspend_both+0x288/0x950
[  190.024044][ T5813]  usb_runtime_suspend+0x49/0x120
[  190.025974][ T5813]  __rpm_callback+0xc8/0x620
[  190.027787][ T5813]  rpm_callback+0x16a/0x1b0
[  190.029507][ T5813]  rpm_suspend+0x2f4/0x11a0
[  190.031451][ T5813]  __pm_runtime_suspend+0xba/0x1a0
[  190.033622][ T5813]  usb_runtime_idle+0x7e/0x90
[  190.035577][ T5813]  rpm_idle+0x322/0x790
[  190.037342][ T5813]  pm_runtime_work+0x120/0x150
[  190.039401][ T5813]  process_one_work+0xa23/0x1940
[  190.041477][ T5813]  worker_thread+0x5ef/0xe50
[  190.043420][ T5813]  kthread+0x370/0x450
[  190.045220][ T5813]  ret_from_fork+0x72b/0xd50
[  190.047527][ T5813]  ret_from_fork_asm+0x1a/0x30
[  190.049524][ T5813] 
[  190.050836][ T5813] The buggy address belongs to the object at ffff88802b5b0000
[  190.050836][ T5813]  which belongs to the cache kmalloc-8k of size 8192
[  190.056689][ T5813] The buggy address is located 1736 bytes inside of
[  190.056689][ T5813]  freed 8192-byte region [ffff88802b5b0000, ffff88802b5b2000)
[  190.063574][ T5813] 
[  190.064666][ T5813] The buggy address belongs to the physical page:
[  190.067694][ T5813] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b5b0
[  190.071803][ T5813] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  190.075149][ T5813] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  190.078174][ T5813] page_type: f5(slab)
[  190.079975][ T5813] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000
[  190.083278][ T5813] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  190.086852][ T5813] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000
[  190.091671][ T5813] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  190.095678][ T5813] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  190.100207][ T5813] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  190.103880][ T5813] page dumped because: kasan: bad access detected
[  190.106439][ T5813] page_owner tracks the page as allocated
[  190.108605][ T5813] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9743654742, free_ts 8899748008
[  190.116312][ T5813]  post_alloc_hook+0xfd/0x120
[  190.118343][ T5813]  get_page_from_freelist+0xf48/0x3530
[  190.120600][ T5813]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  190.123235][ T5813]  new_slab+0xa2/0x640
[  190.124893][ T5813]  refill_objects+0xe3/0x410
[  190.127516][ T5813]  __pcs_replace_empty_main+0x376/0x680
[  190.129910][ T5813]  __kmalloc_cache_noprof+0x479/0x6c0
[  190.132674][ T5813]  uhci_start+0x296/0x1200
[  190.134644][ T5813]  usb_add_hcd.cold+0xae3/0x1158
[  190.136709][ T5813]  usb_hcd_pci_probe+0x46e/0xcb0
[  190.139274][ T5813]  local_pci_probe+0xdd/0x1b0
[  190.141375][ T5813]  pci_call_probe+0x176/0x800
[  190.143210][ T5813]  pci_device_probe+0x1cd/0x370
[  190.145318][ T5813]  really_probe+0x241/0xa60
[  190.147168][ T5813]  __driver_probe_device+0x20e/0x450
[  190.149393][ T5813]  driver_probe_device+0x4a/0x140
[  190.151761][ T5813] page last free pid 9 tgid 9 stack trace:
[  190.154195][ T5813]  free_pages_prepare+0x586/0xd80
[  190.156227][ T5813]  __free_contig_range_common+0x14f/0x250
[  190.158485][ T5813]  free_pages_bulk+0x12a/0x200
[  190.161091][ T5813]  vm_area_free_pages+0xad/0x2b0
[  190.163457][ T5813]  vfree+0x107/0x750
[  190.165170][ T5813]  delayed_vfree_work+0x56/0x80
[  190.167332][ T5813]  process_one_work+0xa23/0x1940
[  190.169318][ T5813]  worker_thread+0x5ef/0xe50
[  190.171391][ T5813]  kthread+0x370/0x450
[  190.173100][ T5813]  ret_from_fork+0x72b/0xd50
[  190.175631][ T5813]  ret_from_fork_asm+0x1a/0x30
[  190.177807][ T5813] 
[  190.179153][ T5813] Memory state around the buggy address:
[  190.182099][ T5813]  ffff88802b5b0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.186198][ T5813]  ffff88802b5b0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.190114][ T5813] >ffff88802b5b0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.193655][ T5813]                                               ^
[  190.196775][ T5813]  ffff88802b5b0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.200542][ T5813]  ffff88802b5b0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.204290][ T5813] ==================================================================
[  190.208030][ T5813] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  190.211412][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/u32:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.216474][ T5813] Tainted: [L]=SOFTLOCKUP
[  190.218337][ T5813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  190.222664][ T5813] Workqueue: usbip_event event_handler
[  190.225304][ T5813] Call Trace:
[  190.226898][ T5813]  <TASK>
[  190.228200][ T5813]  dump_stack_lvl+0x100/0x190
[  190.230741][ T5813]  vpanic+0x552/0x970
[  190.232456][ T5813]  ? __pfx_vpanic+0x10/0x10
[  190.234557][ T5813]  ? __pfx_vprintk_emit+0x10/0x10
[  190.237078][ T5813]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  190.239430][ T5813]  panic+0xd1/0xe0
[  190.241111][ T5813]  ? __pfx_panic+0x10/0x10
[  190.243391][ T5813]  ? end_report.part.0+0x23/0x90
[  190.245562][ T5813]  ? rcu_is_watching+0x12/0xc0
[  190.247727][ T5813]  ? end_report.part.0+0x23/0x90
[  190.250164][ T5813]  ? check_panic_on_warn+0x1f/0x90
[  190.252765][ T5813]  check_panic_on_warn.cold+0x19/0x34
[  190.255508][ T5813]  end_report.part.0+0x3a/0x90
[  190.257784][ T5813]  kasan_report.cold+0xe/0x18
[  190.259918][ T5813]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  190.262782][ T5813]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  190.265909][ T5813]  __kasan_check_byte+0x36/0x50
[  190.268337][ T5813]  lock_acquire+0x132/0x370
[  190.270371][ T5813]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  190.272580][ T5813]  ? _raw_spin_lock_irqsave+0x52/0x60
[  190.274880][ T5813]  _raw_spin_lock_irqsave+0x3a/0x60
[  190.277192][ T5813]  ? event_handler+0x21e/0x570
[  190.279834][ T5813]  event_handler+0x21e/0x570
[  190.281859][ T5813]  process_one_work+0xa23/0x1940
[  190.283812][ T5813]  ? __pfx_process_one_work+0x10/0x10
[  190.286811][ T5813]  ? __pfx_event_handler+0x10/0x10
[  190.289443][ T5813]  worker_thread+0x5ef/0xe50
[  190.291681][ T5813]  ? __pfx_worker_thread+0x10/0x10
[  190.294733][ T5813]  ? kthread+0x13a/0x450
[  190.296634][ T5813]  ? __pfx_worker_thread+0x10/0x10
[  190.298935][ T5813]  kthread+0x370/0x450
[  190.301383][ T5813]  ? __pfx_kthread+0x10/0x10
[  190.303550][ T5813]  ret_from_fork+0x72b/0xd50
[  190.305305][ T5813]  ? __pfx_ret_from_fork+0x10/0x10
[  190.307542][ T5813]  ? __switch_to+0x800/0x10f0
[  190.310123][ T5813]  ? __pfx_kthread+0x10/0x10
[  190.312115][ T5813]  ret_from_fork_asm+0x1a/0x30
[  190.314305][ T5813]  </TASK>
[  190.316948][ T5813] Kernel Offset: disabled
[  190.319251][ T5813] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:47:51  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc900037f7570
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3562323038386552
R12=0000000000000000 R13=000000000000003a R14=ffffffff9b6fe232 R15=ffffffff85a392d0
RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5dd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f3615feb700 CR3=00000000353f4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefffc00 Opmask01=0000000000004211 Opmask02=0000000001000037 Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556e2ad07da0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78603f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f7a4105ffe0df 2f2f7a4105fea2af
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f7a4105fea2a7 2f2f7a4105fea2a7
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38336273752f302e 6463685f69636876 2f6d726f6674616c 702f736563697665
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e55520041090c16 515f095752545441 0c4b424558455e5b 0c5e435e5e490049
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c323832302c4635 32302c443532302c 423532302c413532 302c413432302c34
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000046 RBX=ffffffff8ebe8200 RCX=ffffc900006a0964 RDX=0000000000000004
RSI=ffffffff8e182210 RDI=ffffffff8c402680 RBP=ffffffff81b866be RSP=ffffc900006a0958
R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000cfb1
R12=ffff88801f6a2540 R13=ffffc900006a0a10 R14=0000000000000202 R15=0000000000000005
RIP=ffffffff81e5f9b8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ed8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f3616da4ff8 CR3=000000003240b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000000c400 Opmask01=00000000c0000000 Opmask02=00000000ffff7fdf Opmask03=0000000000000000
Opmask04=00000000efffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556e2adbbba0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78603f1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78603f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373261d59a32483 737326180f3d0059
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16931a3595c2e9bf 737373762591de63
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38336273752f302e 6463685f69636876 2f6d726f6674616c 702f736563697665
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78603f1b40 00007f78603f1b40 0000000000000031 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c384132302c34 4132302c31413230 2c323832302c4635 32302c443532302c
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c302c2c2c2c302c 2c2c2c302c2c2c2c 302c2c2c2c302c2c 002c302c302c2c30
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffffc90000648ad0 RCX=ffffc90000648964 RDX=1ffff920000c915b
RSI=ffffffff8bbc99b4 RDI=ffffc90000648ad8 RBP=000000000000000d RSP=ffffc900006489f0
R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000d601
R12=ffffffff81f46fa0 R13=ffffc90000648ad0 R14=0000000000000000 R15=ffff888034352540
RIP=ffffffff81f46fee RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 000fffff 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 000fffff 00000000
FS =0000 000055555b380500 000fffff 00000000
GS =0000 ffff8880d5fd8000 000fffff 00000000
LDT=0000 0000000000000000 000fffff 00000000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000008 CR3=000000005df01000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb13f35d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb13e7f2600 00007fb13e7f25e0 00007fb13e7f25e8 00007fb13e7f2618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb13f35d020 00007fb13e7f25c0 00007fb13e7f25d0 00007fb13e7f2610
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb13e7f25f8 00007fb13e7f25c8 00007fb13e7f2600 00007fb13e7f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffffff967369d8 RBX=00000000000001ea RCX=00000000000001eb RDX=ffffffff967369a8
RSI=00000000000001eb RDI=ffffffff98091548 RBP=0000000000000030 RSP=ffffc900076befd8
R8 =ffffffff967369d8 R9 =0000000000000002 R10=ffffc900076bf168 R11=0000000000000000
R12=ffffffff81e57da0 R13=ffffc900076bf080 R14=ffffffff81e58bb0 R15=ffffffff98091548
RIP=ffffffff81e59677 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcbfc46e6c0 ffffffff 00c00000
GS =0000 ffff8880d60d8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3616d556c8 CR3=00000000456b5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2fd11be0 0000003000000018
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f646563697672
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2fd15036
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2fd15036 00007ffc2fd1503c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93936355ef
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f939363562f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9393635793
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9393635621
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000